last executing test programs: 4m14.802164388s ago: executing program 32 (id=168): r0 = openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) sendto$inet6(r2, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x60}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x1000000000000, 0xfffffffd, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 3m25.49420717s ago: executing program 33 (id=1080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="28010000170001000300000000000000e00000020000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000ac1414120000000000000000000000000000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000000000000000000000000000000000000000000000000000000000000000000b10f00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000004000000b86b6e000000000000000000feffffff00"/128], 0x128}}, 0x4000) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000f6ffffffffffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) (async) r7 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) (async) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) (async) io_uring_enter(r7, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRESOCT=r2], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xea5bc50b6199d77e) 2m5.809100707s ago: executing program 5 (id=2437): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) waitid(0x1, 0x0, &(0x7f0000000300), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x94) socket(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/pid\x00') ioctl$BTRFS_IOC_ADD_DEV(r1, 0x8004b706, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_create1(0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x80, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) unshare(0x22020400) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=r5, @ANYBLOB="000000000000000008001b000000000024001a8020000a80140007"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f00000000c0), 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) 2m5.306231996s ago: executing program 5 (id=2447): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000002080)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x8084) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5fbc163"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe06, 0x1000047, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001200)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000ff010000000000000000000000000001000000004e230080000000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000300)) creat(&(0x7f00000000c0)='./file0\x00', 0x50) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x39) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000000)=0x9) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000080)=0x7f) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 2m5.039339732s ago: executing program 5 (id=2449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x9d12}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file1\x00'}) setuid(r2) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x42, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_ADMIT_BYTES={0x0, 0x5, 0xd9a0}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xab2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) close(0x3) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9d, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7b, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/99}}}}}}, 0x0) syz_read_part_table(0x5db, &(0x7f0000000600)="$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") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x518, 0x0, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x448, 0xffffffff, 0xffffffff, 0x448, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0xff000000, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth0_vlan\x00', '\x00', {0xff}, {}, 0x0, 0x8, 0x5, 0x4}, 0x0, 0x200, 0x220, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_team\x00', {0xfffffffffffffffa, 0x3, 0x1, 0x80000000, 0xa, 0x6, 0x5, 0x7, 0x20, 0x78}, {0x5e31}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x208, 0x228, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@rt={{0x138}, {0x3, [0x5e, 0xa], 0xaf6, 0x20, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private0, @local, @remote, @private2, @remote, @dev={0xfe, 0x80, '\x00', 0x36}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @empty, @local, @private0, @dev={0xfe, 0x80, '\x00', 0xc}], 0x2}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@oldalloc}, {@jqfmt_vfsold}, {@user_xattr}, {@nodioread_nolock}, {@nogrpid}, {@norecovery}, {@errors_remount}, {@jqfmt_vfsv1}, {@nojournal_checksum}], [{@hash}]}, 0x1, 0x590, &(0x7f0000000b00)="$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") 2m4.332327853s ago: executing program 5 (id=2459): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x7, 0x0, 0xfffffffc}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) close(r1) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x6) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) capset(&(0x7f00000000c0)={0x20080522, r3}, &(0x7f0000000100)={0x7, 0x8d8, 0x6, 0x3, 0x8000, 0x8}) 2m4.22171722s ago: executing program 5 (id=2462): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000520001000000000004000000020000000800010068fbefdac6f6918da994840c63d8dfef32d5695aac883aba9cb210ff357d"], 0x1c}}, 0x0) fchown(r3, 0x0, 0xee01) fchown(r3, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x4020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c00028008000100"], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000f80)={0x0, 0x2, 0xb, 0x2}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000680)="b61b9601d0a1d9232e413b887284d0e59c8e9ec350fc5e6e822948e46f3c158a504aa71eb7d133937711c8db4dfb4fdc5998f2cf14f188a17895b54bde37b01e0a0de332b044478b90d23c24f793b551d27e53683478b871b09cc913dfb3b9415ae12217d7b956c086daebd8e60de3187b241d073ad47d16f4b6c9f03bc3692aa494f59ca89676546f736a6d4f65e9f5015f43dfcb8dc2defc09de0613a4f55c3aa18efa93f1510c78258c65d5d95d96f09335553147e512912e0d1765f56433a540757722a3722e8cf60410", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r7, &(0x7f0000000780)}, 0x20) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x0, "00769a7d8200010000001495595915303d6000"}) r9 = syz_open_pts(r8, 0x8000) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) sendmsg$ETHTOOL_MSG_WOL_GET(r0, 0x0, 0x4000080) syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100) 2m3.649718853s ago: executing program 5 (id=2472): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 2m3.649606943s ago: executing program 34 (id=2472): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 1m39.07365061s ago: executing program 1 (id=2878): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x2000, @in6={0xa, 0xfffd, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) 1m39.001700963s ago: executing program 1 (id=2880): prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) capset(&(0x7f0000000080)={0x19980330}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x14, 0x14, 0x105, 0x70bd2c, 0x25dfdb7b, {0x28, 0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x14800) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 1m38.901367489s ago: executing program 1 (id=2882): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x8, 0x9, 0x7fe0, 0x6, 0x7, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x0, 0x7, 0x7}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xf4dbb6eb9ce8819e}]}}}]}, 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000100)=0x9, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000030000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="18040000", @ANYRES16=r5, @ANYBLOB="00032dbd7000ffdbdf2506000000640004801300010062726f6164636173742d6c696e6b00000900010073797a30000000001400078008000200f9ffffff080003000000000014000780080001000e000000080001001b0000000c000780080001001b0000000900010073797a3000000000200007800c0004000100000001000000080001000200000008000200a66b00004c0003800800020008000000080001000200000008000100080000000800020001000000080002000400000008000200050000000800010001000000080002000600000008000300ff7f000004000480c0000280040004003400038008000200c50c0000080002000700000008000100ff0f000008000200000000000800010007000000080001008a0c00001c0003800800020000000000080001000a000000080001003c000000540003800800010003000000080001000400000008000200730000000800010002000000080002008000000008000100060000000800020006000000082001000300000008000200ff00000008000200ca000000140003800800020000001c000800020001000000b80001800d0001007564703a73797a30000000002c000280080002000008000008000300060000000800010018000000080002003e4800000800010001000000380004001400010002004e22e00000010000000000000000200002000a004e2300000006fc0100000000000000000000000000010f000000380004001400010002004e207f0000010000000000000000200002000a004e200000000700000000000000000000ffffac1e0001020000000800030006000000bc0006800800010008000000080006000700000008000600084a00004200040067636d28616573290000000000000000000000000000000000000000000000001a00000016052b152bbf86dd21dde2d4f447b4138a12d3c126c92fb0eb9400000400050008000600070000004700040067636d28616573290000000000000000000000000000000000000000000000001f00000045930b3478f60619bccfa37f6b4b209db9ecca0d1fadc13a469641b5833edd00080001000700000050000680420003005e17ab7697fb0c70cef395e016afafbcdde4f40d0a0e64ddcf0ec8fb5ae6b4df9085fb110e1f11105fb5303860dca6aa8d9df4001b18a7217dd0aa9324db00000800060002000000ac0006800400020004000200040002004a00040067636d286165732900000000000000000000000000000000000000000000000022000000df5a1ef488ff50b09379ba271ac714cae93453014eca1faf1c4eab2e81307988552200004800040067636d286165732900000000000000000000000000000000000000000000000020000000ec917cfa0f57d568eae6baf737b116bbdddfd38320f05cc9f96b6a2a4456477f0800010031000000"], 0x418}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) 1m38.765837577s ago: executing program 1 (id=2883): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create(0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xc, 0xffc0}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) r5 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r5, 0x7, r2, &(0x7f0000000040)={r3, r2}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x4, 0x0, 0x0) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@i_version}, {@nobarrier}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r10 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r12 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) write$binfmt_elf32(r10, &(0x7f0000000900)=ANY=[], 0x58) fallocate(r12, 0x0, 0x9, 0x2000403) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f0000000040)={0xc, r10, 0x4, 0x0, 0x5, 0xfffefffffe000000}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000080)={0x0, 0x2, 0xffe, 0x4000006}) finit_module(r0, &(0x7f0000000000)=']\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061146c000000000007004000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 1m38.501424003s ago: executing program 1 (id=2887): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x2a, 0x1, 0xaa, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x6025, 0xa08, 0xb, 0x0, 0x20000006, 0x7, 0xa, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$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") mlockall(0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1m38.170324502s ago: executing program 1 (id=2892): prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) capset(0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x14, 0x14, 0x105, 0x70bd2c, 0x25dfdb7b, {0x28, 0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x14800) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 1m38.140110864s ago: executing program 35 (id=2892): prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) capset(0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x14, 0x14, 0x105, 0x70bd2c, 0x25dfdb7b, {0x28, 0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x14800) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 1m1.9322281s ago: executing program 6 (id=3598): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x4ca, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 1m1.574697401s ago: executing program 6 (id=3606): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200002000", 0x15}], 0x1) 1m1.524191744s ago: executing program 6 (id=3608): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x3fffffffc00, 0x75ea, 0x800004}) 1m1.401930071s ago: executing program 6 (id=3611): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18450, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1217, 0x10000, 0x5, 0x6, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x482, &(0x7f00000004c0)="$eJzs281rHOUfAPDvTLKb9teX5FfqS2vVaBGCYtKmVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafIzM6km202ac0mmyafD8zs8+w8s/N895mXZ+bZDWDTGsxmScT2iPg9Ivob2YUFBhsvN65dGL957cJ4EnNzb/yV5OWuX7swXhYt19tWZIbSiPTjpNjIQtPnzp8aq9drZ4v8yMzpd0amz51/+r3TYydrJ2tnRo8cOXzo4HPPjj7TkTizuK7v/XBq356X37r86vjxy2///G1W3+3F8uY4OmUwC/zvuVzrsic6vbEu25HP+/J50tvlynDHeiIia65Kfvz3R0/carz+eOmjrlYOWFXZtamv/eLZOWADS+JOS1aazhnAva+80Gf3v+W0Bt2OdePqC40boCzuG8XUWNIbaVGmMn9/23mDEXF89p8vsylW6TkEAECzT8e/OFaNvvjg5jevZH2P/vkladyfv/6Rz3cWYygDEfH/iNhVdI52R8R9EXnZByLiwRXW5/b+T3plhR+5pKz/93wxtrWw/1f2/mKgp8jtyOOvJCcm67UDxXcyFJW+LH9wiW18f/S3z9ota+7/ZVO2/bIvWNTjSm/LA7qJsZmxqKwk6luuXorY27tY/Mn8SEASEXsiYu+yn5Y2Z3aWicknv97Xbo0i/iyaNvEvoQPjTHNfZeHNZvHPRkv8paR5fHLytvHJkS1Rrx0YKfeK2/3y6yevt9v+8u2/uq7WGq9N7d9aZCBpHq+d7uz2/+P+n1aTN/Nx5mox5vj+2MzM2YMR1eRYnq8WZfP3R2+tW+bL8tn+P7R/8eN/V7FOFv9DEZHtxA9HxCMR8WhR98ci4vGI2L9EjD+9uHz8kXap/S9FTCx6/pvf/1va/+4TPad+/K7d9u+s/Q/nqaHinfz8t4zFqpOdLloruJLvDgAAAO4Vaf4b+CQdnk+n6fBw4zf8u+N/aX1qeuapE1Pvnplo/FZ+ICpp+aSrv3geWp9s3Fs3VJKjUa+NFs+Ky+elh4rnxp/3bM3zw+NT9YmuRg5sa3P8Z/7s6XbtgFW2ddF3R6trXhGgC1rH0dOF2YuvhZMBbFT+rw2b1zLHf7pW9QDWnus/bF6LHf8XW/LGAmBjcv2HzcvxD5tU+kO3awB0kes/bEor+V//Kia23EXh6jqpc8cS67VR8kREmUjXRX0kVinR7TMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//6pQ2oo=") r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x40020000, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x4e20, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 1m1.115976668s ago: executing program 6 (id=3619): unshare(0x6a040000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000007c0)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) fadvise64(r0, 0x2, 0x0, 0x2ba1b42d8a9ae1a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, 0x1c) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="137c0300231a0500340012800e00010069703667726574617000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1m0.463262056s ago: executing program 6 (id=3637): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) socket$netlink(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x8, 0xfd, 0x0, 'queue0\x00', 0x3}) write$sndseq(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 1m0.424094968s ago: executing program 36 (id=3637): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) socket$netlink(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x8, 0xfd, 0x0, 'queue0\x00', 0x3}) write$sndseq(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 54.482713355s ago: executing program 7 (id=3738): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$nci(r1, &(0x7f0000000180)=""/4096, 0x1000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') exit(0xffff) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)="d0", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="053c3c7ed20d0cd52e513f4000000000851000000a00000085a91a78915b8cc10000002a0000007bf5aa1f00000000951f2356e212aa2470b9a8fa5eed24efb7"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x73, 0x0, 0x0, @time={0x86a, 0x81}, {0x4, 0x4}, {}, @raw32={[0x2600, 0x9]}}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r4, 0x400, 0x0) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 53.588904918s ago: executing program 7 (id=3753): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0x166, 0x0, &(0x7f00000005c0)="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", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x50) 53.506369072s ago: executing program 7 (id=3756): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x800}, 0xdb01, 0x0, 0x2, 0x48000000, 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x1, 0x4}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x610, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4c000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000500)={@local, @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xcf, 0x1, 0x8, [{@loopback, 0x7}, {@empty, 0x1}, {@local}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f00000002c0)=0x3f7, 0x4) recvmmsg(r6, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/43, 0x2b}}], 0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = epoll_create1(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000037000763d9ff4d101152b625037c"], 0x20}, 0x1, 0x0, 0x0, 0x4048091}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000100)={0x20000000}) close_range(r4, 0xffffffffffffffff, 0x0) 52.574128037s ago: executing program 7 (id=3780): set_mempolicy(0x1, &(0x7f00000003c0)=0x8000000000000001, 0x3) r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a0108000000000000000001"], 0x74}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@acl}]}, 0x1, 0x561, &(0x7f0000000f80)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000000), &(0x7f00000002c0)="ff7f000000000000000000004406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000300)=ANY=[], 0xfe37, 0x0) syz_clone(0xa00100, 0x0, 0x0, 0x0, 0x0, 0x0) 52.331193051s ago: executing program 7 (id=3785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x9, 0x0, @fd_index=0x9, 0x100, 0x0, 0xbab, 0x4}) io_uring_enter(r2, 0x15f1, 0xff9c, 0x69, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000c00)={'ip6erspan0\x00', 0x600}) 52.223258798s ago: executing program 7 (id=3788): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x226}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044060}, 0x4010) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) 52.18901815s ago: executing program 37 (id=3788): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x226}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044060}, 0x4010) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) 20.87839919s ago: executing program 8 (id=4430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x1c, &(0x7f0000000000), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 20.777162385s ago: executing program 8 (id=4435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @local, 0x9}, 0x1c) 20.734580828s ago: executing program 8 (id=4437): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, 0x0}, 0x20) 20.641566324s ago: executing program 8 (id=4438): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00100001600010009000000fedbdf2500000000000000000000000000000001e0000001004d8b0000000000000000004e2400044e2100000200a0a032000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000004d432000000000000000000000000000000000000010000000000000000018000000000000008000000000000000400000000000000ffffff7f00000000110f000000000000000000000000000000000100000000009d0e000000000000ff030000000000000300000000000000000000000000000001000080060000000100000025bd700003350000020000e10c0000000000000005000000000400000a0010"], 0x1b0}, 0x1, 0x0, 0x0, 0x20041081}, 0x4000000) syz_clone(0x40100000, &(0x7f0000000380)="c9fe7f03a9816a6965b492f16dee0170ffc2d5b3272b80f5f40893d5d405bbf8a6c783fc9290c21f033bf648f546ffed0110dcafd73174ae664ebec4b55dc379e722c0a02bfd94e281e98d99d15a88077f7bae19deaf382e9518c01aa363f03cd1b641ea4cf51e4857b8477a453837847b39aad8341cabfd4393c7f5d842888792035b4aac917487", 0x88, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)="894b6ab3f1fc2b89") bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000791260000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 20.146209012s ago: executing program 8 (id=4443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='/dev/ttyS3\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) r2 = socket(0x1f, 0x5, 0xffffffff) sendmsg$inet_sctp(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@prinfo={0x18, 0x84, 0x5, {0x9ac8e2a423508d1d, 0x7f9}}], 0x18, 0x8000}, 0x4000004) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x410, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x12c00, 0x0, 0x0, 0x6, 0x0, 0x8f}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x81, 0x6, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x2, 0x0, @local}, 0x1c) r7 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000140)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="00008e0000"], 0x5) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f00000001c0)='W', 0x1, 0xffffffffffffffff) 19.578376735s ago: executing program 8 (id=4453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x1c, &(0x7f0000000000), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 19.577998715s ago: executing program 38 (id=4453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x1c, &(0x7f0000000000), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3.335856175s ago: executing program 9 (id=4759): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1}}], 0x1, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000300)={r3, @in={{0x2, 0x4e24, @local}}, [0x3, 0x0, 0x3, 0x80, 0x1d, 0x1, 0x2, 0xb, 0xfffffffffffffff7, 0xa, 0x7fffffffffffffff, 0x7, 0x5, 0x100000000, 0x8000000000000001]}, &(0x7f00000001c0)=0x100) 3.24724522s ago: executing program 9 (id=4760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff8d, &(0x7f0000000080)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x48040}, 0x114) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x3, 0x0, {0x2, 0x20, 0xa, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x480d0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r6, 0x6, 0x17, &(0x7f0000003580)=""/4117, &(0x7f00000000c0)=0xff8f) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) 2.646327305s ago: executing program 0 (id=4784): socketpair(0x1, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x80, 0x9, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x68, 0x9, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000400)=[@hoplimit={{0x14, 0x29, 0x34, 0x7ffffffe}}], 0x18}}], 0x1, 0x80c0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan0\x00'}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001140)={r1, 0x0, 0x25, 0x5, @void}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x9, 0x10, 0xfffffffffffffff7, 0x1061}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r3, &(0x7f0000000340)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000080), 0x4) r8 = socket(0x2, 0x2, 0x1) bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202effb7b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xe}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.645898635s ago: executing program 2 (id=4785): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.366487201s ago: executing program 2 (id=4792): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0}) 2.314413894s ago: executing program 4 (id=4794): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r1, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006) r2 = syz_io_uring_setup(0x1ca0, &(0x7f0000000380)={0x0, 0x2975, 0x800, 0x0, 0x3d}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x28, 0x0, 0x0) 1.70653756s ago: executing program 0 (id=4799): ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={0x0, 0x9, 0x5}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x100, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x5, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) 1.70535925s ago: executing program 0 (id=4800): r0 = getpgid(0x0) r1 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x3fff8000}, 0x0, 0x34, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3e8}, {0xc, 0x90}, {0xc, 0x90, 0x8000000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x40090) r4 = syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xda7e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) poll(&(0x7f00000002c0)=[{r6, 0x2}], 0x1, 0xfa) r8 = dup2(r5, r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r8) poll(&(0x7f0000000080)=[{r8, 0x4000}, {r6, 0x3}], 0x2, 0xffff8001) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) r10 = pidfd_getfd(r4, r4, 0x0) setns(r10, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 1.436059196s ago: executing program 2 (id=4807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0xfffffffa}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1135}, {0x8, 0x13, 0x9}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x80000001}, {0x5}}]}, 0x10c}}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a3000000000140000001100"], 0x118}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xd8, 0x1403, 0x1, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x2010000) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000000680)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000000)="96", 0x1, 0xf}]) 1.327663142s ago: executing program 2 (id=4810): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000000000001aa241d3c6895c4100", 0x800000}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0x15, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 1.058520858s ago: executing program 9 (id=4812): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x7daa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22ac1414aa925aa80020007b00090080007f000901e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.032734069s ago: executing program 9 (id=4814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000001c0)=0x83a, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) connect(r1, &(0x7f0000000340)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x460, 0x9, 0x0, 0xa, 0xe4, 0xffff0000, 0x3, 0x0, 0x102ff, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 905.601056ms ago: executing program 9 (id=4817): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x1000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 826.507681ms ago: executing program 4 (id=4818): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0xfffffffd, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x17, [{0xc, 0xfffffffd, 0x3ff}]}]}, {0x0, [0x61, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0xffc}, 0x28) 826.323042ms ago: executing program 3 (id=4819): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x800) 797.042563ms ago: executing program 4 (id=4820): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback, 0xffff0000}, 0x1c) 754.596396ms ago: executing program 4 (id=4821): socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180)={0xfffffff8}, 0x4) (async) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180)={0xfffffff8}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a000200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'raw\x00', 0x7003, [0x3, 0xe9, 0x81, 0x2, 0x3f]}, &(0x7f0000000140)=0x54) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 709.784608ms ago: executing program 3 (id=4822): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0x1, 0x807, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) r6 = socket$rxrpc(0x21, 0x2, 0xa) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) socket$unix(0x1, 0x1, 0x0) accept4(r2, 0xfffffffffffffffd, &(0x7f0000000000), 0x80800) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0xb8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xb8}}, 0x20000000) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f000000e0c0)={0x723, 0xd6e, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 709.295888ms ago: executing program 0 (id=4823): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES16], 0x6, 0x2c4, &(0x7f0000000380)="$eJzs3T+LI2UcB/Df7GYnoxbZwkqEG/AKq8O9TmyyyB2IW3mkUAtdvDuQTRDuYME/GK+ytbGw8BUIgi/kGt+BYCvYecLhIzOZuUxijIlcTrz9fJp99pnnO/N7Jg/Z2SJP3n9xcnazjNv3PvspiiKLvWEM40EWh7EXrS9iwfCrAAD+zx6kFL+mmW1yWUQUuysLANihzf7+9+bNH55IWQDADt14+503j09Orr1VRBHXJ1+ej6r/7Kufs+PHt+PDGMeteCUG8TCiflA4iPppoWpeTylNe2XlMC5PpuejKjl5735z/uNfIur8UQzisO569LRR5984uXZUznTy06qOZ5vrD6v81RjE84/CC/mrK/IxyuPllzr1X4lB/PhBfBTjuFkXMc9/flSWr6evf/v03aq8Kp9Nz0f9etxc2n/CLw0AAAAAAAAAAAAAAAAAAAAAAE+xK83eOf0oL8XlSdXV7L+z/zDy6teydbi4P88sn7Un6u4PlFKapvi2s6VgmZqB83wvXuh1NxYEAAAAAAAAAAAAAAAAAACAi+vux5+cnY7Ht+48lka7G0AvIn6/EfFvzzPs9FyK9YP7zTVPx+O9prkw5n7e7Yn9dkwWsbaMahKP6bb8U+OZ5ZrbxnffVxPc5oRFp+fV1RM82P282tV1dpqtvlY/2p6iWSTf5BHzMXlseK387w6l2Gb55SsPDbaee/5c3ZiuGRPZusJe+3l255qebHkWeX1XV8YPmkYnvrQ2Nnrdo5jF//pekdW7dfR392YEAAAAAAAAAAAAAAAAAAAX3PzTv8tH/khxb210L/koMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPifn3/2/RmDbhDQbncefufzxFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALoA/AwAA//+T9Fq4") r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, r1, 0x0, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb7}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x6) 526.571189ms ago: executing program 3 (id=4824): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x7, 0x7, 0x3, 0x1d, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, @in6={0xa, 0x4e24, 0x1, @remote, 0x8000000}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x4, 0x7a, {0x6, 0x2b, 0xc, 0x0, 0x0, 0x0, 0x0, @in=@private=0xa010102, @in=@empty}}, @sadb_ident={0x2, 0xa, 0xa, 0x0, 0x5}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x1, 0x0, 0x41, 0x3, 0xe0000000}]}, 0xe8}}, 0x8000) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) 483.755801ms ago: executing program 2 (id=4825): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r0 = creat(0x0, 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 390.646037ms ago: executing program 4 (id=4826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x4c, r1, 0x1, 0x1400, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) 390.418167ms ago: executing program 3 (id=4827): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) getsockname$unix(r0, &(0x7f00000011c0), &(0x7f0000001240)=0x6e) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x1, 0x4000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="d4ef636aa21a98e539a111efea299e9d91d2f8a87334a7049cdebebae5da0181e4a1ab4745075de67727912a3d1f48b56ff87678f97f485f18af"], 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100c34cdc01ee417016f6911726"], 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fchdir(r6) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)={0x200000, 0x0, 0x22}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x61, &(0x7f0000001100)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000000000)='GPL\x00', 0x1, 0xe1, &(0x7f0000000140)=""/225, 0x41000}, 0x94) 385.372507ms ago: executing program 0 (id=4828): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003400)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)="0f", 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180), 0x8) 353.127299ms ago: executing program 3 (id=4829): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003400)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)="0f", 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180), 0x8) (fail_nth: 3) 348.06209ms ago: executing program 4 (id=4830): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x4eb, 0x200}, {0x4e8, 0x3}, 0x9, 0x6}) (async) unshare(0x28000600) (async) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x11, r1, 0x200000) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000040)=0x1ff, 0x4) (async) unshare(0x4000000) (async) mmap(&(0x7f0000230000/0x1000)=nil, 0x1000, 0x3000008, 0x1010, r2, 0xf3fd1000) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x3, 0x2, 0x5, 0x8, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', r3}, 0x94) 76.936115ms ago: executing program 0 (id=4831): unshare(0x6a040000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x880002, &(0x7f00000007c0)=ANY=[], 0xa, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) fadvise64(r0, 0x2, 0x0, 0x2ba1b42d8a9ae1a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4401e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r7, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r11, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000900)="bada30fbc99b5400040000ea0756", 0xe, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500340012800e00010069703667726574617000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 76.495385ms ago: executing program 3 (id=4832): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0x0, 0x0, 0x1000000], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 22.273139ms ago: executing program 9 (id=4833): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2005, 0x201}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040855}, 0x40) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504000a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x10}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x9, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x210000, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r10, &(0x7f0000000480), 0x2e9, 0xffe0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x5, 0x7f, 0x65, 0x0, 0x4, 0x21, 0x0, @remote, @private=0xa010100}, {{0x4e21, 0x4e23, 0x4, 0x1, 0xc, 0x0, 0x0, 0x4, 0x7, "9cc7e8", 0x3, '_\x00'}}}}}}, 0x0) 0s ago: executing program 2 (id=4834): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000080)=""/26, 0x1a}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x184, 0x10, 0x713, 0x20, 0x25dfdbfc, {{@in=@private=0xa010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x4e23, 0x202, 0x2, 0x20, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfe, 0x32}, @in=@multicast1, {0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x0, 0x0, 0xb}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @algo_auth={0x48, 0x1, {{'cmac-aes-neon\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x6f8d, 0x11100, 0x4, 0x17d}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="8d", 0x1}, {0x0}], 0x2, 0x0, 0x1}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') lseek(r4, 0xd9, 0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x800, 0x2, 0x0, 0x7, 0x7ff, 0x6}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r7, 0xf21, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x200}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x13}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe7}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40010) kernel console output (not intermixed with test programs): 007f7a73e75fa0 RCX: 00007f7a73bfaeb9 [ 266.051348][T16175] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 266.051365][T16175] RBP: 00007f7a72657090 R08: 0000000000000108 R09: 0000000000000000 [ 266.051382][T16175] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 266.051400][T16175] R13: 00007f7a73e76038 R14: 00007f7a73e75fa0 R15: 00007ffd11466078 [ 266.051499][T16175] [ 266.051511][T16175] syz.0.3948: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0 [ 266.335004][T16175] CPU: 1 UID: 0 PID: 16175 Comm: syz.0.3948 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 266.335047][T16175] Tainted: [W]=WARN [ 266.335056][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.335074][T16175] Call Trace: [ 266.335084][T16175] [ 266.335168][T16175] __dump_stack+0x1d/0x30 [ 266.335215][T16175] dump_stack_lvl+0x95/0xd0 [ 266.335244][T16175] dump_stack+0x15/0x1b [ 266.335293][T16175] warn_alloc+0x145/0x1c0 [ 266.335337][T16175] __vmalloc_node_range_noprof+0x7d9/0x12b0 [ 266.335391][T16175] ? do_replace+0x1b4/0x360 [ 266.335428][T16175] __vmalloc_noprof+0xa4/0xf0 [ 266.335482][T16175] ? do_replace+0x1b4/0x360 [ 266.335513][T16175] do_replace+0x1b4/0x360 [ 266.335575][T16175] do_ebt_set_ctl+0x12e/0xcd0 [ 266.335603][T16175] ? _parse_integer_limit+0x170/0x190 [ 266.335705][T16175] ? __rcu_read_unlock+0x4e/0x70 [ 266.335749][T16175] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 266.335800][T16175] ? ip4_datagram_release_cb+0x3ee/0x420 [ 266.335840][T16175] ? _raw_spin_unlock_bh+0x18/0x20 [ 266.335877][T16175] ? release_sock+0x116/0x150 [ 266.335909][T16175] ? sockopt_release_sock+0x41/0x50 [ 266.336023][T16175] ? do_ip_setsockopt+0x1af1/0x2290 [ 266.336062][T16175] nf_setsockopt+0x199/0x1b0 [ 266.336095][T16175] ip_setsockopt+0x102/0x110 [ 266.336147][T16175] udp_setsockopt+0x99/0xb0 [ 266.336179][T16175] sock_common_setsockopt+0x69/0x80 [ 266.336264][T16175] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 266.336295][T16175] __sys_setsockopt+0x184/0x200 [ 266.336383][T16175] __x64_sys_setsockopt+0x64/0x80 [ 266.336418][T16175] x64_sys_call+0x21d5/0x3000 [ 266.336513][T16175] do_syscall_64+0xc0/0x2a0 [ 266.336620][T16175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.336645][T16175] RIP: 0033:0x7f7a73bfaeb9 [ 266.336666][T16175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.336692][T16175] RSP: 002b:00007f7a72657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 266.336720][T16175] RAX: ffffffffffffffda RBX: 00007f7a73e75fa0 RCX: 00007f7a73bfaeb9 [ 266.336740][T16175] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 266.336791][T16175] RBP: 00007f7a72657090 R08: 0000000000000108 R09: 0000000000000000 [ 266.336809][T16175] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 266.336828][T16175] R13: 00007f7a73e76038 R14: 00007f7a73e75fa0 R15: 00007ffd11466078 [ 266.336857][T16175] [ 266.336937][T16175] Mem-Info: [ 266.588195][T16175] active_anon:47903 inactive_anon:13 isolated_anon:0 [ 266.588195][T16175] active_file:29715 inactive_file:2419 isolated_file:0 [ 266.588195][T16175] unevictable:15885 dirty:174 writeback:1 [ 266.588195][T16175] slab_reclaimable:3923 slab_unreclaimable:122135 [ 266.588195][T16175] mapped:29954 shmem:35989 pagetables:1965 [ 266.588195][T16175] sec_pagetables:0 bounce:0 [ 266.588195][T16175] kernel_misc_reclaimable:0 [ 266.588195][T16175] free:1699686 free_pcp:6792 free_cma:0 [ 266.634057][T16175] Node 0 active_anon:191612kB inactive_anon:52kB active_file:118860kB inactive_file:9676kB unevictable:68064kB isolated(anon):0kB isolated(file):0kB mapped:119816kB dirty:696kB writeback:4kB shmem:143956kB kernel_stack:4704kB pagetables:7860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 266.662299][T16175] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.692129][T16175] lowmem_reserve[]: 0 2879 7858 7858 [ 266.697535][T16175] Node 0 DMA32 free:2944744kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948376kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 266.729000][T16175] lowmem_reserve[]: 0 0 4978 4978 [ 266.734252][T16175] Node 0 Normal free:3818456kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:191612kB inactive_anon:52kB active_file:118860kB inactive_file:9676kB unevictable:78388kB writepending:700kB zspages:0kB present:5242880kB managed:5098240kB mlocked:78508kB bounce:0kB free_pcp:28832kB local_pcp:20932kB free_cma:0kB [ 266.768285][T16175] lowmem_reserve[]: 0 0 0 0 [ 266.773161][T16175] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 266.786060][T16175] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 1*32kB (M) 2*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944744kB [ 266.802497][T16175] Node 0 Normal: 187*4kB (UME) 1660*8kB (UME) 294*16kB (UE) 250*32kB (UME) 196*64kB (UME) 521*128kB (UME) 228*256kB (UME) 139*512kB (UM) 77*1024kB (UME) 41*2048kB (UME) 833*4096kB (UM) = 3810284kB [ 266.822539][T16175] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 266.832106][T16175] 68683 total pagecache pages [ 266.837182][T16175] 4 pages in swap cache [ 266.841783][T16175] Free swap = 123160kB [ 266.846044][T16175] Total swap = 124996kB [ 266.850251][T16175] 2097051 pages RAM [ 266.854096][T16175] 0 pages HighMem/MovableOnly [ 266.858919][T16175] 81557 pages reserved [ 266.957289][T16182] netlink: 'syz.9.3951': attribute type 4 has an invalid length. [ 266.990922][T16184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.004447][T16184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.083411][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 267.083427][ T29] audit: type=1400 audit(1769990515.484:13119): avc: denied { setopt } for pid=16193 comm="syz.9.3955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 267.113547][T16152] program syz.2.3941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.145255][T16198] set_capacity_and_notify: 2 callbacks suppressed [ 267.145270][T16198] loop8: detected capacity change from 0 to 128 [ 267.168199][T16198] EXT4-fs: Ignoring removed nobh option [ 267.216602][T16198] EXT4-fs mount: 28 callbacks suppressed [ 267.216623][T16198] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.218351][T16204] FAULT_INJECTION: forcing a failure. [ 267.218351][T16204] name failslab, interval 1, probability 0, space 0, times 0 [ 267.247153][T16204] CPU: 0 UID: 0 PID: 16204 Comm: syz.0.3960 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 267.247270][T16204] Tainted: [W]=WARN [ 267.247277][T16204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.247291][T16204] Call Trace: [ 267.247298][T16204] [ 267.247310][T16204] __dump_stack+0x1d/0x30 [ 267.247443][T16204] dump_stack_lvl+0x95/0xd0 [ 267.247472][T16204] dump_stack+0x15/0x1b [ 267.247495][T16204] should_fail_ex+0x263/0x280 [ 267.247528][T16204] should_failslab+0x8c/0xb0 [ 267.247569][T16204] __kmalloc_noprof+0xb8/0x580 [ 267.247604][T16204] ? flow_action_cookie_create+0x26/0x70 [ 267.247662][T16204] ? qdisc_put_rtab+0xde/0xf0 [ 267.247689][T16204] ? kfree+0x10a/0x3b0 [ 267.247724][T16204] flow_action_cookie_create+0x26/0x70 [ 267.247768][T16204] tc_setup_action+0x104/0x440 [ 267.247847][T16204] ? tcf_police_offload_act_setup+0x290/0x2c0 [ 267.247887][T16204] tcf_action_offload_add_ex+0x261/0x3c0 [ 267.247936][T16204] tcf_action_init+0x368/0x700 [ 267.248038][T16204] tc_ctl_action+0x29b/0x830 [ 267.248154][T16204] ? __pfx_tc_ctl_action+0x10/0x10 [ 267.248180][T16204] rtnetlink_rcv_msg+0x6a7/0x720 [ 267.248206][T16204] ? avc_has_perm_noaudit+0xab/0x130 [ 267.248265][T16204] netlink_rcv_skb+0x123/0x220 [ 267.248351][T16204] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 267.248443][T16204] rtnetlink_rcv+0x1c/0x30 [ 267.248466][T16204] netlink_unicast+0x5c0/0x690 [ 267.248501][T16204] netlink_sendmsg+0x5c8/0x6f0 [ 267.248530][T16204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.248575][T16204] ____sys_sendmsg+0x5af/0x600 [ 267.248605][T16204] ___sys_sendmsg+0x195/0x1e0 [ 267.248647][T16204] __x64_sys_sendmsg+0xd4/0x160 [ 267.248704][T16204] x64_sys_call+0x17ba/0x3000 [ 267.248738][T16204] do_syscall_64+0xc0/0x2a0 [ 267.248786][T16204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.248850][T16204] RIP: 0033:0x7f7a73bfaeb9 [ 267.248870][T16204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.248894][T16204] RSP: 002b:00007f7a72657028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.248999][T16204] RAX: ffffffffffffffda RBX: 00007f7a73e75fa0 RCX: 00007f7a73bfaeb9 [ 267.249017][T16204] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 267.249034][T16204] RBP: 00007f7a72657090 R08: 0000000000000000 R09: 0000000000000000 [ 267.249052][T16204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.249069][T16204] R13: 00007f7a73e76038 R14: 00007f7a73e75fa0 R15: 00007ffd11466078 [ 267.249094][T16204] [ 267.249621][T16198] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.287199][T16207] netlink: 87 bytes leftover after parsing attributes in process `syz.9.3959'. [ 267.530706][T12671] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.632790][T16213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=16213 comm=syz.8.3963 [ 267.711273][T16223] lo speed is unknown, defaulting to 1000 [ 267.718268][T16223] lo speed is unknown, defaulting to 1000 [ 267.825795][T16228] loop8: detected capacity change from 0 to 128 [ 267.842514][T16228] vfat: Unknown parameter '' [ 267.948939][ T29] audit: type=1400 audit(1769990516.289:13120): avc: denied { read } for pid=16238 comm="syz.8.3973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 268.009371][ T29] audit: type=1400 audit(1769990516.345:13121): avc: denied { write } for pid=16245 comm="syz.2.3976" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 268.067483][ T29] audit: type=1400 audit(1769990516.373:13122): avc: denied { setattr } for pid=16245 comm="syz.2.3976" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 268.087061][ T29] audit: type=1400 audit(1769990516.392:13123): avc: denied { mount } for pid=16251 comm="syz.0.3977" name="/" dev="hugetlbfs" ino=52092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 268.110508][ T29] audit: type=1400 audit(1769990516.401:13124): avc: denied { write } for pid=16251 comm="syz.0.3977" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 268.265504][T16266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3980'. [ 268.669166][ T29] audit: type=1400 audit(1769990516.962:13125): avc: denied { execute_no_trans } for pid=16280 comm="syz.4.3985" path="/25/file0" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 268.692845][T16281] Invalid argument reading file caps for ./file0 [ 268.723072][ T29] audit: type=1400 audit(1769990517.009:13126): avc: denied { create } for pid=16290 comm="syz.0.3989" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 268.748779][T16291] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 268.859207][ T29] audit: type=1400 audit(1769990517.140:13127): avc: denied { unlink } for pid=9600 comm="syz-executor" name="file0" dev="tmpfs" ino=2339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 268.872359][T16293] team0 (unregistering): Port device team_slave_0 removed [ 268.939944][T16293] team0 (unregistering): Port device team_slave_1 removed [ 268.993305][ T29] audit: type=1400 audit(1769990517.262:13128): avc: denied { write } for pid=16294 comm="syz.0.3991" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 269.518754][T16344] loop4: detected capacity change from 0 to 512 [ 269.533503][T16340] loop9: detected capacity change from 0 to 512 [ 269.551122][T16347] FAULT_INJECTION: forcing a failure. [ 269.551122][T16347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.564356][T16347] CPU: 0 UID: 0 PID: 16347 Comm: syz.0.4009 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 269.564399][T16347] Tainted: [W]=WARN [ 269.564440][T16347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 269.564494][T16347] Call Trace: [ 269.564503][T16347] [ 269.564514][T16347] __dump_stack+0x1d/0x30 [ 269.564547][T16347] dump_stack_lvl+0x95/0xd0 [ 269.564694][T16347] dump_stack+0x15/0x1b [ 269.564722][T16347] should_fail_ex+0x263/0x280 [ 269.564762][T16347] should_fail+0xb/0x20 [ 269.564801][T16347] should_fail_usercopy+0x1a/0x20 [ 269.564853][T16347] _copy_from_user+0x1c/0xb0 [ 269.564877][T16347] sel_write_load+0x190/0x380 [ 269.564919][T16347] ? __pfx_sel_write_load+0x10/0x10 [ 269.564959][T16347] vfs_write+0x269/0x9f0 [ 269.565055][T16347] ? __rcu_read_unlock+0x4e/0x70 [ 269.565096][T16347] ? __fget_files+0x184/0x1c0 [ 269.565194][T16347] ? mutex_lock+0x57/0x90 [ 269.565225][T16347] ksys_write+0xdc/0x1a0 [ 269.565253][T16347] __x64_sys_write+0x40/0x50 [ 269.565361][T16347] x64_sys_call+0x2847/0x3000 [ 269.565395][T16347] do_syscall_64+0xc0/0x2a0 [ 269.565491][T16347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.565549][T16347] RIP: 0033:0x7f7a73bfaeb9 [ 269.565571][T16347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.565596][T16347] RSP: 002b:00007f7a72657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.565690][T16347] RAX: ffffffffffffffda RBX: 00007f7a73e75fa0 RCX: 00007f7a73bfaeb9 [ 269.565710][T16347] RDX: 000000000000ffa8 RSI: 0000200000000000 RDI: 0000000000000003 [ 269.565729][T16347] RBP: 00007f7a72657090 R08: 0000000000000000 R09: 0000000000000000 [ 269.565747][T16347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.565764][T16347] R13: 00007f7a73e76038 R14: 00007f7a73e75fa0 R15: 00007ffd11466078 [ 269.565816][T16347] [ 269.569235][T16344] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 269.759999][T16352] netlink: 'syz.2.4010': attribute type 21 has an invalid length. [ 269.767735][T16344] EXT4-fs (loop4): orphan cleanup on readonly fs [ 269.817147][T16344] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 269.826785][T16352] netlink: 'syz.2.4010': attribute type 1 has an invalid length. [ 269.839716][T16352] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4010'. [ 269.845877][T16340] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.867907][T16344] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 269.876112][T16340] ext4 filesystem being mounted at /49/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.889132][T16344] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.4008: corrupted inode contents [ 269.912364][T16344] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.4008: mark_inode_dirty error [ 269.925025][T16344] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.4008: corrupted inode contents [ 269.941683][T16344] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.4008: mark_inode_dirty error [ 269.959101][T16344] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.4008: corrupted inode contents [ 269.972481][T16361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4013'. [ 269.982502][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4013'. [ 269.995405][T16344] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 270.009383][T16363] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4012'. [ 270.018676][T16344] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.4008: corrupted inode contents [ 270.043101][T16344] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.4008: mark_inode_dirty error [ 270.065361][T16344] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 270.083777][T16344] EXT4-fs (loop4): 1 truncate cleaned up [ 270.093455][T16370] netlink: 'syz.2.4016': attribute type 13 has an invalid length. [ 270.098225][T16344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 270.159350][T15448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.180375][T16375] netlink: 'syz.0.4019': attribute type 6 has an invalid length. [ 270.400717][T14905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.461778][T16405] Process accounting resumed [ 270.623271][T16428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=248 sclass=netlink_route_socket pid=16428 comm=syz.8.4036 [ 270.641411][T16428] tipc: Started in network mode [ 270.646554][T16428] tipc: Node identity 1e252a2205bb, cluster identity 4711 [ 270.654114][T16428] tipc: Enabled bearer , priority 0 [ 270.662693][T16428] syzkaller0: entered promiscuous mode [ 270.668265][T16428] syzkaller0: entered allmulticast mode [ 270.678180][T16428] tipc: Resetting bearer [ 270.685368][T16427] tipc: Resetting bearer [ 270.697189][T16427] tipc: Disabling bearer [ 270.812683][T16434] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4038'. [ 270.836839][T16438] netlink: 'syz.9.4039': attribute type 1 has an invalid length. [ 270.866440][T16438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.875170][T16438] bond1: (slave bond2): making interface the new active one [ 270.883447][T16438] bond1: (slave bond2): Enslaving as an active interface with an up link [ 270.899384][T16438] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 270.911885][T16438] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 270.932821][T16444] netlink: 'syz.8.4041': attribute type 1 has an invalid length. [ 271.002438][T16448] team0 (unregistering): Port device team_slave_0 removed [ 271.012380][T16448] team0 (unregistering): Port device team_slave_1 removed [ 271.070846][T16454] netlink: 'syz.8.4045': attribute type 4 has an invalid length. [ 271.116248][T16458] loop9: detected capacity change from 0 to 512 [ 271.132960][T16456] net_ratelimit: 4 callbacks suppressed [ 271.132990][T16456] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 271.159994][T16458] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 271.180622][T16458] EXT4-fs (loop9): orphan cleanup on readonly fs [ 271.194000][T16458] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 271.217145][T16458] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 271.226589][T16458] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4047: corrupted inode contents [ 271.232817][T16466] netlink: 'syz.2.4050': attribute type 3 has an invalid length. [ 271.256782][T16464] loop8: detected capacity change from 0 to 2364 [ 271.264387][T16458] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #16: comm syz.9.4047: mark_inode_dirty error [ 271.294549][T16458] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4047: corrupted inode contents [ 271.318150][T16458] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.4047: mark_inode_dirty error [ 271.331567][T16458] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4047: corrupted inode contents [ 271.344828][T16458] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 271.353744][T16458] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4047: corrupted inode contents [ 271.395523][T16458] EXT4-fs error (device loop9): ext4_truncate:4635: inode #16: comm syz.9.4047: mark_inode_dirty error [ 271.410679][T16458] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 271.421045][T16458] EXT4-fs (loop9): 1 truncate cleaned up [ 271.428069][T16458] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.458993][T14905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.594984][T16478] netlink: 'syz.9.4055': attribute type 4 has an invalid length. [ 271.610427][T16480] netlink: 'syz.0.4056': attribute type 4 has an invalid length. [ 271.619665][T16478] netlink: 'syz.9.4055': attribute type 4 has an invalid length. [ 271.679766][T16478] Restarting kernel threads ... [ 271.686179][T16478] Done restarting kernel threads. [ 271.742157][T16489] loop9: detected capacity change from 0 to 128 [ 272.117111][T16500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.133254][T16500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.166349][T16500] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4061'. [ 272.257436][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 272.258673][T16504] netlink: 4568 bytes leftover after parsing attributes in process `syz.0.4065'. [ 272.273183][T16504] netlink: 4568 bytes leftover after parsing attributes in process `syz.0.4065'. [ 272.361115][T16508] netlink: 'syz.2.4067': attribute type 4 has an invalid length. [ 272.556423][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 272.556451][ T29] audit: type=1400 audit(1769990520.601:13209): avc: denied { read } for pid=16518 comm="syz.8.4072" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 272.585722][ T29] audit: type=1400 audit(1769990520.601:13210): avc: denied { open } for pid=16518 comm="syz.8.4072" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 272.722402][T16532] delete_channel: no stack [ 272.727390][ T29] audit: type=1400 audit(1769990520.760:13211): avc: denied { write } for pid=16530 comm="syz.2.4077" path="socket:[52569]" dev="sockfs" ino=52569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 272.762034][T16534] tipc: Started in network mode [ 272.766997][T16534] tipc: Node identity dabb7f300177, cluster identity 4711 [ 272.774333][T16534] tipc: Enabled bearer , priority 0 [ 272.781774][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4076'. [ 272.783115][T16534] syzkaller0: entered promiscuous mode [ 272.796626][T16534] syzkaller0: entered allmulticast mode [ 272.844075][T16534] tipc: Resetting bearer [ 272.861982][T16533] tipc: Resetting bearer [ 272.870176][T16533] tipc: Disabling bearer [ 272.909013][T16542] netlink: 87 bytes leftover after parsing attributes in process `syz.8.4079'. [ 273.010985][T16556] netlink: 'syz.2.4084': attribute type 2 has an invalid length. [ 273.042927][ T29] audit: type=1400 audit(1769990777.062:13212): avc: denied { append } for pid=16557 comm="syz.2.4085" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.093564][ T29] audit: type=1400 audit(1769990777.099:13213): avc: denied { append } for pid=16562 comm="syz.2.4086" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 273.097733][T16563] sctp: [Deprecated]: syz.2.4086 (pid 16563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.097733][T16563] Use struct sctp_sack_info instead [ 273.236943][T16554] dummy0: entered promiscuous mode [ 273.242358][T16554] macsec1: entered allmulticast mode [ 273.247748][T16554] dummy0: entered allmulticast mode [ 273.256033][T16554] dummy0: left allmulticast mode [ 273.261021][T16554] dummy0: left promiscuous mode [ 273.379301][T16579] FAULT_INJECTION: forcing a failure. [ 273.379301][T16579] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 273.393175][T16579] CPU: 0 UID: 0 PID: 16579 Comm: syz.2.4092 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 273.393206][T16579] Tainted: [W]=WARN [ 273.393213][T16579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.393224][T16579] Call Trace: [ 273.393230][T16579] [ 273.393238][T16579] __dump_stack+0x1d/0x30 [ 273.393400][T16579] dump_stack_lvl+0x95/0xd0 [ 273.393421][T16579] dump_stack+0x15/0x1b [ 273.393439][T16579] should_fail_ex+0x263/0x280 [ 273.393478][T16579] should_fail_alloc_page+0xf2/0x100 [ 273.393502][T16579] __alloc_frozen_pages_noprof+0x108/0x350 [ 273.393591][T16579] alloc_pages_mpol+0xb3/0x260 [ 273.393635][T16579] vma_alloc_folio_noprof+0x1a9/0x300 [ 273.393667][T16579] do_wp_page+0xf6d/0x2560 [ 273.393773][T16579] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 273.393805][T16579] ? __mod_zone_page_state+0x19/0x70 [ 273.393833][T16579] ? __rcu_read_lock+0x36/0x50 [ 273.393894][T16579] handle_mm_fault+0x8c7/0x3030 [ 273.393925][T16579] ? mt_find+0x291/0x3b0 [ 273.394054][T16579] do_user_addr_fault+0x3fd/0x1050 [ 273.394092][T16579] ? trie_get_next_key+0x386/0x3e0 [ 273.394124][T16579] exc_page_fault+0x62/0xa0 [ 273.394146][T16579] asm_exc_page_fault+0x26/0x30 [ 273.394237][T16579] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 273.394311][T16579] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 273.394380][T16579] RSP: 0018:ffffc900011efca8 EFLAGS: 00050202 [ 273.394438][T16579] RAX: ffff8881019fed90 RBX: 00000000000200cc RCX: 000000000001f30c [ 273.394451][T16579] RDX: 0000000000000000 RSI: ffff88812e640dce RDI: 0000200000001000 [ 273.394464][T16579] RBP: 00000000000200cc R08: 00000000000000f2 R09: 0000000000000000 [ 273.394475][T16579] R10: 000188812e64000e R11: 000188812e6600d9 R12: 000020000002030c [ 273.394568][T16579] R13: 00007ffffffff000 R14: 0000200000000240 R15: ffff88812e64000e [ 273.394589][T16579] _copy_to_user+0x7c/0xa0 [ 273.394608][T16579] generic_map_lookup_batch+0x5bf/0x800 [ 273.394752][T16579] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 273.394773][T16579] bpf_map_do_batch+0x1bc/0x380 [ 273.394842][T16579] ? security_bpf+0x2b/0x90 [ 273.394864][T16579] __sys_bpf+0x497/0x7b0 [ 273.394896][T16579] __x64_sys_bpf+0x41/0x50 [ 273.395001][T16579] x64_sys_call+0x28e1/0x3000 [ 273.395024][T16579] do_syscall_64+0xc0/0x2a0 [ 273.395053][T16579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.395072][T16579] RIP: 0033:0x7f599f19aeb9 [ 273.395087][T16579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.395108][T16579] RSP: 002b:00007f599dbf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.395143][T16579] RAX: ffffffffffffffda RBX: 00007f599f415fa0 RCX: 00007f599f19aeb9 [ 273.395163][T16579] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 273.395186][T16579] RBP: 00007f599dbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 273.395263][T16579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.395274][T16579] R13: 00007f599f416038 R14: 00007f599f415fa0 R15: 00007fffd66ddb28 [ 273.395294][T16579] [ 273.735480][T16581] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 273.796839][T16586] loop8: detected capacity change from 0 to 128 [ 273.846502][T16589] Invalid argument reading file caps for ./file0 [ 273.882611][T16592] loop8: detected capacity change from 0 to 128 [ 273.895240][ T29] audit: type=1326 audit(1769990777.848:13214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16594 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 273.919213][ T29] audit: type=1326 audit(1769990777.848:13215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16594 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 273.946158][ T29] audit: type=1326 audit(1769990777.904:13216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16594 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 273.970018][ T29] audit: type=1326 audit(1769990777.904:13217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16594 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 273.994010][ T29] audit: type=1326 audit(1769990777.904:13218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16594 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 274.024801][T16593] loop8: detected capacity change from 0 to 512 [ 274.048264][T16593] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #11: block 530: comm syz.8.4098: lblock 4 mapped to illegal pblock 530 (length 1) [ 274.067501][T16593] EXT4-fs (loop8): 1 orphan inode deleted [ 274.071826][T16599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.082389][T16593] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.102639][T16599] netlink: 'syz.4.4101': attribute type 33 has an invalid length. [ 274.120266][T16599] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 274.148637][T12671] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.415895][ T3839] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 274.422216][ T3673] Bluetooth: hci0: command 0x1003 tx timeout [ 274.472991][T16642] loop9: detected capacity change from 0 to 1024 [ 274.482418][T16642] EXT4-fs: Ignoring removed orlov option [ 274.488173][T16642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.498374][T16642] ext4: Unknown parameter 'subj_role' [ 274.591232][T16654] FAULT_INJECTION: forcing a failure. [ 274.591232][T16654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.604419][T16654] CPU: 1 UID: 0 PID: 16654 Comm: syz.9.4119 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 274.604472][T16654] Tainted: [W]=WARN [ 274.604481][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 274.604531][T16654] Call Trace: [ 274.604541][T16654] [ 274.604552][T16654] __dump_stack+0x1d/0x30 [ 274.604638][T16654] dump_stack_lvl+0x95/0xd0 [ 274.604667][T16654] dump_stack+0x15/0x1b [ 274.604694][T16654] should_fail_ex+0x263/0x280 [ 274.604810][T16654] should_fail+0xb/0x20 [ 274.604846][T16654] should_fail_usercopy+0x1a/0x20 [ 274.604888][T16654] _copy_from_user+0x1c/0xb0 [ 274.604916][T16654] addrconf_add_ifaddr+0x93/0x280 [ 274.604988][T16654] inet6_ioctl+0xb0/0x190 [ 274.605023][T16654] sock_do_ioctl+0x73/0x230 [ 274.605059][T16654] sock_ioctl+0x41b/0x610 [ 274.605085][T16654] ? mutex_lock+0x57/0x90 [ 274.605168][T16654] ? __pfx_sock_ioctl+0x10/0x10 [ 274.605198][T16654] __se_sys_ioctl+0xce/0x140 [ 274.605241][T16654] __x64_sys_ioctl+0x43/0x50 [ 274.605289][T16654] x64_sys_call+0x14b0/0x3000 [ 274.605330][T16654] do_syscall_64+0xc0/0x2a0 [ 274.605369][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.605436][T16654] RIP: 0033:0x7fe40ddfaeb9 [ 274.605458][T16654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.605483][T16654] RSP: 002b:00007fe40c857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.605550][T16654] RAX: ffffffffffffffda RBX: 00007fe40e075fa0 RCX: 00007fe40ddfaeb9 [ 274.605564][T16654] RDX: 0000200000001c80 RSI: 0000000000008916 RDI: 0000000000000004 [ 274.605578][T16654] RBP: 00007fe40c857090 R08: 0000000000000000 R09: 0000000000000000 [ 274.605593][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.605610][T16654] R13: 00007fe40e076038 R14: 00007fe40e075fa0 R15: 00007fff1a5fca18 [ 274.605637][T16654] [ 274.787126][T16657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16657 comm=syz.0.4120 [ 274.965691][T16680] vhci_hcd vhci_hcd.0: invalid port number 97 [ 274.972017][T16680] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 275.012871][T16686] loop9: detected capacity change from 0 to 512 [ 275.021310][T16686] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 275.033454][T16686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 275.042273][T16686] EXT4-fs (loop9): orphan cleanup on readonly fs [ 275.048745][T16686] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.4130: bad orphan inode 267 [ 275.060452][T16686] EXT4-fs (loop9): Remounting filesystem read-only [ 275.074024][T16686] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 275.130731][T14905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 275.184595][T16697] tipc: Cannot configure node identity twice [ 275.190962][T16697] tipc: Cannot configure node identity twice [ 275.247034][T16699] __nla_validate_parse: 9 callbacks suppressed [ 275.247051][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4137'. [ 275.274576][T16712] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4140'. [ 275.386365][T16719] lo speed is unknown, defaulting to 1000 [ 275.392875][T16719] lo speed is unknown, defaulting to 1000 [ 275.457619][T16729] loop4: detected capacity change from 0 to 4096 [ 275.487871][T16729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.513237][T16719] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4143'. [ 275.543641][T15448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.609928][T16799] netlink: 4568 bytes leftover after parsing attributes in process `syz.9.4172'. [ 276.619233][T16799] netlink: 4568 bytes leftover after parsing attributes in process `syz.9.4172'. [ 276.708808][T16805] loop9: detected capacity change from 0 to 128 [ 276.715413][T16807] validate_nla: 1 callbacks suppressed [ 276.715449][T16807] netlink: 'syz.8.4176': attribute type 6 has an invalid length. [ 276.781134][T16816] loop9: detected capacity change from 0 to 512 [ 276.815876][T16816] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 276.837100][T16821] netlink: 'syz.4.4177': attribute type 6 has an invalid length. [ 276.846920][T16816] EXT4-fs (loop9): 1 orphan inode deleted [ 276.852858][T16816] EXT4-fs (loop9): 1 truncate cleaned up [ 276.864981][T16816] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.930657][T14905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.986078][T16833] loop8: detected capacity change from 0 to 2048 [ 277.038502][T16833] loop8: p1 < > [ 277.106486][T16840] netlink: 87 bytes leftover after parsing attributes in process `syz.9.4183'. [ 277.116736][T16844] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4185'. [ 277.146448][T16844] loop8: detected capacity change from 0 to 164 [ 277.170279][T16844] rock: directory entry would overflow storage [ 277.176666][T16844] rock: sig=0x4543, size=28, remaining=18 [ 277.193114][T16847] netlink: 'syz.4.4186': attribute type 16 has an invalid length. [ 277.201061][T16847] netlink: 'syz.4.4186': attribute type 17 has an invalid length. [ 277.224995][T16843] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.239145][T16843] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.354020][T16847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.497556][T16863] xt_TCPMSS: Only works on TCP SYN packets [ 277.576616][T16866] netlink: 4568 bytes leftover after parsing attributes in process `syz.2.4193'. [ 277.585984][T16866] netlink: 4568 bytes leftover after parsing attributes in process `syz.2.4193'. [ 277.967336][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4202'. [ 277.987234][ T29] kauditd_printk_skb: 626 callbacks suppressed [ 277.987253][ T29] audit: type=1400 audit(1769990781.683:13845): avc: denied { bind } for pid=16896 comm="syz.9.4202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.025823][T16900] sg_write: data in/out 33947872/78 bytes for SCSI command 0x0-- guessing data in; [ 278.025823][T16900] program syz.4.4203 not setting count and/or reply_len properly [ 278.066687][T16900] No such timeout policy "syz1" [ 278.126280][T16904] netlink: 'syz.9.4206': attribute type 1 has an invalid length. [ 278.181184][T16904] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.190015][T16904] bond3: (slave bond4): making interface the new active one [ 278.197979][T16904] bond3: (slave bond4): Enslaving as an active interface with an up link [ 278.207129][T16912] veth0_vlan: entered allmulticast mode [ 278.441152][ T29] audit: type=1400 audit(1769990782.104:13846): avc: denied { nlmsg_write } for pid=16926 comm="syz.8.4215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 278.571818][T16941] netlink: 'syz.0.4217': attribute type 10 has an invalid length. [ 278.596174][T16940] msdos: Unknown parameter '€' [ 278.665292][T16947] netlink: 'syz.8.4222': attribute type 8 has an invalid length. [ 278.675055][T16945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.722141][ T29] audit: type=1400 audit(1769990782.366:13847): avc: denied { append } for pid=16944 comm="syz.4.4221" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 278.819835][T15448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.038480][T16977] FAULT_INJECTION: forcing a failure. [ 279.038480][T16977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.051852][T16977] CPU: 0 UID: 0 PID: 16977 Comm: syz.2.4230 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 279.051891][T16977] Tainted: [W]=WARN [ 279.051944][T16977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.051958][T16977] Call Trace: [ 279.051966][T16977] [ 279.051975][T16977] __dump_stack+0x1d/0x30 [ 279.052025][T16977] dump_stack_lvl+0x95/0xd0 [ 279.052064][T16977] dump_stack+0x15/0x1b [ 279.052092][T16977] should_fail_ex+0x263/0x280 [ 279.052134][T16977] should_fail+0xb/0x20 [ 279.052171][T16977] should_fail_usercopy+0x1a/0x20 [ 279.052287][T16977] _copy_from_user+0x1c/0xb0 [ 279.052310][T16977] ___sys_sendmsg+0xc1/0x1e0 [ 279.052350][T16977] __x64_sys_sendmsg+0xd4/0x160 [ 279.052384][T16977] x64_sys_call+0x17ba/0x3000 [ 279.052438][T16977] do_syscall_64+0xc0/0x2a0 [ 279.052556][T16977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.052587][T16977] RIP: 0033:0x7f599f19aeb9 [ 279.052609][T16977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.052629][T16977] RSP: 002b:00007f599dbf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.052650][T16977] RAX: ffffffffffffffda RBX: 00007f599f415fa0 RCX: 00007f599f19aeb9 [ 279.052732][T16977] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000006 [ 279.052750][T16977] RBP: 00007f599dbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 279.052769][T16977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.052786][T16977] R13: 00007f599f416038 R14: 00007f599f415fa0 R15: 00007fffd66ddb28 [ 279.052816][T16977] [ 279.453774][T17004] netlink: 'syz.2.4240': attribute type 2 has an invalid length. [ 279.461779][T17004] netlink: 'syz.2.4240': attribute type 1 has an invalid length. [ 279.469733][T17004] netlink: 'syz.2.4240': attribute type 1 has an invalid length. [ 279.581906][T17007] tipc: Cannot configure node identity twice [ 279.588063][T17007] tipc: Cannot configure node identity twice [ 279.951183][T17035] tipc: Cannot configure node identity twice [ 279.957353][T17035] tipc: Cannot configure node identity twice [ 280.006729][T17042] set_capacity_and_notify: 2 callbacks suppressed [ 280.006750][T17042] loop9: detected capacity change from 0 to 128 [ 280.108342][T17048] lo: Caught tx_queue_len zero misconfig [ 280.278872][T17001] loop4: detected capacity change from 0 to 2048 [ 280.451755][T17001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.517291][T15448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.766921][T17104] __nla_validate_parse: 13 callbacks suppressed [ 280.766943][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4277'. [ 280.874641][ T29] audit: type=1400 audit(1769990784.386:13848): avc: denied { ioctl } for pid=17114 comm="syz.9.4281" path="socket:[55472]" dev="sockfs" ino=55472 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 281.033627][T17127] netlink: 87 bytes leftover after parsing attributes in process `syz.9.4284'. [ 281.436507][T17145] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4290'. [ 281.445747][T17145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4290'. [ 281.458176][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4291'. [ 281.467671][T17147] C: renamed from team_slave_0 [ 281.474654][T17147] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4291'. [ 281.484027][T17147] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 281.648196][T17157] loop4: detected capacity change from 0 to 512 [ 281.665251][T17157] EXT4-fs: Ignoring removed nobh option [ 281.675794][T17157] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 281.710876][T17157] EXT4-fs (loop4): 1 truncate cleaned up [ 281.718050][T17157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.736454][T17162] lo speed is unknown, defaulting to 1000 [ 281.742993][T17162] lo speed is unknown, defaulting to 1000 [ 281.769246][T17157] EXT4-fs error (device loop4): ext4_xattr_block_find:1879: inode #15: comm syz.4.4295: corrupted xattr block 33: invalid header [ 281.787842][T17157] EXT4-fs (loop4): Remounting filesystem read-only [ 281.870390][T15448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.897305][T17172] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4302'. [ 282.093097][T17181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.110267][T17188] FAULT_INJECTION: forcing a failure. [ 282.110267][T17188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.116642][T17181] bond2: (slave bond3): making interface the new active one [ 282.123643][T17188] CPU: 0 UID: 0 PID: 17188 Comm: syz.0.4305 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.123779][T17188] Tainted: [W]=WARN [ 282.123801][T17188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.123844][T17188] Call Trace: [ 282.123873][T17188] [ 282.123897][T17188] __dump_stack+0x1d/0x30 [ 282.123974][T17188] dump_stack_lvl+0x95/0xd0 [ 282.124123][T17188] dump_stack+0x15/0x1b [ 282.124188][T17188] should_fail_ex+0x263/0x280 [ 282.124295][T17188] should_fail+0xb/0x20 [ 282.124467][T17188] should_fail_usercopy+0x1a/0x20 [ 282.124652][T17188] _copy_from_user+0x1c/0xb0 [ 282.124728][T17188] ___sys_sendmsg+0xc1/0x1e0 [ 282.124848][T17188] __x64_sys_sendmsg+0xd4/0x160 [ 282.125022][T17188] x64_sys_call+0x17ba/0x3000 [ 282.125128][T17188] do_syscall_64+0xc0/0x2a0 [ 282.125236][T17188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.125311][T17188] RIP: 0033:0x7f7a73bfaeb9 [ 282.125396][T17188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.125461][T17188] RSP: 002b:00007f7a72657028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.125602][T17188] RAX: ffffffffffffffda RBX: 00007f7a73e75fa0 RCX: 00007f7a73bfaeb9 [ 282.125672][T17188] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 282.125715][T17188] RBP: 00007f7a72657090 R08: 0000000000000000 R09: 0000000000000000 [ 282.125767][T17188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.125811][T17188] R13: 00007f7a73e76038 R14: 00007f7a73e75fa0 R15: 00007ffd11466078 [ 282.125947][T17188] [ 282.296250][T17181] bond2: (slave bond3): Enslaving as an active interface with an up link [ 282.423944][T17210] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4310'. [ 282.434496][ T29] audit: type=1400 audit(1769990785.845:13849): avc: denied { read write } for pid=17206 comm="syz.8.4311" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 282.458623][ T29] audit: type=1400 audit(1769990785.845:13850): avc: denied { open } for pid=17206 comm="syz.8.4311" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 282.485868][ T5527] hid-generic 0000:0000:0000.0004: unknown main item tag 0x6 [ 282.493397][ T5527] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 282.500978][ T5527] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 282.508700][ T5527] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 282.516200][ T5527] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 282.523703][ T5527] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 282.531184][ T5527] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 282.538682][ T5527] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 282.546294][ T5527] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 282.553847][ T5527] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 282.563144][T17207] loop8: detected capacity change from 0 to 128 [ 282.571062][T17207] /dev/loop8: Can't open blockdev [ 282.601871][ T5527] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 282.631727][T17207] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4311'. [ 282.648257][T17215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4314'. [ 282.694588][T17213] fido_id[17213]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 282.726041][T17217] SELinux: failed to load policy [ 282.763790][T17226] validate_nla: 5 callbacks suppressed [ 282.763811][T17226] netlink: 'syz.8.4317': attribute type 1 has an invalid length. [ 282.825840][T17226] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.845049][T17226] bond4: (slave bond5): making interface the new active one [ 282.864207][T17226] bond4: (slave bond5): Enslaving as an active interface with an up link [ 282.881249][T17230] IPv6: sit1: Disabled Multicast RS [ 282.901753][T17230] netlink: 'syz.4.4319': attribute type 13 has an invalid length. [ 282.962260][ T29] audit: type=1326 audit(1769990786.332:13851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.4.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d90baeb9 code=0x7ffc0000 [ 282.963796][T17228] loop9: detected capacity change from 0 to 512 [ 282.986000][ T29] audit: type=1326 audit(1769990786.332:13852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.4.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d90baeb9 code=0x7ffc0000 [ 283.013353][ T29] audit: type=1326 audit(1769990786.360:13853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.4.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f78d90baeb9 code=0x7ffc0000 [ 283.042016][ T29] audit: type=1326 audit(1769990786.360:13854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.4.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d90baeb9 code=0x7ffc0000 [ 283.107321][T17228] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.131877][T17228] ext4 filesystem being mounted at /117/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.191877][T17230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.202930][T17230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.284979][T17243] geneve2: entered promiscuous mode [ 283.368765][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 283.368785][ T29] audit: type=1400 audit(1769990786.715:13871): avc: denied { getopt } for pid=17266 comm="syz.8.4331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 283.414103][T17268] loop8: detected capacity change from 0 to 128 [ 283.431003][T17268] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.449804][T17268] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 283.456903][ T29] audit: type=1400 audit(1769990786.790:13872): avc: denied { setcheckreqprot } for pid=17269 comm="syz.4.4332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 283.500313][T17273] loop4: detected capacity change from 0 to 512 [ 283.520007][T12671] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.531910][T17273] EXT4-fs: test_dummy_encryption option not supported [ 283.618752][T17281] netlink: 'syz.2.4337': attribute type 13 has an invalid length. [ 283.666547][T14905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.693611][T17282] lo speed is unknown, defaulting to 1000 [ 283.714641][T17282] lo speed is unknown, defaulting to 1000 [ 283.721470][T17288] loop8: detected capacity change from 0 to 128 [ 283.765535][T17291] FAULT_INJECTION: forcing a failure. [ 283.765535][T17291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.771040][T17292] netlink: 'syz.0.4341': attribute type 11 has an invalid length. [ 283.780087][T17291] CPU: 1 UID: 0 PID: 17291 Comm: syz.2.4340 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 283.780177][T17291] Tainted: [W]=WARN [ 283.780236][T17291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.780274][T17291] Call Trace: [ 283.780281][T17291] [ 283.780289][T17291] __dump_stack+0x1d/0x30 [ 283.780364][T17291] dump_stack_lvl+0x95/0xd0 [ 283.780557][T17291] dump_stack+0x15/0x1b [ 283.780667][T17291] should_fail_ex+0x263/0x280 [ 283.780784][T17291] should_fail+0xb/0x20 [ 283.780880][T17291] should_fail_usercopy+0x1a/0x20 [ 283.781084][T17291] _copy_from_user+0x1c/0xb0 [ 283.781156][T17291] sctp_setsockopt+0x164/0xea0 [ 283.781279][T17291] sock_common_setsockopt+0x69/0x80 [ 283.781455][T17291] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 283.781572][T17291] __sys_setsockopt+0x184/0x200 [ 283.781702][T17291] __x64_sys_setsockopt+0x64/0x80 [ 283.781819][T17291] x64_sys_call+0x21d5/0x3000 [ 283.781946][T17291] do_syscall_64+0xc0/0x2a0 [ 283.782166][T17291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.782258][T17291] RIP: 0033:0x7f599f19aeb9 [ 283.782413][T17291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.782467][T17291] RSP: 002b:00007f599dbf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 283.782561][T17291] RAX: ffffffffffffffda RBX: 00007f599f415fa0 RCX: 00007f599f19aeb9 [ 283.782613][T17291] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 283.782668][T17291] RBP: 00007f599dbf7090 R08: 0000000000000008 R09: 0000000000000000 [ 283.782720][T17291] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 283.782763][T17291] R13: 00007f599f416038 R14: 00007f599f415fa0 R15: 00007fffd66ddb28 [ 283.782834][T17291] [ 284.010110][T17298] xt_policy: output policy not valid in PREROUTING and INPUT [ 284.353890][T17347] gre0: entered promiscuous mode [ 284.579826][T17381] syzkaller0: entered promiscuous mode [ 284.585421][T17381] syzkaller0: entered allmulticast mode [ 284.885508][ T29] audit: type=1326 audit(1769990788.128:13873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17394 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a73bfaeb9 code=0x7ffc0000 [ 284.909357][ T29] audit: type=1326 audit(1769990788.128:13874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17394 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a73bfaeb9 code=0x7ffc0000 [ 284.936023][ T29] audit: type=1326 audit(1769990788.175:13875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17394 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7a73bfaeb9 code=0x7ffc0000 [ 284.959754][ T29] audit: type=1326 audit(1769990788.175:13876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17394 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a73bfaeb9 code=0x7ffc0000 [ 284.983705][ T29] audit: type=1326 audit(1769990788.175:13877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17394 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a73bfaeb9 code=0x7ffc0000 [ 285.007841][ T29] audit: type=1326 audit(1769990788.175:13878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17394 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7a73bfaeb9 code=0x7ffc0000 [ 285.031358][ T29] audit: type=1326 audit(1769990788.175:13879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17394 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a73bfaeb9 code=0x7ffc0000 [ 285.055239][ T29] audit: type=1326 audit(1769990788.175:13880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17394 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a73bfaeb9 code=0x7ffc0000 [ 285.105363][ T5527] kernel write not supported for file [eventfd] (pid: 5527 comm: kworker/0:7) [ 285.260950][T17417] bridge_slave_0: entered promiscuous mode [ 285.284809][T17419] loop8: detected capacity change from 0 to 256 [ 285.302467][T17419] FAT-fs (loop8): Directory bread(block 64) failed [ 285.313628][T17419] FAT-fs (loop8): Directory bread(block 65) failed [ 285.320671][T17419] FAT-fs (loop8): Directory bread(block 66) failed [ 285.327454][T17419] FAT-fs (loop8): Directory bread(block 67) failed [ 285.335072][T17419] FAT-fs (loop8): Directory bread(block 68) failed [ 285.341805][T17419] FAT-fs (loop8): Directory bread(block 69) failed [ 285.354344][T17419] FAT-fs (loop8): Directory bread(block 70) failed [ 285.361106][T17419] FAT-fs (loop8): Directory bread(block 71) failed [ 285.370821][T17419] FAT-fs (loop8): Directory bread(block 72) failed [ 285.377777][T17419] FAT-fs (loop8): Directory bread(block 73) failed [ 285.658526][T17429] loop8: detected capacity change from 0 to 512 [ 285.782339][T17429] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.810274][T17445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.828785][T17450] futex_wake_op: syz.4.4391 tries to shift op by -1; fix this program [ 285.851217][T17429] ext4 filesystem being mounted at /282/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.161815][T17470] sctp: [Deprecated]: syz.9.4396 (pid 17470) Use of int in max_burst socket option deprecated. [ 286.161815][T17470] Use struct sctp_assoc_value instead [ 286.235771][T17472] syzkaller0: entered promiscuous mode [ 286.241372][T17472] syzkaller0: entered allmulticast mode [ 286.400158][T12671] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.445960][T17497] __nla_validate_parse: 13 callbacks suppressed [ 286.445978][T17497] netlink: 460 bytes leftover after parsing attributes in process `syz.8.4405'. [ 286.553960][T17503] netlink: 'syz.0.4402': attribute type 10 has an invalid length. [ 286.657409][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4408'. [ 286.932303][T17519] syzkaller0: entered promiscuous mode [ 286.937947][T17519] syzkaller0: entered allmulticast mode [ 286.982970][T17526] netlink: 'syz.4.4413': attribute type 1 has an invalid length. [ 287.028169][T17526] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.030317][T17488] Set syz1 is full, maxelem 65536 reached [ 287.038894][T17526] bond2: (slave bond3): making interface the new active one [ 287.049471][T17526] bond2: (slave bond3): Enslaving as an active interface with an up link [ 287.075229][T17526] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 287.076204][T17531] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4414'. [ 287.087778][T17526] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 287.097024][T17531] netlink: 'syz.9.4414': attribute type 1 has an invalid length. [ 287.114957][T17531] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4414'. [ 287.128188][T17531] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4414'. [ 287.137820][T17531] netlink: 'syz.9.4414': attribute type 1 has an invalid length. [ 287.145616][T17531] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4414'. [ 287.246728][T17544] -1: renamed from syzkaller0 [ 287.291154][T17547] netlink: 87 bytes leftover after parsing attributes in process `syz.2.4417'. [ 287.416924][T17559] syzkaller0: entered promiscuous mode [ 287.422773][T17559] syzkaller0: entered allmulticast mode [ 287.441008][T17564] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4427'. [ 287.529589][T17574] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4432'. [ 287.531094][T17575] netlink: 'syz.8.4430': attribute type 1 has an invalid length. [ 287.538796][T17574] tipc: Invalid UDP bearer configuration [ 287.538809][T17574] tipc: Enabling of bearer rejected, failed to enable media [ 287.716903][T17582] loop9: detected capacity change from 0 to 512 [ 287.726658][T17590] loop8: detected capacity change from 0 to 512 [ 287.771477][T17590] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.784874][T17590] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.796683][T17582] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.810593][T17590] netlink: 172 bytes leftover after parsing attributes in process `syz.8.4438'. [ 287.831722][T17590] lo speed is unknown, defaulting to 1000 [ 287.838180][T17590] lo speed is unknown, defaulting to 1000 [ 287.860484][T14905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.876274][T17598] FAULT_INJECTION: forcing a failure. [ 287.876274][T17598] name failslab, interval 1, probability 0, space 0, times 0 [ 287.889145][T17598] CPU: 1 UID: 0 PID: 17598 Comm: syz.4.4439 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 287.889186][T17598] Tainted: [W]=WARN [ 287.889194][T17598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.889207][T17598] Call Trace: [ 287.889214][T17598] [ 287.889222][T17598] __dump_stack+0x1d/0x30 [ 287.889264][T17598] dump_stack_lvl+0x95/0xd0 [ 287.889290][T17598] dump_stack+0x15/0x1b [ 287.889316][T17598] should_fail_ex+0x263/0x280 [ 287.889354][T17598] should_failslab+0x8c/0xb0 [ 287.889449][T17598] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 287.889477][T17598] ? __alloc_skb+0x2f0/0x4b0 [ 287.889519][T17598] __alloc_skb+0x2f0/0x4b0 [ 287.889561][T17598] tipc_msg_create+0x47/0x230 [ 287.889594][T17598] tipc_group_proto_xmit+0xb7/0x2f0 [ 287.889642][T17598] tipc_group_cong+0x284/0x2b0 [ 287.889727][T17598] tipc_group_bc_cong+0xe5/0x110 [ 287.889759][T17598] tipc_send_group_bcast+0x1d0/0x6f0 [ 287.889783][T17598] ? __pfx_woken_wake_function+0x10/0x10 [ 287.889828][T17598] __tipc_sendmsg+0x186/0x1c00 [ 287.889853][T17598] ? avc_has_perm+0x101/0x190 [ 287.889896][T17598] ? _raw_spin_lock_bh+0x56/0xb0 [ 287.889971][T17598] ? _raw_spin_unlock_bh+0x18/0x20 [ 287.889995][T17598] ? lock_sock_nested+0x132/0x160 [ 287.890023][T17598] tipc_sendmsg+0x3e/0x60 [ 287.890047][T17598] ? __pfx_tipc_sendmsg+0x10/0x10 [ 287.890125][T17598] ____sys_sendmsg+0x5af/0x600 [ 287.890152][T17598] ___sys_sendmsg+0x195/0x1e0 [ 287.890194][T17598] __x64_sys_sendmsg+0xd4/0x160 [ 287.890226][T17598] x64_sys_call+0x17ba/0x3000 [ 287.890332][T17598] do_syscall_64+0xc0/0x2a0 [ 287.890373][T17598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.890396][T17598] RIP: 0033:0x7f78d90baeb9 [ 287.890416][T17598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.890440][T17598] RSP: 002b:00007f78d7b17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.890511][T17598] RAX: ffffffffffffffda RBX: 00007f78d9335fa0 RCX: 00007f78d90baeb9 [ 287.890525][T17598] RDX: 0000000000000080 RSI: 00002000000008c0 RDI: 0000000000000005 [ 287.890541][T17598] RBP: 00007f78d7b17090 R08: 0000000000000000 R09: 0000000000000000 [ 287.890595][T17598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.890638][T17598] R13: 00007f78d9336038 R14: 00007f78d9335fa0 R15: 00007fff6380dd88 [ 287.890683][T17598] [ 288.146224][T17603] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #2: block 18: comm syz.8.4438: lblock 23 mapped to illegal pblock 18 (length 1) [ 288.191401][T12671] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /288/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 288.212727][T12671] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 12: comm syz-executor: path /288/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 288.237128][T17603] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #2: block 18: comm syz.8.4438: lblock 23 mapped to illegal pblock 18 (length 1) [ 288.280198][T12671] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /288/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 288.349873][T12671] EXT4-fs error (device loop8): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /288/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 288.380550][T17624] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 288.387995][T17624] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 288.396541][T12671] EXT4-fs error (device loop8): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 288.399989][T17612] syzkaller0: entered promiscuous mode [ 288.421783][T17612] syzkaller0: entered allmulticast mode [ 288.428352][T12671] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 288.445208][T12671] EXT4-fs error (device loop8): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /288/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 288.473375][T12671] EXT4-fs error (device loop8): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 288.493332][T12671] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 288.505565][T12671] EXT4-fs error (device loop8): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /288/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 288.531440][T12671] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 288.543540][T12671] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 288.556042][T12671] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 288.569563][T17628] SELinux: failed to load policy [ 288.575968][T12671] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 288.589163][T12671] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 288.601764][T12671] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 288.616506][T12671] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 288.628734][T12671] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 288.711999][T13318] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.934011][T17636] lo speed is unknown, defaulting to 1000 [ 288.940231][T17636] lo speed is unknown, defaulting to 1000 [ 289.040423][ T31] bond0 (unregistering): left promiscuous mode [ 289.046769][ T31] bond_slave_0: left promiscuous mode [ 289.053026][ T31] bond_slave_1: left promiscuous mode [ 289.062164][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.071953][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.081235][ T31] bond0 (unregistering): Released all slaves [ 289.090137][ T31] bond1 (unregistering): Released all slaves [ 289.099313][ T31] bond2 (unregistering): (slave bond3): Releasing backup interface [ 289.108011][ T31] bond2 (unregistering): Released all slaves [ 289.117201][ T31] bond3 (unregistering): Released all slaves [ 289.127060][ T31] bond4 (unregistering): (slave bond5): Releasing backup interface [ 289.135521][ T31] bond4 (unregistering): Released all slaves [ 289.144475][ T31] bond5 (unregistering): Released all slaves [ 289.153141][ T31] bond6 (unregistering): Released all slaves [ 289.185570][T17636] chnl_net:caif_netlink_parms(): no params data found [ 289.199346][ T31] tipc: Left network mode [ 289.222886][ T31] hsr_slave_0: left promiscuous mode [ 289.234705][ T31] hsr_slave_1: left promiscuous mode [ 289.390015][T14277] lo speed is unknown, defaulting to 1000 [ 289.395897][T14277] infiniband syz2: ib_query_port failed (-19) [ 289.466221][T17670] syzkaller0: entered promiscuous mode [ 289.471957][T17670] syzkaller0: entered allmulticast mode [ 289.532093][T17636] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.539476][T17636] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.547136][T17636] bridge_slave_0: entered allmulticast mode [ 289.556178][T17636] bridge_slave_0: entered promiscuous mode [ 289.565978][T17636] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.573157][T17636] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.581929][T17636] bridge_slave_1: entered allmulticast mode [ 289.588591][T17636] bridge_slave_1: entered promiscuous mode [ 289.623999][T17636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.635467][T17636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.658901][T17636] team0: Port device team_slave_0 added [ 289.666219][ T31] IPVS: stop unused estimator thread 0... [ 289.682715][T17636] team0: Port device team_slave_1 added [ 289.719789][T17636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.726951][T17636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.753335][T17636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.767312][T17705] loop9: detected capacity change from 0 to 512 [ 289.774558][T17705] EXT4-fs warning (device loop9): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 289.776513][T17636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.792212][T17636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.818282][T17636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.911095][T17636] hsr_slave_0: entered promiscuous mode [ 289.929657][T17636] hsr_slave_1: entered promiscuous mode [ 289.937604][T17636] debugfs: 'hsr0' already exists in 'hsr' [ 289.943545][T17636] Cannot create hsr debugfs directory [ 290.237558][T17723] Invalid argument reading file caps for ./file0 [ 290.289357][T17636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.310598][T17636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.329555][T17745] ipip0: entered promiscuous mode [ 290.345393][T17636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.361578][T17636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 290.454186][T17636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.486583][T17636] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.505334][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.512459][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.545214][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.552477][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.575597][T17636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.621968][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 290.621990][ T29] audit: type=1400 audit(1769990793.488:14080): avc: denied { firmware_load } for pid=17771 comm="syz.2.4479" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 290.734445][T17636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.903769][T17636] veth0_vlan: entered promiscuous mode [ 290.930003][T17636] veth1_vlan: entered promiscuous mode [ 290.970479][T17636] veth0_macvtap: entered promiscuous mode [ 290.988869][T17636] veth1_macvtap: entered promiscuous mode [ 291.016076][T17636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.038280][T17636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.064036][ T3459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.090100][ T3459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.120687][ T3459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.142637][ T3459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.189016][T17820] netlink: 'syz.3.4454': attribute type 1 has an invalid length. [ 291.231042][T17824] loop9: detected capacity change from 0 to 512 [ 291.331639][T17830] loop3: detected capacity change from 0 to 1024 [ 291.344236][T17824] loop9: detected capacity change from 0 to 8192 [ 291.369614][T17830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.412332][T17830] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.4485: inode #1919248754: comm syz.3.4485: iget: illegal inode # [ 291.450297][T17830] EXT4-fs (loop3): Remounting filesystem read-only [ 291.464422][T17830] EXT4-fs warning (device loop3): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.3.4485: cleanup dec ref error -30 [ 291.490496][T17830] EXT4-fs warning (device loop3): ext4_xattr_block_set:2200: inode #19: comm syz.3.4485: dec ref error=-30 [ 291.533096][T17636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.938395][ T29] audit: type=1400 audit(1769990794.722:14081): avc: denied { read } for pid=17878 comm="syz.3.4492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 292.119837][ T3673] Bluetooth: hci0: command 0x1003 tx timeout [ 292.125951][ T3839] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 292.293259][ T29] audit: type=1400 audit(1769990795.059:14082): avc: denied { ioctl } for pid=17898 comm="syz.4.4493" path="socket:[57321]" dev="sockfs" ino=57321 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 293.108454][T17989] __nla_validate_parse: 3 callbacks suppressed [ 293.108475][T17989] netlink: 580 bytes leftover after parsing attributes in process `syz.0.4498'. [ 293.143113][ T29] audit: type=1326 audit(1769990795.854:14083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.4.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d90baeb9 code=0x7ffc0000 [ 293.167028][ T29] audit: type=1326 audit(1769990795.854:14084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.4.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d90baeb9 code=0x7ffc0000 [ 293.190727][ T29] audit: type=1326 audit(1769990795.854:14085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.4.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78d90baeb9 code=0x7ffc0000 [ 293.216492][ T29] audit: type=1326 audit(1769990795.854:14086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.4.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d90baeb9 code=0x7ffc0000 [ 293.240525][ T29] audit: type=1326 audit(1769990795.854:14087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.4.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d90baeb9 code=0x7ffc0000 [ 293.264905][ T29] audit: type=1326 audit(1769990795.854:14088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.4.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f78d90baeb9 code=0x7ffc0000 [ 293.288445][ T29] audit: type=1326 audit(1769990795.854:14089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.4.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d90baeb9 code=0x7ffc0000 [ 293.382962][T18006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2047 sclass=netlink_route_socket pid=18006 comm=syz.0.4502 [ 293.723551][T18035] SELinux: failed to load policy [ 293.789977][T18045] loop9: detected capacity change from 0 to 512 [ 293.818483][T18017] process '/newroot/555/file0' started with executable stack [ 293.842019][T18045] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 293.850240][T18045] EXT4-fs (loop9): orphan cleanup on readonly fs [ 293.873450][T18045] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 293.910045][T18045] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 293.932365][T18045] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4511: corrupted inode contents [ 293.951421][T18051] loop3: detected capacity change from 0 to 8192 [ 293.958334][T18045] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #16: comm syz.9.4511: mark_inode_dirty error [ 293.977249][T18045] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4511: corrupted inode contents [ 294.000433][T18045] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.4511: mark_inode_dirty error [ 294.016376][T18045] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4511: corrupted inode contents [ 294.033155][T12474] loop3: p1 p3 p4[EZD] [ 294.037463][T12474] loop3: p1 start 262144 is beyond EOD, truncated [ 294.044170][T12474] loop3: p3 start 331781 is beyond EOD, truncated [ 294.050884][T12474] loop3: p4 size 197376 extends beyond EOD, truncated [ 294.061059][T18045] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 294.070069][T18045] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4511: corrupted inode contents [ 294.084672][T18051] loop3: p1 p3 p4[EZD] [ 294.089245][T18051] loop3: p1 start 262144 is beyond EOD, truncated [ 294.095802][T18051] loop3: p3 start 331781 is beyond EOD, truncated [ 294.102500][T18051] loop3: p4 size 197376 extends beyond EOD, truncated [ 294.123084][T18045] EXT4-fs error (device loop9): ext4_truncate:4635: inode #16: comm syz.9.4511: mark_inode_dirty error [ 294.134782][T18045] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 294.182149][T18063] FAULT_INJECTION: forcing a failure. [ 294.182149][T18063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.195502][T18063] CPU: 1 UID: 0 PID: 18063 Comm: syz.0.4518 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.195622][T18063] Tainted: [W]=WARN [ 294.195632][T18063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.195650][T18063] Call Trace: [ 294.195659][T18063] [ 294.195670][T18063] __dump_stack+0x1d/0x30 [ 294.195749][T18063] dump_stack_lvl+0x95/0xd0 [ 294.195778][T18063] dump_stack+0x15/0x1b [ 294.195805][T18063] should_fail_ex+0x263/0x280 [ 294.195840][T18063] should_fail+0xb/0x20 [ 294.195926][T18063] should_fail_usercopy+0x1a/0x20 [ 294.195957][T18063] _copy_to_user+0x20/0xa0 [ 294.195977][T18063] simple_read_from_buffer+0xb5/0x130 [ 294.196063][T18063] proc_fail_nth_read+0x10e/0x150 [ 294.196088][T18063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.196113][T18063] vfs_read+0x1ab/0x7f0 [ 294.196130][T18063] ? __rcu_read_unlock+0x4e/0x70 [ 294.196169][T18063] ? __fget_files+0x184/0x1c0 [ 294.196189][T18063] ? mutex_lock+0x57/0x90 [ 294.196211][T18063] ksys_read+0xdc/0x1a0 [ 294.196230][T18063] __x64_sys_read+0x40/0x50 [ 294.196247][T18063] x64_sys_call+0x2889/0x3000 [ 294.196303][T18063] do_syscall_64+0xc0/0x2a0 [ 294.196331][T18063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.196351][T18063] RIP: 0033:0x7f7a73bbb78e [ 294.196366][T18063] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.196423][T18063] RSP: 002b:00007f7a72656fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.196442][T18063] RAX: ffffffffffffffda RBX: 00007f7a726576c0 RCX: 00007f7a73bbb78e [ 294.196455][T18063] RDX: 000000000000000f RSI: 00007f7a726570a0 RDI: 0000000000000004 [ 294.196512][T18063] RBP: 00007f7a72657090 R08: 0000000000000000 R09: 0000000000000000 [ 294.196524][T18063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.196536][T18063] R13: 00007f7a73e76038 R14: 00007f7a73e75fa0 R15: 00007ffd11466078 [ 294.196556][T18063] [ 294.425768][T18068] netlink: 'syz.4.4517': attribute type 1 has an invalid length. [ 294.440291][T18045] EXT4-fs (loop9): 1 truncate cleaned up [ 294.446610][T18045] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.501031][T18077] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 294.539225][T12474] udevd[12474]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 294.584542][T14277] IPVS: starting estimator thread 0... [ 294.599479][T14905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.608279][T12474] udevd[12474]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 294.654125][T18095] netlink: 'syz.9.4529': attribute type 2 has an invalid length. [ 294.662033][T18095] netlink: 'syz.9.4529': attribute type 4 has an invalid length. [ 294.706819][T18089] IPVS: using max 2352 ests per chain, 117600 per kthread [ 294.733124][T18104] FAULT_INJECTION: forcing a failure. [ 294.733124][T18104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.747001][T18104] CPU: 0 UID: 0 PID: 18104 Comm: syz.9.4531 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.747101][T18104] Tainted: [W]=WARN [ 294.747111][T18104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.747129][T18104] Call Trace: [ 294.747137][T18104] [ 294.747164][T18104] __dump_stack+0x1d/0x30 [ 294.747265][T18104] dump_stack_lvl+0x95/0xd0 [ 294.747364][T18104] dump_stack+0x15/0x1b [ 294.747391][T18104] should_fail_ex+0x263/0x280 [ 294.747432][T18104] should_fail+0xb/0x20 [ 294.747467][T18104] should_fail_usercopy+0x1a/0x20 [ 294.747528][T18104] _copy_from_iter+0xcf/0xea0 [ 294.747614][T18104] ? file_tty_write+0x1d4/0x690 [ 294.747675][T18104] ? kfree+0x347/0x3b0 [ 294.747749][T18104] file_tty_write+0x322/0x690 [ 294.747785][T18104] ? __pfx_tty_write+0x10/0x10 [ 294.747816][T18104] tty_write+0x25/0x30 [ 294.747887][T18104] vfs_write+0x5a6/0x9f0 [ 294.747914][T18104] ksys_write+0xdc/0x1a0 [ 294.747939][T18104] __x64_sys_write+0x40/0x50 [ 294.747966][T18104] x64_sys_call+0x2847/0x3000 [ 294.748001][T18104] do_syscall_64+0xc0/0x2a0 [ 294.748066][T18104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.748096][T18104] RIP: 0033:0x7fe40ddfaeb9 [ 294.748118][T18104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.748164][T18104] RSP: 002b:00007fe40c857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.748257][T18104] RAX: ffffffffffffffda RBX: 00007fe40e075fa0 RCX: 00007fe40ddfaeb9 [ 294.748276][T18104] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 294.748293][T18104] RBP: 00007fe40c857090 R08: 0000000000000000 R09: 0000000000000000 [ 294.748311][T18104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.748329][T18104] R13: 00007fe40e076038 R14: 00007fe40e075fa0 R15: 00007fff1a5fca18 [ 294.748521][T18104] [ 294.754551][T18105] gtp0: entered promiscuous mode [ 294.947590][T18105] gtp0: entered allmulticast mode [ 294.975912][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4534'. [ 295.031202][T18115] netlink: 'syz.0.4534': attribute type 18 has an invalid length. [ 295.085903][T18121] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4539'. [ 295.099786][T18111] xt_ecn: cannot match TCP bits for non-tcp packets [ 295.103076][T18119] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4538'. [ 295.109193][T18111] xt_ecn: cannot match TCP bits for non-tcp packets [ 295.122822][T18111] xt_ecn: cannot match TCP bits for non-tcp packets [ 295.280300][ T12] bond0: (slave bond_slave_0): interface is now down [ 295.287259][ T12] bond0: (slave bond_slave_1): interface is now down [ 295.298187][T18150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.388065][T18153] loop3: detected capacity change from 0 to 2048 [ 295.418509][T18153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.434532][ T12] bond0: (slave bond_slave_0): interface is now down [ 295.441339][ T12] bond0: (slave bond_slave_1): interface is now down [ 295.450432][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4553'. [ 295.471131][ T12] bond0: now running without any active interface! [ 295.505917][T18166] loop9: detected capacity change from 0 to 512 [ 295.513134][T17636] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 295.530947][T18166] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 295.548589][T18166] EXT4-fs (loop9): 1 orphan inode deleted [ 295.554488][T18166] EXT4-fs (loop9): 1 truncate cleaned up [ 295.563691][T17636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.573471][T18166] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.671802][T14905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.689290][T18168] netlink: 16 bytes leftover after parsing attributes in process `wg1'. [ 295.751626][T18183] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4561'. [ 295.929630][T18197] loop4: detected capacity change from 0 to 512 [ 295.951736][T18197] EXT4-fs: Ignoring removed bh option [ 295.968731][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 295.968746][ T29] audit: type=1326 audit(1769990798.501:14157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.2.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 295.984148][T18197] EXT4-fs: dax option not supported [ 296.031174][T18202] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4569'. [ 296.035852][ T29] audit: type=1326 audit(1769990798.529:14158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.2.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 296.064361][ T29] audit: type=1326 audit(1769990798.529:14159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.2.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 296.088185][ T29] audit: type=1326 audit(1769990798.529:14160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.2.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 296.112200][ T29] audit: type=1326 audit(1769990798.539:14161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.2.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 296.136157][ T29] audit: type=1326 audit(1769990798.539:14162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.2.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 296.160027][ T29] audit: type=1326 audit(1769990798.539:14163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.2.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 296.183777][ T29] audit: type=1326 audit(1769990798.539:14164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.2.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 296.207509][ T29] audit: type=1326 audit(1769990798.539:14165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.2.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 296.211671][T18206] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4567'. [ 296.231263][ T29] audit: type=1326 audit(1769990798.539:14166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.2.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599f19aeb9 code=0x7ffc0000 [ 296.474259][T18226] loop9: detected capacity change from 0 to 1024 [ 296.482224][T18225] loop4: detected capacity change from 0 to 1024 [ 296.510847][T18226] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 296.528318][T18225] EXT4-fs: Ignoring removed orlov option [ 296.534114][T18225] EXT4-fs: Ignoring removed nomblk_io_submit option [ 296.550285][T18226] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.616778][T18226] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.4576: lblock 0 mapped to illegal pblock 0 (length 1) [ 296.659940][T18225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.660458][T18226] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 296.674851][T18237] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.684804][T18226] EXT4-fs (loop9): This should not happen!! Data will be lost [ 296.684804][T18226] [ 296.724651][T18226] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: comm syz.9.4576: lblock 0 mapped to illegal pblock 0 (length 1) [ 296.766679][T18226] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 3: comm syz.9.4576: lblock 3 mapped to illegal pblock 3 (length 1) [ 296.789123][T18238] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: comm syz.9.4576: lblock 0 mapped to illegal pblock 0 (length 1) [ 296.803300][T18226] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 296.815860][T18226] EXT4-fs (loop9): This should not happen!! Data will be lost [ 296.815860][T18226] [ 296.821072][T18243] -1: renamed from syzkaller0 [ 296.828745][T15448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.840577][T18238] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: comm syz.9.4576: lblock 0 mapped to illegal pblock 0 (length 1) [ 296.857717][T18238] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: comm syz.9.4576: lblock 0 mapped to illegal pblock 0 (length 1) [ 296.884300][T18238] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: comm syz.9.4576: lblock 0 mapped to illegal pblock 0 (length 1) [ 296.898155][T18238] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.4576: lblock 3 mapped to illegal pblock 3 (length 1) [ 296.933343][T18248] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4583'. [ 296.956947][T18238] EXT4-fs error (device loop9): ext4_ext_remove_space:2955: inode #15: comm syz.9.4576: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 296.995571][T14905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 297.170263][T18267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18267 comm=syz.0.4589 [ 297.412156][T18293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.512862][T18301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.528624][T18301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.538973][T18301] bond0 (unregistering): Released all slaves [ 297.578758][T18306] netlink: 'syz.2.4605': attribute type 1 has an invalid length. [ 297.599735][T18306] bond0: entered promiscuous mode [ 297.611356][T18306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.711800][T18317] 9p: Could not find request transport: fA [ 297.749863][T18322] lo speed is unknown, defaulting to 1000 [ 298.032528][T18352] loop4: detected capacity change from 0 to 2048 [ 298.052101][T18354] loop3: detected capacity change from 0 to 512 [ 298.067170][T18354] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 298.084189][T18354] EXT4-fs (loop3): 1 truncate cleaned up [ 298.087779][T18352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.094185][T18354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.205491][T15448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.224213][T17636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.309909][T18374] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 298.323425][T18374] SELinux: failed to load policy [ 298.329785][T18372] SELinux: failed to load policy [ 298.389231][T18380] program syz.4.4632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.485705][T18397] netlink: 'syz.0.4638': attribute type 6 has an invalid length. [ 298.573219][T18406] SELinux: failed to load policy [ 298.632742][T18415] __nla_validate_parse: 12 callbacks suppressed [ 298.632765][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4645'. [ 298.670849][T18421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4646'. [ 298.751321][T18436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4651'. [ 298.769661][T18429] -1: renamed from syzkaller0 [ 298.795350][T18440] netlink: 'syz.9.4650': attribute type 11 has an invalid length. [ 298.823545][T18436] loop4: detected capacity change from 0 to 8192 [ 299.170933][T18464] netlink: 'syz.9.4659': attribute type 3 has an invalid length. [ 299.215593][T18466] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4660'. [ 299.232913][T18467] loop9: detected capacity change from 0 to 128 [ 299.266303][T18467] /dev/loop9: Can't open blockdev [ 299.413395][T18481] loop9: detected capacity change from 0 to 1024 [ 299.443201][T18481] EXT4-fs: Ignoring removed bh option [ 299.458880][T18483] netlink: 87 bytes leftover after parsing attributes in process `syz.2.4668'. [ 299.496702][T18481] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.664702][T18491] netlink: 'syz.9.4667': attribute type 10 has an invalid length. [ 299.676566][T18489] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 299.711493][T18491] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 299.722994][T18489] SELinux: failed to load policy [ 299.824206][T18502] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4673'. [ 299.990813][T18494] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 300.006206][T14905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.018981][T18494] SELinux: failed to load policy [ 300.310189][T18533] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 300.331238][T18533] SELinux: failed to load policy [ 300.677021][T18535] lo speed is unknown, defaulting to 1000 [ 300.787405][T18535] chnl_net:caif_netlink_parms(): no params data found [ 300.803713][T18549] 9pnet_fd: Insufficient options for proto=fd [ 300.854845][T18553] loop3: detected capacity change from 0 to 1024 [ 300.865261][T18553] EXT4-fs: Ignoring removed oldalloc option [ 300.871322][T18553] EXT4-fs: Ignoring removed bh option [ 300.895458][T18535] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.903066][T18535] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.910634][T18535] bridge_slave_0: entered allmulticast mode [ 300.917307][T18535] bridge_slave_0: entered promiscuous mode [ 300.925210][T18535] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.932482][T18535] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.940528][T18553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.005567][T18562] netlink: 'syz.2.4690': attribute type 6 has an invalid length. [ 301.020939][T18535] bridge_slave_1: entered allmulticast mode [ 301.028032][T18535] bridge_slave_1: entered promiscuous mode [ 301.047534][T17636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.087296][T18570] loop3: detected capacity change from 0 to 128 [ 301.127283][T18535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.144793][T18570] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.157817][T18566] lo speed is unknown, defaulting to 1000 [ 301.196990][T18573] VFS: Mount too revealing [ 301.207878][T18535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.232976][T18570] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.311972][T18535] team0: Port device team_slave_0 added [ 301.322484][T17636] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.357350][T18535] team0: Port device team_slave_1 added [ 301.392161][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 301.392186][ T29] audit: type=1326 audit(1769990803.571:14252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18582 comm="syz.3.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76eaaeb9 code=0x7ffc0000 [ 301.422408][ T29] audit: type=1326 audit(1769990803.571:14253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18582 comm="syz.3.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76eaaeb9 code=0x7ffc0000 [ 301.463673][T18535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.470675][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.497616][T18535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.516924][ T29] audit: type=1326 audit(1769990803.571:14254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18582 comm="syz.3.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76eaaeb9 code=0x7ffc0000 [ 301.540725][ T29] audit: type=1326 audit(1769990803.571:14255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18582 comm="syz.3.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76eaaeb9 code=0x7ffc0000 [ 301.564903][ T29] audit: type=1326 audit(1769990803.571:14256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18582 comm="syz.3.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6d76eaaeb9 code=0x7ffc0000 [ 301.566895][T18535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.589742][ T29] audit: type=1326 audit(1769990803.571:14257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18582 comm="syz.3.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76eaaeb9 code=0x7ffc0000 [ 301.597113][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.620842][ T29] audit: type=1326 audit(1769990803.571:14258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18582 comm="syz.3.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76eaaeb9 code=0x7ffc0000 [ 301.646882][T18535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.682258][ T29] audit: type=1326 audit(1769990803.581:14259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18582 comm="syz.3.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76eaaeb9 code=0x7ffc0000 [ 301.693042][T18535] hsr_slave_0: entered promiscuous mode [ 301.706558][ T29] audit: type=1326 audit(1769990803.581:14260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18582 comm="syz.3.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d76eaaeb9 code=0x7ffc0000 [ 301.735682][ T29] audit: type=1326 audit(1769990803.581:14261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18582 comm="syz.3.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76eaaeb9 code=0x7ffc0000 [ 301.761585][T18535] hsr_slave_1: entered promiscuous mode [ 301.771648][T18535] debugfs: 'hsr0' already exists in 'hsr' [ 301.777744][T18535] Cannot create hsr debugfs directory [ 301.795979][T18566] netlink: 'syz.4.4692': attribute type 12 has an invalid length. [ 301.892472][T18594] FAULT_INJECTION: forcing a failure. [ 301.892472][T18594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.905872][T18594] CPU: 1 UID: 0 PID: 18594 Comm: syz.9.4702 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 301.905907][T18594] Tainted: [W]=WARN [ 301.905914][T18594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.905968][T18594] Call Trace: [ 301.905978][T18594] [ 301.905990][T18594] __dump_stack+0x1d/0x30 [ 301.906018][T18594] dump_stack_lvl+0x95/0xd0 [ 301.906044][T18594] dump_stack+0x15/0x1b [ 301.906097][T18594] should_fail_ex+0x263/0x280 [ 301.906133][T18594] should_fail+0xb/0x20 [ 301.906170][T18594] should_fail_usercopy+0x1a/0x20 [ 301.906283][T18594] _copy_to_user+0x20/0xa0 [ 301.906308][T18594] simple_read_from_buffer+0xb5/0x130 [ 301.906365][T18594] proc_fail_nth_read+0x10e/0x150 [ 301.906396][T18594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.906425][T18594] vfs_read+0x1ab/0x7f0 [ 301.906469][T18594] ? __rcu_read_unlock+0x4e/0x70 [ 301.906501][T18594] ? __fget_files+0x184/0x1c0 [ 301.906527][T18594] ? mutex_lock+0x57/0x90 [ 301.906559][T18594] ksys_read+0xdc/0x1a0 [ 301.906644][T18594] __x64_sys_read+0x40/0x50 [ 301.906670][T18594] x64_sys_call+0x2889/0x3000 [ 301.906707][T18594] do_syscall_64+0xc0/0x2a0 [ 301.906740][T18594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.906851][T18594] RIP: 0033:0x7fe40ddbb78e [ 301.906867][T18594] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 301.906891][T18594] RSP: 002b:00007fe40c856fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.906917][T18594] RAX: ffffffffffffffda RBX: 00007fe40c8576c0 RCX: 00007fe40ddbb78e [ 301.906936][T18594] RDX: 000000000000000f RSI: 00007fe40c8570a0 RDI: 0000000000000006 [ 301.906955][T18594] RBP: 00007fe40c857090 R08: 0000000000000000 R09: 0000000000000000 [ 301.906980][T18594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.906993][T18594] R13: 00007fe40e076038 R14: 00007fe40e075fa0 R15: 00007fff1a5fca18 [ 301.907014][T18594] [ 301.951903][T18597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4700'. [ 302.127932][T18600] loop4: detected capacity change from 0 to 1024 [ 302.152810][T18600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 302.165239][T18600] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.191231][T15448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 302.210697][T18597] vxlan0: entered promiscuous mode [ 302.240735][ T31] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.359851][T18612] Process accounting resumed [ 302.367578][ T31] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.388729][T18615] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.417881][ T31] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.439403][ T31] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.490495][T18615] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.569172][T18615] bond0: (slave netdevsim1): Releasing backup interface [ 302.586750][T18615] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.646969][T18535] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.661522][T18615] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.673832][T18535] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.684163][T18638] tipc: Enabling of bearer rejected, failed to enable media [ 302.692761][T18535] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.702441][T18535] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 302.727648][ T52] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.746350][ T52] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.775129][ T52] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.804227][ T52] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.829962][T18535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.857217][T18535] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.888105][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.895235][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.896502][T18650] netlink: 'syz.9.4719': attribute type 7 has an invalid length. [ 302.910645][T18650] netlink: 'syz.9.4719': attribute type 8 has an invalid length. [ 302.933176][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.940490][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.982527][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4720'. [ 302.992038][T18652] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4720'. [ 303.053208][T18646] loop3: detected capacity change from 0 to 512 [ 303.077972][T18658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2154 sclass=netlink_route_socket pid=18658 comm=syz.9.4721 [ 303.124806][T18535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.200024][T18646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.228699][T18646] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.290539][T18673] loop4: detected capacity change from 0 to 512 [ 303.327183][T18673] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4724: iget: bad extended attribute block 1 [ 303.353926][T18673] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4724: couldn't read orphan inode 15 (err -117) [ 303.361750][T18535] veth0_vlan: entered promiscuous mode [ 303.381753][T18681] ip6t_rpfilter: unknown options [ 303.387129][T18682] ip6t_rpfilter: unknown options [ 303.393311][T18673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.407953][T18535] veth1_vlan: entered promiscuous mode [ 303.449005][T17636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.490284][T18535] veth0_macvtap: entered promiscuous mode [ 303.517227][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4726'. [ 303.533220][T18535] veth1_macvtap: entered promiscuous mode [ 303.595649][T18535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.631895][T18535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.665056][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.701718][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.711094][T18705] loop9: detected capacity change from 0 to 512 [ 303.751757][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.773563][T18705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.790365][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.799111][T18720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2154 sclass=netlink_route_socket pid=18720 comm=syz.2.4732 [ 303.815497][T18705] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.835887][T18705] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4728: Failed to acquire dquot type 1 [ 303.864112][T14905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.910997][T18728] loop3: detected capacity change from 0 to 1024 [ 303.925924][T18723] FAULT_INJECTION: forcing a failure. [ 303.925924][T18723] name failslab, interval 1, probability 0, space 0, times 0 [ 303.938901][T18723] CPU: 1 UID: 0 PID: 18723 Comm: syz.2.4734 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 303.938940][T18723] Tainted: [W]=WARN [ 303.938948][T18723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.938991][T18723] Call Trace: [ 303.939001][T18723] [ 303.939012][T18723] __dump_stack+0x1d/0x30 [ 303.939041][T18723] dump_stack_lvl+0x95/0xd0 [ 303.939063][T18723] dump_stack+0x15/0x1b [ 303.939083][T18723] should_fail_ex+0x263/0x280 [ 303.939128][T18723] should_failslab+0x8c/0xb0 [ 303.939159][T18723] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 303.939189][T18723] ? __alloc_skb+0x2f0/0x4b0 [ 303.939265][T18723] __alloc_skb+0x2f0/0x4b0 [ 303.939331][T18723] ? __alloc_skb+0x219/0x4b0 [ 303.939378][T18723] netlink_alloc_large_skb+0xbf/0xf0 [ 303.939453][T18723] netlink_sendmsg+0x40c/0x6f0 [ 303.939506][T18723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.939528][T18723] ____sys_sendmsg+0x5af/0x600 [ 303.939560][T18723] ___sys_sendmsg+0x195/0x1e0 [ 303.939605][T18723] __x64_sys_sendmsg+0xd4/0x160 [ 303.939639][T18723] x64_sys_call+0x17ba/0x3000 [ 303.939680][T18723] do_syscall_64+0xc0/0x2a0 [ 303.939722][T18723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.939746][T18723] RIP: 0033:0x7f599f19aeb9 [ 303.939763][T18723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.939812][T18723] RSP: 002b:00007f599dbf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.939839][T18723] RAX: ffffffffffffffda RBX: 00007f599f415fa0 RCX: 00007f599f19aeb9 [ 303.939857][T18723] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000006 [ 303.939870][T18723] RBP: 00007f599dbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 303.939884][T18723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.940036][T18723] R13: 00007f599f416038 R14: 00007f599f415fa0 R15: 00007fffd66ddb28 [ 303.940058][T18723] [ 304.159139][T18736] __nla_validate_parse: 1 callbacks suppressed [ 304.159161][T18736] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4736'. [ 304.176588][T18728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 304.195440][T18728] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.222529][T15448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.283502][T18754] loop4: detected capacity change from 0 to 128 [ 304.300685][T18755] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.4735: Freeing blocks not in datazone - block = 0, count = 16 [ 304.317596][T18754] EXT4-fs: Ignoring removed nobh option [ 304.342365][T18754] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 304.365183][T18754] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 304.488714][T18770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2154 sclass=netlink_route_socket pid=18770 comm=syz.0.4744 [ 304.502237][T15448] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.513577][ T12] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set [ 304.531478][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 304.544019][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 304.544019][ T12] [ 304.553737][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 304.559785][ T12] EXT4-fs (loop3): Free/Dirty block details [ 304.566193][ T12] EXT4-fs (loop3): free_blocks=16 [ 304.571251][ T12] EXT4-fs (loop3): dirty_blocks=16 [ 304.576487][ T12] EXT4-fs (loop3): Block reservation details [ 304.582554][ T12] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 304.627281][T18780] Invalid argument reading file caps for ./file0 [ 304.672732][T17636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 304.759035][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4746'. [ 304.787079][T18794] vxlan0: entered promiscuous mode [ 304.798362][T18797] SELinux: policydb magic number 0x746c6966 does not match expected magic number 0xf97cff8c [ 304.823279][T18797] SELinux: failed to load policy [ 304.825035][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.838372][T18800] lo: Caught tx_queue_len zero misconfig [ 304.864392][T18800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=18800 comm=syz.2.4753 [ 304.881455][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.933206][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.967708][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.015608][T18819] loop3: detected capacity change from 0 to 512 [ 305.059224][T18819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.070254][T18817] SELinux: failed to load policy [ 305.088299][T18819] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.145498][T18819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4758'. [ 305.154763][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4758'. [ 305.168607][T18829] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4760'. [ 305.185029][T18819] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4758: corrupted xattr block 32: bad e_name length [ 305.189924][T18829] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4760'. [ 305.218350][T18819] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 305.233258][T18819] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4758: corrupted xattr block 32: bad e_name length [ 305.263824][T18819] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 305.282343][T18819] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4758: corrupted xattr block 32: bad e_name length [ 305.304047][T18819] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 305.400717][T17636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.464219][T18862] Invalid argument reading file caps for ./file0 [ 305.494103][T18865] Invalid argument reading file caps for ./file0 [ 305.537032][T18872] loop4: detected capacity change from 0 to 1024 [ 305.539428][T18869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4775'. [ 305.555374][T18872] EXT4-fs: Ignoring removed orlov option [ 305.561213][T18872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.581357][T18870] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 305.593261][T18870] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 305.610542][T18872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.645303][T15448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.714890][T18885] can0: slcan on ttyS3. [ 305.839302][ T31] bond0 (unregistering): Released all slaves [ 305.874996][ T31] bond1 (unregistering): Released all slaves [ 305.890826][T18911] loop3: detected capacity change from 0 to 512 [ 305.914290][T18911] EXT4-fs: journaled quota format not specified [ 305.955880][ T31] hsr_slave_0: left promiscuous mode [ 305.963388][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.973665][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.983111][ T31] batman_adv: batadv0: Removing interface: 4@0Ù [ 306.080241][T14277] hid_parser_main: 21 callbacks suppressed [ 306.080385][T14277] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 306.111927][T14277] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 306.171155][T18935] loop3: detected capacity change from 0 to 2048 [ 306.480215][ T31] IPVS: stop unused estimator thread 0... [ 306.927237][T18983] lo speed is unknown, defaulting to 1000 [ 307.112614][T18995] tipc: Enabling of bearer rejected, failed to enable media [ 307.462818][T19010] loop3: detected capacity change from 0 to 136 [ 307.487458][T19010] iso9660: Unknown parameter 'obj_user' [ 307.542297][T19012] loop9: detected capacity change from 0 to 1024 [ 307.595116][T19012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 307.663794][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 307.663811][ T29] audit: type=1400 audit(1769990809.446:14638): avc: denied { listen } for pid=19021 comm="syz.3.4822" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 307.714456][T19012] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.721193][T19024] lo speed is unknown, defaulting to 1000 [ 307.755583][T19025] loop4: detected capacity change from 0 to 2048 [ 307.801706][ T29] audit: type=1400 audit(1769990809.502:14639): avc: denied { accept } for pid=19021 comm="syz.3.4822" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 307.879590][T19025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.917976][T19036] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.4817: Freeing blocks not in datazone - block = 0, count = 16 [ 307.954225][T15448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.040616][T19044] FAULT_INJECTION: forcing a failure. [ 308.040616][T19044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.054662][T19044] CPU: 0 UID: 0 PID: 19044 Comm: syz.3.4829 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 308.054704][T19044] Tainted: [W]=WARN [ 308.054713][T19044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.054729][T19044] Call Trace: [ 308.054737][T19044] [ 308.054747][T19044] __dump_stack+0x1d/0x30 [ 308.054849][T19044] dump_stack_lvl+0x95/0xd0 [ 308.054877][T19044] dump_stack+0x15/0x1b [ 308.054901][T19044] should_fail_ex+0x263/0x280 [ 308.054976][T19044] should_fail+0xb/0x20 [ 308.055013][T19044] should_fail_usercopy+0x1a/0x20 [ 308.055070][T19044] _copy_to_user+0x20/0xa0 [ 308.055176][T19044] simple_read_from_buffer+0xb5/0x130 [ 308.055222][T19044] proc_fail_nth_read+0x10e/0x150 [ 308.055258][T19044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.055320][T19044] vfs_read+0x1ab/0x7f0 [ 308.055343][T19044] ? __rcu_read_unlock+0x4e/0x70 [ 308.055381][T19044] ? __fget_files+0x184/0x1c0 [ 308.055409][T19044] ? mutex_lock+0x57/0x90 [ 308.055500][T19044] ksys_read+0xdc/0x1a0 [ 308.055578][T19044] __x64_sys_read+0x40/0x50 [ 308.055670][T19044] x64_sys_call+0x2889/0x3000 [ 308.055703][T19044] do_syscall_64+0xc0/0x2a0 [ 308.055740][T19044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.055764][T19044] RIP: 0033:0x7f6d76e6b78e [ 308.055784][T19044] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 308.055888][T19044] RSP: 002b:00007f6d75906fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.055910][T19044] RAX: ffffffffffffffda RBX: 00007f6d759076c0 RCX: 00007f6d76e6b78e [ 308.055926][T19044] RDX: 000000000000000f RSI: 00007f6d759070a0 RDI: 0000000000000004 [ 308.055941][T19044] RBP: 00007f6d75907090 R08: 0000000000000000 R09: 0000000000000000 [ 308.056040][T19044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.056058][T19044] R13: 00007f6d77126038 R14: 00007f6d77125fa0 R15: 00007ffe5fd3e198 [ 308.056107][T19044] [ 308.318120][ T31] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 308.336191][T19053] xt_policy: output policy not valid in PREROUTING and INPUT [ 308.343847][ T31] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 308.356294][ T31] EXT4-fs (loop9): This should not happen!! Data will be lost [ 308.356294][ T31] [ 308.366837][ T31] EXT4-fs (loop9): Total free blocks count 0 [ 308.372934][ T31] EXT4-fs (loop9): Free/Dirty block details [ 308.378959][ T31] EXT4-fs (loop9): free_blocks=16 [ 308.384102][ T31] EXT4-fs (loop9): dirty_blocks=16 [ 308.389487][ T31] EXT4-fs (loop9): Block reservation details [ 308.395573][ T31] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 308.395824][ T2991] ================================================================== [ 308.409619][ T2991] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 308.416608][ T2991] [ 308.418978][ T2991] write to 0xffffffff86a76488 of 8 bytes by task 31 on cpu 0: [ 308.426591][ T2991] data_alloc+0x310/0x390 [ 308.430972][ T2991] prb_reserve+0x8d7/0xae0 [ 308.433737][T14905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 308.435431][ T2991] vprintk_store+0x54a/0x910 [ 308.449345][ T2991] vprintk_emit+0x1a4/0x600 [ 308.452500][T19052] lo speed is unknown, defaulting to 1000 [ 308.453987][ T2991] vprintk_default+0x26/0x30 [ 308.464354][ T2991] vprintk+0x1d/0x30 [ 308.468284][ T2991] _printk+0x79/0xa0 [ 308.472211][ T2991] __ext4_msg+0x1aa/0x1c0 [ 308.476855][ T2991] ext4_do_writepages+0x1ef4/0x2800 [ 308.482100][ T2991] ext4_writepages+0x18f/0x320 [ 308.486904][ T2991] do_writepages+0x1c6/0x310 [ 308.491536][ T2991] __writeback_single_inode+0x80/0x7b0 [ 308.497037][ T2991] writeback_sb_inodes+0x4f4/0xb70 [ 308.502183][ T2991] wb_writeback+0x24e/0x5b0 [ 308.506722][ T2991] wb_workfn+0x194/0x960 [ 308.511076][ T2991] process_scheduled_works+0x4cd/0x9d0 [ 308.516561][ T2991] worker_thread+0x6bc/0x8b0 [ 308.521181][ T2991] kthread+0x488/0x510 [ 308.525281][ T2991] ret_from_fork+0x148/0x280 [ 308.530159][ T2991] ret_from_fork_asm+0x1a/0x30 [ 308.534991][ T2991] [ 308.537339][ T2991] read to 0xffffffff86a76488 of 16 bytes by task 2991 on cpu 1: [ 308.545161][ T2991] _prb_read_valid+0x1bc/0x950 [ 308.550150][ T2991] prb_read_valid+0x3c/0x60 [ 308.554683][ T2991] syslog_print+0x258/0x560 [ 308.559390][ T2991] do_syslog+0x52b/0x7f0 [ 308.563661][ T2991] __x64_sys_syslog+0x41/0x50 [ 308.568799][ T2991] x64_sys_call+0x27ce/0x3000 [ 308.573593][ T2991] do_syscall_64+0xc0/0x2a0 [ 308.578133][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.584143][ T2991] [ 308.586489][ T2991] Reported by Kernel Concurrency Sanitizer on: [ 308.592660][ T2991] CPU: 1 UID: 0 PID: 2991 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 308.603542][ T2991] Tainted: [W]=WARN [ 308.607359][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.617523][ T2991] ================================================================== [ 308.687543][T19052] syzkaller0: entered promiscuous mode [ 308.693122][T19052] syzkaller0: entered allmulticast mode [ 308.757258][ T29] audit: type=1400 audit(1769990810.465:14640): avc: granted { setsecparam } for pid=19050 comm="syz.0.4831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 308.782777][T19052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4831'. [ 308.782799][T19052] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4831'. [ 308.921102][T19065] 8021q: adding VLAN 0 to HW filter on device bond5 [ 308.928662][T19065] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4833'. [ 308.933525][T19065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.950477][T19065] bond5: (slave bond0): making interface the new active one [ 308.951896][T19065] bond5: (slave bond0): Enslaving as an active interface with an up link [ 309.006407][T19065] bond5: (slave bond0): Releasing active interface [ 309.028734][T19065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.030162][T19067] netlink: 'syz.9.4833': attribute type 10 has an invalid length.