last executing test programs: 1m41.841917284s ago: executing program 4 (id=351): preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0xa) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) sendto(0xffffffffffffffff, 0x0, 0x3f, 0x4000810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$9p_fd(0x0, 0x0, 0x0, 0x311880, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000bc40)={0x0, 0x0, &(0x7f000000bc00)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) r2 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a310000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mq_unlink(&(0x7f0000000000)='eth0\x00') 1m41.487186654s ago: executing program 4 (id=358): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x44800, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000001280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x1}}, 0x24) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x328, 0x5, 0x2, 0x6}, &(0x7f00000001c0)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x891d, &(0x7f0000000400)={'veth1_macvtap\x00', @ifru_data=0x0}) close(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a0900010073797a310000dd0008000540000000020900020073797a310000000008000a40fffffffc0800034000000130140000001100010000000000000000000100000a00"/108], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r7 = io_uring_setup(0x3719, &(0x7f00000003c0)={0x0, 0xf32, 0x80, 0x3, 0x360}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32, @ANYRESHEX, @ANYRES32], 0x50) r8 = creat(&(0x7f0000000300)='./file0\x00', 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c000000bd874508fe7183a557c4a504762748c5ae4b696bcf9086367065e4c2ce82f8b34e129c80cf36a2d62156c4c380555456ab87b951e99e389026105c3809cdbab0c1c3336117cf46e80ebb1813d69c9f8a348d25b91e4b6d3ba2711320452a1f1ccc23495d8a9a3cc636ebc786f411c81c852b3a09", @ANYRES16=r10, @ANYBLOB="010025bd7001fcdbdf25390000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x100, r10, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c080) umount2(0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000780)) 1m40.572168439s ago: executing program 4 (id=369): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000001340)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x400000000000126, 0xc040) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x4}, 0x0, 0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) 1m39.45688923s ago: executing program 4 (id=371): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x586, &(0x7f0000000900)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x198) lseek(r0, 0xfffffffffffffffc, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x8, 0xf60e}, 0x154b8, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = dup(r2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448dd, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) getdents(r0, 0x0, 0x58) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000000)=[{}], 0x4000) r6 = socket(0xa, 0x3, 0xff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x4e26, 0xf991, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, &(0x7f0000000100)='\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x20, 0x1, 0x10000, 0x6, {{0x16, 0x4, 0x0, 0x10, 0x58, 0x65, 0x0, 0x9, 0x29, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0x17, 0x91, [@empty, @remote, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x14, 0xd5, 0x0, 0x2, [0x3, 0x9, 0x2, 0x1]}, @ssrr={0x89, 0x13, 0xdc, [@local, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x9c, r9, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x0, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x0, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0xfffffffffffffdc6, 0x7, r10}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r11 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(r11, &(0x7f00000004c0)={&(0x7f0000000380)={0x1d, r10}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x7, 0x40, 0x401, {r12, r13/1000+10000}, {0x77359400}, {0x2}, 0x1, @can={{0x1, 0x1}, 0x2, 0x3, 0x0, 0x0, "72927a4d0d42cf46"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 1m38.483347647s ago: executing program 4 (id=380): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 1m37.247419311s ago: executing program 4 (id=400): dup(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x890, &(0x7f0000000340)={[{@nouid32}, {@data_err_ignore}, {@acl}, {@journal_checksum}, {@data_err_ignore}, {@noquota, 0x22}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$eJzs3MtvG8UfAPCv7Th9/+JfKY+WFkILouKRNOmDHrgUgcQBJCQ4FHEKSVqVug1qgkSrCloO5YgqcUcckfgLuFAuCDghcUICiSNCqlAvLZyM1t5NXcdO7MSxA/58JCcznlnNfHd37PGs1wEMrNHkTy5ie0T8EhEjtey9FUZr/+7cujz9163L07moVF7/M1etd/vW5emsarbdtlqmUlmm3WtvRUyVy7MX0vz4wrl3x+cvXnr2zLmp07OnZ89PHj9+5PC+4WOTR7sSZxLX7T0fzO3d/fKb11+dPnn97e+/TPq7PS2vj6NbRmt7t6knut1Yn+2oS+eG+tgROlKIiORwFavjfyQKsWWxbCRe+qivnQPWVaWSr2xqXXylAvyHJRN1YBBlb/TJ59/s0aOpx4Zw80QsrmPcSR+1kqHIp3WK6Wek9TAaESev/P1Z8oh1WocAAKh340REPNNs/pePB+rq/S+9hlKKiP9HxM6IuC8idkXE/RHVug9GxEMdtt94hWTp/KcysqrA2pTM/55Pr23dO//LZn9RKqS5HdX4i7lTZ8qzh9J9cjCKm5L8xDJtfPPiT5+0Kquf/yWPpP1sLpj244+hhgW6mamFqbXEXO/m1Yg9Q83izy3OeZP58e6I2LPKNs489cXeVmWlFeNfRhcm5ZXPI56sHf8r0RB/Jtfy+uTEc8cmj45vjvLsofHsrFjqhx+vvdaq/ZWP//q6eaMSWxvO/4bdWsptjpi/eOls9XrtfIcN/Bxx7dePW36mWe35P5x7o5oeTp97f2ph4cJExHDulaXPT97dNstn9ZPz/+CB5uN/Z7pNcvwfjojkJN4XEY9ExKNp3x+LiP0RcWCZXfDdC4+/03n8y6zKd1ES/0zT17/F87+UpO4e/84ThbPfftV5/Imt6fE/Us0dTLdp5/Wv3Q6udf8BAADAv0G++h34XH5sMZ3Pj43VvsO/K7bmy3PzC0+fmnvv/Eztu/KlKOazla6RuvXQiXQtL8tPNuQPp+vGnxa2VPNj03PlmX4HDwNuW4vxn/i9UPv/W197CKwr92vB4DL+YXAZ/zC4jH8YXMY/DK5m4//DPvQD6L0V3v+39KofQO+Z/8PgMv5hcK00/vf35l5koLda3hufX9Mt/xJ9Snw9vLbfamg/EfkNEvIGTRTaqHM1HYW1Z4rRtPJQ2z9mcU8ie1NfufKmpkV9fFECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoon8CAAD///T43is=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x6, 0x4002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x0, 0x4}, 0x102802, 0x6, 0xfffffff8, 0x3, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0, 0xe0ff}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000780)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)=@acquire={0x190, 0x17, 0x800, 0x70bd2d, 0x25dfdbfb, {{@in6=@loopback, 0x4d6, 0xff}, @in=@dev={0xac, 0x14, 0x14, 0x29}, {@in6=@remote, @in=@local, 0x4e23, 0x31, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x16}, {{@in6=@local, @in=@empty, 0x4e21, 0x8, 0x4e21, 0x6, 0x1b28a543e4ecb9e9, 0x20, 0xa0, 0x4, r9, r10}, {0x73f, 0x0, 0x8, 0x9, 0x8000000000000001, 0x1, 0x8, 0x5}, {0x5, 0x67, 0x7, 0x3}, 0x6, 0x6e6bb9, 0x0, 0x1, 0x2, 0x2}, 0x1, 0x6, 0x0, 0x70bd2c}, [@replay_thresh={0x8, 0xb, 0x6e2}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd29, 0x70bd2b, 0x70bd2b, 0x70bd2c, 0x9, [0x9, 0x12a, 0x76]}}, @replay_thresh={0x8, 0xb, 0xd1}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}, @lastused={0xc, 0xf, 0x4}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd26, 0x6}}]}, 0x190}}, 0x20000000) r11 = fsmount(r7, 0x0, 0x2) fchdir(r11) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) 1m37.247136821s ago: executing program 32 (id=400): dup(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x890, &(0x7f0000000340)={[{@nouid32}, {@data_err_ignore}, {@acl}, {@journal_checksum}, {@data_err_ignore}, {@noquota, 0x22}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x6, 0x4002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x0, 0x4}, 0x102802, 0x6, 0xfffffff8, 0x3, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0, 0xe0ff}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000780)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)=@acquire={0x190, 0x17, 0x800, 0x70bd2d, 0x25dfdbfb, {{@in6=@loopback, 0x4d6, 0xff}, @in=@dev={0xac, 0x14, 0x14, 0x29}, {@in6=@remote, @in=@local, 0x4e23, 0x31, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x16}, {{@in6=@local, @in=@empty, 0x4e21, 0x8, 0x4e21, 0x6, 0x1b28a543e4ecb9e9, 0x20, 0xa0, 0x4, r9, r10}, {0x73f, 0x0, 0x8, 0x9, 0x8000000000000001, 0x1, 0x8, 0x5}, {0x5, 0x67, 0x7, 0x3}, 0x6, 0x6e6bb9, 0x0, 0x1, 0x2, 0x2}, 0x1, 0x6, 0x0, 0x70bd2c}, [@replay_thresh={0x8, 0xb, 0x6e2}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd29, 0x70bd2b, 0x70bd2b, 0x70bd2c, 0x9, [0x9, 0x12a, 0x76]}}, @replay_thresh={0x8, 0xb, 0xd1}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}, @lastused={0xc, 0xf, 0x4}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd26, 0x6}}]}, 0x190}}, 0x20000000) r11 = fsmount(r7, 0x0, 0x2) fchdir(r11) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) 1m17.456274076s ago: executing program 3 (id=568): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @empty, 0x400}, 0x1c) 1m17.31688622s ago: executing program 3 (id=572): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/140, 0x8c}, {0x0}], 0x2, 0x2fd, 0x4) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000001000000020000000900010073797a3200000000"], 0x20}}, 0x800) listen(r0, 0x40000) syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x7, 0x0, [@multicast2]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@loopback}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000003c0)={0x20007a, 0x7d, 0x9, 0x4, 0x0, 0x81}) 1m17.232850052s ago: executing program 3 (id=575): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x0, 0x9}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) readahead(r0, 0x200, 0x5) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)={@void, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x8100, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x6b, 0x0, 0x5, 0x0, 0x0, @rand_addr=0x64010102, @local}}}}}}, 0x2a) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000100), &(0x7f0000000140), 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="01010101", 0x4) close(0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r4, r4) 1m17.145510784s ago: executing program 3 (id=578): r0 = socket$nl_route(0x10, 0x3, 0x0) rename(&(0x7f0000000540)='.\x00', &(0x7f0000000580)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x47a, &(0x7f0000000180)="$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") chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a82, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0xf, 0x202, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = timerfd_create(0x0, 0x80000) timerfd_gettime(r2, &(0x7f0000000000)) timer_create(0x2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getdents(0xffffffffffffffff, &(0x7f0000000ac0)=""/182, 0xb1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa8d0}, 0x0) 1m16.656076198s ago: executing program 3 (id=581): bpf$PROG_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000200)=0x100000001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0x301, 0x800000, 0x25dddbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2) 1m16.132428243s ago: executing program 3 (id=587): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x44, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}]}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000001280)={{0x2, 0x4e23, @broadcast}, {0x0, @remote}, 0x2, {0x2, 0x4e20, @multicast1}, 'gre0\x00'}) r3 = socket(0x10, 0x3, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e0400008100001000", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m16.047517054s ago: executing program 33 (id=587): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x44, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}]}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000001280)={{0x2, 0x4e23, @broadcast}, {0x0, @remote}, 0x2, {0x2, 0x4e20, @multicast1}, 'gre0\x00'}) r3 = socket(0x10, 0x3, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e0400008100001000", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.199574829s ago: executing program 2 (id=1170): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0xc, 0x0, 0x0, 0x25, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) epoll_create1(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = getpid() fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) read(r2, &(0x7f0000000000)=""/82, 0x52) 5.569792216s ago: executing program 0 (id=1174): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000000004, 0x0, 0x62, 0xbff, 0x7, 0x62, 0x2c, 0x10}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x100, 0x0, {0x0, 0x0, 0x74, r5, {0x1, 0x4}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044051}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xbc, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x54, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x4c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000080}, 0x8800) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000006301090000000016ee3318f0bda6dc1b792bef6ea908000000010000000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x189800, 0x1b0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r6, r6, 0x0, 0xe3aa6ea) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 5.202289926s ago: executing program 2 (id=1177): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) poll(&(0x7f0000000040)=[{r0, 0x4096}], 0x1, 0x2) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nobarrier}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") symlink(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0/file0/..\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x4, 0x382) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]}) 3.777650765s ago: executing program 2 (id=1180): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE7Nmdmfa3XZ3u91CK+znk0z7PDPPvHyfmWd2Zp/ZCaBjDWV/koj+iPglIgYq2doCQ5V/169emPzz6oXJJEqlF/5IyuWuXb0wWRQt5tucZ4bTiPTtJHbXWe/MufMnJ6anp87m+dHZU6+Nzpw7//CJUxPHp45PnR4/fPjQwbHHHh1/pKU4Li4zPYvr2q43z+zZeeSl956dLMXL332cbW9/Pr06jorBltbbzFAMRSm3MLan/Pf+VS/9v2VLRPTm6WTDOm8MLeuKiGx3dZfb/0B0xcLOG4hn3prPfLVOGwjcNNln07YlY7vy/+n85xdwO0q0cehQxSd+dv9bDGt5/bHerjyZ/Z0qx389H354rlI3aXYvO1i5Y+9qMP//64zrW0iWBpZZf39EHJ376/1siLrfQzSRtFwSAGDeF9n1z0P1rv/SmmubrXkfymBE7I+I7RHxv4jYEel8mTsi4s4Vrn9oUX7p9c9PG1e4yBXJrv8ez/u2iqEypYgrmc9tKcffnbxyYnrqQF4nw9Hdm+XHmqzjy6d/frfRtKGq679syNZfXAvm2/H7ht7aeY5NzE6sIuQaVy5FEhvqxZ/M9wRkNbAzIna1sfyszk48+NGeLL1189Lpy8ffxA3oZyp9GPFAZf/PxaL4C0llTY36J0f7YnrqwGhxVCz1/Y+Xn6/Od1ela+Lvay2mvnaDrePKpYhNdY//PP6iGRT9tTN5/uv+ltdx+dd3Gt7TLN3/SRydqy6RH/8bF6otO/57khfL6Z583BsTs7NnxyI+z0fUjB9fWFqRL8pn8Q/vq42/cl+cZue4fz7I59sdEdlBfFdE3B0Re/Ntvyci7o2IfU3i//ap+15tXkNtHv83QBb/sWb7P2Iwqe6vbyPRdfKbzxqtv7Xz36FyajgfU33+62mw3FY3cLX1BwAAALeCtNwHnaQjVc9vF3bEpnT6zMzs/qF4/fSxSl/1YHSnxTddA1Xfh47l3w0X+fFF+YMRsa38pNHGcn5k8sz0lnWKGajYXNX+K+eCNB0ZqUz7rdFDL8DtY0X9aNUPnX3y6Y3fGGBN+b0mdC7tHzqX9g+dS/uHzlWv/V+MuL4OmwKssXY//xc/MADccko176cEOor7f+hc2j90pKU/ic9ft5KdE9r/yf/09iOreWPAzU+UBtqfPRpPmlv5ArtaK1y8/aLlJbdWOIkowkmbxFUnEenCmL/zt0mWx3RXyvS0vqlrn0iXLfPEcrXRvaJ3YvTVqY29eaI3IlpdzsU1q9XiDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//Flvq9A==") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x82, 0x2}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0x0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 3.511461433s ago: executing program 0 (id=1181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip_vti0\x00'}}, 0x1e) set_mempolicy(0x8006, 0x0, 0x5) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x8}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x240c8800}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'bridge_slave_1\x00'}}, 0x1e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000002440)=0xd) socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, 0x0, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x38}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 3.170636192s ago: executing program 0 (id=1184): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) poll(&(0x7f0000000040)=[{r0, 0x4096}], 0x1, 0x2) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nobarrier}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") symlink(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0/file0/..\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x4, 0x382) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) sendfile(r2, r2, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b4000000", @ANYBLOB="0100035acb0000000000010000006800088064000045258024000100975c9d81c983c82062f53c57cdbf691c3c0009801c000080060001000200000008000200ac1414aa05000300030000001c000080060001000000000000000000ac141418050003000200000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e1400020077673000"/165], 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040), 0x4) 3.112509204s ago: executing program 6 (id=1185): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x4, 0x3e, 0x0, 0x0, 0x0, 0x480000000000000b, 0x914b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x10edb, 0x3, 0x98, 0x0, 0x2, 0xfffff271, 0x5, 0x0, 0x81, 0x0, 0xfffdfffffffff1e7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000002c0)='\xe1\xdb3I\a\xb9\xc5[v\xa8\x04\xae\xfa\x97\x1d%t;Y\xc8[\x89\xa3\x84\xbdf\x99b\x88\x89\vb\xb9\xef\xb4\xd4\x84\x1e\xed\xb5f\x7f\x97j\xdd\xac\xfb\xbb|`\a\xb5\xa7\xdb\x91\xea\xdc\xfd.\xa9g\xb7\x95\x9f\xf2', 0x0) setns(0xffffffffffffffff, 0x4000000) r1 = socket(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}, 0x107220, 0x10004, 0x20da, 0x9, 0xa, 0x20008, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000007dec00000a14010000e903010000000000000000000000000a00"/40], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x21c, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 2.774621603s ago: executing program 2 (id=1189): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf25670000000c009900cb000000490000000800c3"], 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r4 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xa98, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) r6 = eventfd2(0x5, 0x1) io_submit(r5, 0x2, &(0x7f0000000180)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xc8d, r6, 0x0, 0x0, 0x800002, 0x0, 0x0, r6}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x9841, r4, 0x0, 0x0, 0x5, 0x0, 0x3, r6}]) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000002740), 0x0}, 0x20) r11 = fsmount(r8, 0x0, 0x2) fchdir(r11) epoll_create(0x200) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 2.716700315s ago: executing program 0 (id=1190): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) poll(&(0x7f0000000040)=[{r0, 0x4096}], 0x1, 0x2) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nobarrier}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") symlink(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0/file0/..\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x4, 0x382) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) sendfile(r2, r2, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]}) 2.53238752s ago: executing program 1 (id=1192): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) recvfrom$inet6(r2, 0x0, 0x0, 0x1000, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu)\t\t') ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb1c1, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, r1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000440)={0xa, 0xfffd, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0}, &(0x7f0000000580)=0x36) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000340)={0x1, 0x170}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)={r7, 0x6, 0x2}, 0x8) rt_sigpending(&(0x7f0000000180), 0x8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f00000006c0)={0x4, 0x100fdfd, 0x8, 0x10, 0x100, &(0x7f0000000040)="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"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x10000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e18, &(0x7f0000000080)={[{@nobarrier}, {@grpid}]}, 0x22, 0x655, &(0x7f00000012c0)="$eJzs3c9vG1kdAPDvjONskg2bLkKIjUBE4rAroU3jsmKBC93lQA8rsRJ7QIjDRk1Soro/lKQSLZVIJA4gFQkhrhXqAf4B7qh3bggJuHHhglQQKqIHqno1P9w4jh2nTWwnmc9HcvzmzdjvfT1+mfc8fp4AKmsh+5NGvBHx7OMkYq5j3WwUKxfK7R7/5+7l7JZEq/XdfyeRlHnt7ZPy/tVyYSoi/vR+xKdr+8vdvH3n6nKzVfhJxPmtazfPb96+8/b6teUrq1dWrzcufO2dd5e+3nin0VHRl5fVKavPpQ++8/lf/PSHX137c/PtJC7GR/Ufr0RXHMdlIRbiWRliZ/5ERLybJXq8LqfNGQih0mrl+7EeEZ+NuajlS4W5WL831soBQ9WqRbQOlgzaADitNG+oqnY/oD22P9w4+KN2oj68nsloPHqvGADtj3+i/MhhKg9y5nHSMTIqPks4dwzlZ2U8vTt1/+nd+fux53OIJ8/3zsQxlNPP9k5EfK5X/Elet3N5pFn86Z6xfhoRSxExWdbvW0eoQ9KRHsbnMAd5kfg790MW/8XyPst//yXL7/5Ya9TxA1BND98rD+Tb2dLu8S/re7T7P9Gj/zN79FMyua7nqI/6+Ne//9c+3k/l/Z60qx+W9Vk+7P2U+/rEf//5pV/1K7/o/83fb9+y8tt9wVF4tBMx3xX/z7Jgy/5PFn/SY/9nm3x8ce9zNfqMBr79l39d6lf+uONvPYh4s+f4Z7dXmqUOOD95fm29ubpU/O1Zxh/++IPf9Su/d/yvDCHS3rL9P9Mn/o79n3Y/LntNbvZ+yp3ujN9/+OBav/JnB+7/9J+TSTHenCxzfrSztbXRiJhMPig3KfOXt7Y2Lhwcb7HNk1Z+3yjif+tLvdv/nvd/V1TT7X+Zh3Dze1cf91v3Mu//jpPJz1qHrEM/Wfwrg/f/vvaf5f3ykGX87/u3vtBv3UHxTx8lMAAAAAAAAKigND8Hm6SLz9NpurhYzJf9TMykzRubW19eu3Hr+krEW/n3IetppEn+lZG5YjlZW2+uNsrvw7aXL3QtfyUiXo+IX9em8+XFyzeaK+MOHgAAAAAAAAAAAAAAAAAAAE6IV8v5/+3rVP+3Vsz/Bypi8AXm9l3/ATgjhnmBSeBky9v/QYf410ZXF2C0HP+hurR/qC7tH6pL+4fq0v6hurR/qK697f8f98ZWEWDkHP8BAAAA4Ex6/YsP/5ZExPY3pvNbZrJcVx9rzYBhe7E2XhtaPYDR06Khup6f+vcLP1A5h+j//3aquG+1hl4bYBySXpl556D8YdB+jf9hz0fu2jl63QAAAAAAAAAAAACAwptvmP8PVWXaH1TXEeb/++kAOOX89D9UlzE+MGAWf0z1WzFo/j8AAAAAAAAAAAAAcGxm81uSLpZzgWcjTRcXIz4VEeeinqytN1eXIuK1iPhrrf5KttwYd6UBAAAAAAAAAAAAAAAAAADgjNm8fefqcrO5utGZ+P++nLOdaF8FdfDGrUNsc2Dim/GCj4pk9C/LdESMfacMLTHRkZNEbGd7/kRUbGMzTkY18sSY/zEBAAAAAAAAAAAAAAAAAEAFdcw97m3+NyOuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM3u71/wckVmaKBxxq472JcccIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxOnwQAAP//+jg4qw==") ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000500)={'bond_slave_0\x00', {0x2, 0x0, @remote}}) fstatfs(0xffffffffffffffff, &(0x7f0000000440)=""/169) 2.237095188s ago: executing program 0 (id=1193): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc050) unshare(0x6020400) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xf, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x10) fstat(r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0xc, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49d", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x100}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000085be6effff003030302e0032c69682ff3c4e78c4da3a9faccfe8641fc61eb956e2f537000cbdd9900b2ccf6289763cda7b16ddfc3cc0d1115ee6a1cdad74"], 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x2c}, 0x10) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x30, 0x4855}, 0x24000052) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 1.893139897s ago: executing program 5 (id=1194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip_vti0\x00'}}, 0x1e) set_mempolicy(0x8006, 0x0, 0x5) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x8}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x240c8800}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'bridge_slave_1\x00'}}, 0x1e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000002440)=0xd) socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, 0x0, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x38}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 1.770439631s ago: executing program 5 (id=1195): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r0, &(0x7f0000001600)=[{0x0}], 0x1, 0x9, 0x8) 1.721993193s ago: executing program 5 (id=1196): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0xc, 0x0, 0x0, 0x25, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) epoll_create1(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = getpid() fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) read(r2, &(0x7f0000000000)=""/82, 0x52) 1.675431224s ago: executing program 6 (id=1197): syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xa, 0x100}, 0x204, 0x2, 0x43a1bd78, 0x7, 0x9, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0xffffffff}}, 0x10) bind$tipc(r2, 0x0, 0x0) 1.650364104s ago: executing program 1 (id=1198): sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000002040)="11054300", 0x5dc, 0xb01, &(0x7f00000004c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @random="a3cac7f9a4c7"}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.534546507s ago: executing program 6 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x82, 0x2}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0x0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 1.533111807s ago: executing program 2 (id=1200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x85000) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x91000a7a) readv(r2, &(0x7f0000002940)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000020a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) 1.519324718s ago: executing program 1 (id=1201): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0xa00, 0x0, 0x0, 0x2}, 0x48) 1.44862814s ago: executing program 1 (id=1202): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df0700000fd30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.44492511s ago: executing program 1 (id=1203): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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") r0 = gettid() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000780)) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_subtree(r3, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x440}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000001000010800000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="7fff"], 0x2c}}, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYRESHEX=r8, @ANYRES8=r0], 0xfe33) get_robust_list(r0, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000080), 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x18) socket$netlink(0x10, 0x3, 0x6) 1.42697874s ago: executing program 0 (id=1204): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/uevent_seqnum', 0x100000, 0x8) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', r2, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) syz_io_uring_setup(0xa6a, &(0x7f00000005c0)={0x0, 0x9bc1, 0x8000, 0x400, 0xfffffffd, 0x0, r1}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgrp(r0) setpgid(r5, r0) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x2}, 0x1101, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r8, 0x0, 0x6, 0xc) vmsplice(r7, &(0x7f0000000400)=[{&(0x7f0000001740)='\x00', 0x1}, {&(0x7f0000000340)="f8a0c73f7993", 0x6}], 0x2, 0x6) rt_sigqueueinfo(r0, 0x30, &(0x7f0000000440)={0x25, 0x1ff, 0x8}) 742.026749ms ago: executing program 2 (id=1205): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000006000000000000002710000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000cd0a0100000000002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0xfeb, &(0x7f0000001cc0)=""/4075, 0x40f00, 0x29}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES16, @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x100000, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r2, 0xda8d) accept4$inet(r2, 0x0, 0x0, 0x800) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="02030e00d3fc02000000ab5d71b9", 0xe, 0x400c820, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x20, 0x6, @multicast}, 0x14) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) r6 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0xc71b, &(0x7f0000000080)={0x0, 0x6b86, 0x18, 0x0, 0x20000000}) creat(&(0x7f0000000200)='./bus\x00', 0x84) close(r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$inet6(0xa, 0x4, 0x5) 618.060802ms ago: executing program 6 (id=1206): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r0, &(0x7f0000001600)=[{0x0}], 0x1, 0x9, 0x8) 306.160971ms ago: executing program 5 (id=1207): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x1}, 0x8) r1 = syz_ublk_setup_io_uring(0x7b11, &(0x7f0000000040)={0x0, 0x57df, 0x8000, 0x1, 0x36a}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x750e, &(0x7f0000000180)={0x0, 0xe374, 0x4000, 0x2, 0x1aa, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_modify_offsets$generic(r5, r3, 0x28, 0xfbe) r7 = syz_open_dev$loop(&(0x7f00000002c0), 0x6, 0x4001) ioctl$LOOP_SET_FD(r7, 0x4c00, r1) r8 = accept$inet(r0, &(0x7f0000000300)={0x2, 0x0, @loopback}, &(0x7f0000000340)=0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'nicvf0\x00'}) ioctl$BLKDISCARD(r7, 0x1277, &(0x7f00000003c0)=0x7655) r9 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) r10 = syz_open_dev$ptys(0xc, 0x3, 0x0) close_range(r9, r10, 0x2) syz_io_uring_modify_offsets$generic(r2, r3, 0x58, 0x2) close_range(r1, r8, 0x2) r11 = io_uring_setup(0x673a, &(0x7f0000000440)={0x0, 0x8ed2, 0x2, 0x3, 0x1c7}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r11, 0x6, &(0x7f0000000500)={0x6, 0x0, &(0x7f00000004c0)=[r8, r7, r8, r0, r4]}, 0x5) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) symlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00') syz_io_uring_modify_offsets$generic(r2, r6, 0x5c, 0xa) r12 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2, 0x8) setxattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@known='trusted.overlay.redirect\x00', &(0x7f0000000680)='%)$-@\x00', 0x6, 0x1) ioctl$IOC_PR_RELEASE(r12, 0x401070ca, &(0x7f00000006c0)={0x4, 0x4, 0x1}) r13 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/attr/fscreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r13, 0x6628) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r12) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r14, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xa}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x44) r15 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) accept$inet(r15, &(0x7f0000000900)={0x2, 0x0, @initdev}, &(0x7f0000000940)=0x10) 180.532065ms ago: executing program 6 (id=1208): socket(0x29, 0x3, 0x423f7d3) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2f1, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x145042, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x300000000000000) 156.548356ms ago: executing program 5 (id=1209): syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xa, 0x100}, 0x204, 0x2, 0x43a1bd78, 0x7, 0x9, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0xffffffff}}, 0x10) bind$tipc(r2, 0x0, 0x0) 118.878977ms ago: executing program 6 (id=1210): unshare(0x68040200) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x100, 0x4) r0 = socket$inet(0x2, 0x1, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) shutdown(r1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r6, 0x10, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000000)=@req={0x80, 0x8, 0xff, 0x1000009}, 0xc) sendto$inet6(r2, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@initdev, @empty, @remote}, &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10010, r0, 0xfdffa000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000740)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 47.004738ms ago: executing program 5 (id=1211): socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x4, &(0x7f00000001c0)=[{0x1, 0x5, 0x26, 0x59c}, {0x9, 0x9, 0x7, 0x1}, {0xf5, 0x1, 0x7, 0xfffffffb}, {0x1ff, 0x1, 0xec, 0x1}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) getpid() r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) syz_clone(0x498144ee5762a049, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4800) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0xc0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000060010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) 0s ago: executing program 1 (id=1212): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000b02000000003030615f2e6161003000"], &(0x7f0000000180)=""/66, 0x33, 0x42, 0x0, 0xffffffff}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, &(0x7f0000000900)="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", 0x1a6, 0x12, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1515) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xfb) kernel console output (not intermixed with test programs): 1.760701][ T5986] ? mutex_lock+0x57/0x90 [ 111.760744][ T5986] ksys_read+0xdc/0x1a0 [ 111.760865][ T5986] __x64_sys_read+0x40/0x50 [ 111.760888][ T5986] x64_sys_call+0x2886/0x3020 [ 111.760909][ T5986] do_syscall_64+0x12c/0x3b0 [ 111.760932][ T5986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.760956][ T5986] RIP: 0033:0x7f8125e8d60e [ 111.761003][ T5986] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.761080][ T5986] RSP: 002b:00007f812491efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.761104][ T5986] RAX: ffffffffffffffda RBX: 00007f812491f6c0 RCX: 00007f8125e8d60e [ 111.761159][ T5986] RDX: 000000000000000f RSI: 00007f812491f0a0 RDI: 0000000000000004 [ 111.761172][ T5986] RBP: 00007f812491f090 R08: 0000000000000000 R09: 0000000000000000 [ 111.761241][ T5986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.761253][ T5986] R13: 00007f8126146038 R14: 00007f8126145fa0 R15: 00007ffc1029de38 [ 111.761272][ T5986] [ 112.478740][ T6000] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 112.485307][ T6000] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.494303][ T6000] vhci_hcd vhci_hcd.0: Device attached [ 112.514565][ T6000] netlink: 'syz.5.671': attribute type 10 has an invalid length. [ 112.558138][ T6000] team0: Device wg2 is of different type [ 112.636258][ T6005] loop2: detected capacity change from 0 to 128 [ 112.773329][ T6008] loop1: detected capacity change from 0 to 512 [ 112.786340][ T6008] EXT4-fs: Ignoring removed orlov option [ 112.802074][ T6008] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 112.824983][ T36] kworker/u8:2: attempt to access beyond end of device [ 112.824983][ T36] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 112.855080][ T23] usb 11-1: new high-speed USB device number 3 using vhci_hcd [ 113.041897][ T6002] vhci_hcd: connection reset by peer [ 113.067288][ T36] vhci_hcd vhci_hcd.5: stop threads [ 113.079006][ T36] vhci_hcd vhci_hcd.5: release socket [ 113.085561][ T36] vhci_hcd vhci_hcd.5: disconnect device [ 113.600479][ T6015] FAULT_INJECTION: forcing a failure. [ 113.600479][ T6015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.041409][ T3381] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 114.105904][ T6015] CPU: 1 UID: 0 PID: 6015 Comm: syz.2.675 Tainted: G W syzkaller #0 PREEMPT(full) [ 114.105994][ T6015] Tainted: [W]=WARN [ 114.106001][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.106016][ T6015] Call Trace: [ 114.106029][ T6015] [ 114.106038][ T6015] __dump_stack+0x1d/0x30 [ 114.106065][ T6015] dump_stack_lvl+0x95/0xd0 [ 114.106159][ T6015] dump_stack+0x15/0x1b [ 114.106178][ T6015] should_fail_ex+0x263/0x280 [ 114.106268][ T6015] should_fail+0xb/0x20 [ 114.106365][ T6015] should_fail_usercopy+0x1a/0x20 [ 114.106428][ T6015] _copy_from_user+0x1c/0xb0 [ 114.106459][ T6015] ___sys_sendmsg+0xc1/0x1e0 [ 114.106534][ T6015] __x64_sys_sendmsg+0xd4/0x160 [ 114.106638][ T6015] x64_sys_call+0x194c/0x3020 [ 114.106665][ T6015] do_syscall_64+0x12c/0x3b0 [ 114.106690][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.106781][ T6015] RIP: 0033:0x7f8125eccdd9 [ 114.106824][ T6015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.106843][ T6015] RSP: 002b:00007f81248fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.106867][ T6015] RAX: ffffffffffffffda RBX: 00007f8126146090 RCX: 00007f8125eccdd9 [ 114.106882][ T6015] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000b [ 114.106897][ T6015] RBP: 00007f81248fe090 R08: 0000000000000000 R09: 0000000000000000 [ 114.106926][ T6015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.106940][ T6015] R13: 00007f8126146128 R14: 00007f8126146090 R15: 00007ffc1029de38 [ 114.106960][ T6015] [ 114.274980][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 114.274996][ T28] audit: type=1326 audit(1777508574.675:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.6.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f01968dcdd9 code=0x7ffc0000 [ 114.304663][ T6017] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 2, id = 0 [ 114.315039][ T6014] IPVS: stopping backup sync thread 6017 ... [ 114.710935][ T6022] lo speed is unknown, defaulting to 1000 [ 114.923199][ T28] audit: type=1400 audit(1777508575.325:1657): avc: denied { read } for pid=6025 comm="syz.5.680" name="file0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.123207][ T6037] loop5: detected capacity change from 0 to 4096 [ 115.154710][ T6037] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 115.170436][ T6037] System zones: 0-5 [ 115.180791][ T6037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.249694][ T4853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.305507][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'. [ 115.504663][ T6097] FAULT_INJECTION: forcing a failure. [ 115.504663][ T6097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.542356][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.6.685 Tainted: G W syzkaller #0 PREEMPT(full) [ 115.542393][ T6097] Tainted: [W]=WARN [ 115.542402][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.542424][ T6097] Call Trace: [ 115.542432][ T6097] [ 115.542441][ T6097] __dump_stack+0x1d/0x30 [ 115.542469][ T6097] dump_stack_lvl+0x95/0xd0 [ 115.542491][ T6097] dump_stack+0x15/0x1b [ 115.542512][ T6097] should_fail_ex+0x263/0x280 [ 115.542599][ T6097] should_fail+0xb/0x20 [ 115.542691][ T6097] should_fail_usercopy+0x1a/0x20 [ 115.542780][ T6097] _copy_from_user+0x1c/0xb0 [ 115.542817][ T6097] __se_sys_mount+0x10d/0x2e0 [ 115.542853][ T6097] ? fput+0x8f/0xc0 [ 115.542904][ T6097] ? ksys_write+0x194/0x1a0 [ 115.542929][ T6097] __x64_sys_mount+0x67/0x80 [ 115.542962][ T6097] x64_sys_call+0x2d61/0x3020 [ 115.543040][ T6097] do_syscall_64+0x12c/0x3b0 [ 115.543108][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.543134][ T6097] RIP: 0033:0x7f01968dcdd9 [ 115.543150][ T6097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.543308][ T6097] RSP: 002b:00007f019532f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.543332][ T6097] RAX: ffffffffffffffda RBX: 00007f0196b55fa0 RCX: 00007f01968dcdd9 [ 115.543347][ T6097] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 0000000000000000 [ 115.543360][ T6097] RBP: 00007f019532f090 R08: 0000200000000040 R09: 0000000000000000 [ 115.543372][ T6097] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 115.543387][ T6097] R13: 00007f0196b56038 R14: 00007f0196b55fa0 R15: 00007ffc89e194d8 [ 115.543470][ T6097] [ 115.850942][ T6123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.688'. [ 115.865751][ T28] audit: type=1400 audit(1777508576.255:1658): avc: denied { ioctl } for pid=6120 comm="syz.6.687" path="/dev/usbmon5" dev="devtmpfs" ino=157 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.899161][ T6123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.688'. [ 116.249291][ T6151] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 116.256057][ T6151] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 116.287247][ T6151] vhci_hcd vhci_hcd.0: Device attached [ 116.294732][ T6157] netlink: 'syz.5.693': attribute type 4 has an invalid length. [ 116.309982][ T6157] netlink: 'syz.5.693': attribute type 4 has an invalid length. [ 116.332008][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.687'. [ 116.351216][ T6151] netlink: 'syz.2.692': attribute type 10 has an invalid length. [ 116.387069][ T6151] team0: Device wg2 is of different type [ 116.407152][ T6162] loop1: detected capacity change from 0 to 512 [ 116.445050][ T6162] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.447480][ T6161] lo speed is unknown, defaulting to 1000 [ 116.484242][ T6162] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 116.529107][ T6162] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.689: Corrupt directory, running e2fsck is recommended [ 116.539105][ T10] usb 5-1: new high-speed USB device number 4 using vhci_hcd [ 116.559902][ T6162] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 116.618090][ T6162] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.689: corrupted in-inode xattr: e_name out of bounds [ 116.650203][ T6162] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.650726][ T6162] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.689: couldn't read orphan inode 15 (err -117) [ 116.659922][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 116.659948][ C0] EXT4-fs (loop1): initial error at time 1777508577: ext4_iget_extra_inode:5128: inode 15 [ 116.659985][ C0] EXT4-fs (loop1): last error at time 1777508577: ext4_iget_extra_inode:5128: inode 15 [ 116.728089][ T6168] SELinux: security_context_str_to_sid () failed with errno=-22 [ 116.775782][ T6162] loop1: lost filesystem error report for type 5 error -117 [ 116.776515][ T6162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.881143][ T6162] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.941492][ T6162] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 116.964160][ T6162] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.689: Corrupt directory, running e2fsck is recommended [ 116.994818][ T6180] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 117.034221][ T6180] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 117.062569][ T6153] vhci_hcd: connection reset by peer [ 117.082286][ T6056] vhci_hcd vhci_hcd.2: stop threads [ 117.087674][ T6056] vhci_hcd vhci_hcd.2: release socket [ 117.096664][ T6056] vhci_hcd vhci_hcd.2: disconnect device [ 117.117539][ T6180] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.689: Corrupt directory, running e2fsck is recommended [ 117.164477][ T28] audit: type=1400 audit(1777508577.565:1659): avc: denied { ioctl } for pid=6132 comm="syz.1.689" path="socket:[14870]" dev="sockfs" ino=14870 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.204158][ T6194] netlink: 'syz.5.698': attribute type 4 has an invalid length. [ 117.210637][ T6194] netlink: 'syz.5.698': attribute type 4 has an invalid length. [ 117.493236][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.687'. [ 118.152087][ T6228] netlink: 'syz.2.707': attribute type 4 has an invalid length. [ 118.193202][ T6228] netlink: 'syz.2.707': attribute type 4 has an invalid length. [ 118.694957][ T6244] lo speed is unknown, defaulting to 1000 [ 118.849408][ T23] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 118.938089][ T6248] netlink: 'syz.6.710': attribute type 4 has an invalid length. [ 118.968420][ T6248] netlink: 'syz.6.710': attribute type 4 has an invalid length. [ 119.061941][ T6256] lo speed is unknown, defaulting to 1000 [ 119.184765][ T6261] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.716'. [ 119.222212][ T6261] net_ratelimit: 3995 callbacks suppressed [ 119.222234][ T6261] netlink: zone id is out of range [ 119.259963][ T6261] netlink: zone id is out of range [ 119.330951][ T6261] netlink: set zone limit has 8 unknown bytes [ 119.388539][ T6264] netlink: 'syz.2.717': attribute type 4 has an invalid length. [ 119.507463][ T28] audit: type=1400 audit(1777508579.905:1660): avc: denied { watch watch_reads } for pid=6267 comm="syz.2.719" path="/162/file0" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.532943][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.719'. [ 119.572289][ T6268] lo speed is unknown, defaulting to 1000 [ 119.615454][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 119.715519][ T28] audit: type=1400 audit(1777508580.115:1661): avc: denied { getopt } for pid=6274 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.059017][ T6287] netlink: 76 bytes leftover after parsing attributes in process `syz.0.723'. [ 120.069702][ T6039] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 120.090388][ T6287] syzkaller0: entered promiscuous mode [ 120.100755][ T6287] syzkaller0: entered allmulticast mode [ 120.181690][ T28] audit: type=1400 audit(1777508580.585:1662): avc: denied { write } for pid=6286 comm="syz.0.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 120.309475][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.726'. [ 120.345963][ T28] audit: type=1400 audit(1777508580.745:1663): avc: denied { mac_admin } for pid=6298 comm="syz.0.728" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.367167][ T6299] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 120.400706][ T28] audit: type=1400 audit(1777508580.795:1664): avc: denied { relabelto } for pid=6298 comm="syz.0.728" name="/" dev="ramfs" ino=15777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 120.453505][ T28] audit: type=1400 audit(1777508580.795:1665): avc: denied { associate } for pid=6298 comm="syz.0.728" name="/" dev="ramfs" ino=15777 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 120.495011][ T6302] FAULT_INJECTION: forcing a failure. [ 120.495011][ T6302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.509806][ T6302] CPU: 1 UID: 0 PID: 6302 Comm: syz.5.729 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.509843][ T6302] Tainted: [W]=WARN [ 120.509851][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.509864][ T6302] Call Trace: [ 120.509871][ T6302] [ 120.509959][ T6302] __dump_stack+0x1d/0x30 [ 120.509986][ T6302] dump_stack_lvl+0x95/0xd0 [ 120.510029][ T6302] dump_stack+0x15/0x1b [ 120.510050][ T6302] should_fail_ex+0x263/0x280 [ 120.510079][ T6302] should_fail+0xb/0x20 [ 120.510143][ T6302] should_fail_usercopy+0x1a/0x20 [ 120.510173][ T6302] _copy_to_user+0x20/0xa0 [ 120.510218][ T6302] simple_read_from_buffer+0xb5/0x130 [ 120.510293][ T6302] proc_fail_nth_read+0x10e/0x150 [ 120.510365][ T6302] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.510389][ T6302] vfs_read+0x1ab/0x7f0 [ 120.510411][ T6302] ? __fget_files+0x184/0x1c0 [ 120.510428][ T6302] ? __rcu_read_unlock+0x4e/0x70 [ 120.510577][ T6302] ? __fget_files+0x184/0x1c0 [ 120.510598][ T6302] ? mutex_lock+0x57/0x90 [ 120.510627][ T6302] ksys_read+0xdc/0x1a0 [ 120.510651][ T6302] __x64_sys_read+0x40/0x50 [ 120.510695][ T6302] x64_sys_call+0x2886/0x3020 [ 120.510774][ T6302] do_syscall_64+0x12c/0x3b0 [ 120.510800][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.510833][ T6302] RIP: 0033:0x7f5a94f2d60e [ 120.510850][ T6302] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.510932][ T6302] RSP: 002b:00007f5a939befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.510954][ T6302] RAX: ffffffffffffffda RBX: 00007f5a939bf6c0 RCX: 00007f5a94f2d60e [ 120.510970][ T6302] RDX: 000000000000000f RSI: 00007f5a939bf0a0 RDI: 0000000000000006 [ 120.510983][ T6302] RBP: 00007f5a939bf090 R08: 0000000000000000 R09: 0000000000000000 [ 120.510996][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.511010][ T6302] R13: 00007f5a951e6038 R14: 00007f5a951e5fa0 R15: 00007fff6a00ae18 [ 120.511114][ T6302] [ 120.879657][ T6311] veth1_to_team: entered promiscuous mode [ 121.170427][ T6320] loop5: detected capacity change from 0 to 512 [ 121.177943][ T6321] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 2, id = 0 [ 121.229969][ T6320] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 121.249258][ T6320] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 121.257770][ T6320] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.733: bad orphan inode 4 [ 121.267729][ T6320] loop5: lost filesystem error report for type 5 error -117 [ 121.268092][ T6320] EXT4-fs (loop5): 1 orphan inode deleted [ 121.275485][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 121.275504][ C1] EXT4-fs (loop5): initial error at time 1777508581: ext4_orphan_get:1423 [ 121.275529][ C1] EXT4-fs (loop5): last error at time 1777508581: ext4_orphan_get:1423 [ 121.305082][ T6320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.327860][ T6320] IPVS: stopping backup sync thread 6321 ... [ 121.710967][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 122.711570][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.764793][ T28] audit: type=1326 audit(1777508583.165:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfd7acdd9 code=0x7ffc0000 [ 122.833764][ T4853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.840459][ T28] audit: type=1326 audit(1777508583.235:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfd7acdd9 code=0x7ffc0000 [ 122.866797][ T28] audit: type=1326 audit(1777508583.235:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfd7acdd9 code=0x7ffc0000 [ 122.890452][ T28] audit: type=1326 audit(1777508583.235:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f7dfd7acdd9 code=0x7ffc0000 [ 123.121041][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.739'. [ 123.121916][ T6349] validate_nla: 3 callbacks suppressed [ 123.121930][ T6349] netlink: 'syz.6.744': attribute type 5 has an invalid length. [ 123.297336][ T6347] loop1: detected capacity change from 0 to 512 [ 123.331989][ T6347] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.743: corrupted in-inode xattr: invalid ea_ino [ 123.352173][ T6347] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.354725][ T6347] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.743: couldn't read orphan inode 15 (err -117) [ 123.364244][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 123.364292][ C0] EXT4-fs (loop1): initial error at time 1777508583: ext4_iget_extra_inode:5128: inode 15 [ 123.364393][ C0] EXT4-fs (loop1): last error at time 1777508583: ext4_iget_extra_inode:5128: inode 15 [ 123.366645][ T6352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.377639][ T6347] loop1: lost filesystem error report for type 5 error -117 [ 123.413643][ T6352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.424012][ T6347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.432048][ T6358] lo speed is unknown, defaulting to 1000 [ 123.529731][ T6367] bridge0: port 3(syz_tun) entered blocking state [ 123.540796][ T6367] bridge0: port 3(syz_tun) entered disabled state [ 123.549432][ T6367] syz_tun: entered allmulticast mode [ 123.549604][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.555232][ T6367] syz_tun: entered promiscuous mode [ 123.569690][ T6367] bridge0: port 3(syz_tun) entered blocking state [ 123.576159][ T6367] bridge0: port 3(syz_tun) entered forwarding state [ 123.684865][ T6374] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261 [ 123.722122][ T6378] loop6: detected capacity change from 0 to 256 [ 124.021276][ T6391] netlink: 40 bytes leftover after parsing attributes in process `syz.5.756'. [ 124.061140][ T6391] devpts: Bad value for 'gid' [ 124.081901][ T6391] devpts: Bad value for 'gid' [ 124.220904][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 124.299691][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.5.761'. [ 124.354871][ T6400] lo speed is unknown, defaulting to 1000 [ 124.840627][ T6416] siw: device registration error -23 [ 124.998498][ T6423] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261 [ 125.034172][ T28] kauditd_printk_skb: 143 callbacks suppressed [ 125.034191][ T28] audit: type=1400 audit(1777508585.435:1813): avc: denied { read } for pid=6424 comm="syz.5.769" dev="sockfs" ino=16395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.066130][ T6425] netlink: 92 bytes leftover after parsing attributes in process `syz.5.769'. [ 125.131106][ T6415] loop1: detected capacity change from 0 to 512 [ 125.167506][ T6415] EXT4-fs: Ignoring removed nobh option [ 125.194940][ T6415] ext4: Unknown parameter 'silent' [ 125.205008][ T28] audit: type=1400 audit(1777508585.605:1814): avc: denied { setopt } for pid=6434 comm="syz.6.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.258206][ T28] audit: type=1400 audit(1777508585.625:1815): avc: denied { getopt } for pid=6434 comm="syz.6.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.269532][ T6438] netlink: 'syz.6.773': attribute type 4 has an invalid length. [ 125.297615][ T28] audit: type=1400 audit(1777508585.645:1816): avc: denied { ioctl } for pid=6430 comm="syz.0.772" path="socket:[16410]" dev="sockfs" ino=16410 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 125.318970][ T6438] netlink: 'syz.6.773': attribute type 4 has an invalid length. [ 125.366172][ T6415] netlink: 96 bytes leftover after parsing attributes in process `syz.1.765'. [ 125.491982][ T6444] loop6: detected capacity change from 0 to 2048 [ 125.552760][ T6444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.572139][ T6444] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.614255][ T28] audit: type=1400 audit(1777508586.005:1817): avc: denied { read write } for pid=6443 comm="syz.6.775" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.693929][ T6449] lo speed is unknown, defaulting to 1000 [ 125.704250][ T28] audit: type=1400 audit(1777508586.005:1818): avc: denied { open } for pid=6443 comm="syz.6.775" path="/30/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.781681][ T28] audit: type=1400 audit(1777508586.055:1819): avc: denied { ioctl } for pid=6443 comm="syz.6.775" path="/30/file0/file1" dev="loop6" ino=15 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.851937][ T28] audit: type=1400 audit(1777508586.105:1820): avc: denied { create } for pid=6451 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 125.895600][ T28] audit: type=1400 audit(1777508586.135:1821): avc: denied { sys_admin } for pid=6451 comm="syz.0.777" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 125.926639][ T6110] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:63: bg 0: block 345: padding at end of block bitmap is not set [ 125.945354][ T28] audit: type=1400 audit(1777508586.155:1822): avc: denied { checkpoint_restore } for pid=6451 comm="syz.0.777" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap2_userns permissive=1 [ 125.966516][ T6110] EXT4-fs (loop6): Remounting filesystem read-only [ 125.991057][ T6049] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 126.055565][ T6449] loop1: detected capacity change from 0 to 512 [ 126.121793][ T6449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.336430][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.336816][ T6473] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 126.445483][ T5609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.490921][ T6473] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 126.520841][ T6473] netlink: 'syz.0.784': attribute type 2 has an invalid length. [ 126.529454][ T6473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.617386][ T6481] lo speed is unknown, defaulting to 1000 [ 126.809648][ T6486] lo speed is unknown, defaulting to 1000 [ 126.849657][ T6491] netlink: 'syz.0.791': attribute type 4 has an invalid length. [ 126.908317][ T6495] netlink: 'syz.0.791': attribute type 4 has an invalid length. [ 126.951329][ T10] lo speed is unknown, defaulting to 1000 [ 126.994951][ T6497] loop6: detected capacity change from 0 to 512 [ 126.997710][ T10] lo speed is unknown, defaulting to 1000 [ 127.035891][ T6497] ext3: Unknown parameter 'noquota"test_dummy_encryption' [ 127.213058][ T6503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4118 sclass=netlink_route_socket pid=6503 comm=syz.5.795 [ 127.246963][ T6504] loop5: detected capacity change from 0 to 512 [ 128.053831][ T6518] FAULT_INJECTION: forcing a failure. [ 128.053831][ T6518] name failslab, interval 1, probability 0, space 0, times 0 [ 128.110499][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.1.798 Tainted: G W syzkaller #0 PREEMPT(full) [ 128.110538][ T6518] Tainted: [W]=WARN [ 128.110547][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.110561][ T6518] Call Trace: [ 128.110569][ T6518] [ 128.110579][ T6518] __dump_stack+0x1d/0x30 [ 128.110658][ T6518] dump_stack_lvl+0x95/0xd0 [ 128.110684][ T6518] dump_stack+0x15/0x1b [ 128.110707][ T6518] should_fail_ex+0x263/0x280 [ 128.110734][ T6518] should_failslab+0x8c/0xb0 [ 128.110785][ T6518] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 128.110824][ T6518] ? __d_alloc+0x37/0x340 [ 128.110895][ T6518] __d_alloc+0x37/0x340 [ 128.110920][ T6518] ? set_normalized_timespec64+0xe0/0x110 [ 128.110947][ T6518] d_alloc_pseudo+0x1e/0x80 [ 128.111066][ T6518] alloc_file_pseudo+0x91/0x190 [ 128.111093][ T6518] aio_setup_ring+0x11e/0x740 [ 128.111117][ T6518] ioctx_alloc+0x2a9/0x4c0 [ 128.111169][ T6518] ? fput+0x8f/0xc0 [ 128.111192][ T6518] __se_sys_io_setup+0x6b/0x1b0 [ 128.111227][ T6518] __x64_sys_io_setup+0x31/0x40 [ 128.111256][ T6518] x64_sys_call+0x24f1/0x3020 [ 128.111343][ T6518] do_syscall_64+0x12c/0x3b0 [ 128.111371][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.111460][ T6518] RIP: 0033:0x7f7dfd7acdd9 [ 128.111480][ T6518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.111500][ T6518] RSP: 002b:00007f7dfc1ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 128.111601][ T6518] RAX: ffffffffffffffda RBX: 00007f7dfda25fa0 RCX: 00007f7dfd7acdd9 [ 128.111615][ T6518] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000010 [ 128.111628][ T6518] RBP: 00007f7dfc1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 128.111640][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.111652][ T6518] R13: 00007f7dfda26038 R14: 00007f7dfda25fa0 R15: 00007ffca1518408 [ 128.111741][ T6518] [ 128.596479][ T6535] netlink: 'syz.0.806': attribute type 4 has an invalid length. [ 128.723368][ T6533] netlink: 14 bytes leftover after parsing attributes in process `syz.6.804'. [ 128.797269][ T6543] siw: device registration error -23 [ 128.836126][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.807'. [ 129.117309][ T6533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.505735][ T6533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.618363][ T6533] bond0 (unregistering): Released all slaves [ 129.692118][ T6562] netlink: 'syz.0.813': attribute type 4 has an invalid length. [ 129.703039][ T6549] lo speed is unknown, defaulting to 1000 [ 129.726603][ T6561] netlink: 'syz.0.813': attribute type 4 has an invalid length. [ 129.736375][ T23] lo speed is unknown, defaulting to 1000 [ 129.742891][ T23] syz2: Port: 1 Link DOWN [ 129.755641][ T5840] lo speed is unknown, defaulting to 1000 [ 129.765886][ T5840] syz2: Port: 1 Link ACTIVE [ 129.938157][ T6574] netlink: 'syz.2.818': attribute type 4 has an invalid length. [ 130.899985][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 130.900004][ T28] audit: type=1400 audit(1777508591.295:1866): avc: denied { getopt } for pid=6586 comm="syz.1.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 131.092175][ T6599] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 131.112711][ T28] audit: type=1400 audit(1777508591.515:1867): avc: denied { validate_trans } for pid=6596 comm="iou-wrk-6597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 131.136583][ T6595] lo speed is unknown, defaulting to 1000 [ 131.286314][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.829'. [ 131.322405][ T6607] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.830'. [ 131.362764][ T6607] netlink: zone id is out of range [ 131.388407][ T6607] netlink: zone id is out of range [ 131.510981][ T6607] netlink: set zone limit has 8 unknown bytes [ 131.701335][ T6589] loop1: detected capacity change from 0 to 512 [ 131.756426][ T6622] netlink: 'syz.6.834': attribute type 4 has an invalid length. [ 131.767408][ T6622] netlink: 'syz.6.834': attribute type 4 has an invalid length. [ 131.806360][ T6589] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.875792][ T6589] EXT4-fs (loop1): 1 truncate cleaned up [ 131.927732][ T6629] vlan2: entered promiscuous mode [ 131.944894][ T6629] bridge0: entered promiscuous mode [ 131.953517][ T6589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.020381][ T6633] netlink: 'syz.6.839': attribute type 12 has an invalid length. [ 132.147317][ T6641] loop6: detected capacity change from 0 to 512 [ 132.170826][ T6641] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 132.214837][ T6641] EXT4-fs (loop6): 1 orphan inode deleted [ 132.228653][ T6641] EXT4-fs (loop6): 1 truncate cleaned up [ 132.236005][ T6641] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.253437][ T6641] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.399618][ T6645] loop4: detected capacity change from 1024 to 0 [ 132.739379][ T28] audit: type=1326 audit(1777508593.145:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01968dcdd9 code=0x7ffc0000 [ 132.792224][ T6649] loop6: detected capacity change from 0 to 1024 [ 132.835991][ T6649] EXT4-fs: inline encryption not supported [ 132.898771][ T6649] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 132.898771][ T6649] [ 132.918042][ T28] audit: type=1326 audit(1777508593.165:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01968dcdd9 code=0x7ffc0000 [ 133.144778][ T28] audit: type=1326 audit(1777508593.165:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01968dcdd9 code=0x7ffc0000 [ 133.188655][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 133.219885][ T28] audit: type=1326 audit(1777508593.165:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01968dcdd9 code=0x7ffc0000 [ 133.326481][ T28] audit: type=1326 audit(1777508593.165:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01968dcdd9 code=0x7ffc0000 [ 133.368541][ T6655] bond2: option ad_actor_sys_prio: invalid value (0) [ 133.390666][ T6655] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 133.425052][ T6655] bond2 (unregistering): Released all slaves [ 133.431880][ T28] audit: type=1326 audit(1777508593.165:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01968dcdd9 code=0x7ffc0000 [ 133.557671][ T28] audit: type=1326 audit(1777508593.165:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01968dcdd9 code=0x7ffc0000 [ 133.585943][ T6649] loop6: detected capacity change from 0 to 512 [ 133.640337][ T6664] lo speed is unknown, defaulting to 1000 [ 133.659237][ T28] audit: type=1326 audit(1777508593.165:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01968dcdd9 code=0x7ffc0000 [ 133.754437][ T5839] IPVS: starting estimator thread 0... [ 133.768869][ T6649] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003 [ 133.851630][ T6667] IPVS: using max 2304 ests per chain, 115200 per kthread [ 133.972973][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.116174][ T6673] netlink: 320 bytes leftover after parsing attributes in process `syz.0.851'. [ 134.137630][ T6673] 9pnet_fd: Insufficient options for proto=fd [ 134.343081][ T6695] loop5: detected capacity change from 0 to 128 [ 134.373649][ T6695] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 134.431293][ T6695] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.467913][ T6695] ext2 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.549350][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.590189][ T4853] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.865981][ T6716] loop2: detected capacity change from 0 to 512 [ 134.939740][ T6716] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 134.951328][ T6716] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 134.961507][ T6716] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.861: Corrupt directory, running e2fsck is recommended [ 134.975707][ T6716] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 134.983980][ T6716] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.861: corrupted in-inode xattr: e_name out of bounds [ 134.997752][ T6716] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.998705][ T6716] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.861: couldn't read orphan inode 15 (err -117) [ 135.007915][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 135.007933][ C1] EXT4-fs (loop2): initial error at time 1777508595: ext4_iget_extra_inode:5128: inode 15 [ 135.007987][ C1] EXT4-fs (loop2): last error at time 1777508595: ext4_iget_extra_inode:5128: inode 15 [ 135.046266][ T6716] loop2: lost filesystem error report for type 5 error -117 [ 135.049723][ T6716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.070806][ T6716] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 135.082873][ T6716] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 135.092971][ T6716] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.861: Corrupt directory, running e2fsck is recommended [ 135.106951][ T6716] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 135.118470][ T6716] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 135.128625][ T6716] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.861: Corrupt directory, running e2fsck is recommended [ 135.509790][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.518228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.527040][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.535455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.591427][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.830693][ T6728] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.869'. [ 135.987875][ T6728] netlink: zone id is out of range [ 136.028678][ T28] kauditd_printk_skb: 153 callbacks suppressed [ 136.028706][ T28] audit: type=1326 audit(1777508596.425:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b673cdd9 code=0x7ffc0000 [ 136.090151][ T28] audit: type=1326 audit(1777508596.465:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b673cdd9 code=0x7ffc0000 [ 136.125419][ T28] audit: type=1326 audit(1777508596.465:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b673cdd9 code=0x7ffc0000 [ 136.150664][ T28] audit: type=1326 audit(1777508596.465:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6b673cdd9 code=0x7ffc0000 [ 136.179171][ T28] audit: type=1326 audit(1777508596.465:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b673cdd9 code=0x7ffc0000 [ 136.221234][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.255387][ T28] audit: type=1326 audit(1777508596.465:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b673cdd9 code=0x7ffc0000 [ 136.263052][ T6742] loop5: detected capacity change from 0 to 128 [ 136.281675][ T6745] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.292840][ T6745] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 136.314268][ T28] audit: type=1326 audit(1777508596.465:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b673cdd9 code=0x7ffc0000 [ 136.326911][ T6745] audit: backlog limit exceeded [ 136.357101][ T6744] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 136.363927][ T6744] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.382015][ T6734] net_ratelimit: 2 callbacks suppressed [ 136.382034][ T6734] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 136.408514][ T6744] vhci_hcd vhci_hcd.0: Device attached [ 136.415908][ T6752] loop2: detected capacity change from 0 to 512 [ 136.418742][ T6755] loop1: detected capacity change from 0 to 128 [ 136.428981][ T6734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.440099][ T6744] netlink: 'syz.6.876': attribute type 10 has an invalid length. [ 136.449644][ T6734] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003 [ 136.511074][ T6757] loop2: detected capacity change from 0 to 1024 [ 136.537395][ T6757] EXT4-fs: Ignoring removed bh option [ 136.537642][ T6744] team0: Device wg2 is of different type [ 136.592387][ T6757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.595325][ T6749] vhci_hcd: connection closed [ 136.613491][ T6076] vhci_hcd vhci_hcd.6: stop threads [ 136.627308][ T6085] kworker/u8:47: attempt to access beyond end of device [ 136.627308][ T6085] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 136.639129][ T3395] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 136.648767][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.654304][ T6076] vhci_hcd vhci_hcd.6: release socket [ 136.659178][ T6085] kworker/u8:47: attempt to access beyond end of device [ 136.659178][ T6085] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 136.676603][ T6757] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.2.880: path /194/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 136.678087][ T6076] vhci_hcd vhci_hcd.6: disconnect device [ 136.698633][ T6085] kworker/u8:47: attempt to access beyond end of device [ 136.698633][ T6085] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 136.719818][ T6757] EXT4-fs (loop2): Remounting filesystem read-only [ 136.721203][ T6085] kworker/u8:47: attempt to access beyond end of device [ 136.721203][ T6085] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 136.740112][ T6085] kworker/u8:47: attempt to access beyond end of device [ 136.740112][ T6085] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 136.754086][ T6085] kworker/u8:47: attempt to access beyond end of device [ 136.754086][ T6085] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 136.770990][ T6085] kworker/u8:47: attempt to access beyond end of device [ 136.770990][ T6085] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 136.784875][ T6085] kworker/u8:47: attempt to access beyond end of device [ 136.784875][ T6085] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 136.798575][ T6085] kworker/u8:47: attempt to access beyond end of device [ 136.798575][ T6085] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 136.826668][ T6056] kworker/u8:18: attempt to access beyond end of device [ 136.826668][ T6056] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 136.845935][ T6757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.880'. [ 136.905976][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.920882][ T6768] vhci_hcd vhci_hcd.3: invalid port number 254 [ 136.927318][ T6768] vhci_hcd vhci_hcd.3: GetPortErrorCount req not supported for USB 2.0 roothub [ 137.085040][ T6771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.093964][ T6771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.207415][ T6785] loop2: detected capacity change from 0 to 512 [ 137.227985][ T6785] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 137.274034][ T6781] loop5: detected capacity change from 0 to 128 [ 137.284518][ T6785] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 137.330468][ T6781] FAT-fs (loop5): Directory bread(block 32) failed [ 137.344022][ T6785] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.884: Corrupt directory, running e2fsck is recommended [ 137.356491][ T6789] netlink: 'syz.0.888': attribute type 4 has an invalid length. [ 137.357336][ T6781] FAT-fs (loop5): Directory bread(block 33) failed [ 137.367685][ T6785] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 137.371688][ T6781] FAT-fs (loop5): Directory bread(block 34) failed [ 137.386285][ T6781] FAT-fs (loop5): Directory bread(block 35) failed [ 137.393051][ T6781] FAT-fs (loop5): Directory bread(block 36) failed [ 137.393695][ T5837] lo speed is unknown, defaulting to 1000 [ 137.399708][ T6781] FAT-fs (loop5): Directory bread(block 37) failed [ 137.406559][ T6789] netlink: 'syz.0.888': attribute type 4 has an invalid length. [ 137.412106][ T6781] FAT-fs (loop5): Directory bread(block 38) failed [ 137.427245][ T6781] FAT-fs (loop5): Directory bread(block 39) failed [ 137.434892][ T6781] FAT-fs (loop5): Directory bread(block 40) failed [ 137.442337][ T6785] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.884: corrupted in-inode xattr: e_name out of bounds [ 137.447725][ T3373] lo speed is unknown, defaulting to 1000 [ 137.461657][ T6785] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.469117][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 137.469733][ T6781] FAT-fs (loop5): Directory bread(block 41) failed [ 137.478363][ C0] EXT4-fs (loop2): initial error at time 1777508597: ext4_iget_extra_inode:5128: inode 15 [ 137.478401][ C0] EXT4-fs (loop2): last error at time 1777508597: ext4_iget_extra_inode:5128: inode 15 [ 137.650481][ T6791] loop6: detected capacity change from 0 to 512 [ 137.693851][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.793279][ T6791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.809539][ T6791] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.853058][ T6785] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.884: couldn't read orphan inode 15 (err -117) [ 137.864928][ T6785] loop2: lost filesystem error report for type 5 error -117 [ 137.866219][ T6785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.997615][ T6785] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 138.968452][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.999355][ T6801] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 2, id = 0 [ 139.157918][ T6800] loop1: detected capacity change from 0 to 512 [ 139.165378][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.173721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.186571][ T6800] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 139.197788][ T6785] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 139.210894][ T5609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.249409][ T6785] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.884: Corrupt directory, running e2fsck is recommended [ 139.276030][ T6800] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 139.285013][ T6800] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.889: bad orphan inode 4 [ 139.295238][ T6800] loop1: lost filesystem error report for type 5 error -117 [ 139.299233][ T6800] EXT4-fs (loop1): 1 orphan inode deleted [ 139.312315][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 139.312335][ C0] EXT4-fs (loop1): initial error at time 1777508599: ext4_orphan_get:1423 [ 139.312355][ C0] EXT4-fs (loop1): last error at time 1777508599: ext4_orphan_get:1423 [ 139.336606][ T6800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.361858][ T6799] IPVS: stopping backup sync thread 6801 ... [ 139.439495][ T6697] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 139.472622][ T6781] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 139.741002][ T6781] netlink: 56 bytes leftover after parsing attributes in process `syz.5.886'. [ 139.773737][ T6804] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.886634][ T6804] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 139.886661][ T6804] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.884: Corrupt directory, running e2fsck is recommended [ 140.389897][ T6697] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 140.460774][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.498846][ T6816] netlink: 'syz.0.894': attribute type 4 has an invalid length. [ 140.716956][ T6827] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 140.723615][ T6827] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.754131][ T6827] vhci_hcd vhci_hcd.0: Device attached [ 140.832336][ T6832] loop5: detected capacity change from 0 to 1764 [ 140.873046][ T6831] netlink: 'syz.0.897': attribute type 10 has an invalid length. [ 141.062029][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.074782][ T6049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.098869][ T6831] team0: Device wg2 is of different type [ 141.219175][ T6828] vhci_hcd: connection closed [ 141.249550][ T6085] vhci_hcd vhci_hcd.0: stop threads [ 141.319852][ T6085] vhci_hcd vhci_hcd.0: release socket [ 141.354027][ T6820] loop1: detected capacity change from 0 to 128 [ 141.376477][ T6085] vhci_hcd vhci_hcd.0: disconnect device [ 141.509337][ T3381] net_ratelimit: 3 callbacks suppressed [ 141.509355][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.602340][ T6820] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.641541][ T6820] ext4 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.712436][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.720698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.749318][ T3395] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 141.756342][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 141.756372][ T28] audit: type=1400 audit(1777508602.155:2186): avc: denied { read write } for pid=6841 comm="syz.0.899" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 141.909691][ T28] audit: type=1400 audit(1777508602.195:2187): avc: denied { open } for pid=6841 comm="syz.0.899" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 142.201632][ T3293] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.315989][ T6850] loop1: detected capacity change from 0 to 736 [ 142.543279][ T6855] loop5: detected capacity change from 0 to 128 [ 142.554832][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.633558][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 142.642501][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'. [ 142.651520][ T6856] netlink: 'syz.1.902': attribute type 6 has an invalid length. [ 142.659819][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 142.668754][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'. [ 142.677685][ T6856] netlink: 'syz.1.902': attribute type 6 has an invalid length. [ 143.264715][ T6085] bio_check_eod: 212 callbacks suppressed [ 143.264732][ T6085] kworker/u8:47: attempt to access beyond end of device [ 143.264732][ T6085] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 143.289525][ T6085] kworker/u8:47: attempt to access beyond end of device [ 143.289525][ T6085] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 143.317202][ T6085] kworker/u8:47: attempt to access beyond end of device [ 143.317202][ T6085] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 143.335255][ T6085] kworker/u8:47: attempt to access beyond end of device [ 143.335255][ T6085] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 143.350445][ T6085] kworker/u8:47: attempt to access beyond end of device [ 143.350445][ T6085] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 143.379939][ T6085] kworker/u8:47: attempt to access beyond end of device [ 143.379939][ T6085] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 143.394049][ T6085] kworker/u8:47: attempt to access beyond end of device [ 143.394049][ T6085] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 143.403044][ T6872] loop6: detected capacity change from 0 to 1024 [ 143.408131][ T6085] kworker/u8:47: attempt to access beyond end of device [ 143.408131][ T6085] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 143.432979][ T6085] kworker/u8:47: attempt to access beyond end of device [ 143.432979][ T6085] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 143.465069][ T6873] netlink: 92 bytes leftover after parsing attributes in process `syz.6.911'. [ 143.474415][ T6085] kworker/u8:47: attempt to access beyond end of device [ 143.474415][ T6085] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 143.589267][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.610170][ T6887] loop1: detected capacity change from 0 to 128 [ 143.974631][ T28] audit: type=1400 audit(1777508604.375:2188): avc: denied { cpu } for pid=6894 comm="syz.1.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 144.071310][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.921'. [ 144.084049][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.201981][ T6916] loop2: detected capacity change from 0 to 128 [ 144.210973][ T6904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=6904 comm=syz.1.922 [ 144.245754][ T6904] loop1: detected capacity change from 0 to 1024 [ 144.436145][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 144.522099][ T28] audit: type=1400 audit(1777508604.918:2189): avc: denied { create } for pid=6930 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.550179][ T28] audit: type=1400 audit(1777508604.948:2190): avc: denied { bind } for pid=6930 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.580817][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.930'. [ 144.694344][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.749488][ T6947] ÿ: renamed from bond_slave_0 (while UP) [ 144.755552][ T28] audit: type=1400 audit(1777508605.158:2191): avc: denied { read } for pid=6932 comm="syz.1.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 144.802079][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.810370][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.947354][ T6956] loop2: detected capacity change from 0 to 2048 [ 145.004965][ T6956] loop2: p2 p3 p7 [ 145.021373][ T6955] netlink: 'syz.2.937': attribute type 10 has an invalid length. [ 145.029868][ T6956] netlink: 'syz.2.937': attribute type 10 has an invalid length. [ 145.082551][ T6955] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.095821][ T6955] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 145.104963][ T6955] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 145.246263][ T6970] loop1: detected capacity change from 0 to 128 [ 145.347947][ T6977] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.944'. [ 145.370297][ T6977] netlink: zone id is out of range [ 145.392847][ T6977] netlink: zone id is out of range [ 145.644475][ T6989] loop1: detected capacity change from 0 to 512 [ 145.664474][ T6989] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 145.689782][ T6989] EXT4-fs (loop1): 1 truncate cleaned up [ 145.697043][ T6986] netlink: 132 bytes leftover after parsing attributes in process `syz.2.947'. [ 145.711412][ T6989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.764273][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.879818][ T28] audit: type=1400 audit(1777508606.288:2192): avc: denied { ioctl } for pid=6995 comm="syz.6.950" path="socket:[18270]" dev="sockfs" ino=18270 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 146.310287][ T6999] loop6: detected capacity change from 0 to 512 [ 146.361975][ T7017] SELinux: policydb version 1584164120 does not match my version range 15-35 [ 146.380862][ T6999] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.951: corrupted in-inode xattr: invalid ea_ino [ 146.412978][ T7017] SELinux: failed to load policy [ 146.419881][ T6999] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.421941][ T6999] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.951: couldn't read orphan inode 15 (err -117) [ 146.431297][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 146.431410][ C1] EXT4-fs (loop6): initial error at time 1777508606: ext4_iget_extra_inode:5128: inode 15 [ 146.431494][ C1] EXT4-fs (loop6): last error at time 1777508606: ext4_iget_extra_inode:5128: inode 15 [ 146.582815][ T6999] loop6: lost filesystem error report for type 5 error -117 [ 146.596276][ T6999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.630223][ T7024] FAULT_INJECTION: forcing a failure. [ 146.630223][ T7024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.709207][ T7024] CPU: 0 UID: 0 PID: 7024 Comm: syz.1.958 Tainted: G W syzkaller #0 PREEMPT(full) [ 146.709241][ T7024] Tainted: [W]=WARN [ 146.709272][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.709283][ T7024] Call Trace: [ 146.709291][ T7024] [ 146.709301][ T7024] __dump_stack+0x1d/0x30 [ 146.709329][ T7024] dump_stack_lvl+0x95/0xd0 [ 146.709349][ T7024] dump_stack+0x15/0x1b [ 146.709366][ T7024] should_fail_ex+0x263/0x280 [ 146.709411][ T7024] should_fail+0xb/0x20 [ 146.709439][ T7024] should_fail_usercopy+0x1a/0x20 [ 146.709534][ T7024] _copy_to_user+0x20/0xa0 [ 146.709569][ T7024] simple_read_from_buffer+0xb5/0x130 [ 146.709604][ T7024] proc_fail_nth_read+0x10e/0x150 [ 146.709674][ T7024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.709698][ T7024] vfs_read+0x1ab/0x7f0 [ 146.709754][ T7024] ? l2cap_sock_setsockopt+0x13a6/0x13d0 [ 146.709778][ T7024] ? __rcu_read_unlock+0x4e/0x70 [ 146.709802][ T7024] ? __fget_files+0x184/0x1c0 [ 146.709824][ T7024] ? mutex_lock+0x57/0x90 [ 146.709911][ T7024] ksys_read+0xdc/0x1a0 [ 146.709943][ T7024] __x64_sys_read+0x40/0x50 [ 146.709966][ T7024] x64_sys_call+0x2886/0x3020 [ 146.709987][ T7024] do_syscall_64+0x12c/0x3b0 [ 146.710070][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.710091][ T7024] RIP: 0033:0x7f7dfd76d60e [ 146.710116][ T7024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 146.710135][ T7024] RSP: 002b:00007f7dfc1fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.710154][ T7024] RAX: ffffffffffffffda RBX: 00007f7dfc1ff6c0 RCX: 00007f7dfd76d60e [ 146.710171][ T7024] RDX: 000000000000000f RSI: 00007f7dfc1ff0a0 RDI: 0000000000000003 [ 146.710249][ T7024] RBP: 00007f7dfc1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 146.710261][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.710272][ T7024] R13: 00007f7dfda26038 R14: 00007f7dfda25fa0 R15: 00007ffca1518408 [ 146.710299][ T7024] [ 146.923215][ T3381] net_ratelimit: 2 callbacks suppressed [ 146.923248][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.977054][ T6999] vhci_hcd vhci_hcd.0: invalid port number 23 [ 147.030463][ T6049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.038730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.049290][ T5609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.169704][ T7035] netlink: zone id is out of range [ 147.174952][ T7035] netlink: zone id is out of range [ 147.234340][ T28] audit: type=1400 audit(1777508607.638:2193): avc: denied { setattr } for pid=7036 comm="syz.2.963" name="route" dev="proc" ino=4026532653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 147.264107][ T7035] netlink: set zone limit has 8 unknown bytes [ 147.328883][ T7039] xt_l2tp: missing protocol rule (udp|l2tpip) [ 147.582201][ T7051] set_capacity_and_notify: 1 callbacks suppressed [ 147.582221][ T7051] loop1: detected capacity change from 0 to 2048 [ 147.696350][ T7051] loop1: p2 p3 p7 [ 147.709379][ T7065] loop6: detected capacity change from 0 to 512 [ 147.742064][ T7051] netlink: 'syz.1.967': attribute type 10 has an invalid length. [ 147.758367][ T7065] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 147.795148][ T7066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7066 comm=syz.1.967 [ 147.843694][ T7065] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 147.874674][ T7065] EXT4-fs (loop6): orphan cleanup on readonly fs [ 147.885511][ T7051] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 147.909008][ T7065] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.972: bad orphan inode 3 [ 147.943493][ T7065] loop6: lost filesystem error report for type 5 error -117 [ 147.947153][ T7065] EXT4-fs (loop6): Remounting filesystem read-only [ 147.954514][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 147.954537][ C0] EXT4-fs (loop6): initial error at time 1777508608: ext4_orphan_get:1423 [ 147.954580][ C0] EXT4-fs (loop6): last error at time 1777508608: ext4_orphan_get:1423 [ 148.000588][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.023540][ T7071] loop2: detected capacity change from 0 to 512 [ 148.030410][ T7071] EXT4-fs: Ignoring removed nobh option [ 148.047883][ T7071] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 148.056493][ T7071] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #13: comm syz.2.974: inode has both inline data and extents flags [ 148.056525][ T7071] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 148.056713][ T7071] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.974: couldn't read orphan inode 13 (err -117) [ 148.056738][ T7071] loop2: lost filesystem error report for type 5 error -117 [ 148.072573][ T7071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.142233][ T7065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 148.353439][ T7078] __nla_validate_parse: 2 callbacks suppressed [ 148.353457][ T7078] netlink: 200 bytes leftover after parsing attributes in process `syz.1.975'. [ 148.390078][ T7078] netlink: 'syz.1.975': attribute type 21 has an invalid length. [ 148.407450][ T7078] netlink: 156 bytes leftover after parsing attributes in process `syz.1.975'. [ 148.430709][ T28] audit: type=1400 audit(1777508608.838:2194): avc: denied { bind } for pid=7070 comm="syz.2.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.459829][ T7080] netlink: 'syz.1.975': attribute type 1 has an invalid length. [ 148.687818][ T7099] loop5: detected capacity change from 0 to 512 [ 148.715683][ T7099] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 148.737950][ T7099] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.978: corrupted in-inode xattr: e_value size too large [ 148.759241][ T7099] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.759452][ T7099] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.978: couldn't read orphan inode 15 (err -117) [ 148.780600][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 148.780624][ C0] EXT4-fs (loop5): initial error at time 1777508609: ext4_iget_extra_inode:5128: inode 15 [ 148.780657][ C0] EXT4-fs (loop5): last error at time 1777508609: ext4_iget_extra_inode:5128: inode 15 [ 148.812292][ T7105] loop1: detected capacity change from 0 to 8192 [ 148.814138][ T7090] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.972: dx entry: limit 0 != root limit 125 [ 148.819668][ T7099] loop5: lost filesystem error report for type 5 error -117 [ 148.839176][ T7090] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.972: Corrupt directory, running e2fsck is recommended [ 148.859974][ T7099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.944850][ T4853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.029226][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.131745][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.323618][ T7132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.984'. [ 149.403527][ T7167] loop2: detected capacity change from 0 to 512 [ 149.412759][ T7167] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 149.432457][ T7168] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 2, id = 0 [ 149.485110][ T7167] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 149.493921][ T7167] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.983: bad orphan inode 4 [ 149.503877][ T7167] loop2: lost filesystem error report for type 5 error -117 [ 149.504302][ T7167] EXT4-fs (loop2): 1 orphan inode deleted [ 149.511624][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 149.511643][ C1] EXT4-fs (loop2): initial error at time 1777508609: ext4_orphan_get:1423 [ 149.511668][ C1] EXT4-fs (loop2): last error at time 1777508609: ext4_orphan_get:1423 [ 149.541959][ T7167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.558441][ T7167] IPVS: stopping backup sync thread 7168 ... [ 149.971279][ T5609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 150.069305][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.239236][ T7073] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 150.298672][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.002290][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.207713][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 151.257703][ T7203] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 151.264352][ T7203] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.272781][ T7203] vhci_hcd vhci_hcd.0: Device attached [ 151.342365][ T7208] netlink: 'syz.0.997': attribute type 10 has an invalid length. [ 151.363054][ T7208] team0: Device wg2 is of different type [ 151.438007][ T7222] loop5: detected capacity change from 0 to 128 [ 151.559247][ T7229] netlink: 'syz.2.1007': attribute type 4 has an invalid length. [ 151.576521][ T7229] netlink: 'syz.2.1007': attribute type 4 has an invalid length. [ 151.687166][ T7230] loop6: detected capacity change from 0 to 512 [ 151.694676][ T7231] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 2, id = 0 [ 151.724213][ T7230] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 151.799370][ T7230] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 151.808003][ T7230] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1005: bad orphan inode 4 [ 151.818075][ T7230] loop6: lost filesystem error report for type 5 error -117 [ 151.819187][ T7230] EXT4-fs (loop6): 1 orphan inode deleted [ 151.832323][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 151.832344][ C0] EXT4-fs (loop6): initial error at time 1777508612: ext4_orphan_get:1423 [ 151.832371][ C0] EXT4-fs (loop6): last error at time 1777508612: ext4_orphan_get:1423 [ 151.856619][ T7230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.873861][ T7230] IPVS: stopping backup sync thread 7231 ... [ 152.014213][ T7206] vhci_hcd: connection closed [ 152.014461][ T49] vhci_hcd vhci_hcd.0: stop threads [ 152.026250][ T49] vhci_hcd vhci_hcd.0: release socket [ 152.032097][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 152.149969][ C0] net_ratelimit: 9 callbacks suppressed [ 152.149988][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.545392][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.554089][ T49] bio_check_eod: 434 callbacks suppressed [ 152.554129][ T49] kworker/u8:3: attempt to access beyond end of device [ 152.554129][ T49] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 152.577558][ T49] kworker/u8:3: attempt to access beyond end of device [ 152.577558][ T49] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 152.747344][ T7238] loop1: detected capacity change from 0 to 512 [ 152.755251][ T49] kworker/u8:3: attempt to access beyond end of device [ 152.755251][ T49] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 152.780843][ T7238] EXT4-fs: Ignoring removed bh option [ 152.825222][ T7238] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.841595][ T49] kworker/u8:3: attempt to access beyond end of device [ 152.841595][ T49] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 152.877536][ T7238] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 152.903054][ T49] kworker/u8:3: attempt to access beyond end of device [ 152.903054][ T49] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 152.923240][ T7238] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 152.951305][ T7238] EXT4-fs (loop1): orphan cleanup on readonly fs [ 152.963511][ T49] kworker/u8:3: attempt to access beyond end of device [ 152.963511][ T49] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 152.985322][ T7238] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 153.015335][ T49] kworker/u8:3: attempt to access beyond end of device [ 153.015335][ T49] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 153.029721][ T7238] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 153.056550][ T7238] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1010: Failed to acquire dquot type 1 [ 153.073954][ T49] kworker/u8:3: attempt to access beyond end of device [ 153.073954][ T49] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 153.095911][ T7238] loop1: lost filesystem error report for type 5 error -5 [ 153.096149][ T7238] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1010: Invalid block bitmap block 0 in block_group 0 [ 153.103391][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 153.103412][ C0] EXT4-fs (loop1): last error at time 1777508613: ext4_acquire_dquot:7034 [ 153.133811][ T49] kworker/u8:3: attempt to access beyond end of device [ 153.133811][ T49] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 153.147728][ T49] kworker/u8:3: attempt to access beyond end of device [ 153.147728][ T49] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 153.148039][ T7247] FAULT_INJECTION: forcing a failure. [ 153.148039][ T7247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.163918][ T7238] loop1: lost filesystem error report for type 5 error -117 [ 153.174951][ T7238] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1010: Invalid block bitmap block 0 in block_group 0 [ 153.175266][ T5609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.196108][ T7238] loop1: lost filesystem error report for type 5 error -117 [ 153.205071][ T7247] CPU: 1 UID: 0 PID: 7247 Comm: syz.2.1013 Tainted: G W syzkaller #0 PREEMPT(full) [ 153.205107][ T7247] Tainted: [W]=WARN [ 153.205167][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.205180][ T7247] Call Trace: [ 153.205187][ T7247] [ 153.205195][ T7247] __dump_stack+0x1d/0x30 [ 153.205222][ T7247] dump_stack_lvl+0x95/0xd0 [ 153.205327][ T7247] dump_stack+0x15/0x1b [ 153.205360][ T7247] should_fail_ex+0x263/0x280 [ 153.205428][ T7247] should_fail+0xb/0x20 [ 153.205456][ T7247] should_fail_usercopy+0x1a/0x20 [ 153.205487][ T7247] _copy_to_user+0x20/0xa0 [ 153.205594][ T7247] simple_read_from_buffer+0xb5/0x130 [ 153.205627][ T7247] proc_fail_nth_read+0x10e/0x150 [ 153.205661][ T7247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.205691][ T7247] vfs_read+0x1ab/0x7f0 [ 153.205722][ T7247] ? __fget_files+0x184/0x1c0 [ 153.205779][ T7247] ? __rcu_read_unlock+0x4e/0x70 [ 153.205801][ T7247] ? __fget_files+0x184/0x1c0 [ 153.205821][ T7247] ? mutex_lock+0x57/0x90 [ 153.205885][ T7247] ksys_read+0xdc/0x1a0 [ 153.205964][ T7247] __x64_sys_read+0x40/0x50 [ 153.206063][ T7247] x64_sys_call+0x2886/0x3020 [ 153.206156][ T7247] do_syscall_64+0x12c/0x3b0 [ 153.206184][ T7247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.206208][ T7247] RIP: 0033:0x7f8125e8d60e [ 153.206225][ T7247] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.206249][ T7247] RSP: 002b:00007f812491efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.206269][ T7247] RAX: ffffffffffffffda RBX: 00007f812491f6c0 RCX: 00007f8125e8d60e [ 153.206338][ T7247] RDX: 000000000000000f RSI: 00007f812491f0a0 RDI: 0000000000000006 [ 153.206351][ T7247] RBP: 00007f812491f090 R08: 0000000000000000 R09: 0000000000000000 [ 153.206411][ T7247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.206424][ T7247] R13: 00007f8126146038 R14: 00007f8126145fa0 R15: 00007ffc1029de38 [ 153.206444][ T7247] [ 153.424663][ T7238] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1010: Invalid block bitmap block 0 in block_group 0 [ 153.442934][ T7238] loop1: lost filesystem error report for type 5 error -117 [ 153.443148][ T7238] Quota error (device loop1): write_blk: dquota write failed [ 153.505437][ T7238] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 153.513555][ T7261] loop2: detected capacity change from 0 to 512 [ 153.533584][ T7261] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.535289][ T7238] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1010: Failed to acquire dquot type 1 [ 153.589317][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.590145][ T7238] loop1: lost filesystem error report for type 5 error -28 [ 153.598564][ T7261] EXT4-fs (loop2): 1 orphan inode deleted [ 153.606207][ T7238] Quota error (device loop1): write_blk: dquota write failed [ 153.619602][ T7238] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 153.629483][ T7238] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1010: Failed to acquire dquot type 1 [ 153.629510][ T7238] loop1: lost filesystem error report for type 5 error -28 [ 153.629578][ T7261] EXT4-fs (loop2): 1 truncate cleaned up [ 153.630159][ T7261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.645631][ T7238] EXT4-fs (loop1): 1 orphan inode deleted [ 153.646575][ T7238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.651906][ T7261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.726517][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.753644][ T7273] netlink: 'syz.1.1021': attribute type 4 has an invalid length. [ 153.768789][ T7273] netlink: 'syz.1.1021': attribute type 4 has an invalid length. [ 153.913314][ T7280] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1023'. [ 153.948061][ T7280] netlink: zone id is out of range [ 153.953346][ T7280] netlink: zone id is out of range [ 153.967250][ T7280] netlink: set zone limit has 8 unknown bytes [ 154.038958][ T7276] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1020'. [ 154.098847][ T7289] loop1: detected capacity change from 0 to 512 [ 154.141942][ T7289] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 154.173723][ T7289] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 154.183211][ T7289] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1024: bad orphan inode 4 [ 154.193283][ T7289] loop1: lost filesystem error report for type 5 error -117 [ 154.194333][ T7289] EXT4-fs (loop1): 1 orphan inode deleted [ 154.201676][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 154.201696][ C1] EXT4-fs (loop1): initial error at time 1777508614: ext4_orphan_get:1423 [ 154.201721][ C1] EXT4-fs (loop1): last error at time 1777508614: ext4_orphan_get:1423 [ 154.231700][ T7289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.309266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.317556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.331192][ T7289] IPVS: stopping backup sync thread 7288 ... [ 154.453479][ T7300] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1028'. [ 154.510575][ T7300] netlink: zone id is out of range [ 154.548272][ T7300] netlink: zone id is out of range [ 154.808986][ T7311] loop6: detected capacity change from 0 to 128 [ 154.998357][ T7320] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 154.998565][ T7317] loop5: detected capacity change from 0 to 764 [ 155.007128][ T7320] FAT-fs (loop6): Filesystem has been set read-only [ 155.140582][ T7317] rock: directory entry would overflow storage [ 155.155753][ T7317] rock: sig=0x4f50, size=4, remaining=3 [ 155.182478][ T7317] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 155.268042][ T28] audit: type=1400 audit(1777508615.668:2195): avc: denied { getopt } for pid=7326 comm="syz.6.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.450210][ T7331] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 155.481627][ T7331] loop6: detected capacity change from 0 to 512 [ 155.500990][ T7331] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 155.541698][ T7331] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.1037: corrupted in-inode xattr: bad e_name length [ 155.572830][ T7331] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 155.573107][ T7331] EXT4-fs (loop6): get orphan inode failed [ 155.582337][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 155.582355][ C1] EXT4-fs (loop6): initial error at time 1777508615: ext4_iget_extra_inode:5128: inode 15 [ 155.582381][ C1] EXT4-fs (loop6): last error at time 1777508615: ext4_iget_extra_inode:5128: inode 15 [ 155.625822][ T7331] EXT4-fs (loop6): mount failed [ 155.639454][ T28] audit: type=1400 audit(1777508616.038:2196): avc: denied { accept } for pid=7332 comm="syz.0.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.659867][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.843326][ T7331] lo speed is unknown, defaulting to 1000 [ 155.903532][ T7346] loop2: detected capacity change from 0 to 128 [ 155.987727][ T7349] loop2: detected capacity change from 0 to 764 [ 156.033414][ T7349] FAULT_INJECTION: forcing a failure. [ 156.033414][ T7349] name failslab, interval 1, probability 0, space 0, times 0 [ 156.047483][ T7349] CPU: 0 UID: 0 PID: 7349 Comm: syz.2.1043 Tainted: G W syzkaller #0 PREEMPT(full) [ 156.047520][ T7349] Tainted: [W]=WARN [ 156.047529][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.047599][ T7349] Call Trace: [ 156.047606][ T7349] [ 156.047614][ T7349] __dump_stack+0x1d/0x30 [ 156.047708][ T7349] dump_stack_lvl+0x95/0xd0 [ 156.047732][ T7349] dump_stack+0x15/0x1b [ 156.047753][ T7349] should_fail_ex+0x263/0x280 [ 156.047816][ T7349] should_failslab+0x8c/0xb0 [ 156.047841][ T7349] kmem_cache_alloc_noprof+0x66/0x3f0 [ 156.047876][ T7349] ? security_file_alloc+0x32/0xf0 [ 156.047934][ T7349] security_file_alloc+0x32/0xf0 [ 156.047956][ T7349] init_file+0x5b/0x1b0 [ 156.048060][ T7349] alloc_empty_file+0x85/0x1e0 [ 156.048084][ T7349] path_openat+0x65/0x2050 [ 156.048113][ T7349] ? _parse_integer_limit+0x170/0x190 [ 156.048183][ T7349] ? _parse_integer+0x27/0x40 [ 156.048206][ T7349] ? kstrtoull+0x111/0x140 [ 156.048225][ T7349] ? kstrtouint+0x76/0xc0 [ 156.048252][ T7349] do_file_open+0x16c/0x290 [ 156.048327][ T7349] do_sys_openat2+0x94/0x130 [ 156.048347][ T7349] __x64_sys_openat+0xf2/0x120 [ 156.048369][ T7349] x64_sys_call+0x1e39/0x3020 [ 156.048511][ T7349] do_syscall_64+0x12c/0x3b0 [ 156.048538][ T7349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.048558][ T7349] RIP: 0033:0x7f8125eccdd9 [ 156.048573][ T7349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.048636][ T7349] RSP: 002b:00007f812491f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 156.048656][ T7349] RAX: ffffffffffffffda RBX: 00007f8126145fa0 RCX: 00007f8125eccdd9 [ 156.048669][ T7349] RDX: 0000000000105142 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 156.048716][ T7349] RBP: 00007f812491f090 R08: 0000000000000000 R09: 0000000000000000 [ 156.048731][ T7349] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001 [ 156.048745][ T7349] R13: 00007f8126146038 R14: 00007f8126145fa0 R15: 00007ffc1029de38 [ 156.048766][ T7349] [ 156.360862][ T7356] loop2: detected capacity change from 0 to 512 [ 156.448587][ T7356] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.475799][ T7356] EXT4-fs (loop2): 1 orphan inode deleted [ 156.482527][ T7356] EXT4-fs (loop2): 1 truncate cleaned up [ 156.496375][ T7356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.510902][ T7356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.702224][ T28] audit: type=1400 audit(1777508617.108:2197): avc: denied { execute } for pid=7367 comm="syz.1.1049" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 156.899380][ T28] audit: type=1400 audit(1777508617.308:2198): avc: denied { read } for pid=7365 comm="syz.6.1048" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.171837][ T7383] lo speed is unknown, defaulting to 1000 [ 157.212220][ T7391] loop2: detected capacity change from 0 to 512 [ 157.237933][ T7391] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.285952][ T7387] 9pnet: p9_errstr2errno: server reported unknown error  [ 157.300238][ T7391] EXT4-fs (loop2): 1 orphan inode deleted [ 157.307565][ T7391] EXT4-fs (loop2): 1 truncate cleaned up [ 157.329657][ T7391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.343502][ T23] net_ratelimit: 1831 callbacks suppressed [ 157.343517][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.358095][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.366373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.376941][ T7391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.400031][ T7394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7394 comm=syz.5.1055 [ 157.422870][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1055'. [ 157.499589][ T7398] netlink: 'syz.1.1057': attribute type 4 has an invalid length. [ 157.540740][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 157.561479][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1055'. [ 157.586401][ T7408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.598679][ T7408] EXT4-fs (loop1): 1 orphan inode deleted [ 157.614513][ T7408] EXT4-fs (loop1): 1 truncate cleaned up [ 157.623446][ T7408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.670482][ T7417] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261 [ 157.705998][ T7408] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.803041][ T7427] set_capacity_and_notify: 1 callbacks suppressed [ 157.803060][ T7427] loop6: detected capacity change from 0 to 512 [ 157.834937][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 157.858551][ T7427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.871343][ T7427] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.903899][ T5609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.957757][ T7439] bridge0: port 3(vlan2) entered blocking state [ 157.965689][ T7439] bridge0: port 3(vlan2) entered disabled state [ 157.973443][ T7439] vlan2: entered allmulticast mode [ 157.980797][ T7439] geneve0: entered allmulticast mode [ 157.986939][ T7439] vlan2: entered promiscuous mode [ 157.992508][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.000910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.003863][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1070'. [ 158.018062][ T7439] geneve0: entered promiscuous mode [ 158.099910][ T7452] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261 [ 158.265520][ T28] audit: type=1400 audit(1777508618.668:2199): avc: denied { write } for pid=7447 comm="syz.6.1071" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 158.284759][ T7448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.299961][ T7448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.343645][ T7448] loop6: detected capacity change from 0 to 1024 [ 158.353193][ T7448] EXT4-fs: Ignoring removed bh option [ 158.375374][ T7448] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.389365][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.441368][ T7468] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1078'. [ 158.458194][ T7470] openvswitch: netlink: Missing key (keys=40, expected=80) [ 158.468552][ T28] audit: type=1400 audit(1777508618.868:2200): avc: denied { bind } for pid=7467 comm="syz.1.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 158.506220][ T7472] loop2: detected capacity change from 0 to 512 [ 158.515335][ T7472] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.532065][ T7472] EXT4-fs (loop2): 1 orphan inode deleted [ 158.550151][ T7472] EXT4-fs (loop2): 1 truncate cleaned up [ 158.559972][ T7472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.576648][ T7472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.590277][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'. [ 158.677611][ T7477] loop5: detected capacity change from 0 to 8192 [ 158.815916][ T7477] loop5: p1 p2 p3 p4 [ 158.821605][ T7477] loop5: p1 start 393217 is beyond EOD, truncated [ 158.828104][ T7477] loop5: p2 size 327680 extends beyond EOD, truncated [ 158.836116][ T7477] loop5: p3 size 395700 extends beyond EOD, truncated [ 158.845564][ T7477] loop5: p4 start 117571584 is beyond EOD, truncated [ 158.902772][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 158.913614][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 158.938587][ T7497] loop2: detected capacity change from 0 to 128 [ 159.018465][ T28] audit: type=1400 audit(1777508619.378:2201): avc: denied { watch watch_reads } for pid=7495 comm="syz.2.1090" path="/242/file1" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 159.054517][ T7500] batadv0: entered promiscuous mode [ 159.100368][ T7500] batadv0: left promiscuous mode [ 159.143626][ T7503] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 159.165976][ T7503] FAT-fs (loop2): Filesystem has been set read-only [ 159.199559][ T5609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.381025][ T7511] netlink: 'syz.0.1094': attribute type 29 has an invalid length. [ 159.429239][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.478578][ T7515] loop5: detected capacity change from 0 to 512 [ 159.508682][ T7516] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1094'. [ 159.527799][ T7515] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 159.564479][ T28] audit: type=1400 audit(1777508619.968:2202): avc: denied { connect } for pid=7508 comm="syz.1.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.675473][ T7519] loop6: detected capacity change from 0 to 512 [ 159.695753][ T7519] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 159.718925][ T7523] loop1: detected capacity change from 0 to 512 [ 159.739188][ T7519] EXT4-fs (loop6): 1 orphan inode deleted [ 159.760429][ T7519] EXT4-fs (loop6): 1 truncate cleaned up [ 159.772657][ T7519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.779262][ T7519] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.843350][ T7521] loop2: detected capacity change from 0 to 8192 [ 159.861678][ T7521] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.950357][ T7527] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1099'. [ 160.065069][ T7525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10723 sclass=netlink_route_socket pid=7525 comm=syz.1.1098 [ 160.098901][ T7535] syzkaller0: entered promiscuous mode [ 160.116821][ T7535] syzkaller0: entered allmulticast mode [ 160.120965][ T28] audit: type=1326 audit(1777508620.528:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.2.1097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8125eccdd9 code=0x0 [ 160.146002][ T7535] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1101'. [ 160.181346][ T7531] loop5: detected capacity change from 0 to 128 [ 160.258688][ T7540] netlink: 'syz.0.1102': attribute type 21 has an invalid length. [ 160.265685][ T7538] can0: slcan on ttyS3. [ 160.281163][ T7540] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1102'. [ 160.356350][ T7538] can0 (unregistered): slcan off ttyS3. [ 160.381081][ T7531] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.428022][ T7531] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.438369][ T28] audit: type=1400 audit(1777508620.828:2204): avc: denied { append } for pid=7558 comm="syz.6.1107" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 160.506270][ T7564] netlink: 'syz.0.1109': attribute type 4 has an invalid length. [ 160.517597][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'. [ 160.567487][ T7575] netlink: 'syz.0.1109': attribute type 4 has an invalid length. [ 160.581293][ T3395] lo speed is unknown, defaulting to 1000 [ 160.587319][ T3395] syz2: Port: 1 Link DOWN [ 160.610511][ T5839] lo speed is unknown, defaulting to 1000 [ 160.616366][ T5839] syz2: Port: 1 Link ACTIVE [ 160.692044][ T7588] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1111'. [ 160.888372][ T4853] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.190218][ T7632] FAULT_INJECTION: forcing a failure. [ 161.190218][ T7632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.237889][ T7632] CPU: 0 UID: 0 PID: 7632 Comm: syz.1.1120 Tainted: G W syzkaller #0 PREEMPT(full) [ 161.237924][ T7632] Tainted: [W]=WARN [ 161.237932][ T7632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.237983][ T7632] Call Trace: [ 161.237990][ T7632] [ 161.237998][ T7632] __dump_stack+0x1d/0x30 [ 161.238021][ T7632] dump_stack_lvl+0x95/0xd0 [ 161.238040][ T7632] dump_stack+0x15/0x1b [ 161.238061][ T7632] should_fail_ex+0x263/0x280 [ 161.238092][ T7632] should_fail+0xb/0x20 [ 161.238146][ T7632] should_fail_usercopy+0x1a/0x20 [ 161.238170][ T7632] _copy_from_user+0x1c/0xb0 [ 161.238251][ T7632] ___sys_sendmsg+0xc1/0x1e0 [ 161.238281][ T7632] __x64_sys_sendmsg+0xd4/0x160 [ 161.238303][ T7632] x64_sys_call+0x194c/0x3020 [ 161.238448][ T7632] do_syscall_64+0x12c/0x3b0 [ 161.238476][ T7632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.238499][ T7632] RIP: 0033:0x7f7dfd7acdd9 [ 161.238514][ T7632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.238531][ T7632] RSP: 002b:00007f7dfc1ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.238628][ T7632] RAX: ffffffffffffffda RBX: 00007f7dfda25fa0 RCX: 00007f7dfd7acdd9 [ 161.238644][ T7632] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 161.238660][ T7632] RBP: 00007f7dfc1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 161.238675][ T7632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.238689][ T7632] R13: 00007f7dfda26038 R14: 00007f7dfda25fa0 R15: 00007ffca1518408 [ 161.238706][ T7632] [ 161.481505][ T7633] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 161.493178][ T7633] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 161.503293][ T7633] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1116: Corrupt directory, running e2fsck is recommended [ 161.538915][ T7633] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 161.547274][ T7633] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1116: corrupted in-inode xattr: e_name out of bounds [ 161.561226][ T7633] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 161.575218][ T7633] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1116: couldn't read orphan inode 15 (err -117) [ 161.584493][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 161.584513][ C0] EXT4-fs (loop2): initial error at time 1777508621: ext4_iget_extra_inode:5128: inode 15 [ 161.584557][ C0] EXT4-fs (loop2): last error at time 1777508621: ext4_iget_extra_inode:5128: inode 15 [ 161.622692][ T7633] loop2: lost filesystem error report for type 5 error -117 [ 161.627396][ T7639] netlink: 'syz.1.1121': attribute type 4 has an invalid length. [ 161.651845][ T7633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.665839][ T7633] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 161.677598][ T7633] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 161.687710][ T7633] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1116: Corrupt directory, running e2fsck is recommended [ 161.701771][ T7633] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 161.713366][ T7633] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 161.723537][ T7633] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1116: Corrupt directory, running e2fsck is recommended [ 161.751756][ T7641] netlink: 'syz.1.1121': attribute type 4 has an invalid length. [ 161.988168][ T7645] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 161.994836][ T7645] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 162.006325][ T7645] vhci_hcd vhci_hcd.0: Device attached [ 162.039796][ T7645] netlink: 'syz.6.1122': attribute type 10 has an invalid length. [ 162.054912][ T7649] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1123'. [ 162.126522][ T7645] team0: Device wg2 is of different type [ 162.207854][ T7646] vhci_hcd: connection closed [ 162.208121][ T6062] vhci_hcd vhci_hcd.6: stop threads [ 162.228419][ T6062] vhci_hcd vhci_hcd.6: release socket [ 162.249087][ T5838] usb 13-1: new high-speed USB device number 3 using vhci_hcd [ 162.266123][ T6062] vhci_hcd vhci_hcd.6: disconnect device [ 162.383660][ T7666] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 162.392171][ C0] net_ratelimit: 20 callbacks suppressed [ 162.392190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.544188][ T7666] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1131: Invalid inode bitmap blk 4 in block_group 0 [ 162.559684][ T7666] loop0: lost filesystem error report for type 5 error -117 [ 162.580076][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.597956][ T7666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.778343][ T28] audit: type=1400 audit(1777508623.178:2205): avc: denied { setattr } for pid=7665 comm="syz.0.1131" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.804909][ T7673] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1130'. [ 163.383220][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.394282][ T7666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.408248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.557952][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.586307][ T28] audit: type=1400 audit(1777508623.988:2206): avc: denied { mount } for pid=7681 comm="syz.5.1135" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 163.663802][ T7690] netlink: 'syz.0.1136': attribute type 4 has an invalid length. [ 163.699252][ T5840] lo speed is unknown, defaulting to 1000 [ 163.705228][ T5840] syz2: Port: 1 Link DOWN [ 164.672367][ T7712] set_capacity_and_notify: 4 callbacks suppressed [ 164.672384][ T7712] loop6: detected capacity change from 0 to 512 [ 165.075011][ T7716] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 165.081867][ T7716] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.850326][ T7716] vhci_hcd vhci_hcd.0: Device attached [ 165.906409][ T7716] netlink: 'syz.2.1144': attribute type 10 has an invalid length. [ 165.923037][ T7712] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 165.934653][ T7712] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 165.944903][ T7712] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1143: Corrupt directory, running e2fsck is recommended [ 165.966627][ T7712] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 165.975074][ T7712] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.1143: corrupted in-inode xattr: e_name out of bounds [ 165.989288][ T7712] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 165.993383][ T7712] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1143: couldn't read orphan inode 15 (err -117) [ 166.002750][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 166.002808][ C1] EXT4-fs (loop6): initial error at time 1777508626: ext4_iget_extra_inode:5128: inode 15 [ 166.002845][ C1] EXT4-fs (loop6): last error at time 1777508626: ext4_iget_extra_inode:5128: inode 15 [ 166.040902][ T7712] loop6: lost filesystem error report for type 5 error -117 [ 166.043941][ T7712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.084671][ T7711] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 166.096642][ T7711] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 166.106974][ T7711] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1143: Corrupt directory, running e2fsck is recommended [ 166.122833][ T7711] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 166.134619][ T7711] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 166.145027][ T7711] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1143: Corrupt directory, running e2fsck is recommended [ 166.160765][ T3381] usb 5-1: new high-speed USB device number 5 using vhci_hcd [ 166.317783][ T7719] vhci_hcd: connection reset by peer [ 166.327522][ T7716] team0: Device wg2 is of different type [ 166.342110][ T6099] vhci_hcd vhci_hcd.2: stop threads [ 166.365844][ T6099] vhci_hcd vhci_hcd.2: release socket [ 166.408048][ T6099] vhci_hcd vhci_hcd.2: disconnect device [ 166.508420][ T7735] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1147'. [ 166.534231][ T7736] loop5: detected capacity change from 0 to 512 [ 166.591023][ T7736] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.1149: corrupted in-inode xattr: invalid ea_ino [ 166.662213][ T7736] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.662626][ T7736] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1149: couldn't read orphan inode 15 (err -117) [ 166.671872][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 166.671893][ C1] EXT4-fs (loop5): initial error at time 1777508627: ext4_iget_extra_inode:5128: inode 15 [ 166.671920][ C1] EXT4-fs (loop5): last error at time 1777508627: ext4_iget_extra_inode:5128: inode 15 [ 166.724314][ T7736] loop5: lost filesystem error report for type 5 error -117 [ 166.725719][ T7736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.930694][ T5609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.047906][ T7741] 9p: Could not find request transport: fdïrfdno=0x0000000000000003 [ 167.444724][ T5838] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 168.337716][ T4853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.367852][ T7766] openvswitch: netlink: Missing key (keys=40, expected=80) [ 168.521320][ T28] audit: type=1400 audit(1777508628.888:2207): avc: denied { read } for pid=7755 comm="syz.1.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.607630][ T7777] loop6: detected capacity change from 0 to 512 [ 168.689641][ T7777] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 168.710844][ T7777] EXT4-fs (loop6): 1 orphan inode deleted [ 168.716799][ T7777] EXT4-fs (loop6): 1 truncate cleaned up [ 168.731890][ T7777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.819964][ T7782] loop2: detected capacity change from 0 to 512 [ 168.832433][ T7777] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.842424][ T7782] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 168.854431][ T7782] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 168.865425][ T7782] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1161: Corrupt directory, running e2fsck is recommended [ 168.879230][ T7782] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 168.887826][ T7782] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1161: corrupted in-inode xattr: e_name out of bounds [ 168.901779][ T7782] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.902064][ T7782] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1161: couldn't read orphan inode 15 (err -117) [ 168.911574][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 168.911591][ C1] EXT4-fs (loop2): initial error at time 1777508629: ext4_iget_extra_inode:5128: inode 15 [ 168.911627][ C1] EXT4-fs (loop2): last error at time 1777508629: ext4_iget_extra_inode:5128: inode 15 [ 168.949886][ T7782] loop2: lost filesystem error report for type 5 error -117 [ 168.953317][ T7782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.974683][ T7782] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 168.986243][ T7782] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 168.996365][ T7782] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1161: Corrupt directory, running e2fsck is recommended [ 169.010757][ T7782] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 169.022541][ T7782] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 169.032684][ T7782] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1161: Corrupt directory, running e2fsck is recommended [ 169.187054][ T7787] siw: device registration error -23 [ 169.916973][ T7794] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1165'. [ 169.952857][ T28] audit: type=1400 audit(1777508630.358:2208): avc: denied { connect } for pid=7798 comm="syz.6.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.097789][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.313556][ T7810] lo speed is unknown, defaulting to 1000 [ 170.747091][ T7814] loop5: detected capacity change from 0 to 512 [ 170.766051][ T7816] loop0: detected capacity change from 0 to 256 [ 170.772982][ T7814] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 170.804549][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'. [ 170.825428][ T7814] EXT4-fs (loop5): 1 orphan inode deleted [ 170.833534][ T7814] EXT4-fs (loop5): 1 truncate cleaned up [ 170.840011][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.847865][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.850788][ T7814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.871249][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.881064][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.889593][ T7814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.156227][ T7828] loop2: detected capacity change from 0 to 512 [ 171.184556][ T7828] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.772552][ T3381] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 172.131919][ T7837] siw: device registration error -23 [ 172.149607][ T7828] EXT4-fs (loop2): 1 orphan inode deleted [ 172.168622][ T7828] EXT4-fs (loop2): 1 truncate cleaned up [ 172.246396][ T7828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.305319][ T7828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.414369][ T7845] netlink: 'syz.5.1179': attribute type 21 has an invalid length. [ 172.451274][ T7845] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1179'. [ 172.746684][ T7848] loop2: detected capacity change from 0 to 512 [ 172.791652][ T7848] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 172.803232][ T7848] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 172.813413][ T7848] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1180: Corrupt directory, running e2fsck is recommended [ 172.833034][ T7848] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 172.841571][ T7848] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1180: corrupted in-inode xattr: e_name out of bounds [ 172.856073][ T7848] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 172.856305][ T7848] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1180: couldn't read orphan inode 15 (err -117) [ 172.865576][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 172.865616][ C0] EXT4-fs (loop2): initial error at time 1777508633: ext4_iget_extra_inode:5128: inode 15 [ 172.865667][ C0] EXT4-fs (loop2): last error at time 1777508633: ext4_iget_extra_inode:5128: inode 15 [ 172.903918][ T7848] loop2: lost filesystem error report for type 5 error -117 [ 172.904605][ T7848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.926234][ T7848] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 172.937862][ T7848] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 172.947994][ T7848] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1180: Corrupt directory, running e2fsck is recommended [ 172.962290][ T7848] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 172.973784][ T7848] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 172.983930][ T7848] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1180: Corrupt directory, running e2fsck is recommended [ 173.138322][ T7857] loop0: detected capacity change from 0 to 512 [ 173.148293][ T7857] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.162856][ T28] audit: type=1400 audit(1777508633.568:2209): avc: denied { connect } for pid=7855 comm="syz.1.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.202442][ T7857] EXT4-fs (loop0): 1 orphan inode deleted [ 173.220319][ T7857] EXT4-fs (loop0): 1 truncate cleaned up [ 173.233373][ T7857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.251969][ T7859] loop1: detected capacity change from 0 to 512 [ 173.261104][ T7857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.272569][ T7859] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.289800][ T7866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=60541 sclass=netlink_audit_socket pid=7866 comm=syz.6.1185 [ 173.308882][ T7859] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.1183: corrupted xattr entries [ 173.325026][ T7859] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 173.325344][ T7859] EXT4-fs (loop1): 1 truncate cleaned up [ 173.335023][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 173.335047][ C1] EXT4-fs (loop1): initial error at time 1777508633: xattr_find_entry:337: inode 15 [ 173.335079][ C1] EXT4-fs (loop1): last error at time 1777508633: xattr_find_entry:337: inode 15 [ 173.370997][ T7859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.399312][ T7859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.424778][ T28] audit: type=1400 audit(1777508633.828:2210): avc: denied { getopt } for pid=7855 comm="syz.1.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.449365][ T7859] loop1: detected capacity change from 0 to 256 [ 173.524997][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.621750][ T7874] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1189'. [ 173.622945][ T7876] loop0: detected capacity change from 0 to 512 [ 173.663277][ T7876] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.703388][ T7876] EXT4-fs (loop0): 1 orphan inode deleted [ 173.712823][ T7876] EXT4-fs (loop0): 1 truncate cleaned up [ 173.719855][ T7876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.758181][ T7860] loop6: detected capacity change from 0 to 256 [ 173.781131][ T7876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.820208][ T7882] usb usb7: usbfs: process 7882 (syz.1.1192) did not claim interface 1 before use [ 173.871979][ T7882] loop1: detected capacity change from 0 to 1024 [ 173.896916][ T7882] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.928721][ T7882] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 5: comm syz.1.1192: lblock 5 mapped to illegal pblock 5 (length 1) [ 173.958700][ T7882] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 173.958943][ T7882] Quota error (device loop1): write_blk: dquota write failed [ 173.968070][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 173.968100][ C1] EXT4-fs (loop1): initial error at time 1777508634: ext4_map_blocks:833: inode 3: block 5 [ 173.968136][ C1] EXT4-fs (loop1): last error at time 1777508634: ext4_map_blocks:833: inode 3: block 5 [ 174.002448][ T7882] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 174.011800][ T7882] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 174.021907][ T7882] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1192: Failed to acquire dquot type 0 [ 174.033287][ T7882] loop1: lost filesystem error report for type 5 error -117 [ 174.034724][ T7882] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 5: comm syz.1.1192: lblock 5 mapped to illegal pblock 5 (length 1) [ 174.056529][ T7882] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 174.060436][ T7882] Quota error (device loop1): do_insert_tree: Can't read tree quota block 5 [ 174.079750][ T7882] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 174.109845][ T7882] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1192: Failed to acquire dquot type 0 [ 174.131577][ T7882] loop1: lost filesystem error report for type 5 error -117 [ 174.131834][ T7882] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.1192: Freeing blocks not in datazone - block = 0, count = 4096 [ 174.172806][ T7882] loop1: lost filesystem error report for type 5 error -117 [ 174.173617][ T7882] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 5: comm syz.1.1192: lblock 5 mapped to illegal pblock 5 (length 1) [ 174.215110][ T7882] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 174.215295][ T7882] Quota error (device loop1): do_insert_tree: Can't read tree quota block 5 [ 174.248119][ T7882] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 174.276335][ T7882] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1192: Failed to acquire dquot type 0 [ 174.298923][ T7882] loop1: lost filesystem error report for type 5 error -117 [ 174.299186][ T7882] EXT4-fs (loop1): 1 orphan inode deleted [ 174.348884][ T7882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.459000][ T7874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.477271][ T7874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.646412][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.691963][ T7902] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261 [ 174.868466][ T7914] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 174.973240][ T7914] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 174.978759][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1200'. [ 174.990048][ T7911] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 174.998816][ T7914] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1203: bg 0: block 248: padding at end of block bitmap is not set [ 175.008482][ T7911] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 175.032972][ T7911] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1199: Corrupt directory, running e2fsck is recommended [ 175.036170][ T7914] loop1: lost filesystem error report for type 5 error -117 [ 175.048783][ T7911] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 175.056167][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 175.056190][ C0] EXT4-fs (loop1): last error at time 1777508635: ext4_validate_block_bitmap:441 [ 175.064966][ T7914] Quota error (device loop1): write_blk: dquota write failed [ 175.071000][ T7911] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.1199: corrupted in-inode xattr: e_name out of bounds [ 175.101579][ T7911] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.104157][ T7911] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1199: couldn't read orphan inode 15 (err -117) [ 175.119105][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 175.125362][ T7911] loop6: lost filesystem error report for type 5 error -117 [ 175.131732][ C0] EXT4-fs (loop6): initial error at time 1777508635: ext4_iget_extra_inode:5128: inode 15 [ 175.149077][ C0] EXT4-fs (loop6): last error at time 1777508635: ext4_orphan_get:1402 [ 175.226232][ T7911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.257435][ T7911] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 175.269134][ T7911] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 175.279365][ T7911] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1199: Corrupt directory, running e2fsck is recommended [ 175.299641][ T7911] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 175.311310][ T7911] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 175.321512][ T7911] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1199: Corrupt directory, running e2fsck is recommended [ 175.399417][ T7914] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 175.409947][ T7914] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1203: Failed to acquire dquot type 1 [ 175.431250][ T7914] loop1: lost filesystem error report for type 5 error -28 [ 175.433877][ T7914] EXT4-fs (loop1): 1 truncate cleaned up [ 175.521395][ T7914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 175.798953][ T7924] set_capacity_and_notify: 3 callbacks suppressed [ 175.841272][ T7924] loop2: detected capacity change from 0 to 128 [ 175.945296][ T5609] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.103516][ T7914] bond2: (slave veth5): Enslaving as an active interface with a down link [ 176.118711][ T7933] loop6: detected capacity change from 0 to 128 [ 176.148160][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'. [ 176.157558][ T7937] bond2: entered promiscuous mode [ 176.162907][ T7937] bond2: entered allmulticast mode [ 176.168499][ T7937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.264738][ T7939] lo speed is unknown, defaulting to 1000 [ 176.295253][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 176.335418][ T28] audit: type=1400 audit(1777508636.738:2211): avc: denied { shutdown } for pid=7938 comm="syz.6.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.371720][ T3293] ================================================================== [ 176.379855][ T3293] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 176.387517][ T3293] [ 176.389852][ T3293] read-write to 0xffff888237c266e8 of 1 bytes by task 7920 on cpu 0: [ 176.398105][ T3293] folio_add_lru+0xa4/0x1e0 [ 176.402635][ T3293] folio_add_lru_vma+0x49/0x70 [ 176.407687][ T3293] do_wp_page+0x13b1/0x2040 [ 176.412213][ T3293] handle_mm_fault+0x8b9/0x2e70 [ 176.417093][ T3293] do_user_addr_fault+0x3fd/0x1050 [ 176.422254][ T3293] exc_page_fault+0x62/0xa0 [ 176.426792][ T3293] asm_exc_page_fault+0x26/0x30 [ 176.431753][ T3293] __put_user_nocheck_4+0x3/0x10 [ 176.436798][ T3293] ____sys_recvmsg+0x1a1/0x280 [ 176.441666][ T3293] ___sys_recvmsg+0x11f/0x3b0 [ 176.446384][ T3293] do_recvmmsg+0x1ef/0x560 [ 176.451082][ T3293] __x64_sys_recvmmsg+0xe5/0x170 [ 176.456038][ T3293] x64_sys_call+0x80f/0x3020 [ 176.460836][ T3293] do_syscall_64+0x12c/0x3b0 [ 176.465531][ T3293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.471617][ T3293] [ 176.474039][ T3293] read to 0xffff888237c266e8 of 1 bytes by task 3293 on cpu 1: [ 176.481597][ T3293] __lru_add_drain_all+0x17e/0x450 [ 176.486840][ T3293] lru_add_drain_all+0x10/0x20 [ 176.491643][ T3293] invalidate_bdev+0x47/0x70 [ 176.496276][ T3293] ext4_put_super+0x610/0x7b0 [ 176.500977][ T3293] generic_shutdown_super+0xee/0x220 [ 176.506468][ T3293] kill_block_super+0x2a/0x70 [ 176.511299][ T3293] ext4_kill_sb+0x42/0x80 [ 176.515832][ T3293] deactivate_locked_super+0x75/0x1c0 [ 176.521243][ T3293] deactivate_super+0x97/0xa0 [ 176.525971][ T3293] cleanup_mnt+0x2bb/0x330 [ 176.530425][ T3293] __cleanup_mnt+0x19/0x20 [ 176.535038][ T3293] task_work_run+0x130/0x1a0 [ 176.539642][ T3293] exit_to_user_mode_loop+0x1f4/0x6f0 [ 176.545121][ T3293] do_syscall_64+0x232/0x3b0 [ 176.549729][ T3293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.555645][ T3293] [ 176.558066][ T3293] value changed: 0x17 -> 0x18 [ 176.562752][ T3293] [ 176.565095][ T3293] Reported by Kernel Concurrency Sanitizer on: [ 176.571480][ T3293] CPU: 1 UID: 0 PID: 3293 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 176.582622][ T3293] Tainted: [W]=WARN [ 176.586444][ T3293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.596514][ T3293] ==================================================================