last executing test programs: 1m6.930427427s ago: executing program 0 (id=445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x10, 0x1, 0x8, 0x3, 0x3, 0xd, 0x9, 0x2, [{0xab27, 0x49, 0x101}, {0xfffff29e, 0x9f9d, 0xf, 0x9}, {0x4, 0xf9, 0x80000000, 0x2}, {0x7, 0x9, 0xffffffff, 0xfffffff7}, {0x1, 0xca99, 0x9, 0x2}, {0x3, 0x3d0, 0x8, 0x3}, {0x2, 0x449, 0x80000001, 0x6}, {0x9, 0x3, 0x2, 0x5}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000800)="4307052effe2a88204871eb99054ab80f0b40f43ed4b3b4191aeb006220fe729d92c17339f667ec5e127cee5510c0560e72d61934d6b5d0fabba1888598afdb4c647290d94adbeeb0e12d451a5764c7399537162158d428ee4d388c7be4a3f0325cd0a926bac412a8340fcbe08b2aaac490cfaa0a8b1c15f0c432e3603105b6546aba2773b7534372c5bb9cf72d2ea668f5ded9c092af5382c36783b15ec98cb4753a8e55c88d5903811d377d24b8e793fafdb8a14b1f34d91e3beed1ff11ad757290c6511f2b27325d7ba59ce2a8959048da2ed3797386c2e1dfdc4f0a1ed7528601380e53a4d3fc1559c24b9", 0xed}], 0x2, 0x0, 0x0, 0x60}, 0x4) 1m6.674888972s ago: executing program 0 (id=450): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x141cac27, 0x1810c1) ioctl$LOOP_SET_STATUS(r0, 0xc01070ce, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000042c40000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)='system.posix_acl_default\x00', &(0x7f0000003180)={{}, {0x1, 0x3}, [], {0x4, 0x7}, [], {}, {0x20, 0x2}}, 0x24, 0x0) listxattr(&(0x7f0000005580)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x1000, 0x80, &(0x7f0000000700)="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", &(0x7f0000000000)=""/128, 0xaab9, 0x0, 0x2f, 0xaa, &(0x7f00000000c0)="d442dfb32f46374fd296e8433368054a339c34a77128ceb9b0f26be1cbc48d13a1912caa7e205fb6e303e6a726b76a", &(0x7f0000000100)="8e2a5ec2d34f9f918fa1655c1bcf8bb871bf6e1bb7f411c3ba65e52bbdb653be125411b8ac8cde6a5cfa9ac5e0ca4adb610a021bf576cb88f85e7a11485182f3c37ffe3ddafbfa4c79230292fcc01c0bcc06e5191d5ae54bbb3722f5d2436ed669313ac82c227b1ec54e9f207263112af58d6e8af21a124d94724d9f53216237286d8ff575324bd06a7a0cc6f47006591fdc364607e3da8430ef4236fa7cf2afffa26b060d4466fbcacd", 0x2, 0x0, 0x9}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r8, 0x80, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) ioctl$TCSETS(r1, 0x80047456, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x80, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c00"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x80) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) 1m6.452491935s ago: executing program 0 (id=453): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', "000000000000000000000000000000000000000000000500"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 1m6.385713029s ago: executing program 0 (id=456): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @random="ecbeba5e4101", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "87404a1521cd01f9df5ed1edadd5f225602902d238b3605ef3d3776442bc6a4a", "f34f90b9c395844234c7cdd78918f38e", {"876f904f4b9b8b0be78ecf3ecf498db8", "6fce414cc0adba1f2cab5d665e273346"}}}}}}}, 0x0) r0 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setresuid(0xee00, 0xee00, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000180)={0xe4, 0x29, 0x2, {0xf, [{{0x0, 0x2, 0x6}, 0x1, 0x8, 0x7, './file0'}, {{0x4, 0x1, 0x8}, 0x9, 0xc, 0x7, './file0'}, {{0x0, 0x4, 0x3}, 0x2, 0x7, 0x7, './file1'}, {{0x8, 0x4, 0x1}, 0xe, 0x3, 0x7, './file0'}, {{0x8, 0x3, 0x4}, 0x101, 0x4, 0x7, './file0'}, {{0x80, 0x1, 0x6}, 0xb20, 0x8, 0x7, './file0'}, {{0x4, 0x1, 0x3}, 0x2, 0x3, 0x7, './file0'}]}}, 0xe4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000140)={@mcast2, 0x3, 0x0, 0x3, 0x0, 0x77f, 0x4000}, 0x20) r3 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1m6.111322595s ago: executing program 0 (id=460): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440100001000130722bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fea033688e345774a6000000000000bb0000000032000000fe8000000000000000000000000000aa0000fffffffffffffffe00000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000500ac000000000000004c001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000008002900"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m5.891177637s ago: executing program 0 (id=462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_config_ext={0x7, 0x7fffffff}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x7, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}, 0x1, 0x0, 0x0, 0x40250c5}, 0x0) 1m5.872151199s ago: executing program 32 (id=462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_config_ext={0x7, 0x7fffffff}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x7, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}, 0x1, 0x0, 0x0, 0x40250c5}, 0x0) 11.99481956s ago: executing program 3 (id=1357): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYRESHEX=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (rerun: 64) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) (async) io_uring_enter(r0, 0x3514, 0xfdd5, 0x8, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 64) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r6}) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r7}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r8, {0x0, 0x9}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x9c, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x3}, {0x9, 0x4}, {0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0xff}}}, @TCA_RATE={0x6, 0x5, {0x7, 0xf}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_pie={{0x8}, {0x3c, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x4}, @TCA_PIE_BETA={0x8, 0x5, 0x15}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x9}, @TCA_PIE_LIMIT={0x8, 0x2, 0x3a39}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x82}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x7fff}, @TCA_PIE_TARGET={0x8, 0x1, 0x100}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6b}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r9, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="ffac8de7e172369ace3e51701d7dfe57916bbf2fae10fa0b46420a8d383e539600c7b856c62fa9a3f6c59651ca279a6e41497df16b832977d4f5681e2ac7754869b029f062427754c737235d31b7a8f0c50877fb4e6fa9021f687b24bbcbe4e22a0dc89db8a63da428ad70332e67e13f49c24a9201788a304c43a954815c2154a6bfcea7b21217c23fe0652b610dde581360994eb5466015e3e837b907999915e837db3d9ac1a2c637fec02c80e936988e55b21332", 0xb5}, {&(0x7f0000000040)="5309c33cc639d672b3c0f83c401f6f779f6e8a34216fe4a4", 0x18}, {&(0x7f00000000c0)="d3950d0865303da0f062d128f86df448ac21887bb72c0784751ea844349b1a039864dc974afacaf3", 0x28}, {&(0x7f0000000340)="6d5c9beb9998f3f2bddf2518e1d90e603af4ff4f1b8f045a8145ec4c29a3da1629bcc36fe4b4bc7ee31a7ec42671a1a01254e7fde78f69e0097701fc31f649aedc8b768a850f667ef97262c2965eef3f59bf73dec33383bdcd6857650bbac5bb472cb4581cb8c1817b943b73556f6398acd77dbac3d661a033ec6482d9bed9adf1970bd89861d320b2bcd0427abf6292f0f80b942f6c624d910d97861129f8351bc6673e16a870eb4185c9d945c40caed40b31fd57bc8bb02a9b392b", 0xbc}], 0x4}}], 0x1, 0xc004) (async) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 11.837377389s ago: executing program 3 (id=1359): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000206010800000040000000000000000014000780080011400000005205001500dd000000050001000600000005000500"], 0x38}}, 0x0) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (rerun: 32) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0x2, 0x200, 0x80000000, 0x6, 0x8}, &(0x7f00000001c0)=0x14) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000006, 0x1, @perf_config_ext={0x80, 0x7fff}, 0x10008, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fedbdf2518000000080001007063690011000200303030303a30303a31302e3000000000080003"], 0x60}, 0x1, 0x0, 0x0, 0x200400c0}, 0x20044014) (async) r4 = socket(0x1a, 0x2, 0x6) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0xd0, 0x1a0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff000000, 0xff, 0xff], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 'veth1_to_team\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@mcast1, @loopback, [0xff], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'ip_vti0\x00', {0xff}, {}, 0x33}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f0000000000)=0x8, 0x4) (async) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) (async, rerun: 64) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0x7ff, 0x3, 0xe1d9, 0x9, 0xff}) (async) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x22000050}, 0x4) (async) r8 = socket$kcm(0x21, 0x2, 0xa) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010101}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x404f444) (async) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4) fchmodat(r9, &(0x7f0000000100)='./file0\x00', 0x20) 11.413360104s ago: executing program 3 (id=1364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a0000000b00000042007d3bca028edc43e03d4cf04583002042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000000095e5fceaaa5add13f0ebacfdc8b66a2c48eb148f08c839526b74c8093bbe391634b197d45752831eb7493dedafb23692a14951a9546c1feca9a42d311fe18cf92b33a3f85fc17d560771"], &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x41100, 0xc}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@resgid}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@journal_path={'journal_path', 0x3d, './file1'}}]}, 0x0, 0x576, &(0x7f0000000580)="$eJzs3c9rHFUcAPDvbH70pzaFUtSDBHowUrtpEn9UEKwXQbRYsPe6JNNQsumW7KY0sdD2YC9epAgiFsQ/wLvH4j/gX1HQQpES9OAlMpvZdJvsJttk06Tu5wOTvDczmzffffNe3puZZQPoWcPZj0LEqxHxbRJxpGlbf+Qbh1f2W3p8YzJbklhe/uKvJJJ8XWP/JP99KM+8EhG/fR1xsrC+3OrC4kypXE7n8vxobfbqaHVh8dTl2dJ0Op1eGZ+YOPPOxPj7773btVjfPP/PD5/f/+TMNyeWvv/l4dG7SZyNw/m25ji24VZzZjiG8/dkIM6u2XGsC4XtJcluHwBb0pe384HI+oAj0Ze3euD/72ZELAM9KtH+oUc1xgGNuX2H8+ALB3Z2WPLcPPpoZQK0Pv7+lWsjsb8+Nzq4lDw1M8rmu0NdKD8r49c/793NltjkOsTNLpQH0HDrdkSc7u9f3/8lef+3dafrF483traMLl2HBTpwPxv/vNVq/FNYHf9Ei/HPoRZtdys2b/+Fh10opq1s/PdBy/Hvatc11JfnXqqP+QaSS5fL6emIeDkiRmJgX5bf6H7OmaUHy+22NY//siUrvzEWzI/jYf++p18zVaqVthNzs0e3I15rOf5NVus/aVH/2ftxvsMyjqf3Xm+3bfP4d9byzxFvtKz/J3e0ko3vT47Wz4fRxlmx3t93jv/ervyRjzuNP9mRe2xZ/R/cOP6hpPl+bfXZy/hp/79pu21bPf8Hkwv19GC+7nqpVpsbixhMPlu/fvzJaxv5xv5Z/CMnNu7/Wp3/2fz3yw7jv3PsTttdd/v8z+Kfeqb6f/bEg0+/+rFd+Z3V/9v11Ei+ppP+r9MD3M57BwAAAAAAAHtNISIOR1IorqYLhWJx5fmOY3GwUK5UaycvVeavTEX9s7JDMVBo3Ok+0vQ8xFj+PGwjP74mPxERRyPiu74D9XxxslKe2u3gAQAAAAAAAAAAAAAAAAAAYI841Obz/5k/+nb76IAd5yu/oXdt2v678U1PwJ7k/z/0Lu0fepf2D71L+4fepf1D79L+oXdp/9C7tH8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXL8tLjG5NZfurawvxM5dqpqbQ6U5ydnyxOVuauFqcrlelyWpyszG7298qVytWx8Zi/PlpLq7XR6sLixdnK/JXaxcuzpen0YjrwXKICAAAAAAAAAAAAAAAAAACAF0t1YXGmVC6ncy9sYjCPZOeK+DD2RqQ7GOCKLb28f69EIdE2sX8LlbuLnRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPFfAAAA//+t5DDW") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x8, 0x10000000, 0x20001, 0xa}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}]}, {0xfffffffffffffd8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r7, 0x6, 0x8, 0x0, &(0x7f0000001040)) close(r6) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(r9, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r10 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) fcntl$addseals(r10, 0x409, 0x20) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5200005e9bbd76e30c4c956e1e00"}, 0x11, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000b40)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 10.610275731s ago: executing program 3 (id=1371): r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x0) sendto$x25(r0, &(0x7f0000000500)="3d7b0c5a43ed46592ab147ff49122548fd7086f1b2ec6210617e4f7bdc68e6707e101f6d3ead487bb38ad3263a30d64ccaff883a0e08cffe78012e3f7503d0c37e21d8910ec23393aaf9626980a08219b7c6e96d81dd54e9bb958861ff3478cf58daba9d86e2c3ea051144111644ae7baede7d268a398cc1970a39cd9d0ae4daaa208fe7d0719e7c69ee260b65f6217dacee2b670750972b5d6f30b5edb2771d29539d5a3b1cd431cbb027e160bb77cb2b", 0xb1, 0x8800, &(0x7f0000000ac0), 0x12) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0, 0xe0ff}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00010000000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x49) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) splice(r8, &(0x7f0000000040)=0x80, r7, 0x0, 0x5, 0x2) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r10, 0x0}]) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r11, 0x0, 0x0, &(0x7f0000000440), 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df2504"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x80) fspick(r1, &(0x7f0000000200)='./file1/../file0\x00', 0x1) 10.139379998s ago: executing program 3 (id=1380): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFoIUaGiNFk0oCW5MjBtjTFy5EP8LJbJlpW5cuHFlSIgaliaOudM7pdPeaenH9Fbm90uGnnvu3J5zpzxzzj1zzp0A2tZg9k8lYn9ETKeI/jS/uK8z8p2DC8978OeHZ7NHimr1td9TpDyv/vyU/+zLD+6JiB++T7GvY2W5M3PXLo5PTU1ezbeHZy9ND8/MXTt84dL4+cnzk5dHXxg9cfzY8RMjRzZ0XtcL8k7ffOe9/o/H3vz6y7/SyDe/jKU4GS/nT1x6HltlMAZrr0lauavvxFYXVqLOZdtpeQY7Vkf+9+uKiCeiPzqW/DX746NXSq0c0FLVFFEF2lRaR/xnvYVW1gXYTvV+QP3afvl1cKWUXgmwHe6fWhgAWBn/nQtjg9FTGxvY/SA1jPOkiNjYyFyjPRFx987YzXN3xm5Gi8bhgGLzNyLiyaL4T7X4H4ieGKjFf6Uh/rN+wZn8Z5b/6gZ7CsuHisU/bJ+F+O9ZNf6jSfy/tST+395EHfJLkeu9DfHf6+oDAAAAAAAA1un2qYh4vujz/8ri/J8omP/TFxEnt6D8wWXbKz//r9zbgmKAAvdPRbxUOP+3Uv/8faAjT/2nNh+gK527MDV5JCL+GxGHomtXtj2yShmHP9n3RbN9g/n8v/ojK/9uPhcwr8e9zl2Nx0yMD45v9ryBiPs3Ip4qnP+bFtv/VND+Z+8H049Yxr5nb51ptm/t+AdapfpVxMHC9v/hXSvS6vfnGK71B4brvYKVnv7g02+blb/R+HeLCdi8rP3fvXr8D6Sl9+uZWfXXzRdlHp3rrDY7YGP9/9nx7vR67a5C3Xne++Ozs1dHIrrT6Y4styF/dK1XAR4zPxVn1+OhHi9Z/B96ZvXxv6L+f29BsKc/GtcU1/3/775fm1VT/x/Kk8X/xLra//UnRm8NfNes/Edr/4/V2vpDeU7W/rfuFYF/j8/rYdrdmF8Qjp1Fu7a7vgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOKhExJ5IlaHFdKUyNBTRFxH/i92VqSszs8+du/Lu5YlsX+37/yv1b/rtX9hOte//r2Tph9uj0bh9NCL2RsRnHb217aGzV6Ymyj55AAAAAAAAAAAAAAAAAAAA2CH6mqz/z/zWUXbtgJbrLLsCQGkK4v/HMuoBbD/tP7SvDcV/mt/6igDbTvsP7Uv8Q/sS/9C+xD+0L/EP7WrZOH4qqx4AAAAAAMAW2Xvg9s8pIuZf7K09Mt35vq5Sawa0WqXsCgClcYsfaF+m/kH7co0PrDXrt6fpQZuZLzx9dhMHAwAAAAAAAAAAAEDbObjf+n9oV9b/Q/uy/h/aV339/4GS6wFsP9f4QKyxkr9w/f+aRwEAAAAAAAAAAAAAW2mmuitiamry6szctYvjLUt0R0SLi9h04o2dUY2iRG+LfnO1Wr2e/S8o/QQfj0R9KvxOqc+yRH2t36MdVd57EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OifAAAA//8sxicA") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="02e4000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) 9.744291372s ago: executing program 3 (id=1386): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000003c00000000000000ac0200000000000000000004000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1e0001000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000000000008000000080000fcffffff000000000000000000000000000000000000000033000000000000007f0000010000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033000000000000000a010101000000000000000000000000043500000001010000000000bf0a00000000000100000000000000000000000000000001000004d43c"], 0x23c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) 9.691308374s ago: executing program 33 (id=1386): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000003c00000000000000ac0200000000000000000004000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1e0001000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000000000008000000080000fcffffff000000000000000000000000000000000000000033000000000000007f0000010000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033000000000000000a010101000000000000000000000000043500000001010000000000bf0a00000000000100000000000000000000000000000001000004d43c"], 0x23c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) 2.783489577s ago: executing program 4 (id=1474): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe7e4609, 0x273}, 0x4902, 0x69d4, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xb, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.783205217s ago: executing program 4 (id=1475): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x576, &(0x7f0000000580)="$eJzs3c9rHFUcAPDvbH70pzaFUtSDBHowUrtpEn9UEKwXQbRYsPe6JNNQsumW7KY0sdD2YC9epAgiFsQ/wLvH4j/gX1HQQpES9OAlMpvZdJvsJttk06Tu5wOTvDczmzffffNe3puZZQPoWcPZj0LEqxHxbRJxpGlbf+Qbh1f2W3p8YzJbklhe/uKvJJJ8XWP/JP99KM+8EhG/fR1xsrC+3OrC4kypXE7n8vxobfbqaHVh8dTl2dJ0Op1eGZ+YOPPOxPj7773btVjfPP/PD5/f/+TMNyeWvv/l4dG7SZyNw/m25ji24VZzZjiG8/dkIM6u2XGsC4XtJcluHwBb0pe384HI+oAj0Ze3euD/72ZELAM9KtH+oUc1xgGNuX2H8+ALB3Z2WPLcPPpoZQK0Pv7+lWsjsb8+Nzq4lDw1M8rmu0NdKD8r49c/793NltjkOsTNLpQH0HDrdkSc7u9f3/8lef+3dafrF483traMLl2HBTpwPxv/vNVq/FNYHf9Ei/HPoRZtdys2b/+Fh10opq1s/PdBy/Hvatc11JfnXqqP+QaSS5fL6emIeDkiRmJgX5bf6H7OmaUHy+22NY//siUrvzEWzI/jYf++p18zVaqVthNzs0e3I15rOf5NVus/aVH/2ftxvsMyjqf3Xm+3bfP4d9byzxFvtKz/J3e0ko3vT47Wz4fRxlmx3t93jv/ervyRjzuNP9mRe2xZ/R/cOP6hpPl+bfXZy/hp/79pu21bPf8Hkwv19GC+7nqpVpsbixhMPlu/fvzJaxv5xv5Z/CMnNu7/Wp3/2fz3yw7jv3PsTttdd/v8z+Kfeqb6f/bEg0+/+rFd+Z3V/9v11Ei+ppP+r9MD3M57BwAAAAAAAHtNISIOR1IorqYLhWJx5fmOY3GwUK5UaycvVeavTEX9s7JDMVBo3Ok+0vQ8xFj+PGwjP74mPxERRyPiu74D9XxxslKe2u3gAQAAAAAAAAAAAAAAAAAAYI841Obz/5k/+nb76IAd5yu/oXdt2v678U1PwJ7k/z/0Lu0fepf2D71L+4fepf1D79L+oXdp/9C7tH8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXL8tLjG5NZfurawvxM5dqpqbQ6U5ydnyxOVuauFqcrlelyWpyszG7298qVytWx8Zi/PlpLq7XR6sLixdnK/JXaxcuzpen0YjrwXKICAAAAAAAAAAAAAAAAAACAF0t1YXGmVC6ncy9sYjCPZOeK+DD2RqQ7GOCKLb28f69EIdE2sX8LlbuLnRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPFfAAAA//+t5DDW") lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02008c0001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 2.687588503s ago: executing program 6 (id=1476): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) connect$netlink(r1, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc) write$binfmt_script(r0, 0x0, 0x6f4000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt(r2, 0x4, 0x7c0, &(0x7f0000000400)="1dbfe112abdc74da9bea64f944acdb6779d47c0c4a1b80862596499f7f3b75d5c550a5bc8622da3bbb1812ce6db308d8b5d7737395f4649920d448444c1f6400fa506c1c241cecf461f765e63d2987dd75011735490f08a285057b861c5c3428a94ab5e1906cc1695b40a203165f034e7304e48bdd1c63d866dbd580fae996a8bac87790abeec8a501542e8ea6cf354ec54e6004c334f8ee21e936100426ac37e95dbf761d923d1a690b41346fdf72e7e578c091c7bff22ead5fe09be6486b56c8", 0xc1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r4 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) 2.687316743s ago: executing program 4 (id=1477): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xf, 0x0, 0x7ffc1ffb}]}) r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff8000/0x4000)=nil) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="98", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000084000000020000000600410005000000"], 0x20, 0x4048800}, 0x810) r2 = shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmdt(r2) 2.453997077s ago: executing program 5 (id=1482): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 2.341553143s ago: executing program 5 (id=1486): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$sock(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="e36d67483c14807cb9d12cb068cc5f360c1cf991b72b7b6350fc6a9866bd7258f4093fc7ad914ef79241e15228ba0749e211c2e3b24375da6f54c63a47d356b97abb9f2ae55cd272ab0040f6fb77f5aab8f702870149c2391c1ae46c3720a32aea80855066855d9b7751b8811656efd269bf013472f7f44b4e157d0ba0dcc447385189d79560edf3942eec5021750c1e81b08ad0bc7a", 0x96}, {&(0x7f0000000b00)="c8c36b7a61a26ccf8de1024f099d26d83831b93d261730a4c68ab28d5e8253a6d43e3e03240f18381a13dda4314029bb85a2985b25d9727592a11d79c84b92260b75a19c7985cc4ed23661717814f1e1895c02b8ef38ad10ce28361692181ad4beb602689c2dcb918f3502deb3a99c106c62112551f22f2267968e57308328e4ec3d4f0bc185c504acd92845cdccc83ab818b1dd6013", 0x96}, {&(0x7f0000000bc0)="fa8fd8e6ea2167a3ce152812c92b54117d73baa40c378b86071867b348cba1d7f471baa955c336323a4065d2b786ba9dd4c78d0f83efc3b4b740d9dcbfa82043fea6aae32bd7376d8973944fe83cd04b1cdcbae8d60e6942239550557226859d729235bfe0ac9d6b7191d47598d7db5aa1a8cbf09958a4e06ec95f5d997638c56e444e6388b4d4e4426dd62a12be8deba30234381054ea35cb67955fbf3072f46bbf66c5eea090b1591af8ba7b77db650f47a0ff6e14966bdc3bca8b5eeee7e8ed1e2df4e552813d697de1ba", 0xcc}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="d51b2b0da1fcee188423b7795456becf3a79f610d8de95eff8bc5ada3437947beb7055eb96a47e82673e422d5350d731ecd097f922567de43b39b4713ed1dfdcc7ba0a08c3b37e43fd9f297bd387b37eae138a67d2ebc8db8faa8aec429f6959453897484a90dff111747b3b2b4ff87cc0eb3dbb7de10ba5dc543531b5be7789bc16a523", 0x84}], 0x5, &(0x7f0000000340)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}, 0x4000000) connect$llc(r0, &(0x7f0000000300)={0x1a, 0x0, 0x1, 0x1, 0x7d, 0x4, @remote}, 0x10) 1.433033516s ago: executing program 5 (id=1491): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFoIUaGiNFk0oCW5MjBtjTFy5EP8LJbJlpW5cuHFlSIgaliaOudM7pdPeaenH9Fbm90uGnnvu3J5zpzxzzj1zzp0A2tZg9k8lYn9ETKeI/jS/uK8z8p2DC8978OeHZ7NHimr1td9TpDyv/vyU/+zLD+6JiB++T7GvY2W5M3PXLo5PTU1ezbeHZy9ND8/MXTt84dL4+cnzk5dHXxg9cfzY8RMjRzZ0XtcL8k7ffOe9/o/H3vz6y7/SyDe/jKU4GS/nT1x6HltlMAZrr0lauavvxFYXVqLOZdtpeQY7Vkf+9+uKiCeiPzqW/DX746NXSq0c0FLVFFEF2lRaR/xnvYVW1gXYTvV+QP3afvl1cKWUXgmwHe6fWhgAWBn/nQtjg9FTGxvY/SA1jPOkiNjYyFyjPRFx987YzXN3xm5Gi8bhgGLzNyLiyaL4T7X4H4ieGKjFf6Uh/rN+wZn8Z5b/6gZ7CsuHisU/bJ+F+O9ZNf6jSfy/tST+395EHfJLkeu9DfHf6+oDAAAAAAAA1un2qYh4vujz/8ri/J8omP/TFxEnt6D8wWXbKz//r9zbgmKAAvdPRbxUOP+3Uv/8faAjT/2nNh+gK527MDV5JCL+GxGHomtXtj2yShmHP9n3RbN9g/n8v/ojK/9uPhcwr8e9zl2Nx0yMD45v9ryBiPs3Ip4qnP+bFtv/VND+Z+8H049Yxr5nb51ptm/t+AdapfpVxMHC9v/hXSvS6vfnGK71B4brvYKVnv7g02+blb/R+HeLCdi8rP3fvXr8D6Sl9+uZWfXXzRdlHp3rrDY7YGP9/9nx7vR67a5C3Xne++Ozs1dHIrrT6Y4styF/dK1XAR4zPxVn1+OhHi9Z/B96ZvXxv6L+f29BsKc/GtcU1/3/775fm1VT/x/Kk8X/xLra//UnRm8NfNes/Edr/4/V2vpDeU7W/rfuFYF/j8/rYdrdmF8Qjp1Fu7a7vgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOKhExJ5IlaHFdKUyNBTRFxH/i92VqSszs8+du/Lu5YlsX+37/yv1b/rtX9hOte//r2Tph9uj0bh9NCL2RsRnHb217aGzV6Ymyj55AAAAAAAAAAAAAAAAAAAA2CH6mqz/z/zWUXbtgJbrLLsCQGkK4v/HMuoBbD/tP7SvDcV/mt/6igDbTvsP7Uv8Q/sS/9C+xD+0L/EP7WrZOH4qqx4AAAAAAMAW2Xvg9s8pIuZf7K09Mt35vq5Sawa0WqXsCgClcYsfaF+m/kH7co0PrDXrt6fpQZuZLzx9dhMHAwAAAAAAAAAAAEDbObjf+n9oV9b/Q/uy/h/aV339/4GS6wFsP9f4QKyxkr9w/f+aRwEAAAAAAAAAAAAAW2mmuitiamry6szctYvjLUt0R0SLi9h04o2dUY2iRG+LfnO1Wr2e/S8o/QQfj0R9KvxOqc+yRH2t36MdVd57EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OifAAAA//8sxicA") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000100000000000090000000000001000000000000000"], 0x24, 0x3) 1.422816396s ago: executing program 4 (id=1493): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000008, &(0x7f0000000840)={[{@jqfmt_vfsv1}, {@nouser_xattr}, {@bh}], [{@obj_user={'obj_user', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@subj_role={'subj_role', 0x3d, '}%,]NZ[$%*/-T)'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$binfmt_elf32(r0, &(0x7f0000000840)=ANY=[], 0x349) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023892) r4 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1803, 0x10000, 0xfffffffe, 0x100002cf}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x17) r7 = socket(0x9, 0x3, 0xfffffffe) write(r7, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r7, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001200)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dhcpd_unit_file_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@multicast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'batadv_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@local, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 1.083862516s ago: executing program 1 (id=1495): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440100001000130722bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fea033688e345774a6000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000150000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000500ac000000000000004c001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000008002900"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.01707868s ago: executing program 5 (id=1496): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000340)=0x10, 0x4) bind$xdp(r3, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 946.924984ms ago: executing program 1 (id=1497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000001f40000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 946.691784ms ago: executing program 2 (id=1498): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 942.061314ms ago: executing program 6 (id=1499): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) brk(0x7ff877c47fff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000dc0)=0x1c, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0xffffffffffffff22, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xe2e}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 833.284021ms ago: executing program 6 (id=1500): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003d00)=[{{&(0x7f0000000440)={0xa, 0x4e22, 0x0, @loopback, 0x7}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000480)='~', 0x1}], 0x1}}], 0x1, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000041c0), 0x4) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="9f04020218000000008100000002"], 0x0, 0x1a, 0x0, 0x1, 0x6}, 0x28) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 832.972001ms ago: executing program 5 (id=1501): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$sock(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="e36d67483c14807cb9d12cb068cc5f360c1cf991b72b7b6350fc6a9866bd7258f4093fc7ad914ef79241e15228ba0749e211c2e3b24375da6f54c63a47d356b97abb9f2ae55cd272ab0040f6fb77f5aab8f702870149c2391c1ae46c3720a32aea80855066855d9b7751b8811656efd269bf013472f7f44b4e157d0ba0dcc447385189d79560edf3942eec5021750c1e81b08ad0bc7a", 0x96}, {&(0x7f0000000b00)="c8c36b7a61a26ccf8de1024f099d26d83831b93d261730a4c68ab28d5e8253a6d43e3e03240f18381a13dda4314029bb85a2985b25d9727592a11d79c84b92260b75a19c7985cc4ed23661717814f1e1895c02b8ef38ad10ce28361692181ad4beb602689c2dcb918f3502deb3a99c106c62112551f22f2267968e57308328e4ec3d4f0bc185c504acd92845cdccc83ab818b1dd6013", 0x96}, {&(0x7f0000000bc0)="fa8fd8e6ea2167a3ce152812c92b54117d73baa40c378b86071867b348cba1d7f471baa955c336323a4065d2b786ba9dd4c78d0f83efc3b4b740d9dcbfa82043fea6aae32bd7376d8973944fe83cd04b1cdcbae8d60e6942239550557226859d729235bfe0ac9d6b7191d47598d7db5aa1a8cbf09958a4e06ec95f5d997638c56e444e6388b4d4e4426dd62a12be8deba30234381054ea35cb67955fbf3072f46bbf66c5eea090b1591af8ba7b77db650f47a0ff6e14966bdc3bca8b5eeee7e8ed1e2df4e552813d697de1ba", 0xcc}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="d51b2b0da1fcee188423b7795456becf3a79f610d8de95eff8bc5ada3437947beb7055eb96a47e82673e422d5350d731ecd097f922567de43b39b4713ed1dfdcc7ba0a08c3b37e43fd9f297bd387b37eae138a67d2ebc8db8faa8aec429f6959453897484a90dff111747b3b2b4ff87cc0eb3dbb7de10ba5dc543531b5be7789bc16a523", 0x84}], 0x5, &(0x7f0000000340)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}, 0x4000000) connect$llc(r0, &(0x7f0000000300)={0x1a, 0x0, 0x1, 0x1, 0x7d, 0x4, @remote}, 0x10) 818.898462ms ago: executing program 6 (id=1502): r0 = socket(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e23, 0x3, @mcast1, 0xff56}, 0x18) (async) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0xa4c42, 0x108) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x5c, 0x0, 0xfffffffffe000001}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = dup2(r3, r3) (async) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async) recvmsg(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8915, 0x0) (async) dup2(r6, r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000c40)={0x9, 0x0, 0x0, 0x720}, 0x10) (async) write(r7, &(0x7f0000000540)="340000001e005f0214fffffffffffff80700000001000000000000000500090002000000717db28bce0ba1bc6f0b86caac719999", 0x34) recvfrom$inet(r7, &(0x7f0000000040)=""/119, 0x77, 0x2, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) connect$can_bcm(r4, &(0x7f00000002c0), 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000900000000000000fdffffff850000003600000018010000756c6c2700000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000140)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9}, 0x50) 695.206169ms ago: executing program 1 (id=1503): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100"], 0x84}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x14) 694.867739ms ago: executing program 2 (id=1504): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x81, 0xfffffffe, 0x63db}) (async) sendmmsg$inet6(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="9e", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@hopopts={{0x18, 0x29, 0x36, {0x1d}}}], 0x18}}], 0x2, 0x4404c880) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240400d0}, 0x0) 679.75869ms ago: executing program 2 (id=1505): socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000480), 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000f40000000000000000711021000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r3, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) close(0x3) (async) close(0x3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xffff0012}]}, 0x10) 676.80036ms ago: executing program 1 (id=1506): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1d, 0x2, 0x6) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="b2b2fc1c8b2da6ed376b7e4c9718115112b3c6b250a8b6a8c4cef0583ea7f7d8", 0x20}, {&(0x7f00000001c0)="32e72b13ee1994ab9221a901e2e98a64281639cb4df651415a93377563ec279dca9cc43d6c0128b432977f174a4732614017afb26884943488dceec8d721d0dcc6ce190de1b5ec8cbeb8e5ac88741ceb4c91083dc1fa2a263816fbfb0d18c16d9c60f7e2cad81fc68bad", 0x6a}], 0x2, &(0x7f0000000480)=[{0x90, 0x103, 0x1, "4c581bd4c1b98901bd24a3b3806f218f94dcb48a7e5925c7ac37b295e4f6d6532a1cc892f976e8c4cf04a16d86ffd4897fc621acf767476b334aa24fca55eb823528cce6e4df041fc7f8f7dd4b9aa9e2f9aa3629e6d54b3c17a5fbc370711fac8b129edd26fe14c3476d52d2b790f45852b912b4960899d65f15616688e6ffae"}, {0x100, 0x107, 0xffffffff, "be33e8c566780a11adec0e657cc6cad613b6dafdb1d754cada3d4c678335487be9df4a79713e07bd7728ebf019833597aedb8a0e28bdbb3af9a5733646cecc38c4316a8850cb1d0e27b74183afc26622d9cb5f86e4faceff9dc5635d8b46291ce64e8625d06307c8a8da973c523ba5c44f614237689313fd5819b8a1893d8e19e36b78e78477a54acf538b9617d0e4a3db926adbac86566d256ff817485c87e8beb474b9d574f9c17ddb8855e815d1dc45f9b1a0326cb3676fdf6c8e698e9845c16cbe4c69e163fde347706adecd5c8cad88b935c60c67aba2807710da6666d19232b9ce994d2bd944ae77"}, {0x110, 0x113, 0xff, "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"}], 0x2a0}, 0x44010) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendto$rxrpc(r2, &(0x7f0000000100)="65fe", 0x2, 0x40840, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0xc4, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_LABELS_MASK={0x8, 0x17, [0xd]}, @CTA_NAT_DST={0x4}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x854}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x82}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_PROTOINFO={0x60, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x5c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xf}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xff}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xea}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xf}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x91}, 0x8000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 614.788754ms ago: executing program 2 (id=1507): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") socket(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) 519.845819ms ago: executing program 6 (id=1508): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0x400000001, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffff8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(0x0, 0x0, 0x400000001, 0xffffffffffffffff, 0x0) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffff8) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x2042, 0x0) (async) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) (async) 514.762429ms ago: executing program 1 (id=1509): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440100001000130722bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fea033688e345774a6000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000200000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000500ac000000000000004c001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000008002900"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 476.574292ms ago: executing program 1 (id=1510): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) connect$netlink(r1, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc) write$binfmt_script(r0, 0x0, 0x6f4000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt(r2, 0x4, 0x7c0, &(0x7f0000000400)="1dbfe112abdc74da9bea64f944acdb6779d47c0c4a1b80862596499f7f3b75d5c550a5bc8622da3bbb1812ce6db308d8b5d7737395f4649920d448444c1f6400fa506c1c241cecf461f765e63d2987dd75011735490f08a285057b861c5c3428a94ab5e1906cc1695b40a203165f034e7304e48bdd1c63d866dbd580fae996a8bac87790abeec8a501542e8ea6cf354ec54e6004c334f8ee21e936100426ac37e95dbf761d923d1a690b41346fdf72e7e578c091c7bff22ead5fe09be6486b56c8", 0xc1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r4 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) 363.104669ms ago: executing program 6 (id=1511): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x576, &(0x7f0000000580)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001114410029bd70000000000008004a0000000000080001"], 0x30}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)=""/185, 0xb9}, {0x0}, {&(0x7f0000000300)=""/88, 0x58}], 0x3}, 0x2}], 0x2, 0x22, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c100, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000180)=0x8, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000004) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='loginuid\x00') read$rfkill(r6, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000300), &(0x7f0000000340)={0x0, 0xfb, 0x1f, 0x0, 0x9, "bafd4337ef67e589a0a2c62baad514c9", "827aed2f5131cab111d1"}, 0x1f, 0x2) 352.210189ms ago: executing program 2 (id=1512): r0 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000014c0)=ANY=[@ANYBLOB], 0x180}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000180000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073"], 0xfc}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, 0x0, 0x4000080) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x8, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) 268.950724ms ago: executing program 4 (id=1513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000002000100", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 95.130474ms ago: executing program 2 (id=1514): r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r2, @ANYBLOB="029000000080040008000a00", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000340)=0x4, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f0000000040)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c0000001000010404fbffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="00200000421005002800128008000100767469001c000280080002000500000008000600"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0x10000008ebc, 0x0) splice(r9, 0x0, r12, 0x0, 0x25a5, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r13, {0x1}}, './file0\x00'}) getsockname$packet(r14, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r13) 50.718997ms ago: executing program 4 (id=1515): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000300)={0x2, 0x8, '\x00', [@generic={0xd, 0x44, "23ff0b9ec4997f9120f14bd1437b1863cf939e593f4b6e6a85e1deef98d541c6c700950012a39f24cd4baf14f323bfb89d47f8c9104217d38448958e033dd72ffb32682a"}]}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xc69c}, 0x14, 0x0, 0x1, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='-6', 0x2}], 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000001c0)=""/145, &(0x7f0000000280)=0x91) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x20, 0x7, 0x8, 0xf, {{0xd, 0x4, 0x3, 0x35, 0x34, 0x65, 0x0, 0x6, 0x2f, 0x0, @local, @private=0xa010102, {[@rr={0x7, 0x13, 0xcf, [@local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, @loopback]}, @rr={0x7, 0xb, 0x2b, [@broadcast, @local]}]}}}}}) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x48) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x8f76e7cb70261435, 0x3, 0x1, 0x3, 0x1444, r4, 0x4, '\x00', r5, r6, 0x4, 0x0, 0x5}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x700, 0x3, 0x80, {{0x12, 0x4, 0x3, 0x1d, 0x48, 0x64, 0x0, 0x1c, 0x4, 0x0, @remote, @empty, {[@lsrr={0x83, 0xf, 0x59, [@loopback, @loopback, @broadcast]}, @generic={0x89, 0xb, "b41eebaaa1474765bb"}, @ssrr={0x89, 0x17, 0x65, [@multicast1, @multicast1, @multicast1, @empty, @remote]}]}}}}}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="88000000", @ANYRES16, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 0s ago: executing program 5 (id=1516): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) r3 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x2, 0xfd, 0xfffff000}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) pwritev2(r0, &(0x7f0000000780)=[{&(0x7f0000000180)="a6b3f7ea2ef8b195bbc749e4780dcb9cd38b176b1e58b31f873ebd50f425b25c943c09cf40822d8be7748d685f2221acbb8bd45563d3fe775bcaa0084e122b53133759b14b8e0a46e0154ccd2c89bf8481604a50a30ee1d57786a5bb91750cb9790a13f4b02abb5a162b7544c5a8b7d1a1fb1f028885ff3fc2ddff3ab8ff249d1c0ad179cdbcd62292c2f13f520d0e7f576d4ff4d488c245a1da9e6b7c923d6aa7e44586d49cc789ce143f680085cee566820c050c330b5688bfa11cf8486ada67f6dbf126b939224a2d68233a", 0xcd}, {&(0x7f0000000280)="1e08d9ec59d46c3eeb0bc076da0401549ddfde68eff77535e1276285675ea62bbddea65051b9f29193185bc3fe42b4fad1a1551e009d84ec7764e1fa89eb1130216536738d9e7e053881032eb8d34813de6fe8db5d25a07ad49e5739431591e8d25a1022e446e00b514e07672a751d193c6923f4bd3595556762e8d84d25472e1ae8606371e5c8f5086268478aab7d5c117d1c2e302edd28cdd1b3bf7218fecce41c2acd0f71d772b044022bb1a954f26aac8cfa5fd29148eff4ef71fd93dccaba5d41fbc6dde97047814af7a122992158834e8b1b0f32cdbde23283b32920259b459b1f7098ca609374a169ef8fad994e0cf84fc3", 0xf5}, {&(0x7f0000000380)="b002f98b9df9364b9dd76a6ec2626364b8da75dbe66028990b3bb61d2e29fca0ff6a698db6a6745ca90f751fb57deba3e69eea75ce19196d23939d198a74139a193d5c5e42b7f21d4c725d90aea9f6259d8f8ac3dab28ddeaded78d3df7b0854fbd35c78b32305ad2e38b50e20ff831fda21e096af0fe72db1abb575cbbee2e6d53249bb0a6909403d04c0ad9e8793b4414d354679fbf2ede111d38f5c227a84bc5146e154554851e729e93a86e34d65678a21a8e425749309", 0xb9}, {&(0x7f00000000c0)="4f3dfdbfe63dac624dd3560f7e3f02efce5e4aec138ffc3d8329e6ef02130e8c89d123c986944e778060a71b82a3d3f199fce4a954629ec4f9bfe39a2faf3a4c492cf2e18b08b96612a7604f946e0f80d5c343bc97b03cb28bc29752556e50372a9984f526a919c8e9f4df", 0x6b}, {&(0x7f0000000440)="2f8ba6f06e9e7a9dd5e620f4111c40ee9649bc7c06bab82607ebfa9dfe80f02f98a94c96cb9c59bb5a54a6ac9259132864844ae8cb415306b3c56fd8a8ace686dad1a74bb9f360bb4a377db578a28c0da0a506953565463da747f4", 0x5b}, {&(0x7f00000004c0)="0c57fc072ebd5076fe31f547fdbf64dbe19223c14a22730b192247be318b2b14521884602eda28b305c080feb49d6926c1cf044660275e2103bec465bd760d47ee1a10d0b130484e0eeda5d6d76aed9278a233bf2464b3b14ffb684a62cb5701d862767f7251c72c2beedbd823febcb8989ed1031f7724b27a082210ddf88cc7b65a7c49bd219ea2258e346b0f6799cafc21696e53660c32b086213a45678c51b0976a1715", 0xa5}, {&(0x7f0000000580)="7671a0bbea8215370355e64a9ad8be2c81ad2189104019ac61dc0e07e286dd992e5990f77aa8374d8ce87f5cad45507b9e5247f74edcf82f317e9627e6ad4d831cc9e199259771b4e79da308fba4ecb85dca4900ddf11121b2022c5622f1391b0331b275610dc35e39aa71877c42576ab35b9038ffefdcb04e3e23d16a4148119ba4e62171bf69d802cbec63dc362f238762393422b94a985f77de2545e3463943e4547374a5a3bff3a48fdc8f94161e8058a9af40e1aa2a97394fd146b818f5ff8442e24555b93912abf2d2", 0xcc}, {&(0x7f0000000680)="847d72d0302e6c50a4e182d958e76ddc8b3d9cb00736528c96b6a3c6cc87bae185e0d2f0813e6676180afe1038cd9d5320c2adc3a5632c568f65be24f3e838dd9060c5e9211b919d98dad64780467e82128e1f721b49f3db495c9c285733d56769a2e7c0a29edaf7ccbc9c695420f102e72cdb04d2b9e52f4d9e82b6c1c06ba2742c3691ca8d0417780f17284af96a42675633b069f5ef0d5210484ce8d228abf1420b1cad135f8db48dd254bd1d47deb1260db036e59149f0d8b2c36dba35839c174e6955f91a6b505fdc9d93af95298fdfd199b6", 0xd5}], 0x8, 0x6, 0x80000001, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) fsopen(0x0, 0x0) (async) fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r4, 0x0, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x2, 0xfd, 0xfffff000}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) (async) pwritev2(r0, &(0x7f0000000780)=[{&(0x7f0000000180)="a6b3f7ea2ef8b195bbc749e4780dcb9cd38b176b1e58b31f873ebd50f425b25c943c09cf40822d8be7748d685f2221acbb8bd45563d3fe775bcaa0084e122b53133759b14b8e0a46e0154ccd2c89bf8481604a50a30ee1d57786a5bb91750cb9790a13f4b02abb5a162b7544c5a8b7d1a1fb1f028885ff3fc2ddff3ab8ff249d1c0ad179cdbcd62292c2f13f520d0e7f576d4ff4d488c245a1da9e6b7c923d6aa7e44586d49cc789ce143f680085cee566820c050c330b5688bfa11cf8486ada67f6dbf126b939224a2d68233a", 0xcd}, {&(0x7f0000000280)="1e08d9ec59d46c3eeb0bc076da0401549ddfde68eff77535e1276285675ea62bbddea65051b9f29193185bc3fe42b4fad1a1551e009d84ec7764e1fa89eb1130216536738d9e7e053881032eb8d34813de6fe8db5d25a07ad49e5739431591e8d25a1022e446e00b514e07672a751d193c6923f4bd3595556762e8d84d25472e1ae8606371e5c8f5086268478aab7d5c117d1c2e302edd28cdd1b3bf7218fecce41c2acd0f71d772b044022bb1a954f26aac8cfa5fd29148eff4ef71fd93dccaba5d41fbc6dde97047814af7a122992158834e8b1b0f32cdbde23283b32920259b459b1f7098ca609374a169ef8fad994e0cf84fc3", 0xf5}, {&(0x7f0000000380)="b002f98b9df9364b9dd76a6ec2626364b8da75dbe66028990b3bb61d2e29fca0ff6a698db6a6745ca90f751fb57deba3e69eea75ce19196d23939d198a74139a193d5c5e42b7f21d4c725d90aea9f6259d8f8ac3dab28ddeaded78d3df7b0854fbd35c78b32305ad2e38b50e20ff831fda21e096af0fe72db1abb575cbbee2e6d53249bb0a6909403d04c0ad9e8793b4414d354679fbf2ede111d38f5c227a84bc5146e154554851e729e93a86e34d65678a21a8e425749309", 0xb9}, {&(0x7f00000000c0)="4f3dfdbfe63dac624dd3560f7e3f02efce5e4aec138ffc3d8329e6ef02130e8c89d123c986944e778060a71b82a3d3f199fce4a954629ec4f9bfe39a2faf3a4c492cf2e18b08b96612a7604f946e0f80d5c343bc97b03cb28bc29752556e50372a9984f526a919c8e9f4df", 0x6b}, {&(0x7f0000000440)="2f8ba6f06e9e7a9dd5e620f4111c40ee9649bc7c06bab82607ebfa9dfe80f02f98a94c96cb9c59bb5a54a6ac9259132864844ae8cb415306b3c56fd8a8ace686dad1a74bb9f360bb4a377db578a28c0da0a506953565463da747f4", 0x5b}, {&(0x7f00000004c0)="0c57fc072ebd5076fe31f547fdbf64dbe19223c14a22730b192247be318b2b14521884602eda28b305c080feb49d6926c1cf044660275e2103bec465bd760d47ee1a10d0b130484e0eeda5d6d76aed9278a233bf2464b3b14ffb684a62cb5701d862767f7251c72c2beedbd823febcb8989ed1031f7724b27a082210ddf88cc7b65a7c49bd219ea2258e346b0f6799cafc21696e53660c32b086213a45678c51b0976a1715", 0xa5}, {&(0x7f0000000580)="7671a0bbea8215370355e64a9ad8be2c81ad2189104019ac61dc0e07e286dd992e5990f77aa8374d8ce87f5cad45507b9e5247f74edcf82f317e9627e6ad4d831cc9e199259771b4e79da308fba4ecb85dca4900ddf11121b2022c5622f1391b0331b275610dc35e39aa71877c42576ab35b9038ffefdcb04e3e23d16a4148119ba4e62171bf69d802cbec63dc362f238762393422b94a985f77de2545e3463943e4547374a5a3bff3a48fdc8f94161e8058a9af40e1aa2a97394fd146b818f5ff8442e24555b93912abf2d2", 0xcc}, {&(0x7f0000000680)="847d72d0302e6c50a4e182d958e76ddc8b3d9cb00736528c96b6a3c6cc87bae185e0d2f0813e6676180afe1038cd9d5320c2adc3a5632c568f65be24f3e838dd9060c5e9211b919d98dad64780467e82128e1f721b49f3db495c9c285733d56769a2e7c0a29edaf7ccbc9c695420f102e72cdb04d2b9e52f4d9e82b6c1c06ba2742c3691ca8d0417780f17284af96a42675633b069f5ef0d5210484ce8d228abf1420b1cad135f8db48dd254bd1d47deb1260db036e59149f0d8b2c36dba35839c174e6955f91a6b505fdc9d93af95298fdfd199b6", 0xd5}], 0x8, 0x6, 0x80000001, 0x14) (async) kernel console output (not intermixed with test programs): 80.598739][ T6623] R10: 0000000000000000 R11: 00005555676ae808 R12: 0000000000013af8 [ 80.598826][ T6623] R13: 00007fc3d57f609c R14: 000000000001383c R15: 00007ffd2e5de5c0 [ 80.598843][ T6623] [ 80.881585][ T6623] memory: usage 307200kB, limit 307200kB, failcnt 870 [ 80.889227][ T6623] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 80.897901][ T6623] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 80.906085][ T6623] Memory cgroup stats for /syz5: [ 80.906505][ T6623] cache 0 [ 80.915044][ T6623] rss 8192 [ 80.915056][ T6623] shmem 0 [ 80.915132][ T6623] mapped_file 0 [ 80.915140][ T6623] dirty 0 [ 80.915147][ T6623] writeback 8192 [ 80.915155][ T6623] workingset_refault_anon 132 [ 80.915163][ T6623] workingset_refault_file 0 [ 80.915171][ T6623] swap 184320 [ 80.915178][ T6623] swapcached 24576 [ 80.915186][ T6623] pgpgin 44978 [ 80.915193][ T6623] pgpgout 44971 [ 80.915200][ T6623] pgfault 43239 [ 80.915207][ T6623] pgmajfault 63 [ 80.915233][ T6623] inactive_anon 4096 [ 80.915242][ T6623] active_anon 0 [ 80.915250][ T6623] inactive_file 4096 [ 80.915259][ T6623] active_file 0 [ 80.915268][ T6623] unevictable 0 [ 80.915277][ T6623] hierarchical_memory_limit 314572800 [ 80.915287][ T6623] hierarchical_memsw_limit 9223372036854771712 [ 80.915298][ T6623] total_cache 0 [ 80.915307][ T6623] total_rss 8192 [ 80.915315][ T6623] total_shmem 0 [ 80.915324][ T6623] total_mapped_file 0 [ 80.915365][ T6623] total_dirty 0 [ 80.915374][ T6623] total_writeback 8192 [ 80.915383][ T6623] total_workingset_refault_anon 132 [ 80.915455][ T6623] total_workingset_refault_file 0 [ 80.915525][ T6623] total_swap 184320 [ 80.915542][ T6623] total_swapcached 24576 [ 80.915550][ T6623] total_pgpgin 44978 [ 80.915558][ T6623] total_pgpgout 44971 [ 80.915608][ T6623] total_pgfault 43239 [ 80.915615][ T6623] total_pgmajfault 63 [ 80.915624][ T6623] total_inactive_anon 4096 [ 80.915634][ T6623] total_active_anon 0 [ 80.915643][ T6623] total_inactive_file 4096 [ 80.915653][ T6623] total_active_file 0 [ 80.915663][ T6623] total_unevictable 0 [ 80.915673][ T6623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.972,pid=6623,uid=0 [ 80.915824][ T6623] Memory cgroup out of memory: Killed process 6623 (syz.5.972) total-vm:94132kB, anon-rss:1204kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 80.993283][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.005393][ T3295] udevd[3295]: symlink '../../loop3' '/dev/disk/by-diskseq/365.tmp-b7:3' failed: Read-only file system [ 81.034482][ T3295] udevd[3295]: symlink '../../loop3' '/dev/disk/by-diskseq/365.tmp-b7:3' failed: Read-only file system [ 81.052815][ T3295] udevd[3295]: symlink '../../loop3' '/dev/disk/by-diskseq/365.tmp-b7:3' failed: Read-only file system [ 81.068633][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 81.089030][ T3295] udevd[3295]: symlink '../../loop5' '/dev/disk/by-diskseq/362.tmp-b7:5' failed: Read-only file system [ 81.146594][ T3312] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 81.146682][ T3312] CPU: 0 UID: 0 PID: 3312 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 81.146786][ T3312] Tainted: [W]=WARN [ 81.146794][ T3312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.146809][ T3312] Call Trace: [ 81.146815][ T3312] [ 81.146825][ T3312] __dump_stack+0x1d/0x30 [ 81.146851][ T3312] dump_stack_lvl+0x95/0xd0 [ 81.146928][ T3312] dump_stack+0x15/0x1b [ 81.146952][ T3312] dump_header+0x80/0x240 [ 81.146977][ T3312] oom_kill_process+0x295/0x350 [ 81.147006][ T3312] out_of_memory+0x97d/0xb80 [ 81.147104][ T3312] try_charge_memcg+0x62e/0xa10 [ 81.147134][ T3312] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 81.147173][ T3312] __read_swap_cache_async+0x17b/0x2d0 [ 81.147213][ T3312] swap_cluster_readahead+0x362/0x3c0 [ 81.147393][ T3312] swapin_readahead+0xde/0x840 [ 81.147510][ T3312] ? __perf_event_task_sched_in+0xa65/0xad0 [ 81.147540][ T3312] ? __rcu_read_unlock+0x4e/0x70 [ 81.147613][ T3312] ? swap_cache_get_folio+0x26f/0x280 [ 81.147688][ T3312] do_swap_page+0x59b/0x2a50 [ 81.147723][ T3312] ? finish_task_switch+0x79/0x280 [ 81.147756][ T3312] ? __schedule+0x82d/0xc90 [ 81.147779][ T3312] ? __rcu_read_lock+0x36/0x50 [ 81.147933][ T3312] ? __pfx_default_wake_function+0x10/0x10 [ 81.147969][ T3312] handle_mm_fault+0xb40/0x3030 [ 81.148042][ T3312] ? vma_start_read+0x1c7/0x2c0 [ 81.148075][ T3312] do_user_addr_fault+0x62f/0x1050 [ 81.148175][ T3312] exc_page_fault+0x62/0xa0 [ 81.148204][ T3312] asm_exc_page_fault+0x26/0x30 [ 81.148227][ T3312] RIP: 0033:0x7f31c71560d7 [ 81.148247][ T3312] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 81.148347][ T3312] RSP: 002b:00007ffe4dc212f0 EFLAGS: 00010202 [ 81.148367][ T3312] RAX: 0000000000000000 RBX: 000055557a936500 RCX: 00007f31c71560d7 [ 81.148390][ T3312] RDX: 00007ffe4dc21330 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.148405][ T3312] RBP: 00007ffe4dc2139c R08: 0000000000000000 R09: 0000000000000000 [ 81.148419][ T3312] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 81.148433][ T3312] R13: 00000000000927c0 R14: 0000000000013bff R15: 00007ffe4dc213f0 [ 81.148468][ T3312] [ 81.148578][ T3312] memory: usage 307200kB, limit 307200kB, failcnt 1122 [ 81.148617][ T3312] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 81.148634][ T3312] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 81.148648][ T3312] Memory cgroup stats for /syz4: [ 81.166118][ T3312] cache 4096 [ 81.166133][ T3312] rss 0 [ 81.166142][ T3312] shmem 0 [ 81.166150][ T3312] mapped_file 0 [ 81.166202][ T3312] dirty 0 [ 81.166210][ T3312] writeback 0 [ 81.166219][ T3312] workingset_refault_anon 204 [ 81.166228][ T3312] workingset_refault_file 2014 [ 81.166238][ T3312] swap 389120 [ 81.166245][ T3312] swapcached 0 [ 81.166253][ T3312] pgpgin 53611 [ 81.166261][ T3312] pgpgout 53610 [ 81.166270][ T3312] pgfault 69019 [ 81.166279][ T3312] pgmajfault 392 [ 81.166346][ T3312] inactive_anon 0 [ 81.166355][ T3312] active_anon 0 [ 81.166363][ T3312] inactive_file 4096 [ 81.166371][ T3312] active_file 0 [ 81.166380][ T3312] unevictable 0 [ 81.166388][ T3312] hierarchical_memory_limit 314572800 [ 81.166399][ T3312] hierarchical_memsw_limit 9223372036854771712 [ 81.166408][ T3312] total_cache 4096 [ 81.166418][ T3312] total_rss 0 [ 81.166425][ T3312] total_shmem 0 [ 81.166434][ T3312] total_mapped_file 0 [ 81.166506][ T3312] total_dirty 0 [ 81.166515][ T3312] total_writeback 0 [ 81.166525][ T3312] total_workingset_refault_anon 204 [ 81.166534][ T3312] total_workingset_refault_file 2014 [ 81.166544][ T3312] total_swap 389120 [ 81.166553][ T3312] total_swapcached 0 [ 81.166615][ T3312] total_pgpgin 53611 [ 81.166624][ T3312] total_pgpgout 53610 [ 81.166633][ T3312] total_pgfault 69019 [ 81.166642][ T3312] total_pgmajfault 392 [ 81.166651][ T3312] total_inactive_anon 0 [ 81.166661][ T3312] total_active_anon 0 [ 81.166669][ T3312] total_inactive_file 4096 [ 81.166677][ T3312] total_active_file 0 [ 81.166685][ T3312] total_unevictable 0 [ 81.166695][ T3312] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.973,pid=6627,uid=0 [ 81.166802][ T3312] Memory cgroup out of memory: Killed process 6627 (syz.4.973) total-vm:96316kB, anon-rss:1204kB, file-rss:22296kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 81.188405][ T3295] udevd[3295]: symlink '../../loop5' '/dev/disk/by-diskseq/362.tmp-b7:5' failed: Read-only file system [ 81.458856][ T6662] FAULT_INJECTION: forcing a failure. [ 81.458856][ T6662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.048916][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.984'. [ 82.052300][ T6662] CPU: 0 UID: 0 PID: 6662 Comm: syz.3.981 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 82.052340][ T6662] Tainted: [W]=WARN [ 82.052349][ T6662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.052362][ T6662] Call Trace: [ 82.052370][ T6662] [ 82.052379][ T6662] __dump_stack+0x1d/0x30 [ 82.052436][ T6662] dump_stack_lvl+0x95/0xd0 [ 82.052510][ T6662] dump_stack+0x15/0x1b [ 82.052535][ T6662] should_fail_ex+0x263/0x280 [ 82.052593][ T6662] should_fail+0xb/0x20 [ 82.052623][ T6662] should_fail_usercopy+0x1a/0x20 [ 82.052732][ T6662] _copy_from_user+0x1c/0xb0 [ 82.052755][ T6662] ____sys_sendmsg+0x1e2/0x600 [ 82.052779][ T6662] ___sys_sendmsg+0x195/0x1e0 [ 82.052867][ T6662] __x64_sys_sendmsg+0xd4/0x160 [ 82.052891][ T6662] x64_sys_call+0x17ba/0x3000 [ 82.052918][ T6662] do_syscall_64+0xc0/0x2a0 [ 82.052949][ T6662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.052986][ T6662] RIP: 0033:0x7f22f13caeb9 [ 82.053005][ T6662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.053026][ T6662] RSP: 002b:00007f22efe06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.053102][ T6662] RAX: ffffffffffffffda RBX: 00007f22f1646090 RCX: 00007f22f13caeb9 [ 82.053192][ T6662] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000004 [ 82.053238][ T6662] RBP: 00007f22efe06090 R08: 0000000000000000 R09: 0000000000000000 [ 82.053253][ T6662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.053329][ T6662] R13: 00007f22f1646128 R14: 00007f22f1646090 R15: 00007ffd96d56d38 [ 82.053350][ T6662] [ 82.060343][ T3295] udevd[3295]: symlink '../../loop5' '/dev/disk/by-diskseq/362.tmp-b7:5' failed: Read-only file system [ 82.083690][ T6664] netlink: 48 bytes leftover after parsing attributes in process `syz.5.984'. [ 82.147471][ T3295] udevd[3295]: symlink '../../loop3' '/dev/disk/by-diskseq/366.tmp-b7:3' failed: Read-only file system [ 82.270140][ T4266] udevd[4266]: symlink '../../loop2' '/dev/disk/by-diskseq/364.tmp-b7:2' failed: Read-only file system [ 82.461395][ T6667] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 82.511131][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-diskseq/361.tmp-b7:4' failed: Read-only file system [ 82.520261][ T4266] udevd[4266]: symlink '../../loop5' '/dev/disk/by-diskseq/362.tmp-b7:5' failed: Read-only file system [ 82.540440][ T6679] syzkaller0: entered promiscuous mode [ 82.558812][ T6679] syzkaller0: entered allmulticast mode [ 82.576729][ T6681] loop3: detected capacity change from 0 to 512 [ 82.703622][ T6692] netlink: 'syz.3.992': attribute type 4 has an invalid length. [ 82.711682][ T6692] netlink: 152 bytes leftover after parsing attributes in process `syz.3.992'. [ 82.726208][ T6692] .`: renamed from bond0 (while UP) [ 82.786208][ T6692] bond0: Unable to set up delay as MII monitoring is disabled [ 82.796381][ T6692] bond0 (unregistering): Released all slaves [ 82.821493][ T6701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6701 comm=syz.3.992 [ 82.848057][ T6700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6700 comm=syz.1.994 [ 83.126500][ T6708] netlink: 68 bytes leftover after parsing attributes in process `syz.3.997'. [ 83.532440][ T6725] syzkaller0: entered promiscuous mode [ 83.538438][ T6725] syzkaller0: entered allmulticast mode [ 83.671177][ T6734] loop1: detected capacity change from 0 to 512 [ 83.694214][ T6734] ext4: Unknown parameter 'nouser_xattr' [ 83.706153][ T6736] loop5: detected capacity change from 0 to 512 [ 83.747125][ T6736] ext4: Unknown parameter 'nouser_xattr' [ 83.751168][ T6738] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1008'. [ 83.775166][ T29] audit: type=1400 audit(1769699404.834:919): avc: denied { ioctl } for pid=6737 comm="syz.2.1008" path="socket:[15858]" dev="sockfs" ino=15858 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.802139][ T29] audit: type=1400 audit(1769699404.844:920): avc: denied { setopt } for pid=6737 comm="syz.2.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.831707][ T6742] x_tables: unsorted underflow at hook 1 [ 83.840593][ T6742] loop1: detected capacity change from 0 to 256 [ 83.860923][ T6741] x_tables: unsorted underflow at hook 1 [ 83.881945][ T6739] delete_channel: no stack [ 84.017159][ T29] audit: type=1400 audit(1769699405.094:921): avc: denied { create } for pid=6751 comm="syz.2.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 84.063519][ T29] audit: type=1400 audit(1769699405.144:922): avc: denied { ioctl } for pid=6751 comm="syz.2.1012" path="socket:[15879]" dev="sockfs" ino=15879 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.118069][ T6759] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1013'. [ 84.164809][ T6761] loop2: detected capacity change from 0 to 512 [ 84.174239][ T6761] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.190446][ T6761] EXT4-fs (loop2): 1 truncate cleaned up [ 84.196675][ T6761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.238746][ T6761] bond1: option min_links: invalid value (18446744073709551601) [ 84.246954][ T6761] bond1: option min_links: allowed values 0 - 2147483647 [ 84.256524][ T6761] bond1 (unregistering): Released all slaves [ 84.318847][ T29] audit: type=1400 audit(1769699405.404:923): avc: denied { prog_load } for pid=6773 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.340682][ T29] audit: type=1400 audit(1769699405.404:924): avc: denied { bpf } for pid=6773 comm="syz.3.1019" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.362717][ T29] audit: type=1400 audit(1769699405.424:925): avc: denied { open } for pid=6769 comm="syz.1.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 84.384008][ T29] audit: type=1400 audit(1769699405.424:926): avc: denied { perfmon } for pid=6769 comm="syz.1.1017" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.408043][ T29] audit: type=1400 audit(1769699405.424:927): avc: denied { kernel } for pid=6769 comm="syz.1.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 84.429387][ T29] audit: type=1400 audit(1769699405.424:928): avc: denied { create } for pid=6769 comm="syz.1.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.475485][ T29] audit: type=1400 audit(1769699405.444:929): avc: denied { bind } for pid=6769 comm="syz.1.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.475704][ T6777] loop3: detected capacity change from 0 to 1024 [ 84.496758][ T29] audit: type=1400 audit(1769699405.444:930): avc: denied { name_bind } for pid=6769 comm="syz.1.1017" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 84.517968][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.545715][ T6777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.578020][ T6777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.617179][ T3387] kernel read not supported for file bpf-prog (pid: 3387 comm: kworker/0:3) [ 84.639300][ T6785] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 84.649571][ T6785] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 84.662114][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 84.681368][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.697069][ T6787] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1022'. [ 84.725183][ T6797] loop3: detected capacity change from 0 to 128 [ 84.764057][ T6797] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.787255][ T6797] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.837928][ T6335] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.959867][ T6824] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1033'. [ 85.157890][ T6839] mmap: syz.1.1042 (6839): VmData 29339648 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data. [ 85.165553][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'. [ 85.189534][ T6845] netlink: 'syz.1.1043': attribute type 3 has an invalid length. [ 85.197856][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 85.224252][ T6836] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1040'. [ 85.279082][ T6851] can0: slcan on ttyS3. [ 85.588227][ T6879] netlink: 822 bytes leftover after parsing attributes in process `syz.5.1039'. [ 85.630491][ T6894] macvlan0: entered allmulticast mode [ 85.636098][ T6894] veth1_vlan: entered allmulticast mode [ 85.768696][ T6851] can0 (unregistered): slcan off ttyS3. [ 85.840125][ T6916] loop4: detected capacity change from 0 to 512 [ 85.847475][ T6916] ext4: Unknown parameter 'nouser_xattr' [ 85.861850][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'. [ 85.870680][ T6919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6919 comm=syz.1.1058 [ 85.899537][ T6917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1053'. [ 85.909652][ T6917] netlink: 'syz.2.1053': attribute type 7 has an invalid length. [ 85.919261][ T6917] netlink: 'syz.2.1053': attribute type 8 has an invalid length. [ 85.929370][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 86.013807][ T3295] udevd[3295]: symlink '../../loop1' '/dev/disk/by-diskseq/375.tmp-b7:1' failed: Read-only file system [ 86.032452][ T6935] loop1: detected capacity change from 0 to 512 [ 86.045690][ T6935] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.1060: corrupted in-inode xattr: e_value size too large [ 86.065980][ T3295] udevd[3295]: symlink '../../loop1' '/dev/disk/by-diskseq/383.tmp-b7:1' failed: Read-only file system [ 86.078058][ T6935] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1060: couldn't read orphan inode 15 (err -117) [ 86.095389][ T3295] udevd[3295]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system [ 86.134345][ T6938] x_tables: unsorted underflow at hook 1 [ 86.139776][ T6944] syzkaller0: entered promiscuous mode [ 86.147515][ T6944] syzkaller0: entered allmulticast mode [ 86.162675][ T3295] udevd[3295]: symlink '../../loop3' '/dev/disk/by-diskseq/380.tmp-b7:3' failed: Read-only file system [ 86.180110][ T4266] udevd[4266]: symlink '../../loop5' '/dev/disk/by-diskseq/372.tmp-b7:5' failed: Read-only file system [ 86.196627][ T6935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.212478][ T6938] loop4: detected capacity change from 0 to 256 [ 86.236747][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-diskseq/384.tmp-b7:4' failed: Read-only file system [ 86.273882][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-diskseq/384.tmp-b7:4' failed: Read-only file system [ 86.296443][ T4266] udevd[4266]: symlink '../../loop3' '/dev/disk/by-diskseq/380.tmp-b7:3' failed: Read-only file system [ 86.320913][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.377552][ T4266] udevd[4266]: symlink '../../loop3' '/dev/disk/by-diskseq/380.tmp-b7:3' failed: Read-only file system [ 86.401941][ T3295] udevd[3295]: symlink '../../loop1' '/dev/disk/by-diskseq/383.tmp-b7:1' failed: Read-only file system [ 86.475995][ T6957] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 86.572341][ T6962] /dev/loop2: Can't open blockdev [ 86.598968][ T6955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.763830][ T6952] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.796192][ T6963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.125583][ T6945] syz.5.1061 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 87.137385][ T6945] CPU: 1 UID: 0 PID: 6945 Comm: syz.5.1061 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 87.137426][ T6945] Tainted: [W]=WARN [ 87.137435][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.137467][ T6945] Call Trace: [ 87.137535][ T6945] [ 87.137545][ T6945] __dump_stack+0x1d/0x30 [ 87.137617][ T6945] dump_stack_lvl+0x95/0xd0 [ 87.137639][ T6945] dump_stack+0x15/0x1b [ 87.137659][ T6945] dump_header+0x80/0x240 [ 87.137737][ T6945] oom_kill_process+0x295/0x350 [ 87.137768][ T6945] out_of_memory+0x97d/0xb80 [ 87.137797][ T6945] try_charge_memcg+0x62e/0xa10 [ 87.137829][ T6945] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 87.137904][ T6945] __read_swap_cache_async+0x17b/0x2d0 [ 87.137937][ T6945] swap_cluster_readahead+0x262/0x3c0 [ 87.138019][ T6945] swapin_readahead+0xde/0x840 [ 87.138055][ T6945] ? __rcu_read_unlock+0x33/0x70 [ 87.138083][ T6945] ? __rcu_read_unlock+0x4e/0x70 [ 87.138177][ T6945] ? swap_cache_get_folio+0x26f/0x280 [ 87.138268][ T6945] do_swap_page+0x59b/0x2a50 [ 87.138302][ T6945] ? __rcu_read_lock+0x36/0x50 [ 87.138406][ T6945] ? __pfx_default_wake_function+0x10/0x10 [ 87.138446][ T6945] handle_mm_fault+0xb40/0x3030 [ 87.138494][ T6945] ? vma_start_read+0x1c7/0x2c0 [ 87.138535][ T6945] do_user_addr_fault+0x62f/0x1050 [ 87.138567][ T6945] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 87.138595][ T6945] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 87.138634][ T6945] ? irqentry_exit+0x3c/0x510 [ 87.138728][ T6945] exc_page_fault+0x62/0xa0 [ 87.138863][ T6945] asm_exc_page_fault+0x26/0x30 [ 87.138888][ T6945] RIP: 0033:0x7fc3d544f6c8 [ 87.138909][ T6945] Code: 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 11 95 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 48 89 58 f8 49 83 c5 01 <45> 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f 60 00 0f 84 4a 02 00 00 [ 87.138933][ T6945] RSP: 002b:00007ffd2e5de3f0 EFLAGS: 00010206 [ 87.138956][ T6945] RAX: 0000000000000001 RBX: ffffffff8190c216 RCX: ffffffff8190c216 [ 87.138993][ T6945] RDX: 0000000000000216 RSI: ffffffff8190c216 RDI: 000000000000000e [ 87.139006][ T6945] RBP: 0000000000000000 R08: 00007fc3d57e0000 R09: 00007fc3d57e2000 [ 87.139020][ T6945] R10: 000000008190c21a R11: 000000000000000e R12: 00007fc3d57f6038 [ 87.139034][ T6945] R13: 000000000007d993 R14: ffffffff8190c262 R15: 00007fc3d6325720 [ 87.139050][ T6945] ? policy_nodemask+0x202/0x5e0 [ 87.139124][ T6945] ? policy_nodemask+0x1b6/0x5e0 [ 87.139160][ T6945] ? policy_nodemask+0x1b6/0x5e0 [ 87.139194][ T6945] ? policy_nodemask+0x1b6/0x5e0 [ 87.139292][ T6945] [ 87.405988][ T6945] memory: usage 307200kB, limit 307200kB, failcnt 1074 [ 87.413415][ T6945] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 87.422006][ T6945] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 87.429609][ T6945] Memory cgroup stats for /syz5: [ 87.478304][ T6993] syz.3.1074: attempt to access beyond end of device [ 87.478304][ T6993] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 87.534683][ T6945] cache 0 [ 87.537705][ T6945] rss 4096 [ 87.541764][ T6945] shmem 0 [ 87.545017][ T6945] mapped_file 0 [ 87.549122][ T6945] dirty 0 [ 87.552441][ T6945] writeback 4096 [ 87.556196][ T6945] workingset_refault_anon 202 [ 87.561140][ T6945] workingset_refault_file 0 [ 87.565681][ T6945] swap 200704 [ 87.568811][ T6997] syz.3.1074: attempt to access beyond end of device [ 87.568811][ T6997] loop3: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 87.569078][ T6945] swapcached 8192 [ 87.587409][ T6945] pgpgin 49133 [ 87.591097][ T6945] pgpgout 49130 [ 87.595536][ T6945] pgfault 48183 [ 87.599340][ T6945] pgmajfault 105 [ 87.603433][ T6945] inactive_anon 4096 [ 87.607524][ T6945] active_anon 4096 [ 87.611570][ T6945] inactive_file 0 [ 87.615726][ T6945] active_file 4096 [ 87.621287][ T6945] unevictable 0 [ 87.625260][ T6945] hierarchical_memory_limit 314572800 [ 87.631419][ T6945] hierarchical_memsw_limit 9223372036854771712 [ 87.637965][ T6945] total_cache 0 [ 87.641524][ T6945] total_rss 4096 [ 87.645263][ T6945] total_shmem 0 [ 87.648761][ T6945] total_mapped_file 0 [ 87.653049][ T6945] total_dirty 0 [ 87.656798][ T6945] total_writeback 4096 [ 87.661020][ T6945] total_workingset_refault_anon 202 [ 87.666502][ T6945] total_workingset_refault_file 0 [ 87.671895][ T6945] total_swap 200704 [ 87.675820][ T6945] total_swapcached 8192 [ 87.680134][ T6945] total_pgpgin 49133 [ 87.684337][ T6945] total_pgpgout 49130 [ 87.688882][ T6945] total_pgfault 48183 [ 87.692973][ T6945] total_pgmajfault 105 [ 87.697163][ T6945] total_inactive_anon 4096 [ 87.702042][ T6945] total_active_anon 4096 [ 87.706579][ T6945] total_inactive_file 0 [ 87.711117][ T6945] total_active_file 4096 [ 87.715667][ T6945] total_unevictable 0 [ 87.720168][ T6945] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1061,pid=6945,uid=0 [ 87.735996][ T6945] Memory cgroup out of memory: Killed process 6945 (syz.5.1061) total-vm:94132kB, anon-rss:1204kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 87.835169][ T7005] set_capacity_and_notify: 4 callbacks suppressed [ 87.835190][ T7005] loop1: detected capacity change from 0 to 512 [ 87.866161][ T7007] loop4: detected capacity change from 0 to 512 [ 87.877876][ T7005] ext4: Unknown parameter 'nouser_xattr' [ 87.901191][ T7007] ext4: Unknown parameter 'nouser_xattr' [ 88.020257][ T7019] x_tables: unsorted underflow at hook 1 [ 88.054082][ T7020] x_tables: unsorted underflow at hook 1 [ 88.054185][ T7019] loop4: detected capacity change from 0 to 256 [ 88.072214][ T7031] loop5: detected capacity change from 0 to 1024 [ 88.088997][ T7020] loop1: detected capacity change from 0 to 256 [ 88.117775][ T7031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.132651][ T7032] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.145137][ T7032] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.248950][ T7032] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.260782][ T7032] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.301436][ T7032] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.312197][ T7032] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.362543][ T7032] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.373551][ T7032] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.468343][ T6190] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.476751][ T6190] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.502597][ T6190] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.511220][ T6190] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.540563][ T6190] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.548832][ T6190] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.557890][ T6190] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.566419][ T6190] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.599906][ T7056] loop5: detected capacity change from 0 to 1024 [ 88.620623][ T7056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.694894][ T7061] loop5: detected capacity change from 0 to 1024 [ 88.723114][ T7061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.872051][ T7076] loop5: detected capacity change from 0 to 1024 [ 88.908729][ T7076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.018834][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 89.018851][ T29] audit: type=1400 audit(1769699410.104:1074): avc: denied { mount } for pid=7094 comm="syz.5.1104" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.040840][ T7097] loop4: detected capacity change from 0 to 512 [ 89.099512][ T7102] loop1: detected capacity change from 0 to 256 [ 89.106749][ T7097] ext4: Unknown parameter 'nouser_xattr' [ 89.256352][ T7104] x_tables: unsorted underflow at hook 1 [ 89.422154][ T7103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7103 comm=syz.5.1106 [ 89.442323][ T7100] netlink: 'syz.5.1106': attribute type 13 has an invalid length. [ 89.541609][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.550077][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.619271][ T7100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.629659][ T7114] IPv6: addrconf: prefix option has invalid lifetime [ 89.640043][ T7100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.714377][ T7118] iso9660: Unknown parameter '' [ 89.729857][ T7120] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.745809][ T29] audit: type=1400 audit(1769699410.824:1075): avc: denied { create } for pid=7117 comm="syz.3.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.758618][ T7122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.790664][ T7118] __nla_validate_parse: 7 callbacks suppressed [ 89.790711][ T7118] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1112'. [ 89.807670][ T6215] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.809422][ T7118] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1112'. [ 89.828123][ T7118] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1112'. [ 89.838865][ T6329] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.850304][ T6329] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.871989][ T6329] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.886716][ T7118] vhci_hcd vhci_hcd.0: invalid port number 97 [ 89.892471][ T29] audit: type=1400 audit(1769699410.964:1076): avc: denied { append } for pid=7117 comm="syz.3.1112" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.893172][ T7118] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 89.980925][ T7129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.003639][ T7137] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1118'. [ 90.008003][ T7136] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.016742][ T29] audit: type=1400 audit(1769699411.084:1077): avc: denied { write } for pid=7134 comm="syz.3.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.066332][ T7136] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.079029][ T29] audit: type=1400 audit(1769699411.124:1078): avc: denied { read write } for pid=7132 comm="syz.5.1117" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.107496][ T29] audit: type=1400 audit(1769699411.124:1079): avc: denied { open } for pid=7132 comm="syz.5.1117" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.137220][ T29] audit: type=1326 audit(1769699411.214:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.5.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d557aeb9 code=0x7ffc0000 [ 90.165857][ T29] audit: type=1326 audit(1769699411.214:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.5.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d557aeb9 code=0x7ffc0000 [ 90.192428][ T29] audit: type=1326 audit(1769699411.214:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.5.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc3d557aeb9 code=0x7ffc0000 [ 90.218330][ T29] audit: type=1326 audit(1769699411.214:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.5.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d557aeb9 code=0x7ffc0000 [ 90.263146][ T7148] syzkaller0: entered promiscuous mode [ 90.269374][ T7148] syzkaller0: entered allmulticast mode [ 90.276532][ T7140] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.289078][ T7152] IPv6: addrconf: prefix option has invalid lifetime [ 90.391911][ T7154] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.415761][ T7154] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1124: invalid indirect mapped block 4294967295 (level 0) [ 90.457887][ T7154] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1124: invalid indirect mapped block 4294967295 (level 1) [ 90.478142][ T7170] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.494160][ T7154] EXT4-fs (loop2): 1 orphan inode deleted [ 90.501358][ T7154] EXT4-fs (loop2): 1 truncate cleaned up [ 90.577321][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 90.629984][ T7179] EXT4-fs: Ignoring removed orlov option [ 90.659802][ T7179] EXT4-fs error (device loop2): __ext4_new_inode:1279: comm syz.2.1130: failed to insert inode 15: doubly allocated? [ 90.728832][ T3295] loop3: p1 p2 [ 90.738515][ T7183] loop3: p1 p2 [ 90.855755][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'. [ 90.867330][ T7194] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1133'. [ 90.888389][ T7156] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 90.901727][ T7156] EXT4-fs (loop1): orphan cleanup on readonly fs [ 90.924026][ T7156] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 90.941332][ T7156] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 90.966131][ T7198] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.974528][ T7156] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.1123: corrupted inode contents [ 90.989672][ T7156] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.1123: mark_inode_dirty error [ 90.990464][ T7198] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.031113][ T3295] udevd[3295]: symlink '../../loop2' '/dev/disk/by-diskseq/435.tmp-b7:2' failed: Read-only file system [ 91.060096][ T3295] udevd[3295]: symlink '../../loop2' '/dev/disk/by-diskseq/435.tmp-b7:2' failed: Read-only file system [ 91.077049][ T7156] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.1123: corrupted inode contents [ 91.085924][ T3295] udevd[3295]: symlink '../../loop2' '/dev/disk/by-diskseq/435.tmp-b7:2' failed: Read-only file system [ 91.094396][ T7156] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1123: mark_inode_dirty error [ 91.112546][ T7207] syzkaller0: entered promiscuous mode [ 91.112569][ T7207] syzkaller0: entered allmulticast mode [ 91.143741][ T7156] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.1123: corrupted inode contents [ 91.162061][ T7156] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 91.176584][ T3295] udevd[3295]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 91.177474][ T7156] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.1123: corrupted inode contents [ 91.191522][ T3295] udevd[3295]: symlink '../../loop3' '/dev/disk/by-diskseq/438.tmp-b7:3' failed: Read-only file system [ 91.206419][ T7156] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.1123: mark_inode_dirty error [ 91.236260][ T7156] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 91.239618][ T3295] udevd[3295]: symlink '../../loop3' '/dev/disk/by-diskseq/438.tmp-b7:3' failed: Read-only file system [ 91.253522][ T7156] EXT4-fs (loop1): 1 truncate cleaned up [ 91.290591][ T3295] udevd[3295]: symlink '../../loop3' '/dev/disk/by-diskseq/439.tmp-b7:3' failed: Read-only file system [ 91.331107][ T4266] udevd[4266]: symlink '../../loop2' '/dev/disk/by-diskseq/435.tmp-b7:2' failed: Read-only file system [ 91.438284][ T7156] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 91.483193][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-diskseq/440.tmp-b7:4' failed: Read-only file system [ 91.496574][ T7215] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.514549][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 91.858980][ T7231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.901954][ T7235] IPv6: addrconf: prefix option has invalid lifetime [ 91.996004][ T7239] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.016824][ T7239] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.059282][ T4266] loop3: p4 < > [ 92.065568][ T7240] loop3: p4 < > [ 92.182639][ T7250] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.269029][ T7254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.364113][ T7269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.399466][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1159'. [ 92.410339][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1159'. [ 92.462138][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 92.495913][ T7281] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.510604][ T7281] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.605916][ T7287] serio: Serial port ptm0 [ 92.631747][ T7293] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 92.688307][ T7295] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.765870][ T7295] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.789472][ T7287] serio: Serial port ptm0 [ 92.835451][ T7302] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.859745][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.873566][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.084753][ T7313] set_capacity_and_notify: 25 callbacks suppressed [ 93.084774][ T7313] loop2: detected capacity change from 0 to 8192 [ 93.119703][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.129184][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.150870][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.159981][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.363630][ T7328] loop2: detected capacity change from 0 to 1024 [ 93.371632][ T7328] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.396670][ T7328] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.585025][ T7339] loop5: detected capacity change from 0 to 512 [ 93.637502][ T7343] loop3: detected capacity change from 0 to 1024 [ 93.648211][ T7343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.746893][ T7347] loop1: detected capacity change from 0 to 1024 [ 93.799489][ T7347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.869027][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 93.908757][ T7355] netlink: 'syz.5.1183': attribute type 21 has an invalid length. [ 93.917571][ T7355] netlink: 'syz.5.1183': attribute type 4 has an invalid length. [ 93.936529][ T7337] loop4: detected capacity change from 0 to 512 [ 94.012512][ T7361] loop1: detected capacity change from 0 to 1024 [ 94.033068][ T7337] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.059946][ T7363] loop5: detected capacity change from 0 to 512 [ 94.070734][ T7361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.082654][ T7363] EXT4-fs: dax option not supported [ 94.104571][ T7337] EXT4-fs (loop4): orphan cleanup on readonly fs [ 94.186744][ T7337] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1177: Allocating blocks 41-42 which overlap fs metadata [ 94.241516][ T7337] __quota_error: 84 callbacks suppressed [ 94.241578][ T7337] Quota error (device loop4): write_blk: dquota write failed [ 94.241747][ T7337] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 94.268301][ T7337] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1177: Allocating blocks 41-42 which overlap fs metadata [ 94.307795][ T7337] Quota error (device loop4): write_blk: dquota write failed [ 94.317366][ T7337] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 94.329560][ T7337] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1177: Failed to acquire dquot type 1 [ 94.387771][ T7340] syz.2.1179 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 94.399429][ T7340] CPU: 1 UID: 0 PID: 7340 Comm: syz.2.1179 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 94.399474][ T7340] Tainted: [W]=WARN [ 94.399483][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.399498][ T7340] Call Trace: [ 94.399505][ T7340] [ 94.399513][ T7340] __dump_stack+0x1d/0x30 [ 94.399541][ T7340] dump_stack_lvl+0x95/0xd0 [ 94.399568][ T7340] dump_stack+0x15/0x1b [ 94.399637][ T7340] dump_header+0x80/0x240 [ 94.399663][ T7340] oom_kill_process+0x295/0x350 [ 94.399694][ T7340] out_of_memory+0x97d/0xb80 [ 94.399782][ T7340] try_charge_memcg+0x62e/0xa10 [ 94.399814][ T7340] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 94.399854][ T7340] __read_swap_cache_async+0x17b/0x2d0 [ 94.399891][ T7340] swap_cluster_readahead+0x262/0x3c0 [ 94.399989][ T7340] swapin_readahead+0xde/0x840 [ 94.400027][ T7340] ? __rcu_read_unlock+0x33/0x70 [ 94.400124][ T7340] ? __rcu_read_unlock+0x4e/0x70 [ 94.400159][ T7340] ? swap_cache_get_folio+0x26f/0x280 [ 94.400195][ T7340] do_swap_page+0x59b/0x2a50 [ 94.400287][ T7340] ? __rcu_read_lock+0x36/0x50 [ 94.400329][ T7340] ? __pfx_default_wake_function+0x10/0x10 [ 94.400368][ T7340] handle_mm_fault+0xb40/0x3030 [ 94.400404][ T7340] ? vma_start_read+0x1c7/0x2c0 [ 94.400453][ T7340] do_user_addr_fault+0x62f/0x1050 [ 94.400485][ T7340] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 94.400578][ T7340] ? irqentry_exit+0x3c/0x510 [ 94.400609][ T7340] exc_page_fault+0x62/0xa0 [ 94.400636][ T7340] asm_exc_page_fault+0x26/0x30 [ 94.400659][ T7340] RIP: 0033:0x7f9c569a6094 [ 94.400697][ T7337] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, [ 94.400692][ T7340] Code: 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d ce f4 28 00 00 75 44 a8 01 75 40 a8 10 75 3c <41> 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 [ 94.400783][ T7340] RSP: 002b:00007ffee26029d0 EFLAGS: 00010246 [ 94.400845][ T7340] RAX: 0000000000000000 RBX: 000055557a3bf500 RCX: 0000000000000000 [ 94.400862][ T7340] RDX: 00007ffee2602a10 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.400878][ T7340] RBP: 00007f9c56c67da0 R08: 0000000000000000 R09: 0000000000000000 [ 94.400893][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000170ba [ 94.400909][ T7340] R13: 00007f9c56c6609c R14: 0000000000016e3e R15: 00007ffee2602b40 [ 94.400944][ T7340] [ 94.400952][ T7340] memory: usage 307200kB, limit 307200kB, failcnt 9397 [ 94.400969][ T7340] memory+swap: usage 369232kB, limit 9007199254740988kB, failcnt 0 [ 94.400999][ T7340] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 94.401015][ T7340] Memory cgroup stats for /syz2: [ 94.506356][ T7376] loop5: detected capacity change from 0 to 1024 [ 94.514498][ T7337] inode 12: [ 94.544500][ T7376] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.548155][ T7337] block 14: [ 94.563844][ T7340] cache 0 [ 94.568677][ T7337] freeing already freed block (bit 14); block bitmap corrupt. [ 94.574836][ T7340] rss 0 [ 94.574950][ T7340] shmem 0 [ 94.574959][ T7340] mapped_file 0 [ 94.574968][ T7340] dirty 0 [ 94.574979][ T7340] writeback 0 [ 94.574988][ T7340] workingset_refault_anon 216 [ 94.575047][ T7340] workingset_refault_file 2912 [ 94.575059][ T7340] swap 63520768 [ 94.575068][ T7340] swapcached 0 [ 94.575102][ T7340] pgpgin 121325 [ 94.584911][ T7337] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1177: corrupted inode contents [ 94.587466][ T7340] pgpgout 121324 [ 94.587477][ T7340] pgfault 88831 [ 94.587486][ T7340] pgmajfault 295 [ 94.587495][ T7340] inactive_anon 0 [ 94.587557][ T7340] active_anon 0 [ 94.587567][ T7340] inactive_file 0 [ 94.587575][ T7340] active_file 4096 [ 94.587584][ T7340] unevictable 0 [ 94.587593][ T7340] hierarchical_memory_limit 314572800 [ 94.587616][ T7340] hierarchical_memsw_limit 9223372036854771712 [ 94.587628][ T7340] total_cache 0 [ 94.587636][ T7340] total_rss 0 [ 94.587660][ T7340] total_shmem 0 [ 94.587668][ T7340] total_mapped_file 0 [ 94.587675][ T7340] total_dirty 0 [ 94.587682][ T7340] total_writeback 0 [ 94.587690][ T7340] total_workingset_refault_anon 216 [ 94.587698][ T7340] total_workingset_refault_file 2912 [ 94.587707][ T7340] total_swap 63520768 [ 94.587723][ T7340] total_swapcached 0 [ 94.587732][ T7340] total_pgpgin 121325 [ 94.587741][ T7340] total_pgpgout 121324 [ 94.587749][ T7340] total_pgfault 88831 [ 94.587759][ T7340] total_pgmajfault 295 [ 94.587769][ T7340] total_inactive_anon 0 [ 94.587777][ T7340] total_active_anon 0 [ 94.587786][ T7340] total_inactive_file 0 [ 94.587794][ T7340] total_active_file 4096 [ 94.587832][ T7340] total_unevictable 0 [ 94.587843][ T7340] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1179,pid=7340,uid=0 [ 94.587931][ T7340] Memory cgroup out of memory: Killed process 7340 (syz.2.1179) total-vm:94132kB, anon-rss:1204kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 94.934596][ T7376] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.000132][ T7337] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.1177: mark_inode_dirty error [ 95.074710][ T7337] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1177: corrupted inode contents [ 95.100639][ T7337] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.1177: mark_inode_dirty error [ 95.117205][ T7337] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1177: corrupted inode contents [ 95.153969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.167501][ T7383] __nla_validate_parse: 2 callbacks suppressed [ 95.167517][ T7383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1192'. [ 95.217635][ T7337] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 95.252591][ T7337] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1177: corrupted inode contents [ 95.291013][ T7387] loop1: detected capacity change from 0 to 128 [ 95.344329][ T29] audit: type=1400 audit(1769699416.424:1167): avc: denied { read } for pid=7392 comm="syz.5.1197" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.347509][ T7337] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.1177: mark_inode_dirty error [ 95.369668][ T29] audit: type=1400 audit(1769699416.424:1168): avc: denied { open } for pid=7392 comm="syz.5.1197" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.369709][ T29] audit: type=1400 audit(1769699416.424:1169): avc: denied { ioctl } for pid=7392 comm="syz.5.1197" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.381436][ T7395] syz.1.1195: attempt to access beyond end of device [ 95.381436][ T7395] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 95.417420][ T7337] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 95.456341][ T29] audit: type=1400 audit(1769699416.454:1170): avc: denied { append } for pid=7388 comm="syz.2.1194" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.489379][ T29] audit: type=1400 audit(1769699416.454:1171): avc: denied { bind } for pid=7386 comm="syz.1.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.533852][ T7395] syz.1.1195: attempt to access beyond end of device [ 95.533852][ T7395] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 95.567908][ T7398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.584614][ T7337] EXT4-fs (loop4): 1 truncate cleaned up [ 95.619381][ T7381] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 95.638270][ T7395] syz.1.1195: attempt to access beyond end of device [ 95.638270][ T7395] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 95.641065][ T7381] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.664738][ T7395] syz.1.1195: attempt to access beyond end of device [ 95.664738][ T7395] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 95.711265][ T7395] syz.1.1195: attempt to access beyond end of device [ 95.711265][ T7395] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 95.727277][ T7395] syz.1.1195: attempt to access beyond end of device [ 95.727277][ T7395] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 95.742011][ T7395] syz.1.1195: attempt to access beyond end of device [ 95.742011][ T7395] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 95.753522][ T7404] syzkaller0: entered promiscuous mode [ 95.757882][ T7395] syz.1.1195: attempt to access beyond end of device [ 95.757882][ T7395] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 95.761838][ T7404] syzkaller0: entered allmulticast mode [ 95.792051][ T7395] syz.1.1195: attempt to access beyond end of device [ 95.792051][ T7395] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 95.809588][ T7395] syz.1.1195: attempt to access beyond end of device [ 95.809588][ T7395] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 95.937685][ T29] audit: type=1400 audit(1769699416.974:1172): avc: denied { create } for pid=7406 comm="syz.4.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.971509][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.004049][ T7412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.064524][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.092378][ T7412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.172594][ T7409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.205441][ T7419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1204'. [ 96.290809][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 96.318511][ T7421] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1205'. [ 96.377120][ T7424] netlink: 'syz.2.1206': attribute type 10 has an invalid length. [ 96.401286][ T7424] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 96.424092][ T4266] udevd[4266]: symlink '../../loop5' '/dev/disk/by-diskseq/487.tmp-b7:5' failed: Read-only file system [ 96.430294][ T7424] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 96.439826][ T3305] udevd[3305]: symlink '../../loop2' '/dev/disk/by-diskseq/468.tmp-b7:2' failed: Read-only file system [ 96.448372][ T4456] udevd[4456]: symlink '../../loop3' '/dev/disk/by-diskseq/485.tmp-b7:3' failed: Read-only file system [ 96.473651][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-diskseq/490.tmp-b7:4' failed: Read-only file system [ 96.489671][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 96.507344][ T4266] udevd[4266]: symlink '../../loop3' '/dev/disk/by-diskseq/485.tmp-b7:3' failed: Read-only file system [ 96.509215][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-diskseq/490.tmp-b7:4' failed: Read-only file system [ 96.532683][ T4266] udevd[4266]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 96.533899][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 96.572371][ T4456] udevd[4456]: symlink '../../loop2' '/dev/disk/by-diskseq/468.tmp-b7:2' failed: Read-only file system [ 96.591040][ T7431] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1208'. [ 96.634334][ T7426] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1207: Allocating blocks 497-513 which overlap fs metadata [ 96.654312][ T7426] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1207: Allocating blocks 497-513 which overlap fs metadata [ 96.682756][ T7434] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1207: Allocating blocks 497-513 which overlap fs metadata [ 96.740238][ T7425] EXT4-fs (loop3): pa ffff8881067ed7e0: logic 48, phys. 177, len 21 [ 96.749694][ T7425] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 96.868190][ T7461] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.956423][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1221'. [ 97.128230][ T7486] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.185967][ T7486] EXT4-fs (loop3): 1 orphan inode deleted [ 97.192064][ T7486] EXT4-fs (loop3): 1 truncate cleaned up [ 97.233987][ T7495] IPv6: addrconf: prefix option has invalid lifetime [ 97.238948][ T7490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.417761][ T7508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1232'. [ 97.469804][ T7510] vhci_hcd vhci_hcd.3: invalid port number 9 [ 97.477506][ T7510] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 97.525206][ T7516] delete_channel: no stack [ 97.756695][ T7535] xt_TCPMSS: Only works on TCP SYN packets [ 97.817026][ T3317] EXT4-fs unmount: 63 callbacks suppressed [ 97.817048][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.849760][ T7539] EXT4-fs: Ignoring removed nobh option [ 97.876521][ T7540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1244'. [ 97.934489][ T7540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1244'. [ 97.970809][ T7539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.045477][ T7539] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.236945][ T7553] set_capacity_and_notify: 9 callbacks suppressed [ 98.236966][ T7553] loop1: detected capacity change from 0 to 1024 [ 98.279103][ T7553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.322739][ T7555] 9p: Bad value for 'wfdno' [ 98.339782][ T7553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.348578][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.406924][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.483195][ T7569] veth0_virt_wifi: entered promiscuous mode [ 98.536022][ T7573] netlink: 'syz.3.1254': attribute type 21 has an invalid length. [ 98.601622][ T7573] netlink: 'syz.3.1254': attribute type 10 has an invalid length. [ 98.633544][ T7573] 8021q: adding VLAN 0 to HW filter on device .` [ 98.670788][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.674080][ T7573] team0: Port device .` added [ 98.690118][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1255'. [ 98.955324][ T7591] loop3: detected capacity change from 0 to 512 [ 98.971067][ T7589] Cannot find del_set index 0 as target [ 98.995657][ T7591] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.056330][ T7591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.089052][ T7598] loop2: detected capacity change from 0 to 1024 [ 99.100396][ T7591] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.1262: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 99.127866][ T7598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.152133][ T7598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.183515][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.198023][ T3317] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 99.252344][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.328765][ T7611] loop5: detected capacity change from 0 to 512 [ 99.344246][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 99.344262][ T29] audit: type=1400 audit(1769699420.424:1193): avc: denied { create } for pid=7612 comm="syz.3.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.374847][ T7611] EXT4-fs: journaled quota format not specified [ 99.448387][ T29] audit: type=1400 audit(1769699420.524:1194): avc: denied { ioctl } for pid=7612 comm="syz.3.1271" path="socket:[18247]" dev="sockfs" ino=18247 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.515264][ T7629] loop3: detected capacity change from 0 to 512 [ 99.531575][ T7629] ext4: Unknown parameter 'nouser_xattr' [ 99.558594][ T29] audit: type=1400 audit(1769699420.634:1195): avc: denied { bind } for pid=7630 comm="syz.5.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.584702][ T29] audit: type=1400 audit(1769699420.634:1196): avc: denied { setopt } for pid=7630 comm="syz.5.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.621336][ T29] audit: type=1326 audit(1769699420.694:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c569eaeb9 code=0x7ffc0000 [ 99.649280][ T29] audit: type=1326 audit(1769699420.694:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c569eaeb9 code=0x7ffc0000 [ 99.670530][ T7632] loop3: detected capacity change from 0 to 256 [ 99.677955][ T29] audit: type=1326 audit(1769699420.694:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c569eaeb9 code=0x7ffc0000 [ 99.715362][ T29] audit: type=1326 audit(1769699420.694:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9c569eaeb9 code=0x7ffc0000 [ 99.742697][ T29] audit: type=1326 audit(1769699420.694:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c569eaeb9 code=0x7ffc0000 [ 99.742730][ T29] audit: type=1326 audit(1769699420.694:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c569eaeb9 code=0x7ffc0000 [ 99.914327][ T7627] netlink: 'syz.1.1275': attribute type 13 has an invalid length. [ 100.125803][ T7627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.264128][ T6198] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.276728][ T6198] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.311503][ T6198] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.323498][ T6198] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.407321][ T6198] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.420426][ T6198] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.485268][ T6198] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.495642][ T6198] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.511894][ T7640] loop5: detected capacity change from 0 to 32768 [ 100.811612][ T7679] FAULT_INJECTION: forcing a failure. [ 100.811612][ T7679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.829092][ T7679] CPU: 0 UID: 0 PID: 7679 Comm: syz.4.1288 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.829220][ T7679] Tainted: [W]=WARN [ 100.829295][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.829307][ T7679] Call Trace: [ 100.829315][ T7679] [ 100.829323][ T7679] __dump_stack+0x1d/0x30 [ 100.829371][ T7679] dump_stack_lvl+0x95/0xd0 [ 100.829395][ T7679] dump_stack+0x15/0x1b [ 100.829651][ T7679] should_fail_ex+0x263/0x280 [ 100.829693][ T7679] should_fail+0xb/0x20 [ 100.829745][ T7679] should_fail_usercopy+0x1a/0x20 [ 100.829788][ T7679] _copy_from_user+0x1c/0xb0 [ 100.829813][ T7679] ___sys_sendmsg+0xc1/0x1e0 [ 100.829848][ T7679] __x64_sys_sendmsg+0xd4/0x160 [ 100.829875][ T7679] x64_sys_call+0x17ba/0x3000 [ 100.829971][ T7679] do_syscall_64+0xc0/0x2a0 [ 100.830004][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.830085][ T7679] RIP: 0033:0x7f31c719aeb9 [ 100.830106][ T7679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.830130][ T7679] RSP: 002b:00007f31c5bd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.830158][ T7679] RAX: ffffffffffffffda RBX: 00007f31c7416090 RCX: 00007f31c719aeb9 [ 100.830222][ T7679] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 100.830240][ T7679] RBP: 00007f31c5bd6090 R08: 0000000000000000 R09: 0000000000000000 [ 100.830258][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.830274][ T7679] R13: 00007f31c7416128 R14: 00007f31c7416090 R15: 00007ffe4dc20ff8 [ 100.830392][ T7679] [ 100.836310][ T7678] __nla_validate_parse: 8 callbacks suppressed [ 100.836327][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1289'. [ 101.058986][ T7681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=7681 comm=syz.2.1286 [ 101.062028][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1289'. [ 101.127818][ T7678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1289'. [ 101.254231][ T7700] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1296'. [ 101.315180][ T7704] loop3: detected capacity change from 0 to 512 [ 101.334039][ T7706] loop4: detected capacity change from 0 to 512 [ 101.440207][ T7706] ext4: Unknown parameter 'nouser_xattr' [ 101.560022][ T7704] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.578360][ T4266] udevd[4266]: symlink '../../loop3' '/dev/disk/by-diskseq/517.tmp-b7:3' failed: Read-only file system [ 101.605625][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-diskseq/493.tmp-b7:4' failed: Read-only file system [ 101.649448][ T4266] udevd[4266]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 101.664891][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 101.689912][ T3295] udevd[3295]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 101.710972][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-diskseq/518.tmp-b7:4' failed: Read-only file system [ 101.772853][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-diskseq/518.tmp-b7:4' failed: Read-only file system [ 101.822902][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-diskseq/518.tmp-b7:4' failed: Read-only file system [ 101.856247][ T4266] udevd[4266]: symlink '../../loop5' '/dev/disk/by-diskseq/515.tmp-b7:5' failed: Read-only file system [ 101.892816][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-diskseq/518.tmp-b7:4' failed: Read-only file system [ 101.991001][ T7704] EXT4-fs (loop3): 1 truncate cleaned up [ 101.998695][ T7704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.131989][ T7722] loop1: detected capacity change from 0 to 256 [ 102.259078][ T7729] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.289713][ T7729] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 102.334228][ T7729] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1306: bg 0: block 248: padding at end of block bitmap is not set [ 102.390517][ T7739] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 102.428225][ T7741] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1309'. [ 102.458719][ T7743] EXT4-fs: Ignoring removed orlov option [ 102.509597][ T7729] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1306: Failed to acquire dquot type 1 [ 102.528743][ T7729] EXT4-fs (loop2): 1 truncate cleaned up [ 102.535661][ T7729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 102.538638][ T7743] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 102.564120][ T7745] ext4: Unknown parameter 'nouser_xattr' [ 102.608726][ T7743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 102.633540][ T7743] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.1310: corrupted in-inode xattr: e_value size too large [ 102.665856][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 102.676441][ T7743] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1310: couldn't read orphan inode 15 (err -117) [ 102.690607][ T7743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.769444][ T4840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.782159][ T7759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.793323][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.816956][ T7759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.921321][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.958919][ T7771] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.976199][ T7771] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.011660][ T7771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.017803][ T7773] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.039555][ T7773] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.039588][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1319'. [ 103.067971][ T7771] FAULT_INJECTION: forcing a failure. [ 103.067971][ T7771] name failslab, interval 1, probability 0, space 0, times 0 [ 103.083761][ T7771] CPU: 1 UID: 0 PID: 7771 Comm: syz.2.1321 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 103.083799][ T7771] Tainted: [W]=WARN [ 103.083807][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.083820][ T7771] Call Trace: [ 103.083828][ T7771] [ 103.083838][ T7771] __dump_stack+0x1d/0x30 [ 103.083883][ T7771] dump_stack_lvl+0x95/0xd0 [ 103.083907][ T7771] dump_stack+0x15/0x1b [ 103.083929][ T7771] should_fail_ex+0x263/0x280 [ 103.083977][ T7771] should_failslab+0x8c/0xb0 [ 103.084034][ T7771] __kvmalloc_node_noprof+0x148/0x680 [ 103.084066][ T7771] ? vmemdup_user+0x2b/0xd0 [ 103.084100][ T7771] ? should_fail_usercopy+0x1a/0x20 [ 103.084134][ T7771] vmemdup_user+0x2b/0xd0 [ 103.084155][ T7771] path_setxattrat+0x1b6/0x310 [ 103.084195][ T7771] __x64_sys_setxattr+0x6e/0x90 [ 103.084264][ T7771] x64_sys_call+0xf1e/0x3000 [ 103.084292][ T7771] do_syscall_64+0xc0/0x2a0 [ 103.084379][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.084404][ T7771] RIP: 0033:0x7f9c569eaeb9 [ 103.084441][ T7771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.084469][ T7771] RSP: 002b:00007f9c55447028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 103.084495][ T7771] RAX: ffffffffffffffda RBX: 00007f9c56c65fa0 RCX: 00007f9c569eaeb9 [ 103.084513][ T7771] RDX: 0000200000001440 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 103.084530][ T7771] RBP: 00007f9c55447090 R08: 0000000000000003 R09: 0000000000000000 [ 103.084546][ T7771] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 103.084564][ T7771] R13: 00007f9c56c66038 R14: 00007f9c56c65fa0 R15: 00007ffee26028d8 [ 103.084584][ T7771] [ 103.308823][ T7773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.331440][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.424407][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.443175][ T7788] 9p: Bad value for 'rfdno' [ 103.623903][ T7791] SELinux: failed to load policy [ 103.635690][ T7803] set_capacity_and_notify: 7 callbacks suppressed [ 103.635709][ T7803] loop4: detected capacity change from 0 to 1024 [ 103.653395][ T7807] loop3: detected capacity change from 0 to 1024 [ 103.702528][ T7803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.722024][ T7807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.749783][ T7807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.829934][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.842906][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.869383][ C1] sd 0:0:1:0: [sda] tag#6721 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 103.882283][ C1] sd 0:0:1:0: [sda] tag#6721 CDB: Read(6) 08 03 98 19 00 00 00 00 00 00 00 00 [ 103.899605][ T7821] loop2: detected capacity change from 0 to 512 [ 103.932636][ T7824] loop4: detected capacity change from 0 to 512 [ 104.102638][ T7838] netlink: 'syz.4.1338': attribute type 29 has an invalid length. [ 104.137475][ T7838] netlink: 'syz.4.1338': attribute type 29 has an invalid length. [ 104.167783][ T7838] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1338'. [ 104.177871][ T7838] unsupported nla_type 58 [ 104.235167][ T7844] sctp: [Deprecated]: syz.3.1345 (pid 7844) Use of int in max_burst socket option. [ 104.235167][ T7844] Use struct sctp_assoc_value instead [ 104.236338][ T7849] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7849 comm=syz.1.1347 [ 104.308168][ T7853] loop3: detected capacity change from 0 to 1024 [ 104.319042][ T7855] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1346'. [ 104.333835][ T7853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.355130][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 104.355148][ T29] audit: type=1400 audit(1769699425.434:1535): avc: denied { write } for pid=7857 comm="syz.1.1350" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 104.419544][ T7853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.437894][ T7863] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1348'. [ 104.488246][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.581124][ T7876] loop2: detected capacity change from 0 to 1024 [ 104.590167][ T7876] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.683489][ T7876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.701712][ T7876] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 104.779486][ T29] audit: type=1326 audit(1769699425.854:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 104.806509][ T29] audit: type=1326 audit(1769699425.854:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 104.832010][ T29] audit: type=1326 audit(1769699425.854:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 104.857595][ T29] audit: type=1326 audit(1769699425.854:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 104.857794][ T7876] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.1353: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 104.886685][ T29] audit: type=1326 audit(1769699425.854:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 104.941719][ T29] audit: type=1326 audit(1769699425.854:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 104.972972][ T29] audit: type=1326 audit(1769699425.854:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 105.004534][ T29] audit: type=1326 audit(1769699425.854:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 105.030879][ T29] audit: type=1326 audit(1769699425.854:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 105.106096][ T7876] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1353: couldn't read orphan inode 11 (err -117) [ 105.158882][ T7876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.193977][ T7876] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1353: Invalid block bitmap block 0 in block_group 0 [ 105.240804][ T7904] loop4: detected capacity change from 0 to 1024 [ 105.254917][ T7904] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.279421][ T7899] loop5: detected capacity change from 0 to 1024 [ 105.298436][ T7899] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.341516][ T7876] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1353: Failed to acquire dquot type 0 [ 105.355622][ T7904] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.409632][ T7910] loop3: detected capacity change from 0 to 1024 [ 105.418923][ T7910] journal_path: Non-blockdev passed as './file1' [ 105.426291][ T7910] EXT4-fs: error: could not find journal device path [ 105.447016][ T7904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.462698][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.488925][ T7899] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.582059][ T7910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1364'. [ 105.639831][ T7910] loop3: detected capacity change from 0 to 2048 [ 105.681988][ T7910] Alternate GPT is invalid, using primary GPT. [ 105.688985][ T7910] loop3: p2 p3 p7 [ 105.876816][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.899421][ T7899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.983136][ T7927] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.068592][ T7927] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.094618][ T7930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7930 comm=syz.4.1369 [ 106.190028][ T4840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.228423][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.246087][ T7937] ext4: Unknown parameter 'nouser_xattr' [ 106.270699][ T7935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.288723][ T7944] __nla_validate_parse: 1 callbacks suppressed [ 106.288740][ T7944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1373'. [ 106.325153][ T7935] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.460010][ T7935] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1371: iget: bad i_size value: 2533274857506816 [ 106.515146][ T7935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1371'. [ 106.586642][ T3295] udevd[3295]: symlink '../../loop2' '/dev/disk/by-diskseq/560.tmp-b7:2' failed: Read-only file system [ 106.621426][ T3317] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 106.650934][ T3317] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 106.669917][ T3295] udevd[3295]: symlink '../../loop2' '/dev/disk/by-diskseq/560.tmp-b7:2' failed: Read-only file system [ 106.724557][ T4266] udevd[4266]: symlink '../../loop5' '/dev/disk/by-diskseq/559.tmp-b7:5' failed: Read-only file system [ 106.746469][ T7971] SELinux: policydb version 581348342 does not match my version range 15-35 [ 106.789679][ T7971] SELinux: failed to load policy [ 106.789857][ T7972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.814182][ T7972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.841193][ T3295] udevd[3295]: symlink '../../loop2' '/dev/disk/by-diskseq/560.tmp-b7:2' failed: Read-only file system [ 106.980691][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.994229][ T3295] udevd[3295]: symlink '../../loop1' '/dev/disk/by-diskseq/536.tmp-b7:1' failed: Read-only file system [ 107.012028][ T6198] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.022645][ T6198] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.034428][ T7978] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1385'. [ 107.067005][ T3295] udevd[3295]: symlink '../../loop1' '/dev/disk/by-diskseq/536.tmp-b7:1' failed: Read-only file system [ 107.098787][ T6198] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.109557][ T6198] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.134365][ T3295] udevd[3295]: symlink '../../loop1' '/dev/disk/by-diskseq/536.tmp-b7:1' failed: Read-only file system [ 107.161059][ T6198] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.171704][ T6198] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.212279][ T3295] udevd[3295]: symlink '../../loop1' '/dev/disk/by-diskseq/536.tmp-b7:1' failed: Read-only file system [ 107.226931][ T6198] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.237331][ T6198] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.321920][ T3295] udevd[3295]: symlink '../../loop1' '/dev/disk/by-diskseq/536.tmp-b7:1' failed: Read-only file system [ 107.373461][ T4266] udevd[4266]: symlink '../../loop4' '/dev/disk/by-diskseq/562.tmp-b7:4' failed: Read-only file system [ 107.559715][ T6198] bridge_slave_1: left allmulticast mode [ 107.566016][ T6198] bridge_slave_1: left promiscuous mode [ 107.572221][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.622306][ T3321] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 107.635080][ T3321] CPU: 0 UID: 0 PID: 3321 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 107.635146][ T3321] Tainted: [W]=WARN [ 107.635155][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.635169][ T3321] Call Trace: [ 107.635177][ T3321] [ 107.635221][ T3321] __dump_stack+0x1d/0x30 [ 107.635248][ T3321] dump_stack_lvl+0x95/0xd0 [ 107.635276][ T3321] dump_stack+0x15/0x1b [ 107.635301][ T3321] dump_header+0x80/0x240 [ 107.635324][ T3321] oom_kill_process+0x295/0x350 [ 107.635406][ T3321] out_of_memory+0x97d/0xb80 [ 107.635437][ T3321] try_charge_memcg+0x62e/0xa10 [ 107.635465][ T3321] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 107.635524][ T3321] __read_swap_cache_async+0x17b/0x2d0 [ 107.635609][ T3321] swap_cluster_readahead+0x262/0x3c0 [ 107.635652][ T3321] swapin_readahead+0xde/0x840 [ 107.635767][ T3321] ? __perf_event_task_sched_in+0xa65/0xad0 [ 107.635799][ T3321] ? __rcu_read_unlock+0x4e/0x70 [ 107.635892][ T3321] ? swap_cache_get_folio+0x26f/0x280 [ 107.635998][ T3321] do_swap_page+0x59b/0x2a50 [ 107.636036][ T3321] ? finish_task_switch+0x79/0x280 [ 107.636070][ T3321] ? __schedule+0x82d/0xc90 [ 107.636132][ T3321] ? __rcu_read_lock+0x36/0x50 [ 107.636159][ T3321] ? __pfx_default_wake_function+0x10/0x10 [ 107.636197][ T3321] handle_mm_fault+0xb40/0x3030 [ 107.636239][ T3321] ? vma_start_read+0x1c7/0x2c0 [ 107.636276][ T3321] do_user_addr_fault+0x62f/0x1050 [ 107.636362][ T3321] exc_page_fault+0x62/0xa0 [ 107.636387][ T3321] asm_exc_page_fault+0x26/0x30 [ 107.636490][ T3321] RIP: 0033:0x7f9c569a60d7 [ 107.636553][ T3321] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 107.636576][ T3321] RSP: 002b:00007ffee2602bd0 EFLAGS: 00010202 [ 107.636657][ T3321] RAX: 0000000000000000 RBX: 000055557a3bf500 RCX: 00007f9c569a60d7 [ 107.636674][ T3321] RDX: 00007ffee2602c10 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.636687][ T3321] RBP: 00007ffee2602c7c R08: 0000000000000000 R09: 0000000000000000 [ 107.636700][ T3321] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 107.636714][ T3321] R13: 00000000000927c0 R14: 000000000001a2c6 R15: 00007ffee2602cd0 [ 107.636732][ T3321] [ 107.636740][ T3321] memory: usage 307200kB, limit 307200kB, failcnt 9781 [ 107.691507][ T6198] bridge_slave_0: left allmulticast mode [ 107.693763][ T3321] memory+swap: usage 369216kB, limit 9007199254740988kB, failcnt 0 [ 107.699098][ T6198] bridge_slave_0: left promiscuous mode [ 107.699246][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.704944][ T3321] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 107.704968][ T3321] Memory cgroup stats for /syz2: [ 107.705324][ T3321] cache 0 [ 107.950212][ T3321] rss 0 [ 107.953303][ T3321] shmem 0 [ 107.956587][ T3321] mapped_file 0 [ 107.960317][ T3321] dirty 0 [ 107.963545][ T3321] writeback 0 [ 107.967174][ T3321] workingset_refault_anon 760 [ 107.972616][ T3321] workingset_refault_file 2913 [ 107.977669][ T3321] swap 63504384 [ 107.981377][ T3321] swapcached 20480 [ 107.985885][ T3321] pgpgin 164722 [ 107.989756][ T3321] pgpgout 164716 [ 107.993912][ T3321] pgfault 109288 [ 107.997957][ T3321] pgmajfault 427 [ 108.002172][ T3321] inactive_anon 4096 [ 108.006592][ T3321] active_anon 16384 [ 108.010757][ T3321] inactive_file 0 [ 108.014658][ T3321] active_file 4096 [ 108.018907][ T3321] unevictable 0 [ 108.022625][ T3321] hierarchical_memory_limit 314572800 [ 108.028568][ T3321] hierarchical_memsw_limit 9223372036854771712 [ 108.035547][ T3321] total_cache 0 [ 108.039369][ T3321] total_rss 0 [ 108.043032][ T3321] total_shmem 0 [ 108.046932][ T3321] total_mapped_file 0 [ 108.051455][ T3321] total_dirty 0 [ 108.057281][ T3321] total_writeback 0 [ 108.062615][ T3321] total_workingset_refault_anon 760 [ 108.068355][ T3321] total_workingset_refault_file 2913 [ 108.074313][ T3321] total_swap 63504384 [ 108.079070][ T3321] total_swapcached 20480 [ 108.084711][ T3321] total_pgpgin 164722 [ 108.089211][ T3321] total_pgpgout 164716 [ 108.093742][ T3321] total_pgfault 109288 [ 108.098255][ T3321] total_pgmajfault 427 [ 108.104015][ T3321] total_inactive_anon 4096 [ 108.109176][ T3321] total_active_anon 16384 [ 108.113711][ T3321] total_inactive_file 0 [ 108.118520][ T3321] total_active_file 4096 [ 108.122952][ T3321] total_unevictable 0 [ 108.127550][ T3321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1384,pid=7973,uid=0 [ 108.142854][ T3321] Memory cgroup out of memory: Killed process 7973 (syz.2.1384) total-vm:94132kB, anon-rss:1332kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 108.284293][ T8014] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.317321][ T8014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.339765][ T6198] team0: Port device .` removed [ 108.346704][ T6198] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.359096][ T8014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.375764][ T6198] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.389013][ T8017] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1397'. [ 108.404212][ T6198] .` (unregistering): Released all slaves [ 108.431031][ T6198] bond1 (unregistering): (slave veth3): Releasing active interface [ 108.441308][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.452024][ T6198] bond1 (unregistering): Released all slaves [ 108.524731][ T8026] vlan3: entered allmulticast mode [ 108.530547][ T8026] bond0: entered allmulticast mode [ 108.536334][ T8026] bond_slave_0: entered allmulticast mode [ 108.542595][ T8026] bond_slave_1: entered allmulticast mode [ 108.654763][ T7984] chnl_net:caif_netlink_parms(): no params data found [ 108.731972][ T8044] netlink: 'syz.2.1402': attribute type 13 has an invalid length. [ 108.748841][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.756704][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.774015][ T7984] bridge_slave_0: entered allmulticast mode [ 108.785982][ T7984] bridge_slave_0: entered promiscuous mode [ 108.881578][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.894845][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.920613][ T8044] veth1_vlan: left allmulticast mode [ 108.962070][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.970832][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.983172][ T8057] ip6t_srh: unknown srh match flags 4000 [ 108.989347][ T7984] bridge_slave_1: entered allmulticast mode [ 108.990784][ T7984] bridge_slave_1: entered promiscuous mode [ 109.005521][ T6190] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.015895][ T6190] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.034137][ T6190] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.044496][ T6190] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.063177][ T7984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.076070][ T7984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.087013][ T6190] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.097318][ T6190] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.120516][ T6190] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.130225][ T6190] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.154004][ T7984] team0: Port device team_slave_0 added [ 109.169809][ T7984] team0: Port device team_slave_1 added [ 109.201390][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.209133][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.240596][ T7984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.264620][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.272343][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.301366][ T7984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.343042][ T7984] hsr_slave_0: entered promiscuous mode [ 109.350252][ T7984] hsr_slave_1: entered promiscuous mode [ 109.356644][ T7984] debugfs: 'hsr0' already exists in 'hsr' [ 109.362912][ T7984] Cannot create hsr debugfs directory [ 109.459505][ T8076] set_capacity_and_notify: 5 callbacks suppressed [ 109.459524][ T8076] loop2: detected capacity change from 0 to 128 [ 109.504091][ T8076] bio_check_eod: 101 callbacks suppressed [ 109.504109][ T8076] syz.2.1406: attempt to access beyond end of device [ 109.504109][ T8076] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 109.508611][ T7984] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 109.511293][ T8076] syz.2.1406: attempt to access beyond end of device [ 109.511293][ T8076] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 109.545591][ T8076] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 109.556360][ T7984] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.579333][ T7984] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.589441][ T8076] syz.2.1406: attempt to access beyond end of device [ 109.589441][ T8076] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 109.607923][ T7984] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 109.608763][ T8076] syz.2.1406: attempt to access beyond end of device [ 109.608763][ T8076] loop2: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 109.632639][ T8076] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 109.655829][ T8076] syz.2.1406: attempt to access beyond end of device [ 109.655829][ T8076] loop2: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 109.689626][ T8076] syz.2.1406: attempt to access beyond end of device [ 109.689626][ T8076] loop2: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 109.692256][ T8094] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1407'. [ 109.703754][ T8076] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 109.710906][ T8076] syz.2.1406: attempt to access beyond end of device [ 109.710906][ T8076] loop2: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 109.769723][ T8076] syz.2.1406: attempt to access beyond end of device [ 109.769723][ T8076] loop2: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 109.783802][ T8076] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 109.790834][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.829820][ T7984] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.838523][ T8076] syz.2.1406: attempt to access beyond end of device [ 109.838523][ T8076] loop2: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 109.854853][ T8076] syz.2.1406: attempt to access beyond end of device [ 109.854853][ T8076] loop2: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 109.869135][ T8076] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 109.879671][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 109.879685][ T29] audit: type=1326 audit(1769699430.964:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 109.910734][ T29] audit: type=1326 audit(1769699430.964:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 109.912183][ T7984] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.947816][ T7984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.949333][ T29] audit: type=1326 audit(1769699431.034:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 109.984130][ T29] audit: type=1326 audit(1769699431.034:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 109.985799][ T8104] loop5: detected capacity change from 0 to 1024 [ 110.009483][ T29] audit: type=1326 audit(1769699431.034:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 110.059552][ T8104] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.083149][ T8076] Buffer I/O error on dev loop2, logical block 116, lost async page write [ 110.093214][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.101576][ T6190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.112714][ T8104] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.122517][ T8116] sctp: [Deprecated]: syz.1.1410 (pid 8116) Use of int in max_burst socket option deprecated. [ 110.122517][ T8116] Use struct sctp_assoc_value instead [ 110.129107][ T8076] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 110.149360][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.158037][ T6190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.167341][ T29] audit: type=1326 audit(1769699431.124:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 110.192129][ T29] audit: type=1326 audit(1769699431.124:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 110.216813][ T29] audit: type=1326 audit(1769699431.124:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df6a6aeb9 code=0x7ffc0000 [ 110.263616][ T6198] tipc: Left network mode [ 110.266069][ T8104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.299961][ T6198] hsr_slave_0: left promiscuous mode [ 110.328989][ T6198] hsr_slave_1: left promiscuous mode [ 110.345410][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.353568][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.374630][ T8076] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 110.388195][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.396006][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.407332][ T8135] loop1: detected capacity change from 0 to 512 [ 110.417424][ T8135] ext4: Unknown parameter 'nouser_xattr' [ 110.426805][ T6198] veth0_virt_wifi: left promiscuous mode [ 110.434704][ T6198] veth1_macvtap: left promiscuous mode [ 110.444441][ T4840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.466250][ T6198] veth0_macvtap: left promiscuous mode [ 110.472047][ T6198] veth1_vlan: left promiscuous mode [ 110.493790][ T29] audit: type=1400 audit(1769699431.574:1578): avc: denied { write } for pid=8139 comm="syz.4.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 110.497449][ T6198] veth0_vlan: left promiscuous mode [ 110.567225][ T8145] loop1: detected capacity change from 0 to 256 [ 110.642555][ T6198] team0 (unregistering): Port device team_slave_1 removed [ 110.653377][ T6198] team0 (unregistering): Port device team_slave_0 removed [ 110.729686][ T8156] syzkaller0: entered promiscuous mode [ 110.736556][ T8156] syzkaller0: entered allmulticast mode [ 110.764150][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.774629][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'. [ 110.784445][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1420'. [ 110.789860][ T8165] loop5: detected capacity change from 0 to 1024 [ 110.806051][ T8165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.819971][ T8165] EXT4-fs: Mount option(s) incompatible with ext3 [ 110.876637][ T8171] loop2: detected capacity change from 0 to 512 [ 110.893894][ T29] audit: type=1400 audit(1769699431.974:1579): avc: denied { create } for pid=8173 comm="syz.5.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 110.921945][ T8171] EXT4-fs: inline encryption not supported [ 110.928162][ T8171] EXT4-fs: inline encryption not supported [ 110.943333][ T8171] EXT4-fs: Ignoring removed oldalloc option [ 110.963839][ T8171] EXT4-fs: Ignoring removed i_version option [ 111.049632][ T8171] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 111.058307][ T8171] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1422: invalid indirect mapped block 2683928664 (level 1) [ 111.074107][ T8171] EXT4-fs (loop2): 1 truncate cleaned up [ 111.080487][ T8171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.160357][ T6198] IPVS: stop unused estimator thread 0... [ 111.276036][ T8195] loop5: detected capacity change from 0 to 1024 [ 111.281301][ T7984] veth0_vlan: entered promiscuous mode [ 111.303509][ T7984] veth1_vlan: entered promiscuous mode [ 111.322628][ T8195] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.327030][ T7984] veth0_macvtap: entered promiscuous mode [ 111.353520][ T7984] veth1_macvtap: entered promiscuous mode [ 111.353592][ T8195] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.380351][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.396867][ T8195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.402151][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.425993][ T8196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.455087][ T6342] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.495786][ T6342] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.536387][ T8215] loop6: detected capacity change from 0 to 256 [ 111.541122][ T6342] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.569319][ T6198] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.589165][ T8215] FAT-fs (loop6): Directory bread(block 1285) failed [ 111.597569][ T8215] FAT-fs (loop6): Directory bread(block 1285) failed [ 111.629730][ T3295] udevd[3295]: symlink '../../loop6' '/dev/disk/by-diskseq/578.tmp-b7:6' failed: Read-only file system [ 111.687842][ T8226] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1433'. [ 111.694095][ T3295] udevd[3295]: symlink '../../loop6' '/dev/disk/by-diskseq/578.tmp-b7:6' failed: Read-only file system [ 111.729285][ T4840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.746595][ T3295] udevd[3295]: symlink '../../loop6' '/dev/disk/by-diskseq/578.tmp-b7:6' failed: Read-only file system [ 111.841510][ T3295] udevd[3295]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 111.876419][ T3295] udevd[3295]: symlink '../../loop5' '/dev/disk/by-diskseq/576.tmp-b7:5' failed: Read-only file system [ 111.912351][ T4266] udevd[4266]: symlink '../../loop4' '/dev/disk/by-diskseq/563.tmp-b7:4' failed: Read-only file system [ 111.940070][ T8236] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1435'. [ 111.954397][ T4456] udevd[4456]: symlink '../../loop6' '/dev/disk/by-diskseq/579.tmp-b7:6' failed: Read-only file system [ 111.957173][ T3295] udevd[3295]: symlink '../../loop5' '/dev/disk/by-diskseq/576.tmp-b7:5' failed: Read-only file system [ 111.983739][ T3305] udevd[3305]: symlink '../../loop1' '/dev/disk/by-diskseq/577.tmp-b7:1' failed: Read-only file system [ 112.016494][ T8240] loop4: detected capacity change from 0 to 1024 [ 112.029799][ T4266] udevd[4266]: symlink '../../loop6' '/dev/disk/by-diskseq/579.tmp-b7:6' failed: Read-only file system [ 112.034950][ T8240] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.048696][ T8244] netlink: 'syz.6.1439': attribute type 39 has an invalid length. [ 112.072747][ T8245] loop5: detected capacity change from 0 to 512 [ 112.095506][ T8171] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1422: Invalid block bitmap block 3 in block_group 0 [ 112.112817][ T8171] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1422: Invalid block bitmap block 3 in block_group 0 [ 112.117798][ T8245] ext4: Unknown parameter 'nouser_xattr' [ 112.135742][ T8171] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1422: Invalid block bitmap block 3 in block_group 0 [ 112.155706][ T8248] gtp0: entered promiscuous mode [ 112.156870][ T8240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.161024][ T8248] gtp0: entered allmulticast mode [ 112.274953][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.523609][ T8268] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 112.537762][ T8268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.560730][ T8268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.611463][ T8272] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1445'. [ 112.652537][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 112.672503][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.690610][ T8272] vlan4: entered promiscuous mode [ 112.699569][ T8272] dummy0: entered promiscuous mode [ 112.731754][ T8274] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1446'. [ 112.800081][ T8277] openvswitch: netlink: Missing key (keys=40, expected=100) [ 112.905832][ T8287] FAULT_INJECTION: forcing a failure. [ 112.905832][ T8287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.919977][ T8287] CPU: 0 UID: 0 PID: 8287 Comm: syz.4.1451 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 112.920050][ T8287] Tainted: [W]=WARN [ 112.920058][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.920146][ T8287] Call Trace: [ 112.920153][ T8287] [ 112.920161][ T8287] __dump_stack+0x1d/0x30 [ 112.920193][ T8287] dump_stack_lvl+0x95/0xd0 [ 112.920265][ T8287] dump_stack+0x15/0x1b [ 112.920289][ T8287] should_fail_ex+0x263/0x280 [ 112.920325][ T8287] should_fail+0xb/0x20 [ 112.920353][ T8287] should_fail_usercopy+0x1a/0x20 [ 112.920393][ T8287] _copy_from_user+0x1c/0xb0 [ 112.920413][ T8287] __se_sys_migrate_pages+0x25c/0x840 [ 112.920445][ T8287] __x64_sys_migrate_pages+0x55/0x70 [ 112.920492][ T8287] x64_sys_call+0x1cb1/0x3000 [ 112.920516][ T8287] do_syscall_64+0xc0/0x2a0 [ 112.920617][ T8287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.920654][ T8287] RIP: 0033:0x7f31c719aeb9 [ 112.920670][ T8287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.920754][ T8287] RSP: 002b:00007f31c5bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 112.920830][ T8287] RAX: ffffffffffffffda RBX: 00007f31c7415fa0 RCX: 00007f31c719aeb9 [ 112.920845][ T8287] RDX: 0000200000000200 RSI: 00000000000000fc RDI: 0000000000000000 [ 112.920872][ T8287] RBP: 00007f31c5bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.920888][ T8287] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 112.920903][ T8287] R13: 00007f31c7416038 R14: 00007f31c7415fa0 R15: 00007ffe4dc20ff8 [ 112.920958][ T8287] [ 113.122509][ T8121] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 113.255297][ T8302] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 113.278609][ T8302] bond1 (unregistering): Released all slaves [ 113.306722][ T8312] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.314854][ T8312] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.369123][ T8312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.403974][ T8320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.453722][ T8333] ext4: Unknown parameter 'nouser_xattr' [ 113.512643][ T7984] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.529140][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.658990][ T8336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.665928][ T8350] FAULT_INJECTION: forcing a failure. [ 113.665928][ T8350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.681784][ T8350] CPU: 1 UID: 0 PID: 8350 Comm: syz.6.1470 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 113.681894][ T8350] Tainted: [W]=WARN [ 113.681952][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.681965][ T8350] Call Trace: [ 113.681973][ T8350] [ 113.681982][ T8350] __dump_stack+0x1d/0x30 [ 113.682013][ T8350] dump_stack_lvl+0x95/0xd0 [ 113.682130][ T8350] dump_stack+0x15/0x1b [ 113.682213][ T8350] should_fail_ex+0x263/0x280 [ 113.682258][ T8350] should_fail+0xb/0x20 [ 113.682289][ T8350] should_fail_usercopy+0x1a/0x20 [ 113.682320][ T8350] _copy_from_user+0x1c/0xb0 [ 113.682436][ T8350] __se_sys_migrate_pages+0x25c/0x840 [ 113.682470][ T8350] __x64_sys_migrate_pages+0x55/0x70 [ 113.682567][ T8350] x64_sys_call+0x1cb1/0x3000 [ 113.682592][ T8350] do_syscall_64+0xc0/0x2a0 [ 113.682625][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.682669][ T8350] RIP: 0033:0x7f0ed1c0aeb9 [ 113.682689][ T8350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.682712][ T8350] RSP: 002b:00007f0ed0667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 113.682749][ T8350] RAX: ffffffffffffffda RBX: 00007f0ed1e85fa0 RCX: 00007f0ed1c0aeb9 [ 113.682765][ T8350] RDX: 0000200000000200 RSI: 00000000000000fc RDI: 0000000000000000 [ 113.682779][ T8350] RBP: 00007f0ed0667090 R08: 0000000000000000 R09: 0000000000000000 [ 113.682792][ T8350] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 113.682806][ T8350] R13: 00007f0ed1e86038 R14: 00007f0ed1e85fa0 R15: 00007ffd9f430748 [ 113.682871][ T8350] [ 113.915938][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.990429][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1473'. [ 113.997881][ T8360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.001674][ T8358] netlink: 'syz.6.1473': attribute type 30 has an invalid length. [ 114.036340][ T6327] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.047484][ T8360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.062896][ T6327] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.083477][ T6327] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.093523][ T6327] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.108815][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.256262][ T8372] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1479'. [ 114.269828][ T8372] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1479'. [ 114.418508][ T8384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.500683][ T8384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.535981][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.559886][ T8391] gre1: entered promiscuous mode [ 114.565460][ T8391] gre1: entered allmulticast mode [ 114.626313][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 114.649209][ T8393] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1487'. [ 114.758062][ T8403] set_capacity_and_notify: 8 callbacks suppressed [ 114.758080][ T8403] loop2: detected capacity change from 0 to 512 [ 114.773279][ T8403] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 114.785591][ T8403] EXT4-fs (loop2): invalid journal inode [ 114.791948][ T8403] EXT4-fs (loop2): can't get journal size [ 114.799412][ T8403] EXT4-fs (loop2): 1 truncate cleaned up [ 114.805969][ T8403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.941250][ T8365] syz.6.1476 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 114.955968][ T8365] CPU: 1 UID: 0 PID: 8365 Comm: syz.6.1476 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 114.956020][ T8365] Tainted: [W]=WARN [ 114.956029][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.956065][ T8365] Call Trace: [ 114.956074][ T8365] [ 114.956083][ T8365] __dump_stack+0x1d/0x30 [ 114.956122][ T8365] dump_stack_lvl+0x95/0xd0 [ 114.956147][ T8365] dump_stack+0x15/0x1b [ 114.956167][ T8365] dump_header+0x80/0x240 [ 114.956312][ T8365] oom_kill_process+0x295/0x350 [ 114.956341][ T8365] out_of_memory+0x97d/0xb80 [ 114.956432][ T8365] try_charge_memcg+0x62e/0xa10 [ 114.956552][ T8365] obj_cgroup_charge_pages+0x23/0xc0 [ 114.956586][ T8365] __memcg_kmem_charge_page+0x9e/0x170 [ 114.956621][ T8365] __alloc_frozen_pages_noprof+0x18a/0x350 [ 114.956689][ T8365] alloc_pages_mpol+0xb3/0x260 [ 114.956763][ T8365] alloc_pages_noprof+0x8f/0x130 [ 114.956843][ T8365] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 114.956886][ T8365] __kvmalloc_node_noprof+0x471/0x680 [ 114.956914][ T8365] ? ip_set_alloc+0x24/0x30 [ 114.956960][ T8365] ? ip_set_alloc+0x24/0x30 [ 114.956990][ T8365] ip_set_alloc+0x24/0x30 [ 114.957018][ T8365] hash_netiface_create+0x282/0x740 [ 114.957093][ T8365] ? __pfx_hash_netiface_create+0x10/0x10 [ 114.957200][ T8365] ip_set_create+0x3cf/0x970 [ 114.957238][ T8365] ? __nla_parse+0x40/0x60 [ 114.957497][ T8365] nfnetlink_rcv_msg+0x509/0x5d0 [ 114.957628][ T8365] netlink_rcv_skb+0x123/0x220 [ 114.957668][ T8365] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 114.957710][ T8365] nfnetlink_rcv+0x167/0x1720 [ 114.957742][ T8365] ? __kfree_skb+0x109/0x150 [ 114.957815][ T8365] ? nlmon_xmit+0x4f/0x60 [ 114.957865][ T8365] ? consume_skb+0x49/0x140 [ 114.957999][ T8365] ? nlmon_xmit+0x4f/0x60 [ 114.958032][ T8365] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 114.958075][ T8365] ? __dev_queue_xmit+0x139a/0x1f20 [ 114.958117][ T8365] ? __dev_queue_xmit+0x148/0x1f20 [ 114.958160][ T8365] ? ref_tracker_free+0x37d/0x3e0 [ 114.958301][ T8365] ? __netlink_deliver_tap+0x4dc/0x500 [ 114.958349][ T8365] netlink_unicast+0x5c0/0x690 [ 114.958468][ T8365] netlink_sendmsg+0x5c8/0x6f0 [ 114.958497][ T8365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.958522][ T8365] ____sys_sendmsg+0x5af/0x600 [ 114.958546][ T8365] ___sys_sendmsg+0x195/0x1e0 [ 114.958577][ T8365] __x64_sys_sendmsg+0xd4/0x160 [ 114.958674][ T8365] x64_sys_call+0x17ba/0x3000 [ 114.958703][ T8365] do_syscall_64+0xc0/0x2a0 [ 114.958738][ T8365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.958793][ T8365] RIP: 0033:0x7f0ed1c0aeb9 [ 114.958895][ T8365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.958920][ T8365] RSP: 002b:00007f0ed0667028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.958944][ T8365] RAX: ffffffffffffffda RBX: 00007f0ed1e85fa0 RCX: 00007f0ed1c0aeb9 [ 114.958972][ T8365] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 114.959059][ T8365] RBP: 00007f0ed1c78c1f R08: 0000000000000000 R09: 0000000000000000 [ 114.959072][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.959088][ T8365] R13: 00007f0ed1e86038 R14: 00007f0ed1e85fa0 R15: 00007ffd9f430748 [ 114.959113][ T8365] [ 115.302523][ T8365] memory: usage 307200kB, limit 307200kB, failcnt 4283 [ 115.310135][ T8365] memory+swap: usage 323728kB, limit 9007199254740988kB, failcnt 0 [ 115.318504][ T8365] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 115.326171][ T8365] Memory cgroup stats for /syz6: [ 115.326664][ T8365] cache 0 [ 115.335832][ T8365] rss 32768 [ 115.339525][ T8365] shmem 0 [ 115.342848][ T8365] mapped_file 0 [ 115.346684][ T8365] dirty 0 [ 115.349890][ T8365] writeback 0 [ 115.354219][ T8365] workingset_refault_anon 48 [ 115.359413][ T8365] workingset_refault_file 0 [ 115.364558][ T8365] swap 16924672 [ 115.368592][ T8365] swapcached 57344 [ 115.372503][ T8365] pgpgin 4736 [ 115.376258][ T8365] pgpgout 4722 [ 115.380195][ T8365] pgfault 1262 [ 115.383722][ T8365] pgmajfault 18 [ 115.387504][ T8365] inactive_anon 57344 [ 115.392058][ T8365] active_anon 0 [ 115.396248][ T8365] inactive_file 0 [ 115.400297][ T8365] active_file 0 [ 115.404141][ T8365] unevictable 0 [ 115.407597][ T8365] hierarchical_memory_limit 314572800 [ 115.413430][ T8365] hierarchical_memsw_limit 9223372036854771712 [ 115.420644][ T8365] total_cache 0 [ 115.424569][ T8365] total_rss 32768 [ 115.428686][ T8365] total_shmem 0 [ 115.431991][ T8408] loop4: detected capacity change from 0 to 512 [ 115.432970][ T8365] total_mapped_file 0 [ 115.432981][ T8365] total_dirty 0 [ 115.432988][ T8365] total_writeback 0 [ 115.432996][ T8365] total_workingset_refault_anon 48 [ 115.433005][ T8365] total_workingset_refault_file 0 [ 115.464280][ T8365] total_swap 16924672 [ 115.464598][ T8408] ext4: Unknown parameter 'nouser_xattr' [ 115.468285][ T8365] total_swapcached 57344 [ 115.468304][ T8365] total_pgpgin 4736 [ 115.468311][ T8365] total_pgpgout 4722 [ 115.468319][ T8365] total_pgfault 1262 [ 115.468327][ T8365] total_pgmajfault 18 [ 115.496080][ T8365] total_inactive_anon 57344 [ 115.502011][ T8365] total_active_anon 0 [ 115.506760][ T8409] loop5: detected capacity change from 0 to 1024 [ 115.506981][ T8365] total_inactive_file 0 [ 115.516464][ T8409] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.518971][ T8365] total_active_file 0 [ 115.531694][ T8365] total_unevictable 0 [ 115.536321][ T8409] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.537195][ T8365] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1476,pid=8364,uid=0 [ 115.562812][ T8365] Memory cgroup out of memory: Killed process 8364 (syz.6.1476) total-vm:96180kB, anon-rss:1332kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 115.566967][ T8409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.597683][ T8410] loop4: detected capacity change from 0 to 256 [ 115.598757][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.666508][ T8415] loop2: detected capacity change from 0 to 1024 [ 115.675158][ T8415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.709980][ T8415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.785211][ T4840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.834976][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.839627][ T8422] syzkaller0: entered promiscuous mode [ 115.850032][ T8422] syzkaller0: entered allmulticast mode [ 115.883633][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 115.883652][ T29] audit: type=1400 audit(1769699436.964:1600): avc: denied { create } for pid=8423 comm="syz.6.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 115.926853][ T29] audit: type=1400 audit(1769699436.994:1601): avc: denied { bind } for pid=8423 comm="syz.6.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 115.948796][ T29] audit: type=1400 audit(1769699436.994:1602): avc: denied { setopt } for pid=8423 comm="syz.6.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 115.973399][ T29] audit: type=1400 audit(1769699436.994:1603): avc: denied { write } for pid=8423 comm="syz.6.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 116.000236][ T29] audit: type=1400 audit(1769699437.044:1604): avc: denied { name_bind } for pid=8433 comm="syz.6.1502" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 116.131198][ T8451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=8451 comm=syz.1.1506 [ 116.153596][ T29] audit: type=1400 audit(1769699437.214:1605): avc: denied { bind } for pid=8450 comm="syz.1.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.193874][ T8453] loop2: detected capacity change from 0 to 1024 [ 116.207961][ T8453] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.218393][ T29] audit: type=1400 audit(1769699437.294:1606): avc: denied { read write } for pid=8454 comm="syz.6.1508" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 116.245563][ T29] audit: type=1400 audit(1769699437.294:1607): avc: denied { open } for pid=8454 comm="syz.6.1508" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 116.255678][ T8453] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.272191][ T29] audit: type=1400 audit(1769699437.294:1608): avc: denied { ioctl } for pid=8454 comm="syz.6.1508" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 116.327761][ T8453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.359661][ T8453] netlink: 'syz.2.1507': attribute type 10 has an invalid length. [ 116.371296][ T8453] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.380923][ T8453] team0: entered promiscuous mode [ 116.386644][ T8453] team_slave_0: entered promiscuous mode [ 116.393228][ T8453] team_slave_1: entered promiscuous mode [ 116.400157][ T8453] bond0: (slave team0): Enslaving as an active interface with an up link [ 116.402520][ T8465] loop6: detected capacity change from 0 to 1024 [ 116.419047][ T8465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.467359][ T29] audit: type=1400 audit(1769699437.544:1609): avc: denied { read } for pid=8464 comm="syz.6.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.600615][ T8473] syzkaller0: entered promiscuous mode [ 116.606798][ T8473] syzkaller0: entered allmulticast mode [ 116.666060][ T3295] udevd[3295]: symlink '../../loop2' '/dev/disk/by-diskseq/614.tmp-b7:2' failed: Read-only file system [ 116.691588][ T8476] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 116.746694][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-diskseq/615.tmp-b7:4' failed: Read-only file system [ 116.793501][ T3295] udevd[3295]: symlink '../../loop5' '/dev/disk/by-diskseq/609.tmp-b7:5' failed: Read-only file system [ 116.820227][ T8462] ================================================================== [ 116.828672][ T8462] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 116.837011][ T8462] [ 116.839456][ T8462] write to 0xffffea00056f4498 of 8 bytes by task 8466 on cpu 0: [ 116.847709][ T8462] __filemap_remove_folio+0x201/0x300 [ 116.853793][ T8462] filemap_remove_folio+0x6d/0x1d0 [ 116.859708][ T8462] truncate_inode_folio+0x42/0x50 [ 116.865030][ T8462] shmem_undo_range+0x28a/0xb10 [ 116.869977][ T8462] shmem_fallocate+0x881/0x920 [ 116.875295][ T8462] vfs_fallocate+0x3b6/0x450 [ 116.880681][ T8462] file_ioctl+0x4e3/0x5c0 [ 116.885276][ T8462] do_vfs_ioctl+0x7c9/0xe70 [ 116.889980][ T8462] __se_sys_ioctl+0x82/0x140 [ 116.894837][ T8462] __x64_sys_ioctl+0x43/0x50 [ 116.899995][ T8462] x64_sys_call+0x14b0/0x3000 [ 116.904859][ T8462] do_syscall_64+0xc0/0x2a0 [ 116.909449][ T8462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.915639][ T8462] [ 116.918084][ T8462] read to 0xffffea00056f4498 of 8 bytes by task 8462 on cpu 1: [ 116.926281][ T8462] folio_mapping+0xa1/0xe0 [ 116.931057][ T8462] move_folios_to_lru+0x128/0x6d0 [ 116.936260][ T8462] evict_folios+0x31e6/0x35b0 [ 116.941362][ T8462] try_to_shrink_lruvec+0x5f6/0x960 [ 116.946673][ T8462] shrink_lruvec+0x24e/0x1bc0 [ 116.952334][ T8462] shrink_node+0x68e/0x2000 [ 116.957125][ T8462] do_try_to_free_pages+0x404/0xcc0 [ 116.963229][ T8462] try_to_free_mem_cgroup_pages+0x222/0x470 [ 116.969485][ T8462] try_charge_memcg+0x37e/0xa10 [ 116.974629][ T8462] obj_cgroup_charge_pages+0x23/0xc0 [ 116.980643][ T8462] __memcg_kmem_charge_page+0x9e/0x170 [ 116.986632][ T8462] __alloc_frozen_pages_noprof+0x18a/0x350 [ 116.992971][ T8462] alloc_pages_mpol+0xb3/0x260 [ 116.998080][ T8462] alloc_pages_noprof+0x8f/0x130 [ 117.003294][ T8462] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 117.009211][ T8462] __kvmalloc_node_noprof+0x471/0x680 [ 117.014776][ T8462] ip_set_alloc+0x24/0x30 [ 117.019257][ T8462] hash_netiface_create+0x282/0x740 [ 117.024489][ T8462] ip_set_create+0x3cf/0x970 [ 117.029184][ T8462] nfnetlink_rcv_msg+0x509/0x5d0 [ 117.034231][ T8462] netlink_rcv_skb+0x123/0x220 [ 117.039449][ T8462] nfnetlink_rcv+0x167/0x1720 [ 117.044319][ T8462] netlink_unicast+0x5c0/0x690 [ 117.049155][ T8462] netlink_sendmsg+0x5c8/0x6f0 [ 117.054203][ T8462] ____sys_sendmsg+0x5af/0x600 [ 117.059339][ T8462] ___sys_sendmsg+0x195/0x1e0 [ 117.064605][ T8462] __x64_sys_sendmsg+0xd4/0x160 [ 117.069724][ T8462] x64_sys_call+0x17ba/0x3000 [ 117.074857][ T8462] do_syscall_64+0xc0/0x2a0 [ 117.079622][ T8462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.085867][ T8462] [ 117.088276][ T8462] value changed: 0xffff8881050acd90 -> 0x0000000000000000 [ 117.095473][ T8462] [ 117.097877][ T8462] Reported by Kernel Concurrency Sanitizer on: [ 117.104391][ T8462] CPU: 1 UID: 0 PID: 8462 Comm: syz.1.1510 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.116304][ T8462] Tainted: [W]=WARN [ 117.120105][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.130416][ T8462] ================================================================== [ 117.145802][ T8484] __nla_validate_parse: 5 callbacks suppressed [ 117.145824][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 117.206016][ T8487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1514'. [ 117.215081][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1514'. [ 117.240978][ T8484] bond1 (unregistering): Released all slaves [ 117.332803][ T8483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8483 comm=syz.4.1515 [ 117.333570][ T3295] udevd[3295]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 117.361074][ T8483] netlink: 'syz.4.1515': attribute type 13 has an invalid length. [ 117.430247][ T3295] udevd[3295]: symlink '../../loop6' '/dev/disk/by-diskseq/613.tmp-b7:6' failed: Read-only file system [ 117.435459][ T4266] udevd[4266]: symlink '../../loop2' '/dev/disk/by-diskseq/614.tmp-b7:2' failed: Read-only file system [ 117.477105][ T3295] udevd[3295]: symlink '../../loop6' '/dev/disk/by-diskseq/613.tmp-b7:6' failed: Read-only file system [ 117.478712][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.532571][ T8483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.543515][ T8483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.573843][ T3295] udevd[3295]: symlink '../../loop6' '/dev/disk/by-diskseq/616.tmp-b7:6' failed: Read-only file system [ 117.656519][ T6204] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.665856][ T6204] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.675811][ T6204] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.685708][ T6204] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.706479][ T3295] udevd[3295]: symlink '../../loop5' '/dev/disk/by-diskseq/609.tmp-b7:5' failed: Read-only file system [ 117.718202][ T6204] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.727405][ T6204] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.740877][ T6204] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.750312][ T6204] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.776125][ T8462] syz.1.1510 (8462) used greatest stack depth: 5984 bytes left [ 117.797451][ T3295] udevd[3295]: symlink '../../loop4' '/dev/disk/by-diskseq/615.tmp-b7:4' failed: Read-only file system