last executing test programs: 2m1.904979144s ago: executing program 3 (id=580): linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 2m1.82314522s ago: executing program 3 (id=583): r0 = socket(0x3b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x5, 0x1, 0x402) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = gettid() tkill(r2, 0x1b) (async) tkill(r2, 0x1b) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000340)={[{@grpquota}, {@nomblk_io_submit}, {@i_version}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x1, 0xbb2, &(0x7f0000002700)="$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") (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000340)={[{@grpquota}, {@nomblk_io_submit}, {@i_version}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x1, 0xbb2, &(0x7f0000002700)="$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") accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0, 0x80000) r3 = socket(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) write$binfmt_format(r5, &(0x7f0000006240)='-1\x00', 0x3) connect$pppl2tp(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x2, 0x1, 0x1, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r7, &(0x7f0000000340)=""/170, 0xaa) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, 0x0, 0x8000) read(r1, &(0x7f0000000500)=""/219, 0xdb) 2m1.481688933s ago: executing program 3 (id=585): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000240)={{0x1, 0x2, 0x9, 0x3, 0x8}, 0x4, 0x6}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) socket(0x1d, 0x2, 0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x764}, 0x3c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000500)={0xffffffffffffffff}) tee(r3, 0xffffffffffffffff, 0xf3a, 0x4) mq_open(&(0x7f0000000240)='$(n{\x00', 0x40, 0x8, &(0x7f0000000280)={0x4ff, 0xfffffffffffffff7, 0x9, 0x7}) 2m0.767141352s ago: executing program 3 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000003c0)={'team0\x00', @remote}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000001c0)='./file0/file0/../file0\x00', 0x2) 2m0.563236866s ago: executing program 3 (id=593): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x300, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 2m0.432234345s ago: executing program 3 (id=596): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x8000, &(0x7f0000000000)={[{@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x8800000) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x86, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xfb) fstatfs(0xffffffffffffffff, 0x0) 2m0.353761111s ago: executing program 32 (id=596): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x8000, &(0x7f0000000000)={[{@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x8800000) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x86, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xfb) fstatfs(0xffffffffffffffff, 0x0) 1m54.403053198s ago: executing program 5 (id=719): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) 1m49.675566111s ago: executing program 5 (id=767): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) 1m49.354182493s ago: executing program 5 (id=772): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = socket(0xa, 0x801, 0x0) getsockopt(r1, 0x29, 0x1e, 0x0, &(0x7f0000001ffc)) 1m48.507448751s ago: executing program 5 (id=776): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") symlinkat(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1000000000000001, 0xec, 0x2, 0x8, 0x0, 0x1, 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) fcntl$lock(r1, 0x7, &(0x7f0000000200)={0x2, 0x1, 0x2, 0xfffffffffffff001, r4}) r5 = socket$unix(0x1, 0x2, 0x0) getpgrp(r4) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x551d1c4726df0ebd, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x2000, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0x3) chdir(&(0x7f00000001c0)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x57e75e3eb2f42f13, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 1m48.347382882s ago: executing program 5 (id=781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x4010) r2 = dup(r0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0x40080) write$vga_arbiter(r2, &(0x7f0000000380), 0xf) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=r2, 0x10, 0x0, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r2, r2, 0x32, 0x2000, 0x0, @value=r2, @void, @void, @void, r5}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) ftruncate(r6, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000740)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@ifindex, r4, 0x25, 0x2018, 0x0, @value=r2, @void, @void, @void, r5}, 0x20) 1m48.112084328s ago: executing program 5 (id=783): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001ec0)={@val={0x6f01, 0x8864}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv6=@dccp_packet={0x1, 0x6, "d5717c", 0x10, 0x21, 0x0, @local, @empty, {[], {{0x4e21, 0x4e22, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, "b28147", 0x5, 'cp%'}}}}}}, 0x46) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) unshare(0x6a040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, 0x0, 0xc0c4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf38779041ee735f7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) prlimit64(r5, 0x7, &(0x7f0000000080)={0xfffffffffffffeff, 0x776a}, &(0x7f00000001c0)) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800010600000000000000001c140000fe"], 0x1c}}, 0x0) r10 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) 1m48.035555643s ago: executing program 33 (id=783): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001ec0)={@val={0x6f01, 0x8864}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv6=@dccp_packet={0x1, 0x6, "d5717c", 0x10, 0x21, 0x0, @local, @empty, {[], {{0x4e21, 0x4e22, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, "b28147", 0x5, 'cp%'}}}}}}, 0x46) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) unshare(0x6a040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, 0x0, 0xc0c4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf38779041ee735f7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) prlimit64(r5, 0x7, &(0x7f0000000080)={0xfffffffffffffeff, 0x776a}, &(0x7f00000001c0)) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800010600000000000000001c140000fe"], 0x1c}}, 0x0) r10 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) 1m40.314020251s ago: executing program 2 (id=856): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r4 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) connect$can_bcm(r4, &(0x7f0000000100)={0x1d, r2}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4044040) 1m40.18185927s ago: executing program 2 (id=858): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a31000000"], 0x118}, 0x1, 0x0, 0x0, 0x24000104}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 1m40.18132442s ago: executing program 2 (id=859): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x40c, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xbc69, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) write(r1, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) r2 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x41, 0x2003206, @vifc_lcl_ifindex, @private=0xa010104}, 0x10) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000040)) r6 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80800) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x1a) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r7, &(0x7f0000000040)={0x1a, 0x302, 0x40, 0xfd, 0x0, 0x4, @local}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1m38.792356055s ago: executing program 2 (id=868): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0500000000ff030000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) r2 = io_uring_setup(0x5111, &(0x7f00000003c0)={0x0, 0xbab9, 0x80, 0x82, 0x2f9}) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000959000/0x1000)=nil, 0x1000, 0x5000000, 0x11, 0xffffffffffffffff, 0x94d9e000) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$sg(&(0x7f00000000c0), 0x8000000000000000, 0x4000) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f00000001c0)=0xb2) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd0900008500"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000005c0), 0x6c, r8}, 0x38) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000410040000000000100000000000ffff2000000000000000"], 0x24, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x1a10c1, 0x10) 1m37.018773236s ago: executing program 2 (id=879): syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@remote, @random="c69227293ebc", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, {[@noop]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m35.971197268s ago: executing program 2 (id=883): r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x6) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, r1, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x2c9, &(0x7f00000005c0)="$eJzs3b9rJFUcAPDvbGYne6TYFFYiOMUVNobkWgtzSAQxlbKFP0APLwdHdjlIYOFUXK66v8DCwv/Dzl6x8T8QLCztPCTwZGb2dveyexs35+YkfD7V4/u+33nv7bxkA8O8fP7a4Pjug9N7j77+LTqdLFr7sR9PstiOVjyVxgIAuBaepBR/Xur7PW+ta04AwHrNfP+3n5OyOR96e93TAgDW6MOPPn7/9uHhwQdl2Yn4+fGwl0XE4PGw1/Tfvhf3ox9HsRvd2Jg+C0ipab/73uFB5GVlO24ORsNeVTn47JdJahF1/V50Y3tx/V7ZmKkfDfP6L48si7i/X03kVnTjlbn6qv/g1oL66BXxRme8yGr8nejGr1/Eg+jH3fqZRl2/WY3/TRHlO+nbv776pEqu6rPRsLdZ502ljau+NwAAAAAAAAAAAAAAAAAAAAAAXF875cR23BxUoeb8nd7GWd2/80x/fb5Oq+5v6rOIom7sRjfOpufzjFJ835zvE/luWZYpa/In5/vcyOPVPPKXtnAAAAAAAAAAAAAAAAAAAAD4Hzl9+OXxnX7/6OQ/aYxf8p+81n/Z6+zPRF6P5cmbK40VG+P0aq7nc/Z++nQwiVSLuMzkh+0yYtmc23ORG9V8Lr7y3ymllGURL3ab2tE/yufWvlpja3lO9QH/+N3Wm8d3sos+w87TG/fDbFcRJ6cPz93TyJYPevZMJK20/YolOcV4x/yr62y94A/RW783g40j2QWraM9E2uNGPG/7dVbaz1f3OwgAAAAAAAAAAAAAAAAAAGhMX/pd0PloaWlrbZMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCs2/f//00bMRc41RvFHXbw4J6U0mkSKODl92WsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+vsnAAD//7NtasQ=") sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6020400) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r2, 0x2000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r3) sendmsg$rds(r0, &(0x7f00000018c0)={&(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xf}], 0x18, 0x10}, 0x414) 1m35.948850549s ago: executing program 34 (id=883): r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x6) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, r1, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x2c9, &(0x7f00000005c0)="$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") sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6020400) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r2, 0x2000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r3) sendmsg$rds(r0, &(0x7f00000018c0)={&(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xf}], 0x18, 0x10}, 0x414) 1m7.025937797s ago: executing program 1 (id=1179): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x292ca90c, 0xffffffffffffb2e9}, 0x119b10, 0x8, 0xe, 0x9, 0x8, 0x6, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0xe4ff}}}}]}]}, 0x78}}, 0x0) personality(0x400000a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x5, &(0x7f0000000040)=[{0x9, 0x87, 0x7, 0x28000000}, {0x5, 0x9, 0x32, 0x2}, {0x8a, 0x5, 0x4, 0x4}, {0xb, 0x0, 0x7, 0xcf6b}, {0x648d, 0xd, 0x7, 0x81}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000005, 0x13, 0xffffffffffffffff, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, r2, 0x2, 0x3}, 0x50) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1m6.910041405s ago: executing program 1 (id=1183): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m6.84083224s ago: executing program 1 (id=1185): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000002010500000000000000000103000003"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) 1m2.59371169s ago: executing program 1 (id=1247): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r1, &(0x7f00000002c0), 0x15) splice(r0, 0x0, r2, 0x0, 0x100, 0x0) r3 = getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r4 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f00000004c0)=[{&(0x7f0000000400)="11", 0x1}], 0x1, 0xa001, 0x8, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) writev(r5, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) r6 = syz_pidfd_open(r3, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x2, 0x80000}, 0x20) socket(0x10, 0x803, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x22800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r9, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x7ba, r10, 0x0, 0x0, 0x7}]) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f"], 0x1, 0x30e, &(0x7f00000006c0)="$eJzs3U1rE1sYwPFn8tIk7e1tF5fL5aJwqCCKdGgD7lxYpAUxoLSNYAVhaqcaMk1KJhQiYisIbl276MKlCCKKGzcibrvxE6h11013dlEcmcxL80aaVtL48v8tkqd5zpNzMuekpafNzNa5R0v5xaSIaBJS7k1Eov6Xa3L6/fqn4zPv/vLTampidjytVERErt99NvK2PHD11d9vErIxfGNrO/1l49isyLfZ2xJROVsVHEcZar5YLLtdqIWcndeVumKZhm2qXME2S2U/b8xbplq0isvLFWUUFgb7l0umbSujUFF5s6LKRVUuVZRxy8gVlK7rarBfICLDYRRpymntCrNPdxxHth3HcRJr4jhOi9ZrQRD37xM/Nlj8TBrmv23bpsUR7ebIcBR2nFjH84/fj/f+//y4s/l3Vo9oWDgiM9fmLk1kMpPTSiVFlh6uZFey3r2X/zggObHElPXpM3O74q4Rn2ju7dTFzOSYqhqWk0urfv3qStb74TCxWK3fDIpq6iWoH/fqVX19XPr36k1Jy5D8Iy3r00G9RGrq++TUiZp6XYbkw00piiUL7kquqb83rtSFy5mG/lPVdjXu92B6AAAAAAAAAAA4FF2F9vbvtfBPvSldT1T/4yPMp9yH3XZeg3B/fUyGZLf1/vxYy/39mPwf6+ELBwAAAADgD2JX7uQNyzJL3QmiT1JtuojrIm4g8mDEHUzbJ/zXH3FnvfeJSHMq2r6LuiB11uvv+bQ/MOnmgQqC5AFG2CIIPqyRN3ZfBKmUtGocOdACGO1reeSTJU26un7qAumksSQPt7ATDS8w3nF5NOzrP7uixZraONr+z+MYVtx7RMIZbF91/kBvh9rAP0DexCUbD9Toppe12nzT+Bpu8QEAAAD4hdT84gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHok/Py/5l/pv5OziAXn7a9PiX+J+OZTsu1dJ/7l6x69TgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYz/cAAAD//19bsJY=") close_range(r11, 0xffffffffffffffff, 0x0) 1m1.028559767s ago: executing program 1 (id=1258): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, &(0x7f0000000000)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000100), 0xfffffd79) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={r7, 0x80000000}, &(0x7f0000000200)=0xc) ioctl$VT_DISALLOCATE(r2, 0x5608) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a01010200000000000000000000000006000000040300"], 0xfc}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 1m0.675532811s ago: executing program 1 (id=1265): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x802, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffd, 0x10000, 0xfffffffd, 0x0, 0x0, 0xdfb}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000037010002050000", @ANYRES32=r2, @ANYBLOB="31a0bcb8fd2c0c666c657200"], 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) sendmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)="caded5882db912f5d2174a52d7ab34e217ceca666c94298820bc7807a2f161a358c7b540d0ff86309da1153942009646ea6d7f553bf81d0850943695487633cbea2597305d3356dce3e1c15248bda9a397e4feaae124f49f9d525b46e0874c88d8d484450e19ecb30aede90aa64b72db619bd17e67d5cbf1ecef0a00c40756b8af7d", 0x82}, {&(0x7f00000005c0)="93659fb1df5fb3b30700cd30ca21c27312025a895b7e8d9c8b91a603446466822572aebabc91f6e6393476db6a010512827a3db245cb503bf420477074c4d0e3f7884dce9eb884cdea588ef137e89d23d2d5e67a46818db6fd5667e38bf5a7c6ec7bf43cbb2a9f87f90451f89311d887e80221d14c6ed170c31ed6990837553902bf3d7dd80cf82ba6322eb44828ade4f5006d9fc1a6c548", 0x98}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x138}}], 0x1, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000400), &(0x7f0000000440)=r6}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000006, 0x7, &(0x7f0000000000)=0x1) 1m0.675337201s ago: executing program 35 (id=1265): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x802, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffd, 0x10000, 0xfffffffd, 0x0, 0x0, 0xdfb}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000037010002050000", @ANYRES32=r2, @ANYBLOB="31a0bcb8fd2c0c666c657200"], 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) sendmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)="caded5882db912f5d2174a52d7ab34e217ceca666c94298820bc7807a2f161a358c7b540d0ff86309da1153942009646ea6d7f553bf81d0850943695487633cbea2597305d3356dce3e1c15248bda9a397e4feaae124f49f9d525b46e0874c88d8d484450e19ecb30aede90aa64b72db619bd17e67d5cbf1ecef0a00c40756b8af7d", 0x82}, {&(0x7f00000005c0)="93659fb1df5fb3b30700cd30ca21c27312025a895b7e8d9c8b91a603446466822572aebabc91f6e6393476db6a010512827a3db245cb503bf420477074c4d0e3f7884dce9eb884cdea588ef137e89d23d2d5e67a46818db6fd5667e38bf5a7c6ec7bf43cbb2a9f87f90451f89311d887e80221d14c6ed170c31ed6990837553902bf3d7dd80cf82ba6322eb44828ade4f5006d9fc1a6c548", 0x98}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x138}}], 0x1, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000400), &(0x7f0000000440)=r6}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000006, 0x7, &(0x7f0000000000)=0x1) 5.56511541s ago: executing program 7 (id=1880): r0 = io_uring_setup(0x758a, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x169, &(0x7f0000000ac0)="$eJzs3L+KE1EUB+Az7uwatXBrsRiwsQrqEyjLCuKAoqTQSmG12UjANKNVHsUXFCRVuivJaP6RgAHjuJnva3LIjxvObe7hhmTe3f10eTEYfhy8HEcnyyJ/HEVMsjiNa3EUtVEAAIdkklL8SCmlPCK+RUqp6Y4AgH2bz//ro7hh/gNAK5j/ANA+5j8AtM/rN2+fPynL81dF0Yn4Pqp6VW/2elbnT5+V5w+KmdPFqnFV9Y7m+cM6L1bz47j5K380S5d/RTjNT+L+vTqfpmcvyrX1t+Ji77sHAACAdugWcxvv993utryulr4fmN7fby/yPO7k/3QrAMAfGn75evm+3//w+YoXv59VsOvyTkQ03rxilyL7P9o4sOI4IlbeafhgAvZucQw03QkAAAAAAAAAAAAAALDNX/0X0cnmD2x6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDuZwAAAP//DbtJFA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 5.377666202s ago: executing program 7 (id=1881): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x20, 0x20, 0x2, 0x0, {{0x11, 0x4, 0x3, 0x2, 0x44, 0x67, 0x0, 0x8, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x1c, 0xa8, 0x1, 0xa, [{@empty, 0x6}, {@broadcast, 0x7}, {@private=0xa010101, 0xe1f4}]}, @timestamp={0x44, 0x10, 0xb7, 0x0, 0x5, [0x70, 0x800, 0x1]}, @end, @noop]}}}}}) clock_nanosleep(0x5, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x6, 0x0}, 0x8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000140)={0x1ff, 0x4}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x6b396000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x14, 0x12, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0xcf, &(0x7f00000001c0)=""/207, 0x41000, 0x1, '\x00', r1, @lirc_mode2, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x4, 0x1}, 0x10, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) 5.223098803s ago: executing program 7 (id=1882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.222814203s ago: executing program 7 (id=1883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x2040000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)='p', 0x8200, 0x600}]) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.686465029s ago: executing program 7 (id=1890): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 3.633785161s ago: executing program 7 (id=1903): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x1, 0x1017b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=") io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, 0x0, 0xfe) 3.561152337s ago: executing program 36 (id=1903): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x1, 0x1017b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, 0x0, 0xfe) 3.083488939s ago: executing program 6 (id=1911): r0 = io_uring_setup(0x758a, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3, 0x213}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x169, &(0x7f0000000ac0)="$eJzs3L+KE1EUB+Az7uwatXBrsRiwsQrqEyjLCuKAoqTQSmG12UjANKNVHsUXFCRVuivJaP6RgAHjuJnva3LIjxvObe7hhmTe3f10eTEYfhy8HEcnyyJ/HEVMsjiNa3EUtVEAAIdkklL8SCmlPCK+RUqp6Y4AgH2bz//ro7hh/gNAK5j/ANA+5j8AtM/rN2+fPynL81dF0Yn4Pqp6VW/2elbnT5+V5w+KmdPFqnFV9Y7m+cM6L1bz47j5K380S5d/RTjNT+L+vTqfpmcvyrX1t+Ji77sHAACAdugWcxvv993utryulr4fmN7fby/yPO7k/3QrAMAfGn75evm+3//w+YoXv59VsOvyTkQ03rxilyL7P9o4sOI4IlbeafhgAvZucQw03QkAAAAAAAAAAAAAALDNX/0X0cnmD2x6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDuZwAAAP//DbtJFA==") r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) writev(r1, &(0x7f0000000c00)=[{&(0x7f00000001c0)="856238", 0x3}, {0x0, 0x8008}], 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) close_range(r0, 0xffffffffffffffff, 0x0) 2.986415876s ago: executing program 6 (id=1912): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0xe, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x200405, 0x8, 0xffff, 0x91ba, 0xb, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0xa, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x40009, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x200002, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0x10001, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x1, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0x5, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x1, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0x9, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xe430, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xfffffffe, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x8, 0x4, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x0, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x9, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x3, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0xfffffffc, 0x3, 0xfffb, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x0, 0x9, 0x6, 0x80, 0x6, 0xfff, 0xfffffffd, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xd, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0xff, 0x72, 0x80, 0x1000, 0xbc, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0x9, 0xffffff00, 0x8, 0xf, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x9e, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0x8, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (fail_nth: 2) 2.873185813s ago: executing program 8 (id=1913): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 2.873034673s ago: executing program 6 (id=1914): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xffffb9e3, 0x5}) perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x49, 0x5, 0x3, 0x1000000, 0x6c, 0x104, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x8}, 0x8004, 0x9, 0x7, 0x1, 0x3, 0x81, 0x7, 0x0, 0x40, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 2.836879836s ago: executing program 8 (id=1915): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x3f00, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) open$dir(0x0, 0x4000, 0x1a1) creat(&(0x7f0000000240)='./file0\x00', 0x160) r4 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x78e22799f4a46f40) read$watch_queue(r5, &(0x7f00000001c0)=""/178, 0xb2) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.77909175s ago: executing program 6 (id=1916): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="d8d86e3762", @ANYRES32, @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) signalfd4(r3, &(0x7f0000000100)={[0x8]}, 0x8, 0x80800) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x53}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) 1.878795831s ago: executing program 4 (id=1918): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a400"], 0x118}, 0x1, 0x0, 0x0, 0x24000104}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 1.830943215s ago: executing program 4 (id=1919): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.776289218s ago: executing program 8 (id=1920): r0 = socket$inet6(0xa, 0x2, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) read(r1, &(0x7f0000000400)=""/214, 0xd6) 1.601110621s ago: executing program 8 (id=1921): r0 = io_uring_setup(0x758a, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3, 0x213}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x169, &(0x7f0000000ac0)="$eJzs3L+KE1EUB+Az7uwatXBrsRiwsQrqEyjLCuKAoqTQSmG12UjANKNVHsUXFCRVuivJaP6RgAHjuJnva3LIjxvObe7hhmTe3f10eTEYfhy8HEcnyyJ/HEVMsjiNa3EUtVEAAIdkklL8SCmlPCK+RUqp6Y4AgH2bz//ro7hh/gNAK5j/ANA+5j8AtM/rN2+fPynL81dF0Yn4Pqp6VW/2elbnT5+V5w+KmdPFqnFV9Y7m+cM6L1bz47j5K380S5d/RTjNT+L+vTqfpmcvyrX1t+Ji77sHAACAdugWcxvv993utryulr4fmN7fby/yPO7k/3QrAMAfGn75evm+3//w+YoXv59VsOvyTkQ03rxilyL7P9o4sOI4IlbeafhgAvZucQw03QkAAAAAAAAAAAAAALDNX/0X0cnmD2x6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDuZwAAAP//DbtJFA==") r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) writev(r1, &(0x7f0000000c00)=[{&(0x7f00000001c0)="856238", 0x3}, {0x0, 0x8008}], 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) close_range(r0, 0xffffffffffffffff, 0x0) 1.535865415s ago: executing program 8 (id=1923): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000010000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000620000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket(0x1c, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newqdisc={0x148, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "119ca8d51d85df964e173b70d2a9bc976c4592482783a0db6825d6cd86354377d626b1157ebc69714efbf12fddb86ac84012df53c341814b0f72cfa8b071b7bc99678c021131ea40768ed0b4f3c2eb0ecc1c6d975892a2088191f521a73914cb6575859f6544c9bbd2003840802fbe256bc972314130b2961af8783691799ce561d11f8b5cf61075f850825d2306172fe7063d2366634fea641c570d773de706a81ae386048ec46dd4be846fc32981115b672fcfa7a09101344f7bbe8576d2a2235c6595d65967679a172f5997332347ee68d5239949b6a034fb1313c4e03ba6eba727891635d241967eb619126bcccf1bf88bed50151278790ce92ff6259d30"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x3, 0x9, 0x16, 0x20, 0x6}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x44004}, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) (async) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000300)={0xc0004014}) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x6, 0x1, 0x2, 0x4, 0x53, 0xe}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r9, &(0x7f0000000000)=@abs={0x27, 0x0, 0x2}, 0x6e) (async) ppoll(&(0x7f0000001540)=[{r7, 0x2a3}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) 1.287510352s ago: executing program 8 (id=1924): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) accept(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a010102003ea5694796ef5060890f5102800c00028005000100000000000800074000"/115], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000002010500000000000000000103000003"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) chroot(&(0x7f0000000180)='./file0\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r6, 0x0, 0x0}, 0x20) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000fed000/0x10000)=nil) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) 1.207591538s ago: executing program 6 (id=1927): getresuid(&(0x7f0000000f80), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r1, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b4bd000000000000950000000000001da81a452800"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_notify(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x0, 0x201}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000001280)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000380)=@other={'lock', ' ', 'mem'}, 0x9) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000100)='>', 0x1) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) splice(r5, 0x0, r8, 0x0, 0x25a5, 0x0) 816.234824ms ago: executing program 4 (id=1930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f0061105800000000007b5c00000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xaf}, @NFACCT_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0xc000) 814.250884ms ago: executing program 0 (id=1931): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a400"], 0x118}, 0x1, 0x0, 0x0, 0x24000104}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 723.218041ms ago: executing program 4 (id=1932): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18b7a60000000000000000000000000085000000750000003801000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703a3000000200000850000006d138c9797cfdd2c75dc107a1f3ba6a29369a8"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0xc}, 0x24, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) syz_pidfd_open(r0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x8e382) sendfile(r4, r4, 0x0, 0x24002de8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4603000702810000000000000003003e00f9ffffffd80100000000000040000000000000008b00000000000000330d0000050038000300"], 0xe8) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x5}, 0x106200, 0x10004, 0x20da, 0x9, 0xfffffffffffffff8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x417}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) 722.791211ms ago: executing program 0 (id=1933): r0 = io_uring_setup(0x758a, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3, 0x213}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x169, &(0x7f0000000ac0)="$eJzs3L+KE1EUB+Az7uwatXBrsRiwsQrqEyjLCuKAoqTQSmG12UjANKNVHsUXFCRVuivJaP6RgAHjuJnva3LIjxvObe7hhmTe3f10eTEYfhy8HEcnyyJ/HEVMsjiNa3EUtVEAAIdkklL8SCmlPCK+RUqp6Y4AgH2bz//ro7hh/gNAK5j/ANA+5j8AtM/rN2+fPynL81dF0Yn4Pqp6VW/2elbnT5+V5w+KmdPFqnFV9Y7m+cM6L1bz47j5K380S5d/RTjNT+L+vTqfpmcvyrX1t+Ji77sHAACAdugWcxvv993utryulr4fmN7fby/yPO7k/3QrAMAfGn75evm+3//w+YoXv59VsOvyTkQ03rxilyL7P9o4sOI4IlbeafhgAvZucQw03QkAAAAAAAAAAAAAALDNX/0X0cnmD2x6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDuZwAAAP//DbtJFA==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) writev(r1, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) close_range(r0, 0xffffffffffffffff, 0x0) 545.714152ms ago: executing program 4 (id=1934): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000640), 0x1, 0x5d7, &(0x7f0000000680)="$eJzs3W2IHGcdAPD/7t6l5hJNK7Waapur1Tb2ZS93V4KpBclHbVNqXz4ZiUeyuYTby8a7DfauFq4UoYKRUP2knxQEFT9EBAXxQ0Gs+Enwm1IqWEQJhGIpikY9mdmZuOft3fZ6L6M7vx/M3TPPzOZ5Zv/8Z2eePDsXQGmNJj8qEXsj4uWI2NdZXbnDaOfXpcnLZ5KlEsvLT7xeSfd7dvLymXzX/HV7kh/ViPclv34esWd4dbvzC4szU81mYy5bH2vPnh+bX1i8/+zs1HRjunFuYnL88KGJw+OHj2zZsX73mRc/+eozj1y7eHXk26/sP/DXpL97s23dx7FVRmM0e0+G44PdGyoRH9/qxgpSi4ihiHhP0R1hw47/+stP5fEbTvN/X9TStYiRyeNv7IuLD3XvXy2qo8C2WE6ttbW2DAyyShTdA6AY+Sd9cv+bLzt17TEzKDfB/8euHu3cAD6bje1cuh7/oev3e8PbdH9/4E8Ro9G+5/In7vhissQ2jcOwtqXnIh2oW53/lXRs7MZsvzsj4mBEfCgiPhwRd0XE3Zts+8nPJPH/3Ve768R/Z73V+H8kIuoRcU9E3BsR90XE/Zts+5ZjSfz3fLa7TvzL49ZPFd0DivSrF4ruAen5/9DQUK/z/2bH++/os305/X/Fpde66/L2f7nJtvnf9/gTRfeAIj16uOgesLNqK9a+8XphHSHz0tHOzdzqz/9q3NK1X1J+b+dWMfYn1+4R8f6I+EBE3BYRt0fEgXw+0Vv0hYeT/euN7rrV93/VK5s5PtZ39WjEQ11zuy51xT9zYy1be2c6HjBcOX222TgUEe9Kx4SGb0jWx9dp40tLP3u4V/33b0vi/7FH8/G/ZEnaz8cCs35cGbph5etOTbWnNnvcdFx9LuLWoV7xr2QzgTrz+pYjYuxttvH8wR/8olf9Rx9P4n/XfevHn+20/M3OOG6v+Ocq68/PHEvPB2P5WWG15+Pmi73qH7uWxP+134p/cZL8H1k//un5//p83fmNtzF06cpXetbPJvH/w0/fzvl/V+XJtIO7srqnp9rtufGIXZVHKtmUxv/UT2y8z4Mqfz/y9yuJ/8E7e3/+vzt7TfKGJpn9z4j4V0T8LSL+HhHXIuIfEfHniHhjnTZ/8uKDP+5VP/lUEv8/viz/i5PE/1Sf/K+syP/Vhd2x5qa08PXbj3y+V9vf+VYS/5F6//x/IO3MwazG9V9/64RjRaHofgIAAAAAAACwNarpM/Aq1fr1crVar3ee4XdzjFSbrfn2vadbF86diuz7oMPVfKbXvq75oOPZd0Xz9Yn/Wp+MiJsi4oXa7nS9frLVPFX0wUNJ7Y149YefO7lrzxr5n3ilFrG76I4CWy7J/9Nfqy0l5TdrRfcG2ElJ/n/vzdn0e1nyH8pF/sPgGNrg/vIfykv+Q3nJfygv+Q/lJf+hvOQ/lJf8h/Lqzn+gnB47dixZlvPnfp5rTZ+dOXP+yMSh+uyFk/WTrbnz9elWazr9xs5s/3+v2WqdH38gLjw91m7Mt8fmFxZPzLYunGufSJ8bfaIxvAPHBPT3l99/+kc3HXjpN5WIWHpwd7pE1zO15SoMNrf+UF4bnTcMDA7X+EClz/Z3rLXh+Nb3BdgZ/f7Gv/sDGFx37zf+D2Vl/B/Ky/U9lJdrfMD4P5RPv/F/YHA15uYXFmemms1VhaJ7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQTvMLizNTzWZjTkFBoXSFfwcAAP//nMdHRQ==") ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x810406, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000009a008500000086000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4cad0a2e4f9460b7f0300b26e340000004ed0b9cac9dba35c947a81863d60dfe8b3fc9292898cf753b90613ca8f9dc12624fb09b16685300620598b8cbd99a2e73716d630bed6f09cc194cc1c3c83987b376adf7017e0611814f29cb0245c75a89e5f8d6468fdefd744cee48f8040", @ANYBLOB], 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c090}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r8, 0x0, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @local, 0x8}, 0x1c) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6}, {0x27}}, [@printk={@lli, {}, {0x5}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x25}}], {{0x4, 0x1, 0x9, 0x3, 0x2}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') 440.46732ms ago: executing program 0 (id=1935): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x8000, 0x0) (fail_nth: 14) 313.715519ms ago: executing program 0 (id=1936): r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r1, 0xf5f) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000002400)={&(0x7f0000001340)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002380), 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES8=r2, @ANYRES64=r2], 0x38, 0x20000000}, 0x4044) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 187.487627ms ago: executing program 0 (id=1937): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01072b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 183.416797ms ago: executing program 0 (id=1938): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x2, 0x1}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x7fd, @mcast2, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x17, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000080)='\x00', 0x539800, &(0x7f00000000c0)={@_ha_fsid={[0xfff, 0x40000008]}, {0x100, 0xfffa, 0x4, 0x6}}, 0x8001, &(0x7f0000000140), &(0x7f0000000180)=0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="89e7ee0c7cdad9b4b47380c988cafb2205eaa7d212830e6b33fd4a6ea4280455727849e596", 0x25}, {&(0x7f00000006c0)="c5b58820f5", 0x5}], 0x2) 20.156578ms ago: executing program 6 (id=1939): ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x20) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) getdents64(r0, &(0x7f0000000780)=""/166, 0xa6) 0s ago: executing program 4 (id=1940): r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00') epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x86) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.072194][ T28] audit: type=1400 audit(1775329043.582:3339): avc: denied { ioctl } for pid=8496 comm="syz.0.1452" path="socket:[22026]" dev="sockfs" ino=22026 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.123838][ T8508] FAULT_INJECTION: forcing a failure. [ 180.123838][ T8508] name failslab, interval 1, probability 0, space 0, times 0 [ 180.147982][ T8508] CPU: 0 UID: 0 PID: 8508 Comm: syz.4.1454 Not tainted syzkaller #0 PREEMPT(full) [ 180.148105][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.148114][ T8508] Call Trace: [ 180.148118][ T8508] [ 180.148124][ T8508] __dump_stack+0x1d/0x30 [ 180.148143][ T8508] dump_stack_lvl+0x95/0xd0 [ 180.148161][ T8508] dump_stack+0x15/0x1b [ 180.148183][ T8508] should_fail_ex+0x263/0x280 [ 180.148246][ T8508] should_failslab+0x8c/0xb0 [ 180.148312][ T8508] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 180.148335][ T8508] ? scm_fp_dup+0x40/0x1d0 [ 180.148351][ T8508] ? __skb_try_recv_datagram+0x289/0x320 [ 180.148429][ T8508] kmemdup_noprof+0x2b/0x70 [ 180.148519][ T8508] scm_fp_dup+0x40/0x1d0 [ 180.148533][ T8508] __unix_dgram_recvmsg+0x6a6/0x870 [ 180.148604][ T8508] unix_dgram_recvmsg+0x81/0x90 [ 180.148625][ T8508] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 180.148645][ T8508] sock_recvmsg_nosec+0xc2/0xf0 [ 180.148687][ T8508] ____sys_recvmsg+0x26f/0x280 [ 180.148714][ T8508] ___sys_recvmsg+0x11f/0x3b0 [ 180.148735][ T8508] do_recvmmsg+0x1ef/0x560 [ 180.148789][ T8508] ? fput+0x8f/0xc0 [ 180.148806][ T8508] __x64_sys_recvmmsg+0xe5/0x170 [ 180.148821][ T8508] x64_sys_call+0x80f/0x3020 [ 180.148848][ T8508] do_syscall_64+0x12c/0x370 [ 180.148949][ T8508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.148967][ T8508] RIP: 0033:0x7faac432c819 [ 180.148982][ T8508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.148996][ T8508] RSP: 002b:00007faac2d5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 180.149011][ T8508] RAX: ffffffffffffffda RBX: 00007faac45a6090 RCX: 00007faac432c819 [ 180.149022][ T8508] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 180.149087][ T8508] RBP: 00007faac2d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 180.149125][ T8508] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 180.149136][ T8508] R13: 00007faac45a6128 R14: 00007faac45a6090 R15: 00007ffec27f9fc8 [ 180.149152][ T8508] [ 180.371086][ T28] audit: type=1400 audit(1775329043.582:3340): avc: denied { getopt } for pid=8496 comm="syz.0.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.403229][ T8517] loop7: detected capacity change from 0 to 1024 [ 180.413746][ T28] audit: type=1400 audit(1775329043.652:3341): avc: denied { name_connect } for pid=8496 comm="syz.0.1452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 180.468942][ T28] audit: type=1400 audit(1775329043.912:3342): avc: denied { listen } for pid=8496 comm="syz.0.1452" lport=41370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.548358][ T28] audit: type=1400 audit(1775329043.912:3343): avc: denied { accept } for pid=8496 comm="syz.0.1452" lport=41370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.690699][ T28] audit: type=1400 audit(1775329043.942:3344): avc: denied { create } for pid=8513 comm="syz.6.1455" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 180.712655][ T28] audit: type=1400 audit(1775329043.942:3345): avc: denied { read } for pid=8496 comm="syz.0.1452" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 180.792006][ T8554] loop4: detected capacity change from 0 to 128 [ 180.861631][ T8567] __nla_validate_parse: 4 callbacks suppressed [ 180.861651][ T8567] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1465'. [ 180.891556][ T8577] ip6gretap1: entered promiscuous mode [ 180.899429][ T8577] ip6gretap1: entered allmulticast mode [ 180.915870][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1469'. [ 181.003891][ T8594] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.065135][ T8594] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.149940][ T8618] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1475'. [ 181.162337][ T8618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1475'. [ 181.176710][ T8594] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.288319][ T8594] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.344714][ T117] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.364818][ T117] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.385563][ T117] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.408600][ T117] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.431635][ T8658] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1482'. [ 181.446318][ T8658] bond0 (unregistering): Released all slaves [ 181.501178][ T8666] loop4: detected capacity change from 0 to 1024 [ 181.509933][ T8666] EXT4-fs: test_dummy_encryption option not supported [ 182.008074][ T8677] loop6: detected capacity change from 0 to 1764 [ 182.026453][ T8676] loop4: detected capacity change from 0 to 512 [ 182.083227][ T8676] EXT4-fs (loop4): 1 orphan inode deleted [ 182.089681][ T8676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.102771][ T8676] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.142496][ T117] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 182.243777][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1487'. [ 182.855111][ T8696] loop7: detected capacity change from 0 to 512 [ 182.874018][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1494'. [ 182.898981][ T8696] EXT4-fs: Ignoring removed nobh option [ 182.924997][ T8696] ------------[ cut here ]------------ [ 182.930485][ T8696] EA inode 11 i_nlink=1026 [ 182.930554][ T8696] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.7.1493/8696 [ 182.945659][ T8696] Modules linked in: [ 182.949579][ T8696] CPU: 0 UID: 0 PID: 8696 Comm: syz.7.1493 Not tainted syzkaller #0 PREEMPT(full) [ 182.958906][ T8696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.968965][ T8696] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 182.975562][ T8696] Code: 14 34 99 ff 4c 8d 2d 7d a0 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff d2 dd 03 66 66 66 66 66 66 2e [ 182.995178][ T8696] RSP: 0018:ffffc9000482f5a8 EFLAGS: 00010246 [ 183.001263][ T8696] RAX: ffff888105356f48 RBX: ffff88811bb89328 RCX: ffffffff81c02c98 [ 183.009268][ T8696] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 183.017246][ T8696] RBP: 000000000000000b R08: 000188811bb892db R09: 0000000000000000 [ 183.025201][ T8696] R10: ffffc9000482f4d8 R11: 0001c9000482f4d8 R12: ffff88811bb892d8 [ 183.033253][ T8696] R13: ffffffff871dcd00 R14: ffff88811bb89290 R15: 0000000000000001 [ 183.041330][ T8696] FS: 00007fe00dd876c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 183.050284][ T8696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.056873][ T8696] CR2: 00007fb4cb757680 CR3: 0000000105b04000 CR4: 00000000003506f0 [ 183.064831][ T8696] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 183.072845][ T8696] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 183.080903][ T8696] Call Trace: [ 183.084164][ T8696] [ 183.087104][ T8696] ext4_xattr_set_entry+0x77c/0x1010 [ 183.092444][ T8696] ext4_xattr_ibody_set+0x184/0x3c0 [ 183.097683][ T8696] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 183.103545][ T8696] __ext4_expand_extra_isize+0x246/0x280 [ 183.109192][ T8696] __ext4_mark_inode_dirty+0x29b/0x400 [ 183.114682][ T8696] ext4_evict_inode+0x865/0xe40 [ 183.119544][ T8696] ? __pfx_ext4_evict_inode+0x10/0x10 [ 183.124929][ T8696] evict+0x2af/0x510 [ 183.128931][ T8696] ? __dquot_initialize+0x146/0x7c0 [ 183.134127][ T8696] iput+0x41a/0x580 [ 183.137955][ T8696] ext4_process_orphan+0x1a9/0x1c0 [ 183.143062][ T8696] ext4_orphan_cleanup+0x6a8/0xa00 [ 183.148185][ T8696] ext4_fill_super+0x3414/0x37c0 [ 183.153116][ T8696] ? set_blocksize+0x14c/0x270 [ 183.157958][ T8696] ? setup_bdev_super+0x30e/0x370 [ 183.158004][ T8696] ? __pfx_ext4_fill_super+0x10/0x10 [ 183.158026][ T8696] get_tree_bdev_flags+0x291/0x300 [ 183.158042][ T8696] ? __pfx_ext4_fill_super+0x10/0x10 [ 183.158059][ T8696] get_tree_bdev+0x1f/0x30 [ 183.158152][ T8696] ext4_get_tree+0x1c/0x30 [ 183.158168][ T8696] vfs_get_tree+0x57/0x1d0 [ 183.158182][ T8696] do_new_mount+0x288/0x8d0 [ 183.158206][ T8696] path_mount+0x4d0/0xbc0 [ 183.158228][ T8696] __se_sys_mount+0x28c/0x2e0 [ 183.158322][ T8696] __x64_sys_mount+0x67/0x80 [ 183.158339][ T8696] x64_sys_call+0x2d61/0x3020 [ 183.158435][ T8696] do_syscall_64+0x12c/0x370 [ 183.158491][ T8696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.158548][ T8696] RIP: 0033:0x7fe00f32da8a [ 183.158570][ T8696] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.158612][ T8696] RSP: 002b:00007fe00dd86e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.158628][ T8696] RAX: ffffffffffffffda RBX: 00007fe00dd86ee0 RCX: 00007fe00f32da8a [ 183.158691][ T8696] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fe00dd86ea0 [ 183.158701][ T8696] RBP: 0000200000000180 R08: 00007fe00dd86ee0 R09: 0000000000800718 [ 183.158754][ T8696] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 183.158769][ T8696] R13: 00007fe00dd86ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 183.158832][ T8696] [ 183.158838][ T8696] ---[ end trace 0000000000000000 ]--- [ 183.194649][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 183.194660][ T28] audit: type=1400 audit(1775329046.732:3351): avc: denied { setattr } for pid=8708 comm="syz.6.1497" name="/" dev="configfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 183.200174][ T8696] EXT4-fs (loop7): 1 orphan inode deleted [ 183.204666][ T28] audit: type=1400 audit(1775329046.732:3352): avc: denied { ioctl } for pid=8708 comm="syz.6.1497" path="socket:[22273]" dev="sockfs" ino=22273 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 183.208684][ T8696] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.218119][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.222928][ T8696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.328488][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1500'. [ 183.415222][ T8723] lo speed is unknown, defaulting to 1000 [ 183.460046][ T8720] loop0: detected capacity change from 0 to 2048 [ 183.498072][ T8720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.514203][ T28] audit: type=1400 audit(1775329047.062:3353): avc: denied { listen } for pid=8728 comm="syz.4.1503" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.525898][ T8736] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 183.543026][ T28] audit: type=1400 audit(1775329047.062:3354): avc: denied { ioctl } for pid=8728 comm="syz.4.1503" path="socket:[23452]" dev="sockfs" ino=23452 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 183.567895][ T8720] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.576139][ T8736] audit: out of memory in audit_log_start [ 183.588038][ T8720] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1500: bg 0: block 345: padding at end of block bitmap is not set [ 183.612981][ T8720] EXT4-fs (loop0): Remounting filesystem read-only [ 183.643622][ T28] audit: type=1326 audit(1775329047.182:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8742 comm="syz.7.1506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe00f32c819 code=0x0 [ 183.666575][ T28] audit: type=1400 audit(1775329047.182:3356): avc: denied { remount } for pid=8719 comm="syz.0.1500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 183.694405][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 183.720587][ T8747] FAULT_INJECTION: forcing a failure. [ 183.720587][ T8747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.733200][ T28] audit: type=1400 audit(1775329047.262:3357): avc: denied { shutdown } for pid=8748 comm="syz.6.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.746751][ T8749] bridge_slave_0: left allmulticast mode [ 183.753898][ T28] audit: type=1400 audit(1775329047.282:3358): avc: denied { setopt } for pid=8748 comm="syz.6.1509" lport=32775 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 183.759413][ T8749] bridge_slave_0: left promiscuous mode [ 183.787960][ T8747] CPU: 1 UID: 0 PID: 8747 Comm: syz.4.1508 Tainted: G W syzkaller #0 PREEMPT(full) [ 183.787985][ T8747] Tainted: [W]=WARN [ 183.787991][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.788000][ T8747] Call Trace: [ 183.788006][ T8747] [ 183.788012][ T8747] __dump_stack+0x1d/0x30 [ 183.788053][ T8747] dump_stack_lvl+0x95/0xd0 [ 183.788148][ T8747] dump_stack+0x15/0x1b [ 183.788165][ T8747] should_fail_ex+0x263/0x280 [ 183.788187][ T8747] should_fail+0xb/0x20 [ 183.788285][ T8747] should_fail_usercopy+0x1a/0x20 [ 183.788307][ T8747] _copy_from_user+0x1c/0xb0 [ 183.788384][ T8747] ___sys_sendmsg+0xc1/0x1e0 [ 183.788418][ T8747] __x64_sys_sendmsg+0xd4/0x160 [ 183.788446][ T8747] x64_sys_call+0x194c/0x3020 [ 183.788525][ T8747] do_syscall_64+0x12c/0x370 [ 183.788547][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.788566][ T8747] RIP: 0033:0x7faac432c819 [ 183.788581][ T8747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.788595][ T8747] RSP: 002b:00007faac2d7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.788635][ T8747] RAX: ffffffffffffffda RBX: 00007faac45a5fa0 RCX: 00007faac432c819 [ 183.788646][ T8747] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000004 [ 183.788658][ T8747] RBP: 00007faac2d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 183.788674][ T8747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.788685][ T8747] R13: 00007faac45a6038 R14: 00007faac45a5fa0 R15: 00007ffec27f9fc8 [ 183.788701][ T8747] [ 183.829049][ T8751] loop7: detected capacity change from 0 to 136 [ 183.834390][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.965868][ T8749] bridge_slave_1: left allmulticast mode [ 183.972076][ T8749] bridge_slave_1: left promiscuous mode [ 183.976984][ T8751] rock: directory entry would overflow storage [ 183.978003][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.983723][ T8751] rock: sig=0x4f50, size=4, remaining=3 [ 183.983735][ T8751] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 184.006015][ T8749] bond0: (slave bond_slave_0): Releasing backup interface [ 184.015641][ T8749] bond0: (slave bond_slave_1): Releasing backup interface [ 184.026043][ T8749] team0: Port device team_slave_0 removed [ 184.033984][ T8749] team0: Port device team_slave_1 removed [ 184.040716][ T8749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.048483][ T8749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.056678][ T8749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.064369][ T8749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.073057][ T8749] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 184.104203][ T8750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 184.170060][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.187934][ T8764] can0: slcan on ttyS3. [ 184.201382][ T8760] loop6: p1 p2 [ 184.212518][ T8766] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 184.241945][ T8766] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 184.266949][ T8764] can0 (unregistered): slcan off ttyS3. [ 184.270779][ T8766] EXT4-fs error (device loop0): ext4_get_journal_inode:5888: comm syz.0.1514: inode #4294967295: comm syz.0.1514: iget: illegal inode # [ 184.287895][ T8766] loop0: lost filesystem error report for type 5 error -117 [ 184.287960][ T8766] EXT4-fs (loop0): no journal found [ 184.300447][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 184.300460][ C1] EXT4-fs (loop0): initial error at time 1775329047: ext4_get_journal_inode:5888 [ 184.300479][ C1] EXT4-fs (loop0): last error at time 1775329047: ext4_get_journal_inode:5888 [ 184.332134][ T8766] EXT4-fs (loop0): can't get journal size [ 184.333513][ T3979] udevd[3979]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 184.347724][ T8766] EXT4-fs (loop0): failed to initialize system zone (-22) [ 184.350586][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 184.355025][ T8766] EXT4-fs (loop0): mount failed [ 184.393739][ T8779] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.1516: bad orphan inode 15 [ 184.406908][ T8779] loop8: lost filesystem error report for type 5 error -117 [ 184.409091][ T8779] ext4_test_bit(bit=14, block=18) = 1 [ 184.421743][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 184.421759][ C1] EXT4-fs (loop8): initial error at time 1775329047: ext4_orphan_get:1423 [ 184.421794][ C1] EXT4-fs (loop8): last error at time 1775329047: ext4_orphan_get:1423 [ 184.459278][ T8779] is_bad_inode(inode)=0 [ 184.463500][ T8779] NEXT_ORPHAN(inode)=1023 [ 184.467966][ T8779] max_ino=32 [ 184.471191][ T8779] i_nlink=0 [ 184.475071][ T8779] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2970: inode #15: comm syz.8.1516: corrupted xattr block 19: invalid header [ 184.488883][ T8779] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 184.513202][ T8779] EXT4-fs warning (device loop8): ext4_evict_inode:285: xattr delete (err -117) [ 184.539391][ T8779] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 184.541053][ T8806] set_capacity_and_notify: 3 callbacks suppressed [ 184.541139][ T8806] loop7: detected capacity change from 0 to 512 [ 184.565838][ T8779] ext4 filesystem being mounted at /34/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 184.611244][ T8806] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.624970][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1520'. [ 184.735901][ T6379] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.830682][ T8828] loop6: detected capacity change from 0 to 512 [ 184.863479][ T8828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.886144][ T8828] ext4 filesystem being mounted at /153/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.901481][ T8826] syzkaller1: entered promiscuous mode [ 184.907215][ T8826] syzkaller1: entered allmulticast mode [ 185.089090][ T8835] can0: slcan on ttyS3. [ 185.135380][ T8839] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz.6.1526: invalid size [ 185.176901][ T8835] can0 (unregistered): slcan off ttyS3. [ 185.191327][ T7856] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 185.223929][ T8835] Falling back ldisc for ttyS3. [ 185.400730][ T8853] loop4: detected capacity change from 0 to 2048 [ 185.547850][ T3307] loop4: p1 p2 p3 [ 185.624673][ T8853] loop4: p1 p2 p3 [ 185.717287][ T8876] loop8: detected capacity change from 0 to 512 [ 185.793356][ T8876] msdos: Unknown parameter 'time_o/„set' [ 185.819403][ T8881] loop7: detected capacity change from 0 to 512 [ 185.870220][ T8881] EXT4-fs: Ignoring removed orlov option [ 185.897959][ T8881] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 185.938074][ T8881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 185.985394][ T8881] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.1533: corrupted in-inode xattr: e_value size too large [ 186.014309][ T8881] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.015226][ T3007] loop4: p1 p2 p3 [ 186.026799][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 186.034666][ C1] EXT4-fs (loop7): initial error at time 1775329049: ext4_iget_extra_inode:5040: inode 15 [ 186.044877][ C1] EXT4-fs (loop7): last error at time 1775329049: ext4_iget_extra_inode:5040: inode 15 [ 186.067599][ T8881] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1533: couldn't read orphan inode 15 (err -117) [ 186.079531][ T8881] loop7: lost filesystem error report for type 5 error -117 [ 186.080642][ T8881] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.188630][ T8896] syzkaller0: entered promiscuous mode [ 186.194087][ T8896] syzkaller0: entered allmulticast mode [ 186.204247][ T8899] loop4: detected capacity change from 0 to 1024 [ 186.211766][ T5944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.213228][ T8899] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.243540][ T8899] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.248339][ T8902] loop6: detected capacity change from 0 to 512 [ 186.293629][ T8902] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1539: bad orphan inode 15 [ 186.309979][ T8902] loop6: lost filesystem error report for type 5 error -117 [ 186.310657][ T8899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.318076][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 186.318091][ C1] EXT4-fs (loop6): initial error at time 1775329049: ext4_orphan_get:1423 [ 186.318112][ C1] EXT4-fs (loop6): last error at time 1775329049: ext4_orphan_get:1423 [ 186.331364][ T8902] ext4_test_bit(bit=14, block=18) = 1 [ 186.404483][ T8902] is_bad_inode(inode)=0 [ 186.417935][ T8902] NEXT_ORPHAN(inode)=1023 [ 186.434300][ T8902] max_ino=32 [ 186.449885][ T6379] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.467429][ T8902] i_nlink=0 [ 186.472147][ T8902] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2970: inode #15: comm syz.6.1539: corrupted xattr block 19: invalid header [ 186.510820][ T8915] __nla_validate_parse: 1 callbacks suppressed [ 186.510834][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1542'. [ 186.535915][ T8902] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.536065][ T8902] EXT4-fs warning (device loop6): ext4_evict_inode:285: xattr delete (err -117) [ 186.558356][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1543'. [ 186.587738][ T8919] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1543'. [ 186.587978][ T8902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 186.635775][ T8902] ext4 filesystem being mounted at /154/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 186.851155][ T8954] bridge_slave_0: default FDB implementation only supports local addresses [ 186.896707][ T8959] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1547'. [ 186.902412][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.905872][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1547'. [ 186.968925][ T8957] loop0: detected capacity change from 0 to 8192 [ 187.088055][ T5944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 187.361110][ T8985] loop4: detected capacity change from 0 to 512 [ 187.376004][ T8986] loop8: detected capacity change from 0 to 1024 [ 187.411788][ T8985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.436950][ T8986] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.488257][ T8985] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.1558: iget: checksum invalid [ 187.546987][ T8986] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 187.577988][ T8985] 9p: Bad value for 'rfdno' [ 187.684836][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.697151][ T8986] EXT4-fs (loop8): orphan cleanup on readonly fs [ 187.778742][ T8986] EXT4-fs error (device loop8): __ext4_get_inode_loc:4797: comm syz.8.1554: Invalid inode table block 0 in block_group 0 [ 187.860396][ T8986] loop8: lost filesystem error report for type 5 error -117 [ 187.861200][ T8986] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 187.868538][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 187.868565][ C0] EXT4-fs (loop8): initial error at time 1775329051: __ext4_get_inode_loc:4797 [ 187.868587][ C0] EXT4-fs (loop8): last error at time 1775329051: __ext4_get_inode_loc:4797 [ 187.903066][ T8986] loop8: lost filesystem error report for type 5 error -117 [ 187.903199][ T8986] EXT4-fs error (device loop8): ext4_quota_write:7415: inode #3: comm syz.8.1554: mark_inode_dirty error [ 187.922179][ T8986] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 187.922252][ T8986] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.1554: Failed to acquire dquot type 0 [ 187.943972][ T8986] loop8: lost filesystem error report for type 5 error -117 [ 187.951733][ T8986] EXT4-fs error (device loop8): __ext4_get_inode_loc:4797: comm syz.8.1554: Invalid inode table block 0 in block_group 0 [ 187.983536][ T8986] loop8: lost filesystem error report for type 5 error -117 [ 187.983672][ T8986] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 188.000845][ T8986] loop8: lost filesystem error report for type 5 error -117 [ 188.000964][ T8986] EXT4-fs error (device loop8): ext4_ext_truncate:4557: inode #15: comm syz.8.1554: mark_inode_dirty error [ 188.020615][ T8986] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 188.020713][ T8986] EXT4-fs error (device loop8): __ext4_get_inode_loc:4797: comm syz.8.1554: Invalid inode table block 0 in block_group 0 [ 188.044243][ T8986] loop8: lost filesystem error report for type 5 error -117 [ 188.044349][ T8986] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 188.062371][ T8986] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 188.071313][ T8986] EXT4-fs error (device loop8): __ext4_get_inode_loc:4797: comm syz.8.1554: Invalid inode table block 0 in block_group 0 [ 188.084546][ T8986] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 188.094409][ T8986] EXT4-fs error (device loop8): ext4_truncate:4602: inode #15: comm syz.8.1554: mark_inode_dirty error [ 188.105622][ T8986] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 188.105747][ T8986] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 188.124386][ T8986] EXT4-fs (loop8): 1 truncate cleaned up [ 188.131045][ T8986] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.151407][ T3432] kernel read not supported for file /vga_arbiter (pid: 3432 comm: kworker/1:3) [ 188.432058][ T7856] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.689602][ T9033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.708848][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 188.708858][ T28] audit: type=1400 audit(1775329052.252:3372): avc: denied { mount } for pid=9040 comm="syz.8.1570" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 188.872532][ T28] audit: type=1400 audit(1775329052.282:3373): avc: denied { bind } for pid=9040 comm="syz.8.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.873248][ T9033] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.1573: iget: checksum invalid [ 188.891987][ T28] audit: type=1400 audit(1775329052.282:3374): avc: denied { listen } for pid=9040 comm="syz.8.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.923000][ T28] audit: type=1400 audit(1775329052.282:3375): avc: denied { connect } for pid=9040 comm="syz.8.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.942785][ T28] audit: type=1400 audit(1775329052.282:3376): avc: denied { accept } for pid=9040 comm="syz.8.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.965558][ T28] audit: type=1400 audit(1775329052.282:3377): avc: denied { read } for pid=9040 comm="syz.8.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.084654][ T9052] 9p: Bad value for 'rfdno' [ 189.399720][ T9060] can0: slcan on ttyS3. [ 189.409851][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.495082][ T9060] can0 (unregistered): slcan off ttyS3. [ 189.520098][ T9060] Falling back ldisc for ttyS3. [ 189.558500][ T9072] EXT4-fs: inline encryption not supported [ 189.581948][ T9082] set_capacity_and_notify: 2 callbacks suppressed [ 189.581959][ T9082] loop4: detected capacity change from 0 to 764 [ 189.608072][ T9072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 189.644102][ T9072] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.655796][ T9086] netlink: 'syz.0.1581': attribute type 10 has an invalid length. [ 189.706240][ T5944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 189.886095][ T9118] loop8: detected capacity change from 0 to 128 [ 189.914387][ T9120] loop6: detected capacity change from 0 to 1024 [ 190.071122][ T9129] loop6: detected capacity change from 0 to 1764 [ 190.082038][ T9129] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1592'. [ 190.091708][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1592'. [ 190.107865][ T9129] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 190.262114][ T9135] FAULT_INJECTION: forcing a failure. [ 190.262114][ T9135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.318059][ T9135] CPU: 0 UID: 0 PID: 9135 Comm: syz.4.1593 Tainted: G W syzkaller #0 PREEMPT(full) [ 190.318216][ T9135] Tainted: [W]=WARN [ 190.318221][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.318230][ T9135] Call Trace: [ 190.318235][ T9135] [ 190.318240][ T9135] __dump_stack+0x1d/0x30 [ 190.318260][ T9135] dump_stack_lvl+0x95/0xd0 [ 190.318277][ T9135] dump_stack+0x15/0x1b [ 190.318296][ T9135] should_fail_ex+0x263/0x280 [ 190.318357][ T9135] should_fail+0xb/0x20 [ 190.318373][ T9135] should_fail_usercopy+0x1a/0x20 [ 190.318395][ T9135] _copy_to_user+0x20/0xa0 [ 190.318421][ T9135] sg_read+0xb59/0xcb0 [ 190.318526][ T9135] ? __pfx_autoremove_wake_function+0x10/0x10 [ 190.318550][ T9135] ? __pfx_sg_read+0x10/0x10 [ 190.318565][ T9135] vfs_readv+0x432/0x6e0 [ 190.318588][ T9135] do_readv+0xe9/0x210 [ 190.318605][ T9135] __x64_sys_readv+0x45/0x50 [ 190.318622][ T9135] x64_sys_call+0x27c0/0x3020 [ 190.318666][ T9135] do_syscall_64+0x12c/0x370 [ 190.318685][ T9135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.318701][ T9135] RIP: 0033:0x7faac432c819 [ 190.318715][ T9135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.318729][ T9135] RSP: 002b:00007faac2d7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 190.318826][ T9135] RAX: ffffffffffffffda RBX: 00007faac45a5fa0 RCX: 00007faac432c819 [ 190.318907][ T9135] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 190.318960][ T9135] RBP: 00007faac2d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 190.318969][ T9135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.318978][ T9135] R13: 00007faac45a6038 R14: 00007faac45a5fa0 R15: 00007ffec27f9fc8 [ 190.318995][ T9135] [ 190.533291][ T9138] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1594'. [ 190.675372][ T9148] can0: slcan on ttyS3. [ 191.030376][ T10] hid_parser_main: 7 callbacks suppressed [ 191.030390][ T10] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 191.044032][ T9148] can0 (unregistered): slcan off ttyS3. [ 191.049613][ T10] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 191.088706][ T9148] Falling back ldisc for ttyS3. [ 191.093643][ T10] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 191.108353][ T9156] loop4: detected capacity change from 0 to 1024 [ 191.123036][ T10] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 191.143288][ T9156] EXT4-fs: Ignoring removed bh option [ 191.160198][ T10] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 191.207929][ T9156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.225059][ T10] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 191.233117][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 191.255626][ T10] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 191.362791][ T10] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 191.383452][ T9171] EXT4-fs error (device loop4): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.4.1600: path /333/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 191.405510][ T10] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 191.446377][ T10] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 191.482222][ T3407] kernel read not supported for file /uhid (pid: 3407 comm: kworker/0:4) [ 191.498429][ T10] hid-generic 0000:0000:000E.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 191.522623][ T28] audit: type=1400 audit(1775329055.042:3378): avc: denied { watch } for pid=9155 comm="syz.4.1600" path="/333/file1/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 191.557254][ T9179] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1604'. [ 191.566673][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1604'. [ 191.692222][ T9193] loop0: detected capacity change from 0 to 512 [ 191.703846][ T9195] loop8: detected capacity change from 0 to 764 [ 191.712811][ T28] audit: type=1326 audit(1775329055.242:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.8.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9238f0c819 code=0x7ffc0000 [ 191.738528][ T28] audit: type=1326 audit(1775329055.242:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.8.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f9238f0c819 code=0x7ffc0000 [ 191.826879][ T28] audit: type=1326 audit(1775329055.242:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.8.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9238f0c819 code=0x7ffc0000 [ 191.839407][ T9193] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.1610: missing EA_INODE flag [ 191.864628][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.946873][ T9193] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 191.947111][ T9193] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1610: error while reading EA inode 12 err=-117 [ 191.968516][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 191.968533][ C1] EXT4-fs (loop0): initial error at time 1775329055: ext4_xattr_inode_iget:441: inode 12 [ 191.968552][ C1] EXT4-fs (loop0): last error at time 1775329055: ext4_xattr_inode_iget:441: inode 12 [ 192.032401][ T9193] fserror_report: 5 callbacks suppressed [ 192.032414][ T9193] loop0: lost filesystem error report for type 5 error -117 [ 192.056909][ T9193] EXT4-fs (loop0): 1 orphan inode deleted [ 192.087184][ T9193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.146493][ T9206] loop8: detected capacity change from 0 to 2048 [ 192.216015][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.262005][ T10] hid-generic 0000:0000:000E.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 192.266911][ T3307] Alternate GPT is invalid, using primary GPT. [ 192.290620][ T3307] loop8: p2 p3 p7 [ 192.315565][ T10] kernel read not supported for file /uhid (pid: 10 comm: kworker/0:1) [ 192.344406][ T9222] fido_id[9222]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 192.354520][ T9227] sctp: [Deprecated]: syz.6.1626 (pid 9227) Use of int in max_burst socket option. [ 192.354520][ T9227] Use struct sctp_assoc_value instead [ 192.379049][ T9206] Alternate GPT is invalid, using primary GPT. [ 192.389064][ T9206] loop8: p2 p3 p7 [ 192.499989][ T7479] udevd[7479]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 192.504146][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 192.519172][ T3979] udevd[3979]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 192.674533][ T3555] hid-generic 0000:0000:000E.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 192.731379][ T3555] kernel read not supported for file /uhid (pid: 3555 comm: kworker/1:5) [ 192.805972][ T9259] can0: slcan on ttyS3. [ 192.873714][ T9266] loop6: detected capacity change from 0 to 2048 [ 192.880305][ T9259] can0 (unregistered): slcan off ttyS3. [ 192.896900][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 192.948825][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1646'. [ 192.978561][ T3979] Alternate GPT is invalid, using primary GPT. [ 192.988072][ T3979] loop6: p2 p3 p7 [ 193.002555][ T9266] Alternate GPT is invalid, using primary GPT. [ 193.018256][ T9266] loop6: p2 p3 p7 [ 193.079044][ T7479] udevd[7479]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 193.089696][ T3979] udevd[3979]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 193.100411][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 193.130944][ T10] hid-generic 0000:0000:000E.0008: hidraw1: HID v0.00 Device [syz0] on syz0 [ 193.219766][ T10] kernel read not supported for file /uhid (pid: 10 comm: kworker/0:1) [ 193.279492][ T9296] loop6: detected capacity change from 0 to 1024 [ 193.296461][ T9296] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.312648][ T9296] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 193.336020][ T9296] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.362041][ T9300] can0: slcan on ttyS3. [ 193.416903][ T9300] can0 (unregistered): slcan off ttyS3. [ 193.651313][ T5944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.797046][ T9339] Alternate GPT is invalid, using primary GPT. [ 193.803506][ T9339] loop6: p2 p3 p7 [ 193.919368][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 193.936359][ T9349] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 193.972948][ T3979] udevd[3979]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 193.985354][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 194.118425][ T3555] hid-generic 0000:0000:000E.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 194.133407][ T9353] FAULT_INJECTION: forcing a failure. [ 194.133407][ T9353] name failslab, interval 1, probability 0, space 0, times 0 [ 194.166564][ T9353] CPU: 1 UID: 0 PID: 9353 Comm: syz.8.1658 Tainted: G W syzkaller #0 PREEMPT(full) [ 194.166589][ T9353] Tainted: [W]=WARN [ 194.166595][ T9353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.166605][ T9353] Call Trace: [ 194.166609][ T9353] [ 194.166663][ T9353] __dump_stack+0x1d/0x30 [ 194.166684][ T9353] dump_stack_lvl+0x95/0xd0 [ 194.166775][ T9353] dump_stack+0x15/0x1b [ 194.166792][ T9353] should_fail_ex+0x263/0x280 [ 194.166824][ T9353] ? __pfx_perf_trace_kmalloc+0x10/0x10 [ 194.166840][ T9353] should_failslab+0x8c/0xb0 [ 194.166859][ T9353] __kmalloc_noprof+0xb8/0x4e0 [ 194.166877][ T9353] ? tracepoint_add_func+0x1df/0x6b0 [ 194.166893][ T9353] ? __pfx_perf_trace_kmalloc+0x10/0x10 [ 194.166982][ T9353] tracepoint_add_func+0x1df/0x6b0 [ 194.167066][ T9353] ? __pfx_perf_trace_kmalloc+0x10/0x10 [ 194.167081][ T9353] tracepoint_probe_register+0x5b/0x90 [ 194.167096][ T9353] ? __pfx_perf_trace_kmalloc+0x10/0x10 [ 194.167113][ T9353] ? __pfx_perf_trace_kmalloc+0x10/0x10 [ 194.167130][ T9353] trace_event_reg+0x15c/0x190 [ 194.167225][ T9353] perf_trace_event_init+0x35c/0x7b0 [ 194.167243][ T9353] perf_trace_init+0x15f/0x1d0 [ 194.167260][ T9353] perf_tp_event_init+0x68/0xc0 [ 194.167294][ T9353] perf_try_init_event+0x25a/0x6f0 [ 194.167318][ T9353] ? kmem_cache_alloc_node_noprof+0x20a/0x460 [ 194.167337][ T9353] perf_event_alloc+0xb2b/0x18e0 [ 194.167360][ T9353] ? __fget_files+0x184/0x1c0 [ 194.167386][ T9353] __se_sys_perf_event_open+0x656/0x1290 [ 194.167440][ T9353] __x64_sys_perf_event_open+0x67/0x80 [ 194.167462][ T9353] x64_sys_call+0x2789/0x3020 [ 194.167544][ T9353] do_syscall_64+0x12c/0x370 [ 194.167565][ T9353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.167583][ T9353] RIP: 0033:0x7f9238f0c819 [ 194.167596][ T9353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.167615][ T9353] RSP: 002b:00007f9237946028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 194.167630][ T9353] RAX: ffffffffffffffda RBX: 00007f9239186090 RCX: 00007f9238f0c819 [ 194.167640][ T9353] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 194.167728][ T9353] RBP: 00007f9237946090 R08: 0000000000000002 R09: 0000000000000000 [ 194.167773][ T9353] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 194.167783][ T9353] R13: 00007f9239186128 R14: 00007f9239186090 R15: 00007ffd55516df8 [ 194.167797][ T9353] [ 194.421914][ T35] kernel read not supported for file /uhid (pid: 35 comm: kworker/1:1) [ 194.497062][ T3407] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.530005][ T9373] FAULT_INJECTION: forcing a failure. [ 194.530005][ T9373] name failslab, interval 1, probability 0, space 0, times 0 [ 194.546612][ T9370] fido_id[9370]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.566889][ T9373] CPU: 1 UID: 0 PID: 9373 Comm: syz.4.1667 Tainted: G W syzkaller #0 PREEMPT(full) [ 194.566912][ T9373] Tainted: [W]=WARN [ 194.566945][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.566955][ T9373] Call Trace: [ 194.566961][ T9373] [ 194.566966][ T9373] __dump_stack+0x1d/0x30 [ 194.566985][ T9373] dump_stack_lvl+0x95/0xd0 [ 194.567019][ T9373] dump_stack+0x15/0x1b [ 194.567034][ T9373] should_fail_ex+0x263/0x280 [ 194.567057][ T9373] should_failslab+0x8c/0xb0 [ 194.567082][ T9373] __kmalloc_cache_node_noprof+0x6b/0x480 [ 194.567105][ T9373] ? __get_vm_area_node+0x106/0x1d0 [ 194.567127][ T9373] __get_vm_area_node+0x106/0x1d0 [ 194.567147][ T9373] __vmalloc_node_range_noprof+0x291/0x12b0 [ 194.567180][ T9373] ? bpf_check+0xe6/0xcc30 [ 194.567255][ T9373] ? mod_memcg_lruvec_state+0x1a1/0x290 [ 194.567277][ T9373] ? __kmalloc_large_node_noprof+0x18/0xb0 [ 194.567353][ T9373] ? bpf_check+0xe6/0xcc30 [ 194.567375][ T9373] vzalloc_noprof+0x82/0xb0 [ 194.567392][ T9373] ? bpf_check+0xe6/0xcc30 [ 194.567477][ T9373] bpf_check+0xe6/0xcc30 [ 194.567496][ T9373] ? __memcg_kmem_charge_page+0xd0/0x170 [ 194.567515][ T9373] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 194.567602][ T9373] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 194.567620][ T9373] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 194.567656][ T9373] ? _find_next_zero_bit+0x64/0xa0 [ 194.567676][ T9373] ? pcpu_block_refresh_hint+0x10b/0x170 [ 194.567736][ T9373] ? _find_next_zero_bit+0x64/0xa0 [ 194.567752][ T9373] ? pcpu_block_refresh_hint+0x10b/0x170 [ 194.567772][ T9373] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 194.567847][ T9373] ? css_rstat_updated+0xbb/0x280 [ 194.567866][ T9373] ? mod_memcg_state+0x182/0x270 [ 194.567945][ T9373] ? __rcu_read_unlock+0x4e/0x70 [ 194.567975][ T9373] ? avc_has_perm_noaudit+0xab/0x130 [ 194.567999][ T9373] ? avc_has_perm+0x101/0x190 [ 194.568093][ T9373] ? selinux_bpf_prog_load+0x197/0x1c0 [ 194.568113][ T9373] ? security_bpf_prog_load+0x9e/0x140 [ 194.568206][ T9373] bpf_prog_load+0xf76/0x1140 [ 194.568227][ T9373] ? security_bpf+0x2b/0x90 [ 194.568245][ T9373] __sys_bpf+0x505/0x7e0 [ 194.568330][ T9373] __x64_sys_bpf+0x41/0x50 [ 194.568343][ T9373] x64_sys_call+0x10cb/0x3020 [ 194.568420][ T9373] do_syscall_64+0x12c/0x370 [ 194.568443][ T9373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.568462][ T9373] RIP: 0033:0x7faac432c819 [ 194.568476][ T9373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.568534][ T9373] RSP: 002b:00007faac2d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.568549][ T9373] RAX: ffffffffffffffda RBX: 00007faac45a6090 RCX: 00007faac432c819 [ 194.568562][ T9373] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 194.568573][ T9373] RBP: 00007faac2d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 194.568585][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.568595][ T9373] R13: 00007faac45a6128 R14: 00007faac45a6090 R15: 00007ffec27f9fc8 [ 194.568630][ T9373] [ 194.568636][ T9373] syz.4.1667: vmalloc error: size 864, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 194.890992][ T9373] CPU: 1 UID: 0 PID: 9373 Comm: syz.4.1667 Tainted: G W syzkaller #0 PREEMPT(full) [ 194.891031][ T9373] Tainted: [W]=WARN [ 194.891037][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.891047][ T9373] Call Trace: [ 194.891053][ T9373] [ 194.891060][ T9373] __dump_stack+0x1d/0x30 [ 194.891135][ T9373] dump_stack_lvl+0x95/0xd0 [ 194.891151][ T9373] dump_stack+0x15/0x1b [ 194.891169][ T9373] warn_alloc+0x145/0x1c0 [ 194.891194][ T9373] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 194.891238][ T9373] ? mod_memcg_lruvec_state+0x1a1/0x290 [ 194.891257][ T9373] ? __kmalloc_large_node_noprof+0x18/0xb0 [ 194.891275][ T9373] ? bpf_check+0xe6/0xcc30 [ 194.891336][ T9373] vzalloc_noprof+0x82/0xb0 [ 194.891355][ T9373] ? bpf_check+0xe6/0xcc30 [ 194.891412][ T9373] bpf_check+0xe6/0xcc30 [ 194.891431][ T9373] ? __memcg_kmem_charge_page+0xd0/0x170 [ 194.891451][ T9373] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 194.891491][ T9373] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 194.891527][ T9373] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 194.891557][ T9373] ? _find_next_zero_bit+0x64/0xa0 [ 194.891573][ T9373] ? pcpu_block_refresh_hint+0x10b/0x170 [ 194.891654][ T9373] ? _find_next_zero_bit+0x64/0xa0 [ 194.891694][ T9373] ? pcpu_block_refresh_hint+0x10b/0x170 [ 194.891714][ T9373] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 194.891736][ T9373] ? css_rstat_updated+0xbb/0x280 [ 194.891823][ T9373] ? mod_memcg_state+0x182/0x270 [ 194.891838][ T9373] ? __rcu_read_unlock+0x4e/0x70 [ 194.891924][ T9373] ? avc_has_perm_noaudit+0xab/0x130 [ 194.891952][ T9373] ? avc_has_perm+0x101/0x190 [ 194.891971][ T9373] ? selinux_bpf_prog_load+0x197/0x1c0 [ 194.891989][ T9373] ? security_bpf_prog_load+0x9e/0x140 [ 194.892219][ T9373] bpf_prog_load+0xf76/0x1140 [ 194.892238][ T9373] ? security_bpf+0x2b/0x90 [ 194.892253][ T9373] __sys_bpf+0x505/0x7e0 [ 194.892272][ T9373] __x64_sys_bpf+0x41/0x50 [ 194.892288][ T9373] x64_sys_call+0x10cb/0x3020 [ 194.892377][ T9373] do_syscall_64+0x12c/0x370 [ 194.892396][ T9373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.892411][ T9373] RIP: 0033:0x7faac432c819 [ 194.892424][ T9373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.892492][ T9373] RSP: 002b:00007faac2d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.892509][ T9373] RAX: ffffffffffffffda RBX: 00007faac45a6090 RCX: 00007faac432c819 [ 194.892522][ T9373] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 194.892533][ T9373] RBP: 00007faac2d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 194.892544][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.892555][ T9373] R13: 00007faac45a6128 R14: 00007faac45a6090 R15: 00007ffec27f9fc8 [ 194.892657][ T9373] [ 194.892670][ T9373] Mem-Info: [ 194.937076][ T9374] set_capacity_and_notify: 2 callbacks suppressed [ 194.937089][ T9374] loop6: detected capacity change from 0 to 1764 [ 194.946844][ T9373] active_anon:67999 inactive_anon:3 isolated_anon:0 [ 194.946844][ T9373] active_file:28023 inactive_file:2397 isolated_file:0 [ 194.946844][ T9373] unevictable:0 dirty:331 writeback:0 [ 194.946844][ T9373] slab_reclaimable:3932 slab_unreclaimable:35499 [ 194.946844][ T9373] mapped:52212 shmem:50992 pagetables:3470 [ 194.946844][ T9373] sec_pagetables:0 bounce:0 [ 194.946844][ T9373] kernel_misc_reclaimable:0 [ 194.946844][ T9373] free:1795991 free_pcp:3769 free_cma:0 [ 195.255079][ T9373] Node 0 active_anon:273156kB inactive_anon:12kB active_file:112092kB inactive_file:10052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219288kB dirty:1324kB writeback:0kB shmem:205012kB kernel_stack:4464kB pagetables:13880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 195.343025][ T9373] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.397135][ T9373] lowmem_reserve[]: 0 2879 7857 7857 [ 195.402475][ T9373] Node 0 DMA32 free:2944508kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948136kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 195.446809][ T9373] lowmem_reserve[]: 0 0 4978 4978 [ 195.451895][ T9373] Node 0 Normal free:4206372kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:283716kB inactive_anon:12kB active_file:112092kB inactive_file:10168kB unevictable:0kB writepending:1324kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:9768kB local_pcp:2824kB free_cma:0kB [ 195.495398][ T9373] lowmem_reserve[]: 0 0 0 0 [ 195.500043][ T9373] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 195.524048][ T9373] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944508kB [ 195.541631][ T9373] Node 0 Normal: 353*4kB (UME) 543*8kB (UME) 57*16kB (U) 23*32kB (U) 101*64kB (UE) 84*128kB (U) 69*256kB (U) 70*512kB (U) 51*1024kB (U) 36*2048kB (U) 976*4096kB (UME) = 4201772kB [ 195.560369][ T9374] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1669'. [ 195.576861][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1669'. [ 195.586379][ T9373] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 195.596759][ T9373] 85294 total pagecache pages [ 195.602206][ T9373] 3 pages in swap cache [ 195.607224][ T9373] Free swap = 124804kB [ 195.611939][ T9373] Total swap = 124996kB [ 195.616475][ T9373] 2097051 pages RAM [ 195.622001][ T9373] 0 pages HighMem/MovableOnly [ 195.626662][ T9374] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 195.634614][ T9373] 81617 pages reserved [ 195.700708][ T9382] loop4: detected capacity change from 0 to 2048 [ 195.731302][ T9384] loop8: detected capacity change from 0 to 256 [ 195.750283][ T9382] Alternate GPT is invalid, using primary GPT. [ 195.758539][ T9382] loop4: p2 p3 p7 [ 195.988680][ T9390] loop0: detected capacity change from 0 to 512 [ 196.008652][ T9] hid-generic 0000:0000:000E.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 196.031891][ T9390] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 196.044305][ T9390] EXT4-fs (loop0): orphan cleanup on readonly fs [ 196.059813][ T9390] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #16: comm syz.0.1677: corrupted inode contents [ 196.085363][ T9390] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 196.085494][ T9390] EXT4-fs (loop0): Remounting filesystem read-only [ 196.094628][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 196.094646][ C0] EXT4-fs (loop0): initial error at time 1775329059: ext4_do_update_inode:5602: inode 16 [ 196.094672][ C0] EXT4-fs (loop0): last error at time 1775329059: ext4_do_update_inode:5602: inode 16 [ 196.147456][ T9] kernel read not supported for file /uhid (pid: 9 comm: kworker/0:0) [ 196.162275][ T9402] loop6: detected capacity change from 0 to 256 [ 196.172085][ T28] kauditd_printk_skb: 145 callbacks suppressed [ 196.172096][ T28] audit: type=1400 audit(1775329059.702:3527): avc: denied { getopt } for pid=9391 comm="syz.6.1676" lport=53365 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 196.177142][ T9390] EXT4-fs (loop0): 1 truncate cleaned up [ 196.207574][ T30] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 196.219947][ T30] Quota error (device loop0): write_blk: dquota write failed [ 196.240239][ T30] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 196.250418][ T30] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 196.266837][ T30] Quota error (device loop0): write_blk: dquota write failed [ 196.274309][ T30] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 196.294603][ T30] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 196.309057][ T30] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 196.313319][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1676'. [ 196.337938][ T3407] hid_parser_main: 94 callbacks suppressed [ 196.337952][ T3407] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 196.338103][ T30] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 196.344297][ T3407] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 196.351827][ T9390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.361618][ T9402] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 196.406847][ T9402] FAT-fs (loop6): Filesystem has been set read-only [ 196.456262][ T9402] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 196.586341][ T9411] fido_id[9411]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 196.611518][ T9402] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 196.628477][ T9416] loop4: detected capacity change from 0 to 2048 [ 196.653833][ T9416] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 196.673688][ T9402] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 197.347138][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.609510][ T9422] loop6: detected capacity change from 0 to 256 [ 197.630888][ T9420] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.829326][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1682'. [ 197.838736][ T9417] coredump: 538(syz.6.1684): Core dump to core aborted: cannot preserve file permissions [ 197.839063][ T9427] syzkaller0: entered promiscuous mode [ 197.864823][ T9438] loop4: detected capacity change from 0 to 1764 [ 197.868351][ T9427] syzkaller0: entered allmulticast mode [ 197.899561][ T28] audit: type=1400 audit(1775329061.442:3528): avc: denied { relabelfrom } for pid=9425 comm="syz.7.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 197.899955][ T9437] all: renamed from bridge_slave_1 (while UP) [ 197.960845][ T9438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1686'. [ 198.006623][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1686'. [ 198.016363][ T28] audit: type=1400 audit(1775329061.442:3529): avc: denied { relabelto } for pid=9425 comm="syz.7.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 198.044686][ T9438] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 198.091947][ T9443] loop6: detected capacity change from 0 to 2048 [ 198.127299][ T9445] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1690'. [ 198.136327][ T9445] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1690'. [ 198.138549][ T3307] Alternate GPT is invalid, using primary GPT. [ 198.145414][ T9445] netlink: 'syz.7.1690': attribute type 5 has an invalid length. [ 198.156073][ T3307] loop6: p2 p3 p7 [ 198.159315][ T9445] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1690'. [ 198.175837][ T9443] Alternate GPT is invalid, using primary GPT. [ 198.186569][ T9443] loop6: p2 p3 p7 [ 198.310228][ T9447] loop7: detected capacity change from 0 to 1024 [ 198.322652][ T9447] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.477078][ T9447] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.525692][ T28] audit: type=1400 audit(1775329062.052:3530): avc: denied { rename } for pid=9446 comm="syz.7.1691" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.544885][ T9452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.551426][ T3432] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 198.577932][ T9452] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.1692: iget: checksum invalid [ 198.590012][ T6379] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.608064][ T3432] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 198.663086][ T9452] 9p: Bad value for 'rfdno' [ 198.748836][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.058903][ T3407] hid-generic 0000:0000:000E.000E: unknown main item tag 0x0 [ 199.079510][ T3407] hid-generic 0000:0000:000E.000E: unknown main item tag 0x0 [ 199.121956][ T3407] hid-generic 0000:0000:000E.000E: unknown main item tag 0x0 [ 199.188896][ T3407] hid-generic 0000:0000:000E.000E: unknown main item tag 0x0 [ 199.214502][ T3407] hid-generic 0000:0000:000E.000E: unknown main item tag 0x0 [ 199.240816][ T3407] hid-generic 0000:0000:000E.000E: unknown main item tag 0x0 [ 199.256946][ T3407] hid-generic 0000:0000:000E.000E: unknown main item tag 0x0 [ 199.274362][ T3407] hid-generic 0000:0000:000E.000E: unknown main item tag 0x0 [ 199.292546][ T3407] hid-generic 0000:0000:000E.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 199.341464][ T9484] fido_id[9484]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 199.416124][ T3407] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.443390][ T9496] fido_id[9496]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 199.585727][ T9504] ip6t_srh: unknown srh invflags 4000 [ 199.606925][ T9504] msdos: Bad value for 'gid' [ 199.611526][ T9504] msdos: Bad value for 'gid' [ 199.741061][ T9509] process 'syz.7.1710' launched './file0' with NULL argv: empty string added [ 199.775418][ T9509] Invalid argument reading file caps for ./file0 [ 200.035281][ T9532] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1715'. [ 200.057317][ T9532] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1715'. [ 200.111704][ T9532] netlink: 'syz.7.1715': attribute type 21 has an invalid length. [ 200.127017][ T9532] netlink: 'syz.7.1715': attribute type 1 has an invalid length. [ 200.138918][ T9532] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1715'. [ 200.254218][ T9539] set_capacity_and_notify: 6 callbacks suppressed [ 200.254233][ T9539] loop7: detected capacity change from 0 to 2048 [ 200.307578][ T9539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.331107][ T9539] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 200.347420][ T9539] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 1 with error 28 [ 200.359688][ T9539] EXT4-fs (loop7): This should not happen!! Data will be lost [ 200.359688][ T9539] [ 200.371088][ T9539] EXT4-fs (loop7): Total free blocks count 0 [ 200.377288][ T9539] EXT4-fs (loop7): Free/Dirty block details [ 200.383241][ T9539] EXT4-fs (loop7): free_blocks=4096 [ 200.388702][ T9539] EXT4-fs (loop7): dirty_blocks=32 [ 200.393803][ T9539] EXT4-fs (loop7): Block reservation details [ 200.400139][ T9539] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 200.410056][ T9539] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 200.410703][ T9544] FAULT_INJECTION: forcing a failure. [ 200.410703][ T9544] name failslab, interval 1, probability 0, space 0, times 0 [ 200.477121][ T9548] FAULT_INJECTION: forcing a failure. [ 200.477121][ T9548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.486751][ T9544] CPU: 0 UID: 0 PID: 9544 Comm: syz.6.1718 Tainted: G W syzkaller #0 PREEMPT(full) [ 200.486794][ T9544] Tainted: [W]=WARN [ 200.486800][ T9544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.486809][ T9544] Call Trace: [ 200.486814][ T9544] [ 200.486876][ T9544] __dump_stack+0x1d/0x30 [ 200.486897][ T9544] dump_stack_lvl+0x95/0xd0 [ 200.486915][ T9544] dump_stack+0x15/0x1b [ 200.486946][ T9544] should_fail_ex+0x263/0x280 [ 200.487061][ T9544] should_failslab+0x8c/0xb0 [ 200.487095][ T9544] __kvmalloc_node_noprof+0x155/0x650 [ 200.487116][ T9544] ? file_tty_write+0x1a3/0x690 [ 200.487142][ T9544] ? mutex_trylock+0x81/0xc0 [ 200.487158][ T9544] file_tty_write+0x1a3/0x690 [ 200.487180][ T9544] tty_write+0x25/0x30 [ 200.487198][ T9544] iter_file_splice_write+0x6c4/0xa80 [ 200.487299][ T9544] ? __pfx_iter_file_splice_write+0x10/0x10 [ 200.487318][ T9544] direct_splice_actor+0x156/0x2a0 [ 200.487353][ T9544] ? splice_shrink_spd+0x31/0x70 [ 200.487441][ T9544] splice_direct_to_actor+0x311/0x670 [ 200.487459][ T9544] ? __pfx_direct_splice_actor+0x10/0x10 [ 200.487489][ T9544] do_splice_direct+0x119/0x1a0 [ 200.487568][ T9544] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 200.487589][ T9544] do_sendfile+0x382/0x650 [ 200.487611][ T9544] __x64_sys_sendfile64+0x105/0x150 [ 200.487660][ T9544] x64_sys_call+0x2dc4/0x3020 [ 200.487792][ T9544] do_syscall_64+0x12c/0x370 [ 200.487813][ T9544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.487830][ T9544] RIP: 0033:0x7fb4cb76c819 [ 200.487841][ T9544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.487854][ T9544] RSP: 002b:00007fb4ca1bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 200.487872][ T9544] RAX: ffffffffffffffda RBX: 00007fb4cb9e5fa0 RCX: 00007fb4cb76c819 [ 200.487884][ T9544] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 200.487933][ T9544] RBP: 00007fb4ca1bf090 R08: 0000000000000000 R09: 0000000000000000 [ 200.487944][ T9544] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 200.487955][ T9544] R13: 00007fb4cb9e6038 R14: 00007fb4cb9e5fa0 R15: 00007ffe82a6f258 [ 200.487970][ T9544] [ 200.710194][ T6379] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 200.711519][ T9548] CPU: 1 UID: 0 PID: 9548 Comm: syz.8.1719 Tainted: G W syzkaller #0 PREEMPT(full) [ 200.711544][ T9548] Tainted: [W]=WARN [ 200.711550][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.711576][ T9548] Call Trace: [ 200.711582][ T9548] [ 200.711589][ T9548] __dump_stack+0x1d/0x30 [ 200.711611][ T9548] dump_stack_lvl+0x95/0xd0 [ 200.711692][ T9548] dump_stack+0x15/0x1b [ 200.711709][ T9548] should_fail_ex+0x263/0x280 [ 200.711732][ T9548] should_fail+0xb/0x20 [ 200.711750][ T9548] should_fail_usercopy+0x1a/0x20 [ 200.711800][ T9548] _copy_from_user+0x1c/0xb0 [ 200.711867][ T9548] sk_setsockopt+0x1fa/0x2140 [ 200.711967][ T9548] sock_setsockopt+0x40/0x50 [ 200.711989][ T9548] __sys_setsockopt+0x13a/0x200 [ 200.712013][ T9548] __x64_sys_setsockopt+0x64/0x80 [ 200.712043][ T9548] x64_sys_call+0x2327/0x3020 [ 200.712063][ T9548] do_syscall_64+0x12c/0x370 [ 200.712085][ T9548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.712123][ T9548] RIP: 0033:0x7f9238f0c819 [ 200.712266][ T9548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.712281][ T9548] RSP: 002b:00007f9237967028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 200.712297][ T9548] RAX: ffffffffffffffda RBX: 00007f9239185fa0 RCX: 00007f9238f0c819 [ 200.712386][ T9548] RDX: 000000000000003c RSI: 0000000000000001 RDI: 0000000000000003 [ 200.712397][ T9548] RBP: 00007f9237967090 R08: 0000000000000004 R09: 0000000000000000 [ 200.712407][ T9548] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 200.712418][ T9548] R13: 00007f9239186038 R14: 00007f9239185fa0 R15: 00007ffd55516df8 [ 200.712434][ T9548] [ 200.941792][ T9563] random: crng reseeded on system resumption [ 200.973962][ T9560] syzkaller0: entered promiscuous mode [ 201.017783][ T9560] syzkaller0: entered allmulticast mode [ 201.131552][ T9577] loop7: detected capacity change from 0 to 512 [ 201.140440][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1730'. [ 201.143110][ T9579] veth0: entered promiscuous mode [ 201.154354][ T9579] vlan2: entered promiscuous mode [ 201.160414][ T9577] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.179860][ T9574] loop8: detected capacity change from 0 to 512 [ 201.181397][ T9577] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 201.186381][ T9574] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 201.195249][ T9577] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 201.215137][ T9577] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 201.223936][ T9577] System zones: 0-2, 18-18, 34-35 [ 201.232161][ T9577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.234762][ T9580] vlan2: entered promiscuous mode [ 201.263122][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 201.263153][ T28] audit: type=1400 audit(1775329064.802:3539): avc: denied { create } for pid=9576 comm="syz.7.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 201.418692][ T6379] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.429719][ T9594] program syz.4.1734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.441106][ T28] audit: type=1400 audit(1775329064.992:3540): avc: denied { setopt } for pid=9592 comm="syz.4.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.980701][ T9605] lo speed is unknown, defaulting to 1000 [ 202.089222][ T9605] chnl_net:caif_netlink_parms(): no params data found [ 202.190240][ T9605] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.199350][ T9605] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.206650][ T9605] bridge_slave_0: entered allmulticast mode [ 202.214197][ T9605] bridge_slave_0: entered promiscuous mode [ 202.246137][ T9605] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.260271][ T9626] loop6: detected capacity change from 0 to 512 [ 202.267393][ T9605] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.295650][ T9626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.315779][ T9605] bridge_slave_1: entered allmulticast mode [ 202.330667][ T9605] bridge_slave_1: entered promiscuous mode [ 202.342507][ T9626] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.414777][ T28] audit: type=1400 audit(1775329065.952:3541): avc: denied { create } for pid=9625 comm="syz.6.1743" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 202.420847][ T28] audit: type=1400 audit(1775329065.962:3542): avc: denied { append open } for pid=9625 comm="syz.6.1743" path="/212/file1/memory.events" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 202.468024][ T9605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.623155][ T9636] loop7: detected capacity change from 0 to 128 [ 202.624553][ T5944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.632413][ T9605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.717028][ T3407] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 202.728079][ T9649] loop6: detected capacity change from 0 to 256 [ 202.903583][ T9657] loop8: detected capacity change from 0 to 4096 [ 202.957559][ T9660] loop7: detected capacity change from 0 to 164 [ 202.969615][ T9660] rock: directory entry would overflow storage [ 202.975850][ T9660] rock: sig=0x66, size=4, remaining=3 [ 203.012518][ T9660] rock: directory entry would overflow storage [ 203.018735][ T9660] rock: sig=0x66, size=4, remaining=3 [ 203.024379][ T9660] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 203.042078][ T12] bond1 (unregistering): Released all slaves [ 203.079001][ T9660] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 203.120015][ T9605] team0: Port device team_slave_0 added [ 203.145360][ T9605] team0: Port device team_slave_1 added [ 203.206126][ T9605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.224360][ T9605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.287160][ T9605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.328169][ T9605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.362722][ T9605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.434127][ T9605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.531999][ T9605] hsr_slave_0: entered promiscuous mode [ 203.703476][ T9680] loop6: detected capacity change from 0 to 512 [ 203.730077][ T9605] hsr_slave_1: entered promiscuous mode [ 203.745104][ T9605] debugfs: 'hsr0' already exists in 'hsr' [ 203.757235][ T9680] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 203.765479][ T9605] Cannot create hsr debugfs directory [ 203.771668][ T9657] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.784577][ T9680] EXT4-fs (loop6): orphan cleanup on readonly fs [ 203.794220][ T12] tipc: Disabling bearer [ 203.801500][ T12] tipc: Left network mode [ 203.806230][ T9680] EXT4-fs warning (device loop6): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 203.827548][ T9680] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 203.841036][ T9680] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz.6.1751: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 203.892100][ T9680] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 203.896791][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 203.912310][ C0] EXT4-fs (loop6): last error at time 1775329067: ext4_ext_check_inode:521: inode 13 [ 203.924702][ T9680] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1751: couldn't read orphan inode 13 (err -117) [ 203.950875][ T9680] loop6: lost filesystem error report for type 5 error -117 [ 203.970406][ T9680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 204.008949][ T7856] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.051642][ T9680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.085186][ T12] hsr_slave_0: left promiscuous mode [ 204.093253][ T12] hsr_slave_1: left promiscuous mode [ 204.422706][ T9741] loop7: detected capacity change from 0 to 2048 [ 204.463310][ T3307] Alternate GPT is invalid, using primary GPT. [ 204.470081][ T3307] loop7: p2 p3 p7 [ 204.480568][ T9741] Alternate GPT is invalid, using primary GPT. [ 204.487074][ T9741] loop7: p2 p3 p7 [ 204.568243][ T9605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.582193][ T7479] udevd[7479]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 204.594604][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 204.605419][ T3979] udevd[3979]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 204.623984][ T9605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.648718][ T9605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.659431][ T9605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.698854][ T9605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.714109][ T9605] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.736001][ T9605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.746372][ T9605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.758574][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.765672][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.774244][ T9774] __nla_validate_parse: 2 callbacks suppressed [ 204.774260][ T9774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1761'. [ 204.801164][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.808222][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.816974][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1761'. [ 204.918565][ T9605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.023882][ T3432] hid_parser_main: 10 callbacks suppressed [ 205.023899][ T3432] hid-generic 0000:0000:000E.0010: unknown main item tag 0x0 [ 205.042018][ T9788] Invalid argument reading file caps for ./file0 [ 205.045380][ T9605] veth0_vlan: entered promiscuous mode [ 205.064634][ T3432] hid-generic 0000:0000:000E.0010: unknown main item tag 0x0 [ 205.086921][ T3432] hid-generic 0000:0000:000E.0010: unknown main item tag 0x0 [ 205.096365][ T9605] veth1_vlan: entered promiscuous mode [ 205.102622][ T3432] hid-generic 0000:0000:000E.0010: unknown main item tag 0x0 [ 205.111317][ T9793] qrtr: Invalid version 0 [ 205.135039][ T9605] veth0_macvtap: entered promiscuous mode [ 205.153872][ T3432] hid-generic 0000:0000:000E.0010: unknown main item tag 0x0 [ 205.159050][ T9798] FAULT_INJECTION: forcing a failure. [ 205.159050][ T9798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.162122][ T9605] veth1_macvtap: entered promiscuous mode [ 205.180354][ T3432] hid-generic 0000:0000:000E.0010: unknown main item tag 0x0 [ 205.191070][ T3432] hid-generic 0000:0000:000E.0010: unknown main item tag 0x0 [ 205.201452][ T9605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.207020][ T9798] CPU: 0 UID: 0 PID: 9798 Comm: syz.8.1766 Tainted: G W syzkaller #0 PREEMPT(full) [ 205.207045][ T9798] Tainted: [W]=WARN [ 205.207050][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.207060][ T9798] Call Trace: [ 205.207066][ T9798] [ 205.207096][ T9798] __dump_stack+0x1d/0x30 [ 205.207118][ T9798] dump_stack_lvl+0x95/0xd0 [ 205.207175][ T9798] dump_stack+0x15/0x1b [ 205.207192][ T9798] should_fail_ex+0x263/0x280 [ 205.207234][ T9798] should_fail+0xb/0x20 [ 205.207253][ T9798] should_fail_usercopy+0x1a/0x20 [ 205.207275][ T9798] _copy_from_user+0x1c/0xb0 [ 205.207299][ T9798] ___sys_sendmsg+0xc1/0x1e0 [ 205.207464][ T9798] __x64_sys_sendmsg+0xd4/0x160 [ 205.207553][ T9798] x64_sys_call+0x194c/0x3020 [ 205.207618][ T9798] do_syscall_64+0x12c/0x370 [ 205.207639][ T9798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.207657][ T9798] RIP: 0033:0x7f9238f0c819 [ 205.207670][ T9798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.207683][ T9798] RSP: 002b:00007f9237967028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.207741][ T9798] RAX: ffffffffffffffda RBX: 00007f9239185fa0 RCX: 00007f9238f0c819 [ 205.207753][ T9798] RDX: 0000000020008800 RSI: 0000200000000100 RDI: 0000000000000003 [ 205.207827][ T9798] RBP: 00007f9237967090 R08: 0000000000000000 R09: 0000000000000000 [ 205.207838][ T9798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.207848][ T9798] R13: 00007f9239186038 R14: 00007f9239185fa0 R15: 00007ffd55516df8 [ 205.207902][ T9798] [ 205.320499][ T9803] netlink: 176 bytes leftover after parsing attributes in process `syz.8.1767'. [ 205.328148][ T3432] hid-generic 0000:0000:000E.0010: unknown main item tag 0x0 [ 205.387520][ T3432] hid-generic 0000:0000:000E.0010: unknown main item tag 0x0 [ 205.394906][ T3432] hid-generic 0000:0000:000E.0010: unknown main item tag 0x0 [ 205.408104][ T9605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.426360][ T1736] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.435601][ T3432] hid-generic 0000:0000:000E.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 205.447082][ T1736] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.538582][ T1736] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.572414][ T1736] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.639496][ T9813] loop6: detected capacity change from 0 to 2048 [ 205.662119][ T9817] loop0: detected capacity change from 0 to 128 [ 205.708807][ T3979] Alternate GPT is invalid, using primary GPT. [ 205.715163][ T3979] loop6: p2 p3 p7 [ 205.728552][ T9813] Alternate GPT is invalid, using primary GPT. [ 205.734943][ T9813] loop6: p2 p3 p7 [ 205.832856][ T7479] udevd[7479]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 205.836759][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 205.844126][ T3979] udevd[3979]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 205.903758][ T9832] loop7: detected capacity change from 0 to 128 [ 205.918091][ T9830] loop6: detected capacity change from 0 to 2048 [ 205.930363][ T9832] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.966036][ T9832] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.969467][ T9830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.029745][ T9830] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 206.047278][ T9830] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 1 with error 28 [ 206.059808][ T9830] EXT4-fs (loop6): This should not happen!! Data will be lost [ 206.059808][ T9830] [ 206.069631][ T9830] EXT4-fs (loop6): Total free blocks count 0 [ 206.075658][ T9830] EXT4-fs (loop6): Free/Dirty block details [ 206.081619][ T9830] EXT4-fs (loop6): free_blocks=4096 [ 206.082462][ T9825] loop0: detected capacity change from 0 to 4096 [ 206.086978][ T9830] EXT4-fs (loop6): dirty_blocks=32 [ 206.086991][ T9830] EXT4-fs (loop6): Block reservation details [ 206.087001][ T9830] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 206.088411][ T9830] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 206.147083][ T9825] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.1774: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 206.166727][ T9825] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 206.168551][ T9825] EXT4-fs (loop0): get root inode failed [ 206.175334][ T5944] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 206.177864][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 206.201395][ C1] EXT4-fs (loop0): initial error at time 1775329069: ext4_ext_check_inode:521: inode 2 [ 206.211274][ C1] EXT4-fs (loop0): last error at time 1775329069: ext4_ext_check_inode:521: inode 2 [ 206.222322][ T9825] EXT4-fs (loop0): mount failed [ 206.258824][ T9832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.287160][ T9825] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1774'. [ 206.296855][ T9832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.329758][ T9832] sg_write: data in/out 466900/56 bytes for SCSI command 0x0-- guessing data in; [ 206.329758][ T9832] program syz.7.1777 not setting count and/or reply_len properly [ 206.330831][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1779'. [ 206.399187][ T9843] veth0_macvtap: left promiscuous mode [ 206.658702][ T9862] loop8: detected capacity change from 0 to 512 [ 206.675143][ T9859] loop0: detected capacity change from 0 to 2048 [ 206.678180][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1786'. [ 206.713205][ T3407] kernel read not supported for file /uhid (pid: 3407 comm: kworker/0:4) [ 206.723033][ T3415] hid-generic 0000:0000:000E.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 206.750550][ T3979] Alternate GPT is invalid, using primary GPT. [ 206.757047][ T3979] loop0: p2 p3 p7 [ 206.782701][ T9867] fido_id[9867]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.825141][ T9859] Alternate GPT is invalid, using primary GPT. [ 206.832022][ T9859] loop0: p2 p3 p7 [ 206.924309][ T6379] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.955148][ T3979] udevd[3979]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 206.955446][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 206.975734][ T7479] udevd[7479]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 207.044949][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 207.055727][ T9881] loop0: detected capacity change from 0 to 128 [ 207.096215][ T9883] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1793'. [ 207.105981][ T9890] loop8: detected capacity change from 0 to 128 [ 207.128342][ T28] audit: type=1400 audit(1775329070.672:3543): avc: denied { override_creds } for pid=9873 comm="syz.8.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 207.181269][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1795'. [ 207.249414][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1795'. [ 207.290997][ T9909] FAULT_INJECTION: forcing a failure. [ 207.290997][ T9909] name failslab, interval 1, probability 0, space 0, times 0 [ 207.323790][ T9909] CPU: 1 UID: 0 PID: 9909 Comm: syz.7.1798 Tainted: G W syzkaller #0 PREEMPT(full) [ 207.323848][ T9909] Tainted: [W]=WARN [ 207.323853][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.323934][ T9909] Call Trace: [ 207.323939][ T9909] [ 207.323944][ T9909] __dump_stack+0x1d/0x30 [ 207.323969][ T9909] dump_stack_lvl+0x95/0xd0 [ 207.323985][ T9909] dump_stack+0x15/0x1b [ 207.324055][ T9909] should_fail_ex+0x263/0x280 [ 207.324097][ T9909] should_failslab+0x8c/0xb0 [ 207.324116][ T9909] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 207.324136][ T9909] ? __alloc_skb+0x2d6/0x690 [ 207.324232][ T9909] __alloc_skb+0x2d6/0x690 [ 207.324253][ T9909] ? __alloc_skb+0x200/0x690 [ 207.324306][ T9909] netlink_alloc_large_skb+0xbf/0xf0 [ 207.324328][ T9909] netlink_sendmsg+0x40c/0x6f0 [ 207.324366][ T9909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.324380][ T9909] ____sys_sendmsg+0x563/0x5b0 [ 207.324407][ T9909] ___sys_sendmsg+0x195/0x1e0 [ 207.324516][ T9909] __x64_sys_sendmsg+0xd4/0x160 [ 207.324539][ T9909] x64_sys_call+0x194c/0x3020 [ 207.324593][ T9909] do_syscall_64+0x12c/0x370 [ 207.324615][ T9909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.324672][ T9909] RIP: 0033:0x7fe00f32c819 [ 207.324685][ T9909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.324714][ T9909] RSP: 002b:00007fe00dd87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.324729][ T9909] RAX: ffffffffffffffda RBX: 00007fe00f5a5fa0 RCX: 00007fe00f32c819 [ 207.324739][ T9909] RDX: 0200000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 207.324749][ T9909] RBP: 00007fe00dd87090 R08: 0000000000000000 R09: 0000000000000000 [ 207.324827][ T9909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.324838][ T9909] R13: 00007fe00f5a6038 R14: 00007fe00f5a5fa0 R15: 00007ffd63770f18 [ 207.324853][ T9909] [ 207.539523][ T9912] loop7: detected capacity change from 0 to 2048 [ 207.552416][ T9853] Set syz1 is full, maxelem 65536 reached [ 207.684626][ T9912] Alternate GPT is invalid, using primary GPT. [ 207.691423][ T9912] loop7: p2 p3 p7 [ 207.812844][ T9917] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 208.174741][ T9921] ISOFS: Logical zone size(64) < hardware blocksize(1024) [ 208.321191][ T9925] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1811'. [ 208.639704][ T9932] lo speed is unknown, defaulting to 1000 [ 208.958954][ T9938] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 209.278673][ T9948] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.304824][ T9948] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.465631][ T9951] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 209.488972][ T9955] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.513525][ T9955] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.748892][ T9955] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 210.012475][ T7856] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.402514][ T10] hid_parser_main: 24 callbacks suppressed [ 210.402600][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 210.456970][ T10] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 210.870568][ T9981] set_capacity_and_notify: 7 callbacks suppressed [ 210.870581][ T9981] loop0: detected capacity change from 0 to 512 [ 210.947130][ T5944] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.976699][ T9986] syzkaller0: entered promiscuous mode [ 210.991184][ T9986] syzkaller0: entered allmulticast mode [ 211.017558][ T9988] loop6: detected capacity change from 0 to 128 [ 211.175725][ T3432] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.187121][ T9994] __nla_validate_parse: 3 callbacks suppressed [ 211.187130][ T9994] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1825'. [ 211.187224][ T9995] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1825'. [ 211.207297][ T3432] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 211.263426][ T9996] fido_id[9996]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 211.310539][T10002] loop6: detected capacity change from 0 to 256 [ 211.318774][T10004] netlink: 'syz.0.1830': attribute type 2 has an invalid length. [ 211.519333][T10010] can0: slcan on ttyS3. [ 211.519947][ T28] audit: type=1400 audit(1775329075.062:3544): avc: denied { ioctl } for pid=10005 comm="syz.0.1831" path="socket:[27440]" dev="sockfs" ino=27440 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 211.596902][T10010] can0 (unregistered): slcan off ttyS3. [ 211.610272][T10010] Falling back ldisc for ttyS3. [ 211.709749][T10017] loop8: detected capacity change from 0 to 128 [ 211.741716][T10017] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.796930][T10017] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.929692][T10030] FAULT_INJECTION: forcing a failure. [ 212.929692][T10030] name failslab, interval 1, probability 0, space 0, times 0 [ 212.998941][T10030] CPU: 0 UID: 0 PID: 10030 Comm: syz.0.1835 Tainted: G W syzkaller #0 PREEMPT(full) [ 212.999016][T10030] Tainted: [W]=WARN [ 212.999022][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.999031][T10030] Call Trace: [ 212.999037][T10030] [ 212.999043][T10030] __dump_stack+0x1d/0x30 [ 212.999064][T10030] dump_stack_lvl+0x95/0xd0 [ 212.999152][T10030] dump_stack+0x15/0x1b [ 212.999169][T10030] should_fail_ex+0x263/0x280 [ 212.999193][T10030] should_failslab+0x8c/0xb0 [ 212.999246][T10030] __kmalloc_noprof+0xb8/0x4e0 [ 212.999262][T10030] ? blk_rq_map_user_iov+0x2d1/0xfe0 [ 212.999280][T10030] blk_rq_map_user_iov+0x2d1/0xfe0 [ 212.999302][T10030] blk_rq_map_user_io+0x1a4/0x280 [ 212.999458][T10030] ? avc_has_perm+0x101/0x190 [ 212.999483][T10030] ? selinux_file_open+0x2e6/0x330 [ 212.999507][T10030] ? sg_link_reserve+0x117/0x140 [ 212.999526][T10030] sg_common_write+0xb4f/0xc80 [ 212.999588][T10030] sg_write+0x6f8/0x7a0 [ 212.999601][T10030] ? _parse_integer_limit+0x170/0x190 [ 212.999631][T10030] ? __pfx_sg_write+0x10/0x10 [ 212.999648][T10030] vfs_write+0x269/0x9f0 [ 212.999705][T10030] ? __rcu_read_unlock+0x4e/0x70 [ 212.999723][T10030] ? __fget_files+0x184/0x1c0 [ 212.999745][T10030] ksys_write+0xdc/0x1a0 [ 212.999820][T10030] __x64_sys_write+0x40/0x50 [ 212.999835][T10030] x64_sys_call+0x27e1/0x3020 [ 212.999863][T10030] do_syscall_64+0x12c/0x370 [ 212.999918][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.999986][T10030] RIP: 0033:0x7f688c0bc819 [ 212.999997][T10030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.000009][T10030] RSP: 002b:00007f688ab17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.000055][T10030] RAX: ffffffffffffffda RBX: 00007f688c335fa0 RCX: 00007f688c0bc819 [ 213.000067][T10030] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 0000000000000004 [ 213.000079][T10030] RBP: 00007f688ab17090 R08: 0000000000000000 R09: 0000000000000000 [ 213.000091][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.000102][T10030] R13: 00007f688c336038 R14: 00007f688c335fa0 R15: 00007ffc8c6900f8 [ 213.000119][T10030] [ 213.411208][ T7856] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.503478][ T3432] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 213.544410][ T3432] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.648114][T10043] loop0: detected capacity change from 0 to 256 [ 213.668602][T10043] FAULT_INJECTION: forcing a failure. [ 213.668602][T10043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.681685][T10043] CPU: 0 UID: 0 PID: 10043 Comm: syz.0.1840 Tainted: G W syzkaller #0 PREEMPT(full) [ 213.681712][T10043] Tainted: [W]=WARN [ 213.681718][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.681728][T10043] Call Trace: [ 213.681735][T10043] [ 213.681800][T10043] __dump_stack+0x1d/0x30 [ 213.681822][T10043] dump_stack_lvl+0x95/0xd0 [ 213.681973][T10043] dump_stack+0x15/0x1b [ 213.681992][T10043] should_fail_ex+0x263/0x280 [ 213.682015][T10043] should_fail+0xb/0x20 [ 213.682046][T10043] should_fail_usercopy+0x1a/0x20 [ 213.682067][T10043] strncpy_from_user+0x27/0x250 [ 213.682082][T10043] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 213.682116][T10043] do_getname+0x59/0x1c0 [ 213.682189][T10043] user_path_at+0x28/0x100 [ 213.682209][T10043] __se_sys_mount+0x25b/0x2e0 [ 213.682241][T10043] ? fput+0x8f/0xc0 [ 213.682264][T10043] __x64_sys_mount+0x67/0x80 [ 213.682350][T10043] x64_sys_call+0x2d61/0x3020 [ 213.682371][T10043] do_syscall_64+0x12c/0x370 [ 213.682394][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.682413][T10043] RIP: 0033:0x7f688c0bc819 [ 213.682436][T10043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.682498][T10043] RSP: 002b:00007f688ab17028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.682516][T10043] RAX: ffffffffffffffda RBX: 00007f688c335fa0 RCX: 00007f688c0bc819 [ 213.682586][T10043] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 213.682596][T10043] RBP: 00007f688ab17090 R08: 0000000000000000 R09: 0000000000000000 [ 213.682605][T10043] R10: 000000000021c004 R11: 0000000000000246 R12: 0000000000000001 [ 213.682614][T10043] R13: 00007f688c336038 R14: 00007f688c335fa0 R15: 00007ffc8c6900f8 [ 213.682629][T10043] [ 213.972999][T10047] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1842'. [ 214.052549][T10055] loop0: detected capacity change from 0 to 128 [ 214.139919][T10059] can0: slcan on ttyS3. [ 214.232052][T10065] loop0: detected capacity change from 0 to 128 [ 214.238405][T10059] can0 (unregistered): slcan off ttyS3. [ 214.244033][T10059] Falling back ldisc for ttyS3. [ 214.477524][T10079] netlink: 'syz.7.1849': attribute type 1 has an invalid length. [ 214.508867][T10079] netlink: 'syz.7.1849': attribute type 4 has an invalid length. [ 214.516608][T10079] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1849'. [ 214.537088][T10081] Invalid argument reading file caps for ./file0 [ 214.699074][T10097] loop7: detected capacity change from 0 to 512 [ 214.751444][T10099] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1855'. [ 214.776708][T10097] EXT4-fs: Ignoring removed orlov option [ 214.783681][T10104] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1852'. [ 214.815629][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1852'. [ 214.849829][T10097] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 214.899576][T10097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 214.927435][T10097] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.1854: corrupted in-inode xattr: e_value size too large [ 214.995978][T10117] loop0: detected capacity change from 0 to 128 [ 215.055073][T10097] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 215.056816][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 215.072334][ C1] EXT4-fs (loop7): initial error at time 1775329078: ext4_iget_extra_inode:5040: inode 15 [ 215.082239][ C1] EXT4-fs (loop7): last error at time 1775329078: ext4_iget_extra_inode:5040: inode 15 [ 215.092182][T10097] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1854: couldn't read orphan inode 15 (err -117) [ 215.131604][T10097] loop7: lost filesystem error report for type 5 error -117 [ 215.138953][T10097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.183612][T10097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.237315][T10097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.316686][T10119] can0: slcan on ttyS3. [ 215.419736][T10119] can0 (unregistered): slcan off ttyS3. [ 215.447065][T10119] Falling back ldisc for ttyS3. [ 215.546697][T10137] loop4: detected capacity change from 0 to 128 [ 215.636572][T10141] IPVS: Scheduler module ip_vs_sip not found [ 215.665427][T10141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=10141 comm=syz.0.1862 [ 215.746213][T10149] FAULT_INJECTION: forcing a failure. [ 215.746213][T10149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.822735][T10149] CPU: 0 UID: 0 PID: 10149 Comm: syz.0.1863 Tainted: G W syzkaller #0 PREEMPT(full) [ 215.822806][T10149] Tainted: [W]=WARN [ 215.822812][T10149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.822822][T10149] Call Trace: [ 215.822828][T10149] [ 215.822835][T10149] __dump_stack+0x1d/0x30 [ 215.822858][T10149] dump_stack_lvl+0x95/0xd0 [ 215.822873][T10149] dump_stack+0x15/0x1b [ 215.822932][T10149] should_fail_ex+0x263/0x280 [ 215.822954][T10149] should_fail+0xb/0x20 [ 215.823029][T10149] should_fail_usercopy+0x1a/0x20 [ 215.823089][T10149] strncpy_from_user+0x27/0x250 [ 215.823107][T10149] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 215.823125][T10149] do_getname+0x59/0x1c0 [ 215.823183][T10149] __se_sys_symlink+0x20/0x1b0 [ 215.823204][T10149] __x64_sys_symlink+0x31/0x40 [ 215.823222][T10149] x64_sys_call+0x2465/0x3020 [ 215.823295][T10149] do_syscall_64+0x12c/0x370 [ 215.823384][T10149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.823450][T10149] RIP: 0033:0x7f688c0bc819 [ 215.823476][T10149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.823488][T10149] RSP: 002b:00007f688ab17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 215.823502][T10149] RAX: ffffffffffffffda RBX: 00007f688c335fa0 RCX: 00007f688c0bc819 [ 215.823513][T10149] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 00002000000006c0 [ 215.823569][T10149] RBP: 00007f688ab17090 R08: 0000000000000000 R09: 0000000000000000 [ 215.823579][T10149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.823588][T10149] R13: 00007f688c336038 R14: 00007f688c335fa0 R15: 00007ffc8c6900f8 [ 215.823679][T10149] [ 215.824594][ T6379] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.249986][T10171] loop4: detected capacity change from 0 to 128 [ 216.409980][T10175] loop0: detected capacity change from 0 to 1764 [ 216.448981][T10175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1869'. [ 216.503408][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1869'. [ 216.552805][T10179] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 216.645944][T10181] loop7: detected capacity change from 0 to 4096 [ 216.688377][T10188] loop4: detected capacity change from 0 to 128 [ 216.698823][T10181] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.853673][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1871'. [ 216.881007][T10181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.977395][ T28] audit: type=1400 audit(1775329080.522:3545): avc: denied { bind } for pid=10192 comm="syz.4.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.120624][T10181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.159027][ T28] audit: type=1400 audit(1775329080.702:3546): avc: denied { connect } for pid=10196 comm="syz.4.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.206805][T10195] Quota error (device loop7): do_check_range: Getting block 256 out of range 1-5 [ 217.215928][T10195] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 217.276795][T10195] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.1871: Failed to acquire dquot type 1 [ 217.300539][T10197] loop4: detected capacity change from 0 to 512 [ 217.356899][T10197] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 217.428180][ T6379] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.440069][T10197] EXT4-fs (loop4): 1 truncate cleaned up [ 217.503483][T10197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.601989][ T28] audit: type=1326 audit(1775329081.132:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.4.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac432c819 code=0x7ffc0000 [ 217.663831][ T28] audit: type=1326 audit(1775329081.132:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.4.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac432c819 code=0x7ffc0000 [ 217.699204][T10204] loop7: detected capacity change from 0 to 128 [ 217.733510][ T28] audit: type=1326 audit(1775329081.142:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.4.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac432c819 code=0x7ffc0000 [ 217.786790][ T28] audit: type=1326 audit(1775329081.142:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.4.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac432c819 code=0x7ffc0000 [ 217.846817][ T28] audit: type=1326 audit(1775329081.142:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.4.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7faac432c819 code=0x7ffc0000 [ 217.924594][ T28] audit: type=1326 audit(1775329081.142:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.4.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac432c819 code=0x7ffc0000 [ 218.051777][T10212] loop7: detected capacity change from 0 to 8192 [ 218.172898][T10213] lo speed is unknown, defaulting to 1000 [ 218.238237][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.313730][T10220] loop4: detected capacity change from 0 to 128 [ 218.363293][T10222] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1886'. [ 218.438415][ T3432] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 218.446684][ T3432] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 218.497673][T10231] netlink: 'syz.6.1888': attribute type 1 has an invalid length. [ 218.511537][T10228] fido_id[10228]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 218.534496][ T6379] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 218.542509][T10232] loop4: detected capacity change from 0 to 2048 [ 218.547542][ T6379] FAT-fs (loop7): Filesystem has been set read-only [ 218.587230][T10235] loop6: detected capacity change from 0 to 128 [ 218.621306][ T3307] Alternate GPT is invalid, using primary GPT. [ 218.634962][ T3307] loop4: p2 p3 p7 [ 218.689560][T10232] Alternate GPT is invalid, using primary GPT. [ 218.699656][T10232] loop4: p2 p3 p7 [ 218.801690][ T3979] udevd[3979]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 218.801703][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 218.822217][T10049] udevd[10049]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 218.917846][ T3979] udevd[3979]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 218.937359][T10241] netlink: 'syz.6.1894': attribute type 8 has an invalid length. [ 219.002955][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1896'. [ 219.022250][T10248] FAULT_INJECTION: forcing a failure. [ 219.022250][T10248] name failslab, interval 1, probability 0, space 0, times 0 [ 219.051719][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1896'. [ 219.066968][T10248] CPU: 0 UID: 0 PID: 10248 Comm: syz.6.1897 Tainted: G W syzkaller #0 PREEMPT(full) [ 219.067000][T10248] Tainted: [W]=WARN [ 219.067062][T10248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.067071][T10248] Call Trace: [ 219.067077][T10248] [ 219.067083][T10248] __dump_stack+0x1d/0x30 [ 219.067103][T10248] dump_stack_lvl+0x95/0xd0 [ 219.067119][T10248] dump_stack+0x15/0x1b [ 219.067180][T10248] should_fail_ex+0x263/0x280 [ 219.067200][T10248] should_failslab+0x8c/0xb0 [ 219.067215][T10248] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 219.067232][T10248] ? __alloc_skb+0x2d6/0x690 [ 219.067274][T10248] __alloc_skb+0x2d6/0x690 [ 219.067303][T10248] ? __alloc_skb+0x200/0x690 [ 219.067324][T10248] netlink_alloc_large_skb+0xbf/0xf0 [ 219.067466][T10248] netlink_sendmsg+0x40c/0x6f0 [ 219.067483][T10248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.067496][T10248] ____sys_sendmsg+0x563/0x5b0 [ 219.067580][T10248] ___sys_sendmsg+0x195/0x1e0 [ 219.067614][T10248] __x64_sys_sendmsg+0xd4/0x160 [ 219.067707][T10248] x64_sys_call+0x194c/0x3020 [ 219.067727][T10248] do_syscall_64+0x12c/0x370 [ 219.067748][T10248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.067773][T10248] RIP: 0033:0x7fb4cb76c819 [ 219.067790][T10248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.067802][T10248] RSP: 002b:00007fb4ca1bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.067818][T10248] RAX: ffffffffffffffda RBX: 00007fb4cb9e5fa0 RCX: 00007fb4cb76c819 [ 219.067879][T10248] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 219.067889][T10248] RBP: 00007fb4ca1bf090 R08: 0000000000000000 R09: 0000000000000000 [ 219.067949][T10248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.067960][T10248] R13: 00007fb4cb9e6038 R14: 00007fb4cb9e5fa0 R15: 00007ffe82a6f258 [ 219.067975][T10248] [ 219.308963][ T3432] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 219.317276][ T3432] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 219.348616][T10254] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1899'. [ 219.365480][T10254] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1899'. [ 219.366210][T10253] fido_id[10253]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 219.430644][T10257] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 219.448432][T10257] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 219.456429][T10257] EXT4-fs (loop6): orphan cleanup on readonly fs [ 219.463112][T10257] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.1899: Freeing blocks not in datazone - block = 0, count = 4096 [ 219.476631][T10257] loop6: lost filesystem error report for type 5 error -117 [ 219.476732][T10257] EXT4-fs (loop6): Remounting filesystem read-only [ 219.484010][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 219.484054][ C1] EXT4-fs (loop6): initial error at time 1775329083: ext4_free_blocks:6724 [ 219.484071][ C1] EXT4-fs (loop6): last error at time 1775329083: ext4_free_blocks:6724 [ 219.517814][T10257] EXT4-fs (loop6): 1 orphan inode deleted [ 219.523898][T10257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.545653][ T5944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.586094][ T30] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.634177][T10267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.663883][ T30] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.730531][ T5944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.789328][T10281] IPVS: Scheduler module ip_vs_sip not found [ 219.797506][ T30] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.808166][T10281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=10281 comm=syz.6.1907 [ 219.808412][T10278] FAULT_INJECTION: forcing a failure. [ 219.808412][T10278] name failslab, interval 1, probability 0, space 0, times 0 [ 219.833539][T10281] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1907'. [ 219.840964][T10278] CPU: 1 UID: 0 PID: 10278 Comm: syz.4.1908 Tainted: G W syzkaller #0 PREEMPT(full) [ 219.841016][T10278] Tainted: [W]=WARN [ 219.841023][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.841088][T10278] Call Trace: [ 219.841171][T10278] [ 219.841177][T10278] __dump_stack+0x1d/0x30 [ 219.841202][T10278] dump_stack_lvl+0x95/0xd0 [ 219.841220][T10278] dump_stack+0x15/0x1b [ 219.841237][T10278] should_fail_ex+0x263/0x280 [ 219.841347][T10278] should_failslab+0x8c/0xb0 [ 219.841363][T10278] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 219.841382][T10278] ? __alloc_skb+0x2d6/0x690 [ 219.841404][T10278] __alloc_skb+0x2d6/0x690 [ 219.841493][T10278] ? __alloc_skb+0x200/0x690 [ 219.841557][T10278] netlink_alloc_large_skb+0xbf/0xf0 [ 219.841581][T10278] netlink_sendmsg+0x40c/0x6f0 [ 219.841648][T10278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.841670][T10278] ____sys_sendmsg+0x563/0x5b0 [ 219.841697][T10278] ___sys_sendmsg+0x195/0x1e0 [ 219.841778][T10278] __x64_sys_sendmsg+0xd4/0x160 [ 219.841805][T10278] x64_sys_call+0x194c/0x3020 [ 219.841825][T10278] do_syscall_64+0x12c/0x370 [ 219.841913][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.841931][T10278] RIP: 0033:0x7faac432c819 [ 219.841968][T10278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.841982][T10278] RSP: 002b:00007faac2d7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.841998][T10278] RAX: ffffffffffffffda RBX: 00007faac45a5fa0 RCX: 00007faac432c819 [ 219.842010][T10278] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 219.842020][T10278] RBP: 00007faac2d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.842030][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.842094][T10278] R13: 00007faac45a6038 R14: 00007faac45a5fa0 R15: 00007ffec27f9fc8 [ 219.842109][T10278] [ 220.072461][ T30] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.087537][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 220.095985][ T10] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 220.135081][T10275] lo speed is unknown, defaulting to 1000 [ 220.167237][T10293] fido_id[10293]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 220.204264][ T30] bridge_slave_1: left allmulticast mode [ 220.236844][ T30] bridge_slave_1: left promiscuous mode [ 220.242502][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.267049][ T30] bridge_slave_0: left allmulticast mode [ 220.272675][ T30] bridge_slave_0: left promiscuous mode [ 220.306929][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.497830][T10286] No such timeout policy "syz0" [ 220.510179][T10286] netlink: 'syz.4.1909': attribute type 1 has an invalid length. [ 220.530264][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.540415][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.550185][ T30] bond0 (unregistering): Released all slaves [ 220.557845][ T30] bond1 (unregistering): Released all slaves [ 220.567422][ T30] bond2 (unregistering): Released all slaves [ 220.812214][T10286] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.888128][T10319] tun0: tun_chr_ioctl cmd 2147767506 [ 220.939376][ T30] tipc: Left network mode [ 221.266984][ T30] hsr_slave_0: left promiscuous mode [ 221.297328][ T30] hsr_slave_1: left promiscuous mode [ 221.317278][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.347462][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.387047][ T30] veth1_macvtap: left promiscuous mode [ 221.397927][ T30] veth0_macvtap: left promiscuous mode [ 221.403466][ T30] veth1_vlan: left promiscuous mode [ 221.409453][ T30] veth0_vlan: left promiscuous mode [ 221.446714][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 221.480967][T10330] set_capacity_and_notify: 5 callbacks suppressed [ 221.481025][T10330] loop0: detected capacity change from 0 to 512 [ 221.494401][ T10] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 221.509367][T10330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.551071][T10330] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 221.573246][T10349] fido_id[10349]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 221.594531][T10330] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 221.604853][T10352] loop8: detected capacity change from 0 to 128 [ 221.627495][T10330] EXT4-fs (loop0): orphan cleanup on readonly fs [ 221.661692][T10330] EXT4-fs warning (device loop0): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 221.692510][ T30] team0 (unregistering): Port device team_slave_1 removed [ 221.791182][T10330] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 221.804484][ T30] team0 (unregistering): Port device team_slave_0 removed [ 221.817151][T10330] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1917: bg 0: block 40: padding at end of block bitmap is not set [ 221.861857][T10330] loop0: lost filesystem error report for type 5 error -117 [ 221.861954][T10330] EXT4-fs (loop0): Remounting filesystem read-only [ 221.869308][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 221.869319][ C0] EXT4-fs (loop0): initial error at time 1775329085: ext4_validate_block_bitmap:441 [ 221.869343][ C0] EXT4-fs (loop0): last error at time 1775329085: ext4_validate_block_bitmap:441 [ 221.902369][T10330] EXT4-fs (loop0): 1 truncate cleaned up [ 221.908521][T10330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.955905][ T9605] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.024074][T10275] chnl_net:caif_netlink_parms(): no params data found [ 222.105002][T10377] loop0: detected capacity change from 0 to 128 [ 222.258474][T10389] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1929'. [ 222.273590][T10390] loop8: detected capacity change from 0 to 1764 [ 222.284697][T10390] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1924'. [ 222.294108][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1924'. [ 222.309608][T10390] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 222.327722][T10275] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.347510][T10275] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.421334][T10275] bridge_slave_0: entered allmulticast mode [ 222.468649][T10275] bridge_slave_0: entered promiscuous mode [ 222.521321][T10403] loop0: detected capacity change from 0 to 128 [ 222.529186][T10275] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.579549][T10275] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.635515][T10275] bridge_slave_1: entered allmulticast mode [ 222.680362][T10275] bridge_slave_1: entered promiscuous mode [ 222.695711][T10411] loop4: detected capacity change from 0 to 512 [ 222.801162][ T28] kauditd_printk_skb: 148 callbacks suppressed [ 222.801222][ T28] audit: type=1400 audit(1775329086.342:3700): avc: denied { mount } for pid=10415 comm="syz.0.1935" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 222.834479][T10411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.852267][T10275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.889398][T10275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.913788][T10411] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.1934: iget: checksum invalid [ 222.924909][ T28] audit: type=1400 audit(1775329086.422:3701): avc: denied { unmount } for pid=9605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 222.977749][T10275] team0: Port device team_slave_0 added [ 222.998504][T10275] team0: Port device team_slave_1 added [ 223.004525][ T28] audit: type=1400 audit(1775329086.492:3702): avc: denied { listen } for pid=10422 comm="syz.0.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 223.044488][T10426] 9p: Bad value for 'rfdno' [ 223.068989][T10428] tipc: Started in network mode [ 223.081321][T10428] tipc: Node identity 762c944379ed, cluster identity 4711 [ 223.097368][T10428] tipc: Enabled bearer , priority 0 [ 223.109480][T10275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.123376][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.166508][T10275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.212482][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.229682][T10275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.248234][ T3330] ================================================================== [ 223.256296][ T3330] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 223.263825][ T3330] [ 223.266124][ T3330] read-write to 0xffff888237d26668 of 1 bytes by task 10382 on cpu 1: [ 223.274247][ T3330] folio_add_lru+0xa4/0x1e0 [ 223.278730][ T3330] folio_add_lru_vma+0x49/0x70 [ 223.283476][ T3330] do_wp_page+0x15b3/0x2590 [ 223.287963][ T3330] handle_mm_fault+0x8cb/0x3020 [ 223.292799][ T3330] do_user_addr_fault+0x3fd/0x1050 [ 223.297902][ T3330] exc_page_fault+0x62/0xa0 [ 223.302384][ T3330] asm_exc_page_fault+0x26/0x30 [ 223.307215][ T3330] __put_user_nocheck_4+0x3/0x10 [ 223.312136][ T3330] ____sys_recvmsg+0x1a1/0x280 [ 223.316879][ T3330] ___sys_recvmsg+0x11f/0x3b0 [ 223.321531][ T3330] do_recvmmsg+0x1ef/0x560 [ 223.325927][ T3330] __x64_sys_recvmmsg+0xe5/0x170 [ 223.330841][ T3330] x64_sys_call+0x80f/0x3020 [ 223.335410][ T3330] do_syscall_64+0x12c/0x370 [ 223.339980][ T3330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.345847][ T3330] [ 223.348148][ T3330] read to 0xffff888237d26668 of 1 bytes by task 3330 on cpu 0: [ 223.355679][ T3330] __lru_add_drain_all+0x17e/0x450 [ 223.360776][ T3330] lru_add_drain_all+0x10/0x20 [ 223.365526][ T3330] invalidate_bdev+0x47/0x70 [ 223.370096][ T3330] ext4_put_super+0x610/0x7b0 [ 223.374757][ T3330] generic_shutdown_super+0xee/0x220 [ 223.380028][ T3330] kill_block_super+0x2a/0x70 [ 223.384682][ T3330] ext4_kill_sb+0x42/0x80 [ 223.388991][ T3330] deactivate_locked_super+0x75/0x1c0 [ 223.394347][ T3330] deactivate_super+0x97/0xa0 [ 223.399002][ T3330] cleanup_mnt+0x2bb/0x330 [ 223.403402][ T3330] __cleanup_mnt+0x19/0x20 [ 223.407800][ T3330] task_work_run+0x130/0x1a0 [ 223.412369][ T3330] exit_to_user_mode_loop+0x1f4/0x6f0 [ 223.417722][ T3330] do_syscall_64+0x249/0x370 [ 223.422295][ T3330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.428167][ T3330] [ 223.430465][ T3330] value changed: 0x01 -> 0x02 [ 223.435112][ T3330] [ 223.437411][ T3330] Reported by Kernel Concurrency Sanitizer on: [ 223.443540][ T3330] CPU: 0 UID: 0 PID: 3330 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 223.454546][ T3330] Tainted: [W]=WARN [ 223.458323][ T3330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 223.468354][ T3330] ================================================================== [ 223.483984][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 223.510363][T10275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.521093][ T28] audit: type=1400 audit(1775329087.062:3703): avc: denied { write } for pid=3288 comm="syz-executor" path="pipe:[2396]" dev="pipefs" ino=2396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 223.555831][T10427] tipc: Disabling bearer [ 223.579335][ T28] audit: type=1400 audit(1775329087.072:3704): avc: denied { recv } for pid=3288 comm="syz-executor" saddr=10.128.0.163 src=36014 daddr=10.128.1.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 223.634995][T10275] hsr_slave_0: entered promiscuous mode [ 223.650019][T10275] hsr_slave_1: entered promiscuous mode [ 223.827694][ T1736] bridge_slave_1: left allmulticast mode [ 223.833326][ T1736] bridge_slave_1: left promiscuous mode [ 223.839353][ T1736] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.847028][ T1736] bridge_slave_0: left allmulticast mode [ 223.852640][ T1736] bridge_slave_0: left promiscuous mode [ 223.858689][ T1736] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.919372][ T1736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.937811][ T1736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.957164][ T1736] bond0 (unregistering): Released all slaves [ 224.012273][ T1736] hsr_slave_0: left promiscuous mode [ 224.018186][ T1736] hsr_slave_1: left promiscuous mode [ 224.023736][ T1736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.031182][ T1736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.050075][ T1736] team0 (unregistering): Port device team_slave_1 removed [ 224.059466][ T1736] team0 (unregistering): Port device team_slave_0 removed [ 224.350256][ T1736] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.388139][ T1736] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.458084][ T1736] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.528147][ T1736] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.599336][ T1736] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.669621][ T1736] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.721327][ T1736] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.779404][ T1736] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.909628][ T1736] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.959868][ T1736] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.023997][ T1736] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.050160][ T1736] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.118260][ T1736] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.170245][ T1736] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.199943][ T1736] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.248612][ T1736] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.332474][ T1736] bridge_slave_1: left allmulticast mode [ 225.339114][ T1736] bridge_slave_1: left promiscuous mode [ 225.344828][ T1736] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.352723][ T1736] bridge_slave_0: left allmulticast mode [ 225.359201][ T1736] bridge_slave_0: left promiscuous mode [ 225.364968][ T1736] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.373339][ T1736] vlan0: left promiscuous mode [ 225.378174][ T1736] ip6gretap0: left promiscuous mode [ 225.383519][ T1736] bridge2: port 2(vlan0) entered disabled state [ 225.390353][ T1736] veth0_to_bond: left allmulticast mode [ 225.395934][ T1736] veth0_to_bond: left promiscuous mode [ 225.401580][ T1736] bridge2: port 1(veth0_to_bond) entered disabled state [ 225.409295][ T1736] bridge_slave_1: left allmulticast mode [ 225.414898][ T1736] bridge_slave_1: left promiscuous mode [ 225.420629][ T1736] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.428791][ T1736] bridge_slave_0: left allmulticast mode [ 225.434400][ T1736] bridge_slave_0: left promiscuous mode [ 225.440135][ T1736] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.448155][ T1736] bridge_slave_1: left allmulticast mode [ 225.453762][ T1736] bridge_slave_1: left promiscuous mode [ 225.459781][ T1736] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.467629][ T1736] bridge_slave_0: left allmulticast mode [ 225.473232][ T1736] bridge_slave_0: left promiscuous mode [ 225.479266][ T1736] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.628674][ T1736] bond0 (unregistering): Released all slaves [ 225.809582][ T1736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.819979][ T1736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.829363][ T1736] bond0 (unregistering): Released all slaves [ 225.836705][ T1736] bond1 (unregistering): Released all slaves [ 225.844538][ T1736] bond2 (unregistering): Released all slaves [ 225.852709][ T1736] bond3 (unregistering): Released all slaves [ 225.879771][ T1736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.889694][ T1736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.898951][ T1736] bond0 (unregistering): Released all slaves [ 225.959405][ T1736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.969162][ T1736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.978859][ T1736] bond0 (unregistering): Released all slaves [ 226.013920][ T1736] tipc: Left network mode [ 226.022012][ T1736] tipc: Left network mode [ 226.026510][ T1736] tipc: Left network mode [ 226.098686][ T1736] hsr_slave_0: left promiscuous mode [ 226.104132][ T1736] hsr_slave_1: left promiscuous mode [ 226.111138][ T1736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.118591][ T1736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.125967][ T1736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.133590][ T1736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.142218][ T1736] hsr_slave_0: left promiscuous mode [ 226.147789][ T1736] hsr_slave_1: left promiscuous mode [ 226.153247][ T1736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.160654][ T1736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.168168][ T1736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.175506][ T1736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.184405][ T1736] hsr_slave_0: left promiscuous mode [ 226.190017][ T1736] hsr_slave_1: left promiscuous mode [ 226.195553][ T1736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.202968][ T1736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.210631][ T1736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.218006][ T1736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.235674][ T1736] veth1_macvtap: left promiscuous mode [ 226.241230][ T1736] veth1_vlan: left promiscuous mode [ 226.246499][ T1736] veth0_vlan: left promiscuous mode [ 226.252105][ T1736] veth1_macvtap: left promiscuous mode [ 226.257556][ T1736] veth0_macvtap: left promiscuous mode [ 226.263040][ T1736] veth1_vlan: left promiscuous mode [ 226.268529][ T1736] veth0_vlan: left promiscuous mode [ 226.274089][ T1736] veth1_macvtap: left promiscuous mode [ 226.279565][ T1736] veth0_macvtap: left promiscuous mode [ 226.285143][ T1736] veth1_vlan: left promiscuous mode [ 226.290456][ T1736] veth0_vlan: left promiscuous mode [ 226.296031][ T1736] veth1_macvtap: left promiscuous mode [ 226.301481][ T1736] veth0_macvtap: left promiscuous mode [ 226.307006][ T1736] veth1_vlan: left promiscuous mode [ 226.312308][ T1736] veth0_vlan: left promiscuous mode [ 226.531337][ T1736] team0 (unregistering): Port device team_slave_1 removed [ 226.540348][ T1736] team0 (unregistering): Port device team_slave_0 removed [ 226.586617][ T1736] team0 (unregistering): Port device team_slave_1 removed [ 226.596562][ T1736] team0 (unregistering): Port device team_slave_0 removed