last executing test programs: 10m55.212093267s ago: executing program 32 (id=535): r0 = syz_io_uring_setup(0x570c, &(0x7f0000000000)={0x0, 0xef13, 0x80, 0x3, 0x3ae}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000009600)=[{0x3, 0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f0000000bc0)=""/4096, 0x1000}], &(0x7f0000000300)=[0x3, 0x1, 0x0]}, {0x6, 0x1, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/252, 0xfc}, {&(0x7f0000000500)=""/186, 0xba}, {&(0x7f0000001bc0)=""/235, 0xeb}, {&(0x7f0000001cc0)=""/173, 0xad}, {&(0x7f0000001d80)=""/1, 0x1}], &(0x7f0000001e40)=[0x7fffffffffffffff, 0x6, 0xf, 0xa5, 0x100000001]}, {0x2, 0x1, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e80)=""/28, 0x1c}, {&(0x7f0000001ec0)=""/240, 0xf0}], &(0x7f0000002000)=[0x8, 0x9, 0x7, 0x7, 0x10001, 0x8, 0x43f, 0x0, 0x1, 0x24c]}, {0x6, 0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/244, 0xf4}, {&(0x7f0000003180)=""/146, 0x92}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f00000032c0)=""/201, 0xc9}, {&(0x7f00000033c0)=""/47, 0x2f}], &(0x7f0000003480)=[0x4, 0x189, 0x5, 0x2, 0x3, 0x8]}, {0xa, 0x0, 0x0, &(0x7f0000005980)=[{&(0x7f00000034c0)=""/161, 0xa1}, {&(0x7f0000003580)=""/47, 0x2f}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/24, 0x18}, {&(0x7f0000004600)=""/197, 0xc5}, {&(0x7f0000004700)=""/219, 0xdb}, {&(0x7f0000004800)=""/38, 0x26}, {&(0x7f0000004840)=""/180, 0xb4}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/97, 0x61}], &(0x7f0000005a40)=[0x100000001, 0x6, 0x9e7]}, {0x5, 0x0, 0x0, &(0x7f0000006d00)=[{&(0x7f0000005a80)=""/53, 0x35}, {&(0x7f0000005ac0)=""/108, 0x6c}, {&(0x7f0000005b40)=""/221, 0xdd}, {&(0x7f0000005c40)=""/4096, 0x1000}, {&(0x7f0000006c40)=""/174, 0xae}], &(0x7f0000006d80)=[0x0, 0x194e54e0]}, {0x3, 0x0, 0x0, &(0x7f0000007ec0)=[{&(0x7f0000006dc0)=""/4096, 0x1000}, {&(0x7f0000007dc0)=""/124, 0x7c}, {&(0x7f0000007e40)=""/65, 0x41}], &(0x7f0000007f00)=[0x5, 0x2, 0x9, 0x0]}, {0x3, 0x0, 0x0, &(0x7f0000008180)=[{&(0x7f0000007f40)=""/249, 0xf9}, {&(0x7f0000008040)=""/54, 0x36}, {&(0x7f0000008080)=""/213, 0xd5}], &(0x7f00000081c0)=[0x5609, 0x2, 0x0, 0x200, 0x7, 0x6, 0x3, 0x83d]}, {0x6, 0x0, 0x0, &(0x7f0000009540)=[{&(0x7f0000008200)=""/160, 0xa0}, {&(0x7f00000082c0)=""/126, 0x7e}, {&(0x7f0000008340)=""/4096, 0x1000}, {&(0x7f0000009340)=""/51, 0x33}, {&(0x7f0000009380)=""/147, 0x93}, {&(0x7f0000009440)=""/240, 0xf0}], &(0x7f00000095c0)=[0x100000000, 0xfed6, 0x5, 0x3, 0xfe1, 0x0]}], 0x9) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x2, 0x3, 0x29, 0x3, 0x0, 0x5, 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000004, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r4, r4, 0x0, 0x2000006) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 9m35.628170115s ago: executing program 33 (id=2435): r0 = socket(0xf, 0x5, 0x0) sendto(r0, &(0x7f0000000780)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102020000102505a1a440000102030109025c0002010040020904000001020d0000052406000105240005000d240f0105000000fbff07007f06241a0600230905810310008009040904010000020d00000904010102020d00000905820200020d05e109050302080002f9f2"], 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xa, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x3c}}, 0x0) 8m56.531463595s ago: executing program 34 (id=3326): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904022008f110000000040000a118000200e01d000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24048890) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2340) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)=""/73) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) 8m50.950914635s ago: executing program 35 (id=3428): r0 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x2710}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="204602089e9d7defa80c1770"], 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', 0xfffffffffffffffd) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000000)) sendmmsg$inet(r2, &(0x7f0000001b40)=[{{&(0x7f0000000400)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001940)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x18}}], 0x1, 0x4048810) dup(r1) 6m39.664020016s ago: executing program 36 (id=6009): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 6m30.901010145s ago: executing program 37 (id=6206): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) gettid() (async) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x6025, 0x4005, 0x9, 0x0, 0x1, 0x1, 0xf, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) timer_delete(r1) r3 = gettid() tkill(r3, 0x16) 6m28.310290529s ago: executing program 2 (id=6244): r0 = socket$nl_route(0x10, 0x3, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000a222504ed268746659a7470a4b7e987acbf3db8c81cff4b1af85e767604f9583c850991da309622e08f0555acd4f1393abcbf6b3d5428a5d298eb3a1b723d7cd3869de774ab5364e7f14024531ec4aafe1592f07f49b845fdccac944183afb895637a17989c254ca5cd8026d0d1e13efb93e0407bc56232f3097d5229986f6efc3da84405e757a4788420525332c288bbac30ed468a93f42bdbf8be2bc5255fe60040ed81d2488c1fbe900"/192, @ANYRES32=0x0, @ANYBLOB="03050000000000001800128008000100677470000c00028008"], 0x38}}, 0x20000080) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000580)=ANY=[@ANYRES32=r3], 0xe1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440c4}, 0x200080c1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x2, 0x5}, &(0x7f00000000c0)=0x90) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000300)={0x5, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) 6m28.133672332s ago: executing program 2 (id=6249): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @local, 0x94}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000852}, 0x0) close(0x3) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x74, 0x4745d7f32fab0666) 6m28.068530631s ago: executing program 2 (id=6250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 6m27.99788605s ago: executing program 2 (id=6253): r0 = socket(0x2, 0xa, 0x80000001) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sendfile(r1, r1, 0x0, 0x24002de8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x32, 0x0, 0xffffd000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x6, &(0x7f0000000100), 0x4) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'macsec0\x00', @random}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) wait4(r5, 0x0, 0x8, 0x0) ptrace$poke(0x1, r5, &(0x7f00000001c0), 0x8) ptrace$poke(0x4, r5, &(0x7f0000000100), 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x100014, 0x10000, 0x1, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$ARCH_SHSTK_DISABLE(0x1e, r5, 0x1, 0x5002) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x94200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='cpu&\t\t') r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000000), 0x45, 0x20a000) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="800000000a0605000000000000000000020000000900020073797a30df0000000800094000000009040008800900020033797a5fdbbc1fa22ccecf75c29b53db91320000000000000000ffffffff73797a300000000008000940fffffffe0800064000008fe2dff59aec000000000001000105000700160000000900120073797a3000000000050001000700000026d31e16d8bb60268e29c884e07f8be6e85a7d8e7bf7077e800f4b8cec89ff48306769a0cc2030eebc530d64c33e3e1ed3"], 0x80}}, 0x4008000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800800010067747000140002800800030001"], 0x40}}, 0x20000000) 6m27.680401811s ago: executing program 2 (id=6256): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 6m23.381745245s ago: executing program 2 (id=6298): r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) r1 = inotify_init() fgetxattr(r1, &(0x7f00000003c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) socket$kcm(0x1e, 0x5, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) (async) inotify_init() (async) fgetxattr(r1, &(0x7f00000003c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) socket$kcm(0x1e, 0x4, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) (async) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) (async) 6m23.297364565s ago: executing program 38 (id=6298): r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) r1 = inotify_init() fgetxattr(r1, &(0x7f00000003c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) socket$kcm(0x1e, 0x5, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) (async) inotify_init() (async) fgetxattr(r1, &(0x7f00000003c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) socket$kcm(0x1e, 0x4, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) (async) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) (async) 2m54.846622044s ago: executing program 5 (id=9154): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x8, 0x1) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000002000000e27f00000300000012"], 0x50) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00004e4000/0x4000)=nil, 0x4000, &(0x7f0000000440)='%ps \x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r1, 0x0, 0x0}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000340)="6d612218ef7c770ddf7d93a163674b376d4bb749cd2d0626ad0073e1e7432928577383d5407f57e10f83e9a5449c2d272ee1aed197bb42e59ad3a71ebd325f4323218421c2e702ffa960cee26f743f128492e70775c0c9959c9fb71122b55c8fc8d5ccd3da0a9c71b7a4b8766a7fc0be076d7d8dd42b336598c2c18ded3efbe85c585707784f937fd9e6098cb2a310832b89cdbf47f8bdbf08461d061e036f7a06695246f509b92ffd39c029c055098a2e1e13e4a4ece529e4f49841f04184587fabdc0dfb9293b1d846c70f41b5c61617cc74f2712b02bb1faf6410e22b9faaca2b899147185c2601b0e38c32bd", 0xee, 0x24004010, &(0x7f00000002c0)={0xa, 0x4e24, 0x3, @mcast1, 0x3}, 0x1c) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000700)={0x0, 0x816d, 0x0, 0x5, 0x2ef}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, 0x0, 0x1, 0x40, 0x1}) r6 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0xe827, 0x80, 0x1, 0x3c2}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_enter(r3, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786f", 0x27}, {0x0}], 0x2}, 0x24004010) syz_emit_ethernet(0x56, &(0x7f00000022c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086d56084000000202c00fe800000000000000000000000bbfe8000000000000000000000000000aa7302000000000000c910ff0200000000000000000000000000010000000000000000"], 0x0) 2m53.793481969s ago: executing program 5 (id=9165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140"], 0xf4}}, 0x10) (fail_nth: 3) 2m53.456587273s ago: executing program 5 (id=9168): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="400002000000000000007000fedbdf250a7f7100", @ANYRES32=0x0, @ANYBLOB="140002002001000000000000000000000000000014000100ff020000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x24004060}, 0x4000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16, @ANYBLOB="050000040000000f0000000800", @ANYRES32, @ANYBLOB="47000e00800000000802110000000802"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x8d0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) mq_open(&(0x7f0000000500)='\xb2\x9e\x8a\x81c\ab7\x86\xc6\xbeY.\xe7\x85\xf8Q\x8a\x8a\xd1?J\x8f\xdc\r\xbe\xb8\xf1:7\x05\a\x11\x7f\xc6\xea*\x12\x86g\xf4Z;i\xc0\x13\x1f\x7f\xef\xa8D\xdf\xc6b\xe7\xf9\x8f\x1d\x1c\xaa\xe2<\x97\x90(\xf6\xa0\xe2\xd7\xecru\x93\fD\x91q\xd8\"\xd20\x96\xff\xc3&\xc5_t\xf4^{\x9d~\xed\xb8Tl7\x12LP\xd2\x8f', 0x42, 0x80, 0x0) 2m53.443969584s ago: executing program 5 (id=9171): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa000000000000711008000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) r3 = gettid() r4 = dup(r0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000000c0)) kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, r0, &(0x7f0000000040)={r4, r2, 0x5}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={'rose0\x00', {0x2, 0x4e22, @loopback}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='syz0\x00') syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000108004a80003c0000000000069078ac141400ac1e0001070308440c0500000000050000003a440400000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8000000000000500"], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@abort}, {@noload}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") creat(0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r5 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000044000)=0x0) timer_settime(r6, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x8]}, 0x8}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$xdp(0x2c, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1008006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x180000a, 0x810, r7, 0x19390000) 2m53.176051679s ago: executing program 5 (id=9174): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x8) 2m52.968845915s ago: executing program 5 (id=9177): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x3, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x3, @local, 0x3aa7}, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000640), r1, 0x2}}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @auto="c19e91c204bff48d"}}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e) 2m52.930870551s ago: executing program 39 (id=9177): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x3, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x3, @local, 0x3aa7}, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000640), r1, 0x2}}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @auto="c19e91c204bff48d"}}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e) 2m2.098502982s ago: executing program 9 (id=9932): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2006, 0x0, 0x0, 0x7fff7ffc}]}) r0 = io_uring_setup(0x3f1, &(0x7f0000000140)={0x0, 0x3, 0x3000}) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x100040, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x119310, 0x1, 0x1, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x14d640, 0x44) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) poll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x6) 2m2.032754491s ago: executing program 9 (id=9934): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, 0x0) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="588addb04cdce416", 0x8}], 0x1}}], 0x1, 0x0) 2m1.063268636s ago: executing program 9 (id=9944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) 2m0.844214454s ago: executing program 9 (id=9946): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000040)=ANY=[@ANYBLOB='errors&remount-ro,debug,uid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000001,dmask=00000000000000000000005,nodots,nodots,nodots,nodots,allow_utime=00000000000000000000020,allow_utime=00000000000000000000011,dots,nocase,nodots,\x00'], 0x1, 0x23d, &(0x7f0000000a40)="$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") r4 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) chdir(&(0x7f0000000100)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='&C'], 0x1c}, 0x1, 0x0, 0x0, 0x45a3c1901f775339}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r5, 0x80000001, 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0600"/22], 0x0, 0x1a, 0x0, 0x0, 0x8}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r6, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb7}, 0x94) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1}, 0x10) bind$tipc(r7, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000380)={'\x00', 0x4, 0x1}) 2m0.661000777s ago: executing program 9 (id=9950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYRES8], 0x38}}, 0x0) 2m0.285851796s ago: executing program 9 (id=9961): faccessat2(0xffffffffffffffff, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1, 0x300) 2m0.228745723s ago: executing program 40 (id=9961): faccessat2(0xffffffffffffffff, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1, 0x300) 1m53.131684608s ago: executing program 3 (id=10038): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r2 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r3 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x29}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "6075ae1e1ee721441705322225930e6c1e3e1000000000000000d7cf6e021a805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x25}, 0x88, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, r4, r4, 0x0) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x1) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000000)='logon\x00', &(0x7f0000000140)) 1m53.086070464s ago: executing program 3 (id=10039): r0 = socket$kcm(0x21, 0x2, 0x2) accept(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x8, [@enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x1000000, 0x2}]}]}, {0x0, [0x5f, 0x30, 0x5f, 0x2e, 0x30, 0x61]}}, 0x0, 0x34, 0x0, 0x1, 0x1}, 0x16) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x88, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2b}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x28a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000081}, 0x804) socket$nl_rdma(0x10, 0x3, 0x14) write(0xffffffffffffffff, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x41, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x14, 0x200, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, {0x10}, {0xb, 0xfff3}, {0x4, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m52.991894406s ago: executing program 3 (id=10040): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m52.924452505s ago: executing program 3 (id=10042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x0, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x4, 0x3, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0xfdab, 0xa, 0xaa}]}}]}, 0x78}}, 0x4000010) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@nouid32}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@delalloc}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {}]}, 0x1, 0x5d2, &(0x7f0000001a40)="$eJzs3U9oG9kZAPBvRlbsOE6dQgttySG0hRRC5D9J2rQn51oaCORQ6KU1smKCZStYchsbQ517KM2htCWX9NYeeiotPfRQeulxr3vZP+eFsDG7EOewq0XSyHYcOZFjW0qi3w9kvTdvPN/3RnrPM8MMDmBgnWv8SCO+HRE3kojxXW1DkTWea623tblefLa5XkyiXr/5aRJJRDzdXC+210+y91MRsRER34qI/+UjLqTbmzzRLlRX1xZmy+XSclafqC3emaiurl28vTg7X5ovLV360Y+vXL18ZWp6ane6z+q7a/mD9fX+hw9+d/+9nz568Le/n90o/mE2iZkYy9p292NHcrAAHSRZojN7ll8+9JbfLIffU/RDLhvnjaH0zRiPXDbqO6nvnhyGe5IecIzqwxH1bbuKwABIXjnoG8cInVvakwjwNmofBzTOf9uvXh5/PL7WOgFpxN3aXC/+Ntrxh1rXJmKkeW4y+lny3JlJ43zzTC8T5Z20cS8iJoeGXvz+J9n37/VNHkWCHKv/Xmt9UC9+/un2/BMd5p+x9rXTQ2rPf1vZ/LfVIX5un/nvRpcxvvjFx3/eN/694fhOx/jJdvykQ/w0In7VZfyHP//31f3a6n+JOB+d47clL78+PHHrdrk02frZMcZ/zp/9yf79jxjdJ37rmu1IM5Hd/T+R5ZR22f9//f+f3914SfwffO/ln3+n/X8yIn7fZfyvP/3rz/Zre3wvedI4Cjjo559EPh51Gf+HM+c+yIquGgIAAAAAAAAAwBFKm/eyJWlhu5ymhULrGd5vxGharlRrF25VVpbmWve8nYl82r7TarxVTxr1qex+3HZ9ek/9Ui4LmDvZrBeKlfJcn/sOAAAAAAAAAAAAAAAAAAAAb4pTe57//zzXfP5/JmL6dL9zA3pg/3/5DbzrjH8YXM+P/6RveQC95+8/DKy68Q+Dy/iHwWX8w+Ay/mFwdRz/J3ufB9B7O+N/tPU20r9cgN5y/A8AAAAAAAAAAAAAAAAAAAAAAAAAAMfixvXrjVf92eZ6sVGfG1pdWaj8+uJcqbpQWFwpFoqV5TuF+UplvlwqFCuLr9peUqncmYyllbsTtVK1NlFdXfvlYmVlqf0/RUv5Y+8RAAAAAAAAAAAAAAAAAAAAvH3Gmq8kLUTkW/U0LRQiTkfEmSSSW7fLpcmI+FpEvJ/LDzfqU/1OGgAAAAAAAAAAAAAAAAAAAN4x1dW1hdlyubT8YiHNVunQdKDC0IG281HtMLFeWRg6yMoRsXG0aTS2eODfymc7sLlk5Mh3yz9OtzZ/PDv8TSvkDv19HpBCP2YjAAAAAAAAAAAAAAAAAAAYbDsP/Xb7G18eb0IAAAAAAAAAAAAAAAAAAAAwkNJPkohovM6Pf39sb+uJZCvXfI+I3zy8+ce7s7Xa8lRj+ZPt5bU/Zcun+5E/0K32OE0jojGOAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB3V1bWF2XK5tPyaheEu1ul3HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABex1cBAAD//5RxvZQ=") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r6 = syz_clone(0x6021100, &(0x7f0000000280)="95692f3bba851c7fe28b4f93fc2ec742b5cf9f0e9e441169", 0x18, &(0x7f00000003c0), &(0x7f0000000480), &(0x7f00000004c0)="3235c9f7ab812f6a364bc503e5471b8464ab246bc3cb24b54762c079176b38b5dd48b5b19d31e71f87f46a20c4acd7ba4ad384ea1aafc38728a32eda427b1d5a7a5584a8a9a19ddaf5013dae3826bedd9acdc0f58f4f5b53f693b5decfa68ff543c21d682505224ccf5c12e4521d604a5fbe90034c609006394b13a3b4dd7f503ca601e5fb2aca23aa9c002b6ff68cdf601f19a4bd1da32c10a7e2eefa87a929c3068337f293c950584fb2db3b1210101ca3") r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x8, 0xb, 0x1, 0x4, 0x0, 0x1ff, 0x60100, 0xa5374499c3bca696, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000240), 0x16}, 0x80, 0x10, 0x1, 0x4, 0x9, 0x8, 0x3, 0x0, 0x56, 0x0, 0x7ff}, r6, 0x10, r7, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/173, 0xad, 0x0, &(0x7f0000000700)=""/166, 0xa6}, &(0x7f00000005c0)=0x40) r8 = socket(0xa, 0x2400000001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x145402, 0x80) write$UHID_INPUT(r9, 0x0, 0x0) 1m52.584291178s ago: executing program 3 (id=10045): syz_emit_ethernet(0x46, &(0x7f0000000bc0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d0010000000000000ff02000000000000000000000000000100000000001d0000"], 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003fc0)=[{&(0x7f0000000140)=@in6={0xa, 0x4e23, 0x6, @loopback, 0x40000000}, 0x1c, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x20000004}], 0x1, 0x20000000) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x10000}, 0x8) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x4403, &(0x7f0000000280)={[{@nobh}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@debug}, {@norecovery}]}, 0x2, 0x484, &(0x7f0000000c00)="$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") 1m51.926089803s ago: executing program 3 (id=10056): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000000000c8000000c8"], 0x0, 0xe2, 0x0, 0x0, 0x8000}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x80) recvmsg$unix(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20000002) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x47f, &(0x7f00000004c0)="$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") ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') 1m51.908449266s ago: executing program 41 (id=10056): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000000000c8000000c8"], 0x0, 0xe2, 0x0, 0x0, 0x8000}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x80) recvmsg$unix(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20000002) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x47f, &(0x7f00000004c0)="$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") ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') 16.546216527s ago: executing program 7 (id=11866): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f"}, 0xd) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0xf0f0, 0x0, 0x10001, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbc7000fbdbdf2505000000180001"], 0x2c}, 0x1, 0x0, 0x0, 0x4cc44}, 0x4040140) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x401, 0x10000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x3c}}, 0x4) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000200)=0x5, 0x7fff) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000240), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000740), 0x4af, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)="fb372fc659ba6f0d06bf216e48a57b6bda4c51dd657fdc4a10ce0ba7c6c0131cbcc0f78e5215a014e35cf0a5726e008f796b3a3d8c664fdb6ad505654c58f7791abec0b2e33524900000040000000000eaf10a53eef2f84982ff2c668fac9b3792459c48ab8c0b30dd867832337e8f4eddbea2bf10e1853c17081027d86c88613e2d889a99ebcf26d396f1879082ed3385cf958b5f61759ca8b368f696a82951e115f65cde19020000000000", &(0x7f0000000240), 0x802, r4}, 0x38) 16.227903718s ago: executing program 7 (id=11871): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r0, 0x6, 0x9fd, 0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0xf256, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='freezer.self_freezing\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000400000004000000"], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x4, 0x4, 0x3c, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x10, 0x400, 0xf2}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000008e0000000400000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000002080), 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x1, 0x8, 0x8, 0x1, 0xfffffffffffffffc, 0x4}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 15.508406801s ago: executing program 7 (id=11881): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x200001, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r2, 0x40, 0x8, 0x1000f4) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000040)={0xd, r1, 0x0, {0xffffffffffff8001, 0x7}, 0x10}, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAW(r5, 0x5407, &(0x7f00000000c0)={0xd3b, 0x84, 0x5, 0x3ff, 0x3}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x27, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x9c}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x78}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @generic={0xa6, 0x8, 0x6, 0xfff9, 0x24000}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x1000, &(0x7f00000006c0)=""/4096, 0x40f00, 0x6b, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000400)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x2, 0x5, 0x2}, 0x10, 0x2d050, r1, 0x9, &(0x7f0000000480)=[r2, r1, 0x1, r3, r1], &(0x7f00000016c0)=[{0x2, 0x3, 0x10, 0xc}, {0x0, 0x4, 0xe, 0xa}, {0x4, 0x3, 0x3}, {0x4, 0x4, 0xf, 0xa}, {0x3, 0x3, 0x8, 0x3}, {0x2, 0x4, 0x0, 0x4}, {0x3, 0x4, 0x0, 0x1}, {0x4, 0x5, 0x8, 0x3}, {0x1, 0x2, 0xe, 0xa}], 0x10, 0xbd}, 0x94) 15.468051586s ago: executing program 7 (id=11882): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) (async, rerun: 32) ioprio_set$pid(0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xcb1d, 0x8, 0x8000001, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f00000001c0), 0x4003) (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x2b0, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r6, 0x2, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async, rerun: 32) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback={0xff00}, 0x80000006}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x18}}], 0x1, 0x0) (rerun: 32) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) r8 = getpgid(0x0) ptrace$pokeuser(0x6, r8, 0xb72, 0xefe) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xdf}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x44020}, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x509180, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) (async) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}], 0x1, 0x6) (async, rerun: 32) ptrace$setregs(0xd, r9, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 15.060151229s ago: executing program 7 (id=11886): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 14.942639414s ago: executing program 7 (id=11887): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) socket(0x2, 0x80805, 0x0) 14.885245831s ago: executing program 42 (id=11887): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) socket(0x2, 0x80805, 0x0) 4.980082868s ago: executing program 8 (id=12008): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000300000000000004000000080002000500000006000b00"], 0x24}}, 0x0) 4.898171709s ago: executing program 8 (id=12010): capset(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) (fail_nth: 3) 4.847879585s ago: executing program 8 (id=12013): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090040000000000000000200000009000200737901000000000008000440080000000900010073797a300000000008000340000000011400"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 4.437858928s ago: executing program 8 (id=12019): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 4.26309487s ago: executing program 8 (id=12025): r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x0, 0x1}, 0x10) 4.194562539s ago: executing program 8 (id=12027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0xc010) 3.408082211s ago: executing program 1 (id=12036): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800}, 0xe) 3.245091221s ago: executing program 1 (id=12037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000004000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c0001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.148295044s ago: executing program 1 (id=12039): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 3.039405768s ago: executing program 1 (id=12040): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa2000000000000"], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.841872444s ago: executing program 1 (id=12043): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x0, 0x2dd}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x35a0}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xfff, 0x0, 0x0, 0x6}}, @TCA_CT_ZONE={0x6, 0x4, 0x5}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) write$ppp(0xffffffffffffffff, &(0x7f0000000580)="0c68056fa265ed199514e076761c358e61194936f89093232d2da474177993f36e3ad7bdf68a8cf91240b190b7f24339942d78742aaffb8ecd6b65c90981fca0f3aae539c9b21bbd16bc3041782e8f965bfb83c4ec0e84df6c3a586ab6f0635e651436fb3026d7c07511d5eeaa3864e543bfe60e3969efd7cf02f806a185a9173a6ae307bfabb4358978551ddae725f75c03ad15eb9595fd74937d726a8569ed4581f962d1d0494620d19b02e07b9d8821b621315608ed72bbad65cff3bb489af77271ff25d93a578a0c5c627399224029f5fa98b4", 0xd5) 2.689087384s ago: executing program 1 (id=12045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x1, 0x3a, '\\xaP\x00\xe2\x03\x82f\xc0I\x8cf\xaa\v`?7JM\x9f\xfdv\xd4!M ts\xb1\x11\xde\x10\xa28\xcc\xcfp\xfa0\x9e\x0e\xbev\b\x12R', 0x3a, ':\x94\x8cero', 0x3a, '.'}, 0x56) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file2\x00', 0x1c1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) mknod$loop(&(0x7f00000000c0)='./file2/file0\x00', 0x4e6992a2cd44b419, 0x0) splice(r2, 0x0, r3, 0x0, 0x80000000000f36, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_gettime(r4, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xf4}}, 0x10) fallocate(r0, 0x0, 0x81, 0x7fffffffffffffff) 2.126162656s ago: executing program 6 (id=12055): r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51a, &(0x7f0000000600)="$eJzs3c9vG1kdAPDv2EnJZrOku+yBXQkasYdFqhLn12oDt8ANsRKie1kkVEWtNyl14ihxpCan9F9AiAsSKhInLqnEiVuvwIVjkThw4FSpQqVIwKEYzXgmdRK7TUWa2XY+H2k67/lNPfP1y9d+M+PxBFBZU+k/ScRERPwxIiZ71aMLTPVmBwt319IpiW73yt+TbLk7C3fXikWL//dmXhmLiO/Uk/hecnK927t7N1dareZWXm901jcb27t70zfWV1abq82Nhfn5xaXFpY8/mjuzWP/1t71L7/5j+Zc///2vr/z4/qPfpZs1kbf1x3FWpmIqf01G4+2+x0ci4rtnvbKS1PN43up7LBkpcYN4IWn/fSUiPsjyfzLqofOgKrqZoc2PusBrq5aNgZPaTET0yrXazExvDP9ujNda7e3O5c/bOxvXe2PlizFa+/xGqzmb7ytcjNEkrc9l5af1+WP1hYhsDPyz+htZfeZau3X9XN/pgOPePJb//6z38h+oCLv8UF3yH6pL/kN1yX+oLvkP1SX/obrkP1SX/Ifqkv9QXfIfqkv+QyX94JNP0ql7kF//vtFevXFzbfNb87Mz6zvXZq61tzZnVtvt1eyKnfXnP1+r3d6cW4idW41Oc7vT2N7du7re3tnoXM2u67/aHD2HmIDTefvSvT8nEbH/7TeyKXUhb5Or8HrrdpMo+xpkoBz1st+AgNI49AfVZR8fGPATvUeMDWtonf22AOejVvYGAKX58D3n/6CqHP+H6nL8H6rLGB9w/B+qx/F/qK6JIff/eqvv3l2zEfHliLhfH/1Sca8v4NV3eB9uBQUFhcNC2e9MwMv2NOnL3hKgLHcW7q4VU9nbcp4eLve+BJHGfZBPvZaR/NjoWHaOdPxxcuS7EskZfXdiKiLuLf/pYjpF3g9n8LSntn87Ir46qP+T/H7vvTM/44/rJ+J/J58nvafIXq+R7L7xpzd1rP4qxf9eX/xf74v//RdYf9nxA1BN99Lxz+ygz79a9pkeh59/R8c/E2f03bGyP/+K8d/BifFf7XD8Vx8y/rt0ynX8d/Lgs2Ftafz7X/vLZDGl60/n/1dQL+Dh7Yj3B8ZfxDuWxXo8/tqAvhvmwfIvfjqsrT/+dAx83vF3fxXxYQyOv5CWGp31zcb27t509jumq82Nhfn5xaXFpY8/mmtk50gbxZnSk374k99eGbb+L0L/jw+J/3l//9845TomfvTX3wxrK/Z/hvd/7cGF5NOsVFyXdmul09mai7iQfP/k4/PP3pZimeI50vi/+cHg/H8nj7/39z9yIv5uPk9fp8v5tTRp+Un+3pguP51u39pnz8z/Yv+viL/YFzwPafzXn9P/g/I/few/p1zHv+//oTmsrez4AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMq2vbt3c6XVam69xELZMQKDjT8ejU/76klEdPN5LSIuR0Q9Lz+JiNG8Ph0RY+ly+xGzx8oAAAAAAEC5/hcAAP//YMH52g==") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0200000001000000000000000800030000000000100000000000000020"], 0x24, 0x0) dup3(r1, r0, 0x0) bind$bt_hci(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x2007}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x20000018}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000", 0x36}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000240)={0x1, 0x0, 0x80000001, 0x3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 1.854086141s ago: executing program 4 (id=12058): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 1.821354765s ago: executing program 0 (id=12059): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 1.768669792s ago: executing program 4 (id=12060): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 1.767145872s ago: executing program 0 (id=12061): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x10003}, 0x0, 0x32, 0x43a1bd7b, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@data_writeback}, {@norecovery}, {@dioread_lock}, {@resgid}, {@noinit_itable}, {@block_validity}, {@user_xattr}, {@jqfmt_vfsv0}]}, 0x21, 0x5fb, &(0x7f0000001440)="$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") 1.766604672s ago: executing program 4 (id=12062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (fail_nth: 3) 1.70371743s ago: executing program 4 (id=12063): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa2000000000000"], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.631038419s ago: executing program 4 (id=12064): lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)=ANY=[@ANYBLOB="00fbe00201f534322417252cbbcb19097b194ac70e6c7892a8dfd876fb68cd6365b562e402d309d86688839d7e85664962a4054e0059c66410b172d7f0a995f489f9590d36ada2c8b3a96fb1483d150c647c9359c01da619818aa44c4f4a6d25205bdfc61d1ea90b052f25d131cf3e5af9000ed22a30ca60861377cebac5972c793b032263399484268b8d6d4a315a028953a261cfe1a00ce08868ebb331ee939326dd6e74fae3166d5ff812c6e8c76a1f135b2fbb0500ae5c0f99b47cef9d6a6f8b382936f2060f4550e4a4945c94f6263a167ffbc4"], 0xe0, 0x3) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xe) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x7, &(0x7f000082a000/0x400000)=nil) (async) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x7, &(0x7f000082a000/0x400000)=nil) r1 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000600)={[{@usrquota}, {@resuid}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) lgetxattr(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) stat(&(0x7f00000054c0)='./file0\x00', &(0x7f0000005500)) (async) stat(&(0x7f00000054c0)='./file0\x00', &(0x7f0000005500)) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=@known='system.posix_acl_default\x00', &(0x7f0000000d00)=""/4096, 0x1000) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r1, 0x6bf89000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000040)=@newqdisc={0x64, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffe0, 0xffff}, {0x4}}}, 0x64}, 0x1, 0x0, 0x0, 0x401c4}, 0x8840) r5 = socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10, 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0)={'#! ', './file0', [{}, {0x20, '&#%^.'}], 0xa, "8d5f7d7ac24a47c16fe73787bc461fd5dcae1e934c5c8ce8eb11c0868e88162d2a2c1e20ed2709daf90d160e3f5745d9480543d80ebb5592f4705db9a9ef18f3388ce8ce9b05f9b3a651ffcbc9c37996b718ff1fea3a12f06653c088832b807294eb768bc59a8c3d9663f4f39265604b1575b3e380fc5afe350db67d7712db4881fdb33d1b6c1084daded612779ce8e674f6cba1fa3618e9b4a15081aa7105db9b69c8f6d06f79163c858117ef82a3282434b527a3ae6e02d93fb75b0225"}, 0xd0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) openat(r1, &(0x7f0000000340)='./file0\x00', 0x682080, 0x40) socket$inet6(0xa, 0x40000080806, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.604423643s ago: executing program 0 (id=12065): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x0, 0x2dd}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x35a0}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xfff, 0x0, 0x0, 0x6}}, @TCA_CT_ZONE={0x6, 0x4, 0x5}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) write$ppp(0xffffffffffffffff, &(0x7f0000000580)="0c68056fa265ed199514e076761c358e61194936f89093232d2da474177993f36e3ad7bdf68a8cf91240b190b7f24339942d78742aaffb8ecd6b65c90981fca0f3aae539c9b21bbd16bc3041782e8f965bfb83c4ec0e84df6c3a586ab6f0635e651436fb3026d7c07511d5eeaa3864e543bfe60e3969efd7cf02f806a185a9173a6ae307bfabb4358978551ddae725f75c03ad15eb9595fd74937d726a8569ed4581f962d1d0494620d19b02e07b9d8821b621315608ed72bbad65cff3bb489af77271ff25d93a578a0c5c627399224029f5fa98b4", 0xd5) 1.55220202s ago: executing program 0 (id=12066): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@remote, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa8fe50a5563b249e784feeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4006, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.203915415s ago: executing program 6 (id=12067): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) 1.038294736s ago: executing program 6 (id=12068): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0552060000c9000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0d02023100000500"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000fdff2dbd70f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="0008000023020000280012800b00010062726964676500001800028006000900000000000a0014000180c200"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) 988.648422ms ago: executing program 4 (id=12069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 909.754293ms ago: executing program 6 (id=12070): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0xc0000) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000200)) ioctl$GIO_UNIMAP(r2, 0x4b66, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x11c00, 0x2}, 0x0, 0xfffffffffffffffe, 0x9, 0x3, 0x2, 0x8004, 0x7fff}, 0x0, 0xffeffffffffffffe, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 874.093507ms ago: executing program 0 (id=12071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x205, 0x70bd2c, 0x25dfdbf9, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x205, 0x70bd2c, 0x25dfdbf9, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) (async) 620.46237ms ago: executing program 0 (id=12072): r0 = socket$inet(0x2, 0x3, 0x5) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000380)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) r3 = socket(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f00000001c0)={0x0, 0xfffffffffffffe0f, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r6, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc0c1) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)={0x38, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r10}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="f1c2348fb4010000000000000046758b"]}]}, 0x38}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x4e21, 0x8000, 0x4e22, 0x1ff, 0x8, 0x20, 0x80, 0x4, r4, r10}, {0xa5, 0xf, 0xb, 0x5, 0x6, 0x3, 0xffffffff, 0x3}, {0x446d, 0x4, 0x8, 0x7f}, 0x25, 0x6e6bc0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, 0x4d6, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3502, 0x1, 0x1, 0x3, 0x2, 0x3, 0x401}}, 0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@private2, 0x0}, &(0x7f0000000180)=0x14) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x8, @vifc_lcl_ifindex=r11, @empty}, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r12 = syz_open_dev$evdev(&(0x7f0000000000), 0xb, 0x40000) ioctl$EVIOCSKEYCODE(r12, 0x40084504, &(0x7f0000000040)=[0x1, 0xffff0001]) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000200007800500030017d400000c0001800800014000000000080006400000000405000500020000000500010006"], 0x6c}}, 0x40000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1000}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4602920000f401"], 0x78) 71.55559ms ago: executing program 6 (id=12073): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa2000000000000"], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 6 (id=12074): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000c000000000000000200000d0000000005000000010000000100000004000000008261d200306100302ed978eae3561801c3ef56ad803000"], &(0x7f0000000180)=""/91, 0x40, 0x5b, 0x0, 0x1}, 0x28) r0 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') lsm_get_self_attr(0x2, 0x0, &(0x7f0000000080), 0x0) readlinkat(r1, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000440)=""/171, 0xab) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000020000f0d67d00000000130400000000002e615f00"], &(0x7f0000000cc0)=""/8, 0x2a, 0x8, 0x1, 0x9}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x6, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYRES8=r5], &(0x7f0000000440)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = memfd_secret(0x80000) fcntl$setlease(r9, 0x400, 0x0) close(r9) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000000000001b000000180001801400020064756d6d793000"/38], 0x2c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800800101"], 0x48) fcntl$setsig(r4, 0xa, 0x1c) kernel console output (not intermixed with test programs): 272 (sector = 1) [ 677.625150][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11473'. [ 677.634538][ T7063] loop0: detected capacity change from 0 to 164 [ 677.640892][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11473'. [ 677.651296][ T7063] iso9660: Unknown parameter '' [ 677.716804][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11475'. [ 677.761446][ T7074] loop4: detected capacity change from 0 to 512 [ 677.789486][ T7074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.804472][ T7074] netlink: 'syz.4.11476': attribute type 4 has an invalid length. [ 677.821870][ T7074] netlink: 'syz.4.11476': attribute type 4 has an invalid length. [ 677.844810][ T7080] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 677.876290][T31687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.897989][ T7082] loop4: detected capacity change from 0 to 512 [ 677.917041][ T7082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.945983][ T7082] netlink: 'syz.4.11477': attribute type 4 has an invalid length. [ 677.975492][T31687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.012073][ T7092] SELinux: Context ÷ is not valid (left unmapped). [ 678.113204][ T7099] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 678.138156][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11485'. [ 678.158173][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11485'. [ 678.458876][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11492'. [ 678.548977][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11496'. [ 678.558825][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11496'. [ 678.580166][ T7131] loop0: detected capacity change from 0 to 128 [ 678.587316][ T7131] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 678.610967][ T7131] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 678.633633][ T7134] loop4: detected capacity change from 0 to 128 [ 678.641565][ T7131] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 678.643964][ T7138] syz_tun: left allmulticast mode [ 678.658077][ T7138] syz_tun: left promiscuous mode [ 678.663374][ T7138] bridge0: port 1(syz_tun) entered disabled state [ 678.671227][ T7134] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 678.684519][ T7134] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 678.699790][ T7134] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 678.714564][ T7138] bond0: (slave bridge0): Releasing backup interface [ 678.743689][ T7138] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 678.919417][ T7155] SELinux: security_context_str_to_sid () failed with errno=-22 [ 678.967121][ T7168] siw: device registration error -23 [ 679.012914][ T7171] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 679.035955][ T7171] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 679.048619][ T7171] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 679.095566][ T7176] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11515: bg 0: block 248: padding at end of block bitmap is not set [ 679.110573][ T7176] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.11515: Failed to acquire dquot type 1 [ 679.128158][ T7176] EXT4-fs (loop4): 1 truncate cleaned up [ 679.134539][ T7176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.148319][ T7176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.226636][ T7189] ext3: Unknown parameter 'g+V·(ÖÓ!]ÿþ]‰¯Y›Ô”Ù!Ñû-¹›jº©xô±ÔÅSå©2nÕPÁ?Óg¨™¡ç’4)GÅ1+’M' [ 679.231028][ T7191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7191 comm=syz.4.11518 [ 679.323898][ T7196] SELinux: security_context_str_to_sid () failed with errno=-22 [ 679.433998][ T7209] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 679.447616][ T7209] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 679.467004][ T7209] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 679.716322][ T7224] 9p: Bad value for 'trans' [ 679.745104][ T7226] netem: incorrect ge model size [ 679.750134][ T7226] netem: change failed [ 679.846456][ T7237] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 679.970994][ T7234] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 679.978458][ T7234] EXT4-fs (loop4): mount failed [ 680.196835][ T7258] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 680.215310][ T7256] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 680.228878][ T7256] EXT4-fs (loop0): mount failed [ 680.253191][ T29] kauditd_printk_skb: 698 callbacks suppressed [ 680.253209][ T29] audit: type=1326 audit(1453.516:22964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 680.305147][ T29] audit: type=1326 audit(1453.558:22965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 680.328362][ T29] audit: type=1326 audit(1453.558:22966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 680.351623][ T29] audit: type=1326 audit(1453.558:22967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 680.374871][ T29] audit: type=1326 audit(1453.558:22968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 680.398085][ T29] audit: type=1326 audit(1453.558:22969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 680.421194][ T29] audit: type=1326 audit(1453.558:22970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 680.444432][ T29] audit: type=1326 audit(1453.568:22971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 680.467490][ T29] audit: type=1326 audit(1453.568:22972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 680.490820][ T29] audit: type=1326 audit(1453.568:22973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 680.544688][ T7272] __nla_validate_parse: 10 callbacks suppressed [ 680.544718][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11550'. [ 680.561774][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11550'. [ 680.596646][ T7274] FAULT_INJECTION: forcing a failure. [ 680.596646][ T7274] name failslab, interval 1, probability 0, space 0, times 0 [ 680.609451][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.4.11551 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 680.609494][ T7274] Tainted: [W]=WARN [ 680.609503][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 680.609517][ T7274] Call Trace: [ 680.609524][ T7274] [ 680.609532][ T7274] __dump_stack+0x1d/0x30 [ 680.609556][ T7274] dump_stack_lvl+0x95/0xd0 [ 680.609608][ T7274] dump_stack+0x15/0x1b [ 680.609702][ T7274] should_fail_ex+0x263/0x280 [ 680.609735][ T7274] should_failslab+0x8c/0xb0 [ 680.609812][ T7274] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 680.609856][ T7274] ? alloc_vmap_area+0x243/0xe50 [ 680.609880][ T7274] alloc_vmap_area+0x243/0xe50 [ 680.609905][ T7274] ? should_fail_ex+0xd9/0x280 [ 680.609978][ T7274] ? __kmalloc_cache_node_noprof+0x2a2/0x4a0 [ 680.610014][ T7274] __get_vm_area_node+0x173/0x1d0 [ 680.610045][ T7274] __vmalloc_node_range_noprof+0x291/0x12b0 [ 680.610114][ T7274] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 680.610236][ T7274] ? __rcu_read_unlock+0x4e/0x70 [ 680.610257][ T7274] ? avc_has_perm_noaudit+0xab/0x130 [ 680.610301][ T7274] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 680.610380][ T7274] __vmalloc_noprof+0xa4/0xf0 [ 680.610470][ T7274] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 680.610512][ T7274] bpf_prog_alloc_no_stats+0x47/0x380 [ 680.610558][ T7274] ? bpf_prog_alloc+0x2a/0x150 [ 680.610595][ T7274] bpf_prog_alloc+0x3c/0x150 [ 680.610678][ T7274] bpf_prog_load+0x506/0x1140 [ 680.610721][ T7274] ? security_bpf+0x2b/0x90 [ 680.610832][ T7274] __sys_bpf+0x469/0x7b0 [ 680.610930][ T7274] __x64_sys_bpf+0x41/0x50 [ 680.610963][ T7274] x64_sys_call+0x28e1/0x3000 [ 680.610993][ T7274] do_syscall_64+0xc0/0x2a0 [ 680.611022][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.611076][ T7274] RIP: 0033:0x7f5912fdacb9 [ 680.611092][ T7274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.611136][ T7274] RSP: 002b:00007f5911a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 680.611162][ T7274] RAX: ffffffffffffffda RBX: 00007f5913255fa0 RCX: 00007f5912fdacb9 [ 680.611179][ T7274] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 680.611195][ T7274] RBP: 00007f5911a37090 R08: 0000000000000000 R09: 0000000000000000 [ 680.611209][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.611223][ T7274] R13: 00007f5913256038 R14: 00007f5913255fa0 R15: 00007ffe23816458 [ 680.611246][ T7274] [ 680.611256][ T7274] syz.4.11551: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 680.734347][ T3304] udevd[3304]: symlink '../../loop7' '/dev/disk/by-diskseq/2168.tmp-b7:7' failed: Read-only file system [ 680.735485][ T7274] ,cpuset=/,mems_allowed=0 [ 680.889501][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.4.11551 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 680.889541][ T7274] Tainted: [W]=WARN [ 680.889551][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 680.889566][ T7274] Call Trace: [ 680.889622][ T7274] [ 680.889633][ T7274] __dump_stack+0x1d/0x30 [ 680.889719][ T7274] dump_stack_lvl+0x95/0xd0 [ 680.889778][ T7274] dump_stack+0x15/0x1b [ 680.889798][ T7274] warn_alloc+0x145/0x1c0 [ 680.889836][ T7274] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 680.889925][ T7274] ? __rcu_read_unlock+0x4e/0x70 [ 680.889951][ T7274] ? avc_has_perm_noaudit+0xab/0x130 [ 680.889985][ T7274] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 680.890026][ T7274] __vmalloc_noprof+0xa4/0xf0 [ 680.890128][ T7274] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 680.890172][ T7274] bpf_prog_alloc_no_stats+0x47/0x380 [ 680.890226][ T7274] ? bpf_prog_alloc+0x2a/0x150 [ 680.890270][ T7274] bpf_prog_alloc+0x3c/0x150 [ 680.890317][ T7274] bpf_prog_load+0x506/0x1140 [ 680.890386][ T7274] ? security_bpf+0x2b/0x90 [ 680.890461][ T7274] __sys_bpf+0x469/0x7b0 [ 680.890495][ T7274] __x64_sys_bpf+0x41/0x50 [ 680.890532][ T7274] x64_sys_call+0x28e1/0x3000 [ 680.890590][ T7274] do_syscall_64+0xc0/0x2a0 [ 680.890617][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.890639][ T7274] RIP: 0033:0x7f5912fdacb9 [ 680.890656][ T7274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.890690][ T7274] RSP: 002b:00007f5911a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 680.890714][ T7274] RAX: ffffffffffffffda RBX: 00007f5913255fa0 RCX: 00007f5912fdacb9 [ 680.890732][ T7274] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 680.890749][ T7274] RBP: 00007f5911a37090 R08: 0000000000000000 R09: 0000000000000000 [ 680.890761][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.890816][ T7274] R13: 00007f5913256038 R14: 00007f5913255fa0 R15: 00007ffe23816458 [ 680.890920][ T7274] [ 680.890961][ T7274] Mem-Info: [ 681.099509][ T7274] active_anon:35473 inactive_anon:126 isolated_anon:0 [ 681.099509][ T7274] active_file:14678 inactive_file:13378 isolated_file:0 [ 681.099509][ T7274] unevictable:16440 dirty:335 writeback:0 [ 681.099509][ T7274] slab_reclaimable:4042 slab_unreclaimable:128500 [ 681.099509][ T7274] mapped:30306 shmem:18931 pagetables:2035 [ 681.099509][ T7274] sec_pagetables:0 bounce:0 [ 681.099509][ T7274] kernel_misc_reclaimable:0 [ 681.099509][ T7274] free:1714613 free_pcp:9886 free_cma:0 [ 681.145499][ T7274] Node 0 active_anon:141892kB inactive_anon:504kB active_file:58712kB inactive_file:53512kB unevictable:65760kB isolated(anon):0kB isolated(file):0kB mapped:121224kB dirty:1340kB writeback:0kB shmem:75724kB kernel_stack:4928kB pagetables:8140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 681.173907][ T7274] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 681.203677][ T7274] lowmem_reserve[]: 0 2879 7858 7858 [ 681.209244][ T7274] Node 0 DMA32 free:2945360kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948988kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 681.240752][ T7274] lowmem_reserve[]: 0 0 4978 4978 [ 681.246059][ T7274] Node 0 Normal free:3897732kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:141776kB inactive_anon:504kB active_file:58712kB inactive_file:53512kB unevictable:65760kB writepending:1340kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:35748kB local_pcp:23392kB free_cma:0kB [ 681.279907][ T7274] lowmem_reserve[]: 0 0 0 0 [ 681.284667][ T7274] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 681.297533][ T7274] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945360kB [ 681.313789][ T7274] Node 0 Normal: 690*4kB (UME) 1256*8kB (UM) 852*16kB (UME) 656*32kB (UME) 1111*64kB (UME) 747*128kB (UM) 553*256kB (UME) 424*512kB (UME) 377*1024kB (U) 253*2048kB (UE) 591*4096kB (UM) = 3897736kB [ 681.333374][ T7274] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 681.342824][ T7274] 63550 total pagecache pages [ 681.347521][ T7274] 178 pages in swap cache [ 681.352007][ T7274] Free swap = 124284kB [ 681.356190][ T7274] Total swap = 124996kB [ 681.360403][ T7274] 2097051 pages RAM [ 681.364222][ T7274] 0 pages HighMem/MovableOnly [ 681.368921][ T7274] 81404 pages reserved [ 681.371730][ T3304] udevd[3304]: symlink '../../loop7' '/dev/disk/by-diskseq/2168.tmp-b7:7' failed: Read-only file system [ 681.403954][ T3313] udevd[3313]: symlink '../../loop4' '/dev/disk/by-diskseq/2194.tmp-b7:4' failed: Read-only file system [ 681.439248][ T7286] set_capacity_and_notify: 7 callbacks suppressed [ 681.439279][ T7286] loop4: detected capacity change from 0 to 512 [ 681.455760][ T7286] EXT4-fs (loop4): orphan cleanup on readonly fs [ 681.463292][ T7286] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11556: bg 0: block 127: padding at end of block bitmap is not set [ 681.470789][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2197.tmp-b7:4' failed: Read-only file system [ 681.478652][ T7286] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.11556: corrupted inode contents [ 681.494080][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 681.513829][ T7289] loop7: detected capacity change from 0 to 128 [ 681.514675][ T7289] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 681.538349][ T3313] udevd[3313]: symlink '../../loop7' '/dev/disk/by-diskseq/2198.tmp-b7:7' failed: Read-only file system [ 681.543222][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2197.tmp-b7:4' failed: Read-only file system [ 681.560942][ T7289] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 681.570496][ T7286] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 681.570640][ T7289] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 681.590839][ T7286] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.11556: corrupted inode contents [ 681.604479][ T3313] udevd[3313]: symlink '../../loop7' '/dev/disk/by-diskseq/2198.tmp-b7:7' failed: Read-only file system [ 681.615947][ T7286] EXT4-fs error (device loop4): ext4_evict_inode:301: inode #15: comm syz.4.11556: mark_inode_dirty error [ 681.635338][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 681.647160][ T7286] EXT4-fs (loop4): 1 orphan inode deleted [ 681.653349][ T7286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 681.699061][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11559'. [ 681.718484][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11559'. [ 681.780448][ T3304] udevd[3304]: symlink '../../loop0' '/dev/disk/by-diskseq/2196.tmp-b7:0' failed: Read-only file system [ 681.816797][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11561'. [ 681.826670][ T7303] openvswitch: netlink: Missing key (keys=40, expected=80) [ 681.837620][T31687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.928905][ T7312] netlink: 172 bytes leftover after parsing attributes in process `syz.0.11566'. [ 681.946474][ T7317] FAULT_INJECTION: forcing a failure. [ 681.946474][ T7317] name failslab, interval 1, probability 0, space 0, times 0 [ 681.959264][ T7317] CPU: 1 UID: 0 PID: 7317 Comm: syz.4.11568 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 681.959334][ T7317] Tainted: [W]=WARN [ 681.959343][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 681.959359][ T7317] Call Trace: [ 681.959368][ T7317] [ 681.959378][ T7317] __dump_stack+0x1d/0x30 [ 681.959409][ T7317] dump_stack_lvl+0x95/0xd0 [ 681.959470][ T7317] dump_stack+0x15/0x1b [ 681.959535][ T7317] should_fail_ex+0x263/0x280 [ 681.959566][ T7317] should_failslab+0x8c/0xb0 [ 681.959594][ T7317] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 681.959637][ T7317] ? __alloc_skb+0x2f0/0x4b0 [ 681.959673][ T7317] __alloc_skb+0x2f0/0x4b0 [ 681.959704][ T7317] ? __alloc_skb+0x219/0x4b0 [ 681.959774][ T7317] netlink_alloc_large_skb+0xbf/0xf0 [ 681.959814][ T7317] netlink_sendmsg+0x40c/0x6f0 [ 681.959842][ T7317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.959874][ T7317] __sock_sendmsg+0x145/0x170 [ 681.959960][ T7317] ____sys_sendmsg+0x31e/0x4a0 [ 681.960004][ T7317] ___sys_sendmsg+0x195/0x1e0 [ 681.960193][ T7317] __x64_sys_sendmsg+0xd4/0x160 [ 681.960237][ T7317] x64_sys_call+0x17ba/0x3000 [ 681.960269][ T7317] do_syscall_64+0xc0/0x2a0 [ 681.960295][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.960351][ T7317] RIP: 0033:0x7f5912fdacb9 [ 681.960372][ T7317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.960391][ T7317] RSP: 002b:00007f5911a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.960414][ T7317] RAX: ffffffffffffffda RBX: 00007f5913255fa0 RCX: 00007f5912fdacb9 [ 681.960432][ T7317] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000004 [ 681.960497][ T7317] RBP: 00007f5911a37090 R08: 0000000000000000 R09: 0000000000000000 [ 681.960513][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.960551][ T7317] R13: 00007f5913256038 R14: 00007f5913255fa0 R15: 00007ffe23816458 [ 681.960577][ T7317] [ 682.201284][ T7318] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 682.308284][ T7333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11573'. [ 682.450138][ T7327] loop7: detected capacity change from 0 to 512 [ 682.490317][ T7330] loop4: detected capacity change from 0 to 512 [ 682.559813][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11578'. [ 682.588446][ T7327] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 682.596347][ T7327] EXT4-fs (loop7): mount failed [ 682.678347][ T7348] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 682.754105][ T7330] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 682.769360][ T7361] loop0: detected capacity change from 0 to 512 [ 682.791280][ T7330] EXT4-fs (loop4): mount failed [ 682.864213][ T7361] netlink: 'syz.0.11583': attribute type 14 has an invalid length. [ 682.872884][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11583'. [ 682.903023][ T7367] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 682.952447][ T6900] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.970664][ T6900] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.988076][ T6900] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.997520][ T6900] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.047741][ T7382] nfs4: Unknown parameter '&%(' [ 683.117957][ T7390] loop4: detected capacity change from 0 to 1024 [ 683.140008][ T7390] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 683.158947][ T7390] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 683.170006][ T7390] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 683.217093][ T7390] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 683.255673][ T7390] EXT4-fs (loop4): invalid journal inode [ 683.274936][ T7390] EXT4-fs (loop4): can't get journal size [ 683.290552][ T7390] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.11590: blocks 2-2 from inode overlap system zone [ 683.313312][ T7390] EXT4-fs (loop4): failed to initialize system zone (-117) [ 683.321169][ T7390] EXT4-fs (loop4): mount failed [ 683.323268][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11595'. [ 683.383318][ T7413] loop0: detected capacity change from 0 to 512 [ 683.433053][ T7413] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 683.453380][ T7411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 683.457908][ T7413] EXT4-fs (loop0): mount failed [ 683.578101][ T7425] loop7: detected capacity change from 0 to 128 [ 683.589591][ T7425] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 683.603975][ T7425] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 683.616185][ T7425] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 683.815081][ T7440] openvswitch: netlink: Flow key attr not present in new flow. [ 684.023938][ T91] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.053509][ T91] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.077870][ T7448] loop7: detected capacity change from 0 to 1024 [ 684.085699][ T7448] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 684.096558][ T7331] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.106160][ T7331] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.115684][ T7448] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 684.127421][ T7448] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 684.149922][ T7448] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 684.175744][ T7448] EXT4-fs (loop7): invalid journal inode [ 684.181882][ T7448] EXT4-fs (loop7): can't get journal size [ 684.191260][ T7451] FAULT_INJECTION: forcing a failure. [ 684.191260][ T7451] name failslab, interval 1, probability 0, space 0, times 0 [ 684.204039][ T7451] CPU: 0 UID: 0 PID: 7451 Comm: syz.4.11612 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 684.204130][ T7451] Tainted: [W]=WARN [ 684.204139][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 684.204156][ T7451] Call Trace: [ 684.204166][ T7451] [ 684.204177][ T7451] __dump_stack+0x1d/0x30 [ 684.204209][ T7451] dump_stack_lvl+0x95/0xd0 [ 684.204236][ T7451] dump_stack+0x15/0x1b [ 684.204336][ T7451] should_fail_ex+0x263/0x280 [ 684.204415][ T7451] should_failslab+0x8c/0xb0 [ 684.204437][ T7451] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 684.204462][ T7451] ? __alloc_skb+0x2f0/0x4b0 [ 684.204556][ T7451] __alloc_skb+0x2f0/0x4b0 [ 684.204582][ T7451] ? __alloc_skb+0x219/0x4b0 [ 684.204686][ T7451] netlink_alloc_large_skb+0xbf/0xf0 [ 684.204737][ T7451] netlink_sendmsg+0x40c/0x6f0 [ 684.204760][ T7451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.204794][ T7451] __sock_sendmsg+0x145/0x170 [ 684.204818][ T7451] ____sys_sendmsg+0x345/0x4a0 [ 684.204853][ T7451] ___sys_sendmsg+0x195/0x1e0 [ 684.204974][ T7451] __sys_sendmmsg+0x185/0x320 [ 684.205018][ T7451] __x64_sys_sendmmsg+0x57/0x70 [ 684.205076][ T7451] x64_sys_call+0x1e28/0x3000 [ 684.205102][ T7451] do_syscall_64+0xc0/0x2a0 [ 684.205126][ T7451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.205205][ T7451] RIP: 0033:0x7f5912fdacb9 [ 684.205222][ T7451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.205241][ T7451] RSP: 002b:00007f5911a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 684.205284][ T7451] RAX: ffffffffffffffda RBX: 00007f5913255fa0 RCX: 00007f5912fdacb9 [ 684.205298][ T7451] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 684.205312][ T7451] RBP: 00007f5911a37090 R08: 0000000000000000 R09: 0000000000000000 [ 684.205331][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.205344][ T7451] R13: 00007f5913256038 R14: 00007f5913255fa0 R15: 00007ffe23816458 [ 684.205385][ T7451] [ 684.206097][ T7448] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.11611: blocks 2-2 from inode overlap system zone [ 684.516956][ T7472] loop4: detected capacity change from 0 to 128 [ 684.532426][ T7448] EXT4-fs (loop7): failed to initialize system zone (-117) [ 684.540669][ T7472] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 684.563787][ T7448] EXT4-fs (loop7): mount failed [ 684.581231][ T7472] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 684.616523][ T7472] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 684.682340][ T7462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 685.156538][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 685.156556][ T29] audit: type=1326 audit(1458.660:23283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.11631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 685.156987][ T7502] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 685.162854][ T29] audit: type=1326 audit(1458.660:23284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.11631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 685.162884][ T29] audit: type=1326 audit(1458.660:23285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.11631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 685.162919][ T29] audit: type=1326 audit(1458.660:23286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.11631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 685.162945][ T29] audit: type=1326 audit(1458.660:23287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.11631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 685.162970][ T29] audit: type=1326 audit(1458.660:23288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.11631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 685.315288][ T29] audit: type=1326 audit(1458.660:23289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.11631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 685.338422][ T29] audit: type=1326 audit(1458.660:23290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.11631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 685.362404][ T29] audit: type=1326 audit(1458.660:23291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.11631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 685.385565][ T29] audit: type=1326 audit(1458.660:23292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.11631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc863d5aa22 code=0x7ffc0000 [ 685.452728][ T7505] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 685.463145][ T7505] EXT4-fs (loop7): mount failed [ 685.502695][ T3304] udevd[3304]: symlink '../../loop7' '/dev/disk/by-diskseq/2218.tmp-b7:7' failed: Read-only file system [ 685.515167][ T7510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=7510 comm=syz.8.11633 [ 685.540508][ T3304] udevd[3304]: symlink '../../loop0' '/dev/disk/by-diskseq/2210.tmp-b7:0' failed: Read-only file system [ 685.618667][ T7529] __nla_validate_parse: 10 callbacks suppressed [ 685.618689][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11639'. [ 685.651221][ T3313] udevd[3313]: symlink '../../loop4' '/dev/disk/by-diskseq/2216.tmp-b7:4' failed: Read-only file system [ 685.652772][ T3304] udevd[3304]: symlink '../../loop7' '/dev/disk/by-diskseq/2218.tmp-b7:7' failed: Read-only file system [ 685.666532][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11639'. [ 685.702862][ T7535] netlink: 40 bytes leftover after parsing attributes in process `syz.8.11641'. [ 685.723817][ T7535] netlink: 228 bytes leftover after parsing attributes in process `syz.8.11641'. [ 685.740483][ T7537] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 685.771230][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2216.tmp-b7:4' failed: Read-only file system [ 685.831783][ T3313] udevd[3313]: symlink '../../loop7' '/dev/disk/by-diskseq/2219.tmp-b7:7' failed: Read-only file system [ 685.879690][ T3313] udevd[3313]: symlink '../../loop7' '/dev/disk/by-label/SYZKALLER.tmp-b7:7' failed: Read-only file system [ 685.896456][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11644'. [ 685.924835][ T3313] udevd[3313]: symlink '../../loop7' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:7' failed: Read-only file system [ 686.021791][ T7554] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 686.059903][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2220.tmp-b7:4' failed: Read-only file system [ 686.088384][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 686.108888][ T7540] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 686.116964][ T7540] EXT4-fs (loop4): mount failed [ 686.293889][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11648'. [ 686.848521][ T7574] set_capacity_and_notify: 3 callbacks suppressed [ 686.848586][ T7574] loop4: detected capacity change from 0 to 1024 [ 686.864976][ T7574] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 686.881078][ T7574] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 686.892115][ T7574] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 686.955627][ T7574] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 686.966820][ T7574] EXT4-fs (loop4): invalid journal inode [ 686.973241][ T7574] EXT4-fs (loop4): can't get journal size [ 686.979528][ T7574] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.11653: blocks 2-2 from inode overlap system zone [ 686.994260][ T7574] EXT4-fs (loop4): failed to initialize system zone (-117) [ 687.003460][ T7574] EXT4-fs (loop4): mount failed [ 687.446458][ T7598] FAULT_INJECTION: forcing a failure. [ 687.446458][ T7598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.460392][ T7598] CPU: 0 UID: 0 PID: 7598 Comm: syz.4.11662 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 687.460432][ T7598] Tainted: [W]=WARN [ 687.460442][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 687.460458][ T7598] Call Trace: [ 687.460468][ T7598] [ 687.460478][ T7598] __dump_stack+0x1d/0x30 [ 687.460510][ T7598] dump_stack_lvl+0x95/0xd0 [ 687.460605][ T7598] dump_stack+0x15/0x1b [ 687.460710][ T7598] should_fail_ex+0x263/0x280 [ 687.460742][ T7598] should_fail+0xb/0x20 [ 687.460843][ T7598] should_fail_usercopy+0x1a/0x20 [ 687.460971][ T7598] copy_fpstate_to_sigframe+0x636/0x7d0 [ 687.460998][ T7598] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 687.461069][ T7598] ? x86_task_fpu+0x36/0x60 [ 687.461108][ T7598] get_sigframe+0x34c/0x470 [ 687.461131][ T7598] ? get_signal+0xdbe/0xf60 [ 687.461169][ T7598] x64_setup_rt_frame+0xa7/0x4e0 [ 687.461203][ T7598] arch_do_signal_or_restart+0x24b/0x450 [ 687.461241][ T7598] exit_to_user_mode_loop+0x6a/0x6f0 [ 687.461279][ T7598] do_syscall_64+0x1d3/0x2a0 [ 687.461456][ T7598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.461548][ T7598] RIP: 0033:0x7f5912f9b58e [ 687.461570][ T7598] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 687.461594][ T7598] RSP: 002b:00007f5911a36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 687.461615][ T7598] RAX: 0000000000000001 RBX: 00007f5911a376c0 RCX: 00007f5912f9b58e [ 687.461632][ T7598] RDX: 0000000000000001 RSI: 00007f5911a37090 RDI: 0000000000000004 [ 687.461693][ T7598] RBP: 00007f5911a37090 R08: 0000000000000000 R09: 0000000000000000 [ 687.461707][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.461726][ T7598] R13: 00007f5913256038 R14: 00007f5913255fa0 R15: 00007ffe23816458 [ 687.461752][ T7598] [ 687.694748][ T7593] FAULT_INJECTION: forcing a failure. [ 687.694748][ T7593] name fail_futex, interval 1, probability 0, space 0, times 1 [ 687.707648][ T7593] CPU: 1 UID: 0 PID: 7593 Comm: syz.0.11658 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 687.707710][ T7593] Tainted: [W]=WARN [ 687.707717][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 687.707729][ T7593] Call Trace: [ 687.707747][ T7593] [ 687.707758][ T7593] __dump_stack+0x1d/0x30 [ 687.707790][ T7593] dump_stack_lvl+0x95/0xd0 [ 687.707818][ T7593] dump_stack+0x15/0x1b [ 687.707844][ T7593] should_fail_ex+0x263/0x280 [ 687.707914][ T7593] should_fail+0xb/0x20 [ 687.707940][ T7593] get_futex_key+0x12f/0xbe0 [ 687.708003][ T7593] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 687.708042][ T7593] futex_lock_pi+0xfe/0x7e0 [ 687.708080][ T7593] ? _parse_integer_limit+0x170/0x190 [ 687.708187][ T7593] ? __pfx_futex_wake_mark+0x10/0x10 [ 687.708245][ T7593] do_futex+0x21f/0x380 [ 687.708283][ T7593] __se_sys_futex+0x2f6/0x370 [ 687.708348][ T7593] ? mutex_unlock+0x4e/0x90 [ 687.708434][ T7593] __x64_sys_futex+0x78/0x90 [ 687.708465][ T7593] x64_sys_call+0x2bc2/0x3000 [ 687.708499][ T7593] do_syscall_64+0xc0/0x2a0 [ 687.708528][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.708689][ T7593] RIP: 0033:0x7f1ed750acb9 [ 687.708710][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.708753][ T7593] RSP: 002b:00007f1ed5f46028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 687.708780][ T7593] RAX: ffffffffffffffda RBX: 00007f1ed7786090 RCX: 00007f1ed750acb9 [ 687.708799][ T7593] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 687.708816][ T7593] RBP: 00007f1ed5f46090 R08: 0000000000000000 R09: 00000000fffffffc [ 687.708833][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.708918][ T7593] R13: 00007f1ed7786128 R14: 00007f1ed7786090 R15: 00007ffeb6d4d5e8 [ 687.708946][ T7593] [ 688.076524][ T7632] SELinux: security_context_str_to_sid () failed with errno=-22 [ 688.126687][ T7634] loop4: detected capacity change from 0 to 128 [ 688.143236][ T7634] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 688.179813][ T7634] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 688.224582][ T7645] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11678'. [ 688.234411][ T7645] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11678'. [ 688.247251][ T7634] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 688.768296][ T7662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7662 comm=syz.1.11684 [ 688.898801][ T7676] loop0: detected capacity change from 0 to 512 [ 688.913972][ T7676] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 688.926869][ T7676] EXT4-fs (loop0): 1 orphan inode deleted [ 688.932759][ T7676] EXT4-fs (loop0): 1 truncate cleaned up [ 688.939039][ T7676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.026710][ T2291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.123770][ T7690] FAULT_INJECTION: forcing a failure. [ 689.123770][ T7690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.137180][ T7690] CPU: 0 UID: 0 PID: 7690 Comm: syz.4.11693 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 689.137295][ T7690] Tainted: [W]=WARN [ 689.137304][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 689.137390][ T7690] Call Trace: [ 689.137398][ T7690] [ 689.137408][ T7690] __dump_stack+0x1d/0x30 [ 689.137438][ T7690] dump_stack_lvl+0x95/0xd0 [ 689.137462][ T7690] dump_stack+0x15/0x1b [ 689.137486][ T7690] should_fail_ex+0x263/0x280 [ 689.137545][ T7690] should_fail+0xb/0x20 [ 689.137569][ T7690] should_fail_usercopy+0x1a/0x20 [ 689.137626][ T7690] _copy_to_user+0x20/0xa0 [ 689.137657][ T7690] simple_read_from_buffer+0xb5/0x130 [ 689.137758][ T7690] proc_fail_nth_read+0x10e/0x150 [ 689.137852][ T7690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 689.137886][ T7690] vfs_read+0x1ab/0x7f0 [ 689.137917][ T7690] ? __rcu_read_unlock+0x4e/0x70 [ 689.137936][ T7690] ? __fget_files+0x184/0x1c0 [ 689.137968][ T7690] ? mutex_lock+0x57/0x90 [ 689.138001][ T7690] ksys_read+0xdc/0x1a0 [ 689.138025][ T7690] __x64_sys_read+0x40/0x50 [ 689.138088][ T7690] x64_sys_call+0x2889/0x3000 [ 689.138125][ T7690] do_syscall_64+0xc0/0x2a0 [ 689.138148][ T7690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.138170][ T7690] RIP: 0033:0x7f5912f9b58e [ 689.138212][ T7690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 689.138231][ T7690] RSP: 002b:00007f5911a36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 689.138250][ T7690] RAX: ffffffffffffffda RBX: 00007f5911a376c0 RCX: 00007f5912f9b58e [ 689.138265][ T7690] RDX: 000000000000000f RSI: 00007f5911a370a0 RDI: 0000000000000004 [ 689.138318][ T7690] RBP: 00007f5911a37090 R08: 0000000000000000 R09: 0000000000000000 [ 689.138330][ T7690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.138343][ T7690] R13: 00007f5913256038 R14: 00007f5913255fa0 R15: 00007ffe23816458 [ 689.138362][ T7690] [ 689.474952][ T7703] netlink: 'syz.1.11698': attribute type 2 has an invalid length. [ 689.482940][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11698'. [ 689.493672][ T7703] netlink: 'syz.1.11698': attribute type 2 has an invalid length. [ 689.501625][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11698'. [ 689.573682][ T7693] loop4: detected capacity change from 0 to 512 [ 689.647639][ T7693] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 689.654939][ T7693] EXT4-fs (loop4): mount failed [ 689.725844][ T7722] loop7: detected capacity change from 0 to 1024 [ 689.746205][ T7722] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 689.756128][ T7722] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 689.767219][ T7722] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 689.779637][ T7722] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 689.790882][ T7722] EXT4-fs (loop7): invalid journal inode [ 689.801270][ T7725] bridge_slave_0: left allmulticast mode [ 689.806965][ T7725] bridge_slave_0: left promiscuous mode [ 689.813459][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.820940][ T7722] EXT4-fs (loop7): can't get journal size [ 689.827274][ T7722] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.11703: blocks 2-2 from inode overlap system zone [ 689.852633][ T7725] bridge_slave_1: left allmulticast mode [ 689.858493][ T7725] bridge_slave_1: left promiscuous mode [ 689.864265][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.876558][ T7722] EXT4-fs (loop7): failed to initialize system zone (-117) [ 689.883801][ T7722] EXT4-fs (loop7): mount failed [ 689.890859][ T7725] bond0: (slave bond_slave_0): Releasing backup interface [ 689.899462][ T7725] bond0: (slave bond_slave_1): Releasing backup interface [ 689.909958][ T7725] team0: Port device team_slave_0 removed [ 689.916656][ T7725] team0: Port device team_slave_1 removed [ 689.922695][ T7725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.930801][ T7725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.946006][ T7725] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 690.084624][ T7732] loop4: detected capacity change from 0 to 128 [ 690.333040][ T3304] udevd[3304]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 690.349532][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2233.tmp-b7:4' failed: Read-only file system [ 690.366389][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2233.tmp-b7:4' failed: Read-only file system [ 690.382454][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2234.tmp-b7:4' failed: Read-only file system [ 690.396478][ T7749] __nla_validate_parse: 5 callbacks suppressed [ 690.396497][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11712'. [ 690.415476][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2234.tmp-b7:4' failed: Read-only file system [ 690.435374][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11712'. [ 690.455571][ T3313] udevd[3313]: symlink '../../loop7' '/dev/disk/by-diskseq/2232.tmp-b7:7' failed: Read-only file system [ 690.474211][ T7753] loop7: detected capacity change from 0 to 1024 [ 690.516958][ T7753] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 690.532078][ T3304] udevd[3304]: symlink '../../loop7' '/dev/disk/by-diskseq/2235.tmp-b7:7' failed: Read-only file system [ 690.546052][ T3304] udevd[3304]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 690.559022][ T3304] udevd[3304]: symlink '../../loop7' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:7' failed: Read-only file system [ 690.591706][ T3304] udevd[3304]: symlink '../../loop7' '/dev/disk/by-diskseq/2235.tmp-b7:7' failed: Read-only file system [ 690.604925][ T2778] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 690.645706][ T7762] loop0: detected capacity change from 0 to 1024 [ 690.669940][ T7762] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 690.688857][ T7762] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 690.699851][ T7762] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 690.724814][ T7762] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 690.735708][ T7762] EXT4-fs (loop0): invalid journal inode [ 690.741499][ T7762] EXT4-fs (loop0): can't get journal size [ 690.748730][ T7762] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.11718: blocks 2-2 from inode overlap system zone [ 690.763759][ T7762] EXT4-fs (loop0): failed to initialize system zone (-117) [ 690.771394][ T7762] EXT4-fs (loop0): mount failed [ 690.882799][ T7772] SELinux: security_context_str_to_sid () failed with errno=-22 [ 691.013847][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11722'. [ 691.034714][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11722'. [ 691.084040][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11725'. [ 691.095435][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 691.095454][ T29] audit: type=1326 audit(1720.908:23497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.8.11724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe233d6acb9 code=0x0 [ 691.113629][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11725'. [ 691.192161][ T7794] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11724'. [ 691.203934][ T29] audit: type=1326 audit(1721.013:23498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.7.11728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15f76acb9 code=0x7ffc0000 [ 691.233577][ T7791] loop7: detected capacity change from 0 to 128 [ 691.248854][ T7797] loop0: detected capacity change from 0 to 512 [ 691.264068][ T7791] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 691.291925][ T29] audit: type=1326 audit(1721.013:23499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.7.11728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc15f76acb9 code=0x7ffc0000 [ 691.294062][ T7797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.315217][ T29] audit: type=1326 audit(1721.013:23500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.7.11728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15f76acb9 code=0x7ffc0000 [ 691.315255][ T29] audit: type=1326 audit(1721.013:23501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.7.11728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15f76acb9 code=0x7ffc0000 [ 691.315290][ T29] audit: type=1326 audit(1721.013:23502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.7.11728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc15f76acb9 code=0x7ffc0000 [ 691.315345][ T29] audit: type=1326 audit(1721.045:23503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.7.11728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15f76acb9 code=0x7ffc0000 [ 691.315379][ T29] audit: type=1326 audit(1721.045:23504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.7.11728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15f76acb9 code=0x7ffc0000 [ 691.315492][ T29] audit: type=1326 audit(1721.045:23505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.7.11728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc15f76acb9 code=0x7ffc0000 [ 691.315525][ T29] audit: type=1326 audit(1721.045:23506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.7.11728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15f76acb9 code=0x7ffc0000 [ 691.403459][ T7791] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 691.492161][ T7804] netlink: 'syz.0.11730': attribute type 4 has an invalid length. [ 691.516998][ T7791] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 691.530610][ T7802] FAULT_INJECTION: forcing a failure. [ 691.530610][ T7802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.543760][ T7802] CPU: 1 UID: 0 PID: 7802 Comm: syz.4.11731 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 691.543887][ T7802] Tainted: [W]=WARN [ 691.543895][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 691.543908][ T7802] Call Trace: [ 691.543915][ T7802] [ 691.543922][ T7802] __dump_stack+0x1d/0x30 [ 691.543985][ T7802] dump_stack_lvl+0x95/0xd0 [ 691.544008][ T7802] dump_stack+0x15/0x1b [ 691.544028][ T7802] should_fail_ex+0x263/0x280 [ 691.544121][ T7802] should_fail+0xb/0x20 [ 691.544142][ T7802] should_fail_usercopy+0x1a/0x20 [ 691.544177][ T7802] _copy_from_iter+0xcf/0xea0 [ 691.544204][ T7802] ? should_fail_ex+0xd9/0x280 [ 691.544291][ T7802] ? should_failslab+0x8c/0xb0 [ 691.544313][ T7802] ? __kmalloc_noprof+0x2a3/0x580 [ 691.544335][ T7802] ? kernfs_fop_write_iter+0xe2/0x300 [ 691.544392][ T7802] kernfs_fop_write_iter+0x125/0x300 [ 691.544427][ T7802] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 691.544459][ T7802] vfs_write+0x5a6/0x9f0 [ 691.544559][ T7802] ksys_write+0xdc/0x1a0 [ 691.544636][ T7802] __x64_sys_write+0x40/0x50 [ 691.544655][ T7802] x64_sys_call+0x2847/0x3000 [ 691.544683][ T7802] do_syscall_64+0xc0/0x2a0 [ 691.544783][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.544805][ T7802] RIP: 0033:0x7f5912fdacb9 [ 691.544825][ T7802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.544844][ T7802] RSP: 002b:00007f5911a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 691.544867][ T7802] RAX: ffffffffffffffda RBX: 00007f5913256090 RCX: 00007f5912fdacb9 [ 691.544882][ T7802] RDX: 0000000000000008 RSI: 00002000000001c0 RDI: 0000000000000008 [ 691.544895][ T7802] RBP: 00007f5911a16090 R08: 0000000000000000 R09: 0000000000000000 [ 691.544908][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.544934][ T7802] R13: 00007f5913256128 R14: 00007f5913256090 R15: 00007ffe23816458 [ 691.544955][ T7802] [ 691.812272][ T7812] netlink: 'syz.1.11734': attribute type 39 has an invalid length. [ 692.005070][ T7833] loop7: detected capacity change from 0 to 128 [ 692.031119][ T7833] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11742'. [ 692.040388][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11742'. [ 692.100964][ T2291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.111780][ T7842] SELinux: security_context_str_to_sid () failed with errno=-22 [ 692.373445][ T7858] loop7: detected capacity change from 0 to 1024 [ 692.387843][ T7858] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 692.411382][ T7858] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 692.422396][ T7858] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 692.443363][ T7858] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 692.475831][ T7858] EXT4-fs (loop7): invalid journal inode [ 692.482585][ T7858] EXT4-fs (loop7): can't get journal size [ 692.495182][ T7858] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.11751: blocks 2-2 from inode overlap system zone [ 692.511338][ T7858] EXT4-fs (loop7): failed to initialize system zone (-117) [ 692.518762][ T7858] EXT4-fs (loop7): mount failed [ 692.527251][ T7866] loop0: detected capacity change from 0 to 764 [ 692.534770][ T7866] iso9660: Unknown parameter 'noco¬Ëxi7ÊÑNode' [ 692.568888][ T7866] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=261 sclass=netlink_tcpdiag_socket pid=7866 comm=syz.0.11754 [ 692.642429][ T7879] loop7: detected capacity change from 0 to 512 [ 692.662843][ T7879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.680145][ T7866] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=7866 comm=syz.0.11754 [ 692.762114][ T7890] loop0: detected capacity change from 0 to 128 [ 692.774097][ T7892] netlink: 'syz.7.11758': attribute type 4 has an invalid length. [ 692.777705][ T7890] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 692.797012][ T7890] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 692.810866][ T7890] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 692.977695][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11768'. [ 693.134479][ T7908] openvswitch: netlink: Missing key (keys=40, expected=80) [ 693.365166][ T7937] loop0: detected capacity change from 0 to 8192 [ 693.464355][ T2778] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.494951][ T7939] loop4: detected capacity change from 0 to 128 [ 693.505237][ T7939] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 693.518359][ T7939] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 693.531968][ T7939] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 693.591348][ T7944] ip6_vti0 speed is unknown, defaulting to 1000 [ 693.637956][ T7944] vcan0 speed is unknown, defaulting to 1000 [ 693.695803][ T7947] loop4: detected capacity change from 0 to 1024 [ 693.702720][ T7947] EXT4-fs: Ignoring removed nobh option [ 693.708491][ T7947] EXT4-fs: Ignoring removed bh option [ 693.731952][ T7947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.882813][T31687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.913268][ T7963] netlink: 'syz.7.11788': attribute type 10 has an invalid length. [ 693.940668][ T7967] loop0: detected capacity change from 0 to 512 [ 693.949700][ T7967] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.11789: inode has both inline data and extents flags [ 693.954140][ T7963] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 693.980910][ T7967] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.11789: couldn't read orphan inode 15 (err -117) [ 694.068534][ T7967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.126969][ T7978] 9p: Bad value for 'rfdno' [ 694.223330][ T7988] loop4: detected capacity change from 0 to 1024 [ 694.252884][ T7988] EXT4-fs: Ignoring removed nobh option [ 694.258539][ T7988] EXT4-fs: Ignoring removed bh option [ 694.274757][ T7988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.288936][ T2291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.362348][T31687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.389446][ T8002] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 694.419768][ T8002] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 695.149367][ T3313] udevd[3313]: symlink '../../loop7' '/dev/disk/by-diskseq/2253.tmp-b7:7' failed: Read-only file system [ 695.188894][ T3304] udevd[3304]: symlink '../../loop7' '/dev/disk/by-diskseq/2253.tmp-b7:7' failed: Read-only file system [ 695.301329][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2263.tmp-b7:4' failed: Read-only file system [ 695.343610][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2263.tmp-b7:4' failed: Read-only file system [ 695.356275][ T8071] __nla_validate_parse: 16 callbacks suppressed [ 695.356295][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11829'. [ 695.373629][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11829'. [ 695.407974][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2263.tmp-b7:4' failed: Read-only file system [ 695.428769][ T3313] udevd[3313]: symlink '../../loop7' '/dev/disk/by-diskseq/2253.tmp-b7:7' failed: Read-only file system [ 695.456829][ T3304] udevd[3304]: symlink '../../loop0' '/dev/disk/by-diskseq/2264.tmp-b7:0' failed: Read-only file system [ 695.517165][ T3304] udevd[3304]: symlink '../../loop0' '/dev/disk/by-diskseq/2264.tmp-b7:0' failed: Read-only file system [ 695.548554][ T3313] udevd[3313]: symlink '../../loop4' '/dev/disk/by-diskseq/2263.tmp-b7:4' failed: Read-only file system [ 695.875292][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11838'. [ 695.901682][ T3304] udevd[3304]: symlink '../../loop7' '/dev/disk/by-diskseq/2253.tmp-b7:7' failed: Read-only file system [ 695.910494][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 695.910538][ T29] audit: type=1326 audit(2749.951:23771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.1.11835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 695.983180][ T8101] FAULT_INJECTION: forcing a failure. [ 695.983180][ T8101] name failslab, interval 1, probability 0, space 0, times 0 [ 695.996011][ T8101] CPU: 1 UID: 0 PID: 8101 Comm: syz.7.11839 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 695.996065][ T8101] Tainted: [W]=WARN [ 695.996075][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 695.996130][ T8101] Call Trace: [ 695.996139][ T8101] [ 695.996150][ T8101] __dump_stack+0x1d/0x30 [ 695.996182][ T8101] dump_stack_lvl+0x95/0xd0 [ 695.996210][ T8101] dump_stack+0x15/0x1b [ 695.996294][ T8101] should_fail_ex+0x263/0x280 [ 695.996326][ T8101] should_failslab+0x8c/0xb0 [ 695.996355][ T8101] kmem_cache_alloc_noprof+0x68/0x490 [ 695.996384][ T8101] ? alloc_empty_file+0x76/0x200 [ 695.996417][ T8101] alloc_empty_file+0x76/0x200 [ 695.996523][ T8101] path_openat+0x62/0x23c0 [ 695.996560][ T8101] ? __rcu_read_unlock+0x4e/0x70 [ 695.996666][ T8101] ? path_openat+0x1d94/0x23c0 [ 695.996708][ T8101] ? path_openat+0x1e8e/0x23c0 [ 695.996818][ T8101] ? _parse_integer_limit+0x170/0x190 [ 695.996849][ T8101] do_filp_open+0x15d/0x280 [ 695.996926][ T8101] do_open_execat+0xec/0x280 [ 695.996967][ T8101] alloc_bprm+0x25/0x350 [ 695.997062][ T8101] do_execveat_common+0x120/0x740 [ 695.997107][ T8101] ? getname_flags+0x153/0x3b0 [ 695.997140][ T8101] __x64_sys_execveat+0x73/0x90 [ 695.997190][ T8101] x64_sys_call+0x1c0e/0x3000 [ 695.997222][ T8101] do_syscall_64+0xc0/0x2a0 [ 695.997258][ T8101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.997332][ T8101] RIP: 0033:0x7fc15f76acb9 [ 695.997409][ T8101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.997447][ T8101] RSP: 002b:00007fc15e1c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 695.997473][ T8101] RAX: ffffffffffffffda RBX: 00007fc15f9e5fa0 RCX: 00007fc15f76acb9 [ 695.997491][ T8101] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 695.997508][ T8101] RBP: 00007fc15e1c7090 R08: 0000000000001000 R09: 0000000000000000 [ 695.997525][ T8101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.997541][ T8101] R13: 00007fc15f9e6038 R14: 00007fc15f9e5fa0 R15: 00007ffdc2c3d008 [ 695.997567][ T8101] [ 696.216297][ T29] audit: type=1326 audit(2750.003:23772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.1.11835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc863d5acb9 code=0x7ffc0000 [ 696.353295][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11843'. [ 696.363569][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11843'. [ 696.437927][ T29] audit: type=1326 audit(2750.507:23773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 696.464902][ T29] audit: type=1326 audit(2750.507:23774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 696.488751][ T29] audit: type=1326 audit(2750.539:23775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 696.511980][ T29] audit: type=1326 audit(2750.539:23776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 696.535741][ T29] audit: type=1326 audit(2750.539:23777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 696.594215][ T8122] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11850'. [ 696.650967][ T8122] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11850'. [ 696.712092][ T29] audit: type=1326 audit(2750.560:23778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 696.736079][ T29] audit: type=1326 audit(2750.560:23779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 696.759171][ T29] audit: type=1326 audit(2750.560:23780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.0.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 696.955683][ T8125] ip6_vti0 speed is unknown, defaulting to 1000 [ 697.059554][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11856'. [ 697.110781][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11856'. [ 697.241865][ T8156] set_capacity_and_notify: 1 callbacks suppressed [ 697.241902][ T8156] loop0: detected capacity change from 0 to 1024 [ 697.256031][ T8156] EXT4-fs: Ignoring removed nobh option [ 697.261733][ T8156] EXT4-fs: Ignoring removed bh option [ 697.306289][ T8156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.329029][ T91] bond0 (unregistering): Released all slaves [ 697.337278][ T91] bond1 (unregistering): Released all slaves [ 697.361820][ T91] bond2 (unregistering): Released all slaves [ 697.371823][ T8125] vcan0 speed is unknown, defaulting to 1000 [ 697.412973][ T8160] loop4: detected capacity change from 0 to 1024 [ 697.420230][ T8160] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 697.441557][ T2291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.453332][ T91] tipc: Disabling bearer [ 697.458787][ T91] tipc: Left network mode [ 697.472387][ T8160] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 697.483612][ T8160] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 697.503717][ T91] IPVS: stopping master sync thread 4666 ... [ 697.544295][ T8160] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 697.593150][ T8160] EXT4-fs (loop4): invalid journal inode [ 697.598926][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11863'. [ 697.627020][ T8160] EXT4-fs (loop4): can't get journal size [ 697.669812][ T8160] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.11858: blocks 2-2 from inode overlap system zone [ 697.699726][ T8160] EXT4-fs (loop4): failed to initialize system zone (-117) [ 697.708232][ T8160] EXT4-fs (loop4): mount failed [ 697.843694][ T91] hsr_slave_0: left promiscuous mode [ 697.886995][ T91] hsr_slave_1: left promiscuous mode [ 698.002378][ T8211] loop7: detected capacity change from 0 to 8192 [ 698.052409][ T8125] chnl_net:caif_netlink_parms(): no params data found [ 698.085078][ T8214] ip6_vti0 speed is unknown, defaulting to 1000 [ 698.181124][ T8214] vcan0 speed is unknown, defaulting to 1000 [ 698.276569][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.277863][ T91] IPVS: stop unused estimator thread 0... [ 698.283790][ T8125] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.342651][ T8125] bridge_slave_0: entered allmulticast mode [ 698.358965][ T8125] bridge_slave_0: entered promiscuous mode [ 698.377127][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.384335][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.400434][ T8125] bridge_slave_1: entered allmulticast mode [ 698.415564][ T8125] bridge_slave_1: entered promiscuous mode [ 698.465066][ T8125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.475852][ T8125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.513213][ T8125] team0: Port device team_slave_0 added [ 698.524226][ T8125] team0: Port device team_slave_1 added [ 698.542447][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.549534][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.575634][ T8125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.605299][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.612362][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.638782][ T8125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.740128][ T8260] 9p: Bad value for 'wfdno' [ 698.778734][ T8125] hsr_slave_0: entered promiscuous mode [ 698.814545][ T8267] loop7: detected capacity change from 0 to 256 [ 698.821846][ T8125] hsr_slave_1: entered promiscuous mode [ 698.853667][ T8125] debugfs: 'hsr0' already exists in 'hsr' [ 698.859518][ T8125] Cannot create hsr debugfs directory [ 698.876495][ T8262] dvmrp1: entered allmulticast mode [ 698.894902][ T8268] dvmrp1: left allmulticast mode [ 698.967386][ T8263] ip6_vti0 speed is unknown, defaulting to 1000 [ 699.101593][ T8263] vcan0 speed is unknown, defaulting to 1000 [ 699.128983][ T2778] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 699.136736][ T2778] FAT-fs (loop7): Filesystem has been set read-only [ 699.155155][ T8291] ip6_vti0 speed is unknown, defaulting to 1000 [ 699.164636][ T2778] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 699.239012][ T8291] vcan0 speed is unknown, defaulting to 1000 [ 699.329636][ T91] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.415819][ T91] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.448606][ T8125] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 699.475313][ T8125] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 699.518060][ T91] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.538631][ T8125] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 699.564130][ T8322] 9pnet_fd: Insufficient options for proto=fd [ 699.575237][ T8125] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 699.586848][ T8322] loop4: detected capacity change from 0 to 2048 [ 699.595978][ T91] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.649582][ T3304] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 699.654859][ T3304] loop4: partition table partially beyond EOD, truncated [ 699.675921][ T3304] loop4: p1 start 4278190080 is beyond EOD, truncated [ 699.705852][ T3304] loop4: p3 start 4284289 is beyond EOD, truncated [ 699.727787][ T3304] loop4: p5 start 4278190080 is beyond EOD, truncated [ 699.747266][ T8322] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 699.752517][ T8322] loop4: partition table partially beyond EOD, truncated [ 699.766988][ T8322] loop4: p1 start 4278190080 is beyond EOD, truncated [ 699.776860][ T8322] loop4: p3 start 4284289 is beyond EOD, truncated [ 699.801859][T30810] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 699.826075][ T8322] loop4: p5 start 4278190080 is beyond EOD, truncated [ 699.834588][T30810] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 699.845032][ T91] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 699.874625][ T3008] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 699.879971][ T3008] loop4: partition table partially beyond EOD, truncated [ 699.887563][ T3008] loop4: p1 start 4278190080 is beyond EOD, truncated [ 699.898925][ T91] bond0 (unregistering): Released all slaves [ 699.908288][ T3008] loop4: p3 start 4284289 is beyond EOD, truncated [ 699.912244][ T91] bond1 (unregistering): Released all slaves [ 699.916276][ T3008] loop4: p5 start 4278190080 is beyond EOD, truncated [ 699.930007][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 699.932410][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 699.968021][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2272.tmp-b7:4' failed: Read-only file system [ 699.983120][T13463] udevd[13463]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 699.996433][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 700.008620][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 700.024891][ T8350] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 700.025098][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2272.tmp-b7:4' failed: Read-only file system [ 700.056454][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 700.067279][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 700.079337][ T8355] bond2 (unregistering): Released all slaves [ 700.080275][T13463] udevd[13463]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 700.103282][ T8125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.140861][ T8125] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.173251][ T8309] ip6_vti0 speed is unknown, defaulting to 1000 [ 700.181887][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.189095][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.199798][ T8369] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 700.212938][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.220061][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.256943][ T8125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 700.268087][ T8125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 700.315157][ T91] hsr_slave_0: left promiscuous mode [ 700.347722][ T91] hsr_slave_1: left promiscuous mode [ 700.362650][ T91] pimreg (unregistering): left allmulticast mode [ 700.403473][ T3485] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 700.415809][ T3485] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 700.536343][ T8309] vcan0 speed is unknown, defaulting to 1000 [ 700.625911][ T8417] netlink: 'syz.0.11905': attribute type 10 has an invalid length. [ 700.633957][ T8417] __nla_validate_parse: 6 callbacks suppressed [ 700.634031][ T8417] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11905'. [ 700.671560][ T8125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.758632][ T91] IPVS: stop unused estimator thread 0... [ 700.791640][ T8309] chnl_net:caif_netlink_parms(): no params data found [ 700.880668][ T8125] veth0_vlan: entered promiscuous mode [ 700.896931][ T8309] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.904164][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.912700][ T8309] bridge_slave_0: entered allmulticast mode [ 700.920578][ T8309] bridge_slave_0: entered promiscuous mode [ 700.928490][ T8309] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.936272][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.943841][ T8309] bridge_slave_1: entered allmulticast mode [ 700.950790][ T8309] bridge_slave_1: entered promiscuous mode [ 700.996706][ T8125] veth1_vlan: entered promiscuous mode [ 701.005581][ T8309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.022652][ T8309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.059920][ T8309] team0: Port device team_slave_0 added [ 701.070488][ T8125] veth0_macvtap: entered promiscuous mode [ 701.084467][ T8309] team0: Port device team_slave_1 added [ 701.092182][ T8125] veth1_macvtap: entered promiscuous mode [ 701.124940][ T8309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.132689][ T8309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.159450][ T8309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.171020][ T8309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.178113][ T8309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.204155][ T8309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.228302][ T8125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.248482][ T8309] hsr_slave_0: entered promiscuous mode [ 701.254858][ T8309] hsr_slave_1: entered promiscuous mode [ 701.261127][ T8309] debugfs: 'hsr0' already exists in 'hsr' [ 701.266911][ T8309] Cannot create hsr debugfs directory [ 701.279650][ T8125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.294531][ T417] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.317056][ T417] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.342146][ T417] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.362208][ T8459] FAULT_INJECTION: forcing a failure. [ 701.362208][ T8459] name failslab, interval 1, probability 0, space 0, times 0 [ 701.375713][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.4.11912 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 701.375747][ T8459] Tainted: [W]=WARN [ 701.375756][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 701.375796][ T8459] Call Trace: [ 701.375804][ T8459] [ 701.375814][ T8459] __dump_stack+0x1d/0x30 [ 701.375890][ T8459] dump_stack_lvl+0x95/0xd0 [ 701.375918][ T8459] dump_stack+0x15/0x1b [ 701.375938][ T8459] should_fail_ex+0x263/0x280 [ 701.376090][ T8459] should_failslab+0x8c/0xb0 [ 701.376119][ T8459] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 701.376144][ T8459] ? __alloc_skb+0x2f0/0x4b0 [ 701.376172][ T8459] __alloc_skb+0x2f0/0x4b0 [ 701.376209][ T8459] ? __alloc_skb+0x219/0x4b0 [ 701.376238][ T8459] netlink_alloc_large_skb+0xbf/0xf0 [ 701.376275][ T8459] netlink_sendmsg+0x40c/0x6f0 [ 701.376324][ T8459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.376344][ T8459] __sock_sendmsg+0x145/0x170 [ 701.376400][ T8459] ____sys_sendmsg+0x31e/0x4a0 [ 701.376445][ T8459] ___sys_sendmsg+0x195/0x1e0 [ 701.376496][ T8459] __x64_sys_sendmsg+0xd4/0x160 [ 701.376595][ T8459] x64_sys_call+0x17ba/0x3000 [ 701.376653][ T8459] do_syscall_64+0xc0/0x2a0 [ 701.376683][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.376712][ T8459] RIP: 0033:0x7f5912fdacb9 [ 701.376733][ T8459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.376824][ T8459] RSP: 002b:00007f5911a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.376860][ T8459] RAX: ffffffffffffffda RBX: 00007f5913255fa0 RCX: 00007f5912fdacb9 [ 701.376880][ T8459] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 701.376896][ T8459] RBP: 00007f5911a37090 R08: 0000000000000000 R09: 0000000000000000 [ 701.376909][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.376921][ T8459] R13: 00007f5913256038 R14: 00007f5913255fa0 R15: 00007ffe23816458 [ 701.377014][ T8459] [ 701.402324][ T417] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.605784][ T8462] loop4: detected capacity change from 0 to 128 [ 701.657326][ T8468] loop1: detected capacity change from 0 to 128 [ 701.685991][ T8468] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 701.736674][ T8468] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 701.833841][ T417] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 701.851852][ T8309] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 701.874717][ T8309] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 701.902359][ T8309] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 701.934510][ T8309] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 701.998364][ T8462] bio_check_eod: 942 callbacks suppressed [ 701.998383][ T8462] syz.4.11913: attempt to access beyond end of device [ 701.998383][ T8462] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 702.028047][ T8462] syz.4.11913: attempt to access beyond end of device [ 702.028047][ T8462] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 702.050296][ T8481] loop1: detected capacity change from 0 to 8192 [ 702.074293][ T8481] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 702.140735][ T8309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.165744][ T8462] syz.4.11913: attempt to access beyond end of device [ 702.165744][ T8462] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 702.179478][ T8462] syz.4.11913: attempt to access beyond end of device [ 702.179478][ T8462] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 702.193681][ T8462] syz.4.11913: attempt to access beyond end of device [ 702.193681][ T8462] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 702.207571][ T8462] syz.4.11913: attempt to access beyond end of device [ 702.207571][ T8462] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 702.247847][ T8309] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.270729][ T7522] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.277848][ T7522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.287963][ T8462] syz.4.11913: attempt to access beyond end of device [ 702.287963][ T8462] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 702.321541][ T8462] syz.4.11913: attempt to access beyond end of device [ 702.321541][ T8462] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 702.344552][ T8462] syz.4.11913: attempt to access beyond end of device [ 702.344552][ T8462] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 702.375863][ T8462] syz.4.11913: attempt to access beyond end of device [ 702.375863][ T8462] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 702.392163][ T9249] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.399293][ T9249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.543013][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11920'. [ 702.575331][ T8517] ip6_vti0 speed is unknown, defaulting to 1000 [ 702.588401][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 702.588419][ T29] audit: type=1400 audit(2756.964:23945): avc: denied { getopt } for pid=8508 comm="syz.4.11920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 702.592990][ T8309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.635240][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11921'. [ 702.734630][ T8517] vcan0 speed is unknown, defaulting to 1000 [ 703.013883][ T8309] veth0_vlan: entered promiscuous mode [ 703.056041][ T8309] veth1_vlan: entered promiscuous mode [ 703.060798][ T8565] netlink: 'syz.8.11922': attribute type 21 has an invalid length. [ 703.096439][ T8309] veth0_macvtap: entered promiscuous mode [ 703.113367][ T8309] veth1_macvtap: entered promiscuous mode [ 703.133959][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11922'. [ 703.184836][ T8309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.201513][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11922'. [ 703.220101][ T8309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.270377][ T7522] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.283132][ T8561] loop1: detected capacity change from 0 to 512 [ 703.305349][ T7522] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.326558][ T7522] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.395819][ T7522] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.439443][ T8561] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 703.450472][ T8561] EXT4-fs (loop1): mount failed [ 703.561294][ T29] audit: type=1326 audit(2757.982:23946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.0.11930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 703.585127][ T29] audit: type=1326 audit(2757.982:23947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.0.11930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 703.661607][ T29] audit: type=1326 audit(2758.034:23948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.0.11930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 703.685146][ T29] audit: type=1326 audit(2758.034:23949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.0.11930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 703.709169][ T29] audit: type=1326 audit(2758.034:23950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.0.11930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 703.732354][ T29] audit: type=1326 audit(2758.034:23951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.0.11930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 703.735955][ T8605] loop0: detected capacity change from 0 to 128 [ 703.788859][ T8609] loop6: detected capacity change from 0 to 128 [ 703.877381][ T29] audit: type=1326 audit(2758.244:23952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.0.11930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 703.900700][ T29] audit: type=1326 audit(2758.244:23953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.0.11930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 703.931437][ T8605] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 703.967779][ T8605] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 704.028460][ T8592] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 704.028880][ T29] audit: type=1326 audit(2758.475:23954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.0.11930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 704.041209][ T8617] dns_resolver: Unsupported server list version (0) [ 704.253782][ T8628] batadv_slave_0: entered promiscuous mode [ 704.277776][ T8628] netlink: 'syz.0.11935': attribute type 1 has an invalid length. [ 704.294075][ T8628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6770 sclass=netlink_route_socket pid=8628 comm=syz.0.11935 [ 704.328797][ T8643] loop1: detected capacity change from 0 to 512 [ 704.362181][ T8643] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 704.388407][ T8653] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11940'. [ 704.402454][ T8643] EXT4-fs (loop1): mount failed [ 704.424620][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11939'. [ 704.434194][ T8650] ip6_vti0 speed is unknown, defaulting to 1000 [ 704.496511][ T8650] vcan0 speed is unknown, defaulting to 1000 [ 704.547672][ T8669] bridge0: entered allmulticast mode [ 704.569417][ T8669] loop1: detected capacity change from 0 to 1024 [ 704.618963][ T8669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 704.633212][ T8675] ip6_vti0 speed is unknown, defaulting to 1000 [ 704.664150][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11944'. [ 704.730949][ T3304] udevd[3304]: symlink '../../loop0' '/dev/disk/by-diskseq/2285.tmp-b7:0' failed: Read-only file system [ 704.794296][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2279.tmp-b7:4' failed: Read-only file system [ 704.794637][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11942'. [ 704.816723][ T8690] pim6reg: entered allmulticast mode [ 704.827217][ T8675] vcan0 speed is unknown, defaulting to 1000 [ 704.867919][ T8698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.876165][ T8698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.890922][ T8699] loop4: detected capacity change from 0 to 8192 [ 704.899394][ T8698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.906880][ T8698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.949667][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2290.tmp-b7:4' failed: Read-only file system [ 704.975043][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:4' failed: Read-only file system [ 705.140291][ T3313] udevd[3313]: symlink '../../loop0' '/dev/disk/by-diskseq/2285.tmp-b7:0' failed: Read-only file system [ 705.149744][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2290.tmp-b7:4' failed: Read-only file system [ 705.247114][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:4' failed: Read-only file system [ 705.310380][ T8125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 705.323077][ T3313] udevd[3313]: symlink '../../loop0' '/dev/disk/by-diskseq/2285.tmp-b7:0' failed: Read-only file system [ 705.360557][ T3304] udevd[3304]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 705.381147][T13463] udevd[13463]: symlink '../../loop6' '/dev/disk/by-diskseq/2286.tmp-b7:6' failed: Read-only file system [ 705.433402][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11950'. [ 705.456485][ T8728] wireguard0: entered promiscuous mode [ 705.462099][ T8728] wireguard0: entered allmulticast mode [ 705.540652][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11955'. [ 705.615586][ T8749] loop1: detected capacity change from 0 to 1024 [ 705.618397][ T8730] loop6: detected capacity change from 0 to 512 [ 705.685531][ T8730] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 705.703250][ T8749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.737746][ T8730] EXT4-fs (loop6): mount failed [ 705.793073][ T8742] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 705.936744][ T8749] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11956'. [ 705.959315][ T8125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.283806][ T8808] loop1: detected capacity change from 0 to 1024 [ 706.300202][ T8808] EXT4-fs: Ignoring removed nobh option [ 706.305831][ T8808] EXT4-fs: Ignoring removed bh option [ 706.344014][ T8808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.386025][ T8811] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 706.404565][ T8125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.430886][ T8811] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 706.449202][ T8811] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 706.483312][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11968'. [ 706.638147][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11971'. [ 706.665457][ T8831] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 706.688995][ T8831] EXT4-fs (loop0): mount failed [ 706.886182][ T8850] bridge_slave_0: left allmulticast mode [ 706.892344][ T8850] bridge_slave_0: left promiscuous mode [ 706.898964][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.939960][ T8850] bridge_slave_1: left allmulticast mode [ 706.945807][ T8850] bridge_slave_1: left promiscuous mode [ 706.951867][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.009457][ T8844] bio_check_eod: 218 callbacks suppressed [ 707.009478][ T8844] syz.4.11972: attempt to access beyond end of device [ 707.009478][ T8844] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 707.029957][ T8844] syz.4.11972: attempt to access beyond end of device [ 707.029957][ T8844] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 707.044945][ T8850] bond0: (slave bond_slave_0): Releasing backup interface [ 707.055266][ T8844] syz.4.11972: attempt to access beyond end of device [ 707.055266][ T8844] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 707.069092][ T8844] syz.4.11972: attempt to access beyond end of device [ 707.069092][ T8844] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 707.088144][ T8850] bond0: (slave bond_slave_1): Releasing backup interface [ 707.111444][ T8827] syz.1.11970: attempt to access beyond end of device [ 707.111444][ T8827] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 707.128557][ T8844] syz.4.11972: attempt to access beyond end of device [ 707.128557][ T8844] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 707.144971][ T8850] team0: Port device team_slave_0 removed [ 707.151960][ T8827] syz.1.11970: attempt to access beyond end of device [ 707.151960][ T8827] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 707.165740][ T8844] syz.4.11972: attempt to access beyond end of device [ 707.165740][ T8844] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 707.180851][ T8827] syz.1.11970: attempt to access beyond end of device [ 707.180851][ T8827] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 707.195630][ T8844] syz.4.11972: attempt to access beyond end of device [ 707.195630][ T8844] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 707.195978][ T8850] team0: Port device team_slave_1 removed [ 707.230419][ T8850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.238571][ T8850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.252841][ T8850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.261031][ T8850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.298097][ T8850] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 707.360110][ T8875] dns_resolver: Unsupported server list version (0) [ 707.385520][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 707.385540][ T29] audit: type=1326 audit(3018.006:24068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.4.11978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5912fdacb9 code=0x7ffc0000 [ 707.427451][ T29] audit: type=1326 audit(3018.006:24069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.4.11978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5912fdacb9 code=0x7ffc0000 [ 707.450671][ T29] audit: type=1326 audit(3018.006:24070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.4.11978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5912fdacb9 code=0x7ffc0000 [ 707.474227][ T29] audit: type=1326 audit(3018.006:24071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.4.11978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5912fdacb9 code=0x7ffc0000 [ 707.491673][ T8887] set_capacity_and_notify: 4 callbacks suppressed [ 707.491727][ T8887] loop4: detected capacity change from 0 to 128 [ 707.497972][ T29] audit: type=1326 audit(3018.006:24072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.4.11978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5912fdacb9 code=0x7ffc0000 [ 707.543766][ T8887] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 707.572145][ T8887] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 707.621659][ T29] audit: type=1326 audit(3018.132:24073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.4.11978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5912fdacb9 code=0x7ffc0000 [ 707.645293][ T29] audit: type=1326 audit(3018.132:24074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.4.11978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5912fdacb9 code=0x7ffc0000 [ 707.668545][ T29] audit: type=1326 audit(3018.216:24075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.4.11978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5912fdacb9 code=0x7ffc0000 [ 707.691598][ T29] audit: type=1326 audit(3018.216:24076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.4.11978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5912fdacb9 code=0x7ffc0000 [ 707.714562][ T8897] ip6_vti0 speed is unknown, defaulting to 1000 [ 707.718056][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11980'. [ 707.721227][ T29] audit: type=1326 audit(3018.216:24077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.4.11978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5912fdacb9 code=0x7ffc0000 [ 707.786786][ T8907] FAULT_INJECTION: forcing a failure. [ 707.786786][ T8907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.800073][ T8907] CPU: 1 UID: 0 PID: 8907 Comm: syz.0.11983 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 707.800189][ T8907] Tainted: [W]=WARN [ 707.800276][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 707.800292][ T8907] Call Trace: [ 707.800300][ T8907] [ 707.800310][ T8907] __dump_stack+0x1d/0x30 [ 707.800336][ T8907] dump_stack_lvl+0x95/0xd0 [ 707.800357][ T8907] dump_stack+0x15/0x1b [ 707.800377][ T8907] should_fail_ex+0x263/0x280 [ 707.800436][ T8907] should_fail+0xb/0x20 [ 707.800462][ T8907] should_fail_usercopy+0x1a/0x20 [ 707.800517][ T8907] _copy_from_iter+0xcf/0xea0 [ 707.800608][ T8907] ? __alloc_skb+0x397/0x4b0 [ 707.800640][ T8907] ? __alloc_skb+0x219/0x4b0 [ 707.800670][ T8907] netlink_sendmsg+0x4ae/0x6f0 [ 707.800752][ T8907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.800836][ T8907] __sock_sendmsg+0x145/0x170 [ 707.800865][ T8907] ____sys_sendmsg+0x31e/0x4a0 [ 707.800907][ T8907] ___sys_sendmsg+0x195/0x1e0 [ 707.800966][ T8907] __x64_sys_sendmsg+0xd4/0x160 [ 707.801066][ T8907] x64_sys_call+0x17ba/0x3000 [ 707.801092][ T8907] do_syscall_64+0xc0/0x2a0 [ 707.801117][ T8907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.801218][ T8907] RIP: 0033:0x7f1ed750acb9 [ 707.801241][ T8907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.801263][ T8907] RSP: 002b:00007f1ed5f67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.801288][ T8907] RAX: ffffffffffffffda RBX: 00007f1ed7785fa0 RCX: 00007f1ed750acb9 [ 707.801393][ T8907] RDX: 0000000000008808 RSI: 0000200000000100 RDI: 0000000000000004 [ 707.801407][ T8907] RBP: 00007f1ed5f67090 R08: 0000000000000000 R09: 0000000000000000 [ 707.801421][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.801437][ T8907] R13: 00007f1ed7786038 R14: 00007f1ed7785fa0 R15: 00007ffeb6d4d5e8 [ 707.801462][ T8907] [ 708.002323][ T8897] vcan0 speed is unknown, defaulting to 1000 [ 708.377003][ T8932] netlink: 'syz.8.11987': attribute type 21 has an invalid length. [ 708.458088][ T8945] loop4: detected capacity change from 0 to 128 [ 708.472800][ T8945] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 708.522233][ T8945] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 708.565803][ T8945] SELinux: security_context_str_to_sid (ÌrÆýõTVrb‰)““?Þë¡ÊŸÏÜJOOª'.Ÿ¬•j~e9’Í×P*) failed with errno=-22 [ 708.619478][ T8965] ip6_vti0 speed is unknown, defaulting to 1000 [ 708.651839][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11997'. [ 708.706904][ T8965] vcan0 speed is unknown, defaulting to 1000 [ 708.725898][ T8973] loop6: detected capacity change from 0 to 128 [ 708.751760][ T8973] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 708.834037][ T8973] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 708.877207][ T8980] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 708.901398][ T8980] bond1 (unregistering): Released all slaves [ 709.049609][ T8999] loop0: detected capacity change from 0 to 512 [ 709.062024][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12005'. [ 709.072831][ T8999] ext4: Bad value for 'debug_want_extra_isize' [ 709.110083][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12005'. [ 709.164426][ T3485] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 709.201024][ T3485] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 709.314043][ T9022] fido_id[9022]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 709.445592][ T9048] ip6_vti0 speed is unknown, defaulting to 1000 [ 709.455621][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12013'. [ 709.612071][ T9048] vcan0 speed is unknown, defaulting to 1000 [ 709.758259][ T3304] udevd[3304]: symlink '../../loop6' '/dev/disk/by-diskseq/2314.tmp-b7:6' failed: Read-only file system [ 709.803208][ T9076] netlink: 'syz.8.12019': attribute type 30 has an invalid length. [ 709.823375][ T9076] bond1: option arp_missed_max: invalid value (0) [ 709.829863][ T9076] bond1: option arp_missed_max: allowed values 1 - 255 [ 709.839048][ T9076] bond1 (unregistering): Released all slaves [ 709.888654][ T3304] udevd[3304]: symlink '../../loop1' '/dev/disk/by-diskseq/2307.tmp-b7:1' failed: Read-only file system [ 709.927034][ T3313] udevd[3313]: symlink '../../loop0' '/dev/disk/by-diskseq/2313.tmp-b7:0' failed: Read-only file system [ 710.004396][ T3304] udevd[3304]: symlink '../../loop1' '/dev/disk/by-diskseq/2307.tmp-b7:1' failed: Read-only file system [ 710.020486][ T9080] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 710.101044][ T9095] loop4: detected capacity change from 0 to 8192 [ 710.121742][ T3304] udevd[3304]: symlink '../../loop0' '/dev/disk/by-diskseq/2313.tmp-b7:0' failed: Read-only file system [ 710.132523][ T3313] udevd[3313]: symlink '../../loop1' '/dev/disk/by-diskseq/2307.tmp-b7:1' failed: Read-only file system [ 710.170022][ T9109] ip6_vti0 speed is unknown, defaulting to 1000 [ 710.193176][T13463] udevd[13463]: symlink '../../loop4' '/dev/disk/by-diskseq/2315.tmp-b7:4' failed: Read-only file system [ 710.282811][T13463] udevd[13463]: symlink '../../loop4' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:4' failed: Read-only file system [ 710.297447][ T3313] udevd[3313]: symlink '../../loop6' '/dev/disk/by-diskseq/2314.tmp-b7:6' failed: Read-only file system [ 710.303931][ T3304] udevd[3304]: symlink '../../loop1' '/dev/disk/by-diskseq/2307.tmp-b7:1' failed: Read-only file system [ 710.378657][ T9109] vcan0 speed is unknown, defaulting to 1000 [ 710.745521][ T9116] ip6_vti0 speed is unknown, defaulting to 1000 [ 710.776007][ T9136] loop0: detected capacity change from 0 to 1024 [ 710.811040][ T9136] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 710.866461][ T9136] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 710.878297][ T9136] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 710.960667][ T9142] __nla_validate_parse: 7 callbacks suppressed [ 710.960685][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12037'. [ 710.975336][ T9136] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 710.976153][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12037'. [ 710.995793][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12037'. [ 711.026459][ T9116] vcan0 speed is unknown, defaulting to 1000 [ 711.056033][ T9136] EXT4-fs (loop0): invalid journal inode [ 711.070827][ T9136] EXT4-fs (loop0): can't get journal size [ 711.107144][ T9136] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.12034: blocks 2-2 from inode overlap system zone [ 711.135259][ T9136] EXT4-fs (loop0): failed to initialize system zone (-117) [ 711.143295][ T9136] EXT4-fs (loop0): mount failed [ 711.202221][ T3549] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 711.228198][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12040'. [ 711.244970][ T3549] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 711.284477][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12040'. [ 711.319089][ T9151] fido_id[9151]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 711.350857][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12041'. [ 711.436216][ T9116] chnl_net:caif_netlink_parms(): no params data found [ 711.506220][ T9153] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 711.570575][ T9170] ip6_vti0 speed is unknown, defaulting to 1000 [ 711.620112][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.627341][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.635209][ T9116] bridge_slave_0: entered allmulticast mode [ 711.643484][ T9116] bridge_slave_0: entered promiscuous mode [ 711.651133][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.658290][ T9116] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.670455][ T9116] bridge_slave_1: entered allmulticast mode [ 711.677336][ T9116] bridge_slave_1: entered promiscuous mode [ 711.698018][ T9170] vcan0 speed is unknown, defaulting to 1000 [ 711.722409][ T9116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.765344][ T9116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.783444][ T9191] veth0_to_bridge: entered promiscuous mode [ 711.789499][ T9191] veth0_to_bridge: entered allmulticast mode [ 711.799241][ T9188] loop0: detected capacity change from 0 to 512 [ 711.837201][ T9193] loop0: detected capacity change from 0 to 128 [ 711.848282][ T9116] team0: Port device team_slave_0 added [ 711.866481][ T9116] team0: Port device team_slave_1 added [ 711.936753][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12052'. [ 711.949185][ T9116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.956259][ T9116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.982378][ T9116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.001336][ T9116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.009139][ T9116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.036062][ T9116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.048205][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12052'. [ 712.126609][ T9197] bio_check_eod: 218 callbacks suppressed [ 712.126627][ T9197] syz.0.12051: attempt to access beyond end of device [ 712.126627][ T9197] loop0: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 712.148189][ T9193] syz.0.12051: attempt to access beyond end of device [ 712.148189][ T9193] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 712.162011][ T9208] loop6: detected capacity change from 0 to 512 [ 712.170787][ T9197] syz.0.12051: attempt to access beyond end of device [ 712.170787][ T9197] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 712.184930][ T9197] syz.0.12051: attempt to access beyond end of device [ 712.184930][ T9197] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 712.199429][ T9197] syz.0.12051: attempt to access beyond end of device [ 712.199429][ T9197] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 712.216562][ T9208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.239946][ T9197] syz.0.12051: attempt to access beyond end of device [ 712.239946][ T9197] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 712.256467][ T9197] syz.0.12051: attempt to access beyond end of device [ 712.256467][ T9197] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 712.270607][ T9197] syz.0.12051: attempt to access beyond end of device [ 712.270607][ T9197] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 712.284371][ T9197] syz.0.12051: attempt to access beyond end of device [ 712.284371][ T9197] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 712.298824][ T9197] syz.0.12051: attempt to access beyond end of device [ 712.298824][ T9197] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 712.329776][ T9116] hsr_slave_0: entered promiscuous mode [ 712.336146][ T9116] hsr_slave_1: entered promiscuous mode [ 712.343492][ T9116] debugfs: 'hsr0' already exists in 'hsr' [ 712.349990][ T9116] Cannot create hsr debugfs directory [ 712.363121][ T9217] netlink: 'syz.6.12055': attribute type 4 has an invalid length. [ 712.482727][ T9227] loop0: detected capacity change from 0 to 1024 [ 712.490012][ T9227] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 712.504224][ T9227] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 712.515884][ T9227] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 712.532707][ T9227] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 712.546468][ T9227] EXT4-fs (loop0): invalid journal inode [ 712.552401][ T9227] EXT4-fs (loop0): can't get journal size [ 712.559240][ T9227] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.12061: blocks 2-2 from inode overlap system zone [ 712.574325][ T9227] EXT4-fs (loop0): failed to initialize system zone (-117) [ 712.582185][ T9227] EXT4-fs (loop0): mount failed [ 712.634207][ T9116] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.647144][ T9237] loop4: detected capacity change from 0 to 512 [ 712.665490][ T9237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.681985][ T9116] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.693101][ T9235] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.12064: corrupted xattr block 33: invalid header [ 712.708043][ T9235] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 712.717352][ T9235] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.12064: corrupted xattr block 33: invalid header [ 712.731271][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 712.731328][ T29] audit: type=1326 audit(3535.603:24365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.0.12066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 712.760781][ T29] audit: type=1326 audit(3535.603:24366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.0.12066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 712.784090][ T29] audit: type=1326 audit(3535.603:24367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.0.12066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 712.789721][ T9248] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.12064: corrupted xattr block 6: invalid header [ 712.807186][ T29] audit: type=1326 audit(3535.603:24368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.0.12066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 712.807289][ T29] audit: type=1326 audit(3535.614:24369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.0.12066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 712.807322][ T29] audit: type=1326 audit(3535.614:24370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.0.12066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 712.807356][ T29] audit: type=1326 audit(3535.614:24371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.0.12066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 712.807455][ T29] audit: type=1326 audit(3535.614:24372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.0.12066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 712.951224][ T9116] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.961235][ T9248] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 712.970399][ T9235] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 712.970494][ T29] audit: type=1400 audit(3535.865:24373): avc: denied { read } for pid=9234 comm="syz.4.12064" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 712.970533][ T9235] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.12064: corrupted xattr block 33: invalid header [ 713.016411][ T9235] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 713.056918][ T8309] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.069987][ T9116] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.082790][ T29] audit: type=1326 audit(3535.981:24374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.0.12066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed750acb9 code=0x7ffc0000 [ 713.112728][ T9237] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.12064: corrupted xattr block 6: invalid header [ 713.126342][ T9237] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 713.136063][ T9248] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.12064: corrupted xattr block 6: invalid header [ 713.151325][ T9248] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 713.175175][ T9116] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 713.207756][T31687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.211315][ T9116] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 713.293167][ T9116] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 713.302814][ T9116] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 713.402936][ T9270] loop0: detected capacity change from 0 to 512 [ 713.415647][ T9116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.436941][ T9116] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.437807][ T9270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.459897][ T8425] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.467113][ T8425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.493184][ T9270] SELinux: Context @ is not valid (left unmapped). [ 713.501275][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.508429][ T6758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.568642][ T2291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.684301][ T9116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.865172][ T9116] veth0_vlan: entered promiscuous mode [ 713.892235][ T9116] veth1_vlan: entered promiscuous mode [ 713.899687][ T9259] syz.4.12069 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 713.914054][ T9259] CPU: 0 UID: 0 PID: 9259 Comm: syz.4.12069 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 713.914156][ T9259] Tainted: [W]=WARN [ 713.914166][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 713.914184][ T9259] Call Trace: [ 713.914195][ T9259] [ 713.914204][ T9259] __dump_stack+0x1d/0x30 [ 713.914300][ T9259] dump_stack_lvl+0x95/0xd0 [ 713.914361][ T9259] dump_stack+0x15/0x1b [ 713.914470][ T9259] dump_header+0x80/0x240 [ 713.914569][ T9259] oom_kill_process+0x295/0x350 [ 713.914652][ T9259] out_of_memory+0x97d/0xb80 [ 713.914759][ T9259] try_charge_memcg+0x62e/0xa10 [ 713.914892][ T9259] obj_cgroup_charge_pages+0xa6/0x150 [ 713.915084][ T9259] __memcg_kmem_charge_page+0x9e/0x170 [ 713.915114][ T9259] __alloc_frozen_pages_noprof+0x18a/0x350 [ 713.915156][ T9259] alloc_pages_mpol+0xb3/0x260 [ 713.915317][ T9259] alloc_pages_noprof+0x8f/0x130 [ 713.915361][ T9259] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 713.915401][ T9259] __kvmalloc_node_noprof+0x471/0x680 [ 713.915435][ T9259] ? ip_set_alloc+0x24/0x30 [ 713.915477][ T9259] ? ip_set_alloc+0x24/0x30 [ 713.915547][ T9259] ip_set_alloc+0x24/0x30 [ 713.915589][ T9259] hash_netiface_create+0x282/0x740 [ 713.915635][ T9259] ? __pfx_hash_netiface_create+0x10/0x10 [ 713.915688][ T9259] ip_set_create+0x3cf/0x970 [ 713.915784][ T9259] ? __nla_parse+0x40/0x60 [ 713.915822][ T9259] nfnetlink_rcv_msg+0x509/0x5d0 [ 713.915950][ T9259] netlink_rcv_skb+0x123/0x220 [ 713.915988][ T9259] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 713.916138][ T9259] nfnetlink_rcv+0x167/0x1720 [ 713.916177][ T9259] ? __list_del_entry_valid_or_report+0x65/0x130 [ 713.916283][ T9259] ? __rmqueue_pcplist+0x9b6/0xb80 [ 713.916369][ T9259] ? _raw_spin_lock_bh+0x56/0xb0 [ 713.916403][ T9259] ? should_fail_ex+0x30/0x280 [ 713.916435][ T9259] ? selinux_nlmsg_lookup+0x99/0x890 [ 713.916533][ T9259] ? __rcu_read_unlock+0x33/0x70 [ 713.916587][ T9259] ? __netlink_lookup+0x276/0x2b0 [ 713.916619][ T9259] netlink_unicast+0x5c0/0x690 [ 713.916663][ T9259] netlink_sendmsg+0x5c8/0x6f0 [ 713.916690][ T9259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.916716][ T9259] __sock_sendmsg+0x145/0x170 [ 713.916823][ T9259] ____sys_sendmsg+0x31e/0x4a0 [ 713.916886][ T9259] ___sys_sendmsg+0x195/0x1e0 [ 713.916930][ T9259] __x64_sys_sendmsg+0xd4/0x160 [ 713.916970][ T9259] x64_sys_call+0x17ba/0x3000 [ 713.917019][ T9259] do_syscall_64+0xc0/0x2a0 [ 713.917041][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.917107][ T9259] RIP: 0033:0x7f5912fdacb9 [ 713.917124][ T9259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.917143][ T9259] RSP: 002b:00007f5911a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.917232][ T9259] RAX: ffffffffffffffda RBX: 00007f5913255fa0 RCX: 00007f5912fdacb9 [ 713.917274][ T9259] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 713.917292][ T9259] RBP: 00007f5913048bf7 R08: 0000000000000000 R09: 0000000000000000 [ 713.917310][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.917326][ T9259] R13: 00007f5913256038 R14: 00007f5913255fa0 R15: 00007ffe23816458 [ 713.917355][ T9259] [ 713.917364][ T9259] memory: usage 307200kB, limit 307200kB, failcnt 907 [ 713.973976][ T9116] veth0_macvtap: entered promiscuous mode [ 713.977479][ T9259] memory+swap: usage 307572kB, limit 9007199254740988kB, failcnt 0 [ 713.977504][ T9259] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 714.010616][ T9116] veth1_macvtap: entered promiscuous mode [ 714.015940][ T9259] Memory cgroup stats for [ 714.050119][ T9116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.051664][ T9259] /syz4: [ 714.054576][ T9259] cache 0 [ 714.071758][ T9116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.072018][ T9259] rss 0 [ 714.087378][ T6758] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.088166][ T9259] shmem 0 [ 714.088178][ T9259] mapped_file 0 [ 714.088186][ T9259] dirty 0 [ 714.088192][ T9259] writeback 0 [ 714.088200][ T9259] workingset_refault_anon 714 [ 714.088208][ T9259] workingset_refault_file 2629 [ 714.289421][T30795] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 714.289539][ T9259] swap 380928 [ 714.303080][T30795] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 714.358943][ T9259] swapcached 8192 [ 714.362602][ T9259] pgpgin 473660 [ 714.366121][ T9259] pgpgout 473651 [ 714.369756][ T9259] pgfault 498748 [ 714.373320][ T9259] pgmajfault 243 [ 714.373502][ T9300] ================================================================== [ 714.377005][ T9259] inactive_anon 8192 [ 714.385072][ T9300] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 714.388937][ T9259] active_anon 0 [ 714.395927][ T9300] [ 714.395937][ T9300] write to 0xffffffff86af78f8 of 88 bytes by task 9259 on cpu 0: [ 714.399403][ T9259] inactive_file 28672 [ 714.401756][ T9300] prb_reserve+0x6e6/0xae0 [ 714.401788][ T9300] vprintk_store+0x54a/0x910 [ 714.401815][ T9300] vprintk_emit+0x1a4/0x600 [ 714.409592][ T9259] active_file 0 [ 714.413521][ T9300] vprintk_default+0x26/0x30 [ 714.419698][ T9259] unevictable 0 [ 714.422535][ T9300] vprintk+0x1d/0x30 [ 714.427109][ T9259] hierarchical_memory_limit 314572800 [ 714.430598][ T9300] _printk+0x79/0xa0 [ 714.435223][ T9259] hierarchical_memsw_limit 9223372036854771712 [ 714.438658][ T9300] seq_buf_do_printk+0x113/0x1a0 [ 714.438693][ T9300] mem_cgroup_print_oom_meminfo+0x17d/0x260 [ 714.438718][ T9300] dump_header+0xa2/0x240 [ 714.442653][ T9259] total_cache 0 [ 714.447997][ T9300] oom_kill_process+0x295/0x350 [ 714.448043][ T9300] out_of_memory+0x97d/0xb80 [ 714.448063][ T9300] try_charge_memcg+0x62e/0xa10 [ 714.448093][ T9300] obj_cgroup_charge_pages+0xa6/0x150 [ 714.451987][ T9259] total_rss 0 [ 714.458135][ T9300] __memcg_kmem_charge_page+0x9e/0x170 [ 714.465014][ T9259] total_shmem 0 [ 714.468986][ T9300] __alloc_frozen_pages_noprof+0x18a/0x350 [ 714.473393][ T9259] total_mapped_file 0 [ 714.476786][ T9300] alloc_pages_mpol+0xb3/0x260 [ 714.481731][ T9259] total_dirty 0 [ 714.486295][ T9300] alloc_pages_noprof+0x8f/0x130 [ 714.491219][ T9259] total_writeback 0 [ 714.496519][ T9300] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 714.499813][ T9259] total_workingset_refault_anon 714 [ 714.505272][ T9300] __kvmalloc_node_noprof+0x471/0x680 [ 714.505300][ T9300] ip_set_alloc+0x24/0x30 [ 714.505331][ T9300] hash_netiface_create+0x282/0x740 [ 714.508808][ T9259] total_workingset_refault_file 2629 [ 714.514610][ T9300] ip_set_create+0x3cf/0x970 [ 714.514636][ T9300] nfnetlink_rcv_msg+0x509/0x5d0 [ 714.514670][ T9300] netlink_rcv_skb+0x123/0x220 [ 714.514707][ T9300] nfnetlink_rcv+0x167/0x1720 [ 714.514735][ T9300] netlink_unicast+0x5c0/0x690 [ 714.514764][ T9300] netlink_sendmsg+0x5c8/0x6f0 [ 714.514785][ T9300] __sock_sendmsg+0x145/0x170 [ 714.514805][ T9300] ____sys_sendmsg+0x31e/0x4a0 [ 714.514840][ T9300] ___sys_sendmsg+0x195/0x1e0 [ 714.514874][ T9300] __x64_sys_sendmsg+0xd4/0x160 [ 714.514906][ T9300] x64_sys_call+0x17ba/0x3000 [ 714.514937][ T9300] do_syscall_64+0xc0/0x2a0 [ 714.514961][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.514984][ T9300] [ 714.514990][ T9300] read to 0xffffffff86af78f8 of 8 bytes by task 9300 on cpu 1: [ 714.515010][ T9300] _prb_read_valid+0x383/0x950 [ 714.515040][ T9300] prb_first_valid_seq+0x35/0x70 [ 714.515074][ T9300] devkmsg_open+0x174/0x1b0 [ 714.515106][ T9300] memory_open+0xca/0xf0 [ 714.515130][ T9300] chrdev_open+0x2eb/0x3a0 [ 714.515154][ T9300] do_dentry_open+0x54b/0xa60 [ 714.515181][ T9300] vfs_open+0x37/0x1e0 [ 714.515208][ T9300] path_openat+0x1de9/0x23c0 [ 714.515243][ T9300] do_filp_open+0x15d/0x280 [ 714.515284][ T9300] do_sys_openat2+0xa6/0x150 [ 714.515315][ T9300] __x64_sys_openat+0xf2/0x120 [ 714.515347][ T9300] x64_sys_call+0x2b07/0x3000 [ 714.515373][ T9300] do_syscall_64+0xc0/0x2a0 [ 714.515394][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.515418][ T9300] [ 714.515423][ T9300] value changed: 0x0000000000003157 -> 0x0000000000005157 [ 714.519440][ T9259] total_swap 380928 [ 714.524305][ T9300] [ 714.524312][ T9300] Reported by Kernel Concurrency Sanitizer on: [ 714.527769][ T9259] total_swapcached 8192 [ 714.532721][ T9300] CPU: 1 UID: 0 PID: 9300 Comm: fido_id Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 714.536538][ T9259] total_pgpgin 473660 [ 714.542485][ T9300] Tainted: [W]=WARN [ 714.542497][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 714.547802][ T9259] total_pgpgout 473651 [ 714.553159][ T9300] ================================================================== [ 714.559289][ T9259] total_pgfault 498748 [ 714.782635][ T9259] total_pgmajfault 243 [ 714.786755][ T9259] total_inactive_anon 8192 [ 714.791208][ T9259] total_active_anon 0 [ 714.796258][ T9259] total_inactive_file 28672 [ 714.800798][ T9259] total_active_file 0 [ 714.804852][ T9259] total_unevictable 0 [ 714.808851][ T9259] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.12069,pid=9258,uid=0 [ 714.824301][ T9259] Memory cgroup out of memory: Killed process 9258 (syz.4.12069) total-vm:94000kB, anon-rss:1236kB, file-rss:22028kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 714.843510][ T7355] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.855808][ T7355] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.864803][ T7355] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.919950][ T3304] udevd[3304]: symlink '../../loop1' '/dev/disk/by-diskseq/2307.tmp-b7:1' failed: Read-only file system [ 714.979248][ T3304] udevd[3304]: symlink '../../loop8' '/dev/disk/by-diskseq/1985.tmp-b7:8' failed: Read-only file system [ 714.996027][ T3313] udevd[3313]: symlink '../../loop6' '/dev/disk/by-diskseq/2327.tmp-b7:6' failed: Read-only file system [ 715.025260][ T3304] udevd[3304]: symlink '../../loop4' '/dev/disk/by-diskseq/2328.tmp-b7:4' failed: Read-only file system [ 715.037747][ T3313] udevd[3313]: symlink '../../loop0' '/dev/disk/by-diskseq/2330.tmp-b7:0' failed: Read-only file system