last executing test programs: 9.894031959s ago: executing program 1 (id=989): socket$kcm(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000000)=0x4, 0x4) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x1, 0x0, "8100e1c8e80b598c3600000800"}) r4 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) syz_open_pts(r2, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000040)=0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f00000002c0)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000400)='/dev/ptmx\x00', r5) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x7, &(0x7f0000000100)=[{0x70a, 0x5, 0x8, 0x80000000}, {0x4, 0xe1, 0x5, 0x2}, {0x0, 0xfb, 0x9, 0x3}, {0x40, 0x32, 0x3, 0x7ff}, {0x9aa, 0x5, 0xfc, 0x77f3520b}, {0x7, 0x0, 0x4, 0x8}, {0x2, 0x6, 0x7, 0x3ff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) ptrace$PTRACE_SETSIGMASK(0x420b, r7, 0x8, &(0x7f00000001c0)={[0x4]}) semop(r6, &(0x7f0000000140), 0x25) semop(r6, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e1e, @remote}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9.40045394s ago: executing program 2 (id=993): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000000c0)=[{0x48, 0x37, 0x80, 0x3}, {0x28, 0x1, 0xf7, 0xffffefff}, {0x6, 0x6, 0x2, 0x57c}]}, 0x10) write$binfmt_aout(r5, 0x0, 0xa052) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f00000000c0), 0x0, 0x4000801) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', 0x0}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") r8 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r8, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 8.233484936s ago: executing program 1 (id=995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x60) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}, {}]}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) recvmmsg(r0, &(0x7f0000004940)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/70, 0x46}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000540)=""/46, 0x2e}, {&(0x7f0000000580)=""/3, 0x3}, {&(0x7f00000005c0)=""/13, 0xd}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/174, 0xae}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/191, 0xbf}, {&(0x7f0000001880)=""/35, 0x23}], 0xa, &(0x7f0000001980)=""/10, 0xa}, 0x5}, {{&(0x7f00000019c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004800)=[{&(0x7f0000003800)=""/4096, 0x1000}], 0x1, &(0x7f0000004840)=""/238, 0xee}, 0x10001}], 0x2, 0x20010020, &(0x7f0000004a00)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 8.192637237s ago: executing program 3 (id=996): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001800010000100000110000000200000000040009000000000600"], 0x34}}, 0x44890) 7.295021377s ago: executing program 1 (id=997): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0xe078, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0xa, 0x4, 0xff, 0x6, 0x3, 0x0, 0x2, 0xfffffffffffffffc}, &(0x7f0000000340)={0xf720, 0x4, 0xa, 0x8, 0x8, 0xd, 0x7, 0x8}, &(0x7f0000000380)={0x80000000, 0x8, 0x2, 0xac, 0x1000, 0x5, 0x1, 0x7}, &(0x7f0000000540)={r3, r4+10000000}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x6]}, 0x8}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro}, {@fat=@dos1xfloppy}, {@dots}, {@fat=@nocase}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@fat=@flush}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@dots}, {@dots}, {@dots}, {@dots}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000110) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) eventfd2(0x1, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000010000012400048020000180070001006374000014000280080002400000000508000140000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000adcc5c177bf"], 0x78}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) fsopen(&(0x7f0000000600)='pvfs2\x00', 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe98, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe84, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x29, 0x67fb, 0x7}, {0x100, 0x0, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x36b, 0xd, 0x517, 0x1, 0x802}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x11, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x5, 0x6}, {0x9, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x404}, {0xfffffff9, 0x6, 0xfffffffa, 0xc3, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x66, 0x0, 0x7, 0x8, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x3ff, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0x0, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x9, 0x4, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0x1, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x0, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x400, 0x7}, {0x28000, 0xf, 0x20009, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x80000000, 0x4, 0x70a, 0x8}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x8, 0x80000001, 0x3d2, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0xffffffff, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0xc4, 0x62182213, 0x8, 0x3, 0x8f4c}, {0x36b, 0xb6, 0xfffffffd, 0x5f60be42, 0x8, 0x9}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x6, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x80000009, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x8, 0xfffffffe, 0x3ff}, {0xfffffffe, 0x800, 0x2, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x8000, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x1, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x8b59, 0x5}, {0x80000001, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x3a, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x202, 0x39, 0x9d6, 0x5}, {0xb, 0xf, 0x1, 0x5c665eda, 0x9, 0x2}, {0x0, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0xfffffffe, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x1, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x7fd}, {0x8, 0xf, 0x7, 0x3, 0x8001, 0x400}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0x7, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0004, 0x2}, {0x401b, 0x7, 0x96, 0x9, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0xa}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x3, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d0, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x2, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x100005, 0x6, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0x10001}, {0xb, 0xd, 0x4000009, 0x30, 0x7, 0x7}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x6, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x6, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x4}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1, 0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x6, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0) 6.983228274s ago: executing program 3 (id=998): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0xe078, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0xa, 0x4, 0xff, 0x6, 0x3, 0x0, 0x2, 0xfffffffffffffffc}, &(0x7f0000000340)={0xf720, 0x4, 0xa, 0x8, 0x8, 0xd, 0x7, 0x8}, &(0x7f0000000380)={0x80000000, 0x8, 0x2, 0xac, 0x1000, 0x5, 0x1, 0x7}, &(0x7f0000000540)={r3, r4+10000000}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x6]}, 0x8}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro}, {@fat=@dos1xfloppy}, {@dots}, {@fat=@nocase}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@fat=@flush}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@dots}, {@dots}, {@dots}, {@dots}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000110) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) eventfd2(0x1, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000010000012400048020000180070001006374000014000280080002400000000508000140000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000adcc5c177bf"], 0x78}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) fsopen(&(0x7f0000000600)='pvfs2\x00', 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0) 6.365757378s ago: executing program 2 (id=1000): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x8004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x8000, &(0x7f0000000b40)=ANY=[], 0xfe, 0x1239, &(0x7f0000002200)="$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") socket$kcm(0x10, 0x2, 0x0) io_uring_setup(0x6085, &(0x7f0000000180)={0x0, 0xbba7, 0x10000, 0x2, 0x263}) r2 = syz_ublk_setup_io_uring(0x4fce, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x38ef, &(0x7f0000000380)={0x0, 0x1d038, 0x100, 0xfefffffe, 0x3af, 0x0, r2}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x8a}, 0x80, 0x0, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x1) ioctl$FIDEDUPERANGE(r3, 0xc0189436, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x80) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 6.093889474s ago: executing program 0 (id=1003): socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000081}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xb, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.485450778s ago: executing program 2 (id=1004): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x70060, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x5, 0xb}, 0x400, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = perf_event_open$cgroup(&(0x7f0000000500)={0x2, 0x80, 0x1, 0x5, 0x40, 0x1, 0x0, 0x844, 0x20680, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x2, @perf_config_ext={0x7f, 0x3}, 0x2000, 0x32, 0x1ff, 0x3, 0x8, 0xfffffff8, 0xc25, 0x0, 0x3e6f, 0x0, 0x80000001}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x8) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000006c0)={0xcd4e, 0x4, 0x9b, 0x9}, &(0x7f0000000700)=0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x6bb, &(0x7f0000000780)="$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") getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x348, 0x1d0, 0x348, 0x348, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0xe}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2ab, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0xc, 0x2, 0x71}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="5370bd4294c1", 0x200, 0xe, [0x25, 0x1e, 0x18, 0x2f, 0x38, 0x40, 0x11, 0x23, 0x16, 0x1f, 0x30, 0x38, 0x18, 0x27, 0x15, 0x1], 0x2, 0x0, 0x9}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x2, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x2, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'ipvlan0\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x7a}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000040)={[{@utf8}, {@hide, 0x0}, {@hide}, {@overriderock}, {@map_off}, {@utf8, 0x41}, {@session={'session', 0x3d, 0x12}}, {@unhide}, {@unhide}, {@cruft}, {@map_off}, {@map_normal}, {@overriderock}], [{@uid_eq}, {@seclabel}]}, 0x4, 0x6c5, &(0x7f0000000f00)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000580)=0x4, 0x4) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000100)) 5.36705666s ago: executing program 0 (id=1005): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x8004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x8000, &(0x7f0000000b40)=ANY=[], 0xfe, 0x1239, &(0x7f0000002200)="$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") socket$kcm(0x10, 0x2, 0x0) io_uring_setup(0x6085, &(0x7f0000000180)={0x0, 0xbba7, 0x10000, 0x2, 0x263}) r2 = syz_ublk_setup_io_uring(0x4fce, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x38ef, &(0x7f0000000380)={0x0, 0x1d038, 0x100, 0xfefffffe, 0x3af, 0x0, r2}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x8a}, 0x80, 0x0, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x1) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000300)={0x1ff, 0x9}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x80) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) capset(&(0x7f0000002680)={0x20071026}, &(0x7f00000026c0)={0x2, 0x6, 0xd, 0x3ff, 0xffffffff, 0x5}) 4.604090207s ago: executing program 2 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000181100", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create(0x200) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r9, &(0x7f0000006e00), 0x0, 0x8040) getpid() epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xb0000009}) epoll_wait(r8, &(0x7f0000000080)=[{}], 0x1, 0xffffff90) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) memfd_secret(0x0) 4.404587972s ago: executing program 0 (id=1012): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 4.237061005s ago: executing program 0 (id=1013): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x24, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_VF_PORTS={0x4}]}, 0x24}}, 0x0) getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x9, 0x8, 0x2, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffba, 0x3}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001a40)='./file2\x00', 0x14045, &(0x7f0000001b80)={[{@dioread_lock}, {@errors_remount}, {@data_journal}, {@noload}, {@grpjquota}]}, 0x1, 0x43c, &(0x7f0000000200)="$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") 4.100373939s ago: executing program 1 (id=1014): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x8004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x8000, &(0x7f0000000b40)=ANY=[], 0xfe, 0x1239, &(0x7f0000002200)="$eJzs3M9rI2UYB/CndU1r1/5Q19UtiC960cuw6cGLXoJ0QTag7G6E3QUha1MNHZuShEJErAXBiwf/DhFE8CaIN730Il49CN568biCOJJMt7ulXbRLNVI+n0te8rzf4XknZGCGvNl95bP31lZ72WqzH5MTEzG5EZFup0gxGXd8FC++/P0Pz1y9fuNyrV5fvpLSpdq16ksppblnv735wRfPfdc/++bXc99Mxc7CW7u/Lf26c37nwu6f195t91K7l9Y7/dRMtzqdfvNW3kor7d5altIbeavZa6X2eq/VPVBfzTsbGxOpub4yO7PRbVX2mmgNUr+T+t1Bar7TbK+nLMvS7ExwfGf2R43PbxdFEVEUD0cliqIoHomZOBuPxmzMxXwsxGPxeDwR5+LJOB9PxdPx1S9fDoYJAAAAAAAAAAAAAAAAAAAA4OQcd///hdGscXcNAAAAAAAAAAAAAAAAAAAAp8vV6zcu1+r15SspTUfkn2w2Nhvla21Ur61GO/JoxcWYjz9itPu/VI4vvVZfvphGFmJ7a2svv7XZeOhgvjr6O4Ej89Uyn2I7v5OfHGZn7s0vxXycOzq/dDi/tdmYjheej5iKvXwW8/Hj29GJPFZimL2b/7Ca0quv1/fyP/9UnpnF0TwAAAA4DbK0b+Hg/XN5/55l96uX+UPPB25Ol4XDzwdSbH+8nx9OWTwzvnVT6g3eX2vmeat7agbVSsT/oI1/YVAZbxu/F0Ux/pNwzMHwKnYSx7n/N2UqIh74yBMR0e0NzsSJrv3Tk1jyuK9M/BfufuhHFCtjaAgAAAAAAAAAAIB/5AF+GLgYfz9n+t53xr1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mIHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8FQAA///jPsBn") socket$kcm(0x10, 0x2, 0x0) io_uring_setup(0x6085, &(0x7f0000000180)={0x0, 0xbba7, 0x10000, 0x2, 0x263}) r2 = syz_ublk_setup_io_uring(0x4fce, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x38ef, &(0x7f0000000380)={0x0, 0x1d038, 0x100, 0xfefffffe, 0x3af, 0x0, r2}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x8a}, 0x80, 0x0, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x1) ioctl$FIDEDUPERANGE(r3, 0xc0189436, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x80) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 3.404284814s ago: executing program 3 (id=1018): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100cc04, &(0x7f0000000640)={[{@fat=@dos1xfloppy}, {@dots}, {@fat=@errors_remount}, {@dots}, {@dots}, {}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@sys_immutable}, {@dots}, {@dots}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {@fat=@dos1xfloppy}]}, 0x1, 0x1fb, &(0x7f0000000380)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x4042, 0x3e, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x13, 0xfffffffa}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 2.377642677s ago: executing program 0 (id=1019): semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240c8044, &(0x7f0000000080)={0xa, 0xe20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000940)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@jqfmt_vfsv1}, {@grpid}, {@noauto_da_alloc}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01010100ff"], 0x38}}, 0x0) 2.354368618s ago: executing program 1 (id=1020): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000018000100001000001100000002000000000400090000000006001500"], 0x34}}, 0x44890) 2.347538598s ago: executing program 3 (id=1021): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1, 0x0, 0x4, 0xcb, 0x0, 0x5d31, 0x21ee2f2107bbf427, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x4, 0x4, 0x80000000, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x6c0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x32, 0x0, 0x8, 0xdd6}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x884) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, 0x0, &(0x7f00000001c0)) listen(r0, 0x2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f0000000900)=ANY=[], 0x26, 0x7fb, &(0x7f0000001700)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) sigaltstack(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f00000002c0)=""/86, &(0x7f00000003c0)=0x56) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x9, 0x9) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0x0, 0x7, 0xfffffffd, 0x4, 0x2, 0x1}}) syz_io_uring_complete(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3e, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4601f5f014ab0800000000000002003e00010000809a010000380000008b000000060000000500200002"], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x10012, r5, 0x0) 891.14255ms ago: executing program 2 (id=1022): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x8004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x8000, &(0x7f0000000b40)=ANY=[], 0xfe, 0x1239, &(0x7f0000002200)="$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") socket$kcm(0x10, 0x2, 0x0) io_uring_setup(0x6085, &(0x7f0000000180)={0x0, 0xbba7, 0x10000, 0x2, 0x263}) r2 = syz_ublk_setup_io_uring(0x4fce, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x38ef, &(0x7f0000000380)={0x0, 0x1d038, 0x100, 0xfefffffe, 0x3af, 0x0, r2}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x8a}, 0x80, 0x0, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x1) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000300)={0x1ff, 0x9}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x80) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) capset(&(0x7f0000002680)={0x20071026}, &(0x7f00000026c0)={0x2, 0x6, 0xd, 0x3ff, 0xffffffff, 0x5}) 832.076032ms ago: executing program 0 (id=1023): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0xe078, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0xa, 0x4, 0xff, 0x6, 0x3, 0x0, 0x2, 0xfffffffffffffffc}, &(0x7f0000000340)={0xf720, 0x4, 0xa, 0x8, 0x8, 0xd, 0x7, 0x8}, &(0x7f0000000380)={0x80000000, 0x8, 0x2, 0xac, 0x1000, 0x5, 0x1, 0x7}, &(0x7f0000000540)={r3, r4+10000000}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x6]}, 0x8}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro}, {@fat=@dos1xfloppy}, {@dots}, {@fat=@nocase}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@fat=@flush}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@dots}, {@dots}, {@dots}, {@dots}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000110) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) eventfd2(0x1, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000010000012400048020000180070001006374000014000280080002400000000508000140000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000adcc5c177bf"], 0x78}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) fsopen(&(0x7f0000000600)='pvfs2\x00', 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0) 827.301052ms ago: executing program 1 (id=1024): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0xe078, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0xa, 0x4, 0xff, 0x6, 0x3, 0x0, 0x2, 0xfffffffffffffffc}, &(0x7f0000000340)={0xf720, 0x4, 0xa, 0x8, 0x8, 0xd, 0x7, 0x8}, &(0x7f0000000380)={0x80000000, 0x8, 0x2, 0xac, 0x1000, 0x5, 0x1, 0x7}, &(0x7f0000000540)={r3, r4+10000000}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x6]}, 0x8}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro}, {@fat=@dos1xfloppy}, {@dots}, {@fat=@nocase}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@fat=@flush}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@dots}, {@dots}, {@dots}, {@dots}]}, 0x1, 0x23d, &(0x7f0000000a40)="$eJzs3cFqE0EcBvB/27Td9mLP4mHBi6eivkGQCOKCENmDnlyoXloR0svqKY/hM/hIPkZPva3YXZq6UQ+yySbu7wdhP/IxMHPJ5DCTvHvw8fzs0+WH6vvXSJI0RhHzuI44id3Yi9pO89y9yQdx1zwAgG0znRbjvudAh3aW3jmKiGI/Ig6XqvzbmmYFAAAAAAAAAABAx5z/B4Dhcf7//zebjYvj5vvbr5z/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpzXVX3qr+8+p4fANA9+z8ADI/9HwCGx/4PAMPz+s3bl+Msm0zTNIm4mpd5mdfPun/+Ips8Tm+cLEZdlWW+3+Rs8qTu03Z/3Ix/+tv+IB49rPuf3bNXWas/jLNVLx4AAAAAAAAAAAAAAAAAAAA2xGl6q3W/f6/uT//U1+nO7wO07u+P4v5obcsAAAAAAAAAAAAAAAAAAACArXb5+ct5cXHxfiYIt+Eo/mFUEpsxeaGT0PcnEwAAAAAAAAAAAAAAAAAADM/i0m/fMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/iz+/391oe81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMPwIwAA//++jJCI") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000110) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) eventfd2(0x1, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000010000012400048020000180070001006374000014000280080002400000000508000140000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000adcc5c177bf"], 0x78}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) fsopen(&(0x7f0000000600)='pvfs2\x00', 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe98, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe84, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x29, 0x67fb, 0x7}, {0x100, 0x0, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x36b, 0xd, 0x517, 0x1, 0x802}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x11, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x5, 0x6}, {0x9, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x404}, {0xfffffff9, 0x6, 0xfffffffa, 0xc3, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x66, 0x0, 0x7, 0x8, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x3ff, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0x0, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x9, 0x4, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0x1, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x0, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x400, 0x7}, {0x28000, 0xf, 0x20009, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x80000000, 0x4, 0x70a, 0x8}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x8, 0x80000001, 0x3d2, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0xffffffff, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0xc4, 0x62182213, 0x8, 0x3, 0x8f4c}, {0x36b, 0xb6, 0xfffffffd, 0x5f60be42, 0x8, 0x9}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x6, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x80000009, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x8, 0xfffffffe, 0x3ff}, {0xfffffffe, 0x800, 0x2, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x8000, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x1, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x8b59, 0x5}, {0x80000001, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x3a, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x202, 0x39, 0x9d6, 0x5}, {0xb, 0xf, 0x1, 0x5c665eda, 0x9, 0x2}, {0x0, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0xfffffffe, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x1, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x7fd}, {0x8, 0xf, 0x7, 0x3, 0x8001, 0x400}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0x7, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0004, 0x2}, {0x401b, 0x7, 0x96, 0x9, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0xa}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x3, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d0, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x2, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x100005, 0x6, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0x10001}, {0xb, 0xd, 0x4000009, 0x30, 0x7, 0x7}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x6, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x6, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x4}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1, 0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x6, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0) 564.616768ms ago: executing program 3 (id=1025): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(0x3) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000002c0)=r0) close(r1) 498.564689ms ago: executing program 4 (id=1026): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000181100", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create(0x200) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r9, &(0x7f0000006e00), 0x0, 0x8040) getpid() epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xb0000009}) epoll_wait(r8, &(0x7f0000000080)=[{}], 0x1, 0xffffff90) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) 364.749822ms ago: executing program 4 (id=1027): write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0xfdef) 301.572163ms ago: executing program 4 (id=1028): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40000, 0x108) 301.207713ms ago: executing program 3 (id=1029): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000002400)=ANY=[@ANYBLOB="88110000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fedbdf2504000000540002800800010001010000040004004400038008000100030000000800010009000000080001000300000008000100090000000800020001040000080001000200000008000200bc09000008000100090000001c0003800800010006000000080003002f21000008000300030000004c10068004100300fa23304bcfb6ad07f1741a955dc8eb0d81ca98a842b9d8c3e8c4b0d1724615ba1fd82926c2e9b6199ee0b41f84ee35c8506c4ec9a409b4bc62395056d3ffbcce041ab50bef27c166e79d74d4faef26e9193ce4f37ada4b75b8cadc8e83e73c89d244db157d40aeda2f078095c109935c8dee6000a88e92fd5de3c12fcba6469f826233c7e9dfc64c6b2c896b68d19e614a15616c205cd09e050b4d377cbcc496e631f49965a34025d0b447562702691ebd29b14541d30e8d3dc4a717aa0b51d552f43153f8c8d13e5da01109cc1d46f11f1087475ed3e21091695abb2fc0c6d85805fe60e0bd97cc2a070a63d2d9a6fd4af3397cf32ff490d1546f071043dc7e9ca8fcc181445952c50c02b8e53a8fd393939f541ed5c9b32d871d42c79d2f15042158def10489b4c63c98301fb0be2ac6c83ff6bd3c1dd74ac13f39abedef574c1a39548b6122e679b7d025fdae473f90adfc20861944e01d40377fa83cd154f439450816b4391fb07cc2604b1f75587b46be8a32c186c6f7593dec76e6a86ae050d87f9726644d27c1ec1426289f8dd1948735d5ef458b0f302d840a52bbddcc14dbbc8054799db8927fc1afd5a481256837aab2f2ec5cd42288a5d9d909975688dc8964d20729747c8acccb3a64b65d282b0ce37dc34af2eed332e0d0aa382cf9ca1abeea27fe75ec0406e95c882b6bd2b25a4fa65b8415f84eb3a8c037f2c259e049e70e555108cb4e7c0e8162557a282aedecb0779701ce4f3dfe2916376455ae69038bdefebaacc19234daee8daf131914db0c34878f0653cc5102edd154d8ecd33e8e2f18ab762f8ec93c6b7c0a3ad0196529fffb24e2648cc38b344262c1f8ccd73321365438d595479349531f8de287c2ee7721e3614e34a660d99531a46c8174e8da24a7ac78c2dbabaef9d72f1a7d884ce2c6867817bf13e3f6a3a886a0765d97552c2983052773313cd519b0085696cbca3168942003a8ec5f76c6017eb5eb60cc1c6455b749af6d359685b7898517f6cf650d35ac567311d9e71990ef15eba9ca2f777b5a3c047f32f54e8d66ea768f892c09c32381c2adf36f5c606b17fe90cb2b385c4f75b611dff41b739f211df69b9216b0e3f8875f57b44aac7e23b6bdefd43813d71b5b451a3547ec9d0d3ce69b6f681568f152fab34692ae74fad173d85e8f9a6a26a6f7ff37c58d55e002331e006d1b7d3fd2a6ba072506fb525ebf7cc408269b4ac6535fc7d5021516a1a0e74ebd727a9c3277a94e74776bd38c4ca23e5d7c916de5658ba05d709a29bd92bf25e6e7e624b0ca03fb141184a6dfaa325c7e579d146d5b228751a4a72690a177736d6002ad634585300e5eb91e0acfea7bae2af46c221e45dbbc848bb0767127c475a2412d3057d715e75e3621ac7b44f726f949d27e139fab7ca0c6c5043035d95fa400648fbf5cfe0a2949e73fef2c41be8984d357662e19d7930b1e09eaeca04dc002294ec0a9367df8fd04f3241f0f0fa17dae32eb16b4dd75b861a17a08e1c20c45b8ec067d462f11065bf863e4115b6d1b514ddb261e194509c4a02cf7ee57dd4d12e6ddeac291a5d73cee578526ccbb978cc134fb353250f4e802d5567e9358649a73dd8ac41c846b19a1809fa1fa7f05af77200559628e8b47dfc1d33244b148e36fd237df784a43d9b7ecaa6a9b1575af601b470d36e52ae9cfdea6563fe2e361a0a19d85494a707e5ab1d7ccab42f54a41ad98a4bef0e67b0c82f0cedcfc5f9bccfcb3767f280600985196ce70ee651dd9de51af4402dcbf6d8e42cb6f3eb95db575b747311c17235c5a5d5e5d65cb7495cb9575af127fdfb2092194d6df8c2cbfb6ddf41a5548f67fd60751f6040ab19683562fee077e15fbc38a2c44bbf7f1c00cd32f45cd8aa40b6ba97f5d1c4849371efbcbd495fc7cea8190eed47eeedefe414b827f845c07546c58304ba7530424c6d2063631c7f4338aea9bd7afb31eeb19e945e2b073aba6f2a98f916b73c0df8e12d1b0b992a8003def07b7637057aa2a679808d6885dbab82063ccaed7efdb6f0afd6dce2a460cd5ed1786195548551b226c14323789a84ca2ae7ddb2daab4006973875f61121f4100953f26df28c1eafc0d1b2ac473c7afc04e4b6e694401579c11e61a52c39358767cb5561215e8dcda65c0c8a8bb69a0ebc0220d5326b8d7fd09ecd942a7c4d4cecabf5f122fba1afca4d4683189ae9d84cfbecb4baf4b05929979a605bf67a69a7cf338323a096e993e8d25282a903fbab1268e8d76045fb84fd00b928fd5404409245e81d809941d06f51d7d3c6c16c34f78595145452d5b23168aa265f2400da5f14ed0a1c5cefc50fe3335ba195299f93d545ee60a01cec6bb9a111425aed36c9bd72360c65dd542e3b6158a0be44f4a74d2b4be33d04980dd119a298ab2a778411ac1becdc5329ba3440a199e91fcb9d31da5177c515154bc091a3a5effca3607e275a0873fc486f8f2780292bee3fb1444d55649c7445f9ca771a4359be105ff9452d9163837155b2af309af3dc212922b0573302fea104aebb1789910f72aa3056ef4c8565d46535d589d599ca07a0cb4aa53dd53bfba94bbe43d0b9f6c61cb1e6718abfe7b12c27fa79e10fd750a6b58550b195b1ddd406ae496b9d30a29efdfeb42ebbca7ea6be72eeee9329ea26ef0d216a39e09cc1874fc2f458dab9a2e048611fc222276785f80213bf99203aafc0066251bfdea577d48317da37fdeb434451ef3dd311393463f1d80cf2e3188e4205b7fc229a9d8e033ff0c9cd323c962b1b3007f53c8053918ef96e2e3f21f941fe6849fcb68cc6a383da3882dd369873b91316697330530b4c02c088e5ba17ba2542f9a1075408a9a784082c69a5e859c8081b15f4c3624052c5c56feadb3d6832d492035a4e3867100df9c55492ce8745b8f529cff4281745ac43cbf7405d0af23f431c9e4a5b46f77de5931dfa0ecdd6b3eda61dbe4592fabedccedb7d0356268704710622c14433af6877a2b617e6e3de8f3c0dea6e9254e36a4942d374306a31ae8c593c3ae8ef2c2b8fc5e01811f8d31a042de3549feabcdca5d6a657ab4d1168ebc9c1d7e1ee8c8d676853bdc3609d5be5a8b0f80a8d9703754a66c42aa4a7eac2c011e26d5145dc4d9528f09bc2aef9cc81ec7551ca016cfeb4b7d1ba8f6e05ba26953a89f0b2fa388d441ef36e4b480f0ca9c022551903d826a28c76e4693ff2c53ce1745da6f00742932c5db68b105dcf42b5515a65d8fcd3a6d1243cf50ca323c5dd14e8fdf03ce40c8759450f27cbcd8e8eea00f92db562966d100f0ade1a759085cbcd3598e72c6567b713762b9b7c2d71eb70236c2544623764326328339fd8256fd6547cfd1ed4b220e79a0a75d6b8d201ef278b9990d5767f29e6dd2040bc95861bf5e2dcf3733a637cef9772f19f01b4be78f63320912abd5fde0f05ad79a19870a4a392c2888cd935fd092a07e1cc41d2fe53ee1e1de91e85065f39c9bf5f41661ac7b61448658859607259698e94c14bf46fc674842622060c8f968e193c385622dc2691a50032da41803d11bc8d3cadb04c1a632d041565b00b16b4847e433a2f4101b379f6ee56223c412c0990d34c5aa9d32fd0e53205a2bdaaeb4d55f54214231b3969d1ec5434fa393377676c0e471c2f6edd4e75b19f0bde48943202c4398c0afbfb0a26331564514ad89bd1de8dbe7ea1441f9cfa0d1732ef84c7297f884fc5cb2ccbff6c4d792cf6f2287825abb457d85c3cf505899d64b41f2fe21fd8fce02c5f5cbc281f10ad2468d3db226fb1ea2d508e3c92c00c35cd4cd60932a41c143d3f5f01713d741cc3f30cac474d637f1fd5dea3503a7e0f4cd925fff13b6606a425f4dcfd04425d143841b424d0641a998888cfca07eccb95a46783fd778435a68c962ef52000bd89e2b916e522d8b2ccf9504d54332d49fef99e7bb92b17a47e20f074b2b1a5a3c7bc8efbea4da49b7887949b9640e4fc631e66f22928a83f0c107ca7d0ff6f3f9750af1ff6bf02e7d30b24514a59ff10de6df1581ef88fa9637dd0acb1099e087808c6871bd811a2ad8861ee8f6308398e3c4ce978ce950111dd91c6281a6ad685a4d6118f4875136cac50f8f478f09ce2d407117615d898645fa581f42d456af342f920eb3d9e5f76897f5bc70629963daa349100bb56ee4f950791a2ce6b88533f28462c9ec9507674a39164a96103f4e952d2f0c43a8253c206c63d6aa044c81eeb05277cc4f6dc2a951eb3ca348309a9be6daa17bd678dc3ec05bf618ade5a975925fce3baa4c6d149e5fd0435be272b7b29cb98c5ab3b59c2864a5d6d353bbb4b716a1d1925c2673f758b01fb6f5326fdf516b203c8e3de1ffdfc089a4e8af7dfb2f698ff1cb3224272b45085fd58c398f542d2d5a48cd34dfe92da9710cd5baa9f086b12e2c67793366cbc10529cf65c00b66cd9d52ca466c810bba434332f1f994412a1b4e2070f9778d5b54623dbaa2825b263be8d3e88a53deeb224144a40055882354775a2c55721000b9dff2545bd6a67389a5a70afa2713b57746ed97c032ecf39f8226f2201aeba015b0d2a68a7ce7c54848d32641fdeedc668061d61887eb52c02de90b70c5fdadf6453e800faee145cf15638e6cd3dc46758ebdd84e0cd6bf1dab80bf08ec5bb97482b30908bca18f7e7e425d2cb237120f9a123d7c2773f17d5711a0d22b0b86caa1e61bb3cacc023cd5bc7342c89cd5f0f9794db22c57acc9d517c9dd9f5e8d42fe2e27bdd3a7acea5a9595137a2b50e0fd001ea8e181b85a2addd209231c024860a6bd763ca100f9113c6ec45f8026fe80f1be2465e6b08426cb1400d08f5b81742aa1138b1ec51bdd55eaee096e8154ca6c2fb90d7389a36c9a18fd30f2d0f809215926f0dd82ba8c5465f8660bf1883a6c5bc61857c19e612cc6f3f157964e5b0abc2f4d1b3d05bd5b4354a1c0990870fe33be7e0438fc130de3b6888cf8ab94c0d2ee79e575d80627412bb399545c2a75d08ec287c73c38ad594add3675aa503207e859c144a416fcfadad675092f0b49bb155ca862a60a6b6d34d3133fa875386cd2a83697e5c87b74764948515e30406d886b1b16ba787d04a9d610d24c8f976d2b971c6ffe7f0e5f7f6be4068a95602854a72d25a614d724d3b70c73ec74c0878c0e51f8576e33f5e4bd863353b5b3ba616edb6b10c70636aff9ef5504145dd3170e345d208434c7747e371b31f0d10f8f85233fc207cbf3c05a344331f226d17c1b0f914e017d153411ce56e104fb83e73bcdd271a07a022bd963dccec3cb4aaca10caf210588cbc427101a57a02c672ce6f51369a89847ffac9bda804c04507178378b252d55bae1fd15fb462aa0b61aa54020d0fc97369574af39ef38c128769d3aed32327db43bb353344f7ed1a63436106de442a8805e92aebc97e7f239d54d61c6ca091c14c5d5e8c4114effb55397f17f6b0c09796353b0c8b33548c858da2c48ffc6e8420256cc5611cd9e454f716732d28cece13cc5e173c462e36cfe13c5d8a5661dc4808d2c8e26f67d7c281b8dd03bb59ae62cf6cc20469031da2e52eb337db099314136c4903c1fc8289f194a0a1994c7fd634a6f30957fa2fd673c4ff8568be46a524e9c337258aff97829056926e315f74185f2cc57ffacdd059f96f7b043aa9d1e2d21c3828b3907ebad9b1dec90cae84cea26910b16c4914ddd6b1bdf7da869d75a2d100522608f6e379314e0101c5e296352e06775e4ae2aa448acbbe8f9c829666db85b495fb106f958c741982be3bf2c3c8da0aa4200040067636d28616573290000000000000000000000000000000000000000000000001a0000003699d8f4e009c65317405412531e220d5dbed55fdd59c2450d7e0000400005800800010065746800070001006962000007000100696200002400028008000300060000000800040001000000080002003c03b68f080001001c000000780004801c0007800800010012000000080004004000000008000200040000000900010073797a31000000000c0007800800020039c3e8252c0007800800030008000000080004000900000008000200ffffff7f08000300faffffff08000300010001001300010062726f6164636173742d6c696e6b0000"], 0x1188}, 0x1, 0x0, 0x0, 0x48805}, 0x20040000) r0 = timerfd_create(0x8, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) listen(r2, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="580005000000192340834b80040d8c560a0677bc45fb810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00e54947736c0f2793f0a5646fcb31ef70d3d9056618d690e6bc9ec95f84eabad6fb3395daf3647fe38b9a1b5f5369727e0f3edf906226f4a16c8752b15ea8da", 0x92}], 0x1) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf25043a14bb004000"], 0x14}}, 0x800) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@getsa={0x78, 0x12, 0x100, 0x70bd26, 0x25dfdbfb, {@in=@multicast1, 0x4d5, 0xa}, [@migrate={0x50, 0x11, [{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1, @in6=@remote, 0x6c, 0x3, 0x0, 0x3500, 0xa, 0x2}]}]}, 0x78}}, 0x80) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r10, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24048894) 301.062573ms ago: executing program 4 (id=1030): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x24, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_VF_PORTS={0x4}]}, 0x24}}, 0x0) getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x9, 0x8, 0x2, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffba, 0x3}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001a40)='./file2\x00', 0x14045, &(0x7f0000001b80)={[{@dioread_lock}, {@errors_remount}, {@data_journal}, {@noload}, {@grpjquota}]}, 0x1, 0x43c, &(0x7f0000000200)="$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") 183.419866ms ago: executing program 4 (id=1031): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x2b, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$tun(r1, &(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRESDEC], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xb1, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50) 166.981736ms ago: executing program 4 (id=1032): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x70060, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x5, 0xb}, 0x400, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = perf_event_open$cgroup(&(0x7f0000000500)={0x2, 0x80, 0x1, 0x5, 0x40, 0x1, 0x0, 0x844, 0x20680, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x2, @perf_config_ext={0x7f, 0x3}, 0x2000, 0x32, 0x1ff, 0x3, 0x8, 0xfffffff8, 0xc25, 0x0, 0x3e6f, 0x0, 0x80000001}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x8) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000006c0)={0xcd4e, 0x4, 0x9b, 0x9}, &(0x7f0000000700)=0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x6bb, &(0x7f0000000780)="$eJzs3c9v2+Ydx/EPZdmWPSAotqEIgjR+mqyAg2WKJDcujOwwTaJsdpIokPJgn4qssbsgcrol2bD40vrSbej2D+zWSw/d/zBg5573D+w4oNhOG7ALB/7ST8pyHNvJ2vfLSPiY/JLP9yEZPqFNPhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJBVq5dKZUtNp729Y6ar1T23dcxySUvSvG5+EW325sx6JSv8o0JBl+NZl787WPx6+Nd1XY2/u6pCOCno8Fuvv3b3O/lcuv4xCZ2GZApJAidb4cmzw4f3er29x6erLbBOs965mMhEufE585Nrbdptx3edVnXTNo7vmo319dLtrYZvGk7T9nf9rt0yNc/OdV3PrNZumvLGxpqxi7vudnuzXm3a6cx3flApldbNu4vJ3r/9btGvbTnNptPejGLCxWHMYv8MsastY/Yf9PbWZjUtDCqfJKgyK6hSqlTK5UqlvH5n4847pVJ+YkZpjCYiBiftq3PwcZHO6MoNvLhc2P//3ZKaKqitbe3IZH7VVJcnV60pyxNJx3/zrdv2sfUO9/9pL395sPiKov7/WvzdtWn9/6e/npJN3I9nLbF+nj3/dF9P9EyHeqh76qmnPT0+m+2unF2G5/u1KeUlR75cOWqpqk3ZMskcow2ta10lvactNeTLqCFHTdnytStfXdlqhQdTnmxV1ZUrT0ar8/HxK2tDG1qTka2iduVqW21tqq6q/hMEwb4eRPt97ZgclQaVZwYtD5+ik0HT+v+ffRSv8Xz9P75++ueOMflBMTsGeOmC5P5/urmsmSvnlxEAAAAAADhrVvTT9/D+f15vSArUcJp2aRCw+DKzAwAAAAAAZyH6zf/VcBI9cfWGrLH7/1Rw8bkBAAAAAICzYUXv2FmSlqOH+q3B61IZPwSYkPlyAAAAAAAAeLVEv/+/tiAF0YP+K7Ke6/4fAAAAAAD8H/jd0Bj7+XSM3SD9tX5Okt9ZtP7yz0V589ZRZ+d71kE1XFI9SGImngDoNq5YeUUD9X7y53CyIL0WDdtbs69ayfjAySCYlpLx9r/anzXWv+WNJbAwl/74IiOBS8na0WQ9n3ynP+jNOObNpN77hzlFS+JalhtO0y7W3Obd8qdz1Uu5rr3T/dWjB7+RvH479x/09orvf9i7H+VyFM46Ogjz+GgkndysXJ5G4y1E71xktXhJjbTK37dby1ZUbylt/5yqB7nhik7W/k90PY65nox0u3yYHgFZHyeFcjE8ZBq0PhodwhpkUR5vedaBmMwiF04KURY34pgbqzfiSZpffBQK35+TKsW7ZVVHj4E3nEVlOIvZ+8L618S+mJFFeC6shVn8NdzQlCzWni+LiSMCAC/L/qAXigYxnxxjf7zfzbjKLSXTqVe5/Mze/UejtTz9UxC/cDgn5RUsJt1LEF5L/x3ERmopKLyir8ZhC4ourPkrGVf0UtKvFDTlil46Ue82p7G2zqeLvuh/BkI6dlISl+9n8d8gCO6Wo3r/ONarfhau8NnUev1mZS7chbefHvwiGgA/9MHeB3uPKpW19dLbpdKdiuajZiQT+h4AQIbZn7EzGlEY9Gf9vvvt/l31/X+8FZdG+t1v9x8pKOp9faie7utW+hECK9n1Lg89hnBr8q41jI3+1zEaW9atqXd1UV86FFvpx6Zd9/gd4CB27bwPAwAAF+r6jH54tP/PZ96730rvu1evZN53j/bl/bvjxLTY8kXvCgAAvjFs7ytruftby/OcznvljY1ytbtlG8+t/cR4Tn3TNk67a3u1rWp70zYdz+26NbdpOp4WnbrtG3+703G9rmm4num4vrMTffK7ST763bdb1XbXqfmdpl31bVNz291qrWvqjl8zne0fNx1/y/ailf2OXXMaTq3addy28d0l1eyiMb5tDwU6dbvddRpOWGybjue0qt6u+anb3G7Zpm77Nc/pdN14g2ldTrvheq1os0UFx33QIQAA3xhPnh0+vNfr7T0eKiwky9I5R4oL6fNoSfCXo2tFhYWsDb7E5gEAgAz00gAAAAAAAAAAAAAAAAAAAAAAvPqy3v97rkL6UmA6Z14ZwVJ/zi8vnWjLlgZzPv/bC2V4ikJufE4y0m4we/Uv40I+K2YpLCxI6qW7fzjmaGZicxlrTSusnKiligv5k++fk9Xe6y1JWWfCKQsfz4z54f7oeTgREy7MXLTY36v5F//nkFV49PmURdPOqEK/FYuj+3DhuAaOFvKSHi+c4BAEU2LGrxTL534tAnCx/hcAAP//vuY6Xw==") getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x348, 0x1d0, 0x348, 0x348, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0xe}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2ab, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0xc, 0x2, 0x71}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="5370bd4294c1", 0x200, 0xe, [0x25, 0x1e, 0x18, 0x2f, 0x38, 0x40, 0x11, 0x23, 0x16, 0x1f, 0x30, 0x38, 0x18, 0x27, 0x15, 0x1], 0x2, 0x0, 0x9}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x2, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x2, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'ipvlan0\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x7a}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000040)={[{@utf8}, {@hide, 0x0}, {@hide}, {@overriderock}, {@map_off}, {@utf8, 0x41}, {@session={'session', 0x3d, 0x12}}, {@unhide}, {@unhide}, {@cruft}, {@map_off}, {@map_normal}, {@overriderock}], [{@uid_eq}, {@seclabel}]}, 0x4, 0x6c5, &(0x7f0000000f00)="$eJzs3d1vG1kZx/HfOI7jZiFaAVpVVdqetqyUiuLazjZVVCTWTMbJgO2xZhyUSkirsk1WVZ0utEXQ3Cy54UVarrhDe8MFXPBHICFxt/8FNwikFdwhLUiD5s0v8VvSpu3u9vuJdj2e88w5z8y4fjSJ51gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECWvVEuVyw13Nb2jpnM3vC9Zrr833C0PeltXleThaszx5Ws6D8VizqbrDr7tX7zG9H/Lms5ebasYvRQ1MFrb7x+66v5XLb9lISfhk7a4aMnB/fvdLu7D48RO6cTd/8yKZctnUnPyZigTaflBp7brG06xg08s762Vr6+VQ9M3W04we2g4zSN7Tu5juebFfuqqayvrxqntORttzY3ag0nW3nzm9Vyec18dyE50ZJKgb3lNhpuazOOiZqjmJvmwx8kAU6taczeve7u6qw9iYIqxwmqzgqqlqvVSqVarazdWL9xs1zOD67IScqXI1a5RyObnPqLFp8XraX4H9HpvHEDpyAX1f+/WVJDRbW0rR2ZsT+2NuTLU3NCeyqr/29ed6aOO1j/syp/Vvp22nxOcf2/kDy7MKn+T8jFyMQbjGuxJqw/2c98nJHRIz3Rge7rjrrqalcPT6FvI3PxVHp5lp+//u9YcZty1JKrQJ5cNVXTpv7wZaVrjNa1pjWV9Y62VFcgo7pcNeQo0G0F6siJX1G2fDmqqSNPvoxWZOuqjCpa17pWZeSopNvytK2WNrWhmv4ThuGe7sXHfXVKjsqCKhMCFgaDqlN6Gi7mHymr/z/8IHmd5tNXL/X/VZWc/4Xk4eNpMcBnQJhe/w/Kzd7s4vPLCAAAAAAAnDYr/u27Ff/t/rykUHW34ZRfdloAAAAAAOAUWQoXtCwruv6XdF4W1/8AAAAAAHzRWPE9dpakxfhD/Vb/Tqjj/BJg7gWkCAAAAAAAnlF85/+FghTGk1ZclHWi638AAAAAAPA58KuBOfbz2Ry7YfZn/ZykoL1g/flfC/LnrcP2ztet/VrUUttPYz492mOnfs5aSifqjR8KkuJntrNsLSeTY6aTYPbmHfxkb9Zc/5Z/JIHC3GAHExKwopHX8ukzfahLySaX0nnm7x7kFLckoyzW3YZTsr3GrYpqtaVcx9np/OTBvZ9Jfu+TDnv3uruld9/v3o1zOYxWHe5HnX4wlE5u/MHo5/I4nm8hvudi3B6fUT0b8tet5qIVj1vO9n9Otf3c4EDTTkB/zF/osuJPbVxeTGIXD3oz7kf7X4z2v1KKT9nQ3vvzVj+LytE9H3ciJmRRjLO4ksRcWbmi6t+T5d5ZyFnFb8xJ1dLoORjKojqYxexjYf175FgMZBE/ZC0Dx2I1yuIvUUcTslg9WRYjZwQAXpY9nU+mLT+veBLzXhUqpnU3Kw/Zm9pT1Z3Z1f3t4er++HdhGG8wJ+XTv01MHaWo6B19xYrrUCHZpfy5Me/o5bSuFDXhHb38DNUtGutP/e9AStMeyeLTMAxvVeJxf3Okqv5+aLiRcYNGdS46hNcf7/8ongA/8t7ue7sPqtXVtfJb5fKNqubj3Ugf5kTtAQCMmP0dOzMjrLd0KYm4dPefbyZLQxXvK72PFJT0rt5XV3d1LfsKgYvje10c+BjCteSqVQNXreaN12/F30s3HFvRtYlXdXEtHYit9mLnlW0yXKn7savP+SwAAPBiXZ5Rh8fX/+JQ/b+mlSRi5dzY6+7hWp5eHfcu6SfFVmYn//ZpHw0AAF4Njv+Jtdj5peX7bvudyvp6pdbZcozv2d8zvrux6Ri31XF8e6vW2nRM2/c6nu01TNvXgrvhBCbYbrc9v2Pqnm/aXuDuxN/8btKvfg+cZq3Vce2g3XBqgWNsr9Wp2R2z4Qa2aW9/p+EGW44fbxy0Hdutu3at43otE3jbvu2UjAkcZyDQ3XBaHbfuRost0/bdZs2/bb7vNbabzkdyAtt32x0v6TAby23VPb8Zd1vKh+M+LwAAwCvn0ZOD+3e63d2HRxfORJfmyZpD9ZuWxgb3Fgp69CS6Ko/W5NMm5ggCAOAzpl/AT7BR8TkmBAAAAAAAAAAAAAAAAAAAAAAARky8k+9pF+Y1pknqrfnxUrpGP1f/FsORfiyddmInWciddKvsloiD+x9PiinozpnemuzwD8YcvrAd/MeXpNfiNUrW5I+/+W9/Kh0n+MyUk/s8Fr61lxzRiTFR49imhd65yD/FP4fC7KPx4I8TmsIwDKcPsTB8DAtDO5ibNmhe0sPCiU9BYeQlCuCL6v8BAAD//9ZuMqQ=") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000100)) 0s ago: executing program 2 (id=1033): semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240c8044, &(0x7f0000000080)={0xa, 0xe20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000940)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@jqfmt_vfsv1}, {@grpid}, {@noauto_da_alloc}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01010100ff"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): 0002e [ 202.737016][ T5683] RAX: ffffffffffffffda RBX: 00007f10d1da6090 RCX: 00007f10d1b1de99 [ 202.737030][ T5683] RDX: 0000000020040000 RSI: 0000200000000000 RDI: 0000000000000007 [ 202.737043][ T5683] RBP: 00007f10d0556090 R08: 0000000000000000 R09: 0000000000000000 [ 202.737059][ T5683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.737135][ T5683] R13: 00007f10d1da6128 R14: 00007f10d1da6090 R15: 00007ffd4dc65e98 [ 202.737161][ T5683] [ 202.947451][ T5690] CPU: 0 UID: 0 PID: 5690 Comm: syz.2.621 Not tainted syzkaller #0 PREEMPT(lazy) [ 202.947483][ T5690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 202.947523][ T5690] Call Trace: [ 202.947530][ T5690] [ 202.947538][ T5690] __dump_stack+0x1d/0x30 [ 202.947616][ T5690] dump_stack_lvl+0x95/0xd0 [ 202.947649][ T5690] dump_stack+0x15/0x1b [ 202.947675][ T5690] should_fail_ex+0x25e/0x270 [ 202.947778][ T5690] should_fail+0xb/0x20 [ 202.947812][ T5690] should_fail_usercopy+0x1a/0x20 [ 202.947844][ T5690] _copy_from_user+0x1c/0xb0 [ 202.947947][ T5690] kstrtouint_from_user+0x69/0xf0 [ 202.947977][ T5690] ? 0xffffffff81000000 [ 202.948021][ T5690] ? avc_policy_seqno+0x15/0x30 [ 202.948128][ T5690] proc_fail_nth_write+0x50/0x160 [ 202.948156][ T5690] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 202.948294][ T5690] vfs_write+0x252/0x990 [ 202.948325][ T5690] ? __fget_files+0x184/0x1c0 [ 202.948428][ T5690] ? mutex_lock+0x57/0x90 [ 202.948461][ T5690] ksys_write+0xdc/0x1a0 [ 202.948482][ T5690] __x64_sys_write+0x40/0x50 [ 202.948540][ T5690] x64_sys_call+0x27e1/0x3020 [ 202.948566][ T5690] do_syscall_64+0x136/0x3c0 [ 202.948589][ T5690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.948611][ T5690] RIP: 0033:0x7f9f3ddfe6ce [ 202.948634][ T5690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 202.948724][ T5690] RSP: 002b:00007f9f3c875fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.948751][ T5690] RAX: ffffffffffffffda RBX: 00007f9f3c8766c0 RCX: 00007f9f3ddfe6ce [ 202.948771][ T5690] RDX: 0000000000000001 RSI: 00007f9f3c8760a0 RDI: 0000000000000007 [ 202.948785][ T5690] RBP: 00007f9f3c876090 R08: 0000000000000000 R09: 0000000000000000 [ 202.948798][ T5690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.948857][ T5690] R13: 00007f9f3e0c6128 R14: 00007f9f3e0c6090 R15: 00007ffef7f339a8 [ 202.948883][ T5690] [ 202.957797][ T5682] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.334156][ T5682] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.620: couldn't read orphan inode 11 (err -117) [ 203.343545][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 203.343567][ C0] EXT4-fs (loop1): initial error at time 2000000015: __ext4_iget:5533: inode 11: block 3146 [ 203.343602][ C0] EXT4-fs (loop1): last error at time 2000000015: __ext4_iget:5533: inode 11: block 3146 [ 203.442204][ T5682] loop1: lost filesystem error report for type 5 error -117 [ 203.443754][ T5682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.468477][ T28] audit: type=1400 audit(2000000015.790:625): avc: denied { write } for pid=5699 comm="syz.4.624" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.596411][ T5700] loop4: detected capacity change from 0 to 256 [ 203.607115][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 203.607129][ T28] audit: type=1400 audit(2000000015.920:628): avc: denied { create } for pid=5677 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 203.642161][ T28] audit: type=1400 audit(2000000015.950:629): avc: denied { write } for pid=5677 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 203.661562][ T28] audit: type=1400 audit(2000000015.950:630): avc: denied { ioctl } for pid=5677 comm="syz.0.619" path="socket:[12563]" dev="sockfs" ino=12563 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 203.797880][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.013877][ T5711] tipc: Started in network mode [ 204.018856][ T5711] tipc: Node identity , cluster identity 4711 [ 204.025084][ T5711] tipc: Failed to obtain node identity [ 204.030890][ T5711] tipc: Enabling of bearer rejected, failed to enable media [ 204.144506][ T5713] loop4: detected capacity change from 0 to 128 [ 204.403934][ T5717] FAULT_INJECTION: forcing a failure. [ 204.403934][ T5717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.471099][ T5719] syzkaller0: entered promiscuous mode [ 204.482148][ T5721] netlink: 'syz.1.626': attribute type 5 has an invalid length. [ 204.495498][ T5717] CPU: 0 UID: 0 PID: 5717 Comm: syz.0.629 Not tainted syzkaller #0 PREEMPT(lazy) [ 204.495524][ T5717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 204.495604][ T5717] Call Trace: [ 204.495612][ T5717] [ 204.495621][ T5717] __dump_stack+0x1d/0x30 [ 204.495750][ T5717] dump_stack_lvl+0x95/0xd0 [ 204.495769][ T5717] dump_stack+0x15/0x1b [ 204.495786][ T5717] should_fail_ex+0x25e/0x270 [ 204.495919][ T5717] should_fail+0xb/0x20 [ 204.495941][ T5717] should_fail_usercopy+0x1a/0x20 [ 204.495971][ T5717] _copy_to_user+0x20/0xa0 [ 204.495991][ T5717] simple_read_from_buffer+0xb5/0x130 [ 204.496021][ T5717] proc_fail_nth_read+0x10e/0x150 [ 204.496053][ T5717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.496124][ T5717] vfs_read+0x18e/0x7c0 [ 204.496144][ T5717] ? __rcu_read_unlock+0x4e/0x70 [ 204.496171][ T5717] ? __fget_files+0x184/0x1c0 [ 204.496268][ T5717] ? mutex_lock+0x57/0x90 [ 204.496303][ T5717] ksys_read+0xdc/0x1a0 [ 204.496323][ T5717] __x64_sys_read+0x40/0x50 [ 204.496358][ T5717] x64_sys_call+0x2886/0x3020 [ 204.496465][ T5717] do_syscall_64+0x136/0x3c0 [ 204.496492][ T5717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.496616][ T5717] RIP: 0033:0x7fe98a11e6ce [ 204.496635][ T5717] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 204.496658][ T5717] RSP: 002b:00007fe988bb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.496676][ T5717] RAX: ffffffffffffffda RBX: 00007fe988bb76c0 RCX: 00007fe98a11e6ce [ 204.496749][ T5717] RDX: 000000000000000f RSI: 00007fe988bb70a0 RDI: 0000000000000003 [ 204.496765][ T5717] RBP: 00007fe988bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 204.496779][ T5717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.496794][ T5717] R13: 00007fe98a3e6038 R14: 00007fe98a3e5fa0 R15: 00007fffc8f08bc8 [ 204.496815][ T5717] [ 204.694798][ T5719] syzkaller0: entered allmulticast mode [ 204.873127][ T5725] loop0: detected capacity change from 0 to 128 [ 204.947381][ T28] audit: type=1400 audit(2000000017.200:631): avc: denied { read } for pid=5720 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 205.301710][ T5733] tun0: tun_chr_ioctl cmd 2147767506 [ 205.317964][ T5733] netlink: 'syz.3.634': attribute type 4 has an invalid length. [ 205.332659][ T5740] loop0: detected capacity change from 0 to 1024 [ 205.359159][ T5740] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 205.370736][ T5740] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.636: lblock 2 mapped to illegal pblock 2 (length 1) [ 205.393119][ T5743] loop1: detected capacity change from 0 to 1024 [ 205.409191][ T5743] EXT4-fs: Ignoring removed bh option [ 205.414789][ T5740] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 205.414892][ T5740] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 205.423957][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 205.423984][ C0] EXT4-fs (loop0): initial error at time 2000000017: ext4_map_blocks:791: inode 3: block 2 [ 205.424016][ C0] EXT4-fs (loop0): last error at time 2000000017: ext4_map_blocks:791: inode 3: block 2 [ 205.463000][ T5740] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.636: lblock 0 mapped to illegal pblock 48 (length 1) [ 205.478861][ T5743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.503994][ T28] audit: type=1400 audit(2000000017.810:632): avc: denied { write } for pid=5737 comm="syz.1.635" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.534524][ T5740] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 205.540084][ T5740] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 205.594154][ T5740] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.636: Failed to acquire dquot type 0 [ 205.629705][ T5740] loop0: lost filesystem error report for type 5 error -117 [ 205.629829][ T5740] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 205.653992][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.674953][ T5740] loop0: lost filesystem error report for type 5 error -117 [ 205.675082][ T5740] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.636: mark_inode_dirty error [ 205.709674][ T5740] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 205.709765][ T5740] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 205.748715][ T5740] EXT4-fs (loop0): 1 orphan inode deleted [ 205.757808][ T5740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.769970][ T12] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 205.784463][ T12] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 205.784909][ T12] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 205.821145][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 205.844697][ T5740] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 205.944956][ T5750] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 205.998667][ T5750] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.636: lblock 0 mapped to illegal pblock 48 (length 1) [ 206.051378][ T5750] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 206.061219][ T5750] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 206.084518][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.092432][ T5740] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 206.113221][ T28] audit: type=1400 audit(2000000018.430:633): avc: denied { connect } for pid=5756 comm="syz.4.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.258075][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.268834][ T5757] FAULT_INJECTION: forcing a failure. [ 206.268834][ T5757] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 206.285180][ T5757] CPU: 1 UID: 0 PID: 5757 Comm: syz.4.639 Not tainted syzkaller #0 PREEMPT(lazy) [ 206.285214][ T5757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 206.285234][ T5757] Call Trace: [ 206.285243][ T5757] [ 206.285253][ T5757] __dump_stack+0x1d/0x30 [ 206.285282][ T5757] dump_stack_lvl+0x95/0xd0 [ 206.285377][ T5757] dump_stack+0x15/0x1b [ 206.285410][ T5757] should_fail_ex+0x25e/0x270 [ 206.285493][ T5757] should_fail_alloc_page+0xf2/0x100 [ 206.285526][ T5757] __alloc_frozen_pages_noprof+0x108/0x350 [ 206.285564][ T5757] alloc_pages_mpol+0xa9/0x1d0 [ 206.285653][ T5757] alloc_frozen_pages_noprof+0x8f/0x110 [ 206.285702][ T5757] ? iovec_from_user+0x84/0x200 [ 206.285729][ T5757] ___kmalloc_large_node+0x41/0xd0 [ 206.285758][ T5757] ? iovec_from_user+0x84/0x200 [ 206.285784][ T5757] __kmalloc_large_node_noprof+0x18/0xa0 [ 206.285890][ T5757] ? iovec_from_user+0x84/0x200 [ 206.285913][ T5757] __kmalloc_noprof+0x27b/0x4a0 [ 206.285943][ T5757] ? lockref_put_return+0xf7/0x130 [ 206.286014][ T5757] ? iovec_from_user+0x84/0x200 [ 206.286043][ T5757] iovec_from_user+0x84/0x200 [ 206.286071][ T5757] __import_iovec+0xf3/0x530 [ 206.286117][ T5757] ? path_openat+0x1ae6/0x2000 [ 206.286210][ T5757] ? _parse_integer_limit+0x177/0x1a0 [ 206.286247][ T5757] import_iovec+0x60/0x80 [ 206.286270][ T5757] ___sys_sendmsg+0x160/0x1e0 [ 206.286389][ T5757] __x64_sys_sendmsg+0xd4/0x160 [ 206.286496][ T5757] x64_sys_call+0x194c/0x3020 [ 206.286599][ T5757] do_syscall_64+0x136/0x3c0 [ 206.286624][ T5757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.286648][ T5757] RIP: 0033:0x7f10d1b1de99 [ 206.286663][ T5757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.286683][ T5757] RSP: 002b:00007f10d0577028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.286764][ T5757] RAX: ffffffffffffffda RBX: 00007f10d1da5fa0 RCX: 00007f10d1b1de99 [ 206.286780][ T5757] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 206.286823][ T5757] RBP: 00007f10d0577090 R08: 0000000000000000 R09: 0000000000000000 [ 206.286837][ T5757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.286849][ T5757] R13: 00007f10d1da6038 R14: 00007f10d1da5fa0 R15: 00007ffd4dc65e98 [ 206.286870][ T5757] [ 207.493285][ T5769] loop3: detected capacity change from 0 to 1024 [ 207.560743][ T5769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 207.585420][ T5769] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.871768][ T3391] IPVS: starting estimator thread 0... [ 207.963870][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 207.977401][ T5777] IPVS: using max 2256 ests per chain, 112800 per kthread [ 208.182697][ T5789] loop4: detected capacity change from 0 to 512 [ 208.197076][ T5792] 9p: Bad value for 'rfdno' [ 208.238907][ T5789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 208.403295][ T5800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 208.579535][ T5801] loop3: detected capacity change from 0 to 512 [ 208.652929][ T5801] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.653: corrupted in-inode xattr: e_value size too large [ 208.668474][ T5801] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 208.669459][ T5801] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.653: couldn't read orphan inode 15 (err -117) [ 208.678923][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 208.679093][ C1] EXT4-fs (loop3): initial error at time 2000000020: ext4_iget_extra_inode:5180: inode 15 [ 208.679283][ C1] EXT4-fs (loop3): last error at time 2000000020: ext4_iget_extra_inode:5180: inode 15 [ 208.719197][ T5801] loop3: lost filesystem error report for type 5 error -117 [ 208.876787][ T5801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.104928][ T5789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.131684][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 209.131698][ T28] audit: type=1400 audit(2000000021.440:639): avc: denied { write } for pid=5798 comm="syz.3.653" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.192444][ T5789] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.210061][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.264686][ T28] audit: type=1400 audit(2000000021.480:640): avc: denied { write } for pid=5798 comm="syz.3.653" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.295113][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.360372][ T28] audit: type=1400 audit(2000000021.550:641): avc: denied { write } for pid=5787 comm="syz.4.651" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.569751][ T5809] loop3: detected capacity change from 0 to 1024 [ 209.592421][ T28] audit: type=1400 audit(2000000021.910:642): avc: denied { mounton } for pid=5808 comm="syz.3.654" path="/140/file0" dev="tmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 210.144693][ T5809] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 210.236916][ T5809] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.654: Invalid block bitmap block 0 in block_group 0 [ 210.318817][ T5809] loop3: lost filesystem error report for type 5 error -117 [ 210.320698][ T5809] Quota error (device loop3): write_blk: dquota write failed [ 210.328134][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 210.328182][ C0] EXT4-fs (loop3): initial error at time 2000000022: ext4_read_block_bitmap_nowait:483 [ 210.328214][ C0] EXT4-fs (loop3): last error at time 2000000022: ext4_read_block_bitmap_nowait:483 [ 210.419292][ T5809] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 210.458790][ T5809] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.654: Failed to acquire dquot type 0 [ 210.495562][ T5809] loop3: lost filesystem error report for type 5 error -117 [ 210.496049][ T5809] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.654: Freeing blocks not in datazone - block = 0, count = 4096 [ 210.522679][ T5823] FAULT_INJECTION: forcing a failure. [ 210.522679][ T5823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.550024][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz.1.659 Not tainted syzkaller #0 PREEMPT(lazy) [ 210.550049][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 210.550140][ T5823] Call Trace: [ 210.550147][ T5823] [ 210.550154][ T5823] __dump_stack+0x1d/0x30 [ 210.550182][ T5823] dump_stack_lvl+0x95/0xd0 [ 210.550208][ T5823] dump_stack+0x15/0x1b [ 210.550259][ T5823] should_fail_ex+0x25e/0x270 [ 210.550289][ T5823] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 210.550365][ T5823] should_fail+0xb/0x20 [ 210.550435][ T5823] should_fail_usercopy+0x1a/0x20 [ 210.550466][ T5823] _copy_from_user+0x1c/0xb0 [ 210.550549][ T5823] ucma_resolve_ip+0x4e/0x360 [ 210.550598][ T5823] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 210.550634][ T5823] ucma_write+0x1c9/0x260 [ 210.550668][ T5823] vfs_writev+0x41e/0x8b0 [ 210.550730][ T5823] ? __pfx_ucma_write+0x10/0x10 [ 210.550845][ T5823] do_writev+0xe9/0x210 [ 210.550872][ T5823] __x64_sys_writev+0x45/0x50 [ 210.550925][ T5823] x64_sys_call+0x1c0c/0x3020 [ 210.550958][ T5823] do_syscall_64+0x136/0x3c0 [ 210.550995][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.551025][ T5823] RIP: 0033:0x7f11c0d2de99 [ 210.551043][ T5823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.551067][ T5823] RSP: 002b:00007f11bf787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 210.551201][ T5823] RAX: ffffffffffffffda RBX: 00007f11c0fb5fa0 RCX: 00007f11c0d2de99 [ 210.551217][ T5823] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000016 [ 210.551231][ T5823] RBP: 00007f11bf787090 R08: 0000000000000000 R09: 0000000000000000 [ 210.551250][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.551267][ T5823] R13: 00007f11c0fb6038 R14: 00007f11c0fb5fa0 R15: 00007ffed5e12b78 [ 210.551338][ T5823] [ 210.742817][ T5809] loop3: lost filesystem error report for type 5 error -117 [ 210.745921][ T5809] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.654: Invalid inode bitmap blk 0 in block_group 0 [ 210.766347][ T5809] loop3: lost filesystem error report for type 5 error -117 [ 210.767434][ T5809] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 210.784175][ T5809] loop3: lost filesystem error report for type 5 error -117 [ 210.785054][ T5809] EXT4-fs (loop3): 1 orphan inode deleted [ 210.800343][ T5809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.381733][ T49] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 211.406269][ T49] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 211.466589][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.587995][ T5842] loop0: detected capacity change from 0 to 512 [ 211.652233][ T5842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.667056][ T28] audit: type=1326 audit(2000000023.970:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.1.666" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11c0d2de99 code=0x0 [ 211.708557][ T5842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.732691][ T5842] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.769029][ T5809] syz.3.654 (5809) used greatest stack depth: 9024 bytes left [ 211.793656][ T28] audit: type=1400 audit(2000000024.110:644): avc: denied { write } for pid=5841 comm="syz.0.665" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.821399][ T5853] sg_write: data in/out 2816/136 bytes for SCSI command 0x0-- guessing data in; [ 211.821399][ T5853] program syz.1.666 not setting count and/or reply_len properly [ 211.856841][ T5856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.885762][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.896733][ T5856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.918474][ T5856] 9p: Bad value for 'wfdno' [ 212.038764][ T28] audit: type=1326 audit(2000000024.350:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.3.668" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9680a0de99 code=0x7ffc0000 [ 212.183045][ T5864] loop2: detected capacity change from 0 to 512 [ 212.190578][ T5864] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 212.209543][ T5864] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.671: corrupted xattr entries [ 212.220836][ T5864] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.221088][ T5864] EXT4-fs (loop2): Remounting filesystem read-only [ 212.236774][ T5864] EXT4-fs (loop2): 1 truncate cleaned up [ 212.242937][ T5864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.273488][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.306484][ T5870] loop2: detected capacity change from 0 to 512 [ 212.323902][ T5870] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 212.340309][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 212.587290][ T5873] mmap: syz.4.674 (5873): VmData 29204480 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 212.630212][ T5876] loop1: detected capacity change from 0 to 512 [ 212.669434][ T5876] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 212.681861][ T49] Bluetooth: hci1: Frame reassembly failed (-84) [ 212.711032][ T5883] loop4: detected capacity change from 0 to 128 [ 212.813160][ T5891] loop4: detected capacity change from 0 to 512 [ 212.820161][ T5891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.830532][ T5892] hub 5-0:1.0: USB hub found [ 212.835606][ T5892] hub 5-0:1.0: 8 ports detected [ 212.849877][ T5891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.867780][ T5891] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.902718][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.243575][ T5906] loop3: detected capacity change from 0 to 512 [ 213.265853][ T5906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 213.590376][ T5908] netlink: 'syz.4.682': attribute type 18 has an invalid length. [ 213.598316][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 213.615888][ T5908] netlink: 'syz.4.682': attribute type 18 has an invalid length. [ 213.623704][ T3558] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.654131][ T3558] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.667797][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 213.692058][ T3558] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.736527][ T3558] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.227041][ T5911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.252399][ T5911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.281143][ T5911] 9p: Bad value for 'wfdno' [ 214.357245][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 214.363430][ T5881] Bluetooth: hci0: command 0x1003 tx timeout [ 214.687261][ T4217] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 214.910333][ T5913] cgroup: none used incorrectly [ 214.977641][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.034819][ T5919] netlink: 68 bytes leftover after parsing attributes in process `syz.3.687'. [ 215.045481][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 215.045497][ T28] audit: type=1400 audit(2000000028.362:656): avc: denied { create } for pid=5918 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 215.072689][ T28] audit: type=1400 audit(2000000028.392:657): avc: denied { bind } for pid=5918 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 215.094859][ T28] audit: type=1400 audit(2000000028.402:658): avc: denied { ioctl } for pid=5918 comm="syz.3.687" path="socket:[11679]" dev="sockfs" ino=11679 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.199938][ T5924] loop3: detected capacity change from 0 to 2048 [ 215.326898][ T5924] Alternate GPT is invalid, using primary GPT. [ 215.342771][ T5924] loop3: p1 p2 p3 [ 215.410787][ T2981] Alternate GPT is invalid, using primary GPT. [ 215.419217][ T2981] loop3: p1 p2 p3 [ 215.575873][ T5926] loop4: detected capacity change from 0 to 2048 [ 215.703970][ T5926] Alternate GPT is invalid, using primary GPT. [ 215.712110][ T5926] loop4: p1 p2 p3 [ 215.802808][ T5931] loop1: detected capacity change from 0 to 2048 [ 215.809495][ T28] audit: type=1400 audit(2000000029.112:659): avc: denied { getopt } for pid=5930 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 215.873641][ T5931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.887692][ T5933] loop2: detected capacity change from 0 to 512 [ 215.897738][ T5931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.908080][ T5933] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.933623][ T5933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.956212][ T5933] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.984397][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 215.993966][ T5941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.693'. [ 216.021736][ T28] audit: type=1400 audit(2000000029.342:660): avc: denied { write } for pid=5932 comm="syz.2.692" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.045670][ T5943] loop3: detected capacity change from 0 to 128 [ 216.164815][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.193875][ T5949] FAULT_INJECTION: forcing a failure. [ 216.193875][ T5949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.207037][ T5949] CPU: 1 UID: 0 PID: 5949 Comm: syz.2.696 Not tainted syzkaller #0 PREEMPT(lazy) [ 216.207158][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 216.207190][ T5949] Call Trace: [ 216.207199][ T5949] [ 216.207208][ T5949] __dump_stack+0x1d/0x30 [ 216.207238][ T5949] dump_stack_lvl+0x95/0xd0 [ 216.207266][ T5949] dump_stack+0x15/0x1b [ 216.207288][ T5949] should_fail_ex+0x25e/0x270 [ 216.207352][ T5949] should_fail+0xb/0x20 [ 216.207387][ T5949] should_fail_usercopy+0x1a/0x20 [ 216.207456][ T5949] _copy_from_user+0x1c/0xb0 [ 216.207507][ T5949] copy_bpf_fprog_from_user+0x106/0x1e0 [ 216.207554][ T5949] sk_setsockopt+0x1ecb/0x20e0 [ 216.207621][ T5949] sock_setsockopt+0x40/0x50 [ 216.207662][ T5949] __sys_setsockopt+0x13a/0x200 [ 216.207758][ T5949] __x64_sys_setsockopt+0x64/0x80 [ 216.207833][ T5949] x64_sys_call+0x2327/0x3020 [ 216.207881][ T5949] do_syscall_64+0x136/0x3c0 [ 216.207913][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.207943][ T5949] RIP: 0033:0x7f9f3de3de99 [ 216.208024][ T5949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.208050][ T5949] RSP: 002b:00007f9f3c897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 216.208088][ T5949] RAX: ffffffffffffffda RBX: 00007f9f3e0c5fa0 RCX: 00007f9f3de3de99 [ 216.208107][ T5949] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 216.208123][ T5949] RBP: 00007f9f3c897090 R08: 0000000000000010 R09: 0000000000000000 [ 216.208151][ T5949] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 216.208168][ T5949] R13: 00007f9f3e0c6038 R14: 00007f9f3e0c5fa0 R15: 00007ffef7f339a8 [ 216.208196][ T5949] [ 216.410298][ T5953] FAULT_INJECTION: forcing a failure. [ 216.410298][ T5953] name failslab, interval 1, probability 0, space 0, times 0 [ 216.423100][ T5953] CPU: 1 UID: 0 PID: 5953 Comm: syz.2.698 Not tainted syzkaller #0 PREEMPT(lazy) [ 216.423130][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 216.423144][ T5953] Call Trace: [ 216.423224][ T5953] [ 216.423230][ T5953] __dump_stack+0x1d/0x30 [ 216.423252][ T5953] dump_stack_lvl+0x95/0xd0 [ 216.423276][ T5953] dump_stack+0x15/0x1b [ 216.423297][ T5953] should_fail_ex+0x25e/0x270 [ 216.423328][ T5953] ? ip_vs_add_dest+0x881/0xe60 [ 216.423414][ T5953] should_failslab+0x8c/0xb0 [ 216.423439][ T5953] __kmalloc_cache_noprof+0x7b/0x3d0 [ 216.423462][ T5953] ? ip_vs_add_dest+0x881/0xe60 [ 216.423525][ T5953] ip_vs_add_dest+0x881/0xe60 [ 216.423557][ T5953] ? selinux_capable+0x31/0x40 [ 216.423598][ T5953] ? should_fail_ex+0xd9/0x270 [ 216.423624][ T5953] ? __ip_vs_svc_fwm_find+0x262/0x290 [ 216.423728][ T5953] do_ip_vs_set_ctl+0x8e6/0xab0 [ 216.423764][ T5953] nf_setsockopt+0x199/0x1b0 [ 216.423834][ T5953] ip_setsockopt+0x102/0x110 [ 216.423859][ T5953] sctp_setsockopt+0x126/0xea0 [ 216.423901][ T5953] sock_common_setsockopt+0x69/0x80 [ 216.423931][ T5953] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 216.423961][ T5953] __sys_setsockopt+0x184/0x200 [ 216.424068][ T5953] __x64_sys_setsockopt+0x64/0x80 [ 216.424107][ T5953] x64_sys_call+0x2327/0x3020 [ 216.424140][ T5953] do_syscall_64+0x136/0x3c0 [ 216.424226][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.424253][ T5953] RIP: 0033:0x7f9f3de3de99 [ 216.424272][ T5953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.424310][ T5953] RSP: 002b:00007f9f3c897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 216.424335][ T5953] RAX: ffffffffffffffda RBX: 00007f9f3e0c5fa0 RCX: 00007f9f3de3de99 [ 216.424389][ T5953] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000004 [ 216.424402][ T5953] RBP: 00007f9f3c897090 R08: 0000000000000044 R09: 0000000000000000 [ 216.424413][ T5953] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.424455][ T5953] R13: 00007f9f3e0c6038 R14: 00007f9f3e0c5fa0 R15: 00007ffef7f339a8 [ 216.424479][ T5953] [ 216.674162][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.687769][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.709522][ T28] audit: type=1400 audit(2000000031.027:661): avc: denied { setopt } for pid=5958 comm="syz.4.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 216.739937][ T5963] cgroup: none used incorrectly [ 216.752064][ T28] audit: type=1400 audit(2000000031.037:662): avc: denied { ioctl } for pid=5958 comm="syz.4.701" path="socket:[11748]" dev="sockfs" ino=11748 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 216.904848][ T28] audit: type=1326 audit(2000000031.197:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.4.704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d1b1de99 code=0x7ffc0000 [ 216.930858][ T28] audit: type=1326 audit(2000000031.197:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.4.704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d1b1de99 code=0x7ffc0000 [ 216.956293][ T28] audit: type=1326 audit(2000000031.197:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.4.704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d1b1de99 code=0x7ffc0000 [ 217.106758][ T5975] loop2: detected capacity change from 0 to 8192 [ 217.117430][ T5975] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 217.131485][ T5975] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.140335][ T5975] FAT-fs (loop2): Filesystem has been set read-only [ 217.146982][ T5975] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.155812][ T5975] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.164746][ T5975] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.173708][ T5975] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.182563][ T5975] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.191446][ T5975] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.200390][ T5975] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.209301][ T5975] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.223636][ T5975] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 217.363588][ T5977] loop1: detected capacity change from 0 to 512 [ 217.407138][ T5977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.500126][ T5977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.663059][ T5977] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.699631][ T5984] loop0: detected capacity change from 0 to 512 [ 217.715132][ T5984] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.708: corrupted in-inode xattr: e_value size too large [ 217.729051][ T5984] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 217.729274][ T5984] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.708: couldn't read orphan inode 15 (err -117) [ 217.750253][ T5984] loop0: lost filesystem error report for type 5 error -117 [ 217.750867][ T5984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.833704][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.868976][ T5990] tun0: tun_chr_ioctl cmd 2147767506 [ 217.878144][ T5987] netlink: 'syz.4.707': attribute type 4 has an invalid length. [ 217.888813][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.036972][ T5999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.709'. [ 218.119527][ T6008] FAULT_INJECTION: forcing a failure. [ 218.119527][ T6008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.145853][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 218.171633][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.716'. [ 218.188776][ T6008] CPU: 0 UID: 0 PID: 6008 Comm: syz.1.715 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.188857][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 218.188873][ T6008] Call Trace: [ 218.188879][ T6008] [ 218.188886][ T6008] __dump_stack+0x1d/0x30 [ 218.188909][ T6008] dump_stack_lvl+0x95/0xd0 [ 218.188933][ T6008] dump_stack+0x15/0x1b [ 218.189019][ T6008] should_fail_ex+0x25e/0x270 [ 218.189082][ T6008] should_fail+0xb/0x20 [ 218.189115][ T6008] should_fail_usercopy+0x1a/0x20 [ 218.189155][ T6008] strncpy_from_user+0x27/0x250 [ 218.189180][ T6008] __se_sys_memfd_create+0x20f/0x3b0 [ 218.189298][ T6008] __x64_sys_memfd_create+0x31/0x40 [ 218.189340][ T6008] x64_sys_call+0x1f22/0x3020 [ 218.189413][ T6008] do_syscall_64+0x136/0x3c0 [ 218.189442][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.189464][ T6008] RIP: 0033:0x7f11c0d2de99 [ 218.189482][ T6008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.189517][ T6008] RSP: 002b:00007f11bf786d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 218.189536][ T6008] RAX: ffffffffffffffda RBX: 00000000000005c6 RCX: 00007f11c0d2de99 [ 218.189550][ T6008] RDX: 00007f11bf786ddc RSI: 0000000000000000 RDI: 00007f11c0dc408f [ 218.189565][ T6008] RBP: 0000200000003880 R08: 00000000ffffffff R09: 0000000000000000 [ 218.189605][ T6008] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 218.189622][ T6008] R13: 00007f11bf786ddc R14: 00007f11bf786de0 R15: 00007ffed5e12b78 [ 218.189646][ T6008] [ 218.192867][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 218.374102][ T6010] geneve2: entered promiscuous mode [ 218.382402][ T6010] geneve2: entered allmulticast mode [ 218.450069][ T6016] loop4: detected capacity change from 0 to 512 [ 218.485023][ T6016] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.507351][ T6016] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 1803188595: comm syz.4.717: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 218.540637][ T6016] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.540796][ T6016] EXT4-fs (loop4): Remounting filesystem read-only [ 218.550019][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 218.550033][ C0] EXT4-fs (loop4): initial error at time 2000000032: ext4_map_blocks:791: inode 15: block 1803188595 [ 218.550078][ C0] EXT4-fs (loop4): last error at time 2000000032: ext4_map_blocks:791: inode 15: block 1803188595 [ 218.633564][ T6016] EXT4-fs (loop4): mount failed [ 219.045920][ T6024] cgroup: none used incorrectly [ 219.110550][ T6027] loop3: detected capacity change from 0 to 512 [ 219.119117][ T6027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.142952][ T6027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.161877][ T6027] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.273931][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.386206][ T6039] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 219.908239][ T6045] FAULT_INJECTION: forcing a failure. [ 219.908239][ T6045] name failslab, interval 1, probability 0, space 0, times 0 [ 219.934513][ T6045] CPU: 0 UID: 0 PID: 6045 Comm: syz.0.727 Not tainted syzkaller #0 PREEMPT(lazy) [ 219.934547][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 219.934564][ T6045] Call Trace: [ 219.934571][ T6045] [ 219.934579][ T6045] __dump_stack+0x1d/0x30 [ 219.934608][ T6045] dump_stack_lvl+0x95/0xd0 [ 219.934665][ T6045] dump_stack+0x15/0x1b [ 219.934683][ T6045] should_fail_ex+0x25e/0x270 [ 219.934712][ T6045] ? prog_array_map_alloc+0x33/0x110 [ 219.934742][ T6045] should_failslab+0x8c/0xb0 [ 219.934846][ T6045] __kmalloc_cache_noprof+0x7b/0x3d0 [ 219.934877][ T6045] ? prog_array_map_alloc+0x33/0x110 [ 219.934987][ T6045] prog_array_map_alloc+0x33/0x110 [ 219.935020][ T6045] map_create+0xaf9/0xff0 [ 219.935059][ T6045] __sys_bpf+0x99a/0xc30 [ 219.935120][ T6045] ? vfs_write+0x780/0x990 [ 219.935214][ T6045] __x64_sys_bpf+0x69/0x80 [ 219.935245][ T6045] x64_sys_call+0x10cb/0x3020 [ 219.935274][ T6045] do_syscall_64+0x136/0x3c0 [ 219.935306][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.935338][ T6045] RIP: 0033:0x7fe98a15de99 [ 219.935353][ T6045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.935494][ T6045] RSP: 002b:00007fe988bb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.935519][ T6045] RAX: ffffffffffffffda RBX: 00007fe98a3e5fa0 RCX: 00007fe98a15de99 [ 219.935538][ T6045] RDX: 000000000000005f RSI: 0000200000000080 RDI: 0000000000000000 [ 219.935553][ T6045] RBP: 00007fe988bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 219.935566][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.935608][ T6045] R13: 00007fe98a3e6038 R14: 00007fe98a3e5fa0 R15: 00007fffc8f08bc8 [ 219.935627][ T6045] [ 220.286349][ T6043] Unable to read rock-ridge attributes [ 220.959119][ T6054] xt_TPROXY: Can be used only with -p tcp or -p udp [ 221.171488][ T6057] FAULT_INJECTION: forcing a failure. [ 221.171488][ T6057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.199841][ T6055] set_capacity_and_notify: 2 callbacks suppressed [ 221.199854][ T6055] loop4: detected capacity change from 0 to 512 [ 221.230836][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.0.730 Not tainted syzkaller #0 PREEMPT(lazy) [ 221.230939][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 221.230956][ T6057] Call Trace: [ 221.230964][ T6057] [ 221.230973][ T6057] __dump_stack+0x1d/0x30 [ 221.231004][ T6057] dump_stack_lvl+0x95/0xd0 [ 221.231027][ T6057] dump_stack+0x15/0x1b [ 221.231073][ T6057] should_fail_ex+0x25e/0x270 [ 221.231111][ T6057] should_fail+0xb/0x20 [ 221.231179][ T6057] should_fail_usercopy+0x1a/0x20 [ 221.231240][ T6057] _copy_to_user+0x20/0xa0 [ 221.231260][ T6057] simple_read_from_buffer+0xb5/0x130 [ 221.231296][ T6057] proc_fail_nth_read+0x10e/0x150 [ 221.231398][ T6057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.231426][ T6057] vfs_read+0x18e/0x7c0 [ 221.231449][ T6057] ? __rcu_read_unlock+0x4e/0x70 [ 221.231544][ T6057] ? __fget_files+0x184/0x1c0 [ 221.231580][ T6057] ? mutex_lock+0x57/0x90 [ 221.231615][ T6057] ksys_read+0xdc/0x1a0 [ 221.231635][ T6057] __x64_sys_read+0x40/0x50 [ 221.231718][ T6057] x64_sys_call+0x2886/0x3020 [ 221.231745][ T6057] do_syscall_64+0x136/0x3c0 [ 221.231791][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.231826][ T6057] RIP: 0033:0x7fe98a11e6ce [ 221.231914][ T6057] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 221.231940][ T6057] RSP: 002b:00007fe988bb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.232007][ T6057] RAX: ffffffffffffffda RBX: 00007fe988bb76c0 RCX: 00007fe98a11e6ce [ 221.232058][ T6057] RDX: 000000000000000f RSI: 00007fe988bb70a0 RDI: 0000000000000004 [ 221.232113][ T6057] RBP: 00007fe988bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 221.232131][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.232148][ T6057] R13: 00007fe98a3e6038 R14: 00007fe98a3e5fa0 R15: 00007fffc8f08bc8 [ 221.232174][ T6057] [ 221.235470][ T6043] Unable to read rock-ridge attributes [ 221.472146][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 221.486578][ T6060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.731'. [ 221.540433][ T6043] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 221.553278][ T6043] Unable to read rock-ridge attributes [ 221.559399][ T6043] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 221.574737][ T6055] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.728: bg 0: block 393: padding at end of block bitmap is not set [ 221.647382][ T6055] loop4: lost filesystem error report for type 5 error -117 [ 221.647595][ T6055] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 221.663654][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 221.663669][ C0] EXT4-fs (loop4): initial error at time 2000000035: ext4_validate_block_bitmap:441 [ 221.663695][ C0] EXT4-fs (loop4): last error at time 2000000035: ext4_validate_block_bitmap:441 [ 221.696068][ T6067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.732'. [ 221.778522][ T6055] loop4: lost filesystem error report for type 5 error -117 [ 221.778948][ T6055] EXT4-fs (loop4): 2 truncates cleaned up [ 221.807029][ T6055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.913544][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.961135][ T6072] loop1: detected capacity change from 0 to 1024 [ 221.981237][ T6072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.001358][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 222.001375][ T28] audit: type=1400 audit(2000000036.327:728): avc: denied { connect } for pid=6071 comm="syz.1.735" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.052257][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.435952][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.453784][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.772693][ T28] audit: type=1326 audit(2000000037.057:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.3.741" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9680a0de99 code=0x0 [ 222.799406][ T6087] loop4: detected capacity change from 0 to 512 [ 222.807289][ T6087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.848375][ T6087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.891702][ T6087] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.907071][ T28] audit: type=1400 audit(2000000037.197:730): avc: denied { write } for pid=6086 comm="syz.4.734" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.955303][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.258567][ T6099] xt_bpf: check failed: parse error [ 223.293911][ T6101] bond0: entered promiscuous mode [ 223.326926][ T6101] bond_slave_0: entered promiscuous mode [ 223.339767][ T6101] bond_slave_1: entered promiscuous mode [ 223.358780][ T6101] batadv0: entered promiscuous mode [ 223.373532][ T6101] debugfs: 'hsr1' already exists in 'hsr' [ 223.381778][ T6106] FAULT_INJECTION: forcing a failure. [ 223.381778][ T6106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.398210][ T6101] Cannot create hsr debugfs directory [ 223.403853][ T6101] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 223.415817][ T6106] CPU: 0 UID: 0 PID: 6106 Comm: syz.2.746 Not tainted syzkaller #0 PREEMPT(lazy) [ 223.415863][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 223.415877][ T6106] Call Trace: [ 223.415885][ T6106] [ 223.415927][ T6106] __dump_stack+0x1d/0x30 [ 223.415964][ T6106] dump_stack_lvl+0x95/0xd0 [ 223.416031][ T6106] dump_stack+0x15/0x1b [ 223.416099][ T6106] should_fail_ex+0x25e/0x270 [ 223.416179][ T6106] should_fail+0xb/0x20 [ 223.416266][ T6106] should_fail_usercopy+0x1a/0x20 [ 223.416304][ T6106] _copy_from_user+0x1c/0xb0 [ 223.416323][ T6106] sk_getsockopt+0xcf/0x1a30 [ 223.416379][ T6106] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 223.416446][ T6106] ? should_fail_ex+0xd9/0x270 [ 223.416476][ T6106] do_sock_getsockopt+0x179/0x570 [ 223.416515][ T6106] ? vfs_write+0x848/0x990 [ 223.416607][ T6106] __x64_sys_getsockopt+0x11d/0x1a0 [ 223.416671][ T6106] x64_sys_call+0x2dcf/0x3020 [ 223.416702][ T6106] do_syscall_64+0x136/0x3c0 [ 223.416733][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.416760][ T6106] RIP: 0033:0x7f9f3de3de99 [ 223.416775][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.416807][ T6106] RSP: 002b:00007f9f3c897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 223.416827][ T6106] RAX: ffffffffffffffda RBX: 00007f9f3e0c5fa0 RCX: 00007f9f3de3de99 [ 223.416840][ T6106] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000003 [ 223.416855][ T6106] RBP: 00007f9f3c897090 R08: 0000200000000280 R09: 0000000000000000 [ 223.416947][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.416963][ T6106] R13: 00007f9f3e0c6038 R14: 00007f9f3e0c5fa0 R15: 00007ffef7f339a8 [ 223.417044][ T6106] [ 223.595319][ T6101] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 223.605815][ T6101] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 223.666755][ T6101] bond0: left promiscuous mode [ 223.671861][ T6101] bond_slave_0: left promiscuous mode [ 223.677633][ T6101] bond_slave_1: left promiscuous mode [ 223.687120][ T6101] batadv0: left promiscuous mode [ 223.748855][ T28] audit: type=1326 audit(2000000038.077:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.2.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f3de3de99 code=0x0 [ 223.895835][ T6128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.748'. [ 223.958035][ T6129] sg_write: data in/out 2816/136 bytes for SCSI command 0x0-- guessing data in; [ 223.958035][ T6129] program syz.2.749 not setting count and/or reply_len properly [ 224.016610][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'. [ 224.302816][ T6133] loop3: detected capacity change from 0 to 512 [ 224.329019][ T6133] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.349387][ T6133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.362227][ T6133] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.374962][ T28] audit: type=1400 audit(2000000038.697:732): avc: denied { write } for pid=6132 comm="syz.3.752" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.412577][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.433049][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.753'. [ 224.655506][ T28] audit: type=1400 audit(2000000038.977:733): avc: denied { create } for pid=6136 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 224.691161][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.753'. [ 224.818734][ T6159] loop3: detected capacity change from 0 to 512 [ 224.831462][ T28] audit: type=1326 audit(2000000039.157:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.1.759" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11c0d2de99 code=0x0 [ 224.866423][ T6159] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.882348][ T6159] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 224.897006][ T6159] FAT-fs (loop3): Filesystem has been set read-only [ 224.904120][ T6159] FAULT_INJECTION: forcing a failure. [ 224.904120][ T6159] name failslab, interval 1, probability 0, space 0, times 0 [ 224.921082][ T6159] CPU: 0 UID: 0 PID: 6159 Comm: syz.3.760 Not tainted syzkaller #0 PREEMPT(lazy) [ 224.921109][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 224.921181][ T6159] Call Trace: [ 224.921208][ T6159] [ 224.921218][ T6159] __dump_stack+0x1d/0x30 [ 224.921305][ T6159] dump_stack_lvl+0x95/0xd0 [ 224.921327][ T6159] dump_stack+0x15/0x1b [ 224.921351][ T6159] should_fail_ex+0x25e/0x270 [ 224.921387][ T6159] should_failslab+0x8c/0xb0 [ 224.921417][ T6159] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 224.921502][ T6159] ? do_getname+0x2e/0x1c0 [ 224.921530][ T6159] ? do_getname+0x2e/0x1c0 [ 224.921562][ T6159] do_getname+0x2e/0x1c0 [ 224.921604][ T6159] getname_flags+0x1d/0x30 [ 224.921703][ T6159] vfs_fstatat+0x45/0x170 [ 224.921733][ T6159] __se_sys_newfstatat+0x55/0x3e0 [ 224.921773][ T6159] ? __fget_files+0x184/0x1c0 [ 224.921863][ T6159] ? mutex_lock+0x57/0x90 [ 224.921900][ T6159] ? mutex_unlock+0x4e/0x90 [ 224.921978][ T6159] ? fput+0x8f/0xc0 [ 224.922090][ T6159] ? ksys_write+0x194/0x1a0 [ 224.922112][ T6159] __x64_sys_newfstatat+0x55/0x70 [ 224.922179][ T6159] x64_sys_call+0x2c64/0x3020 [ 224.922215][ T6159] do_syscall_64+0x136/0x3c0 [ 224.922240][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.922304][ T6159] RIP: 0033:0x7f9680a0de99 [ 224.922319][ T6159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.922345][ T6159] RSP: 002b:00007f967f467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 224.922383][ T6159] RAX: ffffffffffffffda RBX: 00007f9680c95fa0 RCX: 00007f9680a0de99 [ 224.922481][ T6159] RDX: 0000000000000000 RSI: 0000200000004240 RDI: ffffffffffffff9c [ 224.922498][ T6159] RBP: 00007f967f467090 R08: 0000000000000000 R09: 0000000000000000 [ 224.922515][ T6159] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001 [ 224.922530][ T6159] R13: 00007f9680c96038 R14: 00007f9680c95fa0 R15: 00007ffcc23ce728 [ 224.922550][ T6159] [ 225.137027][ T6163] loop4: detected capacity change from 0 to 128 [ 225.497229][ T6169] loop0: detected capacity change from 0 to 512 [ 225.701370][ T6169] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.762: corrupted in-inode xattr: e_value size too large [ 225.716113][ T6169] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 225.716734][ T6169] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.762: couldn't read orphan inode 15 (err -117) [ 225.726265][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 225.726364][ C1] EXT4-fs (loop0): initial error at time 2000000040: ext4_iget_extra_inode:5180: inode 15 [ 225.726535][ C1] EXT4-fs (loop0): last error at time 2000000040: ext4_iget_extra_inode:5180: inode 15 [ 225.765898][ T6169] loop0: lost filesystem error report for type 5 error -117 [ 225.770618][ T6169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.961695][ T28] audit: type=1400 audit(2000000040.147:735): avc: denied { write } for pid=6168 comm="syz.0.762" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.989241][ T28] audit: type=1400 audit(2000000040.157:736): avc: denied { write } for pid=6168 comm="syz.0.762" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.013392][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.729605][ T6176] loop3: detected capacity change from 0 to 512 [ 226.762545][ T6176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.849143][ T28] audit: type=1400 audit(2000000041.137:737): avc: denied { setopt } for pid=6179 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 226.906221][ T6176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.976158][ T6176] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.176143][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 227.176158][ T28] audit: type=1400 audit(2000000041.497:739): avc: denied { write } for pid=6172 comm="syz.3.763" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.091440][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'. [ 228.368001][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.790710][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.816099][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.009352][ T6219] FAULT_INJECTION: forcing a failure. [ 229.009352][ T6219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.024220][ T28] audit: type=1400 audit(2000000043.337:740): avc: denied { listen } for pid=6218 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.057365][ T6219] CPU: 1 UID: 0 PID: 6219 Comm: syz.3.774 Not tainted syzkaller #0 PREEMPT(lazy) [ 229.057389][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 229.057404][ T6219] Call Trace: [ 229.057412][ T6219] [ 229.057421][ T6219] __dump_stack+0x1d/0x30 [ 229.057500][ T6219] dump_stack_lvl+0x95/0xd0 [ 229.057518][ T6219] dump_stack+0x15/0x1b [ 229.057536][ T6219] should_fail_ex+0x25e/0x270 [ 229.057569][ T6219] should_fail+0xb/0x20 [ 229.057592][ T6219] should_fail_usercopy+0x1a/0x20 [ 229.057620][ T6219] _copy_from_user+0x1c/0xb0 [ 229.057643][ T6219] __copy_msghdr+0x242/0x300 [ 229.057758][ T6219] ___sys_sendmsg+0x10c/0x1e0 [ 229.057807][ T6219] ? terminate_walk+0x1d5/0x200 [ 229.057848][ T6219] __sys_sendmmsg+0x185/0x320 [ 229.057963][ T6219] __x64_sys_sendmmsg+0x57/0x70 [ 229.058050][ T6219] x64_sys_call+0x27aa/0x3020 [ 229.058077][ T6219] do_syscall_64+0x136/0x3c0 [ 229.058097][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.058124][ T6219] RIP: 0033:0x7f9680a0de99 [ 229.058142][ T6219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.058216][ T6219] RSP: 002b:00007f967f467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 229.058234][ T6219] RAX: ffffffffffffffda RBX: 00007f9680c95fa0 RCX: 00007f9680a0de99 [ 229.058246][ T6219] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 229.058257][ T6219] RBP: 00007f967f467090 R08: 0000000000000000 R09: 0000000000000000 [ 229.058268][ T6219] R10: 00000000000c8844 R11: 0000000000000246 R12: 0000000000000001 [ 229.058280][ T6219] R13: 00007f9680c96038 R14: 00007f9680c95fa0 R15: 00007ffcc23ce728 [ 229.058321][ T6219] [ 229.362211][ T6225] loop2: detected capacity change from 0 to 512 [ 229.369316][ T6225] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 229.440153][ T6223] loop3: detected capacity change from 0 to 512 [ 229.462250][ T6231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.780'. [ 229.475304][ T6223] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 229.527448][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 229.644356][ T6225] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.779: bad orphan inode 131083 [ 229.683085][ T6225] loop2: lost filesystem error report for type 5 error -117 [ 229.683843][ T6225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.769373][ T28] audit: type=1400 audit(2000000044.097:741): avc: denied { write } for pid=6224 comm="syz.2.779" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.820335][ T28] audit: type=1400 audit(2000000044.117:742): avc: denied { ioctl } for pid=6224 comm="syz.2.779" path="/162/bus/file1" dev="loop2" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.856933][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.006446][ T6249] loop0: detected capacity change from 0 to 512 [ 230.018875][ T6249] EXT4-fs (loop0): filesystem is read-only [ 230.038919][ T6249] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 230.143786][ T6249] EXT4-fs (loop0): failed to initialize system zone (-117) [ 230.157141][ T6249] EXT4-fs (loop0): mount failed [ 231.168776][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 231.557308][ T4217] Bluetooth: hci0: command 0x1003 tx timeout [ 231.563359][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 232.458018][ T6265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.789'. [ 232.693430][ T6267] loop1: detected capacity change from 0 to 512 [ 232.716781][ T6267] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 232.732336][ T6267] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 1803188595: comm syz.1.790: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 232.747889][ T6267] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 232.748030][ T6267] EXT4-fs (loop1): Remounting filesystem read-only [ 232.763736][ T6267] EXT4-fs (loop1): mount failed [ 232.795212][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.803647][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.843245][ T6267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.790'. [ 232.944268][ T6273] tipc: Started in network mode [ 232.949158][ T6273] tipc: Node identity , cluster identity 4711 [ 232.955255][ T6273] tipc: Failed to set node id, please configure manually [ 232.962288][ T6273] tipc: Enabling of bearer rejected, failed to enable media [ 233.027729][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 233.069101][ T6291] loop0: detected capacity change from 0 to 2048 [ 233.101786][ T6291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.124718][ T6291] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.139167][ T28] audit: type=1400 audit(2000000047.467:743): avc: denied { write } for pid=6290 comm="syz.0.798" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.164643][ T6291] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.798: bg 0: block 345: padding at end of block bitmap is not set [ 233.181147][ T6291] EXT4-fs (loop0): Remounting filesystem read-only [ 233.189096][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.800'. [ 233.489096][ T28] audit: type=1400 audit(2000000047.797:744): avc: denied { write } for pid=6306 comm="syz.3.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.480943][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.804'. [ 235.007244][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 235.311000][ T6324] erspan0: entered promiscuous mode [ 235.316444][ T6324] erspan0: left promiscuous mode [ 235.547596][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.560995][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.569787][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.615661][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 235.624795][ T6338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.813'. [ 235.660813][ T6339] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.812'. [ 235.692823][ T6336] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.812'. [ 235.703468][ T6336] netlink: 'syz.0.812': attribute type 21 has an invalid length. [ 235.726191][ T6336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.812'. [ 235.751249][ T6336] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 235.875074][ T6343] loop0: detected capacity change from 0 to 8192 [ 235.899267][ T28] audit: type=1326 audit(2000000050.227:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.0.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe98a15de99 code=0x0 [ 236.120115][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 236.134501][ T6349] tipc: Disabling bearer [ 236.144455][ T28] audit: type=1326 audit(2000000050.467:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.2.816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f3de3de99 code=0x0 [ 236.668636][ T6363] loop0: detected capacity change from 0 to 128 [ 237.171203][ T6368] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 237.830178][ T6379] netlink: 180 bytes leftover after parsing attributes in process `syz.1.826'. [ 238.344703][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.824'. [ 238.411209][ T6384] FAULT_INJECTION: forcing a failure. [ 238.411209][ T6384] name failslab, interval 1, probability 0, space 0, times 0 [ 238.459461][ T6389] netlink: 'syz.1.826': attribute type 3 has an invalid length. [ 238.470613][ T28] audit: type=1400 audit(2000000052.767:747): avc: denied { create } for pid=6375 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 238.493615][ T6392] loop3: detected capacity change from 0 to 164 [ 238.510426][ T6384] CPU: 0 UID: 0 PID: 6384 Comm: syz.4.828 Not tainted syzkaller #0 PREEMPT(lazy) [ 238.510490][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 238.510504][ T6384] Call Trace: [ 238.510568][ T6384] [ 238.510579][ T6384] __dump_stack+0x1d/0x30 [ 238.510606][ T6384] dump_stack_lvl+0x95/0xd0 [ 238.510627][ T6384] dump_stack+0x15/0x1b [ 238.510652][ T6384] should_fail_ex+0x25e/0x270 [ 238.510765][ T6384] ? __se_sys_memfd_create+0x1df/0x3b0 [ 238.510829][ T6384] should_failslab+0x8c/0xb0 [ 238.510860][ T6384] __kmalloc_cache_noprof+0x7b/0x3d0 [ 238.510896][ T6384] ? __se_sys_memfd_create+0x1df/0x3b0 [ 238.510931][ T6384] ? fput+0x8f/0xc0 [ 238.511038][ T6384] __se_sys_memfd_create+0x1df/0x3b0 [ 238.511086][ T6384] __x64_sys_memfd_create+0x31/0x40 [ 238.511182][ T6384] x64_sys_call+0x1f22/0x3020 [ 238.511210][ T6384] do_syscall_64+0x136/0x3c0 [ 238.511243][ T6384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.511297][ T6384] RIP: 0033:0x7f10d1b1de99 [ 238.511314][ T6384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.511333][ T6384] RSP: 002b:00007f10d0576e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 238.511353][ T6384] RAX: ffffffffffffffda RBX: 0000000000000568 RCX: 00007f10d1b1de99 [ 238.511372][ T6384] RDX: 00007f10d0576ee0 RSI: 0000000000000000 RDI: 00007f10d1bb408f [ 238.511390][ T6384] RBP: 0000200000000600 R08: 00000000ffffffff R09: 0000000000000000 [ 238.511426][ T6384] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000000c0 [ 238.511438][ T6384] R13: 00007f10d0576ee0 R14: 00007f10d0576ea0 R15: 0000200000000480 [ 238.511461][ T6384] [ 238.791948][ T28] audit: type=1400 audit(2000000052.787:748): avc: denied { write } for pid=6375 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 238.826088][ T6395] netlink: 'syz.4.831': attribute type 16 has an invalid length. [ 238.835428][ T6395] netlink: 'syz.4.831': attribute type 17 has an invalid length. [ 238.915263][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'. [ 238.973470][ T6397] loop2: detected capacity change from 0 to 512 [ 239.028284][ T6397] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 239.056678][ T28] audit: type=1400 audit(2000000053.377:749): avc: denied { bind } for pid=6398 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.112985][ T6397] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 1803188595: comm syz.2.830: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 239.161110][ T6397] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 239.161264][ T6397] EXT4-fs (loop2): Remounting filesystem read-only [ 239.170448][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 239.170496][ C0] EXT4-fs (loop2): initial error at time 2000000053: ext4_map_blocks:791: inode 15: block 1803188595 [ 239.170546][ C0] EXT4-fs (loop2): last error at time 2000000053: ext4_map_blocks:791: inode 15: block 1803188595 [ 239.214882][ T6395] geneve2: left promiscuous mode [ 239.220076][ T6395] geneve2: left allmulticast mode [ 239.452959][ T6397] EXT4-fs (loop2): mount failed [ 239.458407][ T6408] loop4: detected capacity change from 0 to 512 [ 239.914593][ T6408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.070117][ T6408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.098443][ T6408] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.203480][ T28] audit: type=1400 audit(2000000054.527:750): avc: denied { write } for pid=6404 comm="syz.4.834" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.286636][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.303913][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 240.313162][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 240.488432][ T28] audit: type=1400 audit(2000000054.807:751): avc: denied { write } for pid=6437 comm="syz.4.842" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.606078][ T28] audit: type=1400 audit(2000000054.807:752): avc: denied { ioctl } for pid=6437 comm="syz.4.842" path="/dev/usbmon5" dev="devtmpfs" ino=157 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.691702][ T28] audit: type=1326 audit(2000000054.917:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6439 comm="syz.2.844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 240.724363][ T6449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.846'. [ 240.788686][ T28] audit: type=1326 audit(2000000054.927:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6439 comm="syz.2.844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 240.884433][ T28] audit: type=1326 audit(2000000054.927:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6439 comm="syz.2.844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 240.942820][ T28] audit: type=1326 audit(2000000054.927:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6439 comm="syz.2.844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 241.384988][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 241.400560][ T6472] loop2: detected capacity change from 0 to 512 [ 241.415594][ T6473] loop0: detected capacity change from 0 to 1024 [ 241.420849][ T6472] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 241.435737][ T6473] EXT4-fs: Ignoring removed bh option [ 241.472588][ T6472] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 1803188595: comm syz.2.855: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 241.482814][ T6473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.489389][ T6472] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 241.500502][ T6472] EXT4-fs (loop2): Remounting filesystem read-only [ 241.509654][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 241.509668][ C0] EXT4-fs (loop2): initial error at time 2000000055: ext4_map_blocks:791: inode 15: block 1803188595 [ 241.509705][ C0] EXT4-fs (loop2): last error at time 2000000055: ext4_map_blocks:791: inode 15: block 1803188595 [ 241.534228][ T6479] tun0: tun_chr_ioctl cmd 2147767506 [ 241.549947][ T6472] EXT4-fs (loop2): mount failed [ 241.692516][ T6481] loop4: detected capacity change from 0 to 512 [ 241.720705][ T6481] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 241.759323][ T6487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.858'. [ 241.874195][ T115] Bluetooth: hci0: Frame reassembly failed (-84) [ 242.087989][ T6494] atomic_op ffff88811df44128 conn xmit_atomic 0000000000000000 [ 242.201539][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.242653][ T6502] loop2: detected capacity change from 0 to 128 [ 242.272656][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 242.345520][ T6504] team0: Port device team_slave_0 removed [ 242.353756][ T6507] loop2: detected capacity change from 0 to 128 [ 242.464713][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 242.464915][ T6514] netlink: 32 bytes leftover after parsing attributes in process `syz.2.866'. [ 242.517139][ T6513] loop0: detected capacity change from 0 to 512 [ 242.540524][ T6510] tun0: tun_chr_ioctl cmd 2147767506 [ 242.544718][ T6513] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 242.560411][ T6514] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.866' sets config #0 [ 242.585331][ T6514] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.866' sets config #1 [ 242.585796][ T6513] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 1803188595: comm syz.0.868: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 242.619442][ T6513] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 242.620354][ T6513] EXT4-fs (loop0): Remounting filesystem read-only [ 242.629671][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 242.629704][ C0] EXT4-fs (loop0): initial error at time 2000000058: ext4_map_blocks:791: inode 15: block 1803188595 [ 242.629751][ C0] EXT4-fs (loop0): last error at time 2000000058: ext4_map_blocks:791: inode 15: block 1803188595 [ 242.665048][ T6513] EXT4-fs (loop0): mount failed [ 242.805629][ T6521] loop3: detected capacity change from 0 to 512 [ 242.837697][ T6521] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.871: corrupted in-inode xattr: e_value size too large [ 242.852957][ T6521] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 242.857225][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 242.872840][ C1] EXT4-fs (loop3): initial error at time 2000000059: ext4_iget_extra_inode:5180: inode 15 [ 242.882797][ C1] EXT4-fs (loop3): last error at time 2000000059: ext4_iget_extra_inode:5180: inode 15 [ 242.904153][ T6521] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.871: couldn't read orphan inode 15 (err -117) [ 242.916470][ T6521] loop3: lost filesystem error report for type 5 error -117 [ 242.930665][ T6521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.025094][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.495976][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 243.495993][ T28] audit: type=1400 audit(2000000059.818:773): avc: denied { audit_read } for pid=6535 comm="syz.2.875" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.574219][ T6540] loop2: detected capacity change from 0 to 128 [ 243.678201][ T6542] __nla_validate_parse: 4 callbacks suppressed [ 243.678216][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 243.911581][ T6551] loop0: detected capacity change from 0 to 4096 [ 243.918436][ T6551] EXT4-fs: Ignoring removed mblk_io_submit option [ 243.925293][ T4217] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 244.035661][ T6551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.052131][ T28] audit: type=1400 audit(2000000061.374:774): avc: denied { write } for pid=6548 comm="syz.0.879" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.115186][ T28] audit: type=1400 audit(2000000061.434:775): avc: denied { connect } for pid=6554 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 244.208181][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 244.249045][ T6557] loop3: detected capacity change from 0 to 512 [ 244.280941][ T6557] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 244.310356][ T6557] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 1803188595: comm syz.3.881: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 244.354418][ T6557] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 244.354616][ T6557] EXT4-fs (loop3): Remounting filesystem read-only [ 244.363925][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 244.363939][ C0] EXT4-fs (loop3): initial error at time 2000000061: ext4_map_blocks:791: inode 15: block 1803188595 [ 244.363978][ C0] EXT4-fs (loop3): last error at time 2000000061: ext4_map_blocks:791: inode 15: block 1803188595 [ 244.476978][ T6557] EXT4-fs (loop3): mount failed [ 244.597785][ T28] audit: type=1400 audit(2000000061.914:776): avc: denied { wake_alarm } for pid=6561 comm="syz.2.883" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 244.738432][ T28] audit: type=1400 audit(2000000062.064:777): avc: denied { nlmsg_read } for pid=6561 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 244.814465][ T28] audit: type=1326 audit(2000000062.094:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.4.882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d1b1de99 code=0x7ffc0000 [ 244.866122][ T6568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.885'. [ 244.901011][ T6568] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 244.923124][ T28] audit: type=1326 audit(2000000062.094:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.4.882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f10d1b1de99 code=0x7ffc0000 [ 244.977853][ T6568] bond1: entered promiscuous mode [ 244.997393][ T6568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.044123][ T28] audit: type=1326 audit(2000000062.094:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.4.882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d1b1de99 code=0x7ffc0000 [ 245.167975][ T6575] loop3: detected capacity change from 0 to 512 [ 245.187786][ T6575] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.888: corrupted in-inode xattr: e_value size too large [ 245.202496][ T6575] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 245.204255][ T6575] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.888: couldn't read orphan inode 15 (err -117) [ 245.213775][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 245.213872][ C0] EXT4-fs (loop3): initial error at time 2000000062: ext4_iget_extra_inode:5180: inode 15 [ 245.214075][ C0] EXT4-fs (loop3): last error at time 2000000062: ext4_iget_extra_inode:5180: inode 15 [ 245.253675][ T6575] loop3: lost filesystem error report for type 5 error -117 [ 245.259468][ T6575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.422967][ T6578] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 245.439654][ T28] audit: type=1400 audit(2000000062.614:781): avc: denied { write } for pid=6574 comm="syz.3.888" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.466966][ T6578] bond1: entered promiscuous mode [ 245.472987][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.482458][ T6578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.491615][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.492730][ T28] audit: type=1400 audit(2000000062.624:782): avc: denied { write } for pid=6574 comm="syz.3.888" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.543675][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 245.576259][ T6578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.598176][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.891'. [ 245.617437][ T6578] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 245.630835][ T6578] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 245.710610][ T6588] loop0: detected capacity change from 0 to 164 [ 245.750253][ T6578] bond1: (slave ip6gre1): making interface the new active one [ 245.757825][ T6578] ip6gre1: entered promiscuous mode [ 245.766676][ T6578] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 245.794305][ T6588] Unable to read rock-ridge attributes [ 245.816940][ T6588] xt_TPROXY: Can be used only with -p tcp or -p udp [ 245.898154][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'. [ 245.939972][ T6588] Unable to read rock-ridge attributes [ 245.974368][ T6588] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 246.003292][ T6595] Unable to read rock-ridge attributes [ 246.031785][ T6595] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 246.873055][ T6603] FAULT_INJECTION: forcing a failure. [ 246.873055][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 246.888747][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 246.926200][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: syz.4.894 Not tainted syzkaller #0 PREEMPT(lazy) [ 246.926232][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 246.926245][ T6603] Call Trace: [ 246.926251][ T6603] [ 246.926258][ T6603] __dump_stack+0x1d/0x30 [ 246.926280][ T6603] dump_stack_lvl+0x95/0xd0 [ 246.926327][ T6603] dump_stack+0x15/0x1b [ 246.926354][ T6603] should_fail_ex+0x25e/0x270 [ 246.926451][ T6603] should_failslab+0x8c/0xb0 [ 246.926474][ T6603] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 246.926574][ T6603] ? do_getname_kernel+0x53/0x190 [ 246.926601][ T6603] ? do_getname_kernel+0x53/0x190 [ 246.926629][ T6603] ? should_failslab+0x8c/0xb0 [ 246.926660][ T6603] do_getname_kernel+0x53/0x190 [ 246.926722][ T6603] kern_path+0x23/0xf0 [ 246.926797][ T6603] unix_find_other+0xe9/0x710 [ 246.926818][ T6603] ? skb_set_owner_w+0x19b/0x200 [ 246.926854][ T6603] unix_stream_connect+0x2f7/0xa30 [ 246.926903][ T6603] ? __pfx_unix_stream_connect+0x10/0x10 [ 246.926969][ T6603] __sys_connect+0x1f1/0x2a0 [ 246.927015][ T6603] __x64_sys_connect+0x3f/0x50 [ 246.927069][ T6603] x64_sys_call+0x2df0/0x3020 [ 246.927101][ T6603] do_syscall_64+0x136/0x3c0 [ 246.927123][ T6603] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 246.927245][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.927268][ T6603] RIP: 0033:0x7f10d1b1de99 [ 246.927288][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.927313][ T6603] RSP: 002b:00007f10d0577028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 246.927414][ T6603] RAX: ffffffffffffffda RBX: 00007f10d1da5fa0 RCX: 00007f10d1b1de99 [ 246.927433][ T6603] RDX: 000000000000006e RSI: 0000200000000000 RDI: 0000000000000006 [ 246.927450][ T6603] RBP: 00007f10d0577090 R08: 0000000000000000 R09: 0000000000000000 [ 246.927463][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.927478][ T6603] R13: 00007f10d1da6038 R14: 00007f10d1da5fa0 R15: 00007ffd4dc65e98 [ 246.927514][ T6603] [ 247.137944][ T6600] loop0: detected capacity change from 0 to 512 [ 247.164607][ T6600] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 247.213105][ T6600] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 1803188595: comm syz.0.895: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 247.278019][ T6600] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 247.278200][ T6600] EXT4-fs (loop0): Remounting filesystem read-only [ 247.287406][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 247.287420][ C1] EXT4-fs (loop0): initial error at time 2000000064: ext4_map_blocks:791: inode 15: block 1803188595 [ 247.287461][ C1] EXT4-fs (loop0): last error at time 2000000064: ext4_map_blocks:791: inode 15: block 1803188595 [ 247.433951][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 247.444996][ T6612] loop4: detected capacity change from 0 to 2048 [ 247.464880][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 247.474250][ T6600] EXT4-fs (loop0): mount failed [ 247.485560][ T6614] netlink: 104 bytes leftover after parsing attributes in process `syz.3.900'. [ 247.509681][ T6612] loop4: p3 p4 < > [ 247.513825][ T6612] loop4: p3 size 201326592 extends beyond EOD, truncated [ 247.608137][ T6616] loop0: detected capacity change from 0 to 512 [ 247.688343][ T6616] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.901: corrupted in-inode xattr: e_value size too large [ 247.702813][ T6616] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 247.703863][ T6616] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.901: couldn't read orphan inode 15 (err -117) [ 247.713283][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 247.713327][ C1] EXT4-fs (loop0): initial error at time 2000000065: ext4_iget_extra_inode:5180: inode 15 [ 247.713424][ C1] EXT4-fs (loop0): last error at time 2000000065: ext4_iget_extra_inode:5180: inode 15 [ 247.757793][ T6616] loop0: lost filesystem error report for type 5 error -117 [ 247.770980][ T6616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.806250][ T4025] udevd[4025]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 247.820401][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 247.937567][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.311539][ T6632] loop4: detected capacity change from 0 to 164 [ 248.502668][ T6632] Unable to read rock-ridge attributes [ 248.775395][ T6620] __nla_validate_parse: 1 callbacks suppressed [ 248.775415][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.902'. [ 248.811951][ T6632] xt_TPROXY: Can be used only with -p tcp or -p udp [ 248.962652][ T6632] Unable to read rock-ridge attributes [ 248.991359][ T6620] bond2: entered promiscuous mode [ 248.996656][ T6620] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.374236][ T6632] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 249.394726][ T6644] loop0: detected capacity change from 0 to 512 [ 249.849793][ T6653] Unable to read rock-ridge attributes [ 249.878617][ T6644] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 249.932800][ T6653] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 249.942835][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 249.942849][ T28] audit: type=1400 audit(2000000067.264:796): avc: denied { shutdown } for pid=6656 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.985138][ T6657] loop3: detected capacity change from 0 to 736 [ 249.991859][ T3558] Bluetooth: hci0: Frame reassembly failed (-84) [ 249.992242][ T6657] iso9660: Bad value for 'session' [ 250.139020][ T6660] loop2: detected capacity change from 0 to 8192 [ 250.167683][ T28] audit: type=1326 audit(2000000067.484:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.2.915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f3de3de99 code=0x0 [ 250.585026][ T28] audit: type=1400 audit(2000000067.904:798): avc: denied { accept } for pid=6673 comm="syz.3.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 250.651754][ T28] audit: type=1326 audit(2000000067.974:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6678 comm="syz.3.922" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9680a0de99 code=0x0 [ 250.709230][ T28] audit: type=1326 audit(2000000068.034:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.4.920" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d1b1de99 code=0x7ffc0000 [ 250.736420][ T28] audit: type=1326 audit(2000000068.054:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.4.920" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f10d1b1de99 code=0x7ffc0000 [ 250.794363][ T28] audit: type=1326 audit(2000000068.054:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.4.920" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d1b1de99 code=0x7ffc0000 [ 250.928448][ T6690] loop2: detected capacity change from 0 to 512 [ 250.944502][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.923'. [ 250.963720][ T6690] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.019601][ T28] audit: type=1400 audit(2000000068.344:803): avc: denied { bind } for pid=6687 comm="syz.4.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.072752][ T6690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.092468][ T6690] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.115085][ T28] audit: type=1400 audit(2000000068.434:804): avc: denied { write } for pid=6689 comm="syz.2.925" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.176589][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.638067][ T6701] loop3: detected capacity change from 0 to 164 [ 251.659360][ T6701] Unable to read rock-ridge attributes [ 251.670631][ T6701] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.679011][ T6701] Unable to read rock-ridge attributes [ 251.684639][ T6701] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 251.692338][ T6701] Unable to read rock-ridge attributes [ 251.697892][ T6701] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 251.857934][ T6705] FAULT_INJECTION: forcing a failure. [ 251.857934][ T6705] name failslab, interval 1, probability 0, space 0, times 0 [ 251.897975][ T6705] CPU: 0 UID: 0 PID: 6705 Comm: syz.2.926 Not tainted syzkaller #0 PREEMPT(lazy) [ 251.898012][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 251.898055][ T6705] Call Trace: [ 251.898064][ T6705] [ 251.898074][ T6705] __dump_stack+0x1d/0x30 [ 251.898099][ T6705] dump_stack_lvl+0x95/0xd0 [ 251.898125][ T6705] dump_stack+0x15/0x1b [ 251.898151][ T6705] should_fail_ex+0x25e/0x270 [ 251.898261][ T6705] should_failslab+0x8c/0xb0 [ 251.898290][ T6705] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 251.898378][ T6705] ? __alloc_skb+0x2db/0x6f0 [ 251.898420][ T6705] ? __alloc_skb+0x2db/0x6f0 [ 251.898512][ T6705] __alloc_skb+0x2db/0x6f0 [ 251.898552][ T6705] ? __alloc_skb+0x205/0x6f0 [ 251.898588][ T6705] netlink_dump+0x10d/0x870 [ 251.898640][ T6705] __netlink_dump_start+0x435/0x520 [ 251.898789][ T6705] nf_tables_getrule+0x137/0x6b0 [ 251.898831][ T6705] ? __pfx_nf_tables_dump_rules_start+0x10/0x10 [ 251.898858][ T6705] ? __pfx_nf_tables_dump_rules+0x10/0x10 [ 251.898959][ T6705] ? __pfx_nf_tables_dump_rules_done+0x10/0x10 [ 251.899067][ T6705] ? __pfx_nf_tables_getrule+0x10/0x10 [ 251.899105][ T6705] nfnetlink_rcv_msg+0x3e5/0x5b0 [ 251.899192][ T6705] netlink_rcv_skb+0x11e/0x220 [ 251.899217][ T6705] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 251.899308][ T6705] nfnetlink_rcv+0x15f/0x1740 [ 251.899331][ T6705] ? __kfree_skb+0x109/0x150 [ 251.899373][ T6705] ? kmem_cache_free+0xca/0x380 [ 251.899400][ T6705] ? __kfree_skb+0x109/0x150 [ 251.899481][ T6705] ? nlmon_xmit+0x4f/0x60 [ 251.899539][ T6705] ? consume_skb+0x4b/0x130 [ 251.899576][ T6705] ? nlmon_xmit+0x4f/0x60 [ 251.899609][ T6705] ? dev_hard_start_xmit+0x34e/0x380 [ 251.899727][ T6705] ? __dev_queue_xmit+0x1360/0x1e90 [ 251.899767][ T6705] ? __dev_queue_xmit+0x151/0x1e90 [ 251.899852][ T6705] ? ref_tracker_free+0x380/0x3f0 [ 251.899892][ T6705] ? __netlink_deliver_tap+0x4e6/0x510 [ 251.899966][ T6705] netlink_unicast+0x5a7/0x680 [ 251.900051][ T6705] netlink_sendmsg+0x5be/0x6f0 [ 251.900103][ T6705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.900129][ T6705] ____sys_sendmsg+0x532/0x580 [ 251.900197][ T6705] ___sys_sendmsg+0x195/0x1e0 [ 251.900244][ T6705] __x64_sys_sendmsg+0xd4/0x160 [ 251.900306][ T6705] x64_sys_call+0x194c/0x3020 [ 251.900339][ T6705] do_syscall_64+0x136/0x3c0 [ 251.900364][ T6705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.900387][ T6705] RIP: 0033:0x7f9f3de3de99 [ 251.900407][ T6705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.900479][ T6705] RSP: 002b:00007f9f3c897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.900512][ T6705] RAX: ffffffffffffffda RBX: 00007f9f3e0c5fa0 RCX: 00007f9f3de3de99 [ 251.900528][ T6705] RDX: 0000000000000080 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 251.900545][ T6705] RBP: 00007f9f3c897090 R08: 0000000000000000 R09: 0000000000000000 [ 251.900562][ T6705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.900620][ T6705] R13: 00007f9f3e0c6038 R14: 00007f9f3e0c5fa0 R15: 00007ffef7f339a8 [ 251.900647][ T6705] [ 252.230059][ T4217] Bluetooth: hci0: command 0x1003 tx timeout [ 252.236557][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 252.258885][ T6709] tun0: tun_chr_ioctl cmd 2147767506 [ 252.587938][ T28] audit: type=1326 audit(2000000069.904:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.2.934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 252.641367][ T6729] loop0: detected capacity change from 0 to 512 [ 252.752883][ T6723] loop3: detected capacity change from 0 to 8192 [ 252.801186][ T6729] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.936: corrupted in-inode xattr: invalid ea_ino [ 252.815101][ T6729] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 252.816176][ T6729] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.936: couldn't read orphan inode 15 (err -117) [ 252.825368][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 252.825387][ C1] EXT4-fs (loop0): initial error at time 2000000070: ext4_iget_extra_inode:5180: inode 15 [ 252.825426][ C1] EXT4-fs (loop0): last error at time 2000000070: ext4_iget_extra_inode:5180: inode 15 [ 252.867446][ T6729] loop0: lost filesystem error report for type 5 error -117 [ 252.868769][ T6729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.992843][ T6738] loop4: detected capacity change from 0 to 512 [ 253.030280][ T6738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 253.443426][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.726358][ T6747] loop2: detected capacity change from 0 to 1024 [ 253.750426][ T6749] loop3: detected capacity change from 0 to 2048 [ 253.758929][ T6747] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.779413][ T6747] EXT4-fs: Ignoring removed bh option [ 253.791568][ T6747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.819220][ T6749] loop3: p3 p4 < > [ 253.834726][ T6749] loop3: p3 size 201326592 extends beyond EOD, truncated [ 253.878324][ T2981] loop3: p3 p4 < > [ 253.888858][ T2981] loop3: p3 size 201326592 extends beyond EOD, truncated [ 253.898931][ T6756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.943'. [ 253.936785][ T6756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.943'. [ 253.954650][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.975250][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 253.986360][ T4025] udevd[4025]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 254.025705][ T6758] netlink: 'syz.0.943': attribute type 1 has an invalid length. [ 254.050897][ T4780] udevd[4780]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 254.061992][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 254.073122][ T6756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6756 comm=syz.0.943 [ 254.140636][ T6765] Unable to read rock-ridge attributes [ 254.162390][ T6765] xt_TPROXY: Can be used only with -p tcp or -p udp [ 254.181965][ T6765] Unable to read rock-ridge attributes [ 254.187705][ T6765] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 254.312348][ T6765] Unable to read rock-ridge attributes [ 254.334008][ T6765] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 254.646443][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'. [ 254.698570][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.205161][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 255.205178][ T28] audit: type=1326 audit(2000000072.524:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 255.324101][ T6797] set_capacity_and_notify: 1 callbacks suppressed [ 255.324120][ T6797] loop4: detected capacity change from 0 to 1024 [ 255.397112][ T6801] FAULT_INJECTION: forcing a failure. [ 255.397112][ T6801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.416518][ T6797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.428840][ T28] audit: type=1326 audit(2000000072.524:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 255.464016][ T6801] CPU: 0 UID: 0 PID: 6801 Comm: syz.3.959 Not tainted syzkaller #0 PREEMPT(lazy) [ 255.464042][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 255.464059][ T6801] Call Trace: [ 255.464067][ T6801] [ 255.464074][ T6801] __dump_stack+0x1d/0x30 [ 255.464207][ T6801] dump_stack_lvl+0x95/0xd0 [ 255.464237][ T6801] dump_stack+0x15/0x1b [ 255.464307][ T6801] should_fail_ex+0x25e/0x270 [ 255.464358][ T6801] should_fail_alloc_page+0xf2/0x100 [ 255.464388][ T6801] __alloc_frozen_pages_noprof+0x108/0x350 [ 255.464428][ T6801] alloc_pages_mpol+0xa9/0x1d0 [ 255.464469][ T6801] alloc_frozen_pages_noprof+0x8f/0x110 [ 255.464584][ T6801] ? qdisc_alloc+0x65/0x410 [ 255.464636][ T6801] ___kmalloc_large_node+0x41/0xd0 [ 255.464705][ T6801] ? qdisc_alloc+0x65/0x410 [ 255.464745][ T6801] __kmalloc_large_node_noprof+0x18/0xa0 [ 255.464783][ T6801] ? qdisc_alloc+0x65/0x410 [ 255.464840][ T6801] __kmalloc_node_noprof+0x12e/0x4c0 [ 255.464870][ T6801] ? qdisc_alloc+0x65/0x410 [ 255.464905][ T6801] qdisc_alloc+0x65/0x410 [ 255.465009][ T6801] qdisc_create+0xf0/0x9c0 [ 255.465040][ T6801] tc_modify_qdisc+0x102a/0x1550 [ 255.465088][ T6801] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 255.465123][ T6801] rtnetlink_rcv_msg+0x6a7/0x720 [ 255.465175][ T6801] netlink_rcv_skb+0x11e/0x220 [ 255.465206][ T6801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 255.465291][ T6801] rtnetlink_rcv+0x1c/0x30 [ 255.465318][ T6801] netlink_unicast+0x5a7/0x680 [ 255.465341][ T6801] netlink_sendmsg+0x5be/0x6f0 [ 255.465372][ T6801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.465447][ T6801] ____sys_sendmsg+0x532/0x580 [ 255.465488][ T6801] ___sys_sendmsg+0x195/0x1e0 [ 255.465595][ T6801] __x64_sys_sendmsg+0xd4/0x160 [ 255.465691][ T6801] x64_sys_call+0x194c/0x3020 [ 255.465771][ T6801] do_syscall_64+0x136/0x3c0 [ 255.465848][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.465877][ T6801] RIP: 0033:0x7f9680a0de99 [ 255.465904][ T6801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.465920][ T6801] RSP: 002b:00007f967f467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.465978][ T6801] RAX: ffffffffffffffda RBX: 00007f9680c95fa0 RCX: 00007f9680a0de99 [ 255.465993][ T6801] RDX: 0000000000004890 RSI: 00002000000003c0 RDI: 0000000000000005 [ 255.466037][ T6801] RBP: 00007f967f467090 R08: 0000000000000000 R09: 0000000000000000 [ 255.466099][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.466112][ T6801] R13: 00007f9680c96038 R14: 00007f9680c95fa0 R15: 00007ffcc23ce728 [ 255.466132][ T6801] [ 255.733419][ T28] audit: type=1326 audit(2000000072.524:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 255.761286][ T28] audit: type=1326 audit(2000000072.564:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 255.789632][ T28] audit: type=1326 audit(2000000072.564:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 255.817088][ T28] audit: type=1326 audit(2000000072.564:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 255.844046][ T28] audit: type=1326 audit(2000000072.564:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 255.874736][ T28] audit: type=1326 audit(2000000072.564:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 255.902374][ T28] audit: type=1326 audit(2000000072.564:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 255.930750][ T28] audit: type=1326 audit(2000000072.564:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.2.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3de3de99 code=0x7ffc0000 [ 256.003181][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.031529][ T6808] netlink: 'syz.4.960': attribute type 24 has an invalid length. [ 256.059846][ T6808] netlink: 'syz.4.960': attribute type 1 has an invalid length. [ 256.092251][ T6808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.151414][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'. [ 256.163927][ T6815] netlink: 'syz.3.963': attribute type 2 has an invalid length. [ 256.346577][ T6829] FAULT_INJECTION: forcing a failure. [ 256.346577][ T6829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.376569][ T6830] loop2: detected capacity change from 0 to 512 [ 256.429483][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: syz.1.969 Not tainted syzkaller #0 PREEMPT(lazy) [ 256.429513][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 256.429607][ T6829] Call Trace: [ 256.429616][ T6829] [ 256.429626][ T6829] __dump_stack+0x1d/0x30 [ 256.429657][ T6829] dump_stack_lvl+0x95/0xd0 [ 256.429738][ T6829] dump_stack+0x15/0x1b [ 256.429763][ T6829] should_fail_ex+0x25e/0x270 [ 256.429805][ T6829] should_fail+0xb/0x20 [ 256.429836][ T6829] should_fail_usercopy+0x1a/0x20 [ 256.429878][ T6829] _copy_from_iter+0xcc/0xe70 [ 256.429921][ T6829] ? __alloc_skb+0x511/0x6f0 [ 256.429989][ T6829] ? __alloc_skb+0x205/0x6f0 [ 256.430052][ T6829] netlink_sendmsg+0x4a4/0x6f0 [ 256.430090][ T6829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.430125][ T6829] ____sys_sendmsg+0x532/0x580 [ 256.430244][ T6829] ___sys_sendmsg+0x195/0x1e0 [ 256.430309][ T6829] __x64_sys_sendmsg+0xd4/0x160 [ 256.430363][ T6829] x64_sys_call+0x194c/0x3020 [ 256.430392][ T6829] do_syscall_64+0x136/0x3c0 [ 256.430428][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.430463][ T6829] RIP: 0033:0x7f11c0d2de99 [ 256.430477][ T6829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.430494][ T6829] RSP: 002b:00007f11bf787028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.430529][ T6829] RAX: ffffffffffffffda RBX: 00007f11c0fb5fa0 RCX: 00007f11c0d2de99 [ 256.430544][ T6829] RDX: 0000000004000c00 RSI: 0000200000000240 RDI: 0000000000000003 [ 256.430559][ T6829] RBP: 00007f11bf787090 R08: 0000000000000000 R09: 0000000000000000 [ 256.430574][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.430589][ T6829] R13: 00007f11c0fb6038 R14: 00007f11c0fb5fa0 R15: 00007ffed5e12b78 [ 256.430647][ T6829] [ 256.662401][ T6835] loop3: detected capacity change from 0 to 1024 [ 256.672083][ T6835] EXT4-fs: Ignoring removed bh option [ 256.724922][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.745681][ T6835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.806887][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.999708][ T6872] netlink: 60 bytes leftover after parsing attributes in process `syz.3.977'. [ 257.034125][ T6872] netlink: 60 bytes leftover after parsing attributes in process `syz.3.977'. [ 257.281288][ T6880] netlink: 60 bytes leftover after parsing attributes in process `syz.3.977'. [ 257.448557][ T6882] netlink: 32 bytes leftover after parsing attributes in process `syz.3.983'. [ 258.086931][ T6891] loop0: detected capacity change from 0 to 512 [ 258.159506][ T6893] tun0: tun_chr_ioctl cmd 2147767506 [ 258.222222][ T6891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.380487][ T6891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.496115][ T6891] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.785243][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.950857][ T6915] loop0: detected capacity change from 0 to 512 [ 258.961595][ T6915] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.992: corrupted in-inode xattr: e_value size too large [ 258.975597][ T6915] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 258.976061][ T6915] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.992: couldn't read orphan inode 15 (err -117) [ 258.996943][ T6915] loop0: lost filesystem error report for type 5 error -117 [ 258.998242][ T6915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.214175][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.404660][ T6922] loop2: detected capacity change from 0 to 128 [ 260.133416][ T6926] cgroup: none used incorrectly [ 260.383278][ T6928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.996'. [ 260.587054][ T6924] loop0: detected capacity change from 0 to 128 [ 261.776963][ T6935] loop3: detected capacity change from 0 to 512 [ 261.793380][ T6933] loop1: detected capacity change from 0 to 512 [ 261.818610][ T6933] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 261.841763][ T6935] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 262.082290][ T6940] loop2: detected capacity change from 0 to 8192 [ 262.088901][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 262.088917][ T28] audit: type=1400 audit(2000000079.404:916): avc: denied { read append } for pid=6948 comm="syz.4.1001" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 262.128202][ T28] audit: type=1326 audit(2000000079.444:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.2.1000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f3de3de99 code=0x0 [ 262.397337][ T6962] xt_TPROXY: Can be used only with -p tcp or -p udp [ 262.423261][ T28] audit: type=1326 audit(2000000079.744:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6957 comm="syz.0.1003" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98a15de99 code=0x7ffc0000 [ 262.520350][ T28] audit: type=1326 audit(2000000079.744:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6957 comm="syz.0.1003" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98a15de99 code=0x7ffc0000 [ 262.614345][ T28] audit: type=1326 audit(2000000079.774:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6957 comm="syz.0.1003" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe98a15de99 code=0x7ffc0000 [ 262.711331][ T28] audit: type=1326 audit(2000000080.024:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6957 comm="syz.0.1003" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98a15de99 code=0x7ffc0000 [ 262.810395][ T28] audit: type=1326 audit(2000000080.034:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6957 comm="syz.0.1003" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98a15de99 code=0x7ffc0000 [ 263.011312][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1006'. [ 263.065170][ T6966] loop2: detected capacity change from 0 to 164 [ 263.125954][ T6966] Unable to read rock-ridge attributes [ 263.132176][ T6973] loop4: detected capacity change from 0 to 512 [ 263.159829][ T6973] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.1007: corrupted in-inode xattr: e_value size too large [ 263.174620][ T6973] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 263.177008][ T6970] loop0: detected capacity change from 0 to 8192 [ 263.177232][ T6973] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1007: couldn't read orphan inode 15 (err -117) [ 263.193089][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 263.193122][ C1] EXT4-fs (loop4): initial error at time 2000000080: ext4_iget_extra_inode:5180: inode 15 [ 263.193258][ C1] EXT4-fs (loop4): last error at time 2000000080: ext4_iget_extra_inode:5180: inode 15 [ 263.219589][ T6966] xt_TPROXY: Can be used only with -p tcp or -p udp [ 263.223852][ T6973] loop4: lost filesystem error report for type 5 error -117 [ 263.253783][ T6973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.282009][ T28] audit: type=1326 audit(2000000080.544:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.0.1005" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe98a15de99 code=0x0 [ 263.308130][ T6966] Unable to read rock-ridge attributes [ 263.309350][ T28] audit: type=1400 audit(2000000080.604:924): avc: denied { write } for pid=6972 comm="syz.4.1007" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.314262][ T6966] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 263.341075][ T28] audit: type=1400 audit(2000000080.664:925): avc: denied { write } for pid=6972 comm="syz.4.1007" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.353927][ T6966] Unable to read rock-ridge attributes [ 263.371820][ T6966] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 263.389055][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.407957][ T6978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1008'. [ 263.565136][ T6983] loop4: detected capacity change from 0 to 164 [ 263.583934][ T6983] Unable to read rock-ridge attributes [ 263.592613][ T6983] xt_TPROXY: Can be used only with -p tcp or -p udp [ 263.606964][ T6983] Unable to read rock-ridge attributes [ 263.613055][ T6983] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 263.621785][ T6983] Unable to read rock-ridge attributes [ 263.627725][ T6983] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 264.054200][ T5881] Bluetooth: hci1: command 0x1003 tx timeout [ 264.060254][ T5881] Bluetooth: hci0: command 0x1003 tx timeout [ 264.066410][ T4217] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 264.072645][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 264.187171][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 264.242522][ T6997] loop0: detected capacity change from 0 to 512 [ 264.261913][ T6997] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 264.307531][ T6997] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 1803188595: comm syz.0.1013: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 264.478208][ T6997] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.480579][ T6997] EXT4-fs (loop0): Remounting filesystem read-only [ 264.491881][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 264.491908][ C0] EXT4-fs (loop0): initial error at time 2000000081: ext4_map_blocks:791: inode 15: block 1803188595 [ 264.491947][ C0] EXT4-fs (loop0): last error at time 2000000081: ext4_map_blocks:791: inode 15: block 1803188595 [ 264.815336][ T7000] loop1: detected capacity change from 0 to 8192 [ 264.829957][ T6997] EXT4-fs (loop0): mount failed [ 266.255703][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'. [ 267.057759][ T7024] set_capacity_and_notify: 1 callbacks suppressed [ 267.057774][ T7024] loop3: detected capacity change from 0 to 764 [ 267.077050][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1020'. [ 267.087868][ T7022] loop0: detected capacity change from 0 to 512 [ 267.115296][ T7024] Symlink component flag not implemented [ 267.121247][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 267.121263][ T28] audit: type=1400 audit(2000000084.364:928): avc: denied { listen } for pid=7023 comm="syz.3.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 267.154640][ T7024] Symlink component flag not implemented (15) [ 267.219535][ T7022] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1019: corrupted in-inode xattr: e_value size too large [ 267.245455][ T7022] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.246159][ T7022] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1019: couldn't read orphan inode 15 (err -117) [ 267.255609][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 267.255643][ C1] EXT4-fs (loop0): initial error at time 2000000084: ext4_iget_extra_inode:5180: inode 15 [ 267.256179][ C1] EXT4-fs (loop0): last error at time 2000000084: ext4_iget_extra_inode:5180: inode 15 [ 267.341990][ T7022] loop0: lost filesystem error report for type 5 error -117 [ 267.352031][ T7022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.472586][ T28] audit: type=1400 audit(2000000084.734:929): avc: denied { write } for pid=7018 comm="syz.0.1019" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.530663][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.552473][ T28] audit: type=1400 audit(2000000084.784:930): avc: denied { write } for pid=7018 comm="syz.0.1019" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.624075][ T28] audit: type=1400 audit(2000000084.784:931): avc: denied { write } for pid=7018 comm="syz.0.1019" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.645986][ T7036] loop1: detected capacity change from 0 to 512 [ 267.649284][ T7032] loop2: detected capacity change from 0 to 8192 [ 267.753627][ T7036] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 267.793700][ T28] audit: type=1326 audit(2000000085.104:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.2.1022" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f3de3de99 code=0x0 [ 267.867788][ T7038] loop0: detected capacity change from 0 to 512 [ 267.873354][ T406] Bluetooth: hci0: Frame reassembly failed (-84) [ 267.892053][ T7038] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 267.908698][ T30] Bluetooth: hci1: Frame reassembly failed (-84) [ 268.033105][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'. [ 268.050952][ T7055] loop4: detected capacity change from 0 to 512 [ 268.058691][ T7055] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 268.070038][ T7055] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 1803188595: comm syz.4.1030: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 268.085943][ T7055] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 268.086188][ T7055] EXT4-fs (loop4): Remounting filesystem read-only [ 268.095481][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 268.095503][ C1] EXT4-fs (loop4): initial error at time 2000000085: ext4_map_blocks:791: inode 15: block 1803188595 [ 268.095548][ C1] EXT4-fs (loop4): last error at time 2000000085: ext4_map_blocks:791: inode 15: block 1803188595 [ 268.131148][ T7055] EXT4-fs (loop4): mount failed [ 268.252645][ T7065] loop4: detected capacity change from 0 to 164 [ 268.270852][ T7065] Unable to read rock-ridge attributes [ 268.283483][ T7065] xt_TPROXY: Can be used only with -p tcp or -p udp [ 268.297842][ T7065] Unable to read rock-ridge attributes [ 268.303971][ T7065] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 268.314557][ T7065] Unable to read rock-ridge attributes [ 268.320825][ T7065] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 268.361591][ T7067] loop2: detected capacity change from 0 to 512 [ 268.369063][ T7067] ================================================================== [ 268.377190][ T7067] BUG: KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event [ 268.386005][ T7067] [ 268.388377][ T7067] write to 0xffff88811b757724 of 4 bytes by task 3290 on cpu 1: [ 268.396030][ T7067] fsnotify_detach_mark+0xb9/0x160 [ 268.401169][ T7067] fsnotify_destroy_mark+0x6a/0x140 [ 268.406438][ T7067] __se_sys_inotify_rm_watch+0xe8/0x170 [ 268.412000][ T7067] __x64_sys_inotify_rm_watch+0x31/0x40 [ 268.417564][ T7067] x64_sys_call+0xc88/0x3020 [ 268.422186][ T7067] do_syscall_64+0x136/0x3c0 [ 268.426802][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.432713][ T7067] [ 268.435051][ T7067] read to 0xffff88811b757724 of 4 bytes by task 7067 on cpu 0: [ 268.442608][ T7067] inotify_handle_inode_event+0x34c/0x3c0 [ 268.448368][ T7067] fsnotify_handle_inode_event+0x1d3/0x230 [ 268.454221][ T7067] fsnotify+0x16ae/0x1860 [ 268.458560][ T7067] __fsnotify_parent+0x2f8/0x3a0 [ 268.463508][ T7067] __fput+0x1e2/0x630 [ 268.467509][ T7067] fput_close_sync+0xad/0x190 [ 268.472212][ T7067] __x64_sys_close+0x55/0xf0 [ 268.476820][ T7067] x64_sys_call+0x275d/0x3020 [ 268.481525][ T7067] do_syscall_64+0x136/0x3c0 [ 268.486158][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.492092][ T7067] [ 268.494436][ T7067] value changed: 0x00000003 -> 0x00000000 [ 268.500161][ T7067] [ 268.502489][ T7067] Reported by Kernel Concurrency Sanitizer on: [ 268.508642][ T7067] CPU: 0 UID: 0 PID: 7067 Comm: syz.2.1033 Not tainted syzkaller #0 PREEMPT(lazy) [ 268.517972][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 268.528038][ T7067] ================================================================== [ 268.546244][ T7067] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1033: corrupted in-inode xattr: e_value size too large [ 268.560743][ T7067] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 268.561134][ T7067] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1033: couldn't read orphan inode 15 (err -117) [ 268.570592][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 268.570622][ C0] EXT4-fs (loop2): initial error at time 2000000085: ext4_iget_extra_inode:5180: inode 15 [ 268.570849][ C0] EXT4-fs (loop2): last error at time 2000000085: ext4_iget_extra_inode:5180: inode 15 [ 268.609860][ T7067] loop2: lost filesystem error report for type 5 error -117 [ 268.612095][ T7067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.634458][ T28] audit: type=1400 audit(2000000085.964:933): avc: denied { write } for pid=7066 comm="syz.2.1033" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.656350][ T28] audit: type=1400 audit(2000000085.964:934): avc: denied { write } for pid=7066 comm="syz.2.1033" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.678145][ T28] audit: type=1400 audit(2000000085.964:935): avc: denied { write } for pid=7066 comm="syz.2.1033" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.700901][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.877229][ T4217] Bluetooth: hci1: command 0x1003 tx timeout [ 269.877232][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 269.877382][ T3651] Bluetooth: hci1: Opcode 0x1003 failed: -110