last executing test programs: 2m57.349320839s ago: executing program 32 (id=260): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0x1134c, 0x0, 0x1, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000180)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x4000084) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 2m40.25819583s ago: executing program 33 (id=296): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x7, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r3, 0x40044591, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x162}], 0x1, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)) 2m31.096250296s ago: executing program 34 (id=426): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe459d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc779, 0x445a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xc66}, 0x2081, 0x10000, 0x6, 0x3, 0x10b, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat$ppp(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1200000, &(0x7f0000006940)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00', @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES16, @ANYRES16], 0x1, 0x15e, &(0x7f00000003c0)="$eJzs27/K01AYB+C39q+6dBaHgItTUa9AkQpiQFE66KRQXVop2CU69VK8QUE6dTtSI62WOvSjacrX51nywo8czjskJyck7+9+noxn80+zV8voNRrRehxZrBrRjxvRjNIiAIDrZJVS/Ewppe4ibn6PlFLdMwIAqnbF9b9b+cQAgMrY/wPA5bH+A8DlefP23YsneT58nWW9iB+LYlSMymOZP3ueDx9kv/W3Zy2LYtTc5A/LPPs3b8etP/mjvXkn7t8r83X29GW+k9+OcfXtAwAAwEUYZBt79/eDwf/ysvrr/cDO/r0Vd1onawMAOMD867fJh+n04xfFEYt2HGnA9UNY/e2cqojjjBP9iHNo56CiE2cxjW1R950JqNrmok8+/QMAAAAAAAAAAAAAgHN1it+J6u4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdv0KAAD//zVIUEo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x100000000006}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x76b5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m25.175982003s ago: executing program 35 (id=668): creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000200)={[{@errors_remount}, {@nolazytime}]}, 0x1, 0x46b, &(0x7f0000000600)="$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") 2m22.019833737s ago: executing program 8 (id=700): syz_clone3(&(0x7f0000000580)={0x104000800, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1}, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x3d, 0x8, "2bc04d9f25b39766e3824e35bc6b20b0b99b93d5fc7c0e9ddece1914e3c94fa3b9ce3d4fc36370be2b2905ec0edc410d5f4ce53d6f517381cb"}]}], {0x14}}, 0x90}}, 0x0) 2m21.948371052s ago: executing program 8 (id=701): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) (fail_nth: 1) 2m21.671203338s ago: executing program 8 (id=704): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}, [@mark={0xc, 0x15, {0x350759, 0x506}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8"], 0xb8}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x0, @broadcast}, 0x8, {0x2, 0x4e21, @broadcast}, 'hsr0\x00'}) 2m21.655233478s ago: executing program 8 (id=706): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000080)={[{@nobarrier}, {@bh}, {@grpquota}, {@mblk_io_submit}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) unshare(0xa000200) r1 = semget$private(0x0, 0x2, 0xb1) semtimedop(r1, &(0x7f0000000340)=[{0x0, 0x2, 0x1800}], 0x1, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) fcntl$setlease(r0, 0x400, 0x1) r4 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x278, 0x6c, 0x0, 0x168, 0x0, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [0x0, 0xffffffff], [0x0, 0x0, 0xffffff00], 'xfrm0\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x1ff, 0x6, 0xffffe758, 'pptp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3a8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x1e4f, 0x10, 0x40204, 0x1ff}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r10, 0x1, 0x2d, 0x0, &(0x7f0000000600)) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) ioctl$F2FS_IOC_GET_FEATURES(r5, 0xff09, 0x0) 2m21.276139671s ago: executing program 8 (id=707): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r4 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, 0x0, 0x100) r11 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000001d00)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e20, @multicast2}, 0x198, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0xfffffffffffffff7}) writev(r9, &(0x7f0000001c40)=[{&(0x7f0000000200)}, {&(0x7f0000000280)="5318d44fd3a6373764fdd799da874bd2994b7b1315279c60e998344dff9f0d9de35c1b3a02af51167f1898be7922fb9c4aa15ce3a8aff76f1ca023bfd2b7332e6f62c74417e65c979e053c49a44be7fcd6a1f0b81db7d87237b316ac5cdffb0399f8e487601dc20dea0f6d9032b86d458e502e22a7e6ebbbd9dfc840869f5a91fb5efb24024b670defa66c52d4090c23a298c3d8c31dae08534c15fe0be2a216d04f3d07dd7b1acf07fe563c60c39e774037eac2ecdcae1c52b2f84076b2a98364a8937c7af16bb1a92e8b11cb2b7f7db26c62f6d0", 0xd5}, {&(0x7f0000000380)="650ac7d9", 0x4}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000000440)="54aa89f6ca232bd0fa97f4db6d6202a2ac170a313c1793af8acacaa0d1b3f7503f066dc7c9aa45e76c847de4f1aa240cb8677905f910d428c644e30d464634f3ba0f66ed246a8332a6d686f5aebd7f36ff34a9993466a03fb21ac048732d8be0f520e5a3c214f07bee33458652d70d8f8e0b2fd8dc0e657a36ce1da1b5bb5630abd9cd0b05b14fc62281a4eb6d04d233a592cef74cc586a8b42b1880d62ffc4908404ed0c25ddd28f70e6ad6865c4f8fe9d8d03ab3b5c5a725a6da83cdc4e6f8ef6854e6615bc5bd42f36b137f433083da98c0039511e312ebcb14c4944217eac8c6db47086ba9689798", 0xea}, {&(0x7f0000001b80)="f799cd6d057c71e64909b5e227b2c4e3a60b39417631b69e8e1b08056cc7f2b40bfe0db7c4a68844ab4d009237dfd8988183e258217716af0b34fc4ac15ca922c79133b2f6ba0918116674bfcef81b17c3fd481ca42988f9bbaf596c236435927024947cecbfd41a680c30de2bde5350b2acd487b00e38921195e5dec19dbaf98b2c3ce6a7f9", 0x86}, {&(0x7f00000003c0)="dffe189ad656a77fff0c9f09738b558917317120078de0dc2aae7d1ef4dc26", 0x1f}], 0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r9, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 2m21.171840627s ago: executing program 7 (id=708): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x2, 0x0, 0x0, 0x8084}, 0x4004) (fail_nth: 2) 2m21.171016827s ago: executing program 1 (id=709): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x8, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}]}, 0x58) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r2, 0x4004550d, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x5, 0x40, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x6}, 0x8, 0x20400000, 0xc, 0x0, 0x0, 0x5, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) symlink(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$vcsa(0x0, 0x3, 0x5c5980) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)="68dd64c90b429cb3f3cfb5da5670a7ba950bb63afa52eca5658cfb9239a617fb6b2307af22e4a4c3619ce5074ce9735e1366d74c6273a6972918f84ddb59d62da9e4f4751b533e9c918c66a530a3ad3182f83b173322b983ecb5bfce58d273917de8e0bcea3541d50573c810c990bad830041c69f6f8209b18") r5 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r5, 0x4008240b, &(0x7f00000013c0)) r6 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0) mq_getsetattr(r6, 0x0, &(0x7f0000000280)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c0014800800016d87c11596"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r8 = socket(0xa, 0x5, 0x0) listen(r8, 0x100) sendmsg$inet_sctp(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d, 0x8, 0x100}}], 0x20, 0x4000000}, 0x8010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xe0) syz_emit_ethernet(0x30, &(0x7f0000002d80)=ANY=[@ANYBLOB="cac851b35641ffffffffffff88f7808a1f"], 0x0) 2m20.888330134s ago: executing program 36 (id=710): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$TCXONC(r4, 0x4b3a, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000000)={0x12, 0x10, 0xfa00, {0x0, r5}}, 0x64) 2m20.843424896s ago: executing program 7 (id=712): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, ']$+.'}, {0x20, 'eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|'}, {0x20, '/'}, {0x20, '{/'}, {0x20, 'eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|'}], 0xa, "d39cbc123dfcd4585fb149c2663b630d4016344374486460446f11a3945cf19040729eca9619946a1a311fac3ce75c6485dc472aebddfdf67f5892d8ae3c0745f3ac4f1b406f7095f96669bce9bde54f4cf1155a47e402d50d8bd23e6c62410d012837791aedfac93e8f53c2c882c9863b8fc71848d6739713"}, 0x330) r1 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r1, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) 2m20.699976614s ago: executing program 7 (id=713): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000004740)=[{{&(0x7f00000001c0)=@pppol2tpv3, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/91, 0x5b}, {&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f0000000640)=""/173, 0xad}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f00000002c0)=""/14, 0xe}, {&(0x7f0000000800)=""/211, 0xd3}, {&(0x7f0000000900)=""/206, 0xce}, {&(0x7f0000000a00)=""/249, 0xf9}, {&(0x7f0000000b00)=""/95, 0x5f}, {&(0x7f0000000b80)=""/188, 0xbc}], 0xa, &(0x7f0000000d00)=""/222, 0xde}, 0x1}, {{&(0x7f0000000e00)=@nfc, 0x80, &(0x7f0000002140)=[{&(0x7f0000000e80)=""/104, 0x68}, {&(0x7f0000000f00)=""/213, 0xd5}, {&(0x7f0000000340)}, {&(0x7f0000001000)=""/48, 0x30}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/222, 0xde}], 0x6, &(0x7f00000021c0)=""/52, 0x34}, 0xfffffff7}, {{&(0x7f0000002200)=@sco, 0x80, &(0x7f0000004600)=[{&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/243, 0xf3}, {&(0x7f0000004380)=""/229, 0xe5}, {&(0x7f0000004480)=""/234, 0xea}, {&(0x7f0000004580)=""/91, 0x5b}], 0x6, &(0x7f0000004680)=""/138, 0x8a}, 0xef}], 0x3, 0x0, &(0x7f0000004800)={0x77359400}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 2m20.664936846s ago: executing program 7 (id=714): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000080)={[{@nobarrier}, {@bh}, {@grpquota}, {@mblk_io_submit}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) unshare(0xa000200) r1 = semget$private(0x0, 0x2, 0xb1) semtimedop(r1, &(0x7f0000000340)=[{0x0, 0x2, 0x1800}], 0x1, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) fcntl$setlease(r0, 0x400, 0x1) r4 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x278, 0x6c, 0x0, 0x168, 0x0, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [0x0, 0xffffffff], [0x0, 0x0, 0xffffff00], 'xfrm0\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x1ff, 0x6, 0xffffe758, 'pptp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3a8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x1e4f, 0x10, 0x40204, 0x1ff}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r11, 0x1, 0x2d, 0x0, &(0x7f0000000600)) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r7, 0x3516, 0xc2de, 0x8, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r5, 0xff09, 0x0) 2m20.293826328s ago: executing program 1 (id=715): setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001880)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 2m20.279902409s ago: executing program 7 (id=716): r0 = socket(0x2d, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x2c020400) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x130, 0xa, 0xd0e0000, 0x0, 0x100, 0x230, 0x1d8, 0x1d8, 0x230, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0xffffffff, 0xff, 'batadv0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x1, 0x3, 0x10}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x7, {0xb}}}, @common=@icmp={{0x28}, {0x8, "1cdf", 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x7008, 0x4, [0x22, 0x38, 0x16, 0x35, 0x14, 0x8, 0x3, 0x8, 0x1f, 0x6, 0x2b, 0x1, 0xa, 0x22, 0x15, 0x23], 0x2, 0xb, 0x40000007}}}, {{@uncond, 0x3202, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x7, {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 2m20.188084625s ago: executing program 1 (id=717): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000037000701fefffffffedbdf25"], 0x20}, 0x1, 0x0, 0x0, 0x4048091}, 0x4000000) 2m20.149429987s ago: executing program 1 (id=718): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000080)={[{@nobarrier}, {@bh}, {@grpquota}, {@mblk_io_submit}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) unshare(0xa000200) r1 = semget$private(0x0, 0x2, 0xb1) semtimedop(r1, &(0x7f0000000340)=[{0x0, 0x2, 0x1800}], 0x1, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) fcntl$setlease(r0, 0x400, 0x1) r4 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x278, 0x6c, 0x0, 0x168, 0x0, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [0x0, 0xffffffff], [0x0, 0x0, 0xffffff00], 'xfrm0\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x1ff, 0x6, 0xffffe758, 'pptp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3a8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x1e4f, 0x10, 0x40204, 0x1ff}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r10, 0x1, 0x2d, 0x0, &(0x7f0000000600)) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) ioctl$F2FS_IOC_GET_FEATURES(r5, 0xff09, 0x0) 2m19.845523694s ago: executing program 1 (id=719): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x100010, 0x10000, 0x1, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000002c0), 0xfd, 0x4a7, &(0x7f0000001cc0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @local, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x100, @void}}}}}}}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@deltaction={0xb4, 0x31, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x84, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x30}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4d}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8090}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 2m19.336058914s ago: executing program 7 (id=720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000002000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2m19.314189206s ago: executing program 37 (id=720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000002000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2m19.080384069s ago: executing program 1 (id=722): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="c7", 0x1}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @empty}}}], 0x20}, 0x0) 2m19.033669022s ago: executing program 38 (id=722): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="c7", 0x1}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @empty}}}], 0x20}, 0x0) 2m18.39282868s ago: executing program 8 (id=730): r0 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x221001, &(0x7f0000000000)={[{@minixdf}, {@jqfmt_vfsv1}]}, 0x3, 0x74d, &(0x7f0000001640)="$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") rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r4, @ANYBLOB="000000000000000018003480140035006970365f"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) fcntl$setlease(r5, 0x400, 0x0) 2m18.367475161s ago: executing program 39 (id=730): r0 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x221001, &(0x7f0000000000)={[{@minixdf}, {@jqfmt_vfsv1}]}, 0x3, 0x74d, &(0x7f0000001640)="$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") rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r4, @ANYBLOB="000000000000000018003480140035006970365f"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) fcntl$setlease(r5, 0x400, 0x0) 2m11.920410148s ago: executing program 2 (id=783): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) semtimedop(0x0, 0x0, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0xffff, 0x1800}, {0x0, 0x8, 0x800}], 0x2) 2m11.058749169s ago: executing program 2 (id=802): r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x88000, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 2m10.967697794s ago: executing program 2 (id=803): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r4 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, 0x0, 0x100) r11 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000001d00)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e20, @multicast2}, 0x198, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0xfffffffffffffff7}) writev(r9, &(0x7f0000001c40)=[{&(0x7f0000000200)="e87da1476aa3b29063", 0x9}, {&(0x7f0000000280)="5318d44fd3a6373764fdd799da874bd2994b7b1315279c60e998344dff9f0d9de35c1b3a02af51167f1898be7922fb9c4aa15ce3a8aff76f1ca023bfd2b7332e6f62c74417e65c979e053c49a44be7fcd6a1f0b81db7d87237b316ac5cdffb0399f8e487601dc20dea0f6d9032b86d458e502e22a7e6ebbbd9dfc840869f5a91fb5efb24024b670defa66c52d4090c23a298c3d8c31dae08534c15fe0be2a216d04f3d07dd7b1acf07fe563c60c39e774037eac2ecdcae1c52b2f84076b2a98364a8937c7af16bb1a92e8b11cb2b7f7db26c62f6d0", 0xd5}, {&(0x7f0000000380)="650ac7d9", 0x4}, {&(0x7f0000000b80)="76316e4caded71c32803601d9df0f1d782a077e3a954b26e2fd010bf2d89d391800225d039ea984697f4c3653c25218af796a19ee6779c47e19080bf8f42ab7daf7169a01e12c7b47e3a03c0edc7384c7f49672634da1d185e6e36ab497de3f71b8bd8faa7691c4e16a66d21df29616f18c770267b853b3dc19c92d62305e5bb61798ee299af976aa4492ec7ff28a6671ba47984e04f08bd57f92ce276147013e9a9f8a586c39c90c8e66b5b36eab88ca077ca5f10094c759b569576b246b9e97d4cf38ffc112725ac67c86b283751f41a77aee821b52fa598985832b9187d2590223fe8ef1ea373d8f38726dc5a893ee99b9b5314268023aa4d62be85585da6c3c7fd68f9c0155b7e1c31034a43ef8bcdca2e04113beb227f4b20251bbe3eafcbed393b7ac23675580a1cdec07c692f8bbf5279fff723874c933a1acb15462c727538e8098a292dabbb48f6a2bcd8bbac4648b7e711152c020779eeab62a013443a92065134c1c575ea860c4f2fc41197d3c78036ad29612f290ed7fa334135bfeb6da75de08313d69b24dea8bc5061cf77a02a428348ccb7a4e83b65e384c2a21e53cb9a5f68a07bd11b287fc0b6cdf79158ef15a264c04f9b9e9e8aa64c80d0b75e26f6af0e89bf40a27d7288e8a9a19b04cb0134c43dd20947c46fc12f357c7a9571f50cc49c35cb50c6784768ac4838082ba4c9fe6cb35e93e2b8d8b88563ebe6026003cdec767f576fe128f0207e87e5ac704d0c2b5989fed3191b932c92aa4549d4183a425fdf0ebf9d5cf52971b7cae858cc752fb6cebdc5612524fdab05b0be2ba926af9918beba987d81a82343a4ef828dfd2e93b583218cb2264eec1a93f5a558d43e30622517df9c3923b3bc1d3b5a04a2f09586aab39623c14413bca4006bcef3c055f38f4bfc1bbd39cc608a541efa2764a3575bb421543a00d33918be3c0937c706bb64d6039d2f040b094588a6b877c70fb17d65a663b7d158d08bff5932f17a66bdbc7ec8eb16644740ddd9ac32edcf255117c58258444a22307d9d7b999e698600d047ec15294bdaf6fe75c1fec91c9662aec6dae85b525540de8eee4059c6531fbac9cc706459fd2d4bf70cad7968430cf509b59b116e6c7116e1bd9872b99322f5270a6a10ada4419367ff03bdd2dab712c7d71b81864bb0a0b906fc3f4d223ef59920eb640e984759c5e4abccd0fdfbd64412f523456f20ab9db098e87b4ac4b9ce657b3df3181b1fa431907b5489518740d51e4b0410edf898fe907afafab1656a3000524c046536a4f88e564054900e5a60424830ae054893de4828d220eb4efe70f910e6461bf0ffd0523639ce80aa0f38a4b1733f9d0f97bc677dedb295becc956a744ea52050c1ad829320a47594b6b10a21d550b4e83bb92f45c46b4930c081d3ba14c1c35ac020c365560d6f3c362a71d7cb6a2ec299d5299e45edb28a2e8691b553e3ae2ff3315300a961f1be447018f035105b5442a71a3638a9e58968929d44b309703d181582d544c2dae664e83aa08d2739b28873c4a0f39e2b7e8a0f40c7c9bf53db44820469f3acb520ae72d971c7f97f4abac9b2984350546ab86c0316a2cc55cc1cebbdc341054998d3e9f8a8d09e5d65f3bd6bd3da349810249ccb47bcbcdbd5516573bf30c9b877c78f54fdfe52b423614d1e3eef58134aa6d7e2ea6b7352f5cb20db76bb88a30ddab09747fd01da119558a490669bf39789ac71c764305cd96a9b5f5712745c4955f056af880b4a20bb90a043e91434c091d26f44ee35db090635e194e91bc6fd5115bcd38d4dd98297ca588a6c1272453fd35976e2d4afb668514df1aef76a1730913d620e236fae892522cd67661e708630867d3875ee35007494ea5c8ac0aa0cc0d7e767e3870eb8b1b4ec5c459321d37911867b8426af73863de036554cf158726b921d0a9de2ca85dccabd13677fec1ed6326ef545775667421bdb4f465e20537e718314e3368ab45d765663fa70a33efaa54c1131c464f77b3ead924660e7401e52926d5d94db4da4c1e26ebf5197b3f3629645ab7a080d1aef3beb2e585d9cfb285a8c1ff0a5630857c18041717256ee8b5f18207e4226d3f919b723346ca8f876d85128f4d7fb155952c4d9c6795543a3b3ed41ee184ae6e19779228e21d31a9ff2f37e6ee74f5eb3b4d56ac56e4a25a31aa93ed952ea019259ecbc827de384cdb580e44673cfce3aa343b637ad9a068c082e74315b0bb94372dcfbd52191515bceed5d2aef2fba5855a6ba802ce07aeba92b3e472f7c160bf9cc81c94c4451ddf0a946bf849c2582cde8df7b78e927be76cb3a91141d86852cafd1acef050f0b43c949871e709e7bc4c0d9aef1be98317bf351fb4c0c8aa238314a5f59ddde87cd86c3ba3828986edcd810d06f2807e811e648a217e0b7986d988e6dc37024bb5c158f6643baa55d3f9056e7c461b29ef5af593bdc63274a5d0b18155b6bfebe29bd7e143badfaae2db1c748d038efb533b32679594bbb45230a3ca056ce5341f56811a33c3788d639aac4c96604be861345e84a8fc3c6193b58e24476059223a4f4bad432f77a672e4d84462eefabe9fd125a4ee2d227e1afff8d0b2803498e97524f2fc1fc4ea258a69d8ca790d53f91a9f66460d0c3a3741ca40b95e9b4073983add6128706821d6c11c09ca5ba34b1a060ae10d18ed37a3800100cb64c36e2e679c3b737ebedeb4a1f58dc7583488131fe49fbb25afb05846be56ec8a5ff1502020aac01f8e7e7cc531ed96b635a0bf33536417509cec329ca6943dabb24f2afc81328f3ab74acd4177b8c9aa392b1a18ce5ce86d580ad85ee763a43d235b3d8e6e3f039d97dae587cbb5355114bd05b81e20bb6eba7417412af88ef8a8222914802c7fe0c9db4e35cd3534a31e987a1e219b05726c4c168022265622d191232368ead981b889a7dca559b6491f23cc573fdfb06f0941f5181f0ee2765833a2606324af72c7aa688c506606ba6fd7bd841677aa8dee61c7b35be5fc230c8321018deb4be837878dee11256bb8ccfb0775d00c01319606fdaee8fa4217370b496e6d37edf0c31173070adaa124255645617d5cf707b5dcae61f40ea2ed15135df5bed79b60bb0a1c00598c6e9b44f2b534a3186c30df2b369959f622a48540351b3b9d367f8d7b7a2a443536b9932ef2c40dc30ae78d7237d8107809ca6e65cfb29ab566c0199418634e034d2744e2904d433f07bdc12aff8b7d59932ddded19316b90ba424c880514481d88fd79b686b335fe37f9779364250204478058dff170725d356b56554174fc783180122c96b6e12f1d4e27893b29225c09923baafbad9afabf5b51e46e7995229dddc993761a0607d053d5085e2291bd4b3ad9c658c7c7e9e027e1791e0449bc31e48430e1b5aa7a17ad7bfd05b235718e9de30c36b4b8ff73b7b47adf3201d7e4f0a71820fe5c9a6a5c0bb30a53b98b1f4a1daa7b386d9d21d13d3046773c6d1c06d63fb2b43bcbe3c5a7fcc45cc9b817af1edd2d82a5db98d462a5fc42932451d5efaf46300c38b613b730fb8b2b0faa0a17c1869eff7141b9c642142d65d7c03e427185a44255db168061eac6ba2a8dad289512b0f8134e962c4de02179041fd8ce8d207ca572f1472e8f14bbb885c93b4c94a307e5b528ff3434e4ebdddbbe70ab72f8bfcd5aba9d662eb438d8a0a564db4fbaf4f5f4ccb5290d00f6ee57bd2e5f316309de566979df69258962241b35ffe2a7f64685f89a3f133e1b67d66069d343d47a62cd5c5c73f809303aafef0375b7644a9083fbc02713d9ab0bebba9db1af537684796e8d09a992ee40f45e4d3459889412fc1d21f6744f6ab9c0358f11cb3e91b0082b0042f4e3926d2890188a0731309f77a42b4d25ead5822560d49a1642fd8eb70d3edb5054e54ce53b88d1391db377ea2989353a37f665dc33df506d22f3fbe678f79674b4183c08b4e5519067448bddb69610ac72444328c5c29fddd9b5d954541dc152d74a17abb89528f3a85c09ebe28eb2a8a958e0ef3f6c6a4f68b0dae0acb6617c1cf553e7961ce66b258375342ad4318e81f23c25c7fa477b9d0e23fda28dd028988e5081758b1b7862ceaa9898b5f1e48d7da6fb2184fc8695ddf48e7f703d9348302fbf56b939c4b446d7a828a2a1c57d05b86c2ff1300c7e4579bdd21359624d0c07158de648ad5cfe6133c4b06178233800ded217e0aa738e9be35fe23a4496e128050b0f457a92f67ba0301c8951093d5e9f1d24596bccebbab725201852e8104700c353e0d0db0bfd027eb1b9ba9266cd21e5e2a102276a4dd246354c3f8df17175264179db9590911dc7b637dcebe075480f9b151444a3006fa35e92d4f93bfc6ac7d49fbd508f817238b6c3bda57a6e797198446f33b494cfffa9bfbe33d4689ae9572de0de68222caa630885a972dd2425d89e6c1f67e9404aab362c554c2cc9c2e09f5a2c85117293dedbc04a0182606a44084be518319befc735169035f370366e29af8e8b932d7db3a5228f260bde30023c328481a182359ec165fe45a66dd10b40eb01643a36630b205a593b63b443dd27aba72b54dabda42986f1955c2c04c20a88a0ba04948d8f0568600eb7886ede5329e505c3d7fcb414929133dd3da292dbbdb65d7fa6874c43f1fde3fc01ae74f334476f755b8f786b4ca8e35b1b7f1a3c29964a565b044ca98b9a47b1b704481ca86d55a8bc2e1abb1b7f5919155099a25644e42aa49af0847daa8b516d3f51fae2baef369ea1141728a2e26f99f252d15212bbaece4934d3e7b499b0ac6a49b450e4da5eab1440d7cc9dd58b9209777905b0ab459fe65b47b860a864e29c62ce691005e965905521a30a61ad4b058347b097fef4242aa27fee7f812532dc90ad9250697c3fe3df2fc227d30da1fb166d51c5f9b5cc56671d53583a6b7e582876ddf92561ecc44323b8e8b9bcd93f5f459a6a51b3ed80af88a704a8807da10158a06695388404cb224da89fbe1e41a8a31760bcadec7aae79819849a00d3ed2af59f3201b41c9d0be80fe050989f7f7125032b8a34a0be0e09e84b9b22d335fc4afa8223db64d4e91406cc24cccc659b2bf9ee905d8c8a76bb458cdf82639aa056f31ff9b4fc4a3436c8df18c24b11032c5fea7e1a5505acea98f6014457c9364f8cc609de4f3856451e9261ee6fdd41559e175f816514c2dc3bd131d8b3d2e9bcda8b11af8fe792040e46d032cc72c101ef8a178222c5412d72d68db2ed359e27b653cbef3ddda50a3b2d81c1e99fa718bfa729616a2ec64c94504f7238a89828cc9af49f0779c83729f74f43e6ee782a3630aa805bb90136dca7b1a172d479b3aa2abfd93b4b5b618ecf818b6ebdaa0e72bf9c2b647b9eda163b47dee107deb27a9024ee38b4c0467d74ea781087fcda0be3d567e4cfa3b07bc51b94d571f92c97b878350ee3577e223e0d5c6ff3de87569bcc6bb4542a7014f244abbab1973a7c552b0f28cdd3a0cf835fb9ac91567bbcca1a6129c08a5415089f33a99b4548a3573f3712dcba7778cda8b836fa8bcfb3322bb9221ad110e999add132f1a8c72bf8a3216211c679d2cc6287e14df74d0a1d365a5e972e6dacc45ca328eb21ecb0e2f402936337cb5b98d02dd81a4ac053703fb0828a1c2053d738476584e5b6656492daa678ab8f2aec09700aaf38f33281f4f205bbf54f41b046780912d5092a94c70385aed431ddf67b62f9a6508332996d018362494259a023ae547896cf1409839a695777c1584615669048dcfa12", 0x1000}, {&(0x7f0000000440)="54aa89f6ca232bd0fa97f4db6d6202a2ac170a313c1793af8acacaa0d1b3f7503f066dc7c9aa45e76c847de4f1aa240cb8677905f910d428c644e30d464634f3ba0f66ed246a8332a6d686f5aebd7f36ff34a9993466a03fb21ac048732d8be0f520e5a3c214f07bee33458652d70d8f8e0b2fd8dc0e657a36ce1da1b5bb5630abd9cd0b05b14fc62281a4eb6d04d233a592cef74cc586a8b42b1880d62ffc4908404ed0c25ddd28f70e6ad6865c4f8fe9d8d03ab3b5c5a725a6da83cdc4e6f8ef6854e6615bc5bd42f36b137f433083da98c0039511e312ebcb14c4944217eac8c6db47086ba9689798", 0xea}, {&(0x7f0000001b80)="f799cd6d057c71e64909b5e227b2c4e3a60b39417631b69e8e1b08056cc7f2b40bfe0db7c4a68844ab4d009237dfd8988183e258217716af0b34fc4ac15ca922c79133b2f6ba0918116674bfcef81b17c3fd481ca42988f9bbaf596c236435927024947cecbfd41a680c30de2bde5350b2acd487b00e38921195e5dec19dbaf98b2c3ce6a7f9", 0x86}, {&(0x7f00000003c0)="dffe189ad656a77fff0c9f09738b558917317120078de0dc2aae7d1ef4dc26", 0x1f}], 0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r9, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 2m10.070926557s ago: executing program 2 (id=806): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e8, &(0x7f00000004c0)="$eJzs3M9rHFUcAPDvTH71p0k0/qj1EPFgQEyaNNYKIuYiInqyRw/G/Kilm0aSFWwIqCjeevPqQfHg3+BJwf9AEE+epRAkLehxZXZn4prspt1u1sHs5wNT3ps3y3sz333zmjfzNoC+NRkRn0TEcESsRsRovj/Jt3i1sWXH3d3dXsq2JGq1t/9I6uV3dreXoukzmdPZP2nEVBqRfh5xvkW9mze3ri9WKisbeX6muvbBzObNreevrS1eXbm6cmPu4ouz85fmLs2+cGTneuv85Zeenn/j11uvfbP0y5Xv3svaeyYvaz6PozKZXbW0ddmFo66sZGfKbgAPJPt6DkTEYL3/j8ZAPdUwGh+/U2rjAICeqNVqA/vyAMCxlxjzAaDPFH/339ndXiq2UiYiKMXOQkScaMS/eL7bKBncexI01MPne5MR8X76/US2RY+ewwIAAAD0sx8WIuJyq/m/NJ5qOu5sRDyUrw8Yi4jxiHg4Ih7psv7JffmD8z/p7S6r4BA7CxEvN63tuNsU/9zYQJ47W4/9ULJ6rbJyIf8+TMXQSJafPaSOP7euf9GurHn+L9uy+ou5wLwdtwdH/v2Z5cXqYjfnzD92Po14crBV/JO9+d8kIia6qOPH8bWv2pXdO/70Uu3riGdb9v9k75jk8PVZM/X7wUxxVzjorZ8+e7dd/eJfrqz/nzo8/mNJ83q9zc7rePzcbxvtyh70/j+cXKk3cDjf99FitboxGzGcvHlw/1znbT6uiutRXK8s/lPPtB7/iyBkF/TRiHgsi2VEPBER5zqo89vxv062K9P/y5XFf7mj/t954pWJ139uV//99f/5emOm8j3+/3dv9xugstsJAAAAAAAAwNFI62u7k3R6L52m09ON3/CeiFNpZX2z+tzq+oc3lhtrwMdiKC3e9Bpteh90Nn8vuMjP7ctfzN8Z/nLkZD0/vbReWS775AGgT51uM/5nfh8pu3UAQM+cKLsBAMB/zvgPAP3H+A8A/cf4DwD9x/gPAP3H+A8AfaWb3/WXkJA4romy70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/b38HAAD//78JzGY=") r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)='G', 0x1}, {&(0x7f0000000480)="ec6fb8f9ac88b8dff6e7115c", 0xc}], 0x2}}], 0x2, 0x800c485) sendmsg$inet6(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="7bb1fff34089d235", 0x8}], 0x1}, 0x40001) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) lchown(&(0x7f0000000000)='./file0\x00', r2, 0x0) 2m9.816198802s ago: executing program 2 (id=807): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c0014800800016d87c11596"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2m9.689170869s ago: executing program 2 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000000) 2m9.642505401s ago: executing program 40 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000000) 31.959667469s ago: executing program 3 (id=2381): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce20, 0xff02, @empty, 0x8}, 0x1c) 31.888158314s ago: executing program 3 (id=2382): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a6f000210000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 31.887124704s ago: executing program 3 (id=2383): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x95, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_bp={0x0, 0xa}, 0x62a4, 0x2, 0xffffffff, 0x0, 0x2, 0x1ce, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3f}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000003c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) read$char_usb(r7, &(0x7f0000000040)=""/22, 0x16) 31.882252624s ago: executing program 3 (id=2384): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000055096dd9", @ANYRES32], 0x28}}, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1c10, 0x0) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1c10, 0x0) open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) (async) r1 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) creat(0x0, 0x182) (async) creat(0x0, 0x182) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x3}}, 0x0, 0x4}, 0x94) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 31.804848649s ago: executing program 3 (id=2385): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r0) 31.220021383s ago: executing program 3 (id=2394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x38, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000000b"], 0x36f0516f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 31.198314924s ago: executing program 41 (id=2394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x38, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000000b"], 0x36f0516f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 1.732339329s ago: executing program 5 (id=3048): unshare(0x2040400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000016c0)='/sys/kernel/uevent_seqnum', 0x329a82, 0x182) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x10) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000280)={0x4, 0xd, "5e0100", 0x6, 0xff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f00000000c0)) 1.674170582s ago: executing program 5 (id=3050): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/137, 0x89}, {&(0x7f00000001c0)=""/152, 0x98}], 0x3, &(0x7f00000002c0)=""/214, 0xd6}, 0x40010000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 1.589975467s ago: executing program 6 (id=3055): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_create(&(0x7f0000000400)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xc8\x14\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r2 = socket(0x10, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) exit(0x8000000000000000) wait4(r3, 0x0, 0x2, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}}, 0x0) r5 = dup(r1) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e"], 0x178) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) pidfd_send_signal(r5, 0x11, &(0x7f00000002c0)={0x5, 0x1, 0xef5}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000740000d003108000640"], 0xe4}}, 0x20000000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a1d010076786c616e"], 0x50}}, 0x4000000) 1.160854223s ago: executing program 0 (id=3068): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000037000701fefffffffedbdf25037c00000c"], 0x20}, 0x1, 0x0, 0x0, 0x4048091}, 0x4000000) 1.110568765s ago: executing program 0 (id=3070): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) listen(0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.109733285s ago: executing program 0 (id=3071): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4c0d1}, 0x20004801) (async) syz_clone3(&(0x7f0000000440)={0x306001200, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f0000000200)=""/228, 0xe4, &(0x7f0000000300)=""/222, &(0x7f0000000400)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) prlimit64(r3, 0x0, 0x0, &(0x7f00000004c0)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x7c, r5, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x68, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x8, 0x79fb, 0x4, 0xfff, 0x8, 0x9, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x8, 0x0, 0x40, 0x6, 0x3, 0x1, 0xbc7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x4, 0xffc, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x101]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x47, 0xe09a, 0xfc01, 0x3, 0x1, 0x800, 0xff, 0x15, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x81, 0x90, 0x9, 0x7ff, 0x1ff]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4044) (async) r6 = mq_open(&(0x7f0000000680)='nl80211\x00', 0x40, 0x10, &(0x7f00000006c0)={0x1ff, 0xa, 0x0, 0x9}) mq_timedsend(r6, &(0x7f0000000700)="ac9631bc12dfb0467cc749128c7a0aef25c33827063cdf6dbbd224d9c95488c48d09a367eb7415c347c2fbc2ce255d055c8f3851d656032c96a10be84cf7a0b1", 0x40, 0x3c00000000000000, &(0x7f0000000740)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r6, {0x775c21c2}}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) (async, rerun: 32) io_getevents(0x0, 0x56e7, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x0, 0x3938700}) (async, rerun: 32) mq_timedreceive(r6, &(0x7f0000000900)=""/127, 0x7f, 0x3, &(0x7f0000000980)={0x77359400}) (async) fstat(r2, &(0x7f00000009c0)) (async) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) accept4$inet(r7, &(0x7f0000000a40)={0x2, 0x0, @multicast1}, &(0x7f0000000a80)=0x10, 0x800) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r5, 0x110, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4a}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x9, 0x5, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x44, 0x10, 0x5, 0x833c}}) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)=@deltfilter={0x6c, 0x2d, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4, 0x7}, {0xb, 0x6}, {0x6, 0x2}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x5, 0xfff3}}]}}, @f_tcindex={{0xc}, {0x24, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x800}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x3530}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xb, 0x3}}]}}]}, 0x6c}}, 0x4004000) (async, rerun: 32) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000006, 0x4000010, r7, 0x8000000) (rerun: 32) syz_io_uring_setup(0x23cc, &(0x7f0000000dc0)={0x0, 0xf7c9, 0x40, 0x0, 0x6d, 0x0, r7}, &(0x7f0000000e40), &(0x7f0000000e80)=0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) (rerun: 32) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000f40)=@IORING_OP_LINK_TIMEOUT={0xf, 0x20, 0x0, 0x0, 0x0, &(0x7f0000000f00)={r11, r12+10000000}, 0x1, 0x4, 0x0, {0x0, r13}}) (async) semop(0xffffffffffffffff, &(0x7f0000000f80)=[{0x0, 0xd}], 0x1) (async) r14 = memfd_create(&(0x7f0000000fc0)=')^\')^%%[#]+\\\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000001000)={{0x1, 0x1, 0x18, r14}, './file0\x00'}) bind$xdp(r7, &(0x7f0000001040)={0x2c, 0x3, r8, 0x3e, r7}, 0x10) 1.043718009s ago: executing program 0 (id=3073): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200000ffd000) r0 = syz_io_uring_setup(0x723d, &(0x7f0000000580)={0x0, 0xd235, 0x10101, 0x0, 0x28a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/172, 0xac}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x24040844) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SHUTDOWN={0x22, 0x4, 0x0, r3}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 1.03145133s ago: executing program 0 (id=3075): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'veth0_to_hsr\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x9, 0xa4e3}}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x2c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7}}]}, 0x2c}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x2, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="410309fc1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 784.942874ms ago: executing program 0 (id=3080): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='comm\x00') exit(0x5) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) 760.961666ms ago: executing program 5 (id=3082): chdir(&(0x7f0000000340)='./file0\x00') r0 = syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0\x00', 0x11, 0x400, 0x12345}) io_uring_enter(r0, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000340)={0xa, 0x1, 0x0, @empty, 0x40000005}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff02000000000000000000000000310118"], 0x40}, 0x24000800) open(&(0x7f0000000200)='./bus\x00', 0x64802, 0x389b0d52417bb201) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x3, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 753.782606ms ago: executing program 9 (id=3083): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}}, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x44, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x1b1001, 0x50, 0x38}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r1, 0x3516, 0x2000000, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/233, 0xe9}, {&(0x7f0000001940)=""/157, 0x9d}, {&(0x7f0000001700)=""/194, 0xc2}], 0x6}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a0000800000000", 0x13) 724.002428ms ago: executing program 6 (id=3084): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x5, 0x0, 0x0, 0x0, 0xfe, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xffffffffffffffa3, 0x2}, 0x80, 0x7, 0x0, 0x1, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40005}, 0x2200b800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, &(0x7f0000000280)="2c088334e85eece341fd4b042ec9306cf884010431f2e22989b4b7e4c646e371b62aa29cbfcac76ee3f5c07d4b30fca62af3ecb1e34d88c7f7de7c354dd3ec40e5c07f780419e5ef2d2a9bad5dcf825cc44290cfbd0207755b0afb770334c4f1f47ca99af91f8f66604aa8764b289a61b59cc1e87e230c64ee27abfc20f7500764d3f534de5d6f0efdd53cfdad34b3117712f71f5d54069bed13ef95b98db318e4c7a05e8d27d33e", 0xa8) 723.304258ms ago: executing program 5 (id=3085): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200000ffd000) r0 = syz_io_uring_setup(0x723d, &(0x7f0000000580)={0x0, 0xd235, 0x10101, 0x0, 0x28a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/172, 0xac}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x24040844) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SHUTDOWN={0x22, 0x4, 0x0, r3}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 671.799691ms ago: executing program 5 (id=3087): unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5001}, 0x24000001) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2d09000000000000000002000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\a'], 0x2c}}, 0x0) (async) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="24002fb7c468db58360000", @ANYRES16=r3, @ANYBLOB="10002bbd7000fddbdf250300000005000d00260000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), 0xffffffffffffffff) (async) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x4, 0x8}, &(0x7f00000000c0)) (async, rerun: 64) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x537c0b8d69afff6f}, 0x20008000) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r6, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4040c00) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)={0x200, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x92}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x200}}, 0x8004) (async) sysinfo(&(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r8, 0x25, 0xc, @void}, 0x10) 619.135714ms ago: executing program 6 (id=3088): socket$isdn(0x22, 0x3, 0x26) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xbee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, 0x0, 0x64, 0x183000, 0x12345}) syz_io_uring_setup(0x3dd9, &(0x7f0000000000)={0x0, 0x45f4, 0x0, 0x0, 0x1d9}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000840)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000, 0x1, {0x0, r8}}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x9, r4, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@nfc, 0x0, 0xc0000, 0x1, {0x0, r8}}) 618.525754ms ago: executing program 4 (id=3089): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000017c0)=ANY=[], 0x32600) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) clock_settime(0xa, 0x0) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000001600)={[{@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nombcache}, {@nodelalloc}, {@init_itable}, {@errors_remount}]}, 0x5, 0x577, &(0x7f0000001080)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r8 = dup(r7) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) bind$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xc}, 0x9}, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$reject(0x13, 0x0, 0x4, 0x3a, 0x0) 572.200657ms ago: executing program 9 (id=3090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x5f, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 571.591577ms ago: executing program 5 (id=3091): socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x25a5, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) timerfd_create(0x5, 0x81000) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r3, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0xf}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040041}, 0x20) r4 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000200)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x200000000}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r6, &(0x7f0000002140)=""/17, 0x11, 0x0) epoll_create1(0x80000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001800ac1414aa"], 0x3c}}, 0x0) 571.086187ms ago: executing program 9 (id=3092): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r1, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0xb, 0x80000, 0xaf6) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (rerun: 32) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000400)='./file0\x00', 0x1800000, &(0x7f0000000c40), 0x1, 0x3d6, &(0x7f0000000440)="$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") (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000500040000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000a00000014001a8010000480"], 0x34}}, 0x0) 559.904638ms ago: executing program 6 (id=3093): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x200, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b32346d090890e0878f0e1ac6e7049b3371959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 523.23082ms ago: executing program 4 (id=3094): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 485.513722ms ago: executing program 4 (id=3095): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x700, 0x700, 0x0, 0x8000, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x66, 0x0, 0x33, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@timestamp_addr={0x44, 0x4, 0x46, 0x1, 0xa}]}}}}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2e5, 0x2c}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x564, &(0x7f0000000bc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x7400}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129a42, 0x5) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r3, 0x8, 0x4000, 0x4000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x311f}, {0xa, 0x4e20, 0xdb22, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, 0x48) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xcc6b) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a0000000800060001"], 0x44}, 0x5}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@gettfilter={0x2c, 0x2e, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff3}, {0xc, 0xa}, {0xffff, 0x4}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000001) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x440440c4) 464.433143ms ago: executing program 6 (id=3096): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@deltaction={0x114, 0x31, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x4008040) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000100)=0x8) 391.510647ms ago: executing program 6 (id=3097): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="ba", 0x1, 0x9040, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @link_local}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) pwritev2(r3, &(0x7f0000000400)=[{&(0x7f0000000c80)="e0733a1a5c3f3f0e6f84ec568b05809b5dba974fbdf4e6afb03f8e24474e5e004d9ab9d71dcdef0a73ba9f23215dbec166dbd5e53052f48a0093fb0d30efdeb72fe5f3eeeee6fa196958bd189f9b2a2e897cd181f0a8b9a0a3c41cba21d8a5601f3a38d10492fa40d506d9b92890d0f08ee8896daf8ad3a612c226897b93eab16a1cdf9c40826578be45b973f4d6769aa119501645cd037fe2615c40448fdae964d1431bf5daddbced39cacbd658b17bd284a20b0d24c2703603adcdaa6774a1ab4f0db05ab028bb4b11b1a67e7437080f72acb248b8392e42f44e50ca73814cd2e64a46647cb018d2312da57013595dc9a1fb0a8633cb4e", 0xf8}, {&(0x7f0000000240)="3541d627574984c9395572a27051660891cad00b444def80429283330253c6e062156e024b824ad24f9076b33c44daa3c88baf", 0x33}, {&(0x7f0000000280)="9f981aaa8f", 0x5}, {&(0x7f0000000d80)="969bbf6e13e68ab7e3de702d44e6d3813270b7114de961f9bdf7fc2b26bbfbc86f38e8b0847f96969f3ccaec2ed4981d2d47f39258e33d1f52fb97a5de4820e576a7403262807359627b688250e6233caf6ac2431df5695d1ba3641bac9cf0f7b191ff4983a6a11f3d93317c54bd33e79383a8058d389cb642332b040df4ea0e0a9cad924f2ea83d1885ceabeb7fc58e3ed790aac65737b88e98755bdd7d84b68eb8ee7a97804978148bd3805dfb8f5ad3844c88396178c86b1341fd1c2b320b27a94c20ef9e482ffbbae67d239789016108f16672fbd23913d6506265ea106767d7818f544ddbbae28392", 0xeb}], 0x4, 0x9, 0x1, 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=@newchain={0x700, 0x64, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8, 0x1}, {0x0, 0xc}, {0xfff3, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x11c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x5}, @TCA_ROUTE4_ACT={0xf0, 0x6, [@m_skbmod={0xec, 0x1a, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x9f, 0x6, "6b89e7387c2304d9f166377f07726e9253dda47c50817deb332aa140657c646f0db97eb2dbd56cae9209966acd81c5a8ebf2da9543d56c8de4d23b66b04060b56eb15537d2bbc56026a8fc7788354cbeec92cb2b9e87404d8c1175ce6ae97799612c14968bbc76e913747fc8359884afcbc9fdd5cbb7ed5045103c5673a2ec12bf284717831746231212584343802fac4bd87867f26ff57033fa6a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x51}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xee}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_TO={0x8, 0x2, 0x2a}]}}, @filter_kind_options=@f_flow={{0x9}, {0x588, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x9}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x401}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff1, 0xf}}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x6}, @TCA_FLOW_ACT={0x54c, 0x9, 0x0, 0x1, [@m_gact={0xc4, 0x6, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1be1, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x34081662, 0x7, 0x5, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a5c}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x10000, 0x2, 0x944, 0x2}}]}, {0x4e, 0x6, "034960bab0caa52a9a7c1e5ad12fb03d76c41115e872bc09f2e57413a3b890f898cfd0c76714364e9ebf6668d8a562a9c39c8d3c6c526bd54f0df0265cefd9551f7e67a25e97a51f5aa0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0xe4, 0x3, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x93e, 0x4, 0xffffffffffffffff, 0x0, 0x8}, 0x5a}}]}, {0x9c, 0x6, "b054789fd331fb6bec85bdfc6742403e552e7430528796300afc6041f07b56dd4d7c7cddc3785e7d65f6aedb21d9c6a0759c6bad92e16f1c632c32b88b42569a03c55ee96e2431fc9dfc80fc918ef091da9b77720190e32cc165de603c000ab8718e0626225df3dcc181928d86710ec7dae17a25120a11ab8489bf50cd1c464192cbcd9d75020425fe3c9b9bed7627ec3867dd8f4ff4aa1f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x1a8, 0x3, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x80, 0x4, 0x9, 0x6}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x2000000f, 0x8, 0x5}, @remote, @dev={0xac, 0x14, 0x14, 0xa}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0x200, 0x10000000, 0xf, 0xff}, @dev={0xac, 0x14, 0x14, 0x10}, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x3, 0x2, 0x2, 0x1}, @private=0xa010100, @rand_addr=0x64010100, 0xff000000}}]}, {0xde, 0x6, "22a40328cda31cb43b0ffb653016c59bb1654c24c87193866e06cb2c357520000d8d99559394a55e2dbfacc1ffd1738500b511ec728f8d16c75c6eab86c7648bebd6ed22ce377eb8a8bd48f2e03809137be4a8dfdd74419af01aa016eef1fe1bcce6e79339fbb17116362ebcc67400d189026287a4413588030772ff54e249fafd11161b1694161e52678820664f35e74edeac0c50199bbfc5ff6b5cc6e721b14a348de84b43467ea65da53dc57ba25d4e700381420c10d8f07276f0b1609ba1848349ce9939adb5ead0f635202a8414b3d9f4e2f2bb3f33a980"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x110, 0x10, 0x0, 0x0, {{0xb}, {0xe0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x92, 0xfffffffe, 0xffffffffffffffff, 0x1000, 0x80000000}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x3ff, 0x2, 0x8, 0x690}, 0x5}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x7, 0x1, 0xfffffff7}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xcc}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="5455559fb951"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x5cb3, 0x10000000, 0x6, 0x100}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x2, 0x8, 0x2, 0x7}, 0x1}}]}, {0x8, 0x6, "3eb6d676"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xe8, 0x16, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x94, 0x0, 0x8, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf41, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x636c, 0x22, 0x20000000, 0xfffffff3, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xe43, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8000, 0x40, 0x2, 0x3, 0x8000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x317, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1714, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1c77, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9ae}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x16cf, 0xc}}]}, {0x20, 0x6, "f0c317e34968ab83cd5cfa43a73cd4190b126f041827ce1442552c91"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x3a0a}, @TCA_RATE={0x6, 0x5, {0x8b, 0x8}}, @TCA_RATE={0x6, 0x5, {0x2, 0xf1}}]}, 0x700}, 0x1, 0x0, 0x0, 0x94}, 0x4000800) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, 'E]'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r9, &(0x7f00000001c0)="f1", 0x1) sendfile(r9, r6, 0x0, 0x40001) sendfile(r9, r8, 0x0, 0x7ffff000) 391.089047ms ago: executing program 4 (id=3098): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2957, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 390.864677ms ago: executing program 4 (id=3099): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x86, &(0x7f0000000300)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0xbb, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4) 383.554188ms ago: executing program 4 (id=3100): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r4], 0x20) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r8, 0x1, r7, 0x4}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIxtsKc99aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4ku0QWUqtzweOde659+p7joSO7rn3+CqAvnUmIs5GxKNqtXo+IoYb5ZlGis16qm338MGdmVpKolq9/kkSkdTLapuNbXnOY43dDkfEH38X8Zfk2bjl9Y3F6WKxsNpYzleWVvLl9Y0LC0vT84X5wvLk5MTlqStTl6bGO9LOoYi4+psP/v2PV3579Y2f3Xr3xkdjf00a5RFP2tFp9aZn09eiaTAiVvcjWI8Mpi0EAODboHmc/+OIOB/DMZAezQEAAAAHSfWXQ/FVElEFAAAADqxMOgc2yeQa8wCGIpPJ5epzeL8fRzPFUrny07nS2vJsfa7sSGQzcwvFwnhjrvBIZJPa8kSaf7J8cdvyZESciIh/DR9Jl3MzpeJsr09+AAAAQJ84tm38//lwffy/xZc9qxwAAADQOSM7rTzUvXoAAAAA+2fH8T8AAABwIBj/AwAAwIH2+2vXaqna/P3r2Zvra4ulmxdmC+XF3NLaTG6mtLqSmy+V5tN79i3t9nzFUmnl57G8djtfKZQr+fL6xo2l0tpy5cbCUz+BDQAAAHTRiR/deyeJiM1fHElT+I9/6BuDz7Px+/tXD6D7BnpdAaBnnuv7HzhQsr2uANBzyS7r207eebPzdQEAAPbH6A9aX/8f2PXcwGamS1UE9onzf9C/XP+H/uX6P/SvbAyEgTz0t91uAfri1/+r1eeqEAAA0HFDaUoyuYj0PMBQZDK5XMTxdEyQTeYWioXxiPhuRLw9nP1ObXki3TPZdc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAA60iMyHSXo3/4jR4XND288PHEq+GE4fI+LW/67/5/Z0pbI6USv/9HF55b+N8ou9OIMBAAAAbNccpzfH8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQSQ8f3Jlppm7G/fjXETHSKv5gHE4fD0c2Io5+lsTglv2SiBjoQPzNuxFxslX8pFatGGnUolX8Iz2Of6wD8aGf3av1P79q9fnLxJn0sfXn73LaQ7249v1f5nH/N9Aifq3s+B5jnLr/Wr5t/LsRpwZb9z/N+Emb/ufsHuP/+U8bG+3WVf8fMdry+yd5Kla+srSSL69vXFhYmp4vzBeWJycnLk9dmbo0NZ6fWygWGn9bxvjnD19/tFP7j7aJP7JL+8/tsf1f37/94Hv1bPbx7smT+GNnW7//J9vEzzTe/5808rX1o838Zj2/1elX3zq9U/tn27R/t/d/bI/tP/+Hv7+3x00BgC4or28sTheLhdW+zrzQq1E7LHopWvHSZWoHpMXa6/qS1OeZzN/24ZlrR+a9blcnMj3tlgAAgH3w7BgYAAAAAAAAAAAAAAAAAAAA6LZu3E4suy3mZvq3E3fPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADonG8CAAD//+y20KM=") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r9, 0x408, 0x7) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[], 0xe) 95.367405ms ago: executing program 9 (id=3101): r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x2, 0x800020, 0x6, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) connect$pppoe(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x24004844) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000240)={'pimreg0\x00', 0x200}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r4, 0x4) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x3, 0x50f, &(0x7f0000000680)="$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") 68.671526ms ago: executing program 9 (id=3102): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffc, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r1, 0x207, 0x72bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x4008080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x10}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x6}]}, &(0x7f0000000100)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x8a40, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0xe400000e) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000002, 0x42031, r2, 0x180000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, r5, 0x25, 0x12, @void}, 0x10) 0s ago: executing program 9 (id=3103): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x8000, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x733, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x8e0f}], 0x1, 0x40010142, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xffffffffffffffff}) msgsnd(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000000000013047a9c2869522aee4e3ea0a86416105ae4394e7dd1898eee6cdfe65ac7d73378dda4d5a8c7ff33c2ba174ea24b0babcc86284874eb6bf9c664d62c8ca8fc0a2d4f63c58ad8ace0245230f8a5ff740e1082197c1cd943e7a982c29d3f1649"], 0x8, 0x0) msgsnd(r2, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0xee01, 0x10}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1000ff, 0x2, 0x0, 0x0, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0, r3}, 0x14) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0xeb, @rand_addr=' \x01\x00', 0xfff}, 0x1c) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x3a, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xfffffff1}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000740)={{r0}, r9, 0x1a, @unused=[0xfff, 0x5, 0x5, 0x2], @subvolid}) shmat(r5, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmmsg$inet(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}], 0x1, 0x2090) kernel console output (not intermixed with test programs): failed: Read-only file system [ 191.552206][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2156'. [ 191.561223][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2156'. [ 191.602414][T10844] SELinux: failed to load policy [ 191.628789][ T3307] udevd[3307]: symlink '../../loop6' '/dev/disk/by-diskseq/529.tmp-b7:6' failed: Read-only file system [ 191.675056][ T3307] udevd[3307]: symlink '../../loop6' '/dev/disk/by-diskseq/529.tmp-b7:6' failed: Read-only file system [ 191.801250][T10867] wireguard0: entered promiscuous mode [ 191.806891][T10867] wireguard0: entered allmulticast mode [ 192.010841][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2169'. [ 192.357549][ T5555] udevd[5555]: symlink '../../loop3' '/dev/disk/by-diskseq/527.tmp-b7:3' failed: Read-only file system [ 192.360533][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/526.tmp-b7:0' failed: Read-only file system [ 192.467036][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/526.tmp-b7:0' failed: Read-only file system [ 192.507978][ T3307] udevd[3307]: symlink '../../loop3' '/dev/disk/by-diskseq/527.tmp-b7:3' failed: Read-only file system [ 192.520648][T10909] netlink: 'syz.3.2177': attribute type 14 has an invalid length. [ 192.528580][T10909] netlink: 'syz.3.2177': attribute type 13 has an invalid length. [ 192.563399][ T3307] udevd[3307]: symlink '../../loop3' '/dev/disk/by-diskseq/527.tmp-b7:3' failed: Read-only file system [ 192.603710][T10915] bridge0: port 3(syz_tun) entered blocking state [ 192.610334][T10915] bridge0: port 3(syz_tun) entered disabled state [ 192.623996][T10915] syz_tun: entered allmulticast mode [ 192.631228][T10915] syz_tun: entered promiscuous mode [ 192.636766][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/526.tmp-b7:0' failed: Read-only file system [ 192.639641][ T5555] udevd[5555]: symlink '../../loop6' '/dev/disk/by-diskseq/529.tmp-b7:6' failed: Read-only file system [ 192.659360][T10915] bridge0: port 3(syz_tun) entered blocking state [ 192.665948][T10915] bridge0: port 3(syz_tun) entered forwarding state [ 192.676895][T10919] FAULT_INJECTION: forcing a failure. [ 192.676895][T10919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.690047][T10919] CPU: 1 UID: 0 PID: 10919 Comm: syz.3.2178 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 192.690113][T10919] Tainted: [W]=WARN [ 192.690123][T10919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.690140][T10919] Call Trace: [ 192.690149][T10919] [ 192.690159][T10919] __dump_stack+0x1d/0x30 [ 192.690196][T10919] dump_stack_lvl+0x95/0xd0 [ 192.690246][T10919] dump_stack+0x15/0x1b [ 192.690271][T10919] should_fail_ex+0x263/0x280 [ 192.690347][T10919] should_fail+0xb/0x20 [ 192.690439][T10919] should_fail_usercopy+0x1a/0x20 [ 192.690472][T10919] _copy_from_user+0x1c/0xb0 [ 192.690494][T10919] ___sys_sendmsg+0xc1/0x1e0 [ 192.690529][T10919] __x64_sys_sendmsg+0xd4/0x160 [ 192.690617][T10919] x64_sys_call+0x17ba/0x3000 [ 192.690641][T10919] do_syscall_64+0xc0/0x2a0 [ 192.690682][T10919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.690710][T10919] RIP: 0033:0x7f6f4f79aeb9 [ 192.690807][T10919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.690832][T10919] RSP: 002b:00007f6f4e1f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.690858][T10919] RAX: ffffffffffffffda RBX: 00007f6f4fa15fa0 RCX: 00007f6f4f79aeb9 [ 192.690873][T10919] RDX: 0000000000000880 RSI: 0000200000000500 RDI: 0000000000000003 [ 192.690886][T10919] RBP: 00007f6f4e1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 192.690947][T10919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.690963][T10919] R13: 00007f6f4fa16038 R14: 00007f6f4fa15fa0 R15: 00007fff85be9d88 [ 192.690991][T10919] [ 193.141840][T10938] __nla_validate_parse: 4 callbacks suppressed [ 193.141862][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2189'. [ 193.164277][T10934] openvswitch: netlink: Flow actions attr not present in new flow. [ 193.216363][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2190'. [ 193.225624][T10946] netlink: 'syz.3.2191': attribute type 12 has an invalid length. [ 193.233597][T10946] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2191'. [ 193.265010][T10946] loop3: detected capacity change from 0 to 512 [ 193.286033][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2182'. [ 193.308822][T10918] hsr_slave_0: left promiscuous mode [ 193.313270][T10946] EXT4-fs: Ignoring removed oldalloc option [ 193.350280][T10958] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2192'. [ 193.360228][T10946] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2191: Parent and EA inode have the same ino 15 [ 193.395118][T10958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2192'. [ 193.436415][T10946] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2191: Parent and EA inode have the same ino 15 [ 193.449159][T10946] EXT4-fs (loop3): 1 orphan inode deleted [ 193.466122][T10946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.488157][T10946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2191'. [ 193.604142][ T6031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.729760][T10977] openvswitch: netlink: Flow actions attr not present in new flow. [ 193.895205][T10985] loop6: detected capacity change from 0 to 512 [ 193.914114][T10985] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 193.951031][T10985] EXT4-fs error (device loop6): ext4_quota_enable:7173: comm syz.6.2205: Bad quota inum: 1, type: 2 [ 193.976045][T10985] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 194.005262][T10985] EXT4-fs (loop6): mount failed [ 194.033091][T10989] loop0: detected capacity change from 0 to 8192 [ 194.047588][T10989] msdos: Unknown parameter 'dos1xfloppy-nodots' [ 194.078610][T10989] Invalid ELF header magic: != ELF [ 194.307495][T11012] loop3: detected capacity change from 0 to 512 [ 194.321308][T11005] openvswitch: netlink: Flow actions attr not present in new flow. [ 194.331039][T11012] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.403569][T11012] EXT4-fs (loop3): 1 truncate cleaned up [ 194.410029][T11012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.428031][T11021] ip6gre1: entered allmulticast mode [ 194.514733][ T6031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.193452][T11033] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2221'. [ 195.296294][T11040] FAULT_INJECTION: forcing a failure. [ 195.296294][T11040] name failslab, interval 1, probability 0, space 0, times 0 [ 195.309039][T11040] CPU: 0 UID: 0 PID: 11040 Comm: syz.6.2222 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.309078][T11040] Tainted: [W]=WARN [ 195.309087][T11040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.309125][T11040] Call Trace: [ 195.309132][T11040] [ 195.309141][T11040] __dump_stack+0x1d/0x30 [ 195.309168][T11040] dump_stack_lvl+0x95/0xd0 [ 195.309197][T11040] dump_stack+0x15/0x1b [ 195.309301][T11040] should_fail_ex+0x263/0x280 [ 195.309344][T11040] should_failslab+0x8c/0xb0 [ 195.309409][T11040] kmem_cache_alloc_noprof+0x68/0x490 [ 195.309441][T11040] ? fcntl_setlk+0x53/0x950 [ 195.309464][T11040] ? __rcu_read_unlock+0x4e/0x70 [ 195.309501][T11040] fcntl_setlk+0x53/0x950 [ 195.309587][T11040] ? avc_has_perm+0x101/0x190 [ 195.309628][T11040] ? should_fail_ex+0xd9/0x280 [ 195.309672][T11040] do_fcntl+0x6a1/0xf80 [ 195.309709][T11040] __se_sys_fcntl+0xb1/0x120 [ 195.309792][T11040] __x64_sys_fcntl+0x43/0x50 [ 195.309832][T11040] x64_sys_call+0x2d6f/0x3000 [ 195.309864][T11040] do_syscall_64+0xc0/0x2a0 [ 195.309898][T11040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.309949][T11040] RIP: 0033:0x7f7304abaeb9 [ 195.309966][T11040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.309985][T11040] RSP: 002b:00007f73034d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 195.310005][T11040] RAX: ffffffffffffffda RBX: 00007f7304d36180 RCX: 00007f7304abaeb9 [ 195.310049][T11040] RDX: 0000200000000300 RSI: 0000000000000026 RDI: 0000000000000006 [ 195.310067][T11040] RBP: 00007f73034d5090 R08: 0000000000000000 R09: 0000000000000000 [ 195.310085][T11040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.310102][T11040] R13: 00007f7304d36218 R14: 00007f7304d36180 R15: 00007ffc1576cbd8 [ 195.310130][T11040] [ 195.674627][T11052] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 195.753174][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2233'. [ 195.850753][T11066] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2236'. [ 196.201259][T11087] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 196.207741][T11087] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 196.254694][T11075] loop0: detected capacity change from 0 to 128 [ 196.351207][T11106] loop3: detected capacity change from 0 to 1024 [ 196.358934][T11075] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.366984][T11106] EXT4-fs: Ignoring removed oldalloc option [ 196.377096][T11106] EXT4-fs: Ignoring removed orlov option [ 196.383751][T11075] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.404656][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 196.404674][ T29] audit: type=1400 audit(2000000038.800:2690): avc: denied { watch watch_reads } for pid=11074 comm="syz.0.2240" path="/251/file1/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 196.496037][T11106] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 196.504602][T11106] System zones: 0-1, 3-12 [ 196.509868][T11106] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.527762][ T6748] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.554571][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/538.tmp-b7:0' failed: Read-only file system [ 196.576468][T11120] loop0: detected capacity change from 0 to 512 [ 196.583073][T11120] EXT4-fs: Ignoring removed bh option [ 196.595644][T11120] EXT4-fs: Ignoring removed oldalloc option [ 196.613516][T11120] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 196.638751][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/538.tmp-b7:0' failed: Read-only file system [ 196.663702][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 196.705690][T11120] EXT4-fs (loop0): 1 truncate cleaned up [ 196.714810][T11120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.747991][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/538.tmp-b7:0' failed: Read-only file system [ 196.762256][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 196.780182][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/541.tmp-b7:0' failed: Read-only file system [ 196.794884][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 196.814209][ T29] audit: type=1400 audit(2000000039.210:2691): avc: denied { bind } for pid=11119 comm="syz.0.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.833809][ T29] audit: type=1400 audit(2000000039.210:2692): avc: denied { listen } for pid=11119 comm="syz.0.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.853604][ T29] audit: type=1400 audit(2000000039.210:2693): avc: denied { accept } for pid=11119 comm="syz.0.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.873372][ T29] audit: type=1400 audit(2000000039.210:2694): avc: denied { write } for pid=11119 comm="syz.0.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.893052][ T29] audit: type=1400 audit(2000000039.210:2695): avc: denied { read } for pid=11119 comm="syz.0.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.912626][ T29] audit: type=1400 audit(2000000039.210:2696): avc: denied { setopt } for pid=11119 comm="syz.0.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.971782][ T6031] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 196.993663][ T3307] udevd[3307]: symlink '../../loop6' '/dev/disk/by-diskseq/533.tmp-b7:6' failed: Read-only file system [ 197.051310][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 197.085154][ T5555] udevd[5555]: symlink '../../loop6' '/dev/disk/by-diskseq/533.tmp-b7:6' failed: Read-only file system [ 197.126779][T11151] macvtap1: entered promiscuous mode [ 197.132217][T11151] macvtap1: entered allmulticast mode [ 197.137736][T11151] team0: Device macvtap1 is already an upper device of the team interface [ 197.221804][ T6748] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.232198][T11156] openvswitch: netlink: Flow actions attr not present in new flow. [ 197.247392][T11160] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 197.318327][T11174] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 197.368148][T11167] loop0: detected capacity change from 0 to 8192 [ 197.458201][T11188] random: crng reseeded on system resumption [ 197.525872][T11199] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 197.875255][T11230] openvswitch: netlink: Flow actions attr not present in new flow. [ 198.060599][T11248] random: crng reseeded on system resumption [ 198.158932][T11207] Set syz1 is full, maxelem 65536 reached [ 198.488766][T11294] loop6: detected capacity change from 0 to 32768 [ 198.537270][T11294] loop6: p1 p3 < p5 p6 > [ 198.543018][T11294] loop6: p5 start 117448704 is beyond EOD, truncated [ 198.923034][ T29] audit: type=1400 audit(2000000041.320:2697): avc: denied { mounton } for pid=11375 comm="syz.0.2320" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 199.052093][ T29] audit: type=1400 audit(2000000041.450:2698): avc: denied { append } for pid=11381 comm="syz.4.2322" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 199.089868][T11384] loop0: detected capacity change from 0 to 1024 [ 199.106247][T11384] EXT4-fs: Ignoring removed orlov option [ 199.112255][T11384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.161227][T11384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.186981][T11398] dummy0: Caught tx_queue_len zero misconfig [ 199.193097][ T29] audit: type=1326 audit(2000000041.590:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.4.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9e23aeb9 code=0x7ffc0000 [ 199.311793][T11408] IPv6: Can't replace route, no match found [ 199.354195][T11405] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=11405 comm=syz.3.2332 [ 199.367805][T11405] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=11405 comm=syz.3.2332 [ 199.394100][T11412] tmpfs: Bad value for 'mpol' [ 199.427808][ T6748] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.487816][T11422] loop0: detected capacity change from 0 to 512 [ 199.498783][T11423] __nla_validate_parse: 3 callbacks suppressed [ 199.498874][T11423] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2336'. [ 199.532080][T11429] FAULT_INJECTION: forcing a failure. [ 199.532080][T11429] name failslab, interval 1, probability 0, space 0, times 0 [ 199.544827][T11429] CPU: 0 UID: 0 PID: 11429 Comm: syz.6.2341 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 199.544868][T11429] Tainted: [W]=WARN [ 199.544878][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.544896][T11429] Call Trace: [ 199.544905][T11429] [ 199.544915][T11429] __dump_stack+0x1d/0x30 [ 199.545020][T11429] dump_stack_lvl+0x95/0xd0 [ 199.545054][T11429] dump_stack+0x15/0x1b [ 199.545078][T11429] should_fail_ex+0x263/0x280 [ 199.545131][T11429] should_failslab+0x8c/0xb0 [ 199.545170][T11429] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 199.545208][T11429] ? __get_vm_area_node+0x106/0x1d0 [ 199.545248][T11429] __get_vm_area_node+0x106/0x1d0 [ 199.545299][T11429] __vmalloc_node_range_noprof+0x291/0x12b0 [ 199.545346][T11429] ? copy_process+0x37e/0x1f10 [ 199.545424][T11429] ? __rcu_read_unlock+0x4e/0x70 [ 199.545498][T11429] ? __memcg_slab_post_alloc_hook+0x44a/0x530 [ 199.545542][T11429] __vmalloc_node_noprof+0x89/0xc0 [ 199.545570][T11429] ? copy_process+0x37e/0x1f10 [ 199.545683][T11429] ? copy_process+0x37e/0x1f10 [ 199.545753][T11429] dup_task_struct+0x219/0x940 [ 199.545837][T11429] ? copy_process+0x36d/0x1f10 [ 199.545880][T11429] copy_process+0x37e/0x1f10 [ 199.545917][T11429] ? kstrtouint+0x76/0xc0 [ 199.545962][T11429] ? kstrtouint_from_user+0xa8/0xf0 [ 199.546026][T11429] kernel_clone+0x16b/0x5b0 [ 199.546051][T11429] ? vfs_write+0x86e/0x9f0 [ 199.546074][T11429] __x64_sys_clone+0x143/0x180 [ 199.546109][T11429] x64_sys_call+0x12d0/0x3000 [ 199.546176][T11429] do_syscall_64+0xc0/0x2a0 [ 199.546211][T11429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.546233][T11429] RIP: 0033:0x7f7304abaeb9 [ 199.546248][T11429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.546273][T11429] RSP: 002b:00007f7303516fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 199.546300][T11429] RAX: ffffffffffffffda RBX: 00007f7304d35fa0 RCX: 00007f7304abaeb9 [ 199.546380][T11429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041200000 [ 199.546393][T11429] RBP: 00007f7303517090 R08: 0000000000000000 R09: 0000000000000000 [ 199.546406][T11429] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 199.546418][T11429] R13: 00007f7304d36038 R14: 00007f7304d35fa0 R15: 00007ffc1576cbd8 [ 199.546444][T11429] [ 199.781659][T11429] syz.6.2341: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 199.796563][T11429] CPU: 0 UID: 0 PID: 11429 Comm: syz.6.2341 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 199.796607][T11429] Tainted: [W]=WARN [ 199.796617][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.796634][T11429] Call Trace: [ 199.796644][T11429] [ 199.796726][T11429] __dump_stack+0x1d/0x30 [ 199.796753][T11429] dump_stack_lvl+0x95/0xd0 [ 199.796775][T11429] dump_stack+0x15/0x1b [ 199.796796][T11429] warn_alloc+0x145/0x1c0 [ 199.796876][T11429] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 199.796925][T11429] ? __rcu_read_unlock+0x4e/0x70 [ 199.796965][T11429] ? __memcg_slab_post_alloc_hook+0x44a/0x530 [ 199.797060][T11429] __vmalloc_node_noprof+0x89/0xc0 [ 199.797097][T11429] ? copy_process+0x37e/0x1f10 [ 199.797139][T11429] ? copy_process+0x37e/0x1f10 [ 199.797243][T11429] dup_task_struct+0x219/0x940 [ 199.797301][T11429] ? copy_process+0x36d/0x1f10 [ 199.797342][T11429] copy_process+0x37e/0x1f10 [ 199.797379][T11429] ? kstrtouint+0x76/0xc0 [ 199.797431][T11429] ? kstrtouint_from_user+0xa8/0xf0 [ 199.797484][T11429] kernel_clone+0x16b/0x5b0 [ 199.797508][T11429] ? vfs_write+0x86e/0x9f0 [ 199.797576][T11429] __x64_sys_clone+0x143/0x180 [ 199.797604][T11429] x64_sys_call+0x12d0/0x3000 [ 199.797688][T11429] do_syscall_64+0xc0/0x2a0 [ 199.797785][T11429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.797812][T11429] RIP: 0033:0x7f7304abaeb9 [ 199.797829][T11429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.797854][T11429] RSP: 002b:00007f7303516fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 199.797921][T11429] RAX: ffffffffffffffda RBX: 00007f7304d35fa0 RCX: 00007f7304abaeb9 [ 199.797940][T11429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041200000 [ 199.797954][T11429] RBP: 00007f7303517090 R08: 0000000000000000 R09: 0000000000000000 [ 199.798037][T11429] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 199.798054][T11429] R13: 00007f7304d36038 R14: 00007f7304d35fa0 R15: 00007ffc1576cbd8 [ 199.798082][T11429] [ 199.798091][T11429] Mem-Info: [ 199.821007][T11422] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 199.823971][T11429] active_anon:70597 inactive_anon:22606 isolated_anon:0 [ 199.823971][T11429] active_file:28807 inactive_file:2388 isolated_file:0 [ 199.823971][T11429] unevictable:0 dirty:264 writeback:0 [ 199.823971][T11429] slab_reclaimable:4117 slab_unreclaimable:23496 [ 199.823971][T11429] mapped:34888 shmem:82910 pagetables:2023 [ 199.823971][T11429] sec_pagetables:0 bounce:0 [ 199.823971][T11429] kernel_misc_reclaimable:0 [ 199.823971][T11429] free:1766039 free_pcp:9831 free_cma:0 [ 199.850138][T11425] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 199.853319][T11429] Node 0 active_anon:282388kB inactive_anon:90424kB active_file:115228kB inactive_file:9552kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139552kB dirty:1056kB writeback:0kB shmem:331640kB kernel_stack:5040kB pagetables:8092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.101516][T11429] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.131382][T11429] lowmem_reserve[]: 0 2879 7858 7858 [ 200.136789][T11429] Node 0 DMA32 free:2944852kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948380kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 200.168538][T11429] lowmem_reserve[]: 0 0 4978 4978 [ 200.173842][T11429] Node 0 Normal free:4117336kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:282156kB inactive_anon:90424kB active_file:115228kB inactive_file:9552kB unevictable:0kB writepending:1020kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:25536kB local_pcp:24344kB free_cma:0kB [ 200.207981][T11429] lowmem_reserve[]: 0 0 0 0 [ 200.212934][T11429] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 200.226190][T11429] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944852kB [ 200.242611][T11429] Node 0 Normal: 1701*4kB (UM) 1108*8kB (UME) 669*16kB (UME) 373*32kB (UME) 484*64kB (UME) 459*128kB (UME) 280*256kB (UME) 177*512kB (UME) 129*1024kB (UM) 66*2048kB (UME) 869*4096kB (UM) = 4117028kB [ 200.262452][T11429] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 200.271871][T11429] 114102 total pagecache pages [ 200.276918][T11429] 25 pages in swap cache [ 200.281417][T11429] Free swap = 71944kB [ 200.285657][T11429] Total swap = 124996kB [ 200.289835][T11429] 2097051 pages RAM [ 200.293670][T11429] 0 pages HighMem/MovableOnly [ 200.298497][T11429] 81556 pages reserved [ 200.372483][T11438] FAULT_INJECTION: forcing a failure. [ 200.372483][T11438] name failslab, interval 1, probability 0, space 0, times 0 [ 200.385288][T11438] CPU: 1 UID: 0 PID: 11438 Comm: syz.4.2344 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 200.385388][T11438] Tainted: [W]=WARN [ 200.385397][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.385432][T11438] Call Trace: [ 200.385441][T11438] [ 200.385450][T11438] __dump_stack+0x1d/0x30 [ 200.385479][T11438] dump_stack_lvl+0x95/0xd0 [ 200.385511][T11438] dump_stack+0x15/0x1b [ 200.385536][T11438] should_fail_ex+0x263/0x280 [ 200.385600][T11438] should_failslab+0x8c/0xb0 [ 200.385628][T11438] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 200.385661][T11438] ? perf_event_alloc+0x159/0x18d0 [ 200.385688][T11438] perf_event_alloc+0x159/0x18d0 [ 200.385714][T11438] ? _raw_spin_unlock+0x9/0x30 [ 200.385760][T11438] __se_sys_perf_event_open+0x4c9/0x1290 [ 200.385896][T11438] __x64_sys_perf_event_open+0x67/0x80 [ 200.385962][T11438] x64_sys_call+0x78c/0x3000 [ 200.385992][T11438] do_syscall_64+0xc0/0x2a0 [ 200.386034][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.386064][T11438] RIP: 0033:0x7f8e9e23aeb9 [ 200.386084][T11438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.386254][T11438] RSP: 002b:00007f8e9cc97028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 200.386279][T11438] RAX: ffffffffffffffda RBX: 00007f8e9e4b5fa0 RCX: 00007f8e9e23aeb9 [ 200.386298][T11438] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180 [ 200.386324][T11438] RBP: 00007f8e9cc97090 R08: 0000000000000000 R09: 0000000000000000 [ 200.386342][T11438] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 200.386358][T11438] R13: 00007f8e9e4b6038 R14: 00007f8e9e4b5fa0 R15: 00007ffc4e49cb28 [ 200.386424][T11438] [ 200.605742][T11445] IPVS: stopping master sync thread 11449 ... [ 200.752743][T11460] loop3: detected capacity change from 0 to 512 [ 200.760574][T11460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.769656][T11458] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2351'. [ 200.794983][T11460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.820642][T11464] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2351'. [ 200.842200][T11460] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.859581][T11458] ip6gre1: entered promiscuous mode [ 200.864838][T11458] ip6gre1: entered allmulticast mode [ 200.893504][ T6031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.909326][T11467] netlink: 'syz.0.2354': attribute type 20 has an invalid length. [ 200.924440][T11448] lo speed is unknown, defaulting to 1000 [ 201.007196][T11475] loop3: detected capacity change from 0 to 1024 [ 201.034384][T11475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.060033][T11475] SELinux: Context @ is not valid (left unmapped). [ 201.116778][T11482] loop0: detected capacity change from 0 to 128 [ 201.166917][ T6031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.251007][T11488] FAULT_INJECTION: forcing a failure. [ 201.251007][T11488] name failslab, interval 1, probability 0, space 0, times 0 [ 201.263763][T11488] CPU: 0 UID: 0 PID: 11488 Comm: syz.6.2362 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 201.263834][T11488] Tainted: [W]=WARN [ 201.263878][T11488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.263895][T11488] Call Trace: [ 201.263903][T11488] [ 201.263912][T11488] __dump_stack+0x1d/0x30 [ 201.263938][T11488] dump_stack_lvl+0x95/0xd0 [ 201.264043][T11488] dump_stack+0x15/0x1b [ 201.264069][T11488] should_fail_ex+0x263/0x280 [ 201.264106][T11488] should_failslab+0x8c/0xb0 [ 201.264137][T11488] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 201.264166][T11488] ? sidtab_sid2str_get+0xa0/0x130 [ 201.264204][T11488] kmemdup_noprof+0x2b/0x70 [ 201.264278][T11488] sidtab_sid2str_get+0xa0/0x130 [ 201.264307][T11488] security_sid_to_context_core+0x1eb/0x2e0 [ 201.264335][T11488] security_sid_to_context+0x27/0x40 [ 201.264380][T11488] selinux_lsmprop_to_secctx+0x67/0xf0 [ 201.264468][T11488] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 201.264503][T11488] audit_log_subj_ctx+0xa4/0x3e0 [ 201.264600][T11488] ? skb_put+0xa9/0xf0 [ 201.264640][T11488] audit_log_task_context+0x48/0x70 [ 201.264804][T11488] audit_log_task+0xf3/0x250 [ 201.264830][T11488] ? kstrtouint+0x76/0xc0 [ 201.264997][T11488] audit_seccomp+0x60/0x100 [ 201.265078][T11488] ? __seccomp_filter+0x8db/0x1350 [ 201.265162][T11488] __seccomp_filter+0x8ec/0x1350 [ 201.265265][T11488] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 201.265295][T11488] ? vfs_write+0x86e/0x9f0 [ 201.265314][T11488] ? __rcu_read_unlock+0x4e/0x70 [ 201.265347][T11488] ? __fget_files+0x184/0x1c0 [ 201.265413][T11488] __secure_computing+0x81/0x150 [ 201.265434][T11488] syscall_trace_enter+0xce/0x1e0 [ 201.265522][T11488] do_syscall_64+0x9a/0x2a0 [ 201.265561][T11488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.265584][T11488] RIP: 0033:0x7f7304abaeb9 [ 201.265600][T11488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.265761][T11488] RSP: 002b:00007f7303517028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 201.265788][T11488] RAX: ffffffffffffffda RBX: 00007f7304d35fa0 RCX: 00007f7304abaeb9 [ 201.265849][T11488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 201.265863][T11488] RBP: 00007f7303517090 R08: 0000000000000000 R09: 0000000000000000 [ 201.265880][T11488] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 201.265897][T11488] R13: 00007f7304d36038 R14: 00007f7304d35fa0 R15: 00007ffc1576cbd8 [ 201.265925][T11488] [ 201.517580][T11488] audit_panic: 40 callbacks suppressed [ 201.517598][T11488] audit: error in audit_log_subj_ctx [ 201.532245][T11491] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 201.532245][T11491] The task syz.3.2360 (11491) triggered the difference, watch for misbehavior. [ 201.557394][ T29] audit: type=1326 audit(2000000043.650:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11486 comm="syz.6.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f7304abaeb9 code=0x7ffc0000 [ 201.578550][ T29] audit: type=1326 audit(2000000043.960:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11486 comm="syz.6.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7304a7b78e code=0x7ffc0000 [ 201.602236][ T29] audit: type=1326 audit(2000000043.960:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11486 comm="syz.6.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7304a7b78e code=0x7ffc0000 [ 201.625783][ T29] audit: type=1326 audit(2000000043.960:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11486 comm="syz.6.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7304a7b78e code=0x7ffc0000 [ 201.649317][ T29] audit: type=1326 audit(2000000043.960:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11486 comm="syz.6.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7304abaeb9 code=0x7ffc0000 [ 201.672943][ T29] audit: type=1326 audit(2000000043.960:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11486 comm="syz.6.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7304abaeb9 code=0x7ffc0000 [ 201.672961][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/555.tmp-b7:0' failed: Read-only file system [ 201.716383][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/555.tmp-b7:0' failed: Read-only file system [ 201.732888][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/557.tmp-b7:0' failed: Read-only file system [ 201.824562][ T3307] udevd[3307]: symlink '../../loop6' '/dev/disk/by-diskseq/547.tmp-b7:6' failed: Read-only file system [ 201.883684][ T29] audit: type=1326 audit(2000000044.280:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.4.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9e23aeb9 code=0x7ffc0000 [ 201.896404][T11508] pimreg: entered allmulticast mode [ 201.908526][ T29] audit: type=1326 audit(2000000044.280:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.4.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9e23aeb9 code=0x7ffc0000 [ 201.936300][ T29] audit: type=1326 audit(2000000044.280:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.4.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8e9e23aeb9 code=0x7ffc0000 [ 202.081249][ T3307] udevd[3307]: symlink '../../loop3' '/dev/disk/by-diskseq/556.tmp-b7:3' failed: Read-only file system [ 202.111701][ T3307] udevd[3307]: symlink '../../loop3' '/dev/disk/by-diskseq/556.tmp-b7:3' failed: Read-only file system [ 202.154884][T11515] openvswitch: netlink: Flow actions attr not present in new flow. [ 202.184721][T11520] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 202.204306][ T3307] udevd[3307]: symlink '../../loop3' '/dev/disk/by-diskseq/556.tmp-b7:3' failed: Read-only file system [ 202.242334][ T3307] udevd[3307]: symlink '../../loop3' '/dev/disk/by-diskseq/556.tmp-b7:3' failed: Read-only file system [ 202.268849][T11531] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2380'. [ 202.294419][ T3307] udevd[3307]: symlink '../../loop3' '/dev/disk/by-diskseq/556.tmp-b7:3' failed: Read-only file system [ 202.320014][ T3307] udevd[3307]: symlink '../../loop3' '/dev/disk/by-diskseq/556.tmp-b7:3' failed: Read-only file system [ 202.386462][T11540] loop3: detected capacity change from 0 to 4096 [ 202.399404][T11540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.416744][T11540] Trying to write to read-only block-device loop3 [ 202.444935][ T6031] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 202.457538][ T6031] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 202.489326][T11544] loop0: detected capacity change from 0 to 512 [ 202.508337][T11544] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.2386: corrupted inode contents [ 202.520352][T11544] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.2386: mark_inode_dirty error [ 202.532662][T11544] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.2386: corrupted inode contents [ 202.545145][T11544] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2386: mark_inode_dirty error [ 202.570580][T11544] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2386: Failed to acquire dquot type 0 [ 202.585345][T11544] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2386: corrupted inode contents [ 202.601419][T11544] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.2386: mark_inode_dirty error [ 202.619391][T11544] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2386: corrupted inode contents [ 202.631716][T11544] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2386: mark_inode_dirty error [ 202.643720][T11544] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2386: corrupted inode contents [ 202.656890][T11544] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 202.684126][T11544] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2386: corrupted inode contents [ 202.699584][T11544] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.2386: mark_inode_dirty error [ 202.713577][T11551] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 202.744653][T11544] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 202.754407][T11544] EXT4-fs (loop0): 1 truncate cleaned up [ 202.761445][T11544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.774626][T11544] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.847990][T11557] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2391'. [ 202.916447][ T6748] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.935030][ T6031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.033206][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2391'. [ 203.051448][T11343] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 203.065413][T11343] bond0 (unregistering): Released all slaves [ 203.076286][T11343] bond1 (unregistering): Released all slaves [ 203.118719][T11565] geneve2: entered promiscuous mode [ 203.165869][T11343] tipc: Disabling bearer [ 203.170902][T11343] tipc: Left network mode [ 203.180165][T11343] hsr_slave_0: left promiscuous mode [ 203.189947][T11343] hsr_slave_1: left promiscuous mode [ 203.218081][T11343] pimreg (unregistering): left allmulticast mode [ 203.491549][T11622] xt_addrtype: ipv6 does not support BROADCAST matching [ 203.536963][T11622] sctp: [Deprecated]: syz.4.2408 (pid 11622) Use of int in maxseg socket option. [ 203.536963][T11622] Use struct sctp_assoc_value instead [ 203.553077][T11587] lo speed is unknown, defaulting to 1000 [ 203.601090][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2411'. [ 203.722349][T11644] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 203.770013][T11587] chnl_net:caif_netlink_parms(): no params data found [ 203.781601][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'. [ 203.893215][T11587] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.899832][T11668] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 203.900628][T11587] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.914996][T11587] bridge_slave_0: entered allmulticast mode [ 203.921791][T11587] bridge_slave_0: entered promiscuous mode [ 203.928974][T11587] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.936171][T11587] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.943483][T11587] bridge_slave_1: entered allmulticast mode [ 203.950414][T11587] bridge_slave_1: entered promiscuous mode [ 203.956775][T11671] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 204.000331][T11587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.027344][T11587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.064734][T11587] team0: Port device team_slave_0 added [ 204.106759][T11587] team0: Port device team_slave_1 added [ 204.143797][T11587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.150943][T11587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.176985][T11587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.245019][T11587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.252075][T11587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.278040][T11587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.327030][T11706] netlink: 'syz.4.2431': attribute type 1 has an invalid length. [ 204.345007][T11587] hsr_slave_0: entered promiscuous mode [ 204.351915][T11587] hsr_slave_1: entered promiscuous mode [ 204.358101][T11587] debugfs: 'hsr0' already exists in 'hsr' [ 204.363891][T11587] Cannot create hsr debugfs directory [ 204.959091][T11706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.983431][T11713] macvlan2: entered promiscuous mode [ 204.988874][T11713] macvlan2: entered allmulticast mode [ 205.008049][T11713] bond1: entered allmulticast mode [ 205.013278][T11713] bond1: entered promiscuous mode [ 205.019014][T11713] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 205.027798][T11713] team0: Port device macvlan2 added [ 205.246144][T11724] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2434'. [ 205.317280][T11727] openvswitch: netlink: Flow actions attr not present in new flow. [ 205.409836][T11749] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 205.759585][T11762] sg_write: data in/out 135/8 bytes for SCSI command 0x74-- guessing data in; [ 205.759585][T11762] program syz.0.2444 not setting count and/or reply_len properly [ 205.838240][T11587] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.887344][T11587] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.970791][T11587] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 206.084687][T11587] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 206.300351][T11587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.313058][T11587] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.323638][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.330933][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.399572][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.406702][ T5730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.429565][T11794] loop6: detected capacity change from 0 to 1024 [ 206.445974][T11794] EXT4-fs: Ignoring removed orlov option [ 206.451723][T11794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.546128][T11794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.590063][ T5156] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.690275][ T3307] udevd[3307]: symlink '../../loop6' '/dev/disk/by-diskseq/561.tmp-b7:6' failed: Read-only file system [ 206.702622][T11587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.731948][ T5555] udevd[5555]: symlink '../../loop0' '/dev/disk/by-diskseq/560.tmp-b7:0' failed: Read-only file system [ 206.746638][ T3307] udevd[3307]: symlink '../../loop6' '/dev/disk/by-diskseq/562.tmp-b7:6' failed: Read-only file system [ 206.773692][T11835] raw_sendmsg: syz.0.2458 forgot to set AF_INET. Fix it! [ 206.793116][T11827] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2457'. [ 206.815128][T11835] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2458'. [ 206.831519][T11827] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.838800][T11827] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.852633][ T3307] udevd[3307]: symlink '../../loop6' '/dev/disk/by-diskseq/562.tmp-b7:6' failed: Read-only file system [ 206.853378][T11845] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 206.876060][T11835] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2458'. [ 206.959483][ T5555] udevd[5555]: symlink '../../loop6' '/dev/disk/by-diskseq/562.tmp-b7:6' failed: Read-only file system [ 206.971306][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/560.tmp-b7:0' failed: Read-only file system [ 206.996244][T11860] loop0: detected capacity change from 0 to 1024 [ 207.003064][T11860] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 207.029624][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/563.tmp-b7:0' failed: Read-only file system [ 207.079979][ T5555] udevd[5555]: symlink '../../loop6' '/dev/disk/by-diskseq/562.tmp-b7:6' failed: Read-only file system [ 207.093252][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 207.112309][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:0' failed: Read-only file system [ 207.172721][T11880] netlink: 'syz.6.2467': attribute type 1 has an invalid length. [ 207.236970][T11587] veth0_vlan: entered promiscuous mode [ 207.253719][T11587] veth1_vlan: entered promiscuous mode [ 207.303108][T11587] veth0_macvtap: entered promiscuous mode [ 207.329450][T11587] veth1_macvtap: entered promiscuous mode [ 207.339828][T11893] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 207.354596][T11587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.368656][T11587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.390045][T11345] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.424045][T11345] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.445138][T11345] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.458727][T11345] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.560494][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 207.560592][ T29] audit: type=1400 audit(2000000049.960:2767): avc: denied { bind } for pid=11911 comm="syz.0.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 207.586564][T11913] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2473'. [ 207.628988][T11917] FAULT_INJECTION: forcing a failure. [ 207.628988][T11917] name failslab, interval 1, probability 0, space 0, times 0 [ 207.641954][T11917] CPU: 0 UID: 0 PID: 11917 Comm: syz.5.2474 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 207.641990][T11917] Tainted: [W]=WARN [ 207.641996][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.642027][T11917] Call Trace: [ 207.642034][T11917] [ 207.642043][T11917] __dump_stack+0x1d/0x30 [ 207.642130][T11917] dump_stack_lvl+0x95/0xd0 [ 207.642157][T11917] dump_stack+0x15/0x1b [ 207.642180][T11917] should_fail_ex+0x263/0x280 [ 207.642220][T11917] should_failslab+0x8c/0xb0 [ 207.642300][T11917] __kmalloc_cache_noprof+0x64/0x4a0 [ 207.642332][T11917] ? alloc_fs_context+0x46/0x590 [ 207.642378][T11917] alloc_fs_context+0x46/0x590 [ 207.642489][T11917] fs_context_for_mount+0x22/0x30 [ 207.642516][T11917] do_new_mount+0xea/0x700 [ 207.642570][T11917] ? security_capable+0x7b/0x90 [ 207.642654][T11917] path_mount+0x4d0/0xbc0 [ 207.642685][T11917] ? user_path_at+0xbf/0x130 [ 207.642718][T11917] __se_sys_mount+0x28c/0x2e0 [ 207.642749][T11917] __x64_sys_mount+0x67/0x80 [ 207.642770][T11917] x64_sys_call+0x2cca/0x3000 [ 207.642870][T11917] do_syscall_64+0xc0/0x2a0 [ 207.642986][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.643016][T11917] RIP: 0033:0x7f45d4cdaeb9 [ 207.643038][T11917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.643063][T11917] RSP: 002b:00007f45d3737028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 207.643097][T11917] RAX: ffffffffffffffda RBX: 00007f45d4f55fa0 RCX: 00007f45d4cdaeb9 [ 207.643136][T11917] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 207.643188][T11917] RBP: 00007f45d3737090 R08: 0000200000000000 R09: 0000000000000000 [ 207.643206][T11917] R10: 0000000002010042 R11: 0000000000000246 R12: 0000000000000001 [ 207.643287][T11917] R13: 00007f45d4f56038 R14: 00007f45d4f55fa0 R15: 00007ffd92244888 [ 207.643315][T11917] [ 207.924558][ T29] audit: type=1400 audit(2000000050.310:2768): avc: denied { create } for pid=11926 comm="syz.5.2478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=phonet_socket permissive=1 [ 208.018704][ T29] audit: type=1326 audit(2000000050.390:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.9.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234de0aeb9 code=0x7ffc0000 [ 208.042482][ T29] audit: type=1326 audit(2000000050.390:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.9.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f234de0aeb9 code=0x7ffc0000 [ 208.066162][ T29] audit: type=1326 audit(2000000050.390:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.9.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234de0aeb9 code=0x7ffc0000 [ 208.089994][ T29] audit: type=1326 audit(2000000050.390:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.9.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f234de0aeb9 code=0x7ffc0000 [ 208.113779][ T29] audit: type=1326 audit(2000000050.390:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.9.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234de0aeb9 code=0x7ffc0000 [ 208.137359][ T29] audit: type=1326 audit(2000000050.390:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.9.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f234de0aeb9 code=0x7ffc0000 [ 208.161014][ T29] audit: type=1326 audit(2000000050.390:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.9.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234de0aeb9 code=0x7ffc0000 [ 208.184616][ T29] audit: type=1326 audit(2000000050.390:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.9.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f234de0aeb9 code=0x7ffc0000 [ 208.511025][T11982] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 208.785190][T12019] FAULT_INJECTION: forcing a failure. [ 208.785190][T12019] name failslab, interval 1, probability 0, space 0, times 0 [ 208.797930][T12019] CPU: 0 UID: 0 PID: 12019 Comm: syz.5.2504 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 208.797969][T12019] Tainted: [W]=WARN [ 208.797977][T12019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.797993][T12019] Call Trace: [ 208.798033][T12019] [ 208.798044][T12019] __dump_stack+0x1d/0x30 [ 208.798075][T12019] dump_stack_lvl+0x95/0xd0 [ 208.798106][T12019] dump_stack+0x15/0x1b [ 208.798209][T12019] should_fail_ex+0x263/0x280 [ 208.798251][T12019] should_failslab+0x8c/0xb0 [ 208.798283][T12019] kmem_cache_alloc_noprof+0x68/0x490 [ 208.798361][T12019] ? security_file_alloc+0x32/0xf0 [ 208.798390][T12019] security_file_alloc+0x32/0xf0 [ 208.798414][T12019] init_file+0x5c/0x1c0 [ 208.798516][T12019] alloc_empty_file+0x8b/0x200 [ 208.798592][T12019] alloc_file_pseudo+0xf6/0x190 [ 208.798637][T12019] __shmem_file_setup+0x1dd/0x210 [ 208.798678][T12019] shmem_file_setup+0x3b/0x50 [ 208.798719][T12019] memfd_alloc_file+0x4e/0x300 [ 208.798757][T12019] __se_sys_memfd_create+0x2e1/0x3b0 [ 208.798811][T12019] __x64_sys_memfd_create+0x31/0x40 [ 208.798885][T12019] x64_sys_call+0x28cb/0x3000 [ 208.798918][T12019] do_syscall_64+0xc0/0x2a0 [ 208.798961][T12019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.799047][T12019] RIP: 0033:0x7f45d4cdaeb9 [ 208.799069][T12019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.799181][T12019] RSP: 002b:00007f45d3736e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 208.799209][T12019] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007f45d4cdaeb9 [ 208.799228][T12019] RDX: 00007f45d3736ee0 RSI: 0000000000000000 RDI: 00007f45d4d47333 [ 208.799246][T12019] RBP: 0000200000000c40 R08: 00000000ffffffff R09: 0000000000000000 [ 208.799341][T12019] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000200 [ 208.799359][T12019] R13: 00007f45d3736ee0 R14: 00007f45d3736ea0 R15: 00002000000001c0 [ 208.799388][T12019] [ 209.240631][T12050] lo speed is unknown, defaulting to 1000 [ 209.260751][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 209.282955][T12062] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2514'. [ 209.292037][T12062] netlink: 35 bytes leftover after parsing attributes in process `syz.6.2514'. [ 209.301058][T12062] netlink: 'syz.6.2514': attribute type 5 has an invalid length. [ 209.308914][T12062] netlink: 'syz.6.2514': attribute type 6 has an invalid length. [ 209.316702][T12062] netlink: 35 bytes leftover after parsing attributes in process `syz.6.2514'. [ 209.416340][T12079] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2523'. [ 209.919840][T12148] loop5: detected capacity change from 0 to 256 [ 209.939948][T12150] program syz.4.2547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.983530][T12148] Invalid argument reading file caps for ./file0 [ 210.089837][T12162] loop0: detected capacity change from 0 to 512 [ 210.146388][T12162] EXT4-fs (loop0): orphan cleanup on readonly fs [ 210.168892][T12162] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 210.240823][T12162] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 210.247785][T12162] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2549: bad orphan inode 4095 [ 210.307519][T12182] loop5: detected capacity change from 0 to 1024 [ 210.333138][T12162] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.389503][T12182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.436498][T12195] loop6: detected capacity change from 0 to 1024 [ 210.450298][T12195] EXT4-fs: Ignoring removed nobh option [ 210.497199][T12199] FAULT_INJECTION: forcing a failure. [ 210.497199][T12199] name failslab, interval 1, probability 0, space 0, times 0 [ 210.510047][T12199] CPU: 0 UID: 0 PID: 12199 Comm: syz.4.2557 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 210.510169][T12199] Tainted: [W]=WARN [ 210.510178][T12199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.510196][T12199] Call Trace: [ 210.510205][T12199] [ 210.510214][T12199] __dump_stack+0x1d/0x30 [ 210.510247][T12199] dump_stack_lvl+0x95/0xd0 [ 210.510355][T12199] dump_stack+0x15/0x1b [ 210.510409][T12199] should_fail_ex+0x263/0x280 [ 210.510453][T12199] should_failslab+0x8c/0xb0 [ 210.510485][T12199] __kmalloc_cache_noprof+0x64/0x4a0 [ 210.510515][T12199] ? tcf_action_init_1+0x12d/0x4d0 [ 210.510632][T12199] tcf_action_init_1+0x12d/0x4d0 [ 210.510698][T12199] tcf_action_init+0x29c/0x700 [ 210.510768][T12199] tc_ctl_action+0x29b/0x830 [ 210.510883][T12199] ? __pfx_tc_ctl_action+0x10/0x10 [ 210.510917][T12199] rtnetlink_rcv_msg+0x6a7/0x720 [ 210.510954][T12199] netlink_rcv_skb+0x123/0x220 [ 210.511059][T12199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.511099][T12199] rtnetlink_rcv+0x1c/0x30 [ 210.511126][T12199] netlink_unicast+0x5c0/0x690 [ 210.511235][T12199] netlink_sendmsg+0x5c8/0x6f0 [ 210.511266][T12199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.511292][T12199] ____sys_sendmsg+0x5af/0x600 [ 210.511319][T12199] ___sys_sendmsg+0x195/0x1e0 [ 210.511423][T12199] __x64_sys_sendmsg+0xd4/0x160 [ 210.511471][T12199] x64_sys_call+0x17ba/0x3000 [ 210.511505][T12199] do_syscall_64+0xc0/0x2a0 [ 210.511546][T12199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.511641][T12199] RIP: 0033:0x7f8e9e23aeb9 [ 210.511662][T12199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.511724][T12199] RSP: 002b:00007f8e9cc97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.511752][T12199] RAX: ffffffffffffffda RBX: 00007f8e9e4b5fa0 RCX: 00007f8e9e23aeb9 [ 210.511770][T12199] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 210.511788][T12199] RBP: 00007f8e9cc97090 R08: 0000000000000000 R09: 0000000000000000 [ 210.511856][T12199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.511873][T12199] R13: 00007f8e9e4b6038 R14: 00007f8e9e4b5fa0 R15: 00007ffc4e49cb28 [ 210.511901][T12199] [ 210.754490][ T6748] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 210.757379][T12201] bond_slave_0: entered promiscuous mode [ 210.769245][T12201] bond_slave_1: entered promiscuous mode [ 210.811015][T12195] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 210.821813][T12201] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 210.878972][T12201] bond_slave_0: left promiscuous mode [ 210.884409][T12201] bond_slave_1: left promiscuous mode [ 210.988260][T11587] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.019649][T12233] openvswitch: netlink: EtherType 548 is less than min 600 [ 211.182092][T12259] loop5: detected capacity change from 0 to 1024 [ 211.205903][T12259] EXT4-fs: Ignoring removed oldalloc option [ 211.211896][T12259] EXT4-fs: Ignoring removed orlov option [ 211.236788][T12259] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 211.274113][T12259] System zones: 0-1, 3-12 [ 211.281741][T12249] netlink: 'syz.4.2570': attribute type 1 has an invalid length. [ 211.292810][T12259] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.302179][T12249] netlink: 'syz.4.2570': attribute type 1 has an invalid length. [ 211.313002][T12249] netlink: 'syz.4.2570': attribute type 1 has an invalid length. [ 211.330092][T12249] netlink: 'syz.4.2570': attribute type 1 has an invalid length. [ 211.339230][T12249] netlink: 'syz.4.2570': attribute type 1 has an invalid length. [ 211.385397][T12273] loop6: detected capacity change from 0 to 128 [ 211.400869][T12249] netlink: 'syz.4.2570': attribute type 1 has an invalid length. [ 211.412766][T12275] __nla_validate_parse: 1 callbacks suppressed [ 211.412864][T12275] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2571'. [ 211.430180][T12249] netlink: 'syz.4.2570': attribute type 1 has an invalid length. [ 211.474654][T12272] openvswitch: netlink: Flow actions attr not present in new flow. [ 211.501195][T11587] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 211.554432][T12282] loop6: detected capacity change from 0 to 512 [ 211.705844][ T5555] udevd[5555]: symlink '../../loop0' '/dev/disk/by-diskseq/571.tmp-b7:0' failed: Read-only file system [ 211.718360][ T3307] udevd[3307]: symlink '../../loop6' '/dev/disk/by-diskseq/579.tmp-b7:6' failed: Read-only file system [ 211.890669][T12310] loop0: detected capacity change from 0 to 1024 [ 211.914216][T12310] EXT4-fs: Ignoring removed oldalloc option [ 211.920230][T12310] EXT4-fs: Ignoring removed orlov option [ 211.940578][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/571.tmp-b7:0' failed: Read-only file system [ 211.990334][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 212.015778][T12310] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 212.026722][T12310] System zones: 0-1, 3-12 [ 212.031833][T12310] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.053582][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0500-0000-0000-000000000000.tmp-b7:0' failed: Read-only file system [ 212.104613][T12316] openvswitch: netlink: Flow actions attr not present in new flow. [ 212.117885][ T5555] udevd[5555]: symlink '../../loop6' '/dev/disk/by-diskseq/579.tmp-b7:6' failed: Read-only file system [ 212.150753][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/580.tmp-b7:0' failed: Read-only file system [ 212.184921][T12322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2585'. [ 212.222425][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 212.261892][ T5555] udevd[5555]: symlink '../../loop6' '/dev/disk/by-diskseq/579.tmp-b7:6' failed: Read-only file system [ 212.314542][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0500-0000-0000-000000000000.tmp-b7:0' failed: Read-only file system [ 212.533748][ T6748] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 212.552405][T12342] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2595'. [ 212.557014][T12284] Set syz1 is full, maxelem 65536 reached [ 212.562679][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2595'. [ 212.737680][T12355] openvswitch: netlink: Flow actions attr not present in new flow. [ 212.761563][T12358] xt_hashlimit: size too large, truncated to 1048576 [ 212.831107][T12374] FAULT_INJECTION: forcing a failure. [ 212.831107][T12374] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 212.844579][T12374] CPU: 1 UID: 0 PID: 12374 Comm: syz.0.2607 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 212.844689][T12374] Tainted: [W]=WARN [ 212.844711][T12374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.844724][T12374] Call Trace: [ 212.844732][T12374] [ 212.844784][T12374] __dump_stack+0x1d/0x30 [ 212.844816][T12374] dump_stack_lvl+0x95/0xd0 [ 212.844860][T12374] dump_stack+0x15/0x1b [ 212.844880][T12374] should_fail_ex+0x263/0x280 [ 212.844922][T12374] should_fail_alloc_page+0xf2/0x100 [ 212.844955][T12374] __alloc_frozen_pages_noprof+0x108/0x350 [ 212.845116][T12374] alloc_pages_mpol+0xb3/0x260 [ 212.845147][T12374] ? mas_state_walk+0x538/0x650 [ 212.845183][T12374] alloc_pages_noprof+0x8f/0x130 [ 212.845228][T12374] __pud_alloc+0x47/0x4a0 [ 212.845265][T12374] handle_mm_fault+0x1d62/0x3030 [ 212.845304][T12374] ? mt_find+0x291/0x3b0 [ 212.845373][T12374] ? lock_mm_and_find_vma+0x88/0x400 [ 212.845401][T12374] do_user_addr_fault+0x3fd/0x1050 [ 212.845442][T12374] exc_page_fault+0x62/0xa0 [ 212.845468][T12374] asm_exc_page_fault+0x26/0x30 [ 212.845541][T12374] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 212.845621][T12374] Code: c4 10 e9 d4 15 02 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 212.845643][T12374] RSP: 0018:ffffc90001f17e08 EFLAGS: 00050202 [ 212.845666][T12374] RAX: ffff888146c10a90 RBX: 0000000000000004 RCX: 0000000000000004 [ 212.845679][T12374] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: ffffc90001f17e44 [ 212.845694][T12374] RBP: 0000000000000000 R08: 0000000000000032 R09: 0000000000000000 [ 212.845707][T12374] R10: 0001c90001f17e44 R11: 0001c90001f17e47 R12: 0000000000000000 [ 212.845725][T12374] R13: ffff8881414c7400 R14: ffffc90001f17e44 R15: 00002000000002c0 [ 212.845892][T12374] _copy_from_user+0x6f/0xb0 [ 212.845925][T12374] do_sock_getsockopt+0xf1/0x210 [ 212.846020][T12374] __x64_sys_getsockopt+0x11d/0x1a0 [ 212.846061][T12374] x64_sys_call+0x2dc7/0x3000 [ 212.846117][T12374] do_syscall_64+0xc0/0x2a0 [ 212.846229][T12374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.846254][T12374] RIP: 0033:0x7f72665aaeb9 [ 212.846271][T12374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.846289][T12374] RSP: 002b:00007f7265007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 212.846308][T12374] RAX: ffffffffffffffda RBX: 00007f7266825fa0 RCX: 00007f72665aaeb9 [ 212.846401][T12374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 212.846415][T12374] RBP: 00007f7265007090 R08: 00002000000002c0 R09: 0000000000000000 [ 212.846428][T12374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.846440][T12374] R13: 00007f7266826038 R14: 00007f7266825fa0 R15: 00007ffeadf72228 [ 212.846461][T12374] [ 213.150253][T12380] loop5: detected capacity change from 0 to 164 [ 213.157614][T12380] ISOFS: Unable to identify CD-ROM format. [ 213.337307][T12393] program syz.5.2614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.339967][T12391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2615'. [ 213.367274][T12395] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 213.453800][T12403] loop0: detected capacity change from 0 to 1024 [ 213.469158][T12403] EXT4-fs: Ignoring removed oldalloc option [ 213.475240][T12403] EXT4-fs: Ignoring removed orlov option [ 213.531004][T12403] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 213.559626][T12403] System zones: 0-1, 3-12 [ 213.580336][T12403] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.637560][T12399] FAULT_INJECTION: forcing a failure. [ 213.637560][T12399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.651528][T12399] CPU: 0 UID: 0 PID: 12399 Comm: syz.4.2617 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 213.651566][T12399] Tainted: [W]=WARN [ 213.651574][T12399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.651666][T12399] Call Trace: [ 213.651675][T12399] [ 213.651684][T12399] __dump_stack+0x1d/0x30 [ 213.651718][T12399] dump_stack_lvl+0x95/0xd0 [ 213.651827][T12399] dump_stack+0x15/0x1b [ 213.651862][T12399] should_fail_ex+0x263/0x280 [ 213.651906][T12399] should_fail+0xb/0x20 [ 213.651944][T12399] should_fail_usercopy+0x1a/0x20 [ 213.652025][T12399] _copy_from_user+0x1c/0xb0 [ 213.652120][T12399] sctp_setsockopt+0x164/0xea0 [ 213.652200][T12399] sock_common_setsockopt+0x69/0x80 [ 213.652236][T12399] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 213.652303][T12399] __sys_setsockopt+0x184/0x200 [ 213.652371][T12399] __x64_sys_setsockopt+0x64/0x80 [ 213.652460][T12399] x64_sys_call+0x21d5/0x3000 [ 213.652492][T12399] do_syscall_64+0xc0/0x2a0 [ 213.652600][T12399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.652623][T12399] RIP: 0033:0x7f8e9e23aeb9 [ 213.652642][T12399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.652667][T12399] RSP: 002b:00007f8e9cc97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 213.652693][T12399] RAX: ffffffffffffffda RBX: 00007f8e9e4b5fa0 RCX: 00007f8e9e23aeb9 [ 213.652711][T12399] RDX: 0000000000000019 RSI: 0000000000000084 RDI: 0000000000000007 [ 213.652784][T12399] RBP: 00007f8e9cc97090 R08: 0000000000000008 R09: 0000000000000000 [ 213.652801][T12399] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 213.652815][T12399] R13: 00007f8e9e4b6038 R14: 00007f8e9e4b5fa0 R15: 00007ffc4e49cb28 [ 213.652850][T12399] [ 213.906032][T12419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2619'. [ 213.970485][ T6748] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 214.073036][T12430] netem: incorrect ge model size [ 214.078156][T12430] netem: change failed [ 214.284035][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 214.284053][ T29] audit: type=1400 audit(2000000056.680:3069): avc: denied { setattr } for pid=12434 comm="syz.5.2632" name="/" dev="configfs" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 214.458919][ T29] audit: type=1400 audit(2000000056.860:3070): avc: denied { add_name } for pid=12434 comm="syz.5.2632" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 214.480552][ T29] audit: type=1400 audit(2000000056.860:3071): avc: denied { create } for pid=12434 comm="syz.5.2632" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 214.550510][T12461] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2642'. [ 214.603712][T12467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65043 sclass=netlink_route_socket pid=12467 comm=syz.9.2645 [ 214.664721][T12477] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2649'. [ 214.797289][ T29] audit: type=1326 audit(2000000057.200:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9e23aeb9 code=0x7ffc0000 [ 214.799255][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2655'. [ 214.821056][ T29] audit: type=1326 audit(2000000057.200:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9e23aeb9 code=0x7ffc0000 [ 214.856007][ T29] audit: type=1326 audit(2000000057.200:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f8e9e23aeb9 code=0x7ffc0000 [ 214.879973][ T29] audit: type=1326 audit(2000000057.200:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9e23aeb9 code=0x7ffc0000 [ 214.903672][ T29] audit: type=1326 audit(2000000057.200:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9e23aeb9 code=0x7ffc0000 [ 214.927273][ T29] audit: type=1326 audit(2000000057.250:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8e9e23aeb9 code=0x7ffc0000 [ 214.950819][ T29] audit: type=1326 audit(2000000057.250:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9e23aeb9 code=0x7ffc0000 [ 214.966580][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2656'. [ 215.042319][T12493] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 215.076954][T12506] loop5: detected capacity change from 0 to 512 [ 215.134365][T12506] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2658: bad orphan inode 11862016 [ 215.169522][T12506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 215.182154][T12506] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.198484][T12502] SELinux: policydb magic number 0x34747865 does not match expected magic number 0xf97cff8c [ 215.210682][T12502] SELinux: failed to load policy [ 215.234606][T12523] vhci_hcd vhci_hcd.0: invalid port number 97 [ 215.240845][T12523] vhci_hcd vhci_hcd.0: invalid port number 97 [ 215.289152][T11587] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 215.359178][T12533] loop5: detected capacity change from 0 to 512 [ 215.384266][T12533] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 215.392303][T12533] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 215.407819][T12533] EXT4-fs (loop5): orphan cleanup on readonly fs [ 215.414472][T12533] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 215.429263][T12533] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 215.438568][T12533] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2670: bg 0: block 40: padding at end of block bitmap is not set [ 215.460025][T12533] EXT4-fs (loop5): Remounting filesystem read-only [ 215.466899][T12533] EXT4-fs (loop5): 1 truncate cleaned up [ 215.473203][T12533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 215.543248][T12550] FAULT_INJECTION: forcing a failure. [ 215.543248][T12550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.556522][T12550] CPU: 1 UID: 0 PID: 12550 Comm: syz.4.2678 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 215.556566][T12550] Tainted: [W]=WARN [ 215.556576][T12550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.556589][T12550] Call Trace: [ 215.556595][T12550] [ 215.556603][T12550] __dump_stack+0x1d/0x30 [ 215.556630][T12550] dump_stack_lvl+0x95/0xd0 [ 215.556723][T12550] dump_stack+0x15/0x1b [ 215.556759][T12550] should_fail_ex+0x263/0x280 [ 215.556792][T12550] should_fail+0xb/0x20 [ 215.556821][T12550] should_fail_usercopy+0x1a/0x20 [ 215.556857][T12550] _copy_from_iter+0xcf/0xea0 [ 215.556884][T12550] ? alloc_pages_mpol+0x217/0x260 [ 215.556928][T12550] copy_page_from_iter+0x178/0x2a0 [ 215.556964][T12550] tun_get_user+0xbbd/0x27c0 [ 215.557149][T12550] ? ref_tracker_alloc+0x1f2/0x2f0 [ 215.557245][T12550] tun_chr_write_iter+0x15e/0x210 [ 215.557268][T12550] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 215.557337][T12550] vfs_write+0x5a6/0x9f0 [ 215.557363][T12550] ksys_write+0xdc/0x1a0 [ 215.557454][T12550] __x64_sys_write+0x40/0x50 [ 215.557474][T12550] x64_sys_call+0x2847/0x3000 [ 215.557500][T12550] do_syscall_64+0xc0/0x2a0 [ 215.557609][T12550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.557631][T12550] RIP: 0033:0x7f8e9e1fb78e [ 215.557647][T12550] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.557666][T12550] RSP: 002b:00007f8e9cc96fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.557687][T12550] RAX: ffffffffffffffda RBX: 00007f8e9cc976c0 RCX: 00007f8e9e1fb78e [ 215.557704][T12550] RDX: 000000000000009a RSI: 0000200000000380 RDI: 00000000000000c8 [ 215.557782][T12550] RBP: 00007f8e9cc97090 R08: 0000000000000000 R09: 0000000000000000 [ 215.557867][T12550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.557880][T12550] R13: 00007f8e9e4b6038 R14: 00007f8e9e4b5fa0 R15: 00007ffc4e49cb28 [ 215.557903][T12550] [ 215.789553][T11587] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.848524][T12565] loop5: detected capacity change from 0 to 512 [ 215.865040][T12565] EXT4-fs: inline encryption not supported [ 215.880357][T12561] openvswitch: netlink: Flow actions attr not present in new flow. [ 215.923385][T12565] EXT4-fs (loop5): 1 orphan inode deleted [ 215.936293][T12565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.948947][T11337] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 215.974302][T12565] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.182633][T12596] openvswitch: netlink: Flow actions attr not present in new flow. [ 216.316843][T12621] loop6: detected capacity change from 0 to 512 [ 216.326911][T12621] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2706: error while reading EA inode 32 err=-116 [ 216.342823][T12621] EXT4-fs (loop6): Remounting filesystem read-only [ 216.349866][T12621] EXT4-fs (loop6): 1 orphan inode deleted [ 216.356621][T12621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.391959][ T5156] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.454211][T12632] __nla_validate_parse: 2 callbacks suppressed [ 216.454230][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2711'. [ 216.488491][T12632] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 216.505100][T12632] loop6: detected capacity change from 0 to 512 [ 216.514031][T12632] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.543644][T12632] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2711'. [ 216.587974][T12640] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2714'. [ 216.599072][T12637] openvswitch: netlink: Flow actions attr not present in new flow. [ 216.657626][T12647] FAULT_INJECTION: forcing a failure. [ 216.657626][T12647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.670795][T12647] CPU: 1 UID: 0 PID: 12647 Comm: syz.6.2717 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.670892][T12647] Tainted: [W]=WARN [ 216.670902][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.670919][T12647] Call Trace: [ 216.670928][T12647] [ 216.670938][T12647] __dump_stack+0x1d/0x30 [ 216.670970][T12647] dump_stack_lvl+0x95/0xd0 [ 216.670999][T12647] dump_stack+0x15/0x1b [ 216.671070][T12647] should_fail_ex+0x263/0x280 [ 216.671112][T12647] should_fail+0xb/0x20 [ 216.671184][T12647] should_fail_usercopy+0x1a/0x20 [ 216.671227][T12647] _copy_to_user+0x20/0xa0 [ 216.671254][T12647] simple_read_from_buffer+0xb5/0x130 [ 216.671302][T12647] proc_fail_nth_read+0x10e/0x150 [ 216.671429][T12647] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.671464][T12647] vfs_read+0x1ab/0x7f0 [ 216.671489][T12647] ? __rcu_read_unlock+0x4e/0x70 [ 216.671528][T12647] ? __fget_files+0x184/0x1c0 [ 216.671595][T12647] ? mutex_lock+0x57/0x90 [ 216.671627][T12647] ksys_read+0xdc/0x1a0 [ 216.671682][T12647] __x64_sys_read+0x40/0x50 [ 216.671726][T12647] x64_sys_call+0x2889/0x3000 [ 216.671825][T12647] do_syscall_64+0xc0/0x2a0 [ 216.671861][T12647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.671885][T12647] RIP: 0033:0x7f7304a7b78e [ 216.671902][T12647] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.671930][T12647] RSP: 002b:00007f7303516fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.671952][T12647] RAX: ffffffffffffffda RBX: 00007f73035176c0 RCX: 00007f7304a7b78e [ 216.671968][T12647] RDX: 000000000000000f RSI: 00007f73035170a0 RDI: 0000000000000004 [ 216.671987][T12647] RBP: 00007f7303517090 R08: 0000000000000000 R09: 0000000000000000 [ 216.672079][T12647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.672127][T12647] R13: 00007f7304d36038 R14: 00007f7304d35fa0 R15: 00007ffc1576cbd8 [ 216.672151][T12647] [ 216.677749][T12649] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 216.915355][ T3307] udevd[3307]: symlink '../../loop6' '/dev/disk/by-diskseq/594.tmp-b7:6' failed: Read-only file system [ 217.021106][ T5555] udevd[5555]: symlink '../../loop0' '/dev/disk/by-diskseq/585.tmp-b7:0' failed: Read-only file system [ 217.058210][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/585.tmp-b7:0' failed: Read-only file system [ 217.112838][ T5555] udevd[5555]: symlink '../../loop6' '/dev/disk/by-diskseq/594.tmp-b7:6' failed: Read-only file system [ 217.125764][T11587] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.136525][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/585.tmp-b7:0' failed: Read-only file system [ 217.176599][ T3307] udevd[3307]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 217.197258][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/590.tmp-b7:5' failed: Read-only file system [ 217.212722][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/590.tmp-b7:5' failed: Read-only file system [ 217.230391][ T5555] udevd[5555]: symlink '../../loop6' '/dev/disk/by-diskseq/594.tmp-b7:6' failed: Read-only file system [ 217.257007][ T3303] udevd[3303]: symlink '../../loop0' '/dev/disk/by-diskseq/585.tmp-b7:0' failed: Read-only file system [ 217.299026][T12678] loop0: detected capacity change from 0 to 512 [ 217.352078][T12678] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 217.352113][T12678] EXT4-fs: failed to create workqueue [ 217.367207][T12678] EXT4-fs (loop0): mount failed [ 217.414395][T12689] loop5: detected capacity change from 0 to 1024 [ 217.430641][T12689] EXT4-fs: Ignoring removed oldalloc option [ 217.436735][T12689] EXT4-fs: Ignoring removed orlov option [ 217.447385][T12689] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 217.460307][T12689] System zones: 0-1, 3-12 [ 217.465395][T12689] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.596920][T12689] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2736'. [ 217.659090][T11587] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 217.837015][T12736] loop5: detected capacity change from 0 to 512 [ 217.849948][T12736] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 217.913103][T12739] netem: incorrect ge model size [ 217.918178][T12739] netem: change failed [ 218.204469][T12752] 9pnet_fd: Insufficient options for proto=fd [ 218.233779][T12752] loop6: detected capacity change from 0 to 512 [ 218.294064][T12752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.367123][T12752] ext4 filesystem being mounted at /470/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 218.421553][T12752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.812295][T12788] loop5: detected capacity change from 0 to 128 [ 218.822637][T12787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2767'. [ 218.838663][T12788] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict' [ 218.889332][T12793] xt_hashlimit: max too large, truncated to 1048576 [ 218.900424][T12795] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.025159][T12805] EXT4-fs (loop6): orphan cleanup on readonly fs [ 219.033095][T12805] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 219.050862][T12805] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 219.057772][T12805] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2775: bad orphan inode 4095 [ 219.070002][T12805] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.102863][ T5156] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 219.223815][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2782'. [ 219.300672][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 219.300687][ T29] audit: type=1400 audit(2000000317.704:3400): avc: denied { read } for pid=12829 comm="syz.5.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.303481][T12837] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2782'. [ 219.345640][ T29] audit: type=1326 audit(2000000317.744:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12831 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f72665aaeb9 code=0x7ffc0000 [ 219.426807][ T29] audit: type=1326 audit(2000000317.834:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f72665aaeb9 code=0x7ffc0000 [ 219.429132][T12840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.468153][T12840] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.516390][ T6748] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.575660][T12847] EXT4-fs (loop0): orphan cleanup on readonly fs [ 219.587820][T12847] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 219.601741][T12847] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 219.617092][T12847] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 219.623863][T12847] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2788: bad orphan inode 4095 [ 219.635113][T12847] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.715959][ T6748] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 219.748672][T12850] C: renamed from team_slave_0 (while UP) [ 219.777551][T12850] validate_nla: 58 callbacks suppressed [ 219.777573][T12850] netlink: 'syz.0.2789': attribute type 4 has an invalid length. [ 219.791163][T12850] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2789'. [ 219.800272][T12850] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 219.847321][ T29] audit: type=1400 audit(2000000318.244:3403): avc: denied { search } for pid=12852 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.869600][ T29] audit: type=1400 audit(2000000318.244:3404): avc: denied { search } for pid=12852 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.892449][ T29] audit: type=1400 audit(2000000318.244:3405): avc: denied { search } for pid=12852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.915645][ T29] audit: type=1400 audit(2000000318.244:3406): avc: denied { search } for pid=12852 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.939010][ T29] audit: type=1400 audit(2000000318.254:3407): avc: denied { read open } for pid=12855 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.964662][ T29] audit: type=1400 audit(2000000318.254:3408): avc: denied { getattr } for pid=12855 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.085384][T12862] openvswitch: netlink: Flow actions attr not present in new flow. [ 220.124014][T12873] set_capacity_and_notify: 3 callbacks suppressed [ 220.124035][T12873] loop5: detected capacity change from 0 to 512 [ 220.128908][T12875] netem: incorrect ge model size [ 220.141856][T12875] netem: change failed [ 220.173262][T12873] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #3: comm syz.5.2792: corrupted inode contents [ 220.225680][T12873] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #3: comm syz.5.2792: mark_inode_dirty error [ 220.253032][T12873] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #3: comm syz.5.2792: corrupted inode contents [ 220.265222][T12873] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.2792: mark_inode_dirty error [ 220.277659][T12873] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2792: Failed to acquire dquot type 0 [ 220.305728][T12873] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.2792: corrupted inode contents [ 220.325221][T12873] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #16: comm syz.5.2792: mark_inode_dirty error [ 220.337663][T12873] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.2792: corrupted inode contents [ 220.349852][T12873] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2792: mark_inode_dirty error [ 220.364949][T12873] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.2792: corrupted inode contents [ 220.382769][T12887] netem: incorrect ge model size [ 220.387890][T12887] netem: change failed [ 220.394877][T12873] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 220.403845][T12873] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.2792: corrupted inode contents [ 220.416256][T12873] EXT4-fs error (device loop5): ext4_truncate:4635: inode #16: comm syz.5.2792: mark_inode_dirty error [ 220.448006][T12892] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.501734][T12873] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 220.511284][T12873] EXT4-fs (loop5): 1 truncate cleaned up [ 220.529086][T12888] loop6: detected capacity change from 0 to 512 [ 220.552577][T12873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.569854][T12888] EXT4-fs: Ignoring removed oldalloc option [ 220.630071][T12888] EXT4-fs (loop6): Number of reserved GDT blocks insanely large: 1901 [ 220.654854][T12873] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.729731][T12873] netlink: 'syz.5.2792': attribute type 5 has an invalid length. [ 220.743670][T12873] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 220.770428][T12888] loop6: detected capacity change from 0 to 512 [ 220.803952][T12888] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 220.864917][T12888] EXT4-fs (loop6): Remounting filesystem read-only [ 220.897954][T12888] EXT4-fs (loop6): 1 truncate cleaned up [ 220.945033][T12888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.966948][T11587] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.027017][T12904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2803'. [ 221.057171][ T5156] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.206859][T12920] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2809'. [ 221.227608][T12918] Unsupported ieee802154 address type: 0 [ 221.259436][T12920] loop5: detected capacity change from 0 to 512 [ 221.287335][T12920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.329111][T12920] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.2809: ea_inode with extended attributes [ 221.375296][T12920] EXT4-fs (loop5): Remounting filesystem read-only [ 221.383268][T12928] lo: Caught tx_queue_len zero misconfig [ 221.409938][T12920] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 221.444119][T12928] netem: incorrect ge model size [ 221.449156][T12928] netem: change failed [ 221.465628][T12920] EXT4-fs (loop5): 1 orphan inode deleted [ 221.471931][T12920] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.515387][T12920] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 221.655795][T12937] bridge_slave_1: left allmulticast mode [ 221.661552][T12937] bridge_slave_1: left promiscuous mode [ 221.667400][T12937] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.751539][T12938] loop5: detected capacity change from 0 to 4096 [ 221.797027][T12938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.893575][T11587] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.942099][ T3307] udevd[3307]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 221.983971][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/620.tmp-b7:5' failed: Read-only file system [ 222.021276][T12964] FAULT_INJECTION: forcing a failure. [ 222.021276][T12964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.034523][T12964] CPU: 0 UID: 0 PID: 12964 Comm: syz.5.2819 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 222.034559][T12964] Tainted: [W]=WARN [ 222.034566][T12964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.034579][T12964] Call Trace: [ 222.034587][T12964] [ 222.034624][T12964] __dump_stack+0x1d/0x30 [ 222.034656][T12964] dump_stack_lvl+0x95/0xd0 [ 222.034685][T12964] dump_stack+0x15/0x1b [ 222.034708][T12964] should_fail_ex+0x263/0x280 [ 222.034742][T12964] should_fail+0xb/0x20 [ 222.034778][T12964] should_fail_usercopy+0x1a/0x20 [ 222.034819][T12964] _copy_from_user+0x1c/0xb0 [ 222.034894][T12964] restore_altstack+0x4b/0x300 [ 222.034928][T12964] ? _raw_spin_unlock_irq+0x9/0x30 [ 222.034948][T12964] ? __set_current_blocked+0x284/0x2e0 [ 222.034992][T12964] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 222.035030][T12964] ? arch_do_signal_or_restart+0x2c2/0x450 [ 222.035097][T12964] ? exit_to_user_mode_loop+0xef/0x6f0 [ 222.035128][T12964] ? __rcu_read_unlock+0x4e/0x70 [ 222.035179][T12964] x64_sys_call+0x274a/0x3000 [ 222.035256][T12964] do_syscall_64+0xc0/0x2a0 [ 222.035295][T12964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.035364][T12964] RIP: 0033:0x7f45d4c7c2d9 [ 222.035386][T12964] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 222.035412][T12964] RSP: 002b:00007f45d36b0a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 222.035440][T12964] RAX: ffffffffffffffda RBX: 00007f45d4f56090 RCX: 00007f45d4c7c2d9 [ 222.035492][T12964] RDX: 00007f45d36b0a80 RSI: 00007f45d36b0bb0 RDI: 0000000000000021 [ 222.035510][T12964] RBP: 00007f45d36b1090 R08: 0000000000000000 R09: 0000000000000000 [ 222.035528][T12964] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 222.035581][T12964] R13: 00007f45d4f56128 R14: 00007f45d4f56090 R15: 00007ffd92244888 [ 222.035603][T12964] [ 222.270618][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/620.tmp-b7:5' failed: Read-only file system [ 222.293254][T12967] __nla_validate_parse: 2 callbacks suppressed [ 222.293273][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2820'. [ 222.312208][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/621.tmp-b7:5' failed: Read-only file system [ 222.394684][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/621.tmp-b7:5' failed: Read-only file system [ 222.411512][ T5555] udevd[5555]: symlink '../../loop0' '/dev/disk/by-diskseq/611.tmp-b7:0' failed: Read-only file system [ 222.454880][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/611.tmp-b7:0' failed: Read-only file system [ 222.464241][T12971] openvswitch: netlink: Flow actions attr not present in new flow. [ 222.489344][T12977] netem: incorrect ge model size [ 222.494342][T12977] netem: change failed [ 222.511122][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/611.tmp-b7:0' failed: Read-only file system [ 222.538149][ T5555] udevd[5555]: symlink '../../loop5' '/dev/disk/by-diskseq/621.tmp-b7:5' failed: Read-only file system [ 222.585183][T12984] netlink: 'syz.0.2827': attribute type 1 has an invalid length. [ 222.646030][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/621.tmp-b7:5' failed: Read-only file system [ 222.671719][T12988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56092 sclass=netlink_route_socket pid=12988 comm=syz.0.2827 [ 222.707983][T12990] netlink: 'syz.9.2830': attribute type 10 has an invalid length. [ 222.715930][T12990] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2830'. [ 222.760115][T12990] dummy0: entered promiscuous mode [ 222.765397][T12990] dummy0: entered allmulticast mode [ 222.770969][ T9] page_pool_release_retry() stalled pool shutdown: id 141, 1 inflight 61 sec [ 222.781701][T12990] bond0: (slave dummy0): Releasing backup interface [ 222.790522][T12990] bridge0: port 2(dummy0) entered blocking state [ 222.797078][T12990] bridge0: port 2(dummy0) entered disabled state [ 223.011011][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2837'. [ 223.043687][T13022] netlink: 'syz.5.2837': attribute type 1 has an invalid length. [ 223.167520][T13035] netem: incorrect ge model size [ 223.172554][T13035] netem: change failed [ 223.287035][T13041] netem: incorrect ge model size [ 223.292259][T13041] netem: change failed [ 223.992267][T13097] loop5: detected capacity change from 0 to 1024 [ 224.026053][T13097] EXT4-fs: Ignoring removed oldalloc option [ 224.030923][T13099] netlink: 'syz.9.2871': attribute type 10 has an invalid length. [ 224.032112][T13097] EXT4-fs: Ignoring removed orlov option [ 224.072961][T13102] loop0: detected capacity change from 0 to 128 [ 224.087188][T13103] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2871'. [ 224.098095][T13102] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 224.126133][T13097] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 224.135602][T13097] System zones: 0-1, 3-12 [ 224.142178][T13103] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2871'. [ 224.164009][T13097] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.220775][T13096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2868'. [ 224.235981][T11345] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 224.260068][T13097] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2870'. [ 224.306252][T11587] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 224.408147][T13119] netlink: 'syz.5.2877': attribute type 13 has an invalid length. [ 224.468615][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 224.468658][ T29] audit: type=1400 audit(2000000322.874:3479): avc: denied { read } for pid=13118 comm="syz.5.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 224.552503][ T29] audit: type=1400 audit(2000000322.904:3480): avc: denied { read write } for pid=13118 comm="syz.5.2877" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 224.576904][ T29] audit: type=1400 audit(2000000322.904:3481): avc: denied { open } for pid=13118 comm="syz.5.2877" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 224.693331][T13119] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.700637][T13119] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.067403][T13119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.182401][T13119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.786098][T11345] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.795099][T11345] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.843303][T11345] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.858906][T11345] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.909883][T13164] netem: incorrect ge model size [ 225.914888][T13164] netem: change failed [ 226.241814][ T29] audit: type=1400 audit(2000000324.644:3482): avc: denied { create } for pid=13198 comm="syz.9.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 226.312458][T13203] netem: incorrect ge model size [ 226.317563][T13203] netem: change failed [ 226.341994][ T29] audit: type=1400 audit(2000000324.664:3483): avc: denied { setopt } for pid=13198 comm="syz.9.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 226.361609][ T29] audit: type=1400 audit(2000000324.714:3484): avc: denied { write } for pid=13198 comm="syz.9.2910" path="socket:[41947]" dev="sockfs" ino=41947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 226.385157][T13205] loop0: detected capacity change from 0 to 1024 [ 226.392223][T13205] EXT4-fs: Ignoring removed oldalloc option [ 226.398242][T13205] EXT4-fs: Ignoring removed orlov option [ 226.428089][ T29] audit: type=1400 audit(2000000324.834:3485): avc: denied { create } for pid=13208 comm="syz.9.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 226.466114][T13205] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 226.475858][T13205] System zones: 0-1, 3-12 [ 226.481067][T13205] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.508670][ T29] audit: type=1400 audit(2000000324.854:3486): avc: denied { write } for pid=13208 comm="syz.9.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 226.542104][T13215] Set syz1 is full, maxelem 65536 reached [ 226.554968][T13205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2913'. [ 226.658103][ T6748] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 226.777513][T13232] 9p: Bad value for 'wfdno' [ 226.871394][T13219] bridge0: port 3(macvlan1) entered disabled state [ 226.878538][T13219] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.885780][T13219] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.907114][ T29] audit: type=1400 audit(2000000325.314:3487): avc: denied { remount } for pid=13235 comm="syz.9.2925" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 227.107400][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/627.tmp-b7:0' failed: Read-only file system [ 227.165535][ T29] audit: type=1400 audit(2000000325.564:3488): avc: denied { create } for pid=13246 comm="syz.9.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.188688][T13219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.233936][ T3307] udevd[3307]: symlink '../../loop0' '/dev/disk/by-diskseq/627.tmp-b7:0' failed: Read-only file system [ 227.257162][T13219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.456813][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/625.tmp-b7:5' failed: Read-only file system [ 227.508204][T13219] veth1_vlan: left allmulticast mode [ 227.515644][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/625.tmp-b7:5' failed: Read-only file system [ 227.609460][T13219] bond1: left allmulticast mode [ 227.614477][T13219] bond1: left promiscuous mode [ 227.636473][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/625.tmp-b7:5' failed: Read-only file system [ 227.727065][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/625.tmp-b7:5' failed: Read-only file system [ 227.746449][T11348] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.771117][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2935'. [ 227.782733][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2935'. [ 227.784151][ T5555] udevd[5555]: symlink '../../loop6' '/dev/disk/by-diskseq/617.tmp-b7:6' failed: Read-only file system [ 227.805866][T11348] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.841778][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/625.tmp-b7:5' failed: Read-only file system [ 227.865788][T11348] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.874784][T11348] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.880099][ T3303] udevd[3303]: symlink '../../loop0' '/dev/disk/by-diskseq/627.tmp-b7:0' failed: Read-only file system [ 227.936651][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2940'. [ 227.940155][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/625.tmp-b7:5' failed: Read-only file system [ 227.981189][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2940'. [ 228.095839][T13302] ip6tnl0: Caught tx_queue_len zero misconfig [ 228.141181][T13302] lo speed is unknown, defaulting to 1000 [ 228.274613][T13290] netlink: 'syz.4.2936': attribute type 4 has an invalid length. [ 228.282522][T13290] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2936'. [ 228.292645][T13309] mmap: syz.0.2948 (13309): VmData 29204480 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 228.350149][T13313] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2949'. [ 228.457029][T13320] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2951'. [ 228.729659][T13347] tmpfs: Bad value for 'nr_inodes' [ 228.733561][T13342] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2959'. [ 228.831516][T13351] vlan2: entered allmulticast mode [ 228.836743][T13351] veth0_to_bond: entered allmulticast mode [ 228.937043][T13360] netem: incorrect ge model size [ 228.942041][T13360] netem: change failed [ 228.986180][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2970'. [ 229.026136][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2973'. [ 229.041958][T13371] netlink: 'syz.6.2973': attribute type 2 has an invalid length. [ 229.049791][T13371] netlink: 'syz.6.2973': attribute type 2 has an invalid length. [ 229.057763][T13371] netlink: 'syz.6.2973': attribute type 2 has an invalid length. [ 229.065549][T13371] netlink: 'syz.6.2973': attribute type 1 has an invalid length. [ 229.116276][T13376] FAULT_INJECTION: forcing a failure. [ 229.116276][T13376] name failslab, interval 1, probability 0, space 0, times 0 [ 229.129003][T13376] CPU: 0 UID: 0 PID: 13376 Comm: syz.5.2974 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 229.129090][T13376] Tainted: [W]=WARN [ 229.129098][T13376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.129111][T13376] Call Trace: [ 229.129118][T13376] [ 229.129125][T13376] __dump_stack+0x1d/0x30 [ 229.129155][T13376] dump_stack_lvl+0x95/0xd0 [ 229.129184][T13376] dump_stack+0x15/0x1b [ 229.129274][T13376] should_fail_ex+0x263/0x280 [ 229.129314][T13376] should_failslab+0x8c/0xb0 [ 229.129400][T13376] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 229.129427][T13376] ? __alloc_skb+0x2f0/0x4b0 [ 229.129466][T13376] __alloc_skb+0x2f0/0x4b0 [ 229.129503][T13376] ? __alloc_skb+0x219/0x4b0 [ 229.129621][T13376] netlink_ack+0xfd/0x500 [ 229.129730][T13376] netlink_rcv_skb+0x192/0x220 [ 229.129800][T13376] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 229.129905][T13376] nfnetlink_rcv+0x167/0x1720 [ 229.129945][T13376] ? xas_load+0x413/0x430 [ 229.129992][T13376] ? xas_load+0x413/0x430 [ 229.130027][T13376] ? __rcu_read_unlock+0x4e/0x70 [ 229.130067][T13376] ? xa_load+0xb1/0xe0 [ 229.130166][T13376] ? __account_obj_stock+0x211/0x350 [ 229.130196][T13376] ? ___slab_alloc+0x2ea/0xb00 [ 229.130236][T13376] ? obj_cgroup_charge_account+0x122/0x1a0 [ 229.130296][T13376] ? security_inode_alloc+0x37/0x100 [ 229.130341][T13376] ? __rcu_read_unlock+0x4e/0x70 [ 229.130381][T13376] ? _raw_spin_lock_bh+0x56/0xb0 [ 229.130497][T13376] ? should_fail_ex+0xd9/0x280 [ 229.130540][T13376] ? selinux_nlmsg_lookup+0x99/0x890 [ 229.130570][T13376] ? __rcu_read_unlock+0x33/0x70 [ 229.130609][T13376] ? __netlink_lookup+0x276/0x2b0 [ 229.130673][T13376] netlink_unicast+0x5c0/0x690 [ 229.130717][T13376] netlink_sendmsg+0x5c8/0x6f0 [ 229.130753][T13376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.130853][T13376] ____sys_sendmsg+0x5af/0x600 [ 229.130900][T13376] ___sys_sendmsg+0x195/0x1e0 [ 229.130945][T13376] __x64_sys_sendmsg+0xd4/0x160 [ 229.130978][T13376] x64_sys_call+0x17ba/0x3000 [ 229.131065][T13376] do_syscall_64+0xc0/0x2a0 [ 229.131106][T13376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.131147][T13376] RIP: 0033:0x7f45d4cdaeb9 [ 229.131169][T13376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.131195][T13376] RSP: 002b:00007f45d3737028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.131222][T13376] RAX: ffffffffffffffda RBX: 00007f45d4f55fa0 RCX: 00007f45d4cdaeb9 [ 229.131275][T13376] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 229.131293][T13376] RBP: 00007f45d3737090 R08: 0000000000000000 R09: 0000000000000000 [ 229.131311][T13376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.131328][T13376] R13: 00007f45d4f56038 R14: 00007f45d4f55fa0 R15: 00007ffd92244888 [ 229.131357][T13376] [ 229.475896][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 229.475915][ T29] audit: type=1400 audit(2000000327.884:3635): avc: denied { ioctl } for pid=13363 comm="syz.9.2969" path="socket:[43241]" dev="sockfs" ino=43241 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 229.579902][ T29] audit: type=1400 audit(2000000327.884:3636): avc: denied { write } for pid=13392 comm="syz.0.2980" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.928440][ T29] audit: type=1326 audit(2000000328.324:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13412 comm="syz.5.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4cdaeb9 code=0x7ffc0000 [ 229.952070][ T29] audit: type=1326 audit(2000000328.324:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13412 comm="syz.5.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d4cdaeb9 code=0x7ffc0000 [ 229.975798][ T29] audit: type=1326 audit(2000000328.324:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13412 comm="syz.5.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4cdaeb9 code=0x7ffc0000 [ 229.999576][ T29] audit: type=1326 audit(2000000328.324:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13412 comm="syz.5.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d4cdaeb9 code=0x7ffc0000 [ 230.023113][ T29] audit: type=1326 audit(2000000328.324:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13412 comm="syz.5.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4cdaeb9 code=0x7ffc0000 [ 230.046793][ T29] audit: type=1326 audit(2000000328.324:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13412 comm="syz.5.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f45d4cdaeb9 code=0x7ffc0000 [ 230.070338][ T29] audit: type=1326 audit(2000000328.324:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13412 comm="syz.5.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4cdaeb9 code=0x7ffc0000 [ 230.093893][ T29] audit: type=1326 audit(2000000328.334:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13412 comm="syz.5.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45d4cdaeb9 code=0x7ffc0000 [ 230.225022][T13415] netlink: 'syz.6.2988': attribute type 1 has an invalid length. [ 230.265045][T13415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.428543][T11348] tipc: Subscription rejected, illegal request [ 230.553920][T13435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=13435 comm=syz.0.2996 [ 230.666562][T13445] FAULT_INJECTION: forcing a failure. [ 230.666562][T13445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.679863][T13445] CPU: 0 UID: 0 PID: 13445 Comm: syz.0.3001 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 230.679908][T13445] Tainted: [W]=WARN [ 230.679917][T13445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.679932][T13445] Call Trace: [ 230.679939][T13445] [ 230.679949][T13445] __dump_stack+0x1d/0x30 [ 230.679979][T13445] dump_stack_lvl+0x95/0xd0 [ 230.680056][T13445] dump_stack+0x15/0x1b [ 230.680080][T13445] should_fail_ex+0x263/0x280 [ 230.680196][T13445] should_fail+0xb/0x20 [ 230.680228][T13445] should_fail_usercopy+0x1a/0x20 [ 230.680264][T13445] _copy_from_user+0x1c/0xb0 [ 230.680288][T13445] core_sys_select+0x26f/0x730 [ 230.680395][T13445] ? set_user_sigmask+0x8b/0x140 [ 230.680489][T13445] __se_sys_pselect6+0x23c/0x2a0 [ 230.680545][T13445] __x64_sys_pselect6+0x78/0x90 [ 230.680571][T13445] x64_sys_call+0x2e98/0x3000 [ 230.680608][T13445] do_syscall_64+0xc0/0x2a0 [ 230.680718][T13445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.680743][T13445] RIP: 0033:0x7f72665aaeb9 [ 230.680763][T13445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.680856][T13445] RSP: 002b:00007f7265007028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 230.680880][T13445] RAX: ffffffffffffffda RBX: 00007f7266825fa0 RCX: 00007f72665aaeb9 [ 230.680897][T13445] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 230.680917][T13445] RBP: 00007f7265007090 R08: 0000000000000000 R09: 0000000000000000 [ 230.680932][T13445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.680947][T13445] R13: 00007f7266826038 R14: 00007f7266825fa0 R15: 00007ffeadf72228 [ 230.680972][T13445] [ 231.017538][T13462] loop6: detected capacity change from 0 to 128 [ 231.031573][T13448] lo speed is unknown, defaulting to 1000 [ 231.199822][T13478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=13478 comm=syz.9.3014 [ 231.362951][T13503] netlink: 'syz.4.3023': attribute type 10 has an invalid length. [ 231.374148][T13501] FAULT_INJECTION: forcing a failure. [ 231.374148][T13501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.387338][T13501] CPU: 1 UID: 0 PID: 13501 Comm: syz.6.3025 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.387413][T13501] Tainted: [W]=WARN [ 231.387421][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.387434][T13501] Call Trace: [ 231.387441][T13501] [ 231.387450][T13501] __dump_stack+0x1d/0x30 [ 231.387492][T13501] dump_stack_lvl+0x95/0xd0 [ 231.387533][T13501] dump_stack+0x15/0x1b [ 231.387624][T13501] should_fail_ex+0x263/0x280 [ 231.387657][T13501] should_fail+0xb/0x20 [ 231.387712][T13501] should_fail_usercopy+0x1a/0x20 [ 231.387750][T13501] _copy_from_user+0x1c/0xb0 [ 231.387801][T13501] ___sys_recvmsg+0xaa/0x3b0 [ 231.387844][T13501] ? __rcu_read_unlock+0x4e/0x70 [ 231.387900][T13501] __x64_sys_recvmsg+0xd1/0x160 [ 231.387930][T13501] x64_sys_call+0x2cbf/0x3000 [ 231.387957][T13501] do_syscall_64+0xc0/0x2a0 [ 231.388040][T13501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.388069][T13501] RIP: 0033:0x7f7304abaeb9 [ 231.388091][T13501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.388117][T13501] RSP: 002b:00007f7303517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 231.388204][T13501] RAX: ffffffffffffffda RBX: 00007f7304d35fa0 RCX: 00007f7304abaeb9 [ 231.388219][T13501] RDX: 0000000000001102 RSI: 00002000000005c0 RDI: 0000000000000003 [ 231.388234][T13501] RBP: 00007f7303517090 R08: 0000000000000000 R09: 0000000000000000 [ 231.388253][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.388270][T13501] R13: 00007f7304d36038 R14: 00007f7304d35fa0 R15: 00007ffc1576cbd8 [ 231.388309][T13501] [ 231.415923][T13498] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.597480][T13503] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 231.762131][T13518] lo speed is unknown, defaulting to 1000 [ 231.819300][T13518] netlink: 'syz.5.3030': attribute type 4 has an invalid length. [ 232.036395][T13239] hid_parser_main: 169 callbacks suppressed [ 232.036417][T13239] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0 [ 232.049967][T13239] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0 [ 232.057564][T13239] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0 [ 232.065031][T13239] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0 [ 232.072610][T13239] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0 [ 232.080092][T13239] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0 [ 232.087811][T13239] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0 [ 232.095529][T13239] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0 [ 232.103040][T13239] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0 [ 232.110561][T13239] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0 [ 232.125105][T13239] hid-generic 0005:5B44:0004.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 232.169402][ T5555] udevd[5555]: symlink '../../loop5' '/dev/disk/by-diskseq/625.tmp-b7:5' failed: Read-only file system [ 232.240411][T13544] netlink: 'syz.6.3036': attribute type 1 has an invalid length. [ 232.308554][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/625.tmp-b7:5' failed: Read-only file system [ 232.372449][T13561] loop5: detected capacity change from 0 to 164 [ 232.398779][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/630.tmp-b7:5' failed: Read-only file system [ 232.424120][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-label/CDROM.tmp-b7:5' failed: Read-only file system [ 232.436818][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:5' failed: Read-only file system [ 232.456387][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/630.tmp-b7:5' failed: Read-only file system [ 232.468384][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-label/CDROM.tmp-b7:5' failed: Read-only file system [ 232.480812][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:5' failed: Read-only file system [ 232.501106][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/630.tmp-b7:5' failed: Read-only file system [ 232.531600][ T3307] udevd[3307]: symlink '../../loop5' '/dev/disk/by-diskseq/630.tmp-b7:5' failed: Read-only file system [ 232.759791][T13590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13590 comm=syz.0.3059 [ 232.798946][T13600] __nla_validate_parse: 11 callbacks suppressed [ 232.798966][T13600] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3062'. [ 232.827308][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3059'. [ 232.836661][T13600] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13600 comm=syz.9.3062 [ 232.865563][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3059'. [ 232.890564][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3059'. [ 232.938895][T13606] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3064'. [ 232.950296][T13606] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3064'. [ 233.062774][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3067'. [ 233.090925][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3068'. [ 233.223255][T13632] FAULT_INJECTION: forcing a failure. [ 233.223255][T13632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.236598][T13632] CPU: 1 UID: 0 PID: 13632 Comm: syz.4.3074 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 233.236699][T13632] Tainted: [W]=WARN [ 233.236709][T13632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.236795][T13632] Call Trace: [ 233.236804][T13632] [ 233.236815][T13632] __dump_stack+0x1d/0x30 [ 233.236848][T13632] dump_stack_lvl+0x95/0xd0 [ 233.236916][T13632] dump_stack+0x15/0x1b [ 233.236943][T13632] should_fail_ex+0x263/0x280 [ 233.237047][T13632] should_fail+0xb/0x20 [ 233.237082][T13632] should_fail_usercopy+0x1a/0x20 [ 233.237118][T13632] _copy_from_user+0x1c/0xb0 [ 233.237202][T13632] ___sys_sendmsg+0xc1/0x1e0 [ 233.237250][T13632] __x64_sys_sendmsg+0xd4/0x160 [ 233.237370][T13632] x64_sys_call+0x17ba/0x3000 [ 233.237448][T13632] do_syscall_64+0xc0/0x2a0 [ 233.237490][T13632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.237515][T13632] RIP: 0033:0x7f8e9e23aeb9 [ 233.237553][T13632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.237577][T13632] RSP: 002b:00007f8e9cc97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.237603][T13632] RAX: ffffffffffffffda RBX: 00007f8e9e4b5fa0 RCX: 00007f8e9e23aeb9 [ 233.237679][T13632] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 233.237692][T13632] RBP: 00007f8e9cc97090 R08: 0000000000000000 R09: 0000000000000000 [ 233.237704][T13632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.237719][T13632] R13: 00007f8e9e4b6038 R14: 00007f8e9e4b5fa0 R15: 00007ffc4e49cb28 [ 233.237743][T13632] [ 233.244861][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3075'. [ 233.417983][T13643] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13643 comm=syz.9.3079 [ 233.431201][T13643] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13643 comm=syz.9.3079 [ 233.493094][T13653] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3082'. [ 233.537782][T13658] can0: slcan on ttyS3. [ 233.872361][T13715] loop6: detected capacity change from 0 to 1024 [ 233.881445][T13715] EXT4-fs: Ignoring removed oldalloc option [ 233.887554][T13715] EXT4-fs: Ignoring removed bh option [ 233.919477][T13715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.288240][T13737] ================================================================== [ 234.296403][T13737] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 234.304349][T13737] [ 234.306697][T13737] write to 0xffff8881414c142c of 4 bytes by task 13715 on cpu 0: [ 234.314457][T13737] xas_set_mark+0x12b/0x140 [ 234.318978][T13737] __folio_start_writeback+0x17b/0x370 [ 234.324462][T13737] ext4_bio_write_folio+0x5ad/0x9f0 [ 234.329676][T13737] mpage_process_page_bufs+0x4a1/0x620 [ 234.335160][T13737] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 234.340973][T13737] ext4_do_writepages+0x9f6/0x2800 [ 234.346120][T13737] ext4_writepages+0x18f/0x320 [ 234.350925][T13737] do_writepages+0x1c6/0x310 [ 234.355552][T13737] file_write_and_wait_range+0x178/0x2f0 [ 234.361214][T13737] generic_buffers_fsync_noflush+0x45/0x130 [ 234.367136][T13737] ext4_sync_file+0x1aa/0x680 [ 234.371838][T13737] vfs_fsync_range+0x10d/0x130 [ 234.376632][T13737] ext4_buffered_write_iter+0x34f/0x3c0 [ 234.382223][T13737] ext4_file_write_iter+0x380/0xf70 [ 234.387458][T13737] iter_file_splice_write+0x6bc/0xa80 [ 234.392851][T13737] direct_splice_actor+0x156/0x2a0 [ 234.397973][T13737] splice_direct_to_actor+0x311/0x670 [ 234.403365][T13737] do_splice_direct+0x119/0x1a0 [ 234.408223][T13737] do_sendfile+0x382/0x650 [ 234.412669][T13737] __x64_sys_sendfile64+0x105/0x150 [ 234.417896][T13737] x64_sys_call+0x2db1/0x3000 [ 234.422604][T13737] do_syscall_64+0xc0/0x2a0 [ 234.427133][T13737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.433075][T13737] [ 234.435422][T13737] read to 0xffff8881414c142c of 4 bytes by task 13737 on cpu 1: [ 234.443051][T13737] __writeback_single_inode+0x201/0x7b0 [ 234.448620][T13737] writeback_single_inode+0x16d/0x3f0 [ 234.454023][T13737] sync_inode_metadata+0x6e/0xa0 [ 234.458977][T13737] generic_buffers_fsync_noflush+0xee/0x130 [ 234.464896][T13737] ext4_sync_file+0x1aa/0x680 [ 234.469580][T13737] vfs_fsync_range+0x10d/0x130 [ 234.474370][T13737] ext4_buffered_write_iter+0x34f/0x3c0 [ 234.480064][T13737] ext4_file_write_iter+0x380/0xf70 [ 234.485304][T13737] iter_file_splice_write+0x6bc/0xa80 [ 234.490682][T13737] direct_splice_actor+0x156/0x2a0 [ 234.495813][T13737] splice_direct_to_actor+0x311/0x670 [ 234.501225][T13737] do_splice_direct+0x119/0x1a0 [ 234.506109][T13737] do_sendfile+0x382/0x650 [ 234.510570][T13737] __x64_sys_sendfile64+0x105/0x150 [ 234.515804][T13737] x64_sys_call+0x2db1/0x3000 [ 234.520529][T13737] do_syscall_64+0xc0/0x2a0 [ 234.525074][T13737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.530980][T13737] [ 234.533317][T13737] value changed: 0x0a000021 -> 0x04000021 [ 234.539036][T13737] [ 234.541383][T13737] Reported by Kernel Concurrency Sanitizer on: [ 234.547558][T13737] CPU: 1 UID: 0 PID: 13737 Comm: syz.6.3097 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.558959][T13737] Tainted: [W]=WARN [ 234.562772][T13737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.572832][T13737] ================================================================== [ 234.590157][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 234.590177][ T29] audit: type=1400 audit(2000000332.994:3944): avc: denied { ioctl } for pid=13758 comm="syz.9.3103" path="socket:[43878]" dev="sockfs" ino=43878 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.632503][ T29] audit: type=1400 audit(2000000333.034:3945): avc: denied { connect } for pid=13758 comm="syz.9.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.686509][T13648] can0 (unregistered): slcan off ttyS3. [ 234.699759][ T5156] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.