last executing test programs: 4m25.146400802s ago: executing program 32 (id=134): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x88000, 0x0) 4m23.812044494s ago: executing program 33 (id=146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m21.789354973s ago: executing program 34 (id=163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x30) open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x51) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r8, &(0x7f0000001440)=""/114, 0x72, 0x101) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000505000400030000000900020073797a32000000000c00078005001500000000000500050002000000050001000600000015000300686173683a69702c706f72742c6e6574000000005037d6646b7169a6f431c594ae8e117935c3737f1bcb80c5808f47ae7dc4dda5f736c5a621b5183899414aacba35f5b3f3f37c38c9cc4ee3bcf9e1dc19bbf396957e5d7ad48a98a8cba7e187f7155159b88e6138b05606443c0c391efaa64caaa57b520f6bb851b303c298a2afe7cafc63d605fd0d4535d73386e334d63ec842f3c664eae198d4c7c1bdb9b388826ef393baca9b3c7706d91d57bff55987aed1c67797f0bf13b9b9f5b32c"], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8937, &(0x7f0000000000)={'hsr0\x00', @random="010000201000"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) 4m19.285523455s ago: executing program 35 (id=192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12], 0x3c}}, 0x0) fchown(r2, 0x0, r3) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (rerun: 64) r13 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r14) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r15, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x200000000000000], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x4) 4m18.195026355s ago: executing program 36 (id=211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000052400000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962"], 0x122}}, 0xc010) 4m16.938955346s ago: executing program 37 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000640)='./file0\x00', 0x272) 4m16.162710275s ago: executing program 38 (id=239): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2ba, &(0x7f0000000880)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDLPyCVy48D3cuXKjuPENBB/AnUUGjtzk5s+0maSpppXO77fpxznfd8856Wnv4nJPPnu1f3T34eD+469+j0Yji0onOnGSRSsqMZVKAQBcCycpxZ8Xur9XK9uaEwCwXQv3/9ozUnbPNr217WkBAFv0wYcfvXf78PDg/TxvRPS/GXazmPyc9N++Hw+iF/fiZjTjyfxZQEqT+J13Dw+imhdacaM/GnaLyv6nvy4+Nijq29GM1vL6dj6xUD8admvxYkSWRTzoFBO5Fc14+Ux90X9wa0l9dOvxeqNcZDH+fjTjt8/jYfTi7viZxnz8r9t5/nb69q8vPy6Si/psNOzujvPm0s5l/24AAAAAAAAAAAAAAAAAAAAAALi+9vOZVtzoF03l+Ts7T8b9+0/1j8/XqYz7J/VZRH0cnDofaJTi++n5OjfzPE/ZJH9+vk81XqlG9coWDgAAAAAAAAAAAAAAAAAAAP8jg0dfHN3p9e4d/ydB+ZL/7LX+i16ns9DyWqxO3p2NNY1WXTl2pklZxOmc9s+f9GctxSI2n/zJS8NaHrFqzrUzLS8U81k/xN8ppZRlqxe4PqidZ6w1wd7qnOID/vG7vTeO7mTrPsPGdJP8sNhVj+PBo1P7J7Ii+OmX822ttNH2q6/IqZc75lzX2fuXf0Rv/jEZrGzJNlhFrQziWduvsdF+voR/PgAAAAAAAAAAAAAAAAAAwFPmL/0u6Xy8srSytUkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCWbf///BsGoLF6ek1IazVrqcTy44iUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwHPgnAAD//ycTaec=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r0, 0x2, 0x0, 0x4) 3m52.160035567s ago: executing program 8 (id=563): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) ptrace(0x10, r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000000051229dc9", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace$getsig(0x4202, r0, 0x5, &(0x7f0000000000)) 3m51.963305432s ago: executing program 4 (id=567): socket$inet6_icmp(0xa, 0x2, 0x3a) mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r1, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3m51.632900864s ago: executing program 8 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0x48, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xd, 0x6, "80098fc5856fc2c4a7"}]}, @NFT_MSG_DELCHAIN={0x140, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0xe9, 0xc, "f9ff9c6801947232d789e834106419eddd8325ecce0e81d9962ab8d02b1aea08e1a914529e4035d103da48361dfb12b636b23ea844b253abd2600fb5b8633fc289e69f750b35b1a937b231fb0d1b723c91d4e3ca016d5d65239badd7913958f4d9866dd05d0accf7e9c56f43b6ec72b9cfca26ff0f054279c0567a55ab0e6d8e11ebbb9a2d8e9e654fc10b9299e68ed2320076cf53e9312d869650740340cd06dc9da13150d8ca4c731c38d54462082465464f0d96aeba908144d3323ea99dfc84360dc375e321815163ed7d6154433f8033ae42480c9f74730bc170d1278a55281f3b1e0c"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x99a31c1b8be4cc23}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1ec}, 0x1, 0x0, 0x0, 0x84}, 0x4000040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a8c000000060a010400000000000000000a0000050900020073797a320000000060000480300001800d00010073796e70726f7879000000001c0002800800034000000000050002000e00000005000200080000002c0001800b0001006e756d67656e00001c0002800800024000000007080001400000000b08000340000000010900010073797a31"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3m51.579445941s ago: executing program 8 (id=572): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m51.324480574s ago: executing program 8 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, 0x0, 0x272) 3m51.270029381s ago: executing program 8 (id=582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010401000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000140c00098008000140000000814000f0b90000010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa9}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xbc, 0x30, 0x400, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ct={0xa4, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7, 0x0, 0xffffffffffffffff}}, @TCA_CT_ACTION={0x6, 0x3, 0x3}]}, {0x5b, 0x6, "43898beb82168bd903908297238db1d0bda0b822b72a34f92e24e531879c9ac42e4d6babbd2db2b84b2efa89e572cff71e85582a1afc1b18ef30870acfe77f164829be00e79cea558c4778c1a291bb4ca89f3320d0f103"}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) fsetxattr$security_capability(r0, &(0x7f0000000180), &(0x7f0000000200)=@v2={0x2000000, [{0x81, 0x3}, {0x5, 0x8}]}, 0x14, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000240)={[{@errors_remount}, {@noload}, {@bh}, {@noquota}, {@noblock_validity}, {}, {@stripe={'stripe', 0x3d, 0x51}}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x521, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HDvd7KZNChygEqXQouwK1k4a2kY9lCIhOFUCyn0JiRNFceIodtpNVEFWHDgiIQRInMqFCxInTkioEheOCKkSnEGAQAi2cEACdirb4+xuMk6yG8fOJt8nTea955n3v+doxn7jp5kALqxnIuLViLiTpum1iJjIygvZErudpbXde7ffWmgtSaTp6/9IIsnKunWlbY/FlWy3SxHxlS9GfD05GLexvbM6X6tVN7N8pbm2UWls71xfWZtfri5X12dnZ16ce2nuhbnpvvRzPCJe+fxfvv+dn3zhlV9++s0/3vjb1W8kWXns68cDKh72YqfrpfZ7ce8Omw8Z7CwqtnuYGcvbYuRAya1TbhMAAL19ICI+ERHXYiJGDv86CwAAADyC0s+Ox/+S7m93B4z2KAcAAAAeIYX2HNikUM7m+45HoVAuR3sO74ficqFWbzQ/tVTfWl/szJWdjFJhaaVWnc7mCk9GKWnlZ9rpu/nn9+VnI+LJiPjexFg7X16o1xaHffEDAAAALogr+8b//57ojP8BAACAc2Zy2A0AAAAATp3xPwAAAJx/xv8AAABwrn3ptddaS9p9/vXiG9tbq/U3ri9WG6vlta2F8kJ9c6O8XK8vt+/Zt3ZUfbV6feMzsb51s9KsNpqVxvbOjbX61nrzxsp9j8AGAAAABujJj73z+yQidl8eay8to8fb9ZibAWdVcS+VZOucw/oPT3TWfx5Qo4CBGBl2A4ChKQ67AcDQlIbdAGDokiNe7zl55zfZ+uP9bQ8AANB/Ux/J//3/6OuCu4UBNA84RQ5iALh42t/zjzuT15cFOFdKZgDChXfi3/+PlKYP1CAAAKDvxttLUihnl/fGo1AolyMebz8WoJQsrdSq0xHxRET8bqL0WCs/094zOXLMAAAAAAAAAAAAAAAAAAAAAAAAAAB0pGkSKQAAAHCuRRT+mvyqcy//qYnnxvdfHxhN/jMR2SNC3/zR6z+4Od9sbs60yv+5V978YVb+/DCuYAAAAMCFUHyQjbvj9O44HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66b3bby10l0HG/fvnImIyL34xLrXXl6IUEZf/lUTxnv2SiBjpQ/yx1p8P58VPWs3aC5kXf+ztk8ffvXVo/JjM3oX98QsRceXk4eFCe6d1/nk17/grxDPtdf7xV4y4L/+wep//Yu/8N9Lj/PP4MWM89e7PKj3j34p4qph//unGT3rEfzavwp9/+0DR1766s9Mrfvp2xFTu509yX6xKc22j0tjeub6yNr9cXa6uz87OvDj30twLc9OVpZVaNfubG+O7H/3FncP6f7lH/Mkj+v9cTn2jOWX/f/fm7Q92kqW8+FefzYn/6x9nWxyMX8g++z6ZpVuvT3XTu530vZ7+6W+fPqz/iz36f9T//2qvSve59uVv/emYmwIAA9DY3lmdr9Wqm2cj8XL0vebWCH/o/Xr0Ev9Nz0QzTjfxzb5WmKZp2jqmTlBPEoN7E5LDmzrsMxMAANBvd7/0D7slAAAAAAAAAAAAAAAAAAAAcHEN4k5j+2Pu7qWSftxCGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgL94PAAD//9Lu4AM=") (async) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000001c0)='./file1\x00', 0x380c8c0, &(0x7f0000000100), 0x0, 0x5f6, &(0x7f0000001440)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async, rerun: 64) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x1, 0x0) (rerun: 64) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x25, "ad341439521bee65ad1094e2b49cfc3510eb95ac9244bb2344f8e31aaed476f761685c8fd6"}, &(0x7f0000000300)=0x2d) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r6 = dup(r5) (async) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0xfff, 0x9}}, './file0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x20, 0x20, 0x8001, 0x7, {{0x8, 0x4, 0x0, 0x26, 0x20, 0x64, 0x0, 0xff, 0x4, 0x0, @loopback, @broadcast, {[@generic={0x94, 0x3, 'O'}, @rr={0x7, 0x7, 0x92, [@empty]}]}}}}}) (async) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000000580)={0xf2c, 0xffffffffffffff64, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bind$rds(r4, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3m51.094702804s ago: executing program 4 (id=587): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) ptrace(0x10, r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000000051229dc9", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace$getsig(0x4202, r0, 0x5, &(0x7f0000000000)) 3m51.021476363s ago: executing program 8 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x30) open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x51) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r8, &(0x7f0000001440)=""/114, 0x72, 0x101) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000505000400030000000900020073797a32000000000c00078005001500000000000500050002000000050001000600000015000300686173683a69702c706f72742c6e6574000000005037d6646b7169a6f431c594ae8e117935c3737f1bcb80c5808f47ae7dc4dda5f736c5a621b5183899414aacba35f5b3f3f37c38c9cc4ee3bcf9e1dc19bbf396957e5d7ad48a98a8cba7e187f7155159b88e6138b05606443c0c391efaa64caaa57b520f6bb851b303c298a2afe7cafc63d605fd0d4535d73386e334d63ec842f3c664eae198d4c7c1bdb9b388826ef393baca9b3c7706d91d57bff55987aed1c67797f0bf13b9b9f5b32c"], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8937, &(0x7f0000000000)={'hsr0\x00', @random="010000201000"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) 3m50.96275696s ago: executing program 39 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x30) open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x51) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r8, &(0x7f0000001440)=""/114, 0x72, 0x101) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8937, &(0x7f0000000000)={'hsr0\x00', @random="010000201000"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) 3m50.582461899s ago: executing program 4 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_CORR={0x10, 0x1, {0xb7c, 0x6d, 0x9}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 3m50.508288249s ago: executing program 4 (id=593): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, 0x0, 0x272) 3m50.469850884s ago: executing program 4 (id=594): setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) removexattr(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='btrfs. ']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) timer_create(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) recvmmsg(0xffffffffffffffff, &(0x7f0000009c80)=[{{&(0x7f0000001140)=@isdn, 0x80, &(0x7f0000001240)=[{&(0x7f0000009e40)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/104, 0x68}], 0x2, &(0x7f0000004280)=""/4096, 0x1000}, 0x40}, {{&(0x7f0000001280)=@pppol2tpin6, 0x80, &(0x7f0000005340)=[{&(0x7f0000003280)=""/216, 0xd8}, {&(0x7f0000001400)=""/8, 0x8}, {&(0x7f00000014c0)=""/171, 0xab}, {&(0x7f0000005280)=""/150, 0x96}, {&(0x7f0000001440)=""/13, 0xd}], 0x5, &(0x7f00000053c0)=""/159, 0x9f}, 0x3}, {{&(0x7f0000005480)=@l2, 0x80, &(0x7f0000005740)=[{&(0x7f0000005500)=""/112, 0x70}, {&(0x7f0000005580)=""/31, 0x1f}, {&(0x7f00000055c0)=""/138, 0x8a}, {&(0x7f0000005680)=""/133, 0x85}], 0x4, &(0x7f0000005780)=""/154, 0x9a}, 0xd04}, {{&(0x7f0000005840)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005c00), 0x0, &(0x7f0000005c80)=""/216, 0xd8}, 0x9}, {{&(0x7f0000005d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000007200)=[{&(0x7f0000005e00)=""/73, 0x49}, {&(0x7f0000005e80)}, {&(0x7f0000005ec0)=""/71, 0x47}, {&(0x7f0000005f40)=""/51, 0x33}, {&(0x7f0000005f80)=""/110, 0x6e}, {&(0x7f0000006000)=""/57, 0x39}, {&(0x7f0000006040)=""/53, 0x35}, {&(0x7f0000007100)=""/207, 0xcf}, {&(0x7f0000006080)=""/7, 0x7}], 0x9, &(0x7f00000072c0)=""/255, 0xff}, 0x3ff}, {{&(0x7f00000073c0)=@nfc_llcp, 0x80, &(0x7f0000009800)=[{&(0x7f0000007440)=""/162, 0xa2}, {&(0x7f0000007500)=""/206, 0xce}, {&(0x7f0000007600)=""/4096, 0x1000}, {&(0x7f0000008600)=""/161, 0xa1}, {&(0x7f00000086c0)=""/4089, 0xff9}, {&(0x7f0000001300)=""/138, 0x8a}, {&(0x7f0000009780)=""/127, 0x7f}], 0x7, &(0x7f0000009880)=""/59, 0x3b}, 0x3ff}, {{&(0x7f00000098c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000009b40)=[{&(0x7f0000009940)=""/10, 0xa}, {&(0x7f0000009980)=""/117, 0x75}, {&(0x7f0000009a00)=""/251, 0xfb}, {&(0x7f0000009b00)=""/52, 0x34}], 0x4, &(0x7f0000009b80)=""/254, 0xfe}, 0x7ce}], 0x7, 0x40010042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x24, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r3 = socket$caif_stream(0x25, 0x1, 0x0) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000160) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8990, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4088, 0xff8}], 0x1}, 0x40000100) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f00000010c0)=0x94, 0x4) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r1) setreuid(0xee00, 0x0) write$P9_RSTAT(r8, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2, 0x2) 3m49.763960004s ago: executing program 4 (id=603): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, 0x0, 0x272) 3m49.698349423s ago: executing program 40 (id=603): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, 0x0, 0x272) 2m41.372322364s ago: executing program 3 (id=1777): socket$inet6_icmp(0xa, 0x2, 0x3a) mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/icmp6\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r1, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m40.473524389s ago: executing program 3 (id=1785): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="080000000400000004000000"], 0x48) 2m40.360154104s ago: executing program 3 (id=1787): r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x30000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setns(0xffffffffffffffff, 0x66020000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000514010029bd7000fbdbdf250800010001000091050003"], 0x20}, 0x1, 0x0, 0x0, 0x2004c000}, 0x2000c016) r4 = accept4(r1, 0x0, 0x0, 0x80000) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018000000000000000000000004000000660000000000000018000000000000000000000000000400950000000080000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00'}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0025}]}) r5 = epoll_create(0x7) epoll_pwait(r5, &(0x7f0000000240)=[{}], 0x1, 0x4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340), 0x8) getsockname$tipc(r4, &(0x7f0000000080), &(0x7f00000000c0)=0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2m39.954554526s ago: executing program 3 (id=1790): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20006, 0x8, 0xfffffffc, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x30, &(0x7f0000000440)={0x11, 0x88a8, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 2m39.753902662s ago: executing program 3 (id=1792): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x3ff, @private0, 0x9}, 0x1c, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x931766f6319eed40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001ff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000007b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r5, 0x0, 0x0}, 0x10) r6 = dup(r2) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x5, 0x0, 0x0, 0x0}) 2m39.678815492s ago: executing program 3 (id=1795): socket$inet6_icmp(0xa, 0x2, 0x3a) mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/icmp6\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, 0xffffffffffffffff, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m24.34410548s ago: executing program 41 (id=1795): socket$inet6_icmp(0xa, 0x2, 0x3a) mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/icmp6\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, 0xffffffffffffffff, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m2.21646801s ago: executing program 9 (id=2282): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c0001000400000000000000080005"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 2m2.139982401s ago: executing program 9 (id=2285): r0 = socket(0x10, 0x3, 0x0) futex(0x0, 0xd, 0x2, &(0x7f0000000780), 0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x50aa) sendmsg$nl_route(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f000000c300)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0x10000, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2m2.071464199s ago: executing program 9 (id=2288): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x6025, 0x4005, 0xb, 0x0, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac0000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x4, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 2m1.126320461s ago: executing program 9 (id=2301): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) clock_nanosleep(0xfcfdffff, 0x0, &(0x7f00000002c0)={0x77359400}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xfffffffffffffeb0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x6004}]}}]}, 0x3c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m0.825400529s ago: executing program 9 (id=2304): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002000180c200000c00000c000e"], 0x34}, 0x1, 0x0, 0x0, 0xc021}, 0x20040010) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3026000, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) r4 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180), 0x800, &(0x7f0000000500)={'trans=virtio,', {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@cachetag}, {@version_u}, {@directio}, {@mmap}, {@afid={'afid', 0x3d, 0x1}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, '//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x31, 0x36, 0x38, 0x31, 0x38, 0x64, 0x35], 0x2d, [0x65, 0x63, 0x61, 0x32], 0x2d, [0x66, 0x30, 0x30, 0x61], 0x2d, [0x37, 0x34, 0x31, 0x36], 0x2d, [0x32, 0x31, 0x35, 0x37, 0x32, 0x32, 0x65, 0x38]}}}, {@euid_gt={'euid>', r4}}, {@smackfshat={'smackfshat', 0x3d, '-{}#'}}, {@permit_directio}, {@euid_eq={'euid', 0x3d, r5}}, {@dont_measure}]}}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000009c0)=@buf) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000038000900000000000021000004000000040000800c000380074306"], 0x24}}, 0x0) truncate(&(0x7f0000000640)='./file0\x00', 0x1) 2m0.704200115s ago: executing program 9 (id=2309): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@ipv6_getnexthop={0x28, 0x6a, 0x309, 0x70bd2b, 0x25dfdbfc, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040800) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x20401, &(0x7f0000000240)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x720}}, {@inode_readahead_blks}, {@errors_remount}], [{@appraise_type}, {@appraise_type}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x20401, &(0x7f0000000240)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x720}}, {@inode_readahead_blks}, {@errors_remount}], [{@appraise_type}, {@appraise_type}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x47, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x189642, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000680)=0xb76e) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000000)=0x1004, 0x4) 1m48.895533851s ago: executing program 2 (id=2463): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) connect(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x3, 0x3, 0x1, 0x3}}, 0x80) close(0x3) open_tree(0xffffffffffffff9c, 0x0, 0x100) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6, 0x2}}, './file0\x00'}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) iopl(0x2) iopl(0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x10}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x44004) 1m48.784935665s ago: executing program 2 (id=2465): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x6025, 0x4005, 0xb, 0x0, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 1m48.653402772s ago: executing program 2 (id=2469): r0 = memfd_create(&(0x7f00000004c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07\x8ex\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x1) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, 0x94) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = open(&(0x7f0000000680)='./file0\x00', 0x40480, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000001280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1m48.022014403s ago: executing program 2 (id=2476): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() getpriority(0x1, r1) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167, @ANYRES8=r1], 0x0, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2) rename(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) r3 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x23, 0x5, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0b0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffd, 0x10000, 0xfffffffd, 0x0, 0x0, 0xdfb}, 0x1c) symlink(&(0x7f0000000200)='./bus\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000180)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}}], 0x1, 0x45) 1m47.784140553s ago: executing program 2 (id=2477): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bind$l2tp(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback, 0x1}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r1) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000640)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000a80)="99", 0x1}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x2, 0x203, 0x4, 0x9, 0x4, 0x8, 0x800, r4}, 0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={r4, 0x29, "bad87bc919ce0c2e241c906573b3e200ece5088a40bd0585322588cd392a3a4a2b0a839ac294ffaeb2"}, &(0x7f00000003c0)=0x31) dup(r2) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e24, 0x100000, @loopback}, 0x1c) getsockname$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c) unshare(0x20040600) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000280)={@multicast2, @multicast1, 0x1, "4c302509b4afdfc9994b13ef97b36a1310c0572034f52c2065159ff8d4362793", 0x0, 0x9, 0x80, 0x4}, 0x3c) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a60010000140a01020000000000000000000000090c0006400000000000000003140008003181eaf2c1874d7e975fe3ef51084375af000800f63282bb8f434e7fe1e38043c6ea4ac9c98183091f1ea408ec8176d4a6ebf3bfa0802d035c8765c517afa2a0fc400e5946700cdf0e56f0485c337c9d6ac924b1dafe719c902ce4c456ebc6bf36566683a0fff8ec02247676d2e4389ea684ff33764ee4ea8e56d44bcad5aaa89c0c7cc983c1c2f2a940bb1e3062b1c47122744a9bfff632d9fa7488a3a6ea6cdf52a62302987e8d5972227d91ed8776fd434572120255db951e0052fcc1be007b000800d1b6c46e307161d3593d261464d517214a6accf9f68ef1ea02779d5d3f94db7a0d152989ec94af9548d72087ceec3e2eee34c29fe819c4a5e5e6566db0c282e342a9142a50eedb639352a3dd2cbcb2d8578f53ce5c46de20f4a6e7c11b743823c5f2c2626db0e436c1ee4c8586c5ff38e04c17b72e46370020000000140a01040000000000000000000000020c000640000000000000000220000000000a01020000000000000000050000050c0004400000000000000003140000001100010000000000000000000700000a"], 0x1c8}, 0x1, 0x0, 0x0, 0x4}, 0x800) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000400)={{r2}, {@val, @actul_num={@void, 0xa359, 0x67}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) 1m47.543765534s ago: executing program 2 (id=2479): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x6025, 0x4005, 0xb, 0x0, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0), &(0x7f00000001c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 1m47.452248096s ago: executing program 42 (id=2479): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x6025, 0x4005, 0xb, 0x0, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0), &(0x7f00000001c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 1m45.714199849s ago: executing program 43 (id=2309): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@ipv6_getnexthop={0x28, 0x6a, 0x309, 0x70bd2b, 0x25dfdbfc, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040800) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x20401, &(0x7f0000000240)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x720}}, {@inode_readahead_blks}, {@errors_remount}], [{@appraise_type}, {@appraise_type}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x20401, &(0x7f0000000240)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x720}}, {@inode_readahead_blks}, {@errors_remount}], [{@appraise_type}, {@appraise_type}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x47, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x189642, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000680)=0xb76e) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000000)=0x1004, 0x4) 4.473941176s ago: executing program 1 (id=3931): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x3) (fail_nth: 5) 4.159952016s ago: executing program 1 (id=3935): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) pipe(&(0x7f0000000180)) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) 3.344021991s ago: executing program 1 (id=3948): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@setlink={0x40, 0x13, 0x5, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40601}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x48000) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x101d0}}], 0x400000000000181, 0x9200000000000000) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x4004) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x8872, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b00)=""/4082, 0xff2}], 0x1}}], 0x1, 0x0, 0x0) 2.264082979s ago: executing program 5 (id=3955): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xffffffffffffff1f, 0x2, {0x1, 0x1000}}}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000000180)={[{@grpquota}, {@lazytime}]}, 0x3, 0xbc0, &(0x7f0000000bc0)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.201869687s ago: executing program 1 (id=3960): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) epoll_create(0xd) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[], 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2000000}, 0x20) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, &(0x7f0000000140)) 2.132139947s ago: executing program 5 (id=3961): r0 = socket(0x2, 0x80805, 0x0) unshare(0x20000400) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) 2.108820839s ago: executing program 5 (id=3965): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x204801, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x3, &(0x7f0000000040)=0x1000000fff, 0x12) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) 1.686406143s ago: executing program 6 (id=3969): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x6025, 0x4005, 0xb, 0x0, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac0000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x4, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0x0) 1.163933911s ago: executing program 1 (id=3971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x40002, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000019c0)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) (async, rerun: 32) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000000)="13dcd453128f4d89225ba190f726c19881d4f62e34140940e7cbe4ca99b2c23aee9e73078f0a2db37ef90f0bbd56cb4adc", 0x31) (rerun: 32) 1.147032973s ago: executing program 5 (id=3973): r0 = socket$inet(0x2, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close(0x3) 847.665051ms ago: executing program 7 (id=3974): socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 798.588027ms ago: executing program 1 (id=3975): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x7, 0xd, 0x1, 0x9}, {0x0, 0x2, 0x7, 0x3}, {0x81, 0x8, 0x3, 0x3ad}, {0x2, 0x7, 0x10, 0xad}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = eventfd2(0xfffffffc, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="6eb3ef930c53dea1", 0x8}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x8}, {}, {0xfff3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\t\x00\n\x00', @ANYRES32=r3, @ANYRES32, @ANYBLOB="080003"], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) 797.730988ms ago: executing program 5 (id=3977): socket(0xa, 0x3, 0x3a) (async) r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_clone3(&(0x7f0000000080)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare(0x40400) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0xe000202b}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) (async) socket(0x11, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x406, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_pidfd_open(r2, 0x0) (async) r8 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r8, 0x21, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000440a00e5bb7d8bebecf63500"/32], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) (async) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r9, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x7, 0x8000, 0x10001, 0x8, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, {[@cipso={0x86, 0x3d, 0x3, [{0x6, 0x5, "2c2fa6"}, {0x1, 0xb, "c2c1e04e167d9c5e6c"}, {0x0, 0x2}, {0x5, 0x4, "a2b5"}, {0x6, 0x7, "f8bd9f7fd4"}, {0x6, 0x12, "2c4398a6bc97d2c926fbdb2e061bc220"}, {0x0, 0x8, "2578a7bde7bb"}]}, @timestamp={0x44, 0x14, 0xc6, 0x0, 0x8, [0x7, 0x7, 0x6, 0x6]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r10, @ANYBLOB="000426bd7000fedbdf25150000003c00018014000200766c616e3100000000000000000000001400020073797a6b616c6c65723000000000000008000100", @ANYRES32=0x0, @ANYBLOB="00000100", @ANYRES32=r11, @ANYBLOB="400001801400020064756d6d7930000000000000000000001400020076657468315f766972745f7769666900140002007465616d5f736c6176655f3100000000"], 0x90}, 0x1, 0x0, 0x0, 0x4040001}, 0xc0) 797.343128ms ago: executing program 6 (id=3978): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001a1401000000000000000000080003000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000240)=0x8, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x2c}}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001080)={'syzkaller0\x00', 0x4000}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691073000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001d00000000001400", @ANYRES64=r3], 0x38}}, 0x0) 747.398774ms ago: executing program 7 (id=3979): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r1, 0xff80, 0xffffff80, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) 722.898627ms ago: executing program 6 (id=3981): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd672d5115000800fffc010000000200000000e7ff00000001ff02000000000000000000000000000132"], 0x0) 700.53757ms ago: executing program 7 (id=3982): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a01"], 0xa4}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="63a02a3a3409777272"], 0xa) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r4 = socket(0x2, 0x80805, 0x0) unshare(0x20000400) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000100)={0x5, 0x1, {0x2, 0x1, 0x9f, 0x0, 0x7}, 0x1}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xb0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 700.02473ms ago: executing program 0 (id=3983): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a60000000060a0b0400000000000000000200fffe2c00048028000180090001006c61737400000000180002800c00024000000000000000020800014000000fff0900010073797a300000000018000200737990320000000006000740e3c3000014000000000000000000000500000a0000000000"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r2, @ANYRES32=r0], 0x1c}}, 0x0) unshare(0x6a040000) unshare(0x68040200) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000001c0)={'filter\x00', 0x0, [0x47f, 0x7, 0x20000002, 0x1, 0x10005]}, &(0x7f0000000000)=0x54) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0xfffffff6) 636.096778ms ago: executing program 6 (id=3984): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2bc, &(0x7f00000000c0)="$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") mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40041, 0x141) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1494) 594.602174ms ago: executing program 7 (id=3985): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x2000000, 0x3) 545.73932ms ago: executing program 6 (id=3986): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bind$l2tp(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback, 0x1}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r1) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000640)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000a80)="99", 0x1}], 0x1}}], 0x3, 0x48000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x2, 0x203, 0x4, 0x9, 0x4, 0x8, 0x800}, 0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x29, "bad87bc919ce0c2e241c906573b3e200ece5088a40bd0585322588cd392a3a4a2b0a839ac294ffaeb2"}, &(0x7f00000003c0)=0x31) dup(r2) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e24, 0x100000, @loopback}, 0x1c) getsockname$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c) unshare(0x20040600) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000280)={@multicast2, @multicast1, 0x1, "4c302509b4afdfc9994b13ef97b36a1310c0572034f52c2065159ff8d4362793", 0x0, 0x9, 0x80, 0x4}, 0x3c) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4}, 0x800) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000400)={{r2}, {@val, @actul_num={@void, 0xa359, 0x67}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) listen(r6, 0x802) ioctl$FIOCLEX(r0, 0x5451) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0}, 0x0, 0x32, 0x4, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket(0x10, 0x803, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2}]}}}, @IFLA_MTU={0x8, 0x4, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) write$sndseq(r7, 0x0, 0x0) 496.252726ms ago: executing program 7 (id=3987): syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') 495.710936ms ago: executing program 7 (id=3988): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0xae1}, 0x108012, 0x8, 0x800, 0x4, 0x3fe, 0x7fffffff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x6, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 445.810413ms ago: executing program 0 (id=3989): syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x50800000, 0x0, 0x0, 0x0, 0x0, 0x0) 440.363513ms ago: executing program 6 (id=3990): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$eJzs3MFrE1sUx/HzmrRJU9rkweOBgnrQjW6GNv4BGqQFMaDUpqgLYWonGjImZSZEImKzEbf+HcWlO0H9B7oRN+7dFUFw04U40plMm8S0pm3SxPb7gTJ3eu+vc9qm5dxC78adV4+LedfImxUZiauMiNRlUyS1NWr4p3Ed8cdj0qwulya+fz5z++69G5lsdnZedS6zcDmtqlPn3j159vr8h8rE4puptzFZT93f+Jb+sv7/+qmNnwuPCq4WXC2VK2rqUrlcMZdsS5cLbtFQvWVbpmtpoeRaTst83i6vrNTULC1PJlYcy3XVLNW0aNW0UtaKU1PzoVkoqWEYOpmQky3axZrc2vy8mdl12ov0tCL0Xqz1drzTGsfJ1DtP5tb6VRcAABhee/f/Qa+/e/+fXQyuPe7/Rej/+6TecveH/h/HguNkzETj57cV/T8AAAAAAAAAAAAAAAAAAAAAAH+DTc9Lep6XDK/hW0xE4iIS3g+6TvTHAb//VwZULnqs6R/34iL2y2qumguuwXwmLwWxxZJpScoP//XgRf3XRTCeu56dnVbfaONDbuVXq7mIfzaBnw+lgkwgzJ/9dybIq7zfylUb+VFJND8/LUn5r1M+O5veyYfHIaxWc2Ny8UJT3pCkfHwgZbFlua3+5zOq125m254/7q8DAAAAAOA4MHRbqnX/G5z9aPgL4uJv71vmg3ynvw+078+nO+7vo3K6myMqAQAAAADAobm1p0XTti3nAIOYiBwiflwHERmKMtoGV0VkCMo4qkFcRIL36EHiX7fjXaW8LtZERWTgX5Z9DAb9mwkAAABAr+00/fsIfXrRx4oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh5uj0PLFz/21Q4sUe86XGRI/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCHyKwAA//9OCxaA") getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @initdev}, &(0x7f0000000440)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r0, 0x20, &(0x7f0000000700)={&(0x7f0000000580)=""/198, 0xc6, 0x0, &(0x7f0000000680)=""/102, 0x66}}, 0x10) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xaf, &(0x7f00000002c0)=""/175, 0x0, 0x8, '\x00', r2, @fallback=0x1e, r0, 0x8, &(0x7f0000000480)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x0, 0x3, 0x7}, 0x10, 0xffffffffffffffff, r0, 0x7, &(0x7f0000000780)=[r1, r1, r0], &(0x7f00000007c0)=[{0x2, 0x4, 0xc, 0x7}, {0x2, 0x3, 0x4, 0xb}, {0x1, 0x2, 0x1, 0x1}, {0x3, 0x1, 0x10, 0x6047f294d55bc750}, {0x1, 0x3, 0x10, 0xe}, {0x0, 0x3, 0x8, 0xa}, {0x1, 0x3, 0xc, 0x5}], 0x10, 0x3}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) listxattr(0x0, 0x0, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) 259.987547ms ago: executing program 0 (id=3991): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7ffc}, 0x50) 164.157469ms ago: executing program 0 (id=3992): r0 = gettid() timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) 124.841184ms ago: executing program 0 (id=3993): add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000140), 0x0, 0xffffffffffffffff) 80.467449ms ago: executing program 0 (id=3994): sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x700) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r0, 0xc, 0x1, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], 0x0}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, r1, 0x25, 0x1, @val=@netkit={@void, @value=r3, @void, @void, r2}}, 0x1c) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140), 0x0, 0x0, 0x20}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 0s ago: executing program 5 (id=3995): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x6025, 0x4005, 0xb, 0x0, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac0000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x4, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0x0) kernel console output (not intermixed with test programs): llbacks suppressed [ 274.351871][ T29] audit: type=1326 audit(1768819710.109:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15841 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 274.407292][T15846] loop7: detected capacity change from 0 to 128 [ 274.413893][ T29] audit: type=1326 audit(1768819710.109:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15841 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 274.437522][ T29] audit: type=1326 audit(1768819710.109:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15841 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 274.461132][ T29] audit: type=1326 audit(1768819710.149:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15841 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90196db58e code=0x7ffc0000 [ 274.484854][ T29] audit: type=1326 audit(1768819710.149:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15841 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f90196db58e code=0x7ffc0000 [ 274.508225][ T29] audit: type=1326 audit(1768819710.149:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15841 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 274.531866][ T29] audit: type=1326 audit(1768819710.159:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15841 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 274.555408][ T29] audit: type=1326 audit(1768819710.159:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15841 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 274.578990][ T29] audit: type=1326 audit(1768819710.159:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15841 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 274.602543][ T29] audit: type=1326 audit(1768819710.169:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15841 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90196db58e code=0x7ffc0000 [ 274.635599][T15846] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.654898][T15846] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.699705][T15849] loop0: detected capacity change from 0 to 512 [ 274.729906][T15851] loop5: detected capacity change from 0 to 128 [ 274.739819][T15846] 9p: Bad value for 'rfdno' [ 274.749064][T15853] loop0: detected capacity change from 0 to 512 [ 274.764750][T15851] FAT-fs (loop5): bogus number of directory entries (390) [ 274.771923][T15851] FAT-fs (loop5): Can't find a valid FAT filesystem [ 274.804806][T15851] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 274.823186][T15851] SELinux: failed to load policy [ 274.867704][T15864] netlink: 'syz.6.3475': attribute type 19 has an invalid length. [ 274.875601][T15864] netlink: 'syz.6.3475': attribute type 20 has an invalid length. [ 274.911386][T15866] SELinux: failed to load policy [ 275.332268][T15881] netlink: 'syz.7.3480': attribute type 3 has an invalid length. [ 275.395149][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 275.401376][ T3945] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 275.913704][T15898] netlink: 'syz.6.3487': attribute type 19 has an invalid length. [ 275.921620][T15898] netlink: 'syz.6.3487': attribute type 20 has an invalid length. [ 275.973361][T15901] 8021q: VLANs not supported on caif0 [ 275.997816][T15888] EXT4-fs: Ignoring removed orlov option [ 276.005476][T15888] EXT4-fs: inline encryption not supported [ 276.047319][T15905] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 276.059388][T11269] Bluetooth: hci0: Frame reassembly failed (-90) [ 276.066918][T15905] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 276.096042][T15905] 9p: Bad value for 'rfdno' [ 276.173391][T15915] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 276.185734][T15915] __nla_validate_parse: 5 callbacks suppressed [ 276.185746][T15915] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3493'. [ 276.200983][T15915] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3493'. [ 276.261778][T15918] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3494'. [ 276.439229][T15929] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 276.454764][T15929] EXT4-fs (loop7): mount failed [ 276.471282][T15936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3499'. [ 276.519704][T15936] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.3499: inode has both inline data and extents flags [ 276.536934][T15936] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3499: couldn't read orphan inode 15 (err -117) [ 276.608691][T15940] 8021q: VLANs not supported on caif0 [ 276.703287][T15945] netlink: 'syz.7.3502': attribute type 3 has an invalid length. [ 276.730171][T15949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3504'. [ 276.789070][T15953] xt_TCPMSS: Only works on TCP SYN packets [ 276.802400][T15953] EXT4-fs: Ignoring removed orlov option [ 277.615627][T15972] 8021q: VLANs not supported on caif0 [ 277.826907][T15982] netlink: 'syz.7.3516': attribute type 1 has an invalid length. [ 277.835976][T15982] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.875508][T15963] syz.1.3510 (15963) used greatest stack depth: 5072 bytes left [ 277.961091][T15986] lo speed is unknown, defaulting to 1000 [ 277.983191][T15990] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3520'. [ 278.086021][T15998] set_capacity_and_notify: 9 callbacks suppressed [ 278.086047][T15998] loop0: detected capacity change from 0 to 2048 [ 278.106170][ T3945] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 278.113745][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3524'. [ 278.122753][T16000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3524'. [ 278.131761][T16000] netlink: 'syz.1.3524': attribute type 19 has an invalid length. [ 278.139621][T16000] netlink: 'syz.1.3524': attribute type 20 has an invalid length. [ 278.166321][T15990] vlan2: entered promiscuous mode [ 278.171697][T15990] bridge0: entered promiscuous mode [ 278.258198][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3523'. [ 278.507943][T16032] loop7: detected capacity change from 0 to 128 [ 278.517021][T16032] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 278.536670][T16032] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 278.566500][T16032] 9p: Bad value for 'rfdno' [ 278.631963][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3536'. [ 278.640978][T16038] netlink: 'syz.7.3536': attribute type 19 has an invalid length. [ 278.648885][T16038] netlink: 'syz.7.3536': attribute type 20 has an invalid length. [ 278.760230][T16043] 8021q: VLANs not supported on caif0 [ 278.818378][T16045] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 278.899397][T16047] loop7: detected capacity change from 0 to 512 [ 278.909034][T16047] EXT4-fs warning (device loop7): read_mmp_block:111: Error -117 while reading MMP block 12 [ 279.027900][T16054] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.3543' sets config #-1 [ 279.040288][T16054] xt_TPROXY: Can be used only with -p tcp or -p udp [ 279.200181][T16062] netlink: 'syz.6.3547': attribute type 19 has an invalid length. [ 279.208278][T16062] netlink: 'syz.6.3547': attribute type 20 has an invalid length. [ 279.229464][T16060] loop7: detected capacity change from 0 to 1024 [ 279.269120][T16066] FAULT_INJECTION: forcing a failure. [ 279.269120][T16066] name failslab, interval 1, probability 0, space 0, times 0 [ 279.281828][T16066] CPU: 0 UID: 0 PID: 16066 Comm: syz.6.3548 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 279.281874][T16066] Tainted: [W]=WARN [ 279.281922][T16066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.281934][T16066] Call Trace: [ 279.281940][T16066] [ 279.281947][T16066] __dump_stack+0x1d/0x30 [ 279.281994][T16066] dump_stack_lvl+0x95/0xd0 [ 279.282027][T16066] dump_stack+0x15/0x1b [ 279.282054][T16066] should_fail_ex+0x263/0x280 [ 279.282113][T16066] should_failslab+0x8c/0xb0 [ 279.282222][T16066] __kmalloc_noprof+0xb8/0x580 [ 279.282280][T16066] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 279.282311][T16066] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 279.282348][T16066] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 279.282443][T16066] ? selinux_capable+0x31/0x40 [ 279.282474][T16066] ? security_capable+0x7b/0x90 [ 279.282553][T16066] ? ns_capable+0x7c/0xb0 [ 279.282591][T16066] genl_rcv_msg+0x432/0x470 [ 279.282743][T16066] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 279.282868][T16066] netlink_rcv_skb+0x123/0x220 [ 279.282972][T16066] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.283013][T16066] genl_rcv+0x28/0x40 [ 279.283080][T16066] netlink_unicast+0x5c0/0x690 [ 279.283130][T16066] netlink_sendmsg+0x5c8/0x6f0 [ 279.283158][T16066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.283185][T16066] __sock_sendmsg+0x145/0x170 [ 279.283216][T16066] ____sys_sendmsg+0x31e/0x4a0 [ 279.283392][T16066] ___sys_sendmsg+0x195/0x1e0 [ 279.283465][T16066] __x64_sys_sendmsg+0xd4/0x160 [ 279.283510][T16066] x64_sys_call+0x17ba/0x3000 [ 279.283592][T16066] do_syscall_64+0xc0/0x2a0 [ 279.283621][T16066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.283650][T16066] RIP: 0033:0x7ff4d081acb9 [ 279.283744][T16066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.283827][T16066] RSP: 002b:00007ff4cf277028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.283846][T16066] RAX: ffffffffffffffda RBX: 00007ff4d0a95fa0 RCX: 00007ff4d081acb9 [ 279.283858][T16066] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 279.283873][T16066] RBP: 00007ff4cf277090 R08: 0000000000000000 R09: 0000000000000000 [ 279.283887][T16066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.283974][T16066] R13: 00007ff4d0a96038 R14: 00007ff4d0a95fa0 R15: 00007ffedb484618 [ 279.283999][T16066] [ 279.610546][T16074] loop0: detected capacity change from 0 to 1024 [ 279.623256][T16074] EXT4-fs: Ignoring removed orlov option [ 279.661901][T16074] FAULT_INJECTION: forcing a failure. [ 279.661901][T16074] name failslab, interval 1, probability 0, space 0, times 0 [ 279.674629][T16074] CPU: 0 UID: 0 PID: 16074 Comm: syz.0.3552 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 279.674755][T16074] Tainted: [W]=WARN [ 279.674762][T16074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.674773][T16074] Call Trace: [ 279.674778][T16074] [ 279.674785][T16074] __dump_stack+0x1d/0x30 [ 279.674860][T16074] dump_stack_lvl+0x95/0xd0 [ 279.674878][T16074] dump_stack+0x15/0x1b [ 279.674961][T16074] should_fail_ex+0x263/0x280 [ 279.674984][T16074] should_failslab+0x8c/0xb0 [ 279.675007][T16074] kmem_cache_alloc_noprof+0x68/0x490 [ 279.675030][T16074] ? __es_insert_extent+0x508/0xee0 [ 279.675127][T16074] __es_insert_extent+0x508/0xee0 [ 279.675219][T16074] ? perf_trace_kmalloc+0xe4/0x110 [ 279.675253][T16074] ext4_es_cache_extent+0x28d/0x390 [ 279.675348][T16074] ext4_find_extent+0x336/0x7a0 [ 279.675451][T16074] ext4_ext_map_blocks+0x128/0x38a0 [ 279.675496][T16074] ext4_map_query_blocks+0xae/0x550 [ 279.675550][T16074] ? ext4_es_lookup_extent+0x3ac/0x540 [ 279.675584][T16074] ext4_map_blocks+0x398/0xd70 [ 279.675678][T16074] ext4_getblk+0x128/0x530 [ 279.675765][T16074] ext4_bread_batch+0x5c/0x320 [ 279.675794][T16074] __ext4_find_entry+0x852/0xdf0 [ 279.675872][T16074] ? kmem_cache_alloc_lru_noprof+0x2bb/0x490 [ 279.675897][T16074] ? __rcu_read_unlock+0x4e/0x70 [ 279.675919][T16074] ? d_alloc_parallel+0xc01/0xce0 [ 279.675951][T16074] ext4_lookup+0xcd/0x3a0 [ 279.675990][T16074] __lookup_slow+0x19d/0x260 [ 279.676068][T16074] lookup_slow+0x3c/0x60 [ 279.676093][T16074] path_lookupat+0x2f7/0x500 [ 279.676148][T16074] filename_lookup+0x190/0x390 [ 279.676192][T16074] filename_setxattr+0x56/0x420 [ 279.676221][T16074] path_setxattrat+0x2cd/0x310 [ 279.676275][T16074] __x64_sys_setxattr+0x6e/0x90 [ 279.676305][T16074] x64_sys_call+0xf1e/0x3000 [ 279.676326][T16074] do_syscall_64+0xc0/0x2a0 [ 279.676415][T16074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.676435][T16074] RIP: 0033:0x7f901971acb9 [ 279.676452][T16074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.676537][T16074] RSP: 002b:00007f9018177028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 279.676576][T16074] RAX: ffffffffffffffda RBX: 00007f9019995fa0 RCX: 00007f901971acb9 [ 279.676587][T16074] RDX: 0000200000001400 RSI: 0000200000000100 RDI: 0000200000000380 [ 279.676599][T16074] RBP: 00007f9018177090 R08: 0000000000000000 R09: 0000000000000000 [ 279.676609][T16074] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 279.676620][T16074] R13: 00007f9019996038 R14: 00007f9019995fa0 R15: 00007fff6d739058 [ 279.676660][T16074] [ 279.957254][ T3659] kernel write not supported for file bpf-prog (pid: 3659 comm: kworker/0:10) [ 279.966502][T16084] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 279.973637][T16086] loop5: detected capacity change from 0 to 128 [ 279.985322][T16086] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 279.997553][T16086] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 280.011137][T16086] 9p: Bad value for 'rfdno' [ 280.028947][ T29] kauditd_printk_skb: 589 callbacks suppressed [ 280.028963][ T29] audit: type=1326 audit(1768819715.789:7130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16088 comm="syz.7.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 280.055197][T11255] Bluetooth: hci0: Frame reassembly failed (-90) [ 280.064087][ T29] audit: type=1326 audit(1768819715.789:7131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16088 comm="syz.7.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 280.088580][ T29] audit: type=1326 audit(1768819715.789:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16088 comm="syz.7.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 280.112861][ T29] audit: type=1326 audit(1768819715.789:7133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16088 comm="syz.7.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 280.137040][ T29] audit: type=1326 audit(1768819715.789:7134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16088 comm="syz.7.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 280.160573][ T29] audit: type=1326 audit(1768819715.789:7135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16088 comm="syz.7.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 280.185228][ T29] audit: type=1326 audit(1768819715.789:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16088 comm="syz.7.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 280.208884][ T29] audit: type=1326 audit(1768819715.789:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16088 comm="syz.7.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 280.233072][ T29] audit: type=1326 audit(1768819715.789:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16088 comm="syz.7.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 280.257179][ T29] audit: type=1326 audit(1768819715.789:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16088 comm="syz.7.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 280.307051][T16094] netlink: 'syz.0.3558': attribute type 19 has an invalid length. [ 280.315095][T16094] netlink: 'syz.0.3558': attribute type 20 has an invalid length. [ 280.361218][T16098] 8021q: VLANs not supported on caif0 [ 280.402045][T16100] lo speed is unknown, defaulting to 1000 [ 280.423229][T16102] lo speed is unknown, defaulting to 1000 [ 280.503115][T16110] lo speed is unknown, defaulting to 1000 [ 280.557924][T16108] loop5: detected capacity change from 0 to 1024 [ 280.632165][T16117] loop5: detected capacity change from 0 to 2048 [ 280.702968][T16126] FAULT_INJECTION: forcing a failure. [ 280.702968][T16126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.716837][T16126] CPU: 1 UID: 0 PID: 16126 Comm: syz.5.3569 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 280.717045][T16126] Tainted: [W]=WARN [ 280.717053][T16126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.717065][T16126] Call Trace: [ 280.717071][T16126] [ 280.717078][T16126] __dump_stack+0x1d/0x30 [ 280.717109][T16126] dump_stack_lvl+0x95/0xd0 [ 280.717136][T16126] dump_stack+0x15/0x1b [ 280.717301][T16126] should_fail_ex+0x263/0x280 [ 280.717332][T16126] should_fail+0xb/0x20 [ 280.717367][T16126] should_fail_usercopy+0x1a/0x20 [ 280.717389][T16126] _copy_from_iter+0xcf/0xea0 [ 280.717414][T16126] ? __build_skb_around+0x164/0x1c0 [ 280.717454][T16126] ? __build_skb+0x59/0x70 [ 280.717507][T16126] ? is_vmalloc_addr+0x37/0x90 [ 280.717525][T16126] netlink_sendmsg+0x4ae/0x6f0 [ 280.717546][T16126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.717606][T16126] __sock_sendmsg+0x145/0x170 [ 280.717629][T16126] sock_write_iter+0x1d2/0x210 [ 280.717652][T16126] ? __pfx_sock_write_iter+0x10/0x10 [ 280.717713][T16126] vfs_write+0x5a6/0x9f0 [ 280.717740][T16126] ksys_write+0xdc/0x1a0 [ 280.717760][T16126] __x64_sys_write+0x40/0x50 [ 280.717843][T16126] x64_sys_call+0x2847/0x3000 [ 280.717952][T16126] do_syscall_64+0xc0/0x2a0 [ 280.717977][T16126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.717999][T16126] RIP: 0033:0x7f363a68acb9 [ 280.718018][T16126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.718057][T16126] RSP: 002b:00007f36390e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 280.718081][T16126] RAX: ffffffffffffffda RBX: 00007f363a905fa0 RCX: 00007f363a68acb9 [ 280.718096][T16126] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004 [ 280.718132][T16126] RBP: 00007f36390e7090 R08: 0000000000000000 R09: 0000000000000000 [ 280.718145][T16126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.718159][T16126] R13: 00007f363a906038 R14: 00007f363a905fa0 R15: 00007fff3c5d6e48 [ 280.718183][T16126] [ 280.970445][T16129] FAULT_INJECTION: forcing a failure. [ 280.970445][T16129] name failslab, interval 1, probability 0, space 0, times 0 [ 280.983143][T16129] CPU: 1 UID: 0 PID: 16129 Comm: syz.5.3570 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 280.983201][T16129] Tainted: [W]=WARN [ 280.983208][T16129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.983293][T16129] Call Trace: [ 280.983299][T16129] [ 280.983306][T16129] __dump_stack+0x1d/0x30 [ 280.983327][T16129] dump_stack_lvl+0x95/0xd0 [ 280.983346][T16129] dump_stack+0x15/0x1b [ 280.983436][T16129] should_fail_ex+0x263/0x280 [ 280.983459][T16129] should_failslab+0x8c/0xb0 [ 280.983479][T16129] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 280.983500][T16129] ? __alloc_skb+0x2f0/0x4b0 [ 280.983579][T16129] __alloc_skb+0x2f0/0x4b0 [ 280.983601][T16129] ? __alloc_skb+0x219/0x4b0 [ 280.983624][T16129] inet6_ifmcaddr_notify+0xd6/0x190 [ 280.983700][T16129] __ipv6_dev_mc_dec+0x19f/0x380 [ 280.983737][T16129] ipv6_mc_destroy_dev+0x22e/0x4a0 [ 280.983763][T16129] addrconf_ifdown+0xd39/0xf90 [ 280.983808][T16129] ? tls_dev_event+0x47c/0x9b0 [ 280.983832][T16129] addrconf_notify+0x222/0x8f0 [ 280.983848][T16129] ? __pfx_addrconf_notify+0x10/0x10 [ 280.983897][T16129] raw_notifier_call_chain+0x6f/0x1b0 [ 280.983921][T16129] ? unregister_netdevice_many_notify+0xec7/0x1710 [ 280.983950][T16129] unregister_netdevice_many_notify+0xedb/0x1710 [ 280.984014][T16129] unregister_netdevice_queue+0x1cd/0x200 [ 280.984042][T16129] __tun_detach+0x82c/0xb30 [ 280.984128][T16129] ? __pfx_tun_chr_close+0x10/0x10 [ 280.984157][T16129] tun_chr_close+0x5a/0x100 [ 280.984222][T16129] __fput+0x29b/0x650 [ 280.984246][T16129] ____fput+0x1c/0x30 [ 280.984281][T16129] task_work_run+0x130/0x1a0 [ 280.984350][T16129] exit_to_user_mode_loop+0x1f7/0x6f0 [ 280.984370][T16129] do_syscall_64+0x1d3/0x2a0 [ 280.984389][T16129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.984430][T16129] RIP: 0033:0x7f363a68acb9 [ 280.984443][T16129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.984460][T16129] RSP: 002b:00007f36390e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 280.984476][T16129] RAX: 0000000000000000 RBX: 00007f363a905fa0 RCX: 00007f363a68acb9 [ 280.984544][T16129] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 280.984558][T16129] RBP: 00007f36390e7090 R08: 0000000000000000 R09: 0000000000000000 [ 280.984572][T16129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.984586][T16129] R13: 00007f363a906038 R14: 00007f363a905fa0 R15: 00007fff3c5d6e48 [ 280.984609][T16129] [ 281.313306][T16131] __nla_validate_parse: 12 callbacks suppressed [ 281.313327][T16131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3571'. [ 281.339958][ C1] sd 0:0:1:0: [sda] tag#6748 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 281.350419][ C1] sd 0:0:1:0: [sda] tag#6748 CDB: Read(10) 28 08 f9 9a 33 64 0a 01 [ 281.366575][T16133] loop5: detected capacity change from 0 to 512 [ 281.389037][T16133] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3572: bg 0: block 248: padding at end of block bitmap is not set [ 281.413800][T16133] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.3572: Failed to acquire dquot type 1 [ 281.426481][T16133] EXT4-fs (loop5): 1 truncate cleaned up [ 281.433010][T16133] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.482447][T16145] xt_TPROXY: Can be used only with -p tcp or -p udp [ 281.549678][T16151] tipc: Enabling of bearer rejected, already enabled [ 281.564835][T16155] lo speed is unknown, defaulting to 1000 [ 281.653517][T16161] loop1: detected capacity change from 0 to 4096 [ 281.662538][T16166] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.3585'. [ 281.783501][T16171] EXT4-fs: Ignoring removed nobh option [ 281.789169][T16171] EXT4-fs: inline encryption not supported [ 281.806697][T16169] validate_nla: 2 callbacks suppressed [ 281.806722][T16169] netlink: 'syz.1.3586': attribute type 3 has an invalid length. [ 281.845782][T16171] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3587'. [ 281.896792][T16176] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3588'. [ 281.905968][T16177] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3588'. [ 281.939233][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3589'. [ 281.956004][T16180] bond1: option downdelay: invalid value (18446744073709551615) [ 281.963721][T16180] bond1: option downdelay: allowed values 0 - 2147483647 [ 281.972381][T16180] bond1 (unregistering): Released all slaves [ 281.995390][T16183] FAULT_INJECTION: forcing a failure. [ 281.995390][T16183] name failslab, interval 1, probability 0, space 0, times 0 [ 282.008190][T16183] CPU: 1 UID: 0 PID: 16183 Comm: syz.6.3590 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.008228][T16183] Tainted: [W]=WARN [ 282.008274][T16183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.008319][T16183] Call Trace: [ 282.008327][T16183] [ 282.008335][T16183] __dump_stack+0x1d/0x30 [ 282.008361][T16183] dump_stack_lvl+0x95/0xd0 [ 282.008382][T16183] dump_stack+0x15/0x1b [ 282.008451][T16183] should_fail_ex+0x263/0x280 [ 282.008475][T16183] should_failslab+0x8c/0xb0 [ 282.008499][T16183] __kmalloc_cache_noprof+0x64/0x4a0 [ 282.008529][T16183] ? rtnl_newlink+0x5c/0x1370 [ 282.008578][T16183] ? __pfx_rtnl_newlink+0x10/0x10 [ 282.008601][T16183] rtnl_newlink+0x5c/0x1370 [ 282.008626][T16183] ? try_charge_memcg+0x215/0xa10 [ 282.008775][T16183] ? xas_load+0x413/0x430 [ 282.008811][T16183] ? css_rstat_updated+0xbb/0x280 [ 282.008845][T16183] ? __rcu_read_unlock+0x4e/0x70 [ 282.008938][T16183] ? avc_has_perm_noaudit+0xab/0x130 [ 282.008959][T16183] ? cred_has_capability+0x224/0x290 [ 282.008991][T16183] ? selinux_capable+0x31/0x40 [ 282.009044][T16183] ? security_capable+0x7b/0x90 [ 282.009128][T16183] ? ns_capable+0x7c/0xb0 [ 282.009155][T16183] ? __pfx_rtnl_newlink+0x10/0x10 [ 282.009175][T16183] rtnetlink_rcv_msg+0x64b/0x720 [ 282.009195][T16183] ? avc_has_perm_noaudit+0xab/0x130 [ 282.009275][T16183] netlink_rcv_skb+0x123/0x220 [ 282.009305][T16183] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.009342][T16183] rtnetlink_rcv+0x1c/0x30 [ 282.009361][T16183] netlink_unicast+0x5c0/0x690 [ 282.009392][T16183] netlink_sendmsg+0x5c8/0x6f0 [ 282.009412][T16183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.009452][T16183] __sock_sendmsg+0x145/0x170 [ 282.009502][T16183] ____sys_sendmsg+0x31e/0x4a0 [ 282.009599][T16183] ___sys_sendmsg+0x195/0x1e0 [ 282.009694][T16183] __x64_sys_sendmsg+0xd4/0x160 [ 282.009789][T16183] x64_sys_call+0x17ba/0x3000 [ 282.009811][T16183] do_syscall_64+0xc0/0x2a0 [ 282.009899][T16183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.009918][T16183] RIP: 0033:0x7ff4d081acb9 [ 282.009932][T16183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.009991][T16183] RSP: 002b:00007ff4cf277028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.010008][T16183] RAX: ffffffffffffffda RBX: 00007ff4d0a95fa0 RCX: 00007ff4d081acb9 [ 282.010022][T16183] RDX: 0000000000040004 RSI: 0000200000000080 RDI: 0000000000000003 [ 282.010033][T16183] RBP: 00007ff4cf277090 R08: 0000000000000000 R09: 0000000000000000 [ 282.010044][T16183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.010127][T16183] R13: 00007ff4d0a96038 R14: 00007ff4d0a95fa0 R15: 00007ffedb484618 [ 282.010145][T16183] [ 282.114607][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 282.146373][ T3945] Bluetooth: hci0: command 0x1003 tx timeout [ 282.300057][T16184] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 282.311957][T16180] Symlink component flag not implemented [ 282.318181][T16180] Symlink component flag not implemented (7) [ 282.619912][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3597'. [ 282.645023][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3597'. [ 282.784672][T16213] FAT-fs (loop6): bogus number of directory entries (390) [ 282.791913][T16213] FAT-fs (loop6): Can't find a valid FAT filesystem [ 282.826835][T16208] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 282.862293][T16216] netlink: 'syz.1.3603': attribute type 29 has an invalid length. [ 282.871657][T16208] SELinux: failed to load policy [ 282.995463][T16226] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3606'. [ 283.047668][T16226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3606'. [ 283.076274][T16237] FAULT_INJECTION: forcing a failure. [ 283.076274][T16237] name failslab, interval 1, probability 0, space 0, times 0 [ 283.089047][T16237] CPU: 0 UID: 0 PID: 16237 Comm: syz.0.3610 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 283.089140][T16237] Tainted: [W]=WARN [ 283.089147][T16237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.089159][T16237] Call Trace: [ 283.089165][T16237] [ 283.089171][T16237] __dump_stack+0x1d/0x30 [ 283.089232][T16237] dump_stack_lvl+0x95/0xd0 [ 283.089257][T16237] dump_stack+0x15/0x1b [ 283.089279][T16237] should_fail_ex+0x263/0x280 [ 283.089306][T16237] should_failslab+0x8c/0xb0 [ 283.089331][T16237] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 283.089395][T16237] ? __alloc_skb+0x2f0/0x4b0 [ 283.089437][T16237] __alloc_skb+0x2f0/0x4b0 [ 283.089464][T16237] ? __alloc_skb+0x219/0x4b0 [ 283.089495][T16237] netlink_ack+0xfd/0x500 [ 283.089595][T16237] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 283.089629][T16237] netlink_rcv_skb+0x192/0x220 [ 283.089664][T16237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 283.089695][T16237] genl_rcv+0x28/0x40 [ 283.089742][T16237] netlink_unicast+0x5c0/0x690 [ 283.089823][T16237] netlink_sendmsg+0x5c8/0x6f0 [ 283.089843][T16237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.089860][T16237] __sock_sendmsg+0x145/0x170 [ 283.089883][T16237] ____sys_sendmsg+0x31e/0x4a0 [ 283.089925][T16237] ___sys_sendmsg+0x195/0x1e0 [ 283.089975][T16237] __x64_sys_sendmsg+0xd4/0x160 [ 283.090012][T16237] x64_sys_call+0x17ba/0x3000 [ 283.090039][T16237] do_syscall_64+0xc0/0x2a0 [ 283.090185][T16237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.090212][T16237] RIP: 0033:0x7f901971acb9 [ 283.090228][T16237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.090329][T16237] RSP: 002b:00007f9018177028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.090351][T16237] RAX: ffffffffffffffda RBX: 00007f9019995fa0 RCX: 00007f901971acb9 [ 283.090367][T16237] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 283.090381][T16237] RBP: 00007f9018177090 R08: 0000000000000000 R09: 0000000000000000 [ 283.090396][T16237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.090459][T16237] R13: 00007f9019996038 R14: 00007f9019995fa0 R15: 00007fff6d739058 [ 283.090552][T16237] [ 283.610850][T16251] set_capacity_and_notify: 6 callbacks suppressed [ 283.610864][T16251] loop6: detected capacity change from 0 to 128 [ 283.643731][T16251] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 283.690720][T16251] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 283.695549][T16255] loop0: detected capacity change from 0 to 128 [ 283.738737][T16255] FAT-fs (loop0): bogus number of directory entries (390) [ 283.745925][T16255] FAT-fs (loop0): Can't find a valid FAT filesystem [ 283.814873][T16254] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 283.845768][T16254] SELinux: failed to load policy [ 283.880428][T16257] loop6: detected capacity change from 0 to 512 [ 283.925577][T16261] FAULT_INJECTION: forcing a failure. [ 283.925577][T16261] name failslab, interval 1, probability 0, space 0, times 0 [ 283.938271][T16261] CPU: 0 UID: 0 PID: 16261 Comm: syz.0.3620 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 283.938379][T16261] Tainted: [W]=WARN [ 283.938387][T16261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.938398][T16261] Call Trace: [ 283.938404][T16261] [ 283.938411][T16261] __dump_stack+0x1d/0x30 [ 283.938436][T16261] dump_stack_lvl+0x95/0xd0 [ 283.938459][T16261] dump_stack+0x15/0x1b [ 283.938512][T16261] should_fail_ex+0x263/0x280 [ 283.938534][T16261] should_failslab+0x8c/0xb0 [ 283.938552][T16261] kmem_cache_alloc_noprof+0x68/0x490 [ 283.938582][T16261] ? alloc_empty_file+0x76/0x200 [ 283.938688][T16261] alloc_empty_file+0x76/0x200 [ 283.938712][T16261] alloc_file_pseudo+0xf6/0x190 [ 283.938775][T16261] __shmem_file_setup+0x1dd/0x210 [ 283.938813][T16261] shmem_file_setup+0x3b/0x50 [ 283.938841][T16261] __se_sys_memfd_create+0x2f6/0x6c0 [ 283.938874][T16261] __x64_sys_memfd_create+0x31/0x40 [ 283.938958][T16261] x64_sys_call+0x28cb/0x3000 [ 283.938994][T16261] do_syscall_64+0xc0/0x2a0 [ 283.939020][T16261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.939040][T16261] RIP: 0033:0x7f901971acb9 [ 283.939121][T16261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.939143][T16261] RSP: 002b:00007f9018176e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 283.939166][T16261] RAX: ffffffffffffffda RBX: 0000000000000485 RCX: 00007f901971acb9 [ 283.939181][T16261] RDX: 00007f9018176ee0 RSI: 0000000000000000 RDI: 00007f901978730b [ 283.939219][T16261] RBP: 0000200000000800 R08: 00000000ffffffff R09: 0000000000000000 [ 283.939231][T16261] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000480 [ 283.939243][T16261] R13: 00007f9018176ee0 R14: 00007f9018176ea0 R15: 00002000000000c0 [ 283.939264][T16261] [ 283.940828][T16257] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3618: invalid indirect mapped block 256 (level 2) [ 284.144900][T16257] EXT4-fs (loop6): 2 truncates cleaned up [ 284.174815][T16266] netlink: 'syz.0.3621': attribute type 19 has an invalid length. [ 284.182668][T16266] netlink: 'syz.0.3621': attribute type 20 has an invalid length. [ 284.251073][T16275] loop6: detected capacity change from 0 to 512 [ 284.260170][T16275] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.273980][T16275] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 284.285473][T16275] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.3624: Invalid inode bitmap blk 4 in block_group 0 [ 284.323607][T16275] EXT4-fs (loop6): Remounting filesystem read-only [ 284.618478][T16295] netlink: 'syz.0.3633': attribute type 19 has an invalid length. [ 284.626442][T16295] netlink: 'syz.0.3633': attribute type 20 has an invalid length. [ 284.789306][T16308] loop0: detected capacity change from 0 to 1024 [ 284.874164][T16317] FAULT_INJECTION: forcing a failure. [ 284.874164][T16317] name failslab, interval 1, probability 0, space 0, times 0 [ 284.887557][T16317] CPU: 1 UID: 0 PID: 16317 Comm: syz.5.3642 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 284.887586][T16317] Tainted: [W]=WARN [ 284.887592][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.887603][T16317] Call Trace: [ 284.887609][T16317] [ 284.887617][T16317] __dump_stack+0x1d/0x30 [ 284.887663][T16317] dump_stack_lvl+0x95/0xd0 [ 284.887686][T16317] dump_stack+0x15/0x1b [ 284.887703][T16317] should_fail_ex+0x263/0x280 [ 284.887784][T16317] should_failslab+0x8c/0xb0 [ 284.887804][T16317] __kmalloc_noprof+0xb8/0x580 [ 284.887823][T16317] ? proc_ioctl+0xaf/0x3f0 [ 284.887928][T16317] proc_ioctl+0xaf/0x3f0 [ 284.887944][T16317] ? proc_ioctl_default+0x66/0xa0 [ 284.888040][T16317] proc_ioctl_default+0x71/0xa0 [ 284.888074][T16317] usbdev_ioctl+0xe8d/0x1750 [ 284.888105][T16317] ? __pfx_usbdev_ioctl+0x10/0x10 [ 284.888132][T16317] __se_sys_ioctl+0xce/0x140 [ 284.888166][T16317] __x64_sys_ioctl+0x43/0x50 [ 284.888207][T16317] x64_sys_call+0x14b0/0x3000 [ 284.888235][T16317] do_syscall_64+0xc0/0x2a0 [ 284.888255][T16317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.888291][T16317] RIP: 0033:0x7f363a68acb9 [ 284.888306][T16317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.888325][T16317] RSP: 002b:00007f36390e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.888399][T16317] RAX: ffffffffffffffda RBX: 00007f363a905fa0 RCX: 00007f363a68acb9 [ 284.888472][T16317] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 284.888488][T16317] RBP: 00007f36390e7090 R08: 0000000000000000 R09: 0000000000000000 [ 284.888549][T16317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.888560][T16317] R13: 00007f363a906038 R14: 00007f363a905fa0 R15: 00007fff3c5d6e48 [ 284.888582][T16317] [ 285.103608][T16320] loop1: detected capacity change from 0 to 128 [ 285.115355][T16320] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 285.201255][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 285.201273][ T29] audit: type=1326 audit(1768819720.949:7280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16315 comm="syz.7.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 285.232012][ T29] audit: type=1326 audit(1768819720.949:7281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16315 comm="syz.7.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 285.279889][T16327] bond1: option downdelay: invalid value (18446744073709551615) [ 285.288296][T16327] bond1: option downdelay: allowed values 0 - 2147483647 [ 285.306738][ T29] audit: type=1326 audit(1768819721.069:7282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16315 comm="syz.7.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 285.453040][T16327] bond1 (unregistering): Released all slaves [ 285.479328][T16325] loop0: detected capacity change from 0 to 764 [ 285.585449][T16325] /dev/loop0: Can't open blockdev [ 285.694464][T16336] netlink: 'syz.6.3646': attribute type 19 has an invalid length. [ 285.702521][T16336] netlink: 'syz.6.3646': attribute type 20 has an invalid length. [ 285.787637][ T29] audit: type=1326 audit(1768819721.249:7283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16315 comm="syz.7.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 285.931220][T16338] SELinux: policydb version 505497363 does not match my version range 15-35 [ 285.941047][T16338] SELinux: failed to load policy [ 285.952578][T16338] xt_connbytes: Forcing CT accounting to be enabled [ 285.958799][T16346] SELinux: ebitmap: empty map [ 285.987218][T16346] SELinux: failed to load policy [ 286.044703][T16338] set match dimension is over the limit! [ 286.084777][T16354] lo speed is unknown, defaulting to 1000 [ 286.101860][T16358] netlink: 'syz.5.3655': attribute type 29 has an invalid length. [ 286.109792][T16358] netlink: 'syz.5.3655': attribute type 3 has an invalid length. [ 286.159607][T16361] lo speed is unknown, defaulting to 1000 [ 286.178003][ T29] audit: type=1400 audit(1768819721.939:7284): avc: denied { view } for pid=16364 comm="syz.0.3659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 286.198134][T16357] lo speed is unknown, defaulting to 1000 [ 286.212566][T16366] loop6: detected capacity change from 0 to 512 [ 286.254087][T16366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.297014][T16366] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 286.324759][T16375] loop5: detected capacity change from 0 to 2048 [ 286.357794][ T29] audit: type=1326 audit(1768819722.119:7285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0a17acb9 code=0x7ffc0000 [ 286.381528][ T29] audit: type=1326 audit(1768819722.119:7286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0a17acb9 code=0x7ffc0000 [ 286.405405][T16371] loop0: detected capacity change from 0 to 8192 [ 286.412120][ T29] audit: type=1326 audit(1768819722.119:7287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6f0a17acb9 code=0x7ffc0000 [ 286.436470][ T29] audit: type=1326 audit(1768819722.119:7288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0a17acb9 code=0x7ffc0000 [ 286.460188][ T29] audit: type=1326 audit(1768819722.119:7289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.1.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0a17acb9 code=0x7ffc0000 [ 286.508735][T16375] EXT4-fs mount: 54 callbacks suppressed [ 286.508759][T16375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.541443][T16375] __nla_validate_parse: 10 callbacks suppressed [ 286.541462][T16375] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3663'. [ 286.552054][T16354] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 286.584882][T16354] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 286.595889][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3663'. [ 286.598482][T16354] EXT4-fs (loop6): 1 truncate cleaned up [ 286.617493][T16354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.642170][T16354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3654'. [ 286.689821][T12045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.700914][T12594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.837636][T16397] lo speed is unknown, defaulting to 1000 [ 286.930592][T16400] FAULT_INJECTION: forcing a failure. [ 286.930592][T16400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.943789][T16400] CPU: 0 UID: 0 PID: 16400 Comm: syz.6.3671 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 286.943828][T16400] Tainted: [W]=WARN [ 286.943836][T16400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.943851][T16400] Call Trace: [ 286.943870][T16400] [ 286.943879][T16400] __dump_stack+0x1d/0x30 [ 286.943907][T16400] dump_stack_lvl+0x95/0xd0 [ 286.943987][T16400] dump_stack+0x15/0x1b [ 286.944009][T16400] should_fail_ex+0x263/0x280 [ 286.944037][T16400] should_fail+0xb/0x20 [ 286.944060][T16400] should_fail_usercopy+0x1a/0x20 [ 286.944088][T16400] _copy_to_user+0x20/0xa0 [ 286.944151][T16400] simple_read_from_buffer+0xb5/0x130 [ 286.944193][T16400] proc_fail_nth_read+0x10e/0x150 [ 286.944227][T16400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.944367][T16400] vfs_read+0x1ab/0x7f0 [ 286.944404][T16400] ? ieee802154_sock_bind+0x64/0x90 [ 286.944466][T16400] ? __sys_bind+0x1e9/0x290 [ 286.944500][T16400] ksys_read+0xdc/0x1a0 [ 286.944521][T16400] __x64_sys_read+0x40/0x50 [ 286.944580][T16400] x64_sys_call+0x2889/0x3000 [ 286.944605][T16400] do_syscall_64+0xc0/0x2a0 [ 286.944625][T16400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.944660][T16400] RIP: 0033:0x7ff4d07db58e [ 286.944727][T16400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 286.944750][T16400] RSP: 002b:00007ff4cf276fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.944811][T16400] RAX: ffffffffffffffda RBX: 00007ff4cf2776c0 RCX: 00007ff4d07db58e [ 286.944826][T16400] RDX: 000000000000000f RSI: 00007ff4cf2770a0 RDI: 0000000000000005 [ 286.944839][T16400] RBP: 00007ff4cf277090 R08: 0000000000000000 R09: 0000000000000000 [ 286.944853][T16400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.944911][T16400] R13: 00007ff4d0a96038 R14: 00007ff4d0a95fa0 R15: 00007ffedb484618 [ 286.944931][T16400] [ 287.175354][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3672'. [ 287.197300][T16404] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3672'. [ 287.245081][T16404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16404 comm=syz.6.3672 [ 287.306087][T16410] lo speed is unknown, defaulting to 1000 [ 287.331270][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3677'. [ 287.340253][T16412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3677'. [ 287.349302][T16412] validate_nla: 1 callbacks suppressed [ 287.349320][T16412] netlink: 'syz.5.3677': attribute type 19 has an invalid length. [ 287.363621][T16412] netlink: 'syz.5.3677': attribute type 20 has an invalid length. [ 287.469309][T16420] lo speed is unknown, defaulting to 1000 [ 287.556632][T16437] netlink: 'syz.6.3681': attribute type 29 has an invalid length. [ 287.571940][T16436] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.595899][T16440] netlink: 'syz.5.3682': attribute type 3 has an invalid length. [ 287.660788][T16442] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 287.677694][T16442] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.689577][T16447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3686'. [ 287.734910][T16451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.742323][T16451] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 83886085)! [ 287.753103][T16451] EXT4-fs (loop6): group descriptors corrupted! [ 287.857281][T16457] netlink: 'syz.1.3688': attribute type 1 has an invalid length. [ 287.902612][T16457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.924836][T16461] bond1: (slave geneve2): making interface the new active one [ 287.934278][T16461] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 287.950511][T16459] lo speed is unknown, defaulting to 1000 [ 287.996903][T16463] pim6reg: entered allmulticast mode [ 288.015555][T16463] pim6reg: left allmulticast mode [ 288.061296][T16463] 9p: Bad value for 'wfdno' [ 288.098698][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3691'. [ 288.107636][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3691'. [ 288.116568][T16466] netlink: 'syz.0.3691': attribute type 19 has an invalid length. [ 288.124502][T16466] netlink: 'syz.0.3691': attribute type 20 has an invalid length. [ 288.218155][T16472] lo speed is unknown, defaulting to 1000 [ 288.266246][T16476] lo speed is unknown, defaulting to 1000 [ 288.296426][T16478] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 288.311255][T16478] EXT4-fs (loop0): mount failed [ 288.436439][T14008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.599436][T16504] lo speed is unknown, defaulting to 1000 [ 288.616412][T16506] lo speed is unknown, defaulting to 1000 [ 288.839310][T16518] set_capacity_and_notify: 5 callbacks suppressed [ 288.839331][T16518] loop1: detected capacity change from 0 to 4096 [ 288.896685][T16518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.968930][T16509] lo speed is unknown, defaulting to 1000 [ 289.213912][T16545] 8021q: VLANs not supported on caif0 [ 289.847162][T10665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.938302][T16575] loop5: detected capacity change from 0 to 256 [ 289.952039][T16575] vfat: Unknown parameter 'y¶ðâ߸2{RÜÒK¬e¯ö寳¡‰o¨–ÑV ¸-æ†iAvùë|‡CK3€„u ¹—E><È»µL®0xffffffffffffffff' [ 290.033202][T16581] FAULT_INJECTION: forcing a failure. [ 290.033202][T16581] name failslab, interval 1, probability 0, space 0, times 0 [ 290.045897][T16581] CPU: 0 UID: 0 PID: 16581 Comm: syz.1.3727 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 290.045933][T16581] Tainted: [W]=WARN [ 290.046015][T16581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.046031][T16581] Call Trace: [ 290.046039][T16581] [ 290.046048][T16581] __dump_stack+0x1d/0x30 [ 290.046072][T16581] dump_stack_lvl+0x95/0xd0 [ 290.046151][T16581] dump_stack+0x15/0x1b [ 290.046195][T16581] should_fail_ex+0x263/0x280 [ 290.046219][T16581] should_failslab+0x8c/0xb0 [ 290.046245][T16581] kmem_cache_alloc_noprof+0x68/0x490 [ 290.046322][T16581] ? skb_clone+0x151/0x1f0 [ 290.046360][T16581] skb_clone+0x151/0x1f0 [ 290.046388][T16581] __netlink_deliver_tap+0x2c9/0x500 [ 290.046424][T16581] netlink_unicast+0x66b/0x690 [ 290.046455][T16581] netlink_sendmsg+0x5c8/0x6f0 [ 290.046474][T16581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.046565][T16581] __sock_sendmsg+0x145/0x170 [ 290.046585][T16581] ____sys_sendmsg+0x31e/0x4a0 [ 290.046650][T16581] ___sys_sendmsg+0x195/0x1e0 [ 290.046742][T16581] __x64_sys_sendmsg+0xd4/0x160 [ 290.046783][T16581] x64_sys_call+0x17ba/0x3000 [ 290.046812][T16581] do_syscall_64+0xc0/0x2a0 [ 290.046835][T16581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.046884][T16581] RIP: 0033:0x7f6f0a17acb9 [ 290.046899][T16581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.046975][T16581] RSP: 002b:00007f6f08bd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.046995][T16581] RAX: ffffffffffffffda RBX: 00007f6f0a3f5fa0 RCX: 00007f6f0a17acb9 [ 290.047012][T16581] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 290.047028][T16581] RBP: 00007f6f08bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 290.047040][T16581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.047051][T16581] R13: 00007f6f0a3f6038 R14: 00007f6f0a3f5fa0 R15: 00007ffc2315a628 [ 290.047094][T16581] [ 290.636373][T16595] FAULT_INJECTION: forcing a failure. [ 290.636373][T16595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.649566][T16595] CPU: 1 UID: 0 PID: 16595 Comm: syz.6.3737 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 290.649606][T16595] Tainted: [W]=WARN [ 290.649616][T16595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.649632][T16595] Call Trace: [ 290.649714][T16595] [ 290.649721][T16595] __dump_stack+0x1d/0x30 [ 290.649759][T16595] dump_stack_lvl+0x95/0xd0 [ 290.649787][T16595] dump_stack+0x15/0x1b [ 290.649883][T16595] should_fail_ex+0x263/0x280 [ 290.649914][T16595] should_fail+0xb/0x20 [ 290.649940][T16595] should_fail_usercopy+0x1a/0x20 [ 290.650035][T16595] _copy_from_user+0x1c/0xb0 [ 290.650077][T16595] ___sys_sendmsg+0xc1/0x1e0 [ 290.650131][T16595] __x64_sys_sendmsg+0xd4/0x160 [ 290.650235][T16595] x64_sys_call+0x17ba/0x3000 [ 290.650318][T16595] do_syscall_64+0xc0/0x2a0 [ 290.650346][T16595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.650367][T16595] RIP: 0033:0x7ff4d081acb9 [ 290.650401][T16595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.650425][T16595] RSP: 002b:00007ff4cf277028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.650451][T16595] RAX: ffffffffffffffda RBX: 00007ff4d0a95fa0 RCX: 00007ff4d081acb9 [ 290.650469][T16595] RDX: 0000000020004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 290.650486][T16595] RBP: 00007ff4cf277090 R08: 0000000000000000 R09: 0000000000000000 [ 290.650502][T16595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.650517][T16595] R13: 00007ff4d0a96038 R14: 00007ff4d0a95fa0 R15: 00007ffedb484618 [ 290.650542][T16595] [ 290.928367][T16597] loop5: detected capacity change from 0 to 4096 [ 291.085432][T16597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.099430][T16613] lo speed is unknown, defaulting to 1000 [ 291.179949][T16617] lo speed is unknown, defaulting to 1000 [ 291.248107][T16616] loop0: detected capacity change from 0 to 8192 [ 291.261983][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 291.262000][ T29] audit: type=1326 audit(1768819727.019:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 291.324267][ T29] audit: type=1326 audit(1768819727.059:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 291.348527][ T29] audit: type=1326 audit(1768819727.059:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 291.372191][ T29] audit: type=1326 audit(1768819727.059:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 291.396403][ T29] audit: type=1326 audit(1768819727.059:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 291.420053][ T29] audit: type=1326 audit(1768819727.059:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 291.444381][ T29] audit: type=1326 audit(1768819727.059:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 291.468738][ T29] audit: type=1326 audit(1768819727.059:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 291.492342][ T29] audit: type=1326 audit(1768819727.059:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 291.535639][T16616] loop0: p2 p3 [ 291.545005][T16616] loop0: p3 start 331777 is beyond EOD, truncated [ 291.665492][T16625] __nla_validate_parse: 6 callbacks suppressed [ 291.665508][T16625] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3744'. [ 291.699859][T16625] netlink: 228 bytes leftover after parsing attributes in process `syz.7.3744'. [ 291.720404][ T29] audit: type=1326 audit(1768819727.479:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c72acb9 code=0x7ffc0000 [ 291.811505][T12045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.007176][T16629] loop6: detected capacity change from 0 to 2048 [ 292.057516][T16629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.154819][T16629] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.3746: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 292.231558][T16646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3746'. [ 292.259308][T16646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3746'. [ 292.307706][T16629] EXT4-fs (loop6): Remounting filesystem read-only [ 292.468290][T12594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.483473][T16659] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3754'. [ 292.567874][T16661] lo speed is unknown, defaulting to 1000 [ 292.618826][T16659] lo speed is unknown, defaulting to 1000 [ 292.726042][T16662] loop0: detected capacity change from 0 to 4096 [ 292.815989][T16662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.968235][T16675] lo speed is unknown, defaulting to 1000 [ 293.541416][T12660] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.621501][T16698] loop5: detected capacity change from 0 to 512 [ 293.635400][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3767'. [ 293.644349][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3767'. [ 293.653370][T16699] netlink: 'syz.1.3767': attribute type 19 has an invalid length. [ 293.661239][T16699] netlink: 'syz.1.3767': attribute type 20 has an invalid length. [ 293.674151][T16698] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 293.689024][T16698] EXT4-fs (loop5): mount failed [ 293.810647][T16704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3768'. [ 293.986542][T16707] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 293.997935][T16707] loop6: detected capacity change from 0 to 128 [ 294.006744][T16707] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 294.020337][T16707] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.761720][T16734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3779'. [ 294.785449][T12594] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.786341][T16734] lo speed is unknown, defaulting to 1000 [ 294.811730][T16736] loop6: detected capacity change from 0 to 512 [ 294.818627][T16736] EXT4-fs: Ignoring removed i_version option [ 294.827427][T16736] EXT4-fs (loop6): orphan cleanup on readonly fs [ 294.847828][T16736] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.3780: EA inode hash validation failed [ 294.866388][T16737] lo speed is unknown, defaulting to 1000 [ 294.869703][T16736] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 294.889568][T16736] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.3780: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 294.905746][T16736] EXT4-fs (loop6): Remounting filesystem read-only [ 294.912317][T16736] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.6.3780: ea_inode dec ref err=-117 [ 294.928012][T16736] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 294.937825][T16736] EXT4-fs (loop6): 1 orphan inode deleted [ 294.944155][T16736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 294.984372][T16736] lo speed is unknown, defaulting to 1000 [ 295.075964][T12594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.088702][T16746] vlan2: entered allmulticast mode [ 295.093901][T16746] bond0: entered allmulticast mode [ 295.099160][T16746] bond_slave_0: entered allmulticast mode [ 295.104969][T16746] bond_slave_1: entered allmulticast mode [ 295.109700][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3782'. [ 295.120567][T16747] netlink: 'syz.7.3782': attribute type 19 has an invalid length. [ 295.128597][T16747] netlink: 'syz.7.3782': attribute type 20 has an invalid length. [ 295.324207][T16758] FAULT_INJECTION: forcing a failure. [ 295.324207][T16758] name failslab, interval 1, probability 0, space 0, times 0 [ 295.337718][T16758] CPU: 1 UID: 0 PID: 16758 Comm: syz.0.3788 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 295.337752][T16758] Tainted: [W]=WARN [ 295.337758][T16758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 295.337773][T16758] Call Trace: [ 295.337781][T16758] [ 295.337790][T16758] __dump_stack+0x1d/0x30 [ 295.337831][T16758] dump_stack_lvl+0x95/0xd0 [ 295.337857][T16758] dump_stack+0x15/0x1b [ 295.337881][T16758] should_fail_ex+0x263/0x280 [ 295.337954][T16758] should_failslab+0x8c/0xb0 [ 295.337975][T16758] kmem_cache_alloc_noprof+0x68/0x490 [ 295.338053][T16758] ? getname_flags+0x7f/0x3b0 [ 295.338134][T16758] getname_flags+0x7f/0x3b0 [ 295.338207][T16758] do_sys_openat2+0x60/0x150 [ 295.338235][T16758] __x64_sys_openat+0xf2/0x120 [ 295.338261][T16758] x64_sys_call+0x2b07/0x3000 [ 295.338284][T16758] do_syscall_64+0xc0/0x2a0 [ 295.338323][T16758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.338343][T16758] RIP: 0033:0x7f90196db58e [ 295.338429][T16758] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 295.338445][T16758] RSP: 002b:00007f9018155ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 295.338464][T16758] RAX: ffffffffffffffda RBX: 00007f90181566c0 RCX: 00007f90196db58e [ 295.338553][T16758] RDX: 0000000000000000 RSI: 00007f9018155f90 RDI: ffffffffffffff9c [ 295.338634][T16758] RBP: 00007f9018156090 R08: 0000000000000000 R09: 0000000000000000 [ 295.338720][T16758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.338731][T16758] R13: 00007f9019996128 R14: 00007f9019996090 R15: 00007fff6d739058 [ 295.338750][T16758] [ 295.579354][T16767] loop0: detected capacity change from 0 to 4096 [ 295.589892][T16767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.477506][T12660] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.492456][T16786] loop6: detected capacity change from 0 to 512 [ 296.499758][T16786] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.538124][T16786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.558866][ T29] kauditd_printk_skb: 1071 callbacks suppressed [ 296.558881][ T29] audit: type=1400 audit(1768819732.319:8413): avc: denied { create } for pid=16789 comm="syz.5.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 296.587935][T16786] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.646327][T12594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.745063][T16808] __nla_validate_parse: 2 callbacks suppressed [ 296.745151][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3805'. [ 296.760363][T16808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3805'. [ 296.769307][T16808] netlink: 'syz.0.3805': attribute type 19 has an invalid length. [ 296.777251][T16808] netlink: 'syz.0.3805': attribute type 20 has an invalid length. [ 296.787292][T16799] usb usb1: usbfs: process 16799 (syz.7.3803) did not claim interface 0 before use [ 296.810264][T16812] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3806'. [ 296.820153][T16812] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3806'. [ 296.829208][T16812] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3806'. [ 296.987941][T16818] loop6: detected capacity change from 0 to 4096 [ 297.002769][T16818] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.600369][T16832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3812'. [ 297.662053][T16831] loop1: detected capacity change from 0 to 4096 [ 297.743153][T16831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.836456][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3817'. [ 297.845440][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3817'. [ 297.854344][T16843] netlink: 'syz.0.3817': attribute type 19 has an invalid length. [ 297.862201][T16843] netlink: 'syz.0.3817': attribute type 20 has an invalid length. [ 297.872214][T10665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.916531][T12594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.940796][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3822'. [ 297.952183][T16848] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3822'. [ 297.962298][T16848] tipc: Started in network mode [ 297.967206][T16848] tipc: Node identity , cluster identity 4711 [ 297.973312][T16848] tipc: Failed to obtain node identity [ 297.979447][T16848] tipc: Enabling of bearer rejected, failed to enable media [ 298.551043][T16853] loop0: detected capacity change from 0 to 2048 [ 298.566932][T16853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.587909][T16853] FAULT_INJECTION: forcing a failure. [ 298.587909][T16853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.601262][T16853] CPU: 1 UID: 0 PID: 16853 Comm: syz.0.3824 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 298.601301][T16853] Tainted: [W]=WARN [ 298.601310][T16853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 298.601322][T16853] Call Trace: [ 298.601330][T16853] [ 298.601340][T16853] __dump_stack+0x1d/0x30 [ 298.601434][T16853] dump_stack_lvl+0x95/0xd0 [ 298.601456][T16853] dump_stack+0x15/0x1b [ 298.601527][T16853] should_fail_ex+0x263/0x280 [ 298.601574][T16853] should_fail+0xb/0x20 [ 298.601599][T16853] should_fail_usercopy+0x1a/0x20 [ 298.601628][T16853] copy_folio_from_iter_atomic+0x269/0x1170 [ 298.601677][T16853] generic_perform_write+0x2c1/0x490 [ 298.601715][T16853] ext4_buffered_write_iter+0x1ee/0x3c0 [ 298.601754][T16853] ext4_file_write_iter+0x380/0xf70 [ 298.601815][T16853] ? kstrtouint_from_user+0xa8/0xf0 [ 298.601839][T16853] ? __rcu_read_unlock+0x4e/0x70 [ 298.601860][T16853] ? avc_policy_seqno+0x15/0x30 [ 298.601912][T16853] ? selinux_file_permission+0x1e1/0x320 [ 298.601961][T16853] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 298.601994][T16853] vfs_write+0x5a6/0x9f0 [ 298.602042][T16853] __x64_sys_pwrite64+0xfd/0x150 [ 298.602109][T16853] x64_sys_call+0x9f7/0x3000 [ 298.602134][T16853] do_syscall_64+0xc0/0x2a0 [ 298.602214][T16853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.602245][T16853] RIP: 0033:0x7f901971acb9 [ 298.602261][T16853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.602280][T16853] RSP: 002b:00007f9018177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 298.602300][T16853] RAX: ffffffffffffffda RBX: 00007f9019995fa0 RCX: 00007f901971acb9 [ 298.602314][T16853] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000004 [ 298.602327][T16853] RBP: 00007f9018177090 R08: 0000000000000000 R09: 0000000000000000 [ 298.602419][T16853] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000002 [ 298.602432][T16853] R13: 00007f9019996038 R14: 00007f9019995fa0 R15: 00007fff6d739058 [ 298.602453][T16853] [ 298.847952][ T1947] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 298.879440][ T1947] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 298.891676][ T1947] EXT4-fs (loop0): This should not happen!! Data will be lost [ 298.891676][ T1947] [ 298.901942][ T1947] EXT4-fs (loop0): Total free blocks count 0 [ 298.908036][ T1947] EXT4-fs (loop0): Free/Dirty block details [ 298.913948][ T1947] EXT4-fs (loop0): free_blocks=4096 [ 298.919216][ T1947] EXT4-fs (loop0): dirty_blocks=512 [ 298.925186][ T1947] EXT4-fs (loop0): Block reservation details [ 298.931366][ T1947] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 298.949225][T11260] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 299.158197][ T29] audit: type=1400 audit(1768819734.919:8414): avc: denied { create } for pid=16892 comm="syz.6.3831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 299.180303][T16891] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3830' sets config #2147483646 [ 299.725196][ T29] audit: type=1326 audit(1768819735.489:8415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="syz.6.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 299.753561][T16905] loop1: detected capacity change from 0 to 4096 [ 299.775989][ T29] audit: type=1326 audit(1768819735.509:8416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="syz.6.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 299.799463][ T29] audit: type=1326 audit(1768819735.509:8417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="syz.6.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 299.822983][ T29] audit: type=1326 audit(1768819735.509:8418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="syz.6.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 299.896472][T16905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.936498][T16913] loop6: detected capacity change from 0 to 1024 [ 299.957569][T16913] ext2: Unknown parameter 'appraise' [ 300.054708][T16914] loop5: detected capacity change from 0 to 2048 [ 300.076216][T16914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.093971][ T29] audit: type=1326 audit(1768819735.699:8419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="syz.6.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 300.117556][ T29] audit: type=1326 audit(1768819735.699:8420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="syz.6.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 300.125053][T16918] loop7: detected capacity change from 0 to 128 [ 300.141249][ T29] audit: type=1326 audit(1768819735.739:8421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="syz.6.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 300.171071][ T29] audit: type=1326 audit(1768819735.739:8422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="syz.6.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d081acb9 code=0x7ffc0000 [ 300.257801][T16918] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 300.375380][T16918] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.480492][T16929] loop0: detected capacity change from 0 to 2048 [ 300.543260][T16929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.595837][T10665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.720276][T12660] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.733654][T16936] netlink: 'syz.1.3840': attribute type 3 has an invalid length. [ 300.799035][T16938] FAULT_INJECTION: forcing a failure. [ 300.799035][T16938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.815409][T16938] CPU: 0 UID: 0 PID: 16938 Comm: syz.0.3841 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 300.815447][T16938] Tainted: [W]=WARN [ 300.815483][T16938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.815571][T16938] Call Trace: [ 300.815578][T16938] [ 300.815585][T16938] __dump_stack+0x1d/0x30 [ 300.815607][T16938] dump_stack_lvl+0x95/0xd0 [ 300.815627][T16938] dump_stack+0x15/0x1b [ 300.815645][T16938] should_fail_ex+0x263/0x280 [ 300.815742][T16938] should_fail+0xb/0x20 [ 300.815837][T16938] should_fail_usercopy+0x1a/0x20 [ 300.815953][T16938] _copy_to_user+0x20/0xa0 [ 300.816017][T16938] simple_read_from_buffer+0xb5/0x130 [ 300.816108][T16938] proc_fail_nth_read+0x10e/0x150 [ 300.816162][T16938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.816228][T16938] vfs_read+0x1ab/0x7f0 [ 300.816257][T16938] ? __rcu_read_unlock+0x4e/0x70 [ 300.816279][T16938] ? __fget_files+0x184/0x1c0 [ 300.816326][T16938] ? mutex_lock+0x57/0x90 [ 300.816361][T16938] ksys_read+0xdc/0x1a0 [ 300.816383][T16938] __x64_sys_read+0x40/0x50 [ 300.816401][T16938] x64_sys_call+0x2889/0x3000 [ 300.816493][T16938] do_syscall_64+0xc0/0x2a0 [ 300.816513][T16938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.816535][T16938] RIP: 0033:0x7f90196db58e [ 300.816588][T16938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.816609][T16938] RSP: 002b:00007f9018176fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.816628][T16938] RAX: ffffffffffffffda RBX: 00007f90181776c0 RCX: 00007f90196db58e [ 300.816641][T16938] RDX: 000000000000000f RSI: 00007f90181770a0 RDI: 0000000000000004 [ 300.816652][T16938] RBP: 00007f9018177090 R08: 0000000000000000 R09: 0000000000000000 [ 300.816697][T16938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.816712][T16938] R13: 00007f9019996038 R14: 00007f9019995fa0 R15: 00007fff6d739058 [ 300.816814][T16938] [ 301.082016][T16940] lo speed is unknown, defaulting to 1000 [ 301.202962][T12045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.270696][T16951] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.3846' sets config #2147483646 [ 301.418362][T16943] lo speed is unknown, defaulting to 1000 [ 301.642750][T16961] bpf: Bad value for 'uid' [ 301.648750][T16962] bpf: Bad value for 'uid' [ 301.671420][T16959] netlink: 'syz.1.3847': attribute type 19 has an invalid length. [ 301.679514][T16959] netlink: 'syz.1.3847': attribute type 20 has an invalid length. [ 301.866386][T16969] loop1: detected capacity change from 0 to 2048 [ 301.886674][T16969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.934727][T16969] __nla_validate_parse: 6 callbacks suppressed [ 301.934826][T16969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3852'. [ 301.950150][T16965] loop6: detected capacity change from 0 to 1024 [ 301.967070][T16969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3852'. [ 301.974070][T16965] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.045336][T12594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.108242][T10665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.123349][T16984] loop6: detected capacity change from 0 to 256 [ 302.135156][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 302.135171][ T29] audit: type=1326 audit(1768819737.889:8442): auid=0 uid=0 gid=0 ses=16 subj=root:sysadm_r:sysadm_t pid=16983 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 302.163370][ T29] audit: type=1326 audit(1768819737.899:8443): auid=0 uid=0 gid=0 ses=16 subj=root:sysadm_r:sysadm_t pid=16983 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 302.182067][T16981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3855'. [ 302.185501][ T29] audit: type=1326 audit(1768819737.899:8444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16983 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 302.185580][ T29] audit: type=1326 audit(1768819737.899:8445): auid=0 uid=0 gid=0 ses=16 subj=root:sysadm_r:sysadm_t pid=16983 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 302.185608][ T29] audit: type=1326 audit(1768819737.899:8446): auid=0 uid=0 gid=0 ses=16 subj=root:sysadm_r:sysadm_t pid=16983 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 302.185678][ T29] audit: type=1326 audit(1768819737.899:8447): auid=0 uid=0 gid=0 ses=16 subj=root:sysadm_r:sysadm_t pid=16983 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 302.256127][ T29] audit: type=1326 audit(1768819737.899:8448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16983 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 302.326725][ T29] audit: type=1326 audit(1768819737.899:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16983 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 302.350308][ T29] audit: type=1326 audit(1768819737.899:8450): auid=0 uid=0 gid=0 ses=16 subj=root:sysadm_r:sysadm_t pid=16983 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 302.372311][ T29] audit: type=1326 audit(1768819737.899:8451): auid=0 uid=0 gid=0 ses=16 subj=root:sysadm_r:sysadm_t pid=16983 comm="syz.0.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 302.446733][T16992] loop7: detected capacity change from 0 to 8192 [ 302.454854][T16987] netlink: 'syz.1.3857': attribute type 3 has an invalid length. [ 302.464534][T16981] vlan2: entered promiscuous mode [ 302.568900][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3862'. [ 302.577857][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3862'. [ 302.586863][T17002] netlink: 'syz.6.3862': attribute type 19 has an invalid length. [ 302.594791][T17002] netlink: 'syz.6.3862': attribute type 20 has an invalid length. [ 302.751098][T17010] loop7: detected capacity change from 0 to 1024 [ 302.759431][T17010] ext4: Unknown parameter 'fowner' [ 302.798551][T17012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.211837][T17020] FAULT_INJECTION: forcing a failure. [ 303.211837][T17020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.225707][T17020] CPU: 1 UID: 0 PID: 17020 Comm: syz.1.3866 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 303.225806][T17020] Tainted: [W]=WARN [ 303.225815][T17020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.225900][T17020] Call Trace: [ 303.225907][T17020] [ 303.225916][T17020] __dump_stack+0x1d/0x30 [ 303.225941][T17020] dump_stack_lvl+0x95/0xd0 [ 303.225988][T17020] dump_stack+0x15/0x1b [ 303.226013][T17020] should_fail_ex+0x263/0x280 [ 303.226043][T17020] should_fail+0xb/0x20 [ 303.226065][T17020] should_fail_usercopy+0x1a/0x20 [ 303.226185][T17020] _copy_from_user+0x1c/0xb0 [ 303.226220][T17020] autofs_dev_ioctl+0xdd/0x6a0 [ 303.226245][T17020] ? mutex_lock+0x57/0x90 [ 303.226281][T17020] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 303.226367][T17020] __se_sys_ioctl+0xce/0x140 [ 303.226399][T17020] __x64_sys_ioctl+0x43/0x50 [ 303.226500][T17020] x64_sys_call+0x14b0/0x3000 [ 303.226524][T17020] do_syscall_64+0xc0/0x2a0 [ 303.226546][T17020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.226568][T17020] RIP: 0033:0x7f6f0a17acb9 [ 303.226616][T17020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.226646][T17020] RSP: 002b:00007f6f08bd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.226672][T17020] RAX: ffffffffffffffda RBX: 00007f6f0a3f5fa0 RCX: 00007f6f0a17acb9 [ 303.226690][T17020] RDX: 0000200000000100 RSI: 00000000c0189374 RDI: 0000000000000003 [ 303.226704][T17020] RBP: 00007f6f08bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 303.226774][T17020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.226790][T17020] R13: 00007f6f0a3f6038 R14: 00007f6f0a3f5fa0 R15: 00007ffc2315a628 [ 303.226815][T17020] [ 303.473538][T12045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.547489][T17027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3867'. [ 303.557360][T17027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3867'. [ 303.606589][T17026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.622334][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3868'. [ 303.642791][T17035] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 303.656780][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3868'. [ 303.689884][T17035] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 303.697894][T17035] FAT-fs (loop0): Filesystem has been set read-only [ 303.698592][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3872'. [ 303.706140][T17035] syz.0.3871: attempt to access beyond end of device [ 303.706140][T17035] loop0: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 303.737639][T17035] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 303.743078][T17038] tipc: Started in network mode [ 303.745556][T17035] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 303.750364][T17038] tipc: Node identity , cluster identity 4711 [ 303.764277][T17038] tipc: Failed to obtain node identity [ 303.770353][T17038] tipc: Enabling of bearer rejected, failed to enable media [ 303.780330][T17035] syz.0.3871: attempt to access beyond end of device [ 303.780330][T17035] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 303.789694][T12045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.824406][T17035] syz.0.3871: attempt to access beyond end of device [ 303.824406][T17035] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 303.854448][T17050] netlink: 'syz.5.3874': attribute type 19 has an invalid length. [ 303.863147][T17050] netlink: 'syz.5.3874': attribute type 20 has an invalid length. [ 303.904764][T17048] vlan3: entered promiscuous mode [ 303.919633][T17054] netlink: 'syz.0.3877': attribute type 3 has an invalid length. [ 303.927005][T17046] netlink: 'syz.6.3875': attribute type 29 has an invalid length. [ 304.035413][T17056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.193687][T12045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.372981][T17074] FAULT_INJECTION: forcing a failure. [ 304.372981][T17074] name failslab, interval 1, probability 0, space 0, times 0 [ 304.385735][T17074] CPU: 1 UID: 0 PID: 17074 Comm: syz.5.3884 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.385855][T17074] Tainted: [W]=WARN [ 304.385864][T17074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.385879][T17074] Call Trace: [ 304.385888][T17074] [ 304.385977][T17074] __dump_stack+0x1d/0x30 [ 304.386082][T17074] dump_stack_lvl+0x95/0xd0 [ 304.386105][T17074] dump_stack+0x15/0x1b [ 304.386126][T17074] should_fail_ex+0x263/0x280 [ 304.386212][T17074] should_failslab+0x8c/0xb0 [ 304.386232][T17074] kmem_cache_alloc_noprof+0x68/0x490 [ 304.386279][T17074] ? getname_flags+0x7f/0x3b0 [ 304.386308][T17074] getname_flags+0x7f/0x3b0 [ 304.386336][T17074] __x64_sys_mkdirat+0x40/0x60 [ 304.386366][T17074] x64_sys_call+0x30c/0x3000 [ 304.386389][T17074] do_syscall_64+0xc0/0x2a0 [ 304.386438][T17074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.386496][T17074] RIP: 0033:0x7f363a68acb9 [ 304.386515][T17074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.386569][T17074] RSP: 002b:00007f36390e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 304.386601][T17074] RAX: ffffffffffffffda RBX: 00007f363a905fa0 RCX: 00007f363a68acb9 [ 304.386617][T17074] RDX: 000000000000011e RSI: 0000200000000100 RDI: ffffffffffffff9c [ 304.386633][T17074] RBP: 00007f36390e7090 R08: 0000000000000000 R09: 0000000000000000 [ 304.386648][T17074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.386659][T17074] R13: 00007f363a906038 R14: 00007f363a905fa0 R15: 00007fff3c5d6e48 [ 304.386677][T17074] [ 304.688248][T17076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.756734][T17081] bond0: option packets_per_slave: invalid value (18446744071562067968) [ 304.765183][T17081] bond0: option packets_per_slave: allowed values 0 - 65535 [ 304.788656][T14008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.789529][T17083] set_capacity_and_notify: 7 callbacks suppressed [ 304.789568][T17083] loop5: detected capacity change from 0 to 512 [ 304.811793][T17083] msdos: Unknown parameter 'disJard' [ 304.933105][T17094] vlan2: entered promiscuous mode [ 304.940108][T17094] batadv0: entered promiscuous mode [ 304.971176][T17098] FAULT_INJECTION: forcing a failure. [ 304.971176][T17098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.985580][T17098] CPU: 1 UID: 0 PID: 17098 Comm: syz.5.3892 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.985658][T17098] Tainted: [W]=WARN [ 304.985772][T17098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.985789][T17098] Call Trace: [ 304.985798][T17098] [ 304.985808][T17098] __dump_stack+0x1d/0x30 [ 304.985873][T17098] dump_stack_lvl+0x95/0xd0 [ 304.985902][T17098] dump_stack+0x15/0x1b [ 304.986007][T17098] should_fail_ex+0x263/0x280 [ 304.986035][T17098] should_fail+0xb/0x20 [ 304.986055][T17098] should_fail_usercopy+0x1a/0x20 [ 304.986081][T17098] _copy_from_user+0x1c/0xb0 [ 304.986195][T17098] ___sys_sendmsg+0xc1/0x1e0 [ 304.986250][T17098] __x64_sys_sendmsg+0xd4/0x160 [ 304.986283][T17098] x64_sys_call+0x17ba/0x3000 [ 304.986339][T17098] do_syscall_64+0xc0/0x2a0 [ 304.986403][T17098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.986430][T17098] RIP: 0033:0x7f363a68acb9 [ 304.986451][T17098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.986545][T17098] RSP: 002b:00007f36390e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.986636][T17098] RAX: ffffffffffffffda RBX: 00007f363a905fa0 RCX: 00007f363a68acb9 [ 304.986655][T17098] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 304.986671][T17098] RBP: 00007f36390e7090 R08: 0000000000000000 R09: 0000000000000000 [ 304.986724][T17098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.986740][T17098] R13: 00007f363a906038 R14: 00007f363a905fa0 R15: 00007fff3c5d6e48 [ 304.986766][T17098] [ 305.300170][T17100] loop7: detected capacity change from 0 to 1024 [ 305.333965][T17100] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.391206][T17112] loop1: detected capacity change from 0 to 2048 [ 305.436669][T17112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.524098][T14008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.575122][T10665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.087188][T17150] FAULT_INJECTION: forcing a failure. [ 306.087188][T17150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.100485][T17150] CPU: 1 UID: 0 PID: 17150 Comm: syz.1.3912 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 306.100515][T17150] Tainted: [W]=WARN [ 306.100522][T17150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.100533][T17150] Call Trace: [ 306.100609][T17150] [ 306.100618][T17150] __dump_stack+0x1d/0x30 [ 306.100645][T17150] dump_stack_lvl+0x95/0xd0 [ 306.100713][T17150] dump_stack+0x15/0x1b [ 306.100733][T17150] should_fail_ex+0x263/0x280 [ 306.100755][T17150] should_fail+0xb/0x20 [ 306.100773][T17150] should_fail_usercopy+0x1a/0x20 [ 306.100863][T17150] copy_fpstate_to_sigframe+0x636/0x7d0 [ 306.100943][T17150] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 306.101004][T17150] ? x86_task_fpu+0x36/0x60 [ 306.101042][T17150] get_sigframe+0x34c/0x470 [ 306.101137][T17150] ? get_signal+0xdbe/0xf60 [ 306.101196][T17150] x64_setup_rt_frame+0xa7/0x4e0 [ 306.101270][T17150] arch_do_signal_or_restart+0x24b/0x450 [ 306.101300][T17150] exit_to_user_mode_loop+0x6a/0x6f0 [ 306.101324][T17150] do_syscall_64+0x1d3/0x2a0 [ 306.101356][T17150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.101383][T17150] RIP: 0033:0x7f6f0a13b58e [ 306.101401][T17150] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 306.101443][T17150] RSP: 002b:00007f6f08bd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 306.101467][T17150] RAX: 0000000000000001 RBX: 00007f6f08bd76c0 RCX: 00007f6f0a13b58e [ 306.101574][T17150] RDX: 0000000000000001 RSI: 00007f6f08bd7090 RDI: 0000000000000004 [ 306.101590][T17150] RBP: 00007f6f08bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 306.101606][T17150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.101622][T17150] R13: 00007f6f0a3f6038 R14: 00007f6f0a3f5fa0 R15: 00007ffc2315a628 [ 306.101645][T17150] [ 306.330523][T17153] loop1: detected capacity change from 0 to 2048 [ 306.351692][T17153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 306.369807][T17154] validate_nla: 7 callbacks suppressed [ 306.369836][T17154] netlink: 'syz.5.3914': attribute type 29 has an invalid length. [ 306.383961][T17153] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 306.405184][T17153] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 306.417625][T17153] EXT4-fs (loop1): This should not happen!! Data will be lost [ 306.417625][T17153] [ 306.427363][T17153] EXT4-fs (loop1): Total free blocks count 0 [ 306.433462][T17153] EXT4-fs (loop1): Free/Dirty block details [ 306.439499][T17153] EXT4-fs (loop1): free_blocks=2415919104 [ 306.445319][T17153] EXT4-fs (loop1): dirty_blocks=16 [ 306.450508][T17153] EXT4-fs (loop1): Block reservation details [ 306.456567][T17153] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 306.522201][T11265] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 306.562420][T17162] netlink: 'syz.7.3915': attribute type 19 has an invalid length. [ 306.570613][T17162] netlink: 'syz.7.3915': attribute type 20 has an invalid length. [ 306.633323][T17166] loop5: detected capacity change from 0 to 2048 [ 306.718087][T17166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.846671][T17179] FAULT_INJECTION: forcing a failure. [ 306.846671][T17179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.859841][T17179] CPU: 0 UID: 0 PID: 17179 Comm: syz.6.3922 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 306.859918][T17179] Tainted: [W]=WARN [ 306.859963][T17179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.859975][T17179] Call Trace: [ 306.859980][T17179] [ 306.859989][T17179] __dump_stack+0x1d/0x30 [ 306.860017][T17179] dump_stack_lvl+0x95/0xd0 [ 306.860116][T17179] dump_stack+0x15/0x1b [ 306.860151][T17179] should_fail_ex+0x263/0x280 [ 306.860182][T17179] should_fail+0xb/0x20 [ 306.860204][T17179] should_fail_usercopy+0x1a/0x20 [ 306.860228][T17179] _copy_to_user+0x20/0xa0 [ 306.860253][T17179] simple_read_from_buffer+0xb5/0x130 [ 306.860421][T17179] proc_fail_nth_read+0x10e/0x150 [ 306.860472][T17179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.860511][T17179] vfs_read+0x1ab/0x7f0 [ 306.860557][T17179] ? l2cap_sock_setsockopt+0x1237/0x1270 [ 306.860608][T17179] ? __rcu_read_unlock+0x4e/0x70 [ 306.860652][T17179] ? __fget_files+0x184/0x1c0 [ 306.860672][T17179] ? mutex_lock+0x57/0x90 [ 306.860699][T17179] ksys_read+0xdc/0x1a0 [ 306.860793][T17179] __x64_sys_read+0x40/0x50 [ 306.860814][T17179] x64_sys_call+0x2889/0x3000 [ 306.860925][T17179] do_syscall_64+0xc0/0x2a0 [ 306.860951][T17179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.860978][T17179] RIP: 0033:0x7ff4d07db58e [ 306.860998][T17179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 306.861080][T17179] RSP: 002b:00007ff4cf276fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.861104][T17179] RAX: ffffffffffffffda RBX: 00007ff4cf2776c0 RCX: 00007ff4d07db58e [ 306.861121][T17179] RDX: 000000000000000f RSI: 00007ff4cf2770a0 RDI: 0000000000000003 [ 306.861136][T17179] RBP: 00007ff4cf277090 R08: 0000000000000000 R09: 0000000000000000 [ 306.861229][T17179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.861241][T17179] R13: 00007ff4d0a96038 R14: 00007ff4d0a95fa0 R15: 00007ffedb484618 [ 306.861262][T17179] [ 307.069826][T12045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.227384][T17186] netlink: 'syz.6.3924': attribute type 3 has an invalid length. [ 307.316876][T17191] SELinux: Context system_u: is not valid (left unmapped). [ 307.317174][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 307.317209][ T29] audit: type=1400 audit(1768819743.079:8668): avc: denied { relabelfrom } for pid=17190 comm="syz.1.3926" name="SCTPv6" dev="sockfs" ino=57013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 307.354204][ T29] audit: type=1400 audit(1768819743.079:8669): avc: denied { mac_admin } for pid=17190 comm="syz.1.3926" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 307.391764][T17191] loop1: detected capacity change from 0 to 1024 [ 307.398610][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.416982][T17191] loop1: detected capacity change from 0 to 1024 [ 307.423858][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.436857][T17191] loop1: detected capacity change from 0 to 1024 [ 307.443771][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.457002][T17191] loop1: detected capacity change from 0 to 1024 [ 307.463970][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.477016][T17191] loop1: detected capacity change from 0 to 1024 [ 307.483734][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.496953][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.510435][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.523728][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.536646][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.550055][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.563634][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.577012][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.590858][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.604406][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.617931][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.630659][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.643519][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.656849][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.669614][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.682777][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.696019][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.708951][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.721673][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.734759][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.748070][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.761264][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.774767][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.787836][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.801063][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.814261][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.827435][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.840808][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.854140][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.867080][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.880664][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.894170][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.907141][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.920483][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.933371][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.946429][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.960075][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.973026][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.986069][T17191] ext4: Bad value for 'auto_da_alloc' [ 307.999398][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.012583][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.025785][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.038767][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.052006][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.065198][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.079301][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.092987][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.106612][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.120772][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.134171][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.147686][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.161570][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.175312][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.188400][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.201613][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.215139][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.228580][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.242401][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.255882][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.269301][T17191] ext4: Bad value for 'auto_da_alloc' [ 308.361155][ T29] audit: type=1400 audit(1768819743.079:8670): avc: denied { relabelto } for pid=17190 comm="syz.1.3926" name="SCTPv6" dev="sockfs" ino=57013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:" [ 308.386744][ T29] audit: type=1400 audit(1768819743.159:8671): avc: denied { mounton } for pid=17190 comm="syz.1.3926" path="/file0" dev="ramfs" ino=57424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 308.408839][ T29] audit: type=1326 audit(1768819744.069:8672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.6.3924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4d081acb9 code=0x0 [ 308.555792][T17202] netlink: 'syz.0.3929': attribute type 29 has an invalid length. [ 308.577959][T17204] __nla_validate_parse: 23 callbacks suppressed [ 308.577975][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3930'. [ 308.593189][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3930'. [ 308.602100][T17204] netlink: 'syz.6.3930': attribute type 19 has an invalid length. [ 308.610564][T17204] netlink: 'syz.6.3930': attribute type 20 has an invalid length. [ 308.666969][T17206] FAULT_INJECTION: forcing a failure. [ 308.666969][T17206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.680161][T17206] CPU: 1 UID: 0 PID: 17206 Comm: syz.1.3931 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 308.680193][T17206] Tainted: [W]=WARN [ 308.680200][T17206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.680314][T17206] Call Trace: [ 308.680323][T17206] [ 308.680333][T17206] __dump_stack+0x1d/0x30 [ 308.680364][T17206] dump_stack_lvl+0x95/0xd0 [ 308.680385][T17206] dump_stack+0x15/0x1b [ 308.680424][T17206] should_fail_ex+0x263/0x280 [ 308.680454][T17206] should_fail+0xb/0x20 [ 308.680480][T17206] should_fail_usercopy+0x1a/0x20 [ 308.680542][T17206] _copy_to_user+0x20/0xa0 [ 308.680586][T17206] simple_read_from_buffer+0xb5/0x130 [ 308.680710][T17206] proc_fail_nth_read+0x10e/0x150 [ 308.680746][T17206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.680779][T17206] vfs_read+0x1ab/0x7f0 [ 308.680866][T17206] ? __rcu_read_unlock+0x4e/0x70 [ 308.680919][T17206] ? __fget_files+0x184/0x1c0 [ 308.680941][T17206] ? mutex_lock+0x57/0x90 [ 308.680970][T17206] ksys_read+0xdc/0x1a0 [ 308.680989][T17206] __x64_sys_read+0x40/0x50 [ 308.681010][T17206] x64_sys_call+0x2889/0x3000 [ 308.681081][T17206] do_syscall_64+0xc0/0x2a0 [ 308.681184][T17206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.681211][T17206] RIP: 0033:0x7f6f0a13b58e [ 308.681232][T17206] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 308.681257][T17206] RSP: 002b:00007f6f08bd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.681281][T17206] RAX: ffffffffffffffda RBX: 00007f6f08bd76c0 RCX: 00007f6f0a13b58e [ 308.681317][T17206] RDX: 000000000000000f RSI: 00007f6f08bd70a0 RDI: 0000000000000004 [ 308.681329][T17206] RBP: 00007f6f08bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 308.681341][T17206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.681352][T17206] R13: 00007f6f0a3f6038 R14: 00007f6f0a3f5fa0 R15: 00007ffc2315a628 [ 308.681372][T17206] [ 308.920884][ T29] audit: type=1326 audit(1768819744.669:8673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17209 comm="syz.0.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 308.944488][ T29] audit: type=1326 audit(1768819744.669:8674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17209 comm="syz.0.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 308.968097][ T29] audit: type=1326 audit(1768819744.669:8675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17209 comm="syz.0.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 308.991626][ T29] audit: type=1326 audit(1768819744.669:8676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17209 comm="syz.0.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 309.015274][ T29] audit: type=1326 audit(1768819744.669:8677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17209 comm="syz.0.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901971acb9 code=0x7ffc0000 [ 309.075463][T17208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.117828][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3933'. [ 309.145106][T17220] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3936'. [ 309.180107][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3933'. [ 309.266565][T17229] FAULT_INJECTION: forcing a failure. [ 309.266565][T17229] name failslab, interval 1, probability 0, space 0, times 0 [ 309.266968][T12594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.279457][T17229] CPU: 1 UID: 0 PID: 17229 Comm: syz.5.3939 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 309.279554][T17229] Tainted: [W]=WARN [ 309.279586][T17229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.279623][T17229] Call Trace: [ 309.279648][T17229] [ 309.279689][T17229] __dump_stack+0x1d/0x30 [ 309.279751][T17229] dump_stack_lvl+0x95/0xd0 [ 309.279810][T17229] dump_stack+0x15/0x1b [ 309.279867][T17229] should_fail_ex+0x263/0x280 [ 309.279944][T17229] should_failslab+0x8c/0xb0 [ 309.280010][T17229] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 309.280228][T17229] ? kasprintf+0x83/0xb0 [ 309.280385][T17229] kvasprintf+0x8a/0x110 [ 309.280471][T17229] ? obj_cgroup_charge_account+0x122/0x1a0 [ 309.280558][T17229] kasprintf+0x83/0xb0 [ 309.280642][T17229] ? __memcg_slab_post_alloc_hook+0x44a/0x530 [ 309.280773][T17229] nf_tables_set_alloc_name+0xaa/0x4b0 [ 309.280952][T17229] nf_tables_newset+0xf97/0x16d0 [ 309.281043][T17229] nfnetlink_rcv+0xc1e/0x1720 [ 309.281245][T17229] netlink_unicast+0x5c0/0x690 [ 309.281338][T17229] netlink_sendmsg+0x5c8/0x6f0 [ 309.281420][T17229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.281535][T17229] __sock_sendmsg+0x145/0x170 [ 309.281595][T17229] ____sys_sendmsg+0x31e/0x4a0 [ 309.281705][T17229] ___sys_sendmsg+0x195/0x1e0 [ 309.281825][T17229] __x64_sys_sendmsg+0xd4/0x160 [ 309.281991][T17229] x64_sys_call+0x17ba/0x3000 [ 309.282065][T17229] do_syscall_64+0xc0/0x2a0 [ 309.282132][T17229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.282197][T17229] RIP: 0033:0x7f363a68acb9 [ 309.282263][T17229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.282335][T17229] RSP: 002b:00007f36390e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.282412][T17229] RAX: ffffffffffffffda RBX: 00007f363a905fa0 RCX: 00007f363a68acb9 [ 309.282456][T17229] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 309.282488][T17229] RBP: 00007f36390e7090 R08: 0000000000000000 R09: 0000000000000000 [ 309.282578][T17229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 309.282611][T17229] R13: 00007f363a906038 R14: 00007f363a905fa0 R15: 00007fff3c5d6e48 [ 309.282658][T17229] [ 309.598342][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3943'. [ 309.604328][T17230] netlink: 'syz.0.3940': attribute type 3 has an invalid length. [ 309.607341][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3943'. [ 309.607371][T17241] netlink: 'syz.7.3943': attribute type 19 has an invalid length. [ 309.607385][T17241] netlink: 'syz.7.3943': attribute type 20 has an invalid length. [ 309.686891][T17243] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 309.839123][T17257] set_capacity_and_notify: 61 callbacks suppressed [ 309.839138][T17257] loop7: detected capacity change from 0 to 2048 [ 309.862627][T17255] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3950'. [ 309.877366][T17257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.891319][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3951'. [ 309.957665][T17255] vlan2: entered promiscuous mode [ 309.985240][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3951'. [ 310.029373][T17270] FAULT_INJECTION: forcing a failure. [ 310.029373][T17270] name failslab, interval 1, probability 0, space 0, times 0 [ 310.042188][T17270] CPU: 1 UID: 0 PID: 17270 Comm: syz.5.3953 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 310.042228][T17270] Tainted: [W]=WARN [ 310.042237][T17270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.042254][T17270] Call Trace: [ 310.042264][T17270] [ 310.042275][T17270] __dump_stack+0x1d/0x30 [ 310.042374][T17270] dump_stack_lvl+0x95/0xd0 [ 310.042399][T17270] dump_stack+0x15/0x1b [ 310.042420][T17270] should_fail_ex+0x263/0x280 [ 310.042444][T17270] should_failslab+0x8c/0xb0 [ 310.042535][T17270] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 310.042663][T17270] ? __get_vm_area_node+0x106/0x1d0 [ 310.042708][T17270] __get_vm_area_node+0x106/0x1d0 [ 310.042795][T17270] __vmalloc_node_range_noprof+0x291/0x12b0 [ 310.042823][T17270] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 310.042893][T17270] ? __rcu_read_unlock+0x4e/0x70 [ 310.042987][T17270] ? avc_has_perm_noaudit+0xab/0x130 [ 310.043012][T17270] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 310.043045][T17270] __vmalloc_noprof+0xa4/0xf0 [ 310.043069][T17270] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 310.043187][T17270] bpf_prog_alloc_no_stats+0x47/0x380 [ 310.043229][T17270] ? bpf_prog_alloc+0x2a/0x150 [ 310.043274][T17270] bpf_prog_alloc+0x3c/0x150 [ 310.043377][T17270] bpf_prog_load+0x506/0x1140 [ 310.043416][T17270] ? security_bpf+0x2b/0x90 [ 310.043512][T17270] __sys_bpf+0x469/0x7b0 [ 310.043547][T17270] __x64_sys_bpf+0x41/0x50 [ 310.043608][T17270] x64_sys_call+0x28e1/0x3000 [ 310.043635][T17270] do_syscall_64+0xc0/0x2a0 [ 310.043657][T17270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.043759][T17270] RIP: 0033:0x7f363a68acb9 [ 310.043788][T17270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.043810][T17270] RSP: 002b:00007f36390e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.043833][T17270] RAX: ffffffffffffffda RBX: 00007f363a905fa0 RCX: 00007f363a68acb9 [ 310.043920][T17270] RDX: 0000000000000080 RSI: 0000200000000500 RDI: 0000000000000005 [ 310.043933][T17270] RBP: 00007f36390e7090 R08: 0000000000000000 R09: 0000000000000000 [ 310.043944][T17270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.043956][T17270] R13: 00007f363a906038 R14: 00007f363a905fa0 R15: 00007fff3c5d6e48 [ 310.043980][T17270] [ 310.044058][T17270] syz.5.3953: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 310.100256][T17270] ,cpuset=/,mems_allowed=0 [ 310.297531][T14008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.300846][T17270] CPU: 1 UID: 0 PID: 17270 Comm: syz.5.3953 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 310.300923][T17270] Tainted: [W]=WARN [ 310.300954][T17270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.300998][T17270] Call Trace: [ 310.301019][T17270] [ 310.301027][T17270] __dump_stack+0x1d/0x30 [ 310.301142][T17270] dump_stack_lvl+0x95/0xd0 [ 310.301209][T17270] dump_stack+0x15/0x1b [ 310.301266][T17270] warn_alloc+0x145/0x1c0 [ 310.301356][T17270] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 310.301488][T17270] ? __rcu_read_unlock+0x4e/0x70 [ 310.301552][T17270] ? avc_has_perm_noaudit+0xab/0x130 [ 310.301625][T17270] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 310.301759][T17270] __vmalloc_noprof+0xa4/0xf0 [ 310.301825][T17270] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 310.301942][T17270] bpf_prog_alloc_no_stats+0x47/0x380 [ 310.302116][T17270] ? bpf_prog_alloc+0x2a/0x150 [ 310.302212][T17270] bpf_prog_alloc+0x3c/0x150 [ 310.302396][T17270] bpf_prog_load+0x506/0x1140 [ 310.302545][T17270] ? security_bpf+0x2b/0x90 [ 310.302661][T17270] __sys_bpf+0x469/0x7b0 [ 310.302742][T17270] __x64_sys_bpf+0x41/0x50 [ 310.302826][T17270] x64_sys_call+0x28e1/0x3000 [ 310.302969][T17270] do_syscall_64+0xc0/0x2a0 [ 310.303039][T17270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.303108][T17270] RIP: 0033:0x7f363a68acb9 [ 310.303158][T17270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.303226][T17270] RSP: 002b:00007f36390e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.303306][T17270] RAX: ffffffffffffffda RBX: 00007f363a905fa0 RCX: 00007f363a68acb9 [ 310.303387][T17270] RDX: 0000000000000080 RSI: 0000200000000500 RDI: 0000000000000005 [ 310.303473][T17270] RBP: 00007f36390e7090 R08: 0000000000000000 R09: 0000000000000000 [ 310.303514][T17270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.303555][T17270] R13: 00007f363a906038 R14: 00007f363a905fa0 R15: 00007fff3c5d6e48 [ 310.303619][T17270] [ 310.303641][T17270] Mem-Info: [ 310.522351][T17270] active_anon:29521 inactive_anon:2 isolated_anon:0 [ 310.522351][T17270] active_file:24437 inactive_file:2613 isolated_file:0 [ 310.522351][T17270] unevictable:0 dirty:36 writeback:0 [ 310.522351][T17270] slab_reclaimable:3998 slab_unreclaimable:21555 [ 310.522351][T17270] mapped:31540 shmem:17132 pagetables:2129 [ 310.522351][T17270] sec_pagetables:0 bounce:0 [ 310.522351][T17270] kernel_misc_reclaimable:0 [ 310.522351][T17270] free:1825112 free_pcp:23695 free_cma:0 [ 310.568097][T17270] Node 0 active_anon:118084kB inactive_anon:8kB active_file:97748kB inactive_file:10452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126160kB dirty:144kB writeback:0kB shmem:68528kB kernel_stack:5232kB pagetables:8516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 310.596210][T17270] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 310.626602][T17270] lowmem_reserve[]: 0 2879 7858 7858 [ 310.632054][T17270] Node 0 DMA32 free:2945460kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948988kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 310.664030][T17270] lowmem_reserve[]: 0 0 4978 4978 [ 310.669233][T17270] Node 0 Normal free:4339628kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:118084kB inactive_anon:8kB active_file:97748kB inactive_file:10452kB unevictable:0kB writepending:144kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:91196kB local_pcp:32936kB free_cma:0kB [ 310.703169][T17270] lowmem_reserve[]: 0 0 0 0 [ 310.707860][T17270] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 310.720620][T17270] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 6*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945460kB [ 310.737342][T17270] Node 0 Normal: 3687*4kB (UM) 2195*8kB (UME) 896*16kB (UME) 422*32kB (UME) 517*64kB (UME) 647*128kB (UME) 468*256kB (UME) 320*512kB (UME) 252*1024kB (UM) 170*2048kB (UME) 803*4096kB (UM) = 4354996kB [ 310.757290][T17270] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 310.767539][T17270] 44175 total pagecache pages [ 310.772326][T17270] 3 pages in swap cache [ 310.776525][T17270] Free swap = 57684kB [ 310.780603][T17270] Total swap = 124996kB [ 310.784874][T17270] 2097051 pages RAM [ 310.788732][T17270] 0 pages HighMem/MovableOnly [ 310.793459][T17270] 81404 pages reserved [ 310.870673][T17274] loop5: detected capacity change from 0 to 4096 [ 310.890186][T17274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.920772][T17274] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3955: bg 0: block 137: padding at end of block bitmap is not set [ 310.947608][T12045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.997088][T17288] tc_dump_action: action bad kind [ 311.026497][T17288] tmpfs: Unknown parameter 'nr_inodes^5' [ 311.036056][T17293] loop7: detected capacity change from 0 to 2048 [ 311.068188][T17293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.227439][T17292] vlan2: entered promiscuous mode [ 311.241034][T14008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.583119][T17319] FAULT_INJECTION: forcing a failure. [ 311.583119][T17319] name failslab, interval 1, probability 0, space 0, times 0 [ 311.595828][T17319] CPU: 1 UID: 0 PID: 17319 Comm: syz.0.3970 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 311.595864][T17319] Tainted: [W]=WARN [ 311.595870][T17319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 311.595898][T17319] Call Trace: [ 311.595906][T17319] [ 311.595913][T17319] __dump_stack+0x1d/0x30 [ 311.596007][T17319] dump_stack_lvl+0x95/0xd0 [ 311.596031][T17319] dump_stack+0x15/0x1b [ 311.596054][T17319] should_fail_ex+0x263/0x280 [ 311.596156][T17319] should_failslab+0x8c/0xb0 [ 311.596185][T17319] __kmalloc_cache_noprof+0x64/0x4a0 [ 311.596216][T17319] ? ip_set_create+0x1ec/0x970 [ 311.596314][T17319] ip_set_create+0x1ec/0x970 [ 311.596352][T17319] ? __nla_parse+0x40/0x60 [ 311.596436][T17319] nfnetlink_rcv_msg+0x509/0x5d0 [ 311.596483][T17319] netlink_rcv_skb+0x123/0x220 [ 311.596590][T17319] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 311.596623][T17319] nfnetlink_rcv+0x167/0x1720 [ 311.596651][T17319] ? __kfree_skb+0x109/0x150 [ 311.596689][T17319] ? nlmon_xmit+0x4f/0x60 [ 311.596715][T17319] ? consume_skb+0x49/0x140 [ 311.596828][T17319] ? nlmon_xmit+0x4f/0x60 [ 311.596914][T17319] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 311.597023][T17319] ? __dev_queue_xmit+0x139a/0x1f20 [ 311.597051][T17319] ? __dev_queue_xmit+0x148/0x1f20 [ 311.597087][T17319] ? ref_tracker_free+0x37d/0x3e0 [ 311.597124][T17319] ? __netlink_deliver_tap+0x4dc/0x500 [ 311.597215][T17319] netlink_unicast+0x5c0/0x690 [ 311.597309][T17319] netlink_sendmsg+0x5c8/0x6f0 [ 311.597328][T17319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.597371][T17319] __sock_sendmsg+0x145/0x170 [ 311.597397][T17319] ____sys_sendmsg+0x31e/0x4a0 [ 311.597450][T17319] ___sys_sendmsg+0x195/0x1e0 [ 311.597554][T17319] __x64_sys_sendmsg+0xd4/0x160 [ 311.597586][T17319] x64_sys_call+0x17ba/0x3000 [ 311.597635][T17319] do_syscall_64+0xc0/0x2a0 [ 311.597664][T17319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.597716][T17319] RIP: 0033:0x7f901971acb9 [ 311.597733][T17319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.597756][T17319] RSP: 002b:00007f9018177028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.597857][T17319] RAX: ffffffffffffffda RBX: 00007f9019995fa0 RCX: 00007f901971acb9 [ 311.597870][T17319] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 311.597883][T17319] RBP: 00007f9018177090 R08: 0000000000000000 R09: 0000000000000000 [ 311.597969][T17319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.597983][T17319] R13: 00007f9019996038 R14: 00007f9019995fa0 R15: 00007fff6d739058 [ 311.598007][T17319] [ 311.953487][T17321] validate_nla: 2 callbacks suppressed [ 311.953505][T17321] netlink: 'syz.1.3971': attribute type 32 has an invalid length. [ 311.978211][T17321] bond2: Setting coupled_control to off (0) [ 311.986018][T17323] netlink: 'syz.0.3972': attribute type 4 has an invalid length. [ 311.991636][T17326] netlink: 'syz.5.3973': attribute type 4 has an invalid length. [ 312.024239][T17323] netlink: 'syz.0.3972': attribute type 4 has an invalid length. [ 312.025733][T17326] netlink: 'syz.5.3973': attribute type 4 has an invalid length. [ 312.038714][T17323] FAULT_INJECTION: forcing a failure. [ 312.038714][T17323] name failslab, interval 1, probability 0, space 0, times 0 [ 312.052559][T17323] CPU: 0 UID: 0 PID: 17323 Comm: syz.0.3972 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 312.052611][T17323] Tainted: [W]=WARN [ 312.052620][T17323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.052636][T17323] Call Trace: [ 312.052643][T17323] [ 312.052653][T17323] __dump_stack+0x1d/0x30 [ 312.052688][T17323] dump_stack_lvl+0x95/0xd0 [ 312.052715][T17323] dump_stack+0x15/0x1b [ 312.052747][T17323] should_fail_ex+0x263/0x280 [ 312.052775][T17323] should_failslab+0x8c/0xb0 [ 312.052801][T17323] __kmalloc_cache_noprof+0x64/0x4a0 [ 312.052845][T17323] ? igmpv3_add_delrec+0x89/0x2e0 [ 312.052865][T17323] igmpv3_add_delrec+0x89/0x2e0 [ 312.052885][T17323] __igmp_group_dropped+0x409/0x460 [ 312.052923][T17323] ? ip_mc_del_src+0x35d/0x480 [ 312.053028][T17323] __ip_mc_dec_group+0x179/0x390 [ 312.053119][T17323] ip_mc_drop_socket+0x16c/0x1e0 [ 312.053159][T17323] inet_release+0x31/0xf0 [ 312.053254][T17323] sock_close+0x6b/0x150 [ 312.053285][T17323] ? __pfx_sock_close+0x10/0x10 [ 312.053303][T17323] __fput+0x29b/0x650 [ 312.053330][T17323] fput_close_sync+0xad/0x190 [ 312.053359][T17323] __x64_sys_close+0x55/0xf0 [ 312.053460][T17323] x64_sys_call+0x2c25/0x3000 [ 312.053485][T17323] do_syscall_64+0xc0/0x2a0 [ 312.053561][T17323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.053588][T17323] RIP: 0033:0x7f901971acb9 [ 312.053608][T17323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.053632][T17323] RSP: 002b:00007f9018177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 312.053651][T17323] RAX: ffffffffffffffda RBX: 00007f9019995fa0 RCX: 00007f901971acb9 [ 312.053710][T17323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 312.053726][T17323] RBP: 00007f9018177090 R08: 0000000000000000 R09: 0000000000000000 [ 312.053751][T17323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.053766][T17323] R13: 00007f9019996038 R14: 00007f9019995fa0 R15: 00007fff6d739058 [ 312.053895][T17323] [ 312.328213][T17334] netlink: 'syz.0.3976': attribute type 19 has an invalid length. [ 312.336269][T17334] netlink: 'syz.0.3976': attribute type 20 has an invalid length. [ 312.360382][T17340] netlink: 'syz.6.3978': attribute type 29 has an invalid length. [ 312.381063][T17341] netlink: 'syz.1.3975': attribute type 10 has an invalid length. [ 312.453083][T17353] loop6: detected capacity change from 0 to 128 [ 312.464365][T17353] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 312.487960][T17353] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 312.503956][T17351] lo speed is unknown, defaulting to 1000 [ 312.529883][T17355] lo speed is unknown, defaulting to 1000 [ 312.728664][T17367] lo speed is unknown, defaulting to 1000 [ 312.763348][T17369] loop6: detected capacity change from 0 to 4096 [ 312.787524][T17369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.099552][T17385] netlink: 'syz.0.3994': attribute type 19 has an invalid length. [ 313.131432][T17377] ================================================================== [ 313.139558][T17377] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 313.147480][T17377] [ 313.149822][T17377] write to 0xffff88811adc376c of 4 bytes by task 17369 on cpu 1: [ 313.157553][T17377] xas_set_mark+0x12b/0x140 [ 313.162077][T17377] __folio_start_writeback+0x17b/0x370 [ 313.167604][T17377] ext4_bio_write_folio+0x5ad/0x9f0 [ 313.172850][T17377] mpage_process_page_bufs+0x4a1/0x620 [ 313.178336][T17377] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 313.183117][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 313.183159][ T29] audit: type=1326 audit(1768819748.939:8720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.5.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363a68acb9 code=0x7ffc0000 [ 313.184172][T17377] ext4_do_writepages+0x6fe/0x2800 [ 313.194002][ T29] audit: type=1326 audit(1768819748.959:8721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.5.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363a68acb9 code=0x7ffc0000 [ 313.213696][T17377] ext4_writepages+0x18f/0x320 [ 313.213728][T17377] do_writepages+0x1c6/0x310 [ 313.213781][T17377] file_write_and_wait_range+0x178/0x2f0 [ 313.213802][T17377] generic_buffers_fsync_noflush+0x45/0x130 [ 313.213829][T17377] ext4_sync_file+0x1aa/0x680 [ 313.213847][T17377] vfs_fsync_range+0x10d/0x130 [ 313.223531][ T29] audit: type=1326 audit(1768819748.989:8722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.5.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f363a68acb9 code=0x7ffc0000 [ 313.242400][T17377] ext4_buffered_write_iter+0x34f/0x3c0 [ 313.242447][T17377] ext4_file_write_iter+0x380/0xf70 [ 313.248814][ T29] audit: type=1326 audit(1768819748.989:8723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.5.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363a68acb9 code=0x7ffc0000 [ 313.251821][T17377] iter_file_splice_write+0x6bc/0xa80 [ 313.251842][T17377] direct_splice_actor+0x156/0x2a0 [ 313.251858][T17377] splice_direct_to_actor+0x311/0x670 [ 313.257571][ T29] audit: type=1326 audit(1768819748.989:8724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.5.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363a68acb9 code=0x7ffc0000 [ 313.263389][T17377] do_splice_direct+0x119/0x1a0 [ 313.268183][ T29] audit: type=1326 audit(1768819748.989:8725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.5.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f363a68acb9 code=0x7ffc0000 [ 313.272829][T17377] do_sendfile+0x380/0x650 [ 313.272858][T17377] __x64_sys_sendfile64+0x105/0x150 [ 313.272880][T17377] x64_sys_call+0x2db1/0x3000 [ 313.297920][ T29] audit: type=1326 audit(1768819748.989:8726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.5.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363a68acb9 code=0x7ffc0000 [ 313.301844][T17377] do_syscall_64+0xc0/0x2a0 [ 313.307106][ T29] audit: type=1326 audit(1768819748.989:8727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.5.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f363a68acb9 code=0x7ffc0000 [ 313.330469][T17377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.330497][T17377] [ 313.330505][T17377] read to 0xffff88811adc376c of 4 bytes by task 17377 on cpu 0: [ 313.330523][T17377] __writeback_single_inode+0x201/0x7b0 [ 313.330557][T17377] writeback_single_inode+0x16d/0x3f0 [ 313.330588][T17377] sync_inode_metadata+0x6e/0xa0 [ 313.330618][T17377] generic_buffers_fsync_noflush+0xee/0x130 [ 313.330640][T17377] ext4_sync_file+0x1aa/0x680 [ 313.330661][T17377] vfs_fsync_range+0x10d/0x130 [ 313.330684][T17377] ext4_buffered_write_iter+0x34f/0x3c0 [ 313.330720][T17377] ext4_file_write_iter+0x380/0xf70 [ 313.330756][T17377] iter_file_splice_write+0x6bc/0xa80 [ 313.330774][T17377] direct_splice_actor+0x156/0x2a0 [ 313.330794][T17377] splice_direct_to_actor+0x311/0x670 [ 313.330816][T17377] do_splice_direct+0x119/0x1a0 [ 313.330832][T17377] do_sendfile+0x380/0x650 [ 313.330857][T17377] __x64_sys_sendfile64+0x105/0x150 [ 313.330884][T17377] x64_sys_call+0x2db1/0x3000 [ 313.330910][T17377] do_syscall_64+0xc0/0x2a0 [ 313.330929][T17377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.330952][T17377] [ 313.330956][T17377] value changed: 0x0a000021 -> 0x04000021 [ 313.330968][T17377] [ 313.330972][T17377] Reported by Kernel Concurrency Sanitizer on: [ 313.330991][T17377] CPU: 0 UID: 0 PID: 17377 Comm: syz.6.3990 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 313.331023][T17377] Tainted: [W]=WARN [ 313.331031][T17377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.331045][T17377] ================================================================== [ 313.645030][T12594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.