last executing test programs: 2m30.521085026s ago: executing program 32 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x24, {0x7}}}, 0x104}}, 0x0) 2m19.481293172s ago: executing program 3 (id=1345): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x80ffffff, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 2m19.477518232s ago: executing program 3 (id=1346): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@barrier_val={'barrier', 0x3d, 0x8}}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000002080)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r2, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000000080)=""/223}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$P9_RLERRORu(r1, &(0x7f00000001c0)=ANY=[], 0x15) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9, 0x4}}, './file1\x00'}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) pipe(&(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') r5 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f00000000c0)={'vxcan1\x00', 0x4, 0x507}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000940)={0x0, 0x2, 0x7, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000d40)={r6, "45635efa4a49fcaada97bcf20be3c99f"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x2004}) splice(r8, &(0x7f0000001fc0)=0x10, 0xffffffffffffffff, &(0x7f0000002000)=0x7, 0x6, 0x7) epoll_wait(r11, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="01002cbd7000fbdbdf251f00002578d9d29808bce959ff2bfe093e0f000800010045000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x48080) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000001d40)={0x270, 0x14, 0x400, 0x70bd2a, 0x25dfdbfb, {0x10, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x67, 0x1, "4c849c83d4866b93a44272c2ca759b4a75d38254b38f74f01da9567691508c07cb52f7b85843ff861aeff6c4548a7b20b6d8bc56f87c4986c20a1abadd0730aa31f7bd6f2661dc7cb8b53e7e35663d15602006e46711220a5fc35fc7455bf62af18e4e"}, @INET_DIAG_REQ_BYTECODE={0x68, 0x1, "ae288450c787b95d8a86634d99ee1c221e826bd1ce93e7cadb74a9320b72f0da7997aec93a5fcebc753b6bfcb14601eb2d270173ef3b31690913776fa433b4810aa4143097f6724378047ce09eaa52b6d1c3fb6071edc8a25d96dab164b18313540807db"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "e465fcf348c56df17c2261a9425e348cce5c8872cf28c11d502fd8c607b3565e1c8f666bce655f1abc370679bd9e5026b7026c4fa0b92b53de36c26355f4aea528cdd653fb680c909f6eaf743863afe8826f362ab0552a8fc9de3e564f8a1f15298add91ae160e6b4ccb069f908404f6af737ce5f30d255208f7a3572c20546279750395f4a23d67edf79f434cc0b52bc87513bb0e0eb82d5b1157bffee3b71076f76eec743410bf043bea25bc7dcae1ab78027bca1d25159c25ecc8f92ab8be3e"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "877b04b8f300993d8f65962dc7488af160587f7a821613cbedfe655dedce6e86ac4224c249da90f7ac004ca145176c83c27f7a94bc3de806e64f49aaebd1b9609fbf7ca19c3fb065d28246a709ac7581b8ad4a618f1769c2a95f97c9936dc5f5b8676ad51a49b31f51535a281bfff20af44debb594a4c1c56d706e0a32950417269d28336d3eecb1a1b10b97750306701797b66bcb9edaf1448f540ffedb45b2138406ab90f523da463b1cbd5008d71a4b9ceb3fdd0c615499b787aa000b"}]}, 0x270}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) 2m18.053900965s ago: executing program 3 (id=1368): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0xc, 0x43, 0x558}) 2m17.057661804s ago: executing program 3 (id=1376): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000030000000100000f070000000d00c3000300000065e0f750004f3030"], 0x0, 0x35, 0x0, 0x1}, 0x28) 2m17.057038604s ago: executing program 3 (id=1377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cf", 0x3}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)=""/245, 0xf5}, {0x0}], 0x2}, 0x2}], 0x2, 0x121, 0x0) syz_emit_ethernet(0x68, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x7]}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x3, {{}, 0x2, {0x9}}}}}}}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "397ed0b4fcdb737da423ef184ccf3b7ea1d73d28373205cd8f0a6d1fcd17374a", 0x6, 0x3a99, 0x2, 0x2}, 0x3c) 2m17.050542814s ago: executing program 3 (id=1378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x300}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x3503, 0x3, 0x2, 0x0, 0x0, 0x200}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}]}]}, 0x1bc}}, 0x4000) 2m5.072431245s ago: executing program 33 (id=1613): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000006adacf9b03000000deffffd5ae997364a313009f50f711"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r1 = socket$caif_seqpacket(0x25, 0x5, 0x5) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r2, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) mq_notify(r2, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001c0001"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000300)=ANY=[@ANYBLOB="01aabb81004800000c0400004000020000ecf4b89368028d448f952bcc170917ae2682c4d28a93e6f73ff75bbc5056ffccf5ffcdd9952b4aab725610ef9b0b3f41e68e57f37618b381ddab62b41ba0c0d17956768e19ddbda4182702cd668b4136c016533c1d7c254c2c08ffa27f002134d667f98701d5a098e0b741bf8e00cff21c95cdf0cfa407000000000000000000"], &(0x7f00000002c0)={0x0, 0x4, [0x1de, 0xfe, 0x81f, 0xe40]}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x3fffff) 2m0.949423735s ago: executing program 34 (id=1378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x300}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x3503, 0x3, 0x2, 0x0, 0x0, 0x200}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}]}]}, 0x1bc}}, 0x4000) 1m32.921741495s ago: executing program 5 (id=2193): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000100)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0}, 0xf5ff}], 0x1, 0x4000000) 1m32.345637679s ago: executing program 5 (id=2200): accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) readlink(&(0x7f0000002ac0)='./file1\x00', &(0x7f00000033c0)=""/4107, 0x100b) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000000800000001000000000000006e3ed6db90c002597bc3da6d4d5aa947f5fd5f3a0f1e29fb981918ff8c723053ea4522b2c679409cfc2332f4ab882acc373979a64cf9d7d0436fc1b65709a19bb2cf74e8a4c36f47841fc8ed315f58d76a340aed0e70d5d2dc18c544cb8a4a0f787df18b12525bcb0fa42b3447899cb0561bb4be707511", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r0, 0x0, 0x0}, 0x20) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYRES64=r2], 0x18) 1m32.261575504s ago: executing program 5 (id=2203): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x624, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5f8, 0x2, [@TCA_U32_SEL={0x5f4, 0x5, {0xf, 0x1, 0x5e, 0x10, 0x6, 0x2, 0x5, 0x5, [{0xfffffff9, 0x66, 0xe, 0x2}, {0xe2, 0x5, 0x11c, 0x43d5}, {0x8, 0x1, 0xffffff81, 0x5}, {0x0, 0x679, 0x0, 0x3}, {0xb, 0xffff0001, 0x10, 0x9cd}, {0x7, 0x8, 0x8, 0x3}, {0x9, 0xf, 0x0, 0x7}, {0x6e5, 0xd7b, 0x80000000, 0x2000000}, {0x2, 0x2, 0x5, 0x9}, {0x9, 0x80, 0xa, 0x5}, {0x80, 0x3, 0x903, 0x3b9}, {0xa55, 0x8000, 0x9, 0xe5}, {0x3, 0x847b, 0x7, 0x8}, {0x7ff, 0x7, 0x8, 0x5}, {0x10, 0x2, 0xffff, 0x7fffffff}, {0x0, 0x70a, 0x6, 0x6}, {0x2, 0x9, 0x1, 0x5}, {0x0, 0xfffffffe, 0x7, 0x4}, {0x3, 0x3}, {0x2, 0x0, 0x4, 0xf8d4}, {0x8000, 0x1000, 0x22663cd8, 0x3}, {0xef3, 0xd, 0x7, 0x81}, {0x42b0, 0x2, 0x4bbb, 0x7fff}, {0x0, 0x5a2, 0x4, 0x3ff}, {0x4, 0x0, 0x4, 0x400}, {0x10000, 0x2, 0x9, 0x40b}, {0xfffffffe, 0x6, 0x80000000, 0x9000}, {0x2, 0xa696, 0x10000, 0x6}, {0x9, 0x3b, 0x5, 0x6}, {0x7fffffff, 0xa3, 0x5, 0x2}, {0x280, 0x7ff, 0x2, 0x1d57}, {0x2, 0x10, 0x7fff, 0x3}, {0x812, 0x7, 0xffffffff, 0x4}, {0x1, 0xff, 0xb450, 0x401}, {0x8, 0xa90, 0x2, 0x1}, {0x2, 0x5, 0x7, 0x2}, {0xa, 0x3, 0x0, 0x9}, {0x2, 0x800, 0x3, 0x4}, {0x7fffffff, 0x8, 0x6, 0x5}, {0x6, 0xd7, 0x7, 0x8}, {0x3, 0x4, 0x9, 0x7fffffff}, {0x80, 0x8, 0x3f, 0x4}, {0x643, 0x19df, 0x1, 0x3ff}, {0x5, 0xb3f, 0x3ff, 0x8}, {0x4, 0x78c, 0xf, 0xe000000}, {0xfff, 0x2, 0x80000001, 0x7eca}, {0x9, 0x3ff, 0x44efcf3c, 0x7ff}, {0x6ae, 0x3, 0xd, 0xe}, {0xfffff414, 0x7, 0x6, 0x8}, {0x6da8, 0xffffa8fd, 0x1, 0x3}, {0x10001, 0x80000001, 0x200, 0x8000}, {0x3, 0x3, 0xc8e6, 0x6}, {0x6, 0x1, 0x4, 0x7fffffff}, {0x5, 0x6a1, 0xb, 0x9}, {0x0, 0x9, 0x1, 0x8}, {0x8000, 0x5, 0x6, 0xffffff0e}, {0x1, 0x4, 0xffffffff, 0xfffff001}, {0xff, 0x40, 0x4, 0x80}, {0xde1, 0x200, 0x81, 0x3ff}, {0x400, 0x9, 0x8, 0x100}, {0x9b, 0x2, 0x1, 0xc82}, {0xe650, 0x121, 0x7, 0x3}, {0x7, 0x1, 0x4, 0x8}, {0x7, 0x1, 0x480000, 0x7fffffff}, {0x4, 0x0, 0xb}, {0x40, 0x0, 0x4ffd2e57, 0x1}, {0x80, 0x7fffffff, 0xffffffff, 0x1000}, {0x3, 0x8, 0x8, 0x621}, {0x9, 0xb, 0x0, 0x528}, {0x4, 0x4, 0x1, 0x4}, {0xa2, 0x7, 0x5, 0x3}, {0x7fff, 0x8, 0x2, 0x1}, {0x6, 0x9, 0x1, 0x5}, {0xc, 0xffffdfd3, 0x5}, {0x69, 0x81, 0xdd8, 0x1000}, {0x7ff, 0x9, 0x0, 0x7}, {0x7, 0xc6, 0x2, 0x9}, {0xacb7, 0x6, 0x10000, 0x7}, {0x5, 0xb, 0xe1e4, 0x1}, {0x10001, 0x7, 0x8, 0x2}, {0x6, 0x3, 0x45, 0x4}, {0x9, 0x8000, 0x1, 0x95}, {0x2, 0x0, 0x3, 0x8}, {0x7, 0x4, 0x8, 0x2067}, {0x2, 0x8, 0x3, 0x6}, {0x4, 0x4, 0x4, 0x9}, {0x2, 0x18, 0x10001, 0x800}, {0x3, 0x9, 0x8dd4, 0x6}, {0x9, 0x81, 0x1, 0xe4}, {0x9, 0x0, 0xffffffff, 0x615d}, {0x1, 0x0, 0x6, 0x9}, {0x4, 0x2, 0x3, 0x2e}, {0x4, 0x54, 0xfffffff9, 0x810}, {0x1, 0x0, 0x39, 0x1}]}}]}}]}, 0x624}}, 0x24040084) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000018c0), 0x0, 0x0, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000180)='./file0\x00', 0x400, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x1, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40004}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0x800, 0x2}}}}}}, 0x0) 1m32.127381051s ago: executing program 5 (id=2206): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) setsockopt$sock_attach_bpf(r0, 0x6a, 0x6e, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x44, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x4, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000100100000c00000000000000"], 0x10}, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003904000000000000000600000000", @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac14"], 0x40}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x43403d0e, 0x0) setsockopt$packet_int(r8, 0x107, 0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000240)="3f031c0003", 0x5, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setns(r3, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) r10 = syz_io_uring_setup(0x3c90, &(0x7f0000000000)={0x0, 0x2000, 0x10000, 0x0, 0xda}, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0xbf6b}}) io_uring_enter(r10, 0x5b43, 0x3, 0x4d, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000700)={[{@i_version}, {@dax_inode}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0xa00000}}, {@noinit_itable}]}, 0x1, 0x643, &(0x7f0000002480)="$eJzs3W1oHGkdAPD/TN5sL3epoKInHBHhENTNW1HiJ88vInra80RBlBrSbRKym83lBZIoev2gHIdFOcEKFlHsB7W+LPhBBaUiiB9arIWiiFBEKYhSamtBKUJksrtJaLbJ0ryM7f5+MOnzPDPZ55n5978z82RfAmhb/dmPNOINEXEsiejbtK4z6iv7a9tVR6qT2ZLE6urzN5NIIuLcSHWysX1S//ex+q+9PiLe86aI6e6t/c4vr0yPlUrFuXp9YKE8OzC/vPL2qfLYRHGiOHN0aPDo6PDo6Dv2bl+vvvLb3/znJ++tfvHs+17p/OjLv8vG21tft3k/9kp/9NePSVcc27wiiXjXXneWs7TF7V5b/NIv9nkotKj8ufPf6KzneVcWm+iLjnrWf/vyJ273xeRM3mME9s9qT8Rqi3qi9W2Bh0Eip6FNNa4DsvvfxnJQ1x53/3RQPXE/N56p3QCeq8/tVNfj31mbG4pXrd0bHv5XUr8zrEkac0e7cPq57DG+8/G3/f4rf82W2Kd5GP4/Vf+S9wjIU/fRvEdAnp58Lu8RkKfLL+U9Al48FRGDnZ1br/+TXV/fvXuH9T/7bHb9d/rpzW2u/9rHh5/PewTk6YN7+Ld9Hj5fv5n3CPjlM9n5v9n8X7o+/xNN5n96a7+2Kz2T2fn/q2c2tzn/H6zG/F91y/zfRvw77jP/96kW+7j733//sVn79TNZ/P/53cb8X7Zk/TfmAtl/N05FPNk0/sl6/JMm8U8jYrbFPl742KUPNWv/wcUs/keGxT8/q9+KeDqax78h2fb1mQMnp0rFwdrP5n089asf3WrWvvTOLP7zp8U/P1n+H75P/Hd6/n+xxT7Op39einh8S/v3P5/F/9DF7eOf/r07+cjaf8bGy4iXxhYW5oYiupMPbG0ffoCD0EYax6hxDLP4v+XN25//mz3/H4qIL7fY55Uf3hpt1v61Uhb/K6fkf36y+J/YIf+bxT9r+2aLfaTjr/tHs/Ynzmbx/+TLjdj//KnPXBd/AAAAAAAAAAAAAAAAAAAAAAAAHmXp2mf5JmlhvZymhULtO7xfE4fTUmV+4a0nK4szJ2qf+XskutLGRz321epJVh9aK2/Uh++pj0TEqyPipY5Da/XCeKV0Iu+dhzbVG3Htxy+MN/lmfgAAAAAAAAAAAAAAAAAAIC+P3fP+/7911N7/Dzy6eiOuXf31Ty9k5TsdeY8GOEhZ/n/vTvn9If+h7Wyf/z25jAk4GM7/0L7kP7Qv+Q/tS/5D+5L/0L7kP7Qv+Q/tK8v/rnpZ/kN72Xz+BwAAAAAAAAAAAAAAAAAAAAAAAAD217Fnn82W1epIdTKrz1QmpqYnZ0eHBwvlxfHCeGVutjBRqUyUioXxSnnnxytVKrNDw7G4NLBQnF8YmF9eOV6uLM4sHJ8qj00Ujxe7DmCfgJ1duP2HL+Q9BgAAAAAAAAAAAAAAAAAAYEPv2pKkhYhI18ppWihEPB4RR6IrOTlVKg5GxBMRcamjqyerD+U9aGBXeiOuvXFo9NN5jwMAAAAAAAAAAAAAAAAAANgwv7wyPVYqFecUFBQU1gt5PzMBAAAAAAAAAAAAAAAAAED72XjTb94jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID8bHz///4V8t5HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAfxvwAAAP//O2xggA==") 1m31.612089172s ago: executing program 5 (id=2222): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000700000005000000010000040180001f1531b7a8969c591a00000000002e005f5f2e"], 0x0, 0x37, 0x0, 0x1, 0x7fffffff}, 0x28) 1m30.998485057s ago: executing program 5 (id=2232): socket$unix(0x1, 0x1, 0x0) unshare(0x6c000200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108fffffc0000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80000000f9efffff000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1m30.977199828s ago: executing program 35 (id=2232): socket$unix(0x1, 0x1, 0x0) unshare(0x6c000200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108fffffc0000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80000000f9efffff000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1m15.248560089s ago: executing program 7 (id=2549): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="0a000000010000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m14.995573434s ago: executing program 7 (id=2557): sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0xc, 0x9, 0xa, 0x20, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x3, 0x4e24}, @sadb_x_filter={0x5, 0x1a, @in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x10, 0x18}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd29, 0x3503}, @sadb_key={0x16, 0x0, 0x528, 0x0, "6fc3a8b57fbbc04635d9038dee483aebf7404647420b56276abb133844cf50da8b493ebcca59c5ef15f04a644dc5b47707078400a3c79b58fb29e17981859d076b507d0aaef3a118579e97ade61c0b793f4da249cd6cac3243dd525ad9d77a56e1dd711597e703cd148440e5d7c3f0cc97ffd0f426c2e90bc4d64959521a5aeead29a603e556ffe430455a65d07c2855ca133495263d258d7e79e4a47e48af73baa04ef5dd"}]}, 0x100}}, 0x40804) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x8}) shutdown(r2, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000380)="8bea50824af5", 0x6) 1m14.869287441s ago: executing program 7 (id=2563): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, 0x0) r1 = syz_open_procfs(0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x800, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000680)=ANY=[@ANYBLOB="54010000100001000000000000000000fe80000000000000000000000000003a2001000000000000000000000000000200000000200000000200200000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) 1m14.765521947s ago: executing program 7 (id=2567): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000380)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYRESHEX=0x0], 0x1, 0xa2f, &(0x7f00000018c0)="$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") r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x83a3ba04b6fa3050, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) write(r0, &(0x7f0000000200)="bc18f6efe98d6d5fc28556d7d12ae3cc1f3fbce8567da6e32f18d6a74b00e719a445", 0x22) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigqueueinfo(0xffffffffffffffff, 0x28, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2528c0, 0x4) unshare(0x8040480) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xff51, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010105}]}, &(0x7f0000000080)=0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12, 0x20052}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) r8 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r8, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)={0x20000016}) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a8c000000060a010400000000000000000a0000050900020073797a320000000060000480300001800d00010073796e70726f7879000000001c0002800800034000000000050002000e00000005000200080000002c0001800b0001006e756d67656e00001c0002800800024000000007080001400000000b08000340000000010900010073797a31"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r10 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, r8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) 1m14.20153272s ago: executing program 7 (id=2574): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000003c0), 0x2, 0xbdb, &(0x7f0000003840)="$eJzs3M9rm+cdAPDv+1qWncSbnDHGsss8xkhgTLEzHJYwWDIydtltuw4iHDkYKz+wPTI7hsjbPzC2nQe7DLaFjR2Wsy8t9NpLm1xbeiiE4sYtlNKqvLJku7ZkO43k19ifDzx+nx+Snu9Xr6X3eUBSACfWWPYnjTgXETeTiFKrP42IYrM2HFHfuN362vLUx2vLU0k0Gr/+IIkkIl6sLU+1HytpHc+0GsMR8ebPk/jGH3fPO7+4NFup1apzrfbFhTv3L84vLv1o5k7ldvV29e7E5Z9MXpq8PH5lsme5fvLOtScffe+X79U//ddnjz/8yz+SuBYjrbHtefTKWIxtPifbFSKi0uvJcjLQymd7nklhnzulfQ4KAICuGo1Go72G+1aUYiC2Fm+leO2tXIMDAAAAeiLb/DcAAACAYy6x/wcAAIBjrv05gBdry1PtcoCPDaw+6+/HEg7N8+sRMbqR/3qrbIwUot48DsdgRJx+kcT2r7UmG3d7ZWMR8e6zK//NSvTpe8h7qa9ExLc7nf+kmf9o81vcu/NPI2K8B/OP7WjnkX+h4////vlf68H8eecPwMm0en3jQrb7+pdurn+iw/Wv0OHa9VXkff1rr//Wd63/tvIf6Lj+GzrwHA//+bcH3cay/H/65Bf/aZds/uz4Cim9lOcrEd8pdMo/2cw/6bL+vXnAOUqfP6h2G8s7/8bfI85H5/zbkr1/n+ji9EytOr7xt+McK29M/rvb/Hnnn53/013yb//+U7fzf/+Ac/z2xo3/7erctoHcO//0/WLym2at2Or5fWVhYW4iopj8qt2fJO3+S3vH0r5N+zGy/C98f+/Xf6f8s/eEeut5yPYCK61j1v7Djjl/9vjh/7vF097/5Xn+b3U5/9vyf7TzflmefzrgHD94/c8Xuo1t3/9mJZu/vRcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLY0IkYiScub9TQtlyPORMQ343Rauze/8MPpe7+7eysbixiNwXR6plYdj4jSRjvJ2hPN+lb70o72jyPibET8tXSq2S5P3avdyjt5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANp2JiJFI0nJEpBGxXkrTcjnvqAAAAICeG807AAAAAKDv7P8BAADg+LP/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM/Ofnf1aRIR9aunmiVTbI0N5hoZ0G9p3gEAuRnIOwAgN4W8AwBy85J7fMsFOIaSfcaHu44M9TwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6u8+dWnyYRUb96qlkyxdbYYK6RAf2W5h0AkJuBvQYLhxcHcPi8xOHksscHkn3Gh7duU//yyFDfYgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6BlpliQtR0Sx1VcuR3wtIkZjMJmeqVXHI+LrEfF2aXAoa0/kHDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9N7+4NFup1apzWSWNVmWzp9J4tLPnpFaGWs9Y/YjEs6Oy41Sq7F8pxpEI44hW9nzbGDiUNycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7d/OLSbKVWq87N5x0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkLf5xaXZSq1WnetjJe8cAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIzxcBAAD//7xXDro=") 1m13.967111474s ago: executing program 7 (id=2582): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0, 0x0, 0x0, 0x2e8}}], 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x490e8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x8}, 0x8) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$bt_hci(r4, 0x84, 0x76, 0x0, &(0x7f0000001080)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000d0429bd0a000000000076000000", @ANYRES32=0x0, @ANYBLOB="00000000195000002c0012800c0001006d6163766c616e001c000280080003000000000006000200010000000800010004000000140035006d6163766c616e3000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) 1m13.951417425s ago: executing program 36 (id=2582): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0, 0x0, 0x0, 0x2e8}}], 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x490e8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x8}, 0x8) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$bt_hci(r4, 0x84, 0x76, 0x0, &(0x7f0000001080)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000d0429bd0a000000000076000000", @ANYRES32=0x0, @ANYBLOB="00000000195000002c0012800c0001006d6163766c616e001c000280080003000000000006000200010000000800010004000000140035006d6163766c616e3000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) 1m8.39745627s ago: executing program 9 (id=2583): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000040000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000010000000000008001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f0000000000000000fdffffffffffffff0000000000000000000000002cbd700000350000020000005000000000000000600012"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1m8.237580369s ago: executing program 9 (id=2651): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) lseek(r3, 0x2, 0x3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x11, r4, 0x10000000000005, 0xfffffffffffffffa) r5 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) sendfile(r5, r5, 0x0, 0x800000009) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000180)) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_GETNSID={0x44, 0x5a, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r2}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_FD={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m7.673757942s ago: executing program 9 (id=2659): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x40, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 1m7.281287164s ago: executing program 9 (id=2665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, 0x0) statx(r1, 0x0, 0x800, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) 1m7.235261767s ago: executing program 37 (id=2665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, 0x0) statx(r1, 0x0, 0x800, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) 27.478617843s ago: executing program 4 (id=3478): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0xfffb) 27.280174934s ago: executing program 4 (id=3482): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000f9000007", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80143, 0x1ff) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r4 = dup3(r2, r3, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x81) write$P9_RGETATTR(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) futex(&(0x7f0000000000)=0x1, 0x0, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100), 0x1) 25.941704583s ago: executing program 4 (id=3506): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700009e0ff008001ffff2e1ffff8100632f0806a5", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.873187166s ago: executing program 4 (id=3509): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="b6f0ef347db3e3bfee259a9c4f0f4f790eac6ba21ee11082c8cd5f17478b262312d26e7adadb858ae4f97abef8", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004010}, 0x40000) r2 = getpid() syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$eJzs2zFrE2EYB/DnahrTOiSDkzjc6BSafoIGqSAGBCWDgqDYBqQnBQsBHWw3B7+EH8bBVT+JYwfhpLk0aUKEGpocJL/fkodc/rnnfcMleQJ5ff/90cHxSe9V70fUkiQ29iKN8yQasRGXzgIAWCXneR6/8zzPb5/F1rfI87zsjgCARfP5DwDr5/mLl0/anc7+szStRWRf+t1+t7gtjrd78S6yOIydqMefuPiCMFTUjx539nfSgUZ8zU6H+dN+99ZkvhX1aMzOt4p8OpnfjO2r+d2ox93Z+d2Z+Wo8qI7ymxFRj19v4ziyOIiL7Dj/uZWmD592pvJ3Bo8DAACAVdBMRwbzezUm5/dmc/L4eD4u8u3k2r8PTM3XlbhXKXftALCuTj5+OnqTZYcf5ihqw+eYM3694ud2cZIFnuKGisstHd2zt4z9+d+ierXDqWJrwa1Wlr7kJCLK2vDvEVH6yz3XRT0oSngzApZqfPWX3QkAAAAAAAAAAAAAAPAvy/hfUdlrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD9/A0AAP//W1+CbQ==") r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x591) r6 = syz_pidfd_open(r2, 0x0) setns(r6, 0x24020000) syz_clone(0x70000091, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat(r7, &(0x7f0000000100)='./file1\x00', 0x40000, 0x40) 25.541096406s ago: executing program 4 (id=3511): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x77, 0x27, 0x6, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x5, 0xfffffffc, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0xff80, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1f}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x9, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {0x0, 0x2000, 0x1}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e21, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) 25.212048006s ago: executing program 4 (id=3517): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x1c, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}}, 0x1c}}, 0x0) 25.159441318s ago: executing program 38 (id=3517): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x1c, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}}, 0x1c}}, 0x0) 3.506240465s ago: executing program 6 (id=3965): mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x5, 0x2, 0x4) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xd6fd]}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_newnexthop={0x1c, 0x68, 0x2, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x2, 0x0, 0x6}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000180)={{0x0, 0x1}, {0x100, 0x6}, 0x3, 0x1}) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) move_pages(r1, 0x3, &(0x7f0000000200)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000240)=[0x4, 0xfffff8cd, 0x1452, 0x2, 0x7], &(0x7f0000000280)=[0x0, 0x0], 0x2) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r0) getdents64(r0, &(0x7f0000000300)=""/205, 0xcd) mq_timedreceive(r0, &(0x7f0000000400)=""/149, 0x95, 0x9, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x144, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xf4, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7531e815}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x46}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x100}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x745}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x75}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x400c090) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)=0x0) sendmsg$kcm(r0, &(0x7f00000018c0)={&(0x7f0000000740)=@nfc_llcp={0x27, r2, 0xffffffffffffffff, 0xa04cb5e01f9763e0, 0x5, 0x7, "da2bd4411160d672df25174f61771e0f5129780e959a32d37febbde84c266c3024d51b6826467dc266f77787daae70c034622018591a8527b410b978e07057", 0x28}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000007c0)="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", 0x1000}], 0x1, &(0x7f0000001800)=[{0xc0, 0x107, 0x10000, "8ec0e28c8afeba2e5f9430a8f9838722eb94164db293d64388d9e4c2cb80f6c2564fba878cd5cf959ae040fb3209b7d8925f85b0daec4d4da88c8e6327f6aa5a60063a2decc06467e8e13b9a9681370596f245ad9dfd6633aaa2c2536caea4864baab057b912412692c8f10e69e0466e2bf3e13ae9aa949f5e1811722bfb8a2585873483cc88dcb6bb0cc44932a86ec9edc19602770623b283f4784f51c506a87965a01dc9811611a61c500c"}], 0xc0}, 0x20048080) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001900), 0x400000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xe747, 0x25}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x44090) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b00), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x5c, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfe00}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd2}, 0x48004) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c80)={0xe8, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_TESTDATA={0xbe, 0x45, "4595eef99b065f500e6359776c589d000945ad110b8df3830aaaa5d577fa32a4cfad88b07d9bcdf6d6c5602b1690d672e9b14e8bfc7271bc7c4babb0266c01cb9bf2da9e50f4549df08d00126853e2767129be0b0d51c86258e8573553cb0e432b5e4532930b1f7b5287f3a4c45f6a490cfb5c33e21da53e6399d19332fbfe914394d05b15c5120309029a7490a00662adf5df55c418d608b43248b6a816a70b1deb6c7694ca25400a295cb47aee5177670fff19714c2fb63483"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x8010) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00), 0x40000, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000002040)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002000)={&(0x7f0000001ec0)={0x108, r8, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "004deeaf6a6df9952b9bebb084caf83425e47c7ad220ced1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "627a82d97eb487fda2009a2ffb8786302c71bceede976a41"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b305d99c622c685175bd0caa1663ceed5c66e57c8f951ec2"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fe68daf7d5d9654ac9385f36ba5e0c5013c7c54539d183f3"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53421c97005d71232c4381290686def050f91c698d78dda9"}]]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000020c0)={0x5, &(0x7f0000002080)=[{0x4, 0x9, 0x40, 0x6}, {0x5912, 0x3c, 0x40, 0xfffffff9}, {0xe7, 0xc9, 0x1, 0x8}, {0xfff7, 0x9, 0x10, 0x5}, {0x4, 0x3, 0x4, 0x9}]}) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002100), 0x88700, 0x0) write$P9_RGETLOCK(r9, &(0x7f0000002140)={0x26, 0x37, 0x2, {0x2, 0x2, 0x5, r1, 0x8, 'nl80211\x00'}}, 0x26) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r10, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x81008000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x38, r4, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x19}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f00000022c0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, [0x8, 0x2, 0x3a3e0, 0x4d74, 0x6, 0x0, 0x42c, 0x64, 0x5, 0xd0, 0xfffffffffffffffc, 0xbc8, 0x5, 0x100, 0x3]}, &(0x7f00000023c0)=0x100) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000002400)={r11, @in6={{0xa, 0x4e21, 0x9, @mcast2, 0x8}}, [0x1, 0x7, 0xffffffff, 0xf, 0x9, 0x4, 0x5, 0x2, 0x1, 0x2, 0x7fffffff, 0x8, 0x9, 0x6, 0x7c]}, &(0x7f0000002500)=0x100) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8004) 3.496622455s ago: executing program 6 (id=3966): socket(0x2a, 0x1, 0x8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0xfd}, 0x8000000, 0x0, 0x0, 0x1, 0x8, 0x1ff}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000600)={0x43, 0x4, 0x2}, 0x10) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0xff, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time={0x0, 0xa}, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x2, 0x671f]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x87, @time, {0xfd}, {}, @connect={{0x0, 0x4}}}], 0xc4) write$sndseq(0xffffffffffffffff, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick=0xffffffff, {}, {}, @result={0xffffffff, 0x1}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x4, 0x0, @tick, {}, {}, @addr}], 0x54) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000400)={0x2, 0x1, 0x1, 'queue1\x00', 0x9}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a1", 0x0, 0x0, 0x0}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) write$sndseq(0xffffffffffffffff, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue={0x0, {0x4}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x1, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick=0x80000000, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xfc}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x400000}, {}, {}, @queue}], 0x8c) write$sndseq(0xffffffffffffffff, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick=0x23, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x29, &(0x7f00000004c0)="114513b4e53aa79afdd513a9c2ed762f4aec8a817e23d4011a48fe54f8024fcc60135c71309bec0848"}}], 0xc4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08b64d400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x400c090) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.550985331s ago: executing program 6 (id=3985): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x11ac4b, 0x0, 0x7fffffff, 0x7, 0x9, 0x41, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2) 2.450275307s ago: executing program 6 (id=3986): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x2200, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.968985315s ago: executing program 6 (id=3991): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f00000026c0)='./file2\x00', 0x200000, &(0x7f0000000340)={[{@dioread_lock}, {@noquota}, {@grpquota}, {@grpquota}, {@grpquota}]}, 0xfc, 0x57c, &(0x7f0000005c40)="$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") perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x1246, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000fffffffe0000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.117758835s ago: executing program 8 (id=4006): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x200084c, &(0x7f0000000080)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078303030303030303030303030303466372c7379735f696d6d757461626c652c6e6f646f74732c6e6f646f74732c6e66732c6572726f72733d636f6e74696e75652c646f74732c756d61736b3d30303030303030303030303030303030303030303030312c6e6f646f74732c6e6f646f74732c616c6c6f775f7574696d653d30303030303030303030303030303030303030303031312c6e6f646f74732c6e6f646f74732c646f74852c6e6f646f74732c6e6f646f74732c00"], 0x1, 0x274, &(0x7f0000000300)="$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") 1.117568794s ago: executing program 0 (id=4007): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100001400000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.093415916s ago: executing program 8 (id=4008): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x4040814) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000008880), 0x2, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = fsmount(r0, 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xc}, 0x90d2, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0xf86}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs(0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) (async, rerun: 32) r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) (async, rerun: 32) ptrace(0x10, 0x0) (rerun: 32) ptrace$setregs(0xd, 0x0, 0x20000000002, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x5, 0x8000, 0x9, 0xe3, 0xfffffffffffffffb}) (async, rerun: 64) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000003000010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r6], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 1.077809617s ago: executing program 2 (id=4009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c40ef000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000ec0506010200000000000000000000000a050001000700000005000100070000000900020073797a320000000005000100071d00000900030073797a3100000000"], 0x44}, 0x1, 0x0, 0x0, 0x2000c091}, 0x40) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x800001ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1a, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x8, 0x0, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) 1.059018408s ago: executing program 0 (id=4010): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r1 = gettid() pipe(0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) listen(0xffffffffffffffff, 0x5) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x81f, 0x0, 0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r5, 0x0) io_uring_enter(r4, 0x47bc, 0x0, 0x21, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000f9000007008201", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) utimensat(r9, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1232000c}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000314000827bd7000fbdbdf250900020073797a3000000000080041007278650014003300626f6e645f736c6176655f31000000000900020073797a3200000000080041007369770014003300766c616e3000"/96], 0x60}}, 0x4000000) 913.748966ms ago: executing program 8 (id=4012): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0317efffffff0000140012800b0001006d616373656300000400028008000500", @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x2000d009}, 0x0) 783.479974ms ago: executing program 0 (id=4014): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x8001) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000040)) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write(r1, &(0x7f0000000300)="2cd889f035a53e14f3d5ac17", 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40) r4 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x4d10, 0x2, 0x2, 0x0, 0x0) 673.729251ms ago: executing program 8 (id=4016): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000030000180000001800000005000000030000000100000f070000000d0000000700000065e0f750004f3030"], 0x0, 0x35, 0x0, 0x1}, 0x28) 673.291991ms ago: executing program 8 (id=4017): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200000034000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) 658.055602ms ago: executing program 0 (id=4018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0xa) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000c00)="$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") 575.444196ms ago: executing program 8 (id=4019): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f00000000c0)) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=@delqdisc={0x140, 0x25, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x6}, {0xfff1, 0x3}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5e, 0x8, 0x9, 0x100, 0x2, 0x80000000, 0xffff, 0x8}}, {0x14, 0x2, [0x1, 0xfffa, 0x236, 0xefd, 0x0, 0x6, 0x4, 0x6]}}, {{0x1c, 0x1, {0x9, 0x3, 0x3, 0xffffff3e, 0x2, 0x80, 0x8, 0x5}}, {0xe, 0x2, [0xc, 0x0, 0x3, 0x40, 0x7]}}, {{0x1c, 0x1, {0x4, 0x4, 0x4, 0x8, 0x2, 0x0, 0x9, 0x8}}, {0x14, 0x2, [0x4, 0x780, 0x7ff, 0x0, 0x80, 0x8, 0x3db0, 0xad05]}}, {{0x1c, 0x1, {0xf7, 0xff, 0x7, 0xfffffffe, 0x2, 0x3d, 0x3, 0x4}}, {0xc, 0x2, [0x800, 0x4, 0x0, 0xae46]}}]}, @TCA_RATE={0x6, 0x5, {0x65, 0x49}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x30}}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xf8, 0x674, 0xfffffffd, 0x1, 0x1, 0x401, 0xa}}, {0x18, 0x2, [0x1, 0x11, 0x9, 0x80, 0x4, 0x1000, 0x7fff, 0x4, 0x4, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fff}, @TCA_STAB={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x8004}, 0xc5) recvfrom$inet6(r0, &(0x7f0000000340)=""/19, 0x13, 0x10022, &(0x7f0000000380)={0xa, 0x4e21, 0x3ff, @loopback, 0x1}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) recvmmsg(r2, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000400)=""/40, 0x28}], 0x2}, 0x5}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000080)=0x21014, 0x4) 499.22992ms ago: executing program 1 (id=4020): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x49, 0xe, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x8, 0x0, 0x6, 0x7, 0x8, 0x7, 0x1, 0x1}, &(0x7f00000001c0)=0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000090000000720000000000008000000000000000000000061"], 0x0, 0x2d}, 0x28) 429.599515ms ago: executing program 0 (id=4021): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 429.085045ms ago: executing program 1 (id=4022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x431, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x40) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2dd7f37896fafd4a8623daafcbe4338d8cf2dc9ccd87985e77174a64d09d5f677bf9395b1095", @ANYRES32], 0xff, 0x2f2, &(0x7f0000000980)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x0, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) rename(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 428.893675ms ago: executing program 2 (id=4023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x52, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd60f53a04001c3a00fe880000000000000000ff000000"], 0x0) 422.974365ms ago: executing program 1 (id=4024): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r1, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r1], 0x48}, 0x1, 0x2000, 0x20, 0x40}, 0x4048880) 384.390237ms ago: executing program 0 (id=4025): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x60, 0x30, 0x727, 0x70bd26, 0x1fc, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x25, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff3, 0xffffffff, 0x8ab3aec83569174b, 0x2, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40815}, 0x8094) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106a053103000000000001"], 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r3, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0xa4ae, 0x4) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000"], 0x28}}, 0x0) 297.036802ms ago: executing program 2 (id=4026): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00001b7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fsmount(r3, 0x1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r2, 0x0) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0x2a440, 0x20) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) mq_open(&(0x7f0000001000)='pci\x00', 0x40, 0x110, &(0x7f0000001040)={0x6, 0x100000000, 0x66, 0xb}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0x130, 0x130, 0x130, 0x130, 0x130, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@local, @local, 0x0, 0x0, 'pimreg1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x90, 0xb8, 0x0, {0x0, 0x11000000}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0xffffffff, 0x0, 'syzkaller0\x00', 'dummy0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "d34c"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x8, 0x6}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x0, 0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 296.534432ms ago: executing program 6 (id=4027): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000400)={[{@lazytime}, {@resuid}]}, 0xee, 0x2aa, &(0x7f0000001580)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x2000, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}]) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) write$tun(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 247.434005ms ago: executing program 2 (id=4028): syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380), 0x0, 0x2c3, &(0x7f00000003c0)="$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") 224.134466ms ago: executing program 1 (id=4029): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200000034000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) 139.265591ms ago: executing program 1 (id=4030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0xfffe, @empty}, 0x2}}, 0x2e) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000080000fa850000009b000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) recvmmsg(r4, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 73.554256ms ago: executing program 2 (id=4031): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c73686f72746e616d653d6d697865642c696f636861727365743d61736369692c646973636172642c696f636861727365743d63703836312c73686f72746e616d653d77696e39352c696f636861727365743d757466382c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757365667265652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6e6f6e756d7461696c3d312c726f6469722c6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d6d616363656c7469632c7065726d69745f646972656374696f2c66d07f6f6e746578743d726f6f742c00"], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xc8, &(0x7f0000000040)=""/200}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 17.530029ms ago: executing program 1 (id=4032): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000060000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000010000000000008001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f0000000000000000fdffffffffffffff0000000000000000000000002cbd700000350000020000005000000000000000600012"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 0s ago: executing program 2 (id=4033): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x841e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x82, 0x4, 0x4, 0x5, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, 0x0, 0x42}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800002000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) kernel console output (not intermixed with test programs): 0003b RDI: 00007fcbe9787000 [ 189.164501][T13849] RBP: 00007fcbe7f76090 R08: 0000000000000000 R09: 0000000000000000 [ 189.164513][T13849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.164525][T13849] R13: 00007fcbe97b6128 R14: 00007fcbe97b6090 R15: 00007ffdcde76258 [ 189.164587][T13849] [ 189.581017][T13868] __nla_validate_parse: 3 callbacks suppressed [ 189.581034][T13868] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3135'. [ 189.595023][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 189.595042][ T29] audit: type=1400 audit(1770445853.897:4212): avc: denied { create } for pid=13865 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 189.660028][T13877] netlink: 'syz.8.3138': attribute type 2 has an invalid length. [ 189.667900][T13877] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3138'. [ 189.681637][ T29] audit: type=1400 audit(1770445853.972:4213): avc: denied { create } for pid=13865 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 189.702628][ T29] audit: type=1400 audit(1770445853.972:4214): avc: denied { setopt } for pid=13865 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 189.723787][ T29] audit: type=1400 audit(1770445853.972:4215): avc: denied { write } for pid=13865 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 189.744860][ T29] audit: type=1400 audit(1770445853.972:4216): avc: denied { sendto } for pid=13865 comm="syz.0.3133" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 189.783589][ T29] audit: type=1400 audit(1770445854.056:4217): avc: denied { create } for pid=13865 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 189.804428][ T29] audit: type=1400 audit(1770445854.065:4218): avc: denied { setopt } for pid=13865 comm="syz.0.3133" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 189.844041][ T29] audit: type=1400 audit(1770445854.131:4219): avc: denied { create } for pid=13865 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 189.845162][T13880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.902557][T13880] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.933091][T12212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.984151][T13893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'. [ 189.998750][ T29] audit: type=1400 audit(1770445854.271:4220): avc: denied { map } for pid=13886 comm="syz.8.3141" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 190.038029][T13887] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3141'. [ 190.108680][T13903] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3147'. [ 190.190710][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3148'. [ 190.234056][T13906] syz_tun: entered promiscuous mode [ 190.244285][T13910] set_capacity_and_notify: 6 callbacks suppressed [ 190.244302][T13910] loop6: detected capacity change from 0 to 512 [ 190.269949][T13906] syz_tun: left promiscuous mode [ 190.301054][T13910] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 190.324601][T13910] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.3150: iget: bad i_size value: 12154757448730 [ 190.345318][T13887] loop8: detected capacity change from 0 to 512 [ 190.358513][T13887] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 190.434049][T13887] EXT4-fs (loop8): 1 truncate cleaned up [ 190.451111][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'. [ 190.462497][T13910] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3150: couldn't read orphan inode 13 (err -117) [ 190.478083][T13887] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.518321][T13910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.549801][T13920] bridge_slave_0: left allmulticast mode [ 190.555534][T13920] bridge_slave_0: left promiscuous mode [ 190.561336][T13920] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.593128][T13920] bridge_slave_1: left allmulticast mode [ 190.599079][T13920] bridge_slave_1: left promiscuous mode [ 190.604926][T13920] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.617981][T10368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.635493][T13920] bond0: (slave bond_slave_0): Releasing backup interface [ 190.650299][T13920] bond0: (slave bond_slave_1): Releasing backup interface [ 190.682932][T13920] team0: Port device team_slave_0 removed [ 190.700895][T13920] team0: Port device team_slave_1 removed [ 190.719203][T13920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.726680][T13920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.752273][T13920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.759681][T13920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.774317][T13920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.835435][ T8297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.868802][T13930] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3158'. [ 190.948451][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3161'. [ 190.957382][T13936] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3161'. [ 191.068044][T13944] loop8: detected capacity change from 0 to 1024 [ 191.087056][T13948] FAULT_INJECTION: forcing a failure. [ 191.087056][T13948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.100189][T13948] CPU: 0 UID: 0 PID: 13948 Comm: syz.6.3166 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.100301][T13948] Tainted: [W]=WARN [ 191.100308][T13948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.100319][T13948] Call Trace: [ 191.100326][T13948] [ 191.100334][T13948] __dump_stack+0x1d/0x30 [ 191.100357][T13948] dump_stack_lvl+0x95/0xd0 [ 191.100423][T13948] dump_stack+0x15/0x1b [ 191.100446][T13948] should_fail_ex+0x263/0x280 [ 191.100481][T13948] should_fail+0xb/0x20 [ 191.100506][T13948] should_fail_usercopy+0x1a/0x20 [ 191.100609][T13948] _copy_to_user+0x20/0xa0 [ 191.100628][T13948] btf_new_fd+0x3fa/0x7b0 [ 191.100656][T13948] ? ns_capable+0x7c/0xb0 [ 191.100687][T13948] bpf_btf_load+0x112/0x130 [ 191.100758][T13948] __sys_bpf+0x357/0x7b0 [ 191.100815][T13948] __x64_sys_bpf+0x41/0x50 [ 191.100892][T13948] x64_sys_call+0x28e1/0x3000 [ 191.100931][T13948] do_syscall_64+0xc0/0x2a0 [ 191.100962][T13948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.100988][T13948] RIP: 0033:0x7f576d1eacb9 [ 191.101006][T13948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.101029][T13948] RSP: 002b:00007f576bc47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.101061][T13948] RAX: ffffffffffffffda RBX: 00007f576d465fa0 RCX: 00007f576d1eacb9 [ 191.101074][T13948] RDX: 0000000000000028 RSI: 0000200000000500 RDI: 0000000000000012 [ 191.101097][T13948] RBP: 00007f576bc47090 R08: 0000000000000000 R09: 0000000000000000 [ 191.101113][T13948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.101127][T13948] R13: 00007f576d466038 R14: 00007f576d465fa0 R15: 00007ffd50cdb858 [ 191.101149][T13948] [ 191.281727][T13944] EXT4-fs: Ignoring removed nobh option [ 191.287578][T13944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.330755][T13944] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.380080][T13959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13959 comm=syz.0.3168 [ 191.503415][T10368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.614098][T13967] bond0: entered promiscuous mode [ 191.619357][T13967] bond_slave_0: entered promiscuous mode [ 191.625245][T13967] bond_slave_1: entered promiscuous mode [ 191.644719][T13967] bond0: left promiscuous mode [ 191.649597][T13967] bond_slave_0: left promiscuous mode [ 191.655202][T13967] bond_slave_1: left promiscuous mode [ 191.723778][T13996] loop8: detected capacity change from 0 to 512 [ 191.751664][T13996] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.760828][T13996] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 191.777688][T13996] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 191.787912][T13996] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 191.796066][T13996] System zones: 0-2, 18-18, 34-35 [ 191.802275][T13996] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.815669][T13996] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.005122][T14017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.119819][T14030] syzkaller0: entered promiscuous mode [ 192.125604][T14030] syzkaller0: entered allmulticast mode [ 192.201979][T14033] loop4: detected capacity change from 0 to 1024 [ 192.209601][T14033] EXT4-fs: inline encryption not supported [ 192.245753][T14033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.342703][T14048] loop4: detected capacity change from 0 to 1024 [ 192.388717][T14051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14051 comm=syz.6.3204 [ 192.397747][T14048] EXT4-fs: Ignoring removed orlov option [ 192.401845][T14051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=14051 comm=syz.6.3204 [ 192.420307][T14051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=14051 comm=syz.6.3204 [ 192.433331][T14051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=14051 comm=syz.6.3204 [ 192.433812][T14048] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.472815][T14051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14051 comm=syz.6.3204 [ 192.528380][T14064] loop8: detected capacity change from 0 to 512 [ 192.541064][T14048] EXT4-fs (loop4): shut down requested (0) [ 192.560155][T14064] FAT-fs (loop8): count of clusters too big (8388606) [ 192.567152][T14064] FAT-fs (loop8): Can't find a valid FAT filesystem [ 193.109499][T14117] netlink: 'syz.8.3230': attribute type 10 has an invalid length. [ 193.239981][T14140] netlink: 'syz.4.3240': attribute type 32 has an invalid length. [ 193.270063][T14140] bond2: option coupled_control: invalid value (32) [ 193.281313][T14140] bond2 (unregistering): Released all slaves [ 193.325931][T14150] loop6: detected capacity change from 0 to 512 [ 193.339564][T14150] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c119, mo2=0102] [ 193.358513][T14150] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.3244: corrupted in-inode xattr: e_value size too large [ 193.376842][T14150] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3244: couldn't read orphan inode 15 (err -117) [ 193.437681][T14150] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.3244: corrupted in-inode xattr: e_value size too large [ 193.521272][T14166] loop2: detected capacity change from 0 to 512 [ 193.530563][T14166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.560090][T14167] loop4: detected capacity change from 0 to 128 [ 193.586310][T14166] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.604283][T14166] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 193.635328][T14166] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3250: Failed to acquire dquot type 0 [ 193.698288][T14179] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 193.713136][T14182] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.724087][T14179] EXT4-fs (loop4): orphan cleanup on readonly fs [ 193.751147][T14179] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3255: Failed to acquire dquot type 1 [ 193.819122][T14179] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3255: bg 0: block 40: padding at end of block bitmap is not set [ 193.838973][T14179] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 193.854192][T14179] EXT4-fs (loop4): 1 truncate cleaned up [ 193.884241][T12663] udevd[12663]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 193.909769][T12663] udevd[12663]: symlink '../../loop4' '/dev/disk/by-diskseq/775.tmp-b7:4' failed: Read-only file system [ 193.929268][T12663] udevd[12663]: symlink '../../loop4' '/dev/disk/by-diskseq/775.tmp-b7:4' failed: Read-only file system [ 193.935269][ T3304] udevd[3304]: symlink '../../loop6' '/dev/disk/by-diskseq/773.tmp-b7:6' failed: Read-only file system [ 193.944695][T12663] udevd[12663]: symlink '../../loop4' '/dev/disk/by-diskseq/775.tmp-b7:4' failed: Read-only file system [ 193.962606][T14203] FAULT_INJECTION: forcing a failure. [ 193.962606][T14203] name failslab, interval 1, probability 0, space 0, times 0 [ 193.970657][ T5226] udevd[5226]: symlink '../../loop8' '/dev/disk/by-diskseq/778.tmp-b7:8' failed: Read-only file system [ 193.976262][T14203] CPU: 1 UID: 0 PID: 14203 Comm: syz.8.3266 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 193.976340][T14203] Tainted: [W]=WARN [ 193.976347][T14203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.976361][T14203] Call Trace: [ 193.976377][T14203] [ 193.976386][T14203] __dump_stack+0x1d/0x30 [ 193.976483][T14203] dump_stack_lvl+0x95/0xd0 [ 193.976510][T14203] dump_stack+0x15/0x1b [ 193.976600][T14203] should_fail_ex+0x263/0x280 [ 193.976631][T14203] should_failslab+0x8c/0xb0 [ 193.976788][T14203] __kmalloc_cache_noprof+0x64/0x4a0 [ 193.976819][T14203] ? __tcf_chain_get+0x91/0x270 [ 193.976850][T14203] __tcf_chain_get+0x91/0x270 [ 193.976877][T14203] tc_new_tfilter+0x5db/0x1110 [ 193.976949][T14203] ? ns_capable+0x7c/0xb0 [ 193.977009][T14203] ? __pfx_tc_new_tfilter+0x10/0x10 [ 193.977043][T14203] rtnetlink_rcv_msg+0x64b/0x720 [ 193.977151][T14203] netlink_rcv_skb+0x123/0x220 [ 193.977184][T14203] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 193.977214][T14203] rtnetlink_rcv+0x1c/0x30 [ 193.977321][T14203] netlink_unicast+0x5c0/0x690 [ 193.977355][T14203] netlink_sendmsg+0x5c8/0x6f0 [ 193.977385][T14203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.977444][T14203] ____sys_sendmsg+0x5af/0x600 [ 193.977534][T14203] ___sys_sendmsg+0x195/0x1e0 [ 193.977566][T14203] __x64_sys_sendmsg+0xd4/0x160 [ 193.977590][T14203] x64_sys_call+0x17ba/0x3000 [ 193.977629][T14203] do_syscall_64+0xc0/0x2a0 [ 193.977725][T14203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.977753][T14203] RIP: 0033:0x7f1b62d1acb9 [ 193.977773][T14203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.977794][T14203] RSP: 002b:00007f1b61777028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.977830][T14203] RAX: ffffffffffffffda RBX: 00007f1b62f95fa0 RCX: 00007f1b62d1acb9 [ 193.977847][T14203] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 193.977862][T14203] RBP: 00007f1b61777090 R08: 0000000000000000 R09: 0000000000000000 [ 193.977936][T14203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.977950][T14203] R13: 00007f1b62f96038 R14: 00007f1b62f95fa0 R15: 00007ffc478ddb28 [ 193.977971][T14203] [ 194.231284][T12663] udevd[12663]: symlink '../../loop4' '/dev/disk/by-diskseq/779.tmp-b7:4' failed: Read-only file system [ 194.263764][T12663] udevd[12663]: symlink '../../loop0' '/dev/disk/by-diskseq/754.tmp-b7:0' failed: Read-only file system [ 194.287315][T12663] udevd[12663]: symlink '../../loop8' '/dev/disk/by-diskseq/778.tmp-b7:8' failed: Read-only file system [ 194.327398][T12663] udevd[12663]: symlink '../../loop4' '/dev/disk/by-diskseq/779.tmp-b7:4' failed: Read-only file system [ 194.343257][T14224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.442075][T14236] EXT4-fs: Ignoring removed nobh option [ 194.447872][T14236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.461997][T14238] EXT4-fs: Ignoring removed orlov option [ 194.470884][T14238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.517950][T14243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14243 comm=syz.6.3281 [ 194.552003][T14250] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 194.563577][T14250] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 194.573761][T14250] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3283: Corrupt directory, running e2fsck is recommended [ 194.588327][T14248] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 194.604326][T14250] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 194.605985][T14238] EXT4-fs (loop8): shut down requested (0) [ 194.612462][T14250] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3283: corrupted in-inode xattr: invalid ea_ino [ 194.634476][T14250] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3283: couldn't read orphan inode 15 (err -117) [ 194.807202][T14270] x_tables: duplicate underflow at hook 1 [ 195.012804][T14284] FAULT_INJECTION: forcing a failure. [ 195.012804][T14284] name failslab, interval 1, probability 0, space 0, times 0 [ 195.025671][T14284] CPU: 1 UID: 0 PID: 14284 Comm: syz.0.3290 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.025783][T14284] Tainted: [W]=WARN [ 195.025789][T14284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.025801][T14284] Call Trace: [ 195.025808][T14284] [ 195.025817][T14284] __dump_stack+0x1d/0x30 [ 195.025845][T14284] dump_stack_lvl+0x95/0xd0 [ 195.025973][T14284] dump_stack+0x15/0x1b [ 195.025992][T14284] should_fail_ex+0x263/0x280 [ 195.026046][T14284] should_failslab+0x8c/0xb0 [ 195.026077][T14284] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 195.026101][T14284] ? alloc_workqueue_noprof+0x83c/0x1710 [ 195.026174][T14284] alloc_workqueue_noprof+0x83c/0x1710 [ 195.026213][T14284] sb_init_dio_done_wq+0x3d/0xf0 [ 195.026234][T14284] __blockdev_direct_IO+0x708/0x21e0 [ 195.026285][T14284] ? __pfx_fat_get_block+0x10/0x10 [ 195.026323][T14284] fat_direct_IO+0x102/0x1d0 [ 195.026431][T14284] generic_file_direct_write+0xff/0x240 [ 195.026470][T14284] __generic_file_write_iter+0xab/0x120 [ 195.026498][T14284] generic_file_write_iter+0x8d/0x310 [ 195.026590][T14284] ? css_rstat_updated+0xbb/0x280 [ 195.026616][T14284] ? count_memcg_events+0x11f/0x200 [ 195.026654][T14284] ? __rcu_read_unlock+0x4e/0x70 [ 195.026829][T14284] ? avc_policy_seqno+0x15/0x30 [ 195.026875][T14284] ? selinux_file_permission+0x1f2/0x690 [ 195.026909][T14284] ? security_file_permission+0x22/0x70 [ 195.026977][T14284] aio_write+0x2fe/0x430 [ 195.027011][T14284] io_submit_one+0xbc1/0x1350 [ 195.027045][T14284] __se_sys_io_submit+0xfb/0x280 [ 195.027076][T14284] __x64_sys_io_submit+0x43/0x50 [ 195.027104][T14284] x64_sys_call+0x2e40/0x3000 [ 195.027132][T14284] do_syscall_64+0xc0/0x2a0 [ 195.027181][T14284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.027203][T14284] RIP: 0033:0x7fcbe953acb9 [ 195.027220][T14284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.027242][T14284] RSP: 002b:00007fcbe7f76028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 195.027265][T14284] RAX: ffffffffffffffda RBX: 00007fcbe97b6090 RCX: 00007fcbe953acb9 [ 195.027329][T14284] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007fcbe9787000 [ 195.027342][T14284] RBP: 00007fcbe7f76090 R08: 0000000000000000 R09: 0000000000000000 [ 195.027356][T14284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.027371][T14284] R13: 00007fcbe97b6128 R14: 00007fcbe97b6090 R15: 00007ffdcde76258 [ 195.027393][T14284] [ 195.458607][T14302] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.597342][T14322] netlink: 'syz.2.3310': attribute type 1 has an invalid length. [ 195.636844][T14322] bond1: entered promiscuous mode [ 195.659945][T14322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.707113][T14322] bond1: (slave bridge1): making interface the new active one [ 195.714668][T14322] bridge1: entered promiscuous mode [ 195.739112][T14322] bridge1: left promiscuous mode [ 195.875094][T14343] __nla_validate_parse: 18 callbacks suppressed [ 195.875112][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3315'. [ 195.902111][T14345] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3318'. [ 195.903455][T14343] syz_tun: entered promiscuous mode [ 195.924247][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3319'. [ 195.944405][T14343] syz_tun: left promiscuous mode [ 195.970234][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3321'. [ 195.971817][T14355] set_capacity_and_notify: 11 callbacks suppressed [ 195.971835][T14355] loop4: detected capacity change from 0 to 128 [ 195.979409][T14352] netlink: 'syz.6.3321': attribute type 30 has an invalid length. [ 195.979428][T14352] netlink: 'syz.6.3321': attribute type 29 has an invalid length. [ 195.979442][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3321'. [ 195.983877][T14354] loop2: detected capacity change from 0 to 512 [ 196.085703][T14354] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 196.109368][T14361] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 196.128474][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 196.128491][ T29] audit: type=1400 audit(1770445860.004:4221): avc: denied { create } for pid=14364 comm="syz.0.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 196.161883][T14367] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3327'. [ 196.416604][T14390] loop0: detected capacity change from 0 to 8192 [ 196.426857][T14400] loop8: detected capacity change from 0 to 1024 [ 196.435683][T14400] EXT4-fs: inline encryption not supported [ 196.442404][T14400] EXT4-fs: Ignoring removed nobh option [ 196.448112][T14400] EXT4-fs: Ignoring removed bh option [ 196.456110][T14403] FAULT_INJECTION: forcing a failure. [ 196.456110][T14403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.469301][T14403] CPU: 1 UID: 0 PID: 14403 Comm: syz.4.3340 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 196.469341][T14403] Tainted: [W]=WARN [ 196.469347][T14403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.469359][T14403] Call Trace: [ 196.469373][T14403] [ 196.469381][T14403] __dump_stack+0x1d/0x30 [ 196.469408][T14403] dump_stack_lvl+0x95/0xd0 [ 196.469503][T14403] dump_stack+0x15/0x1b [ 196.469524][T14403] should_fail_ex+0x263/0x280 [ 196.469612][T14403] should_fail+0xb/0x20 [ 196.469637][T14403] should_fail_usercopy+0x1a/0x20 [ 196.469670][T14403] _copy_to_user+0x20/0xa0 [ 196.469727][T14403] simple_read_from_buffer+0xb5/0x130 [ 196.469772][T14403] proc_fail_nth_read+0x10e/0x150 [ 196.469806][T14403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.469834][T14403] vfs_read+0x1ab/0x7f0 [ 196.469851][T14403] ? __rcu_read_unlock+0x4e/0x70 [ 196.469931][T14403] ? __fget_files+0x184/0x1c0 [ 196.469954][T14403] ? mutex_lock+0x57/0x90 [ 196.469977][T14403] ksys_read+0xdc/0x1a0 [ 196.469995][T14403] __x64_sys_read+0x40/0x50 [ 196.470014][T14403] x64_sys_call+0x2889/0x3000 [ 196.470062][T14403] do_syscall_64+0xc0/0x2a0 [ 196.470089][T14403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.470110][T14403] RIP: 0033:0x7f355c1eb58e [ 196.470128][T14403] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.470174][T14403] RSP: 002b:00007f355ac86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.470192][T14403] RAX: ffffffffffffffda RBX: 00007f355ac876c0 RCX: 00007f355c1eb58e [ 196.470206][T14403] RDX: 000000000000000f RSI: 00007f355ac870a0 RDI: 0000000000000003 [ 196.470218][T14403] RBP: 00007f355ac87090 R08: 0000000000000000 R09: 0000000000000000 [ 196.470232][T14403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.470245][T14403] R13: 00007f355c4a6038 R14: 00007f355c4a5fa0 R15: 00007ffcc1423708 [ 196.470350][T14403] [ 196.695671][ T29] audit: type=1326 audit(1770445860.518:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe953acb9 code=0x7ffc0000 [ 196.719260][ T29] audit: type=1326 audit(1770445860.518:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcbe953acb9 code=0x7ffc0000 [ 196.743237][ T29] audit: type=1326 audit(1770445860.518:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe953acb9 code=0x7ffc0000 [ 196.767003][ T29] audit: type=1326 audit(1770445860.518:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe953acb9 code=0x7ffc0000 [ 196.790946][ T29] audit: type=1326 audit(1770445860.518:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe953acb9 code=0x7ffc0000 [ 196.814729][ T29] audit: type=1326 audit(1770445860.518:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbe953acb9 code=0x7ffc0000 [ 196.839077][ T29] audit: type=1326 audit(1770445860.518:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe953acb9 code=0x7ffc0000 [ 196.862904][ T29] audit: type=1326 audit(1770445860.528:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe953acb9 code=0x7ffc0000 [ 196.886533][ T29] audit: type=1326 audit(1770445860.528:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.0.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fcbe953acb9 code=0x7ffc0000 [ 196.917604][T14416] loop4: detected capacity change from 0 to 1024 [ 196.925529][T14416] EXT4-fs: Ignoring removed nobh option [ 196.931242][T14416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.040762][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3348'. [ 197.121969][T14436] loop8: detected capacity change from 0 to 512 [ 197.152458][T14436] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.167738][T14444] loop4: detected capacity change from 0 to 512 [ 197.175066][T14444] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 197.183950][T14444] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 197.251643][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3355'. [ 197.255471][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3354'. [ 197.273903][T14451] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3356'. [ 197.406287][T14448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.436057][T14450] veth0_macvtap: left promiscuous mode [ 197.471707][T14470] loop2: detected capacity change from 0 to 164 [ 197.485671][T14470] isofs_fill_super: root inode is not a directory. Corrupted media? [ 197.545364][T14476] loop8: detected capacity change from 0 to 512 [ 197.546115][T14472] syzkaller0: entered promiscuous mode [ 197.557311][T14472] syzkaller0: entered allmulticast mode [ 197.566505][T14476] EXT4-fs: Ignoring removed nobh option [ 197.572635][T14476] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 197.620290][T14476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 197.629409][T14476] EXT4-fs (loop8): orphan cleanup on readonly fs [ 197.636166][T14476] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #11: comm syz.8.3365: attempt to clear invalid blocks 1024 len 1 [ 197.651039][T14476] EXT4-fs (loop8): Remounting filesystem read-only [ 197.658211][T14476] EXT4-fs (loop8): 1 truncate cleaned up [ 197.922531][T14510] loop6: detected capacity change from 0 to 1024 [ 197.932256][T14510] EXT4-fs: Ignoring removed orlov option [ 197.938086][T14510] EXT4-fs: inline encryption not supported [ 198.059429][T14515] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 198.071242][T14515] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 198.081493][T14515] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3380: Corrupt directory, running e2fsck is recommended [ 198.114709][T14515] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 198.122880][T14515] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.3380: corrupted in-inode xattr: invalid ea_ino [ 198.137786][T14515] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3380: couldn't read orphan inode 15 (err -117) [ 198.693602][T14547] FAULT_INJECTION: forcing a failure. [ 198.693602][T14547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.706963][T14547] CPU: 0 UID: 0 PID: 14547 Comm: syz.8.3391 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 198.707006][T14547] Tainted: [W]=WARN [ 198.707014][T14547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.707027][T14547] Call Trace: [ 198.707035][T14547] [ 198.707044][T14547] __dump_stack+0x1d/0x30 [ 198.707084][T14547] dump_stack_lvl+0x95/0xd0 [ 198.707140][T14547] dump_stack+0x15/0x1b [ 198.707167][T14547] should_fail_ex+0x263/0x280 [ 198.707198][T14547] should_fail+0xb/0x20 [ 198.707284][T14547] should_fail_usercopy+0x1a/0x20 [ 198.707320][T14547] _copy_from_user+0x1c/0xb0 [ 198.707344][T14547] __sys_sendto+0x1ca/0x4d0 [ 198.707396][T14547] __x64_sys_sendto+0x76/0x90 [ 198.707426][T14547] x64_sys_call+0x29a7/0x3000 [ 198.707448][T14547] do_syscall_64+0xc0/0x2a0 [ 198.707475][T14547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.707519][T14547] RIP: 0033:0x7f1b62d1acb9 [ 198.707536][T14547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.707613][T14547] RSP: 002b:00007f1b61777028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 198.707636][T14547] RAX: ffffffffffffffda RBX: 00007f1b62f95fa0 RCX: 00007f1b62d1acb9 [ 198.707653][T14547] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000004 [ 198.707667][T14547] RBP: 00007f1b61777090 R08: 0000200000000140 R09: 0000000000000014 [ 198.707680][T14547] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 198.707692][T14547] R13: 00007f1b62f96038 R14: 00007f1b62f95fa0 R15: 00007ffc478ddb28 [ 198.707714][T14547] [ 198.955548][T14555] netlink: zone id is out of range [ 198.960975][T14555] netlink: zone id is out of range [ 198.967476][T14555] netlink: zone id is out of range [ 198.984632][T14555] netlink: zone id is out of range [ 198.996684][T14555] netlink: zone id is out of range [ 199.007585][T14555] netlink: zone id is out of range [ 199.019877][T14555] netlink: del zone limit has 8 unknown bytes [ 199.047215][T14560] netlink: 'syz.0.3398': attribute type 2 has an invalid length. [ 199.194771][T14578] EXT4-fs: Ignoring removed orlov option [ 199.221905][T14564] FAULT_INJECTION: forcing a failure. [ 199.221905][T14564] name failslab, interval 1, probability 0, space 0, times 0 [ 199.234859][T14564] CPU: 1 UID: 0 PID: 14564 Comm: syz.8.3399 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 199.234896][T14564] Tainted: [W]=WARN [ 199.234902][T14564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.234924][T14564] Call Trace: [ 199.234944][T14564] [ 199.234952][T14564] __dump_stack+0x1d/0x30 [ 199.235002][T14564] dump_stack_lvl+0x95/0xd0 [ 199.235023][T14564] dump_stack+0x15/0x1b [ 199.235093][T14564] should_fail_ex+0x263/0x280 [ 199.235127][T14564] should_failslab+0x8c/0xb0 [ 199.235154][T14564] kmem_cache_alloc_noprof+0x68/0x490 [ 199.235190][T14564] ? io_submit_one+0xcf/0x1350 [ 199.235276][T14564] io_submit_one+0xcf/0x1350 [ 199.235377][T14564] __se_sys_io_submit+0xfb/0x280 [ 199.235407][T14564] __x64_sys_io_submit+0x43/0x50 [ 199.235484][T14564] x64_sys_call+0x2e40/0x3000 [ 199.235561][T14564] do_syscall_64+0xc0/0x2a0 [ 199.235594][T14564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.235617][T14564] RIP: 0033:0x7f1b62d1acb9 [ 199.235632][T14564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.235648][T14564] RSP: 002b:00007f1b61777028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 199.235718][T14564] RAX: ffffffffffffffda RBX: 00007f1b62f95fa0 RCX: 00007f1b62d1acb9 [ 199.235735][T14564] RDX: 0000200000000540 RSI: 0000000000000001 RDI: 00007f1b62f67000 [ 199.235749][T14564] RBP: 00007f1b61777090 R08: 0000000000000000 R09: 0000000000000000 [ 199.235764][T14564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.235855][T14564] R13: 00007f1b62f96038 R14: 00007f1b62f95fa0 R15: 00007ffc478ddb28 [ 199.235875][T14564] [ 199.254578][T14586] EXT4-fs: Ignoring removed orlov option [ 199.277680][ T5226] udevd[5226]: symlink '../../loop8' '/dev/disk/by-diskseq/825.tmp-b7:8' failed: Read-only file system [ 199.374913][T12663] udevd[12663]: symlink '../../loop4' '/dev/disk/by-diskseq/822.tmp-b7:4' failed: Read-only file system [ 199.380101][ T3304] udevd[3304]: symlink '../../loop2' '/dev/disk/by-diskseq/823.tmp-b7:2' failed: Read-only file system [ 199.401708][T12663] udevd[12663]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 199.410129][ T3304] udevd[3304]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 199.511738][ T3304] udevd[3304]: symlink '../../loop2' '/dev/disk/by-diskseq/823.tmp-b7:2' failed: Read-only file system [ 199.525508][ T5230] udevd[5230]: symlink '../../loop6' '/dev/disk/by-diskseq/819.tmp-b7:6' failed: Read-only file system [ 199.529971][T12663] udevd[12663]: symlink '../../loop4' '/dev/disk/by-diskseq/824.tmp-b7:4' failed: Read-only file system [ 199.541035][ T3304] udevd[3304]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 199.561144][ T5226] udevd[5226]: symlink '../../loop8' '/dev/disk/by-label/SYZKALLER.tmp-b7:8' failed: Read-only file system [ 199.696330][T14622] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 04000002) [ 199.706577][T14622] FAT-fs (loop4): Filesystem has been set read-only [ 199.782600][T14582] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 199.792536][T14627] xt_recent: Unsupported userspace flags (000000b1) [ 199.893416][T14582] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3402: bg 0: block 104: invalid block bitmap [ 199.909734][T14582] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 199.919939][T14582] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3402: invalid indirect mapped block 1 (level 1) [ 199.936899][T14582] EXT4-fs (loop0): 1 truncate cleaned up [ 200.503785][T14670] xt_hashlimit: size too large, truncated to 1048576 [ 200.830055][T14672] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.918011][T12212] EXT4-fs unmount: 40 callbacks suppressed [ 200.918030][T12212] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.084573][T14689] bridge0: port 3(batadv2) entered blocking state [ 201.091198][T14689] bridge0: port 3(batadv2) entered disabled state [ 201.105413][T14689] batadv2: entered allmulticast mode [ 201.111728][T14689] batadv2: entered promiscuous mode [ 201.161741][T14697] futex_wake_op: syz.8.3441 tries to shift op by 36; fix this program [ 201.284050][T14711] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.290613][T14711] EXT4-fs: Ignoring removed nobh option [ 201.339774][T14711] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.409400][T14708] sit0: left promiscuous mode [ 201.484113][T14731] 9p: Bad value for 'rfdno' [ 201.518870][T14708] macsec1: left promiscuous mode [ 201.523981][T14708] macsec1: left allmulticast mode [ 201.529205][T14708] gretap0: left allmulticast mode [ 201.557127][T14718] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.567507][T14718] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.579867][T14711] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 201.621608][T10368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.632384][ T4119] batman_adv: batadv2: IGMP Querier appeared [ 201.638415][ T4119] batman_adv: batadv2: MLD Querier appeared [ 201.656027][T14718] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.666675][T14718] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.780717][T14718] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.791221][T14718] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.838025][T14760] set_capacity_and_notify: 11 callbacks suppressed [ 201.838041][T14760] loop4: detected capacity change from 0 to 512 [ 201.864924][T14758] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 201.876237][T14758] block device autoloading is deprecated and will be removed. [ 201.877638][T14760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.898479][T14760] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.914904][T14718] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.925316][T14718] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.982020][T14764] loop8: detected capacity change from 0 to 128 [ 202.019583][ T4130] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.027808][ T4130] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.036317][ T4130] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.044627][ T4130] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.073487][T12212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.093136][ T4119] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.101462][ T4119] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.159889][ T4119] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.168658][ T4119] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.197274][T14771] 9p: Bad value for 'rfdno' [ 202.402215][T14783] loop0: detected capacity change from 0 to 8192 [ 202.441313][T14789] loop4: detected capacity change from 0 to 764 [ 202.538504][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 202.538521][ T29] audit: type=1400 audit(1770445865.999:4277): avc: denied { associate } for pid=14797 comm="syz.6.3474" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 202.611425][ T29] audit: type=1400 audit(1770445865.999:4278): avc: denied { append } for pid=14797 comm="syz.6.3474" name="pfkey" dev="proc" ino=4026533277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 202.645999][T14805] loop2: detected capacity change from 0 to 128 [ 202.653741][T14806] __nla_validate_parse: 10 callbacks suppressed [ 202.653811][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3476'. [ 202.675477][T14808] loop4: detected capacity change from 0 to 512 [ 202.714126][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3476'. [ 202.743554][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3476'. [ 202.802124][T14808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.827041][T14808] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.890784][T12212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.915597][T14823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.924365][T14823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.953518][T14825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47888 sclass=netlink_route_socket pid=14825 comm=syz.6.3481 [ 203.367284][T14840] loop2: detected capacity change from 0 to 1024 [ 203.454572][T14842] loop2: detected capacity change from 0 to 8192 [ 203.595609][T14845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3489'. [ 203.764960][T14855] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 204.003812][T14873] loop0: detected capacity change from 0 to 128 [ 204.117396][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 204.117481][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 204.219697][T14897] loop4: detected capacity change from 0 to 128 [ 204.226634][T14897] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.226740][T14899] EXT4-fs: Ignoring removed nobh option [ 204.244235][T14899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.264797][ T29] audit: type=1326 audit(1770445867.617:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14894 comm="syz.6.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576d1eacb9 code=0x7ffc0000 [ 204.290044][T14899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.306442][ T29] audit: type=1326 audit(1770445867.617:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14894 comm="syz.6.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f576d1eacb9 code=0x7ffc0000 [ 204.330303][ T29] audit: type=1326 audit(1770445867.617:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14894 comm="syz.6.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576d1eacb9 code=0x7ffc0000 [ 204.354413][ T29] audit: type=1326 audit(1770445867.617:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14894 comm="syz.6.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f576d1eacb9 code=0x7ffc0000 [ 204.378152][ T29] audit: type=1326 audit(1770445867.617:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14894 comm="syz.6.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576d1eacb9 code=0x7ffc0000 [ 204.402077][ T29] audit: type=1326 audit(1770445867.617:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14894 comm="syz.6.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f576d1eacb9 code=0x7ffc0000 [ 204.425313][T14906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3510'. [ 204.425844][ T29] audit: type=1326 audit(1770445867.617:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14894 comm="syz.6.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576d1eacb9 code=0x7ffc0000 [ 204.458573][ T29] audit: type=1326 audit(1770445867.617:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14894 comm="syz.6.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f576d1eacb9 code=0x7ffc0000 [ 204.567197][T14906] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.646437][T12744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.672240][T12663] udevd[12663]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 204.679894][T14895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=14895 comm=syz.6.3507 [ 204.697353][T14895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14895 comm=syz.6.3507 [ 204.714780][T12663] udevd[12663]: symlink '../../loop2' '/dev/disk/by-diskseq/860.tmp-b7:2' failed: Read-only file system [ 204.737291][T14895] EXT4-fs error (device loop6): __ext4_fill_super:5553: inode #2: comm syz.6.3507: iget: checksum invalid [ 204.752470][ T3304] udevd[3304]: symlink '../../loop6' '/dev/disk/by-diskseq/862.tmp-b7:6' failed: Read-only file system [ 204.780335][ T3304] udevd[3304]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 204.793951][ T5226] udevd[5226]: symlink '../../loop0' '/dev/disk/by-diskseq/858.tmp-b7:0' failed: Read-only file system [ 204.797335][ T3304] udevd[3304]: symlink '../../loop6' '/dev/disk/by-diskseq/862.tmp-b7:6' failed: Read-only file system [ 204.806960][T12663] udevd[12663]: symlink '../../loop2' '/dev/disk/by-diskseq/860.tmp-b7:2' failed: Read-only file system [ 204.818577][ T3304] udevd[3304]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 204.841315][T14895] EXT4-fs (loop6): get root inode failed [ 204.847107][T14895] EXT4-fs (loop6): mount failed [ 204.857116][T12663] udevd[12663]: symlink '../../loop2' '/dev/disk/by-diskseq/861.tmp-b7:2' failed: Read-only file system [ 204.869377][ T3304] udevd[3304]: symlink '../../loop0' '/dev/disk/by-diskseq/858.tmp-b7:0' failed: Read-only file system [ 204.889522][T14931] xt_hashlimit: size too large, truncated to 1048576 [ 204.901688][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.991912][T14927] –: renamed from vxcan1 (while UP) [ 205.002708][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3515'. [ 205.036055][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.095417][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.154669][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.271137][ T12] bridge_slave_1: left allmulticast mode [ 205.276848][ T12] bridge_slave_1: left promiscuous mode [ 205.282694][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.286267][T14965] 9p: Bad value for 'wfdno' [ 205.299860][ T12] bridge_slave_0: left allmulticast mode [ 205.306001][ T12] bridge_slave_0: left promiscuous mode [ 205.311660][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.357826][T14969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.507267][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.518266][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.537930][ T12] bond0 (unregistering): Released all slaves [ 205.549587][ T12] bond1 (unregistering): Released all slaves [ 205.592206][T14975] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3528'. [ 205.720573][ T12] hsr_slave_0: left promiscuous mode [ 205.739608][ T12] hsr_slave_1: left promiscuous mode [ 205.751546][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.759034][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.791560][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.799181][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.828890][ T12] veth0_macvtap: left allmulticast mode [ 205.840334][ T12] veth1_macvtap: left promiscuous mode [ 205.851836][ T12] veth0_macvtap: left promiscuous mode [ 205.867009][ T12] veth1_vlan: left promiscuous mode [ 205.879102][ T12] veth0_vlan: left promiscuous mode [ 205.993468][T15006] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3534'. [ 206.051383][ T12] team0 (unregistering): Port device team_slave_1 removed [ 206.064476][ T12] team0 (unregistering): Port device team_slave_0 removed [ 206.072763][T12744] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 206.083913][T12744] CPU: 1 UID: 0 PID: 12744 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 206.083951][T12744] Tainted: [W]=WARN [ 206.083957][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.083969][T12744] Call Trace: [ 206.084035][T12744] [ 206.084043][T12744] __dump_stack+0x1d/0x30 [ 206.084067][T12744] dump_stack_lvl+0x95/0xd0 [ 206.084196][T12744] dump_stack+0x15/0x1b [ 206.084219][T12744] dump_header+0x80/0x240 [ 206.084243][T12744] oom_kill_process+0x295/0x350 [ 206.084272][T12744] out_of_memory+0x97d/0xb80 [ 206.084341][T12744] try_charge_memcg+0x62e/0xa10 [ 206.084364][T12744] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 206.084437][T12744] __read_swap_cache_async+0x17b/0x2d0 [ 206.084473][T12744] swap_cluster_readahead+0x262/0x3c0 [ 206.084504][T12744] swapin_readahead+0xde/0x840 [ 206.084533][T12744] ? next_uptodate_folio+0x84c/0x8c0 [ 206.084637][T12744] ? percpu_counter_add_batch+0xb6/0x130 [ 206.084678][T12744] ? __rcu_read_unlock+0x4e/0x70 [ 206.084776][T12744] ? swap_cache_get_folio+0x26f/0x280 [ 206.084811][T12744] do_swap_page+0x59b/0x2a50 [ 206.084847][T12744] ? __rcu_read_lock+0x36/0x50 [ 206.084895][T12744] ? __pfx_default_wake_function+0x10/0x10 [ 206.084935][T12744] handle_mm_fault+0xb40/0x3030 [ 206.084966][T12744] ? vma_start_read+0x1c7/0x2c0 [ 206.085040][T12744] do_user_addr_fault+0x62f/0x1050 [ 206.085067][T12744] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 206.085104][T12744] ? irqentry_exit+0x3c/0x510 [ 206.085171][T12744] exc_page_fault+0x62/0xa0 [ 206.085193][T12744] asm_exc_page_fault+0x26/0x30 [ 206.085212][T12744] RIP: 0033:0x7fb962718db7 [ 206.085230][T12744] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 ca ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c8 ed 00 48 01 d1 39 7c 24 [ 206.085295][T12744] RSP: 002b:00007ffc4c8e3e40 EFLAGS: 00010206 [ 206.085312][T12744] RAX: 0000001b31124000 RBX: 000000000000010e RCX: 0000000000030188 [ 206.085327][T12744] RDX: 000000000428c673 RSI: 00007ffc4c8e3ed0 RDI: 0000000000000005 [ 206.085343][T12744] RBP: 00007ffc4c8e3e7c R08: 000000000fddcb87 R09: 7fffffffffffffff [ 206.085359][T12744] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 206.085375][T12744] R13: 00000000000927c0 R14: 00000000000300b1 R15: 00007ffc4c8e3ed0 [ 206.085414][T12744] [ 206.085420][T12744] memory: usage 307200kB, limit 307200kB, failcnt 5139 [ 206.326105][T12744] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 206.334116][T12744] kmem: usage 241448kB, limit 9007199254740988kB, failcnt 0 [ 206.341468][T12744] Memory cgroup stats for /syz2: [ 206.342296][T12744] cache 67317760 [ 206.350881][T12744] rss 0 [ 206.353801][T12744] shmem 0 [ 206.357176][T12744] mapped_file 0 [ 206.360724][T12744] dirty 0 [ 206.363839][T12744] writeback 0 [ 206.363849][T12744] workingset_refault_anon 358 [ 206.363859][T12744] workingset_refault_file 8446 [ 206.363868][T12744] swap 720896 [ 206.363875][T12744] swapcached 4096 [ 206.363939][T12744] pgpgin 429043 [ 206.363946][T12744] pgpgout 412605 [ 206.363953][T12744] pgfault 333524 [ 206.363960][T12744] pgmajfault 277 [ 206.363967][T12744] inactive_anon 0 [ 206.363973][T12744] active_anon 4096 [ 206.363980][T12744] inactive_file 0 [ 206.363987][T12744] active_file 16384 [ 206.363994][T12744] unevictable 67309568 [ 206.364001][T12744] hierarchical_memory_limit 314572800 [ 206.364010][T12744] hierarchical_memsw_limit 9223372036854771712 [ 206.364083][T12744] total_cache 67317760 [ 206.364091][T12744] total_rss 0 [ 206.364099][T12744] total_shmem 0 [ 206.364105][T12744] total_mapped_file 0 [ 206.364134][T12744] total_dirty 0 [ 206.364140][T12744] total_writeback 0 [ 206.364147][T12744] total_workingset_refault_anon 358 [ 206.364156][T12744] total_workingset_refault_file 8446 [ 206.364164][T12744] total_swap 720896 [ 206.465602][T12744] total_swapcached 4096 [ 206.469796][T12744] total_pgpgin 429043 [ 206.473936][T12744] total_pgpgout 412605 [ 206.478395][T12744] total_pgfault 333524 [ 206.482730][T12744] total_pgmajfault 277 [ 206.486803][T12744] total_inactive_anon 0 [ 206.491165][T12744] total_active_anon 4096 [ 206.495543][T12744] total_inactive_file 0 [ 206.499748][T12744] total_active_file 16384 [ 206.504082][T12744] total_unevictable 67309568 [ 206.508691][T12744] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3526,pid=14966,uid=0 [ 206.523578][T12744] Memory cgroup out of memory: Killed process 14966 (syz.2.3526) total-vm:94000kB, anon-rss:1204kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 206.578966][T14939] chnl_net:caif_netlink_parms(): no params data found [ 206.605937][T15035] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.3537: inode has both inline data and extents flags [ 206.625301][T15035] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3537: couldn't read orphan inode 15 (err -117) [ 206.658082][T15035] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.762086][T14939] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.769406][T14939] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.777854][T14939] bridge_slave_0: entered allmulticast mode [ 206.778240][T12744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.784636][T14939] bridge_slave_0: entered promiscuous mode [ 206.801006][T15051] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 206.806956][T14939] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.818036][T14939] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.826734][T14939] bridge_slave_1: entered allmulticast mode [ 206.838707][T14939] bridge_slave_1: entered promiscuous mode [ 206.854538][T15051] EXT4-fs (loop6): 1 truncate cleaned up [ 206.879548][T14939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.891174][T14939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.897714][T15051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.972486][T14939] team0: Port device team_slave_0 added [ 207.002461][T14939] team0: Port device team_slave_1 added [ 207.020629][T10368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.035118][T14939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.042104][T14939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.068215][T14939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.079308][ T4852] IPVS: starting estimator thread 0... [ 207.131135][T14939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.138190][T14939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.164524][T14939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.214916][T14939] hsr_slave_0: entered promiscuous mode [ 207.221115][T14939] hsr_slave_1: entered promiscuous mode [ 207.226516][T15069] IPVS: using max 2496 ests per chain, 124800 per kthread [ 207.227032][T14939] debugfs: 'hsr0' already exists in 'hsr' [ 207.239509][T14939] Cannot create hsr debugfs directory [ 207.415679][T15107] 9p: Bad value for 'wfdno' [ 207.451996][T15111] set_capacity_and_notify: 5 callbacks suppressed [ 207.452011][T15111] loop2: detected capacity change from 0 to 128 [ 207.499213][T15111] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 04000002) [ 207.509216][T15111] FAT-fs (loop2): Filesystem has been set read-only [ 207.575773][T15088] xt_hashlimit: size too large, truncated to 1048576 [ 207.745084][ T8297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.781684][T15152] loop0: detected capacity change from 0 to 1024 [ 207.799559][T14939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.836625][T14939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.845612][T15152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.847148][T14939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.865527][T15152] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3560: corrupted in-inode xattr: bad e_name length [ 207.868773][T14939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.894862][T15152] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3560: corrupted in-inode xattr: bad e_name length [ 207.927844][T15152] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3560: corrupted in-inode xattr: bad e_name length [ 207.952534][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3561'. [ 208.000526][T11863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.042556][T14939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.080544][T14939] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.096557][ T4133] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.103731][ T4133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.123025][ T4133] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.130262][ T4133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.161566][T14939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.172584][T14939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.275032][T14939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.418477][T14939] veth0_vlan: entered promiscuous mode [ 208.429633][T14939] veth1_vlan: entered promiscuous mode [ 208.460807][T14939] veth0_macvtap: entered promiscuous mode [ 208.469925][T14939] veth1_macvtap: entered promiscuous mode [ 208.481558][T14939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.508872][T14939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.551183][ T4133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.568991][ T4133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.586256][ T4133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.625656][ T4133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.697323][T15278] netlink: 'syz.8.3580': attribute type 10 has an invalid length. [ 208.745152][T15278] geneve1: entered promiscuous mode [ 208.774511][T15278] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 208.932701][T15314] netlink: 'syz.0.3587': attribute type 6 has an invalid length. [ 209.031798][T15332] 9p: Bad value for 'rfdno' [ 209.038846][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 209.038861][ T29] audit: type=1400 audit(1770445872.078:4308): avc: denied { map } for pid=15333 comm="syz.0.3593" path="socket:[47154]" dev="sockfs" ino=47154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 209.117541][T15348] loop0: detected capacity change from 0 to 128 [ 209.205252][T15357] loop6: detected capacity change from 0 to 512 [ 209.235900][T15357] EXT4-fs: Ignoring removed bh option [ 209.241500][T15357] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.273460][T15357] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 209.356221][T15357] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 209.371922][T15357] EXT4-fs (loop6): orphan cleanup on readonly fs [ 209.379125][T15357] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 4 [ 209.389198][T15357] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 209.400050][T15357] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3595: Failed to acquire dquot type 1 [ 209.412192][T15357] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3595: Invalid block bitmap block 0 in block_group 0 [ 209.432075][T15357] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3595: Invalid block bitmap block 0 in block_group 0 [ 209.451001][T15357] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3595: Invalid block bitmap block 0 in block_group 0 [ 209.600596][T15357] Quota error (device loop6): write_blk: dquota write failed [ 209.608035][T15357] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 209.618094][T15357] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3595: Failed to acquire dquot type 1 [ 209.648333][T15401] loop2: detected capacity change from 0 to 512 [ 209.656668][T15401] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 209.668475][T15401] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 209.678684][T15401] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3609: Corrupt directory, running e2fsck is recommended [ 209.688622][T15357] Quota error (device loop6): write_blk: dquota write failed [ 209.699091][T15357] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 209.709227][T15357] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3595: Failed to acquire dquot type 1 [ 209.734164][T15412] xt_hashlimit: max too large, truncated to 1048576 [ 209.737684][T15401] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 209.753018][T15401] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3609: corrupted in-inode xattr: invalid ea_ino [ 209.766714][T15401] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3609: couldn't read orphan inode 15 (err -117) [ 209.779368][T15401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.809452][T12744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.934288][T15432] loop0: detected capacity change from 0 to 512 [ 209.977890][T15357] EXT4-fs (loop6): 1 orphan inode deleted [ 210.005363][T15432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.029749][T15447] tmpfs: Bad value for 'mpol' [ 210.042396][T15357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.056724][T15432] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.094072][T12663] udevd[12663]: symlink '../../loop1' '/dev/disk/by-diskseq/874.tmp-b7:1' failed: Read-only file system [ 210.127256][ T3304] udevd[3304]: symlink '../../loop8' '/dev/disk/by-diskseq/868.tmp-b7:8' failed: Read-only file system [ 210.167201][T12663] udevd[12663]: symlink '../../loop1' '/dev/disk/by-diskseq/874.tmp-b7:1' failed: Read-only file system [ 210.178797][T11863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.201461][ T3304] udevd[3304]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 210.224945][ T3304] udevd[3304]: symlink '../../loop0' '/dev/disk/by-diskseq/880.tmp-b7:0' failed: Read-only file system [ 210.251777][ T3304] udevd[3304]: symlink '../../loop2' '/dev/disk/by-diskseq/879.tmp-b7:2' failed: Read-only file system [ 210.251974][T12663] udevd[12663]: symlink '../../loop0' '/dev/disk/by-diskseq/880.tmp-b7:0' failed: Read-only file system [ 210.289797][ T3304] udevd[3304]: symlink '../../loop8' '/dev/disk/by-diskseq/868.tmp-b7:8' failed: Read-only file system [ 210.345004][ T3304] udevd[3304]: symlink '../../loop2' '/dev/disk/by-diskseq/879.tmp-b7:2' failed: Read-only file system [ 210.434299][T15486] loop2: detected capacity change from 0 to 512 [ 210.458790][T15487] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3623'. [ 210.497588][T15486] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 210.557545][T15486] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.3626: iget: bad i_size value: 12154757448730 [ 210.603675][T12663] udevd[12663]: symlink '../../loop0' '/dev/disk/by-diskseq/881.tmp-b7:0' failed: Read-only file system [ 210.681231][ T8297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.695613][T15486] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3626: couldn't read orphan inode 13 (err -117) [ 210.732589][T15477] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3623'. [ 210.775011][T15486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.822877][T15477] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3623'. [ 210.877505][T12744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.025957][T15510] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3634'. [ 211.173588][ T29] audit: type=1400 audit(1770445874.080:4309): avc: denied { mount } for pid=15523 comm="syz.8.3638" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 211.374195][T15546] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3647'. [ 211.377934][T15505] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3632'. [ 211.393683][T15544] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3646'. [ 211.428548][T15505] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3632'. [ 211.438713][T15549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.620610][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3656'. [ 211.645689][T15551] loop8: detected capacity change from 0 to 8192 [ 211.682265][T15567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3656'. [ 211.775067][T15575] loop0: detected capacity change from 0 to 512 [ 211.800369][T15575] EXT4-fs: Ignoring removed nobh option [ 211.815233][T15575] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 211.826839][T15575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 211.835359][T15575] EXT4-fs (loop0): orphan cleanup on readonly fs [ 211.842376][T15575] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.3659: attempt to clear invalid blocks 1024 len 1 [ 211.904175][T15580] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.911542][T15580] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.931176][T15575] EXT4-fs (loop0): Remounting filesystem read-only [ 211.938120][T15583] loop6: detected capacity change from 0 to 1024 [ 211.950472][T15575] EXT4-fs (loop0): 1 truncate cleaned up [ 211.957352][T15583] EXT4-fs: Ignoring removed orlov option [ 211.963178][T15583] EXT4-fs: inline encryption not supported [ 211.971276][T15575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 211.986762][T15583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.019950][T11863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 212.064347][ T8297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.128714][T15591] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.177606][T15591] EXT4-fs: Ignoring removed i_version option [ 212.183947][T15608] EXT4-fs: Ignoring removed nobh option [ 212.189812][T15608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.201969][T15591] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 212.259274][T15591] xt_hashlimit: size too large, truncated to 1048576 [ 212.276308][T15608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.334350][T15608] FAULT_INJECTION: forcing a failure. [ 212.334350][T15608] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 212.348348][T15608] CPU: 0 UID: 0 PID: 15608 Comm: syz.0.3670 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 212.348383][T15608] Tainted: [W]=WARN [ 212.348391][T15608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.348406][T15608] Call Trace: [ 212.348431][T15608] [ 212.348440][T15608] __dump_stack+0x1d/0x30 [ 212.348490][T15608] dump_stack_lvl+0x95/0xd0 [ 212.348514][T15608] dump_stack+0x15/0x1b [ 212.348533][T15608] should_fail_ex+0x263/0x280 [ 212.348597][T15608] should_fail_alloc_page+0xf2/0x100 [ 212.348621][T15608] __alloc_frozen_pages_noprof+0x108/0x350 [ 212.348675][T15608] alloc_pages_mpol+0xb3/0x260 [ 212.348720][T15608] folio_alloc_noprof+0x96/0x150 [ 212.348750][T15608] filemap_alloc_folio_noprof+0x92/0x220 [ 212.348777][T15608] __filemap_get_folio_mpol+0x295/0x680 [ 212.348872][T15608] ext4_block_zero_page_range+0x8c/0x620 [ 212.348912][T15608] ext4_zero_partial_blocks+0x17c/0x190 [ 212.349015][T15608] ext4_punch_hole+0x45f/0x790 [ 212.349046][T15608] ext4_fallocate+0x2d7/0x2f0 [ 212.349069][T15608] vfs_fallocate+0x3b6/0x450 [ 212.349177][T15608] file_ioctl+0x4e3/0x5c0 [ 212.349210][T15608] do_vfs_ioctl+0x7c9/0xe70 [ 212.349239][T15608] ? selinux_file_ioctl+0x5f7/0xcb0 [ 212.349322][T15608] ? __rcu_read_unlock+0x4e/0x70 [ 212.349355][T15608] ? __rcu_read_unlock+0x4e/0x70 [ 212.349388][T15608] ? __fget_files+0x184/0x1c0 [ 212.349411][T15608] ? mutex_lock+0x57/0x90 [ 212.349457][T15608] __se_sys_ioctl+0x82/0x140 [ 212.349495][T15608] __x64_sys_ioctl+0x43/0x50 [ 212.349558][T15608] x64_sys_call+0x14b0/0x3000 [ 212.349585][T15608] do_syscall_64+0xc0/0x2a0 [ 212.349619][T15608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.349645][T15608] RIP: 0033:0x7fcbe953acb9 [ 212.349697][T15608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.349714][T15608] RSP: 002b:00007fcbe7f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.349736][T15608] RAX: ffffffffffffffda RBX: 00007fcbe97b5fa0 RCX: 00007fcbe953acb9 [ 212.349779][T15608] RDX: 0000200000000180 RSI: 0000000040305829 RDI: 0000000000000005 [ 212.349872][T15608] RBP: 00007fcbe7f97090 R08: 0000000000000000 R09: 0000000000000000 [ 212.349888][T15608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.349903][T15608] R13: 00007fcbe97b6038 R14: 00007fcbe97b5fa0 R15: 00007ffdcde76258 [ 212.349924][T15608] [ 212.352928][T15621] EXT4-fs: Ignoring removed nobh option [ 212.616209][T15621] EXT4-fs (loop1): orphan cleanup on readonly fs [ 212.636325][T15621] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.3663: ea_inode file size=4 entry size=6 [ 212.661313][T15621] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 212.675034][T15621] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.3663: corrupted inode contents [ 212.676946][T11863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.687693][T15621] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.3663: mark_inode_dirty error [ 212.708875][T15621] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.3663: corrupted inode contents [ 212.728029][T15620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.766354][T15634] GPT:first_usable_lbas don't match. [ 212.772122][T15634] GPT:34 != 290 [ 212.775787][T15634] GPT: Use GNU Parted to correct GPT errors. [ 212.781919][T15634] loop2: p1 p2 p3 [ 212.797182][T15621] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.3663: mark_inode_dirty error [ 212.817942][ T3000] GPT:first_usable_lbas don't match. [ 212.823299][ T3000] GPT:34 != 290 [ 212.826804][ T3000] GPT: Use GNU Parted to correct GPT errors. [ 212.833296][ T3000] loop2: p1 p2 p3 [ 212.845423][T15640] set_capacity_and_notify: 6 callbacks suppressed [ 212.845442][T15640] loop6: detected capacity change from 0 to 2048 [ 212.859170][T15621] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.3663: mark inode dirty (error -117) [ 212.865261][T15641] delete_channel: no stack [ 212.873166][T15621] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 212.886134][T15621] EXT4-fs (loop1): 1 orphan inode deleted [ 212.893126][T15621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 212.918104][ T3000] loop6: unable to read partition table [ 212.923912][ T3000] loop6: partition table beyond EOD, truncated [ 212.956860][T15640] loop6: unable to read partition table [ 212.963331][T15640] loop6: partition table beyond EOD, truncated [ 212.970165][T15640] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 213.013755][T14939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.020038][T15649] loop6: detected capacity change from 0 to 1024 [ 213.041524][ T29] audit: type=1326 audit(1770445875.819:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.1.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88131acb9 code=0x7ffc0000 [ 213.066341][ T29] audit: type=1326 audit(1770445875.838:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.1.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd88131acb9 code=0x7ffc0000 [ 213.072470][T15649] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.124819][T15655] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 213.131365][T15655] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 213.139198][T15655] vhci_hcd vhci_hcd.0: Device attached [ 213.150532][T15659] vhci_hcd: connection closed [ 213.150722][ T4132] vhci_hcd vhci_hcd.0: stop threads [ 213.160673][ T4132] vhci_hcd vhci_hcd.0: release socket [ 213.166138][ T4132] vhci_hcd vhci_hcd.0: disconnect device [ 213.355990][T15666] loop8: detected capacity change from 0 to 8192 [ 213.748299][T15724] loop0: detected capacity change from 0 to 128 [ 214.032094][ T8297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.120022][T15776] loop6: detected capacity change from 0 to 512 [ 214.417858][ T4813] IPVS: starting estimator thread 0... [ 214.518572][T15823] IPVS: using max 2736 ests per chain, 136800 per kthread [ 214.545440][T15849] loop0: detected capacity change from 0 to 512 [ 214.553885][T15849] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 214.562379][T15849] EXT4-fs (loop0): orphan cleanup on readonly fs [ 214.567768][T15852] loop8: detected capacity change from 0 to 128 [ 214.580118][T15849] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 214.597140][T15849] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 214.604818][T15849] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.3714: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 214.630826][T15849] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3714: couldn't read orphan inode 13 (err -117) [ 214.645338][T15849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.686309][T11863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.855961][T15893] loop2: detected capacity change from 0 to 1024 [ 214.948184][T15906] loop0: detected capacity change from 0 to 512 [ 214.961575][T15906] EXT4-fs: inline encryption not supported [ 214.967985][T15906] ext3: Unknown parameter 'noacl' [ 215.045206][T15916] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.055701][T15917] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 215.113071][T15923] loop8: detected capacity change from 0 to 1024 [ 215.128513][T15923] EXT4-fs: Ignoring removed nobh option [ 215.134254][T15923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.166572][T15923] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.275022][T10368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.291500][T15945] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 215.331579][T15949] team_slave_0: entered promiscuous mode [ 215.337289][T15949] macvlan2: entered allmulticast mode [ 215.342764][T15949] team0: entered allmulticast mode [ 215.347878][T15949] team_slave_0: entered allmulticast mode [ 215.380990][T15949] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 215.401493][T15949] team0: left allmulticast mode [ 215.406438][T15949] team_slave_0: left allmulticast mode [ 215.411930][T15949] team_slave_0: left promiscuous mode [ 215.461192][T15955] gretap0: entered promiscuous mode [ 215.466448][T15955] macsec1: entered promiscuous mode [ 215.470757][T12663] udevd[12663]: symlink '../../loop6' '/dev/disk/by-diskseq/916.tmp-b7:6' failed: Read-only file system [ 215.471915][T15955] macsec1: entered allmulticast mode [ 215.488345][T15955] gretap0: entered allmulticast mode [ 215.521570][T15942] geneve2: entered promiscuous mode [ 215.527039][T15942] geneve2: entered allmulticast mode [ 215.535450][T12663] udevd[12663]: symlink '../../loop0' '/dev/disk/by-diskseq/920.tmp-b7:0' failed: Read-only file system [ 215.572434][ T3304] udevd[3304]: symlink '../../loop1' '/dev/disk/by-diskseq/904.tmp-b7:1' failed: Read-only file system [ 215.580693][ T5226] udevd[5226]: symlink '../../loop8' '/dev/disk/by-diskseq/922.tmp-b7:8' failed: Read-only file system [ 215.662888][T12663] udevd[12663]: symlink '../../loop8' '/dev/disk/by-diskseq/922.tmp-b7:8' failed: Read-only file system [ 215.684052][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 215.684069][ T29] audit: type=1400 audit(1770445878.289:4336): avc: denied { getopt } for pid=15957 comm="syz.6.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 215.717827][ T3304] udevd[3304]: symlink '../../loop1' '/dev/disk/by-diskseq/904.tmp-b7:1' failed: Read-only file system [ 215.740453][T15971] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.761524][T12663] udevd[12663]: symlink '../../loop8' '/dev/disk/by-diskseq/923.tmp-b7:8' failed: Read-only file system [ 215.801857][ T3304] udevd[3304]: symlink '../../loop0' '/dev/disk/by-diskseq/920.tmp-b7:0' failed: Read-only file system [ 215.809609][T12663] udevd[12663]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 215.814258][T15971] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.827720][T15979] __nla_validate_parse: 21 callbacks suppressed [ 215.827745][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3755'. [ 215.871098][ T29] audit: type=1400 audit(1770445878.466:4337): avc: denied { accept } for pid=15957 comm="syz.6.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 215.913157][T10368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.915106][T12663] udevd[12663]: symlink '../../loop1' '/dev/disk/by-diskseq/904.tmp-b7:1' failed: Read-only file system [ 215.959748][T15984] EXT4-fs: Ignoring removed bh option [ 216.023027][T15984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.024698][T15984] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.092957][ T29] audit: type=1400 audit(1770445878.681:4338): avc: denied { listen } for pid=15983 comm="syz.2.3759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 216.093034][ T29] audit: type=1400 audit(1770445878.681:4339): avc: denied { accept } for pid=15983 comm="syz.2.3759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 216.202612][T12744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.244275][T16009] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 216.592924][T16025] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3770'. [ 216.670071][T16027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3771'. [ 216.689056][T16025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3770'. [ 216.757715][T16025] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3770'. [ 216.769958][ T29] audit: type=1400 audit(1770445879.308:4340): avc: denied { lock } for pid=16028 comm="syz.0.3772" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=48082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 216.812412][T16025] 9p: Bad value for 'wfdno' [ 217.002055][T16049] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.158424][T16065] syzkaller0: entered promiscuous mode [ 217.164072][T16065] syzkaller0: entered allmulticast mode [ 217.297616][T16080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3789'. [ 217.299725][T16083] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3790'. [ 217.401556][T16091] FAULT_INJECTION: forcing a failure. [ 217.401556][T16091] name failslab, interval 1, probability 0, space 0, times 0 [ 217.414994][T16091] CPU: 0 UID: 0 PID: 16091 Comm: syz.1.3794 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 217.415030][T16091] Tainted: [W]=WARN [ 217.415038][T16091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.415055][T16091] Call Trace: [ 217.415063][T16091] [ 217.415071][T16091] __dump_stack+0x1d/0x30 [ 217.415146][T16091] dump_stack_lvl+0x95/0xd0 [ 217.415172][T16091] dump_stack+0x15/0x1b [ 217.415195][T16091] should_fail_ex+0x263/0x280 [ 217.415225][T16091] should_failslab+0x8c/0xb0 [ 217.415262][T16091] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 217.415287][T16091] ? __alloc_skb+0x2f0/0x4b0 [ 217.415392][T16091] ? path_openat+0x1e8e/0x23c0 [ 217.415428][T16091] __alloc_skb+0x2f0/0x4b0 [ 217.415453][T16091] ? __alloc_skb+0x219/0x4b0 [ 217.415538][T16091] _sctp_make_chunk+0x59/0x210 [ 217.415644][T16091] sctp_make_strreset_req+0xa9/0x3e0 [ 217.415720][T16091] ? __rcu_read_unlock+0x4e/0x70 [ 217.415758][T16091] sctp_send_reset_streams+0x4b6/0x880 [ 217.415792][T16091] sctp_setsockopt_reset_streams+0x173/0x210 [ 217.415825][T16091] sctp_setsockopt+0x92a/0xea0 [ 217.415885][T16091] sock_common_setsockopt+0x69/0x80 [ 217.415914][T16091] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 217.415961][T16091] __sys_setsockopt+0x184/0x200 [ 217.415995][T16091] __x64_sys_setsockopt+0x64/0x80 [ 217.416027][T16091] x64_sys_call+0x21d5/0x3000 [ 217.416086][T16091] do_syscall_64+0xc0/0x2a0 [ 217.416132][T16091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.416200][T16091] RIP: 0033:0x7fd88131acb9 [ 217.416245][T16091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.416264][T16091] RSP: 002b:00007fd87fd77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.416286][T16091] RAX: ffffffffffffffda RBX: 00007fd881595fa0 RCX: 00007fd88131acb9 [ 217.416300][T16091] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000006 [ 217.416315][T16091] RBP: 00007fd87fd77090 R08: 0000000000000018 R09: 0000000000000000 [ 217.416355][T16091] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000001 [ 217.416370][T16091] R13: 00007fd881596038 R14: 00007fd881595fa0 R15: 00007ffc646a3828 [ 217.416412][T16091] [ 217.655861][T16094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3796'. [ 217.802410][T16106] ipt_ECN: cannot use operation on non-tcp rule [ 217.917785][T16109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3802'. [ 218.023361][ T29] audit: type=1326 audit(1770445880.477:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.6.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576d1eacb9 code=0x7ffc0000 [ 218.047099][ T29] audit: type=1326 audit(1770445880.477:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.6.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576d1eacb9 code=0x7ffc0000 [ 218.071310][ T29] audit: type=1326 audit(1770445880.477:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.6.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f576d1eacb9 code=0x7ffc0000 [ 218.095099][ T29] audit: type=1326 audit(1770445880.477:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.6.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576d1eacb9 code=0x7ffc0000 [ 218.125979][T16113] netlink: 'syz.6.3804': attribute type 1 has an invalid length. [ 218.159011][ T29] audit: type=1326 audit(1770445880.580:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.6.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576d1eacb9 code=0x7ffc0000 [ 218.235386][T16124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4624 sclass=netlink_route_socket pid=16124 comm=syz.2.3810 [ 218.255360][T16127] set_capacity_and_notify: 5 callbacks suppressed [ 218.255375][T16127] loop1: detected capacity change from 0 to 128 [ 218.273205][T16126] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3811'. [ 218.282729][T16126] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 218.349250][T16133] netlink: 'syz.2.3814': attribute type 10 has an invalid length. [ 218.361194][T16135] netlink: zone id is out of range [ 218.366440][T16135] netlink: zone id is out of range [ 218.376401][T16133] bond0: entered promiscuous mode [ 218.381606][T16133] bond_slave_0: entered promiscuous mode [ 218.387395][T16133] bond_slave_1: entered promiscuous mode [ 218.390478][T16135] netlink: zone id is out of range [ 218.394136][T16133] bridge0: port 3(bond0) entered blocking state [ 218.404467][T16133] bridge0: port 3(bond0) entered disabled state [ 218.411056][T16135] netlink: zone id is out of range [ 218.411211][T16133] bond0: entered allmulticast mode [ 218.416667][T16135] netlink: zone id is out of range [ 218.422388][T16133] bond_slave_0: entered allmulticast mode [ 218.428009][T16135] netlink: zone id is out of range [ 218.433402][T16133] bond_slave_1: entered allmulticast mode [ 218.455368][T16135] netlink: set zone limit has 8 unknown bytes [ 218.487942][T16133] bridge0: port 3(bond0) entered blocking state [ 218.490385][T16144] loop1: detected capacity change from 0 to 1024 [ 218.494367][T16133] bridge0: port 3(bond0) entered forwarding state [ 218.505496][T16144] EXT4-fs: Ignoring removed nobh option [ 218.512966][T16144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 218.529097][T16144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.615231][T14939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.635661][T16154] syzkaller0: entered promiscuous mode [ 218.641288][T16154] syzkaller0: entered allmulticast mode [ 218.999815][T16186] loop6: detected capacity change from 0 to 8192 [ 219.058972][T16186] netlink: 'syz.6.3834': attribute type 12 has an invalid length. [ 219.104857][T16188] loop6: detected capacity change from 0 to 128 [ 219.124465][T16188] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 1, start 04000002) [ 219.134575][T16188] FAT-fs (loop6): Filesystem has been set read-only [ 219.174090][T16192] syzkaller0: entered promiscuous mode [ 219.179688][T16192] syzkaller0: entered allmulticast mode [ 219.193862][T16192] netlink: 'syz.6.3836': attribute type 13 has an invalid length. [ 219.272094][T16192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.280013][T16195] Invalid logical block size (6) [ 219.287764][T16192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.383521][T16196] support for cryptoloop has been removed. Use dm-crypt instead. [ 219.420766][ T4120] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.429882][ T4120] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.443681][ T4120] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.452899][ T4120] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.474472][ T4120] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.483640][ T4120] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.523237][ T4120] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.532389][ T4120] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.795591][T16229] loop8: detected capacity change from 0 to 1024 [ 219.901716][T16229] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.918326][T16200] loop1: detected capacity change from 0 to 1024 [ 219.974406][T16200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 220.014553][T16200] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.189267][T14939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 220.255798][T16257] tipc: Started in network mode [ 220.260970][T16257] tipc: Node identity ac14140f, cluster identity 4711 [ 220.280233][T16257] tipc: New replicast peer: 255.255.255.255 [ 220.286494][T16257] tipc: Enabled bearer , priority 10 [ 220.811003][T10368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.836205][T12663] udevd[12663]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 220.870821][T12663] udevd[12663]: symlink '../../loop8' '/dev/disk/by-diskseq/941.tmp-b7:8' failed: Read-only file system [ 220.886360][T12663] udevd[12663]: symlink '../../loop8' '/dev/disk/by-diskseq/941.tmp-b7:8' failed: Read-only file system [ 220.911236][T12663] udevd[12663]: symlink '../../loop8' '/dev/disk/by-diskseq/941.tmp-b7:8' failed: Read-only file system [ 220.957397][T16265] loop0: detected capacity change from 0 to 8192 [ 221.001591][T12663] udevd[12663]: symlink '../../loop0' '/dev/disk/by-diskseq/945.tmp-b7:0' failed: Read-only file system [ 221.013888][T12663] udevd[12663]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 221.032132][T12663] udevd[12663]: symlink '../../loop0' '/dev/disk/by-uuid/8AF3-4683.tmp-b7:0' failed: Read-only file system [ 221.060948][ T3304] udevd[3304]: symlink '../../loop2' '/dev/disk/by-diskseq/926.tmp-b7:2' failed: Read-only file system [ 221.089325][T12663] udevd[12663]: symlink '../../loop0' '/dev/disk/by-diskseq/945.tmp-b7:0' failed: Read-only file system [ 221.123261][T12663] udevd[12663]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 221.341139][T16303] netlink: 'syz.1.3873': attribute type 6 has an invalid length. [ 221.479052][ T36] tipc: Node number set to 2886997007 [ 221.529055][T16325] __nla_validate_parse: 10 callbacks suppressed [ 221.529076][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'. [ 221.555626][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 221.555691][ T29] audit: type=1400 audit(1770445883.778:4408): avc: denied { read write } for pid=16324 comm="syz.0.3877" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 221.586327][ T29] audit: type=1400 audit(1770445883.778:4409): avc: denied { open } for pid=16324 comm="syz.0.3877" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 221.680424][T16329] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3878'. [ 222.097331][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3881'. [ 222.109287][T16402] gretap0: entered promiscuous mode [ 222.114712][T16402] macsec1: entered promiscuous mode [ 222.120148][T16402] macsec1: entered allmulticast mode [ 222.125583][T16402] gretap0: entered allmulticast mode [ 222.272623][T16431] loop0: detected capacity change from 0 to 512 [ 222.292037][T16431] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 222.303932][T16431] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 222.314223][T16431] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3885: Corrupt directory, running e2fsck is recommended [ 222.344152][T16431] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 222.353532][T16431] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3885: corrupted in-inode xattr: invalid ea_ino [ 222.367399][T16431] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3885: couldn't read orphan inode 15 (err -117) [ 222.380153][T16431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.448488][T11863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.468116][ T29] audit: type=1400 audit(1770445884.639:4410): avc: denied { append } for pid=16441 comm="syz.1.3887" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 222.770025][ T29] audit: type=1400 audit(1770445884.910:4411): avc: denied { read open } for pid=16477 comm="syz.0.3892" path="/" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 222.803719][T16501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3894'. [ 222.828204][ T29] audit: type=1400 audit(1770445884.976:4412): avc: denied { setattr } for pid=16477 comm="syz.0.3892" name="/" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 222.865476][T16500] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16500 comm=syz.1.3894 [ 222.865980][T16504] netlink: 'syz.1.3894': attribute type 1 has an invalid length. [ 223.016550][T16487] FAULT_INJECTION: forcing a failure. [ 223.016550][T16487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.032293][T16487] CPU: 0 UID: 0 PID: 16487 Comm: syz.6.3893 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 223.032332][T16487] Tainted: [W]=WARN [ 223.032339][T16487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.032352][T16487] Call Trace: [ 223.032376][T16487] [ 223.032383][T16487] __dump_stack+0x1d/0x30 [ 223.032409][T16487] dump_stack_lvl+0x95/0xd0 [ 223.032510][T16487] dump_stack+0x15/0x1b [ 223.032532][T16487] should_fail_ex+0x263/0x280 [ 223.032566][T16487] should_fail+0xb/0x20 [ 223.032733][T16487] should_fail_usercopy+0x1a/0x20 [ 223.032933][T16487] _copy_to_user+0x20/0xa0 [ 223.032952][T16487] simple_read_from_buffer+0xb5/0x130 [ 223.032990][T16487] proc_fail_nth_read+0x10e/0x150 [ 223.033017][T16487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.033063][T16487] vfs_read+0x1ab/0x7f0 [ 223.033081][T16487] ? __rcu_read_unlock+0x4e/0x70 [ 223.033114][T16487] ? __fget_files+0x184/0x1c0 [ 223.033205][T16487] ? tick_program_event+0x79/0xc0 [ 223.033235][T16487] ? mutex_lock+0x57/0x90 [ 223.033262][T16487] ksys_read+0xdc/0x1a0 [ 223.033286][T16487] __x64_sys_read+0x40/0x50 [ 223.033388][T16487] x64_sys_call+0x2889/0x3000 [ 223.033418][T16487] do_syscall_64+0xc0/0x2a0 [ 223.033448][T16487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.033516][T16487] RIP: 0033:0x7f576d1ab58e [ 223.033534][T16487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 223.033556][T16487] RSP: 002b:00007f576bc46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 223.033589][T16487] RAX: ffffffffffffffda RBX: 00007f576bc476c0 RCX: 00007f576d1ab58e [ 223.033630][T16487] RDX: 000000000000000f RSI: 00007f576bc470a0 RDI: 0000000000000006 [ 223.033646][T16487] RBP: 00007f576bc47090 R08: 0000000000000000 R09: 0000000000000000 [ 223.033663][T16487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.033747][T16487] R13: 00007f576d466038 R14: 00007f576d465fa0 R15: 00007ffd50cdb858 [ 223.033765][T16487] [ 223.472046][T16534] loop6: detected capacity change from 0 to 512 [ 223.755565][T16540] netlink: 324 bytes leftover after parsing attributes in process `syz.8.3903'. [ 223.778237][T16534] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 223.789006][T16534] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.3900: iget: bad i_size value: 12154757448730 [ 223.807679][T16534] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3900: couldn't read orphan inode 13 (err -117) [ 223.826173][T16534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.899039][ T8297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.016812][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3909'. [ 224.031740][T16574] gre0: entered promiscuous mode [ 224.099516][T16587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.212480][T16590] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3910'. [ 224.384813][T16590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.437524][T16601] loop0: detected capacity change from 0 to 8192 [ 224.437741][T16603] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3913'. [ 224.466002][T16601] syz.0.3912: attempt to access beyond end of device [ 224.466002][T16601] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 224.480154][T16601] Buffer I/O error on dev loop0, logical block 57847, async page read [ 224.489109][T16601] syz.0.3912: attempt to access beyond end of device [ 224.489109][T16601] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 224.503296][T16601] Buffer I/O error on dev loop0, logical block 57847, async page read [ 224.512522][T16601] syz.0.3912: attempt to access beyond end of device [ 224.512522][T16601] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 224.526526][T16601] Buffer I/O error on dev loop0, logical block 57847, async page read [ 224.541607][T16601] syz.0.3912: attempt to access beyond end of device [ 224.541607][T16601] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 224.555614][T16601] Buffer I/O error on dev loop0, logical block 57847, async page read [ 224.564406][T16601] syz.0.3912: attempt to access beyond end of device [ 224.564406][T16601] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 224.578388][T16601] Buffer I/O error on dev loop0, logical block 57847, async page read [ 224.615463][T16612] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3917'. [ 224.615502][T16601] syz.0.3912: attempt to access beyond end of device [ 224.615502][T16601] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 224.638488][T16601] Buffer I/O error on dev loop0, logical block 57847, async page read [ 224.647363][T16601] syz.0.3912: attempt to access beyond end of device [ 224.647363][T16601] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 224.661747][T16601] Buffer I/O error on dev loop0, logical block 57847, async page read [ 224.670548][T16601] syz.0.3912: attempt to access beyond end of device [ 224.670548][T16601] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 224.684582][T16601] Buffer I/O error on dev loop0, logical block 57847, async page read [ 224.692884][T16601] syz.0.3912: attempt to access beyond end of device [ 224.692884][T16601] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 224.706843][T16601] Buffer I/O error on dev loop0, logical block 57847, async page read [ 224.717443][T16601] syz.0.3912: attempt to access beyond end of device [ 224.717443][T16601] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 224.731693][T16601] Buffer I/O error on dev loop0, logical block 57847, async page read [ 224.808819][T16619] FAULT_INJECTION: forcing a failure. [ 224.808819][T16619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.822093][T16619] CPU: 0 UID: 0 PID: 16619 Comm: syz.2.3920 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 224.822131][T16619] Tainted: [W]=WARN [ 224.822190][T16619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.822202][T16619] Call Trace: [ 224.822209][T16619] [ 224.822266][T16619] __dump_stack+0x1d/0x30 [ 224.822295][T16619] dump_stack_lvl+0x95/0xd0 [ 224.822316][T16619] dump_stack+0x15/0x1b [ 224.822338][T16619] should_fail_ex+0x263/0x280 [ 224.822397][T16619] should_fail+0xb/0x20 [ 224.822509][T16619] should_fail_usercopy+0x1a/0x20 [ 224.822546][T16619] _copy_from_user+0x1c/0xb0 [ 224.822628][T16619] kstrtouint_from_user+0x69/0xf0 [ 224.822662][T16619] proc_fail_nth_write+0x50/0x160 [ 224.822690][T16619] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 224.822784][T16619] vfs_write+0x269/0x9f0 [ 224.822802][T16619] ? __rcu_read_unlock+0x4e/0x70 [ 224.822829][T16619] ? __fget_files+0x184/0x1c0 [ 224.822854][T16619] ? mutex_lock+0x57/0x90 [ 224.822881][T16619] ksys_write+0xdc/0x1a0 [ 224.822969][T16619] __x64_sys_write+0x40/0x50 [ 224.822993][T16619] x64_sys_call+0x2847/0x3000 [ 224.823021][T16619] do_syscall_64+0xc0/0x2a0 [ 224.823117][T16619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.823138][T16619] RIP: 0033:0x7fb96280b58e [ 224.823233][T16619] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.823263][T16619] RSP: 002b:00007fb9612a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.823283][T16619] RAX: ffffffffffffffda RBX: 00007fb9612a76c0 RCX: 00007fb96280b58e [ 224.823301][T16619] RDX: 0000000000000001 RSI: 00007fb9612a70a0 RDI: 0000000000000007 [ 224.823391][T16619] RBP: 00007fb9612a7090 R08: 0000000000000000 R09: 0000000000000000 [ 224.823429][T16619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.823464][T16619] R13: 00007fb962ac6038 R14: 00007fb962ac5fa0 R15: 00007ffc4c8e3ad8 [ 224.823487][T16619] [ 225.054631][T16623] loop8: detected capacity change from 0 to 512 [ 225.061830][T16623] EXT4-fs: Ignoring removed nobh option [ 225.082568][T16623] EXT4-fs (loop8): Invalid default hash set in the superblock [ 225.107335][T16627] syzkaller0: entered promiscuous mode [ 225.113030][T16627] syzkaller0: entered allmulticast mode [ 225.199405][ T29] audit: type=1326 audit(1770445887.183:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16628 comm="syz.2.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96284acb9 code=0x7ffc0000 [ 225.265838][T16630] loop2: detected capacity change from 0 to 128 [ 225.281011][T16630] vfat: Unknown parameter '0000000000000000000418446744073709551615' [ 225.292849][ T29] audit: type=1326 audit(1770445887.220:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16628 comm="syz.2.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb96284acb9 code=0x7ffc0000 [ 225.316402][ T29] audit: type=1326 audit(1770445887.220:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16628 comm="syz.2.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96284acb9 code=0x7ffc0000 [ 225.340102][ T29] audit: type=1326 audit(1770445887.220:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16628 comm="syz.2.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96284acb9 code=0x7ffc0000 [ 225.363784][ T29] audit: type=1326 audit(1770445887.220:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16628 comm="syz.2.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fb96284acb9 code=0x7ffc0000 [ 225.395419][T16630] loop2: detected capacity change from 0 to 512 [ 225.416063][T16630] ext4: Bad value for 'journal_ioprio' [ 225.447224][T16638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7696 sclass=netlink_route_socket pid=16638 comm=syz.1.3929 [ 225.471850][T16644] Invalid logical block size (4) [ 225.565134][T16650] lo speed is unknown, defaulting to 1000 [ 225.565222][T16650] lo speed is unknown, defaulting to 1000 [ 225.565429][T16650] lo speed is unknown, defaulting to 1000 [ 225.566099][T16650] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 225.569450][T16650] lo speed is unknown, defaulting to 1000 [ 225.579648][T16650] lo speed is unknown, defaulting to 1000 [ 225.580070][T16650] lo speed is unknown, defaulting to 1000 [ 225.580456][T16650] lo speed is unknown, defaulting to 1000 [ 225.580817][T16650] lo speed is unknown, defaulting to 1000 [ 225.665863][T16660] netlink: 'syz.6.3938': attribute type 9 has an invalid length. [ 225.669024][T16660] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 225.845337][T16677] loop2: detected capacity change from 0 to 1024 [ 225.854088][T16677] EXT4-fs: Ignoring removed nobh option [ 225.859705][T16677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.889294][T16677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.891552][T16684] netlink: 'syz.6.3948': attribute type 21 has an invalid length. [ 225.909294][T16684] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3948'. [ 226.040743][T16697] bond4: option arp_all_targets: invalid value (262144) [ 226.056071][T16697] bond4 (unregistering): Released all slaves [ 226.427485][T12663] udevd[12663]: symlink '../../loop1' '/dev/disk/by-diskseq/943.tmp-b7:1' failed: Read-only file system [ 226.442747][T16713] loop1: detected capacity change from 0 to 128 [ 226.454127][T16713] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 04000002) [ 226.464262][T16713] FAT-fs (loop1): Filesystem has been set read-only [ 226.473916][T12663] udevd[12663]: symlink '../../loop1' '/dev/disk/by-diskseq/961.tmp-b7:1' failed: Read-only file system [ 226.492441][T12663] udevd[12663]: symlink '../../loop1' '/dev/disk/by-diskseq/961.tmp-b7:1' failed: Read-only file system [ 226.507864][T12663] udevd[12663]: symlink '../../loop1' '/dev/disk/by-diskseq/961.tmp-b7:1' failed: Read-only file system [ 226.543779][T12663] udevd[12663]: symlink '../../loop1' '/dev/disk/by-diskseq/961.tmp-b7:1' failed: Read-only file system [ 226.712815][T12663] udevd[12663]: symlink '../../loop0' '/dev/disk/by-diskseq/957.tmp-b7:0' failed: Read-only file system [ 226.713713][T12744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.745709][T12663] udevd[12663]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 226.759301][T12663] udevd[12663]: symlink '../../loop2' '/dev/disk/by-diskseq/960.tmp-b7:2' failed: Read-only file system [ 226.770652][T16736] loop0: detected capacity change from 0 to 8192 [ 226.774577][T12663] udevd[12663]: symlink '../../loop2' '/dev/disk/by-diskseq/960.tmp-b7:2' failed: Read-only file system [ 226.792866][T12663] udevd[12663]: symlink '../../loop2' '/dev/disk/by-diskseq/963.tmp-b7:2' failed: Read-only file system [ 226.808481][T16736] syzkaller0: entered promiscuous mode [ 226.814034][T16736] syzkaller0: entered allmulticast mode [ 226.878458][T16746] loop8: detected capacity change from 0 to 512 [ 226.907189][T16746] EXT4-fs (loop8): 1 orphan inode deleted [ 226.914073][T16746] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.924683][T16752] __nla_validate_parse: 4 callbacks suppressed [ 226.924774][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3973'. [ 226.930981][T16746] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.979189][T16752] sctp: [Deprecated]: syz.1.3973 (pid 16752) Use of int in maxseg socket option. [ 226.979189][T16752] Use struct sctp_assoc_value instead [ 226.997808][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 226.997823][ T29] audit: type=1400 audit(1770445888.876:4502): avc: denied { map } for pid=16742 comm="syz.2.3970" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 227.027926][ T29] audit: type=1400 audit(1770445888.876:4503): avc: denied { execute } for pid=16742 comm="syz.2.3970" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 227.092304][ T29] audit: type=1400 audit(1770445888.876:4504): avc: denied { watch watch_reads } for pid=16745 comm="syz.8.3971" path="/352/file0/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.094974][T16757] loop0: detected capacity change from 0 to 128 [ 227.132690][T10368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.147990][T16757] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.182073][T16757] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.206202][T16764] Invalid logical block size (4) [ 227.254785][T11863] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.693364][T16788] loop6: detected capacity change from 0 to 512 [ 227.740156][T16788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 227.785693][T16788] EXT4-fs (loop6): orphan cleanup on readonly fs [ 227.809013][T16788] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 227.861523][T16788] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 227.880561][T16788] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #13: comm syz.6.3986: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 227.946918][T16788] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3986: couldn't read orphan inode 13 (err -117) [ 227.972680][T16788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.036497][T16771] syz.0.3980 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 228.050839][T16771] CPU: 0 UID: 0 PID: 16771 Comm: syz.0.3980 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 228.050914][T16771] Tainted: [W]=WARN [ 228.050923][T16771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.050941][T16771] Call Trace: [ 228.050949][T16771] [ 228.050958][T16771] __dump_stack+0x1d/0x30 [ 228.050991][T16771] dump_stack_lvl+0x95/0xd0 [ 228.051016][T16771] dump_stack+0x15/0x1b [ 228.051041][T16771] dump_header+0x80/0x240 [ 228.051101][T16771] oom_kill_process+0x295/0x350 [ 228.051148][T16771] out_of_memory+0x97d/0xb80 [ 228.051180][T16771] try_charge_memcg+0x62e/0xa10 [ 228.051212][T16771] obj_cgroup_charge_pages+0x23/0xc0 [ 228.051261][T16771] __memcg_kmem_charge_page+0x9e/0x170 [ 228.051296][T16771] __alloc_frozen_pages_noprof+0x18a/0x350 [ 228.051382][T16771] alloc_pages_mpol+0xb3/0x260 [ 228.051516][T16771] alloc_pages_noprof+0x8f/0x130 [ 228.051549][T16771] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 228.051654][T16771] __kvmalloc_node_noprof+0x471/0x680 [ 228.051689][T16771] ? ip_set_alloc+0x24/0x30 [ 228.051725][T16771] ? ip_set_alloc+0x24/0x30 [ 228.051776][T16771] ip_set_alloc+0x24/0x30 [ 228.051814][T16771] hash_netiface_create+0x282/0x740 [ 228.051853][T16771] ? __pfx_hash_netiface_create+0x10/0x10 [ 228.051908][T16771] ip_set_create+0x3cf/0x970 [ 228.052037][T16771] ? __nla_parse+0x40/0x60 [ 228.052079][T16771] nfnetlink_rcv_msg+0x509/0x5d0 [ 228.052201][T16771] netlink_rcv_skb+0x123/0x220 [ 228.052237][T16771] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 228.052272][T16771] nfnetlink_rcv+0x167/0x1720 [ 228.052331][T16771] ? __kfree_skb+0x109/0x150 [ 228.052377][T16771] ? nlmon_xmit+0x4f/0x60 [ 228.052438][T16771] ? consume_skb+0x49/0x140 [ 228.052498][T16771] ? nlmon_xmit+0x4f/0x60 [ 228.052575][T16771] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 228.052619][T16771] ? __dev_queue_xmit+0x139a/0x1f20 [ 228.052658][T16771] ? __dev_queue_xmit+0x148/0x1f20 [ 228.052704][T16771] ? ref_tracker_free+0x37d/0x3e0 [ 228.052781][T16771] ? __netlink_deliver_tap+0x4dc/0x500 [ 228.052825][T16771] netlink_unicast+0x5c0/0x690 [ 228.052912][T16771] netlink_sendmsg+0x5c8/0x6f0 [ 228.053000][T16771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.053026][T16771] ____sys_sendmsg+0x5af/0x600 [ 228.053054][T16771] ___sys_sendmsg+0x195/0x1e0 [ 228.053146][T16771] __x64_sys_sendmsg+0xd4/0x160 [ 228.053232][T16771] x64_sys_call+0x17ba/0x3000 [ 228.053302][T16771] do_syscall_64+0xc0/0x2a0 [ 228.053341][T16771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.053376][T16771] RIP: 0033:0x7fcbe953acb9 [ 228.053396][T16771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.053469][T16771] RSP: 002b:00007fcbe7f97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.053498][T16771] RAX: ffffffffffffffda RBX: 00007fcbe97b5fa0 RCX: 00007fcbe953acb9 [ 228.053514][T16771] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 228.053562][T16771] RBP: 00007fcbe95a8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 228.053578][T16771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.053592][T16771] R13: 00007fcbe97b6038 R14: 00007fcbe97b5fa0 R15: 00007ffdcde76258 [ 228.053626][T16771] [ 228.053634][T16771] memory: usage 307200kB, limit 307200kB, failcnt 801 [ 228.381196][T16771] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 228.389147][T16771] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 228.396438][T16771] Memory cgroup stats for /syz0: [ 228.396681][T16771] cache 0 [ 228.404948][T16771] rss 4096 [ 228.408094][T16771] shmem 0 [ 228.411034][T16771] mapped_file 0 [ 228.414526][T16771] dirty 0 [ 228.417458][T16771] writeback 0 [ 228.420754][T16771] workingset_refault_anon 75 [ 228.425335][T16771] workingset_refault_file 1193 [ 228.430127][T16771] swap 176128 [ 228.433527][T16771] swapcached 12288 [ 228.437239][T16771] pgpgin 260200 [ 228.440812][T16771] pgpgout 260194 [ 228.444351][T16771] pgfault 196896 [ 228.447899][T16771] pgmajfault 66 [ 228.451388][T16771] inactive_anon 12288 [ 228.455392][T16771] active_anon 0 [ 228.458837][T16771] inactive_file 12288 [ 228.462882][T16771] active_file 0 [ 228.466383][T16771] unevictable 0 [ 228.469899][T16771] hierarchical_memory_limit 314572800 [ 228.475382][T16771] hierarchical_memsw_limit 9223372036854771712 [ 228.481531][T16771] total_cache 0 [ 228.485031][T16771] total_rss 4096 [ 228.488656][T16771] total_shmem 0 [ 228.492199][T16771] total_mapped_file 0 [ 228.496358][T16771] total_dirty 0 [ 228.499895][T16771] total_writeback 0 [ 228.503829][T16771] total_workingset_refault_anon 75 [ 228.508931][T16771] total_workingset_refault_file 1193 [ 228.514312][T16771] total_swap 176128 [ 228.518153][T16771] total_swapcached 12288 [ 228.522402][T16771] total_pgpgin 260200 [ 228.526451][T16771] total_pgpgout 260194 [ 228.530550][T16771] total_pgfault 196896 [ 228.534610][T16771] total_pgmajfault 66 [ 228.538631][T16771] total_inactive_anon 12288 [ 228.543417][T16771] total_active_anon 0 [ 228.547561][T16771] total_inactive_file 12288 [ 228.552086][T16771] total_active_file 0 [ 228.556067][T16771] total_unevictable 0 [ 228.560184][T16771] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3980,pid=16770,uid=0 [ 228.574971][T16771] Memory cgroup out of memory: Killed process 16770 (syz.0.3980) total-vm:94000kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 228.601836][ T8297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.686483][T16804] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.893413][ T29] audit: type=1400 audit(1770445890.643:4505): avc: denied { setopt } for pid=16813 comm="syz.0.3996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 228.988326][T16836] msdos: Unknown parameter 'dot…' [ 228.993464][T16833] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 229.086438][T16851] af_packet: tpacket_rcv: packet too big, clamped from 32820 to 3952. macoff=96 [ 229.198145][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4012'. [ 229.241751][T16860] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.266951][T16860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 229.279552][T16860] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.298765][T16860] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.4013: lblock 3 mapped to illegal pblock 3 (length 3) [ 229.316573][T16854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.336291][T16860] EXT4-fs (loop1): Remounting filesystem read-only [ 229.353440][T16860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4013'. [ 229.399774][T16845] lo speed is unknown, defaulting to 1000 [ 229.497228][T16872] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4017'. [ 229.506662][T16874] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 229.518312][T16874] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 229.528469][T16874] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4018: Corrupt directory, running e2fsck is recommended [ 229.557900][T16874] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 229.567578][T16874] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.4018: corrupted in-inode xattr: invalid ea_ino [ 229.581004][ T29] audit: type=1400 audit(1770445891.289:4506): avc: denied { write } for pid=16878 comm="syz.8.4019" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 229.604541][ T29] audit: type=1400 audit(1770445891.289:4507): avc: denied { ioctl } for pid=16878 comm="syz.8.4019" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 229.629863][T16874] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4018: couldn't read orphan inode 15 (err -117) [ 229.802745][T16892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4025'. [ 229.805886][T16896] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 229.811872][T16892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4025'. [ 229.811889][T16892] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4025'. [ 229.832570][T16898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.872062][T16898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.906180][T16903] set_capacity_and_notify: 8 callbacks suppressed [ 229.906199][T16903] loop2: detected capacity change from 0 to 512 [ 229.927466][T16892] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16892 comm=syz.0.4025 [ 229.983541][T16901] loop6: detected capacity change from 0 to 8192 [ 230.038038][T16909] loop2: detected capacity change from 0 to 512 [ 230.046087][T16909] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.133231][T16914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4032'. [ 230.180554][T16911] ================================================================== [ 230.188681][T16911] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 230.195810][T16911] [ 230.198131][T16911] read-write to 0xffff888107f34b50 of 8 bytes by task 16901 on cpu 0: [ 230.206359][T16911] xas_set_mark+0x82/0x140 [ 230.210774][T16911] __folio_start_writeback+0x17b/0x370 [ 230.216224][T16911] mpage_writepages+0xd5e/0x1310 [ 230.221173][T16911] fat_writepages+0x24/0x30 [ 230.225777][T16911] do_writepages+0x1c6/0x310 [ 230.230422][T16911] file_write_and_wait_range+0x178/0x2f0 [ 230.236138][T16911] __generic_file_fsync+0x46/0x160 [ 230.241372][T16911] fat_file_fsync+0x49/0x100 [ 230.245972][T16911] vfs_fsync_range+0x10d/0x130 [ 230.250729][T16911] generic_file_write_iter+0x1ba/0x310 [ 230.256197][T16911] vfs_write+0x5a6/0x9f0 [ 230.260546][T16911] ksys_write+0xdc/0x1a0 [ 230.264805][T16911] __x64_sys_write+0x40/0x50 [ 230.269395][T16911] x64_sys_call+0x2847/0x3000 [ 230.274075][T16911] do_syscall_64+0xc0/0x2a0 [ 230.278581][T16911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.284471][T16911] [ 230.286785][T16911] read to 0xffff888107f34b50 of 8 bytes by task 16911 on cpu 1: [ 230.294411][T16911] xas_find_marked+0x213/0x620 [ 230.299230][T16911] filemap_get_folios_tag+0xfa/0x510 [ 230.304514][T16911] filemap_write_and_wait_range+0x1f5/0x370 [ 230.310422][T16911] filemap_invalidate_pages+0xd3/0x1e0 [ 230.315887][T16911] generic_file_direct_write+0x9d/0x240 [ 230.321448][T16911] __generic_file_write_iter+0xab/0x120 [ 230.326996][T16911] generic_file_write_iter+0x8d/0x310 [ 230.332381][T16911] aio_write+0x2fe/0x430 [ 230.336621][T16911] io_submit_one+0xbc1/0x1350 [ 230.341299][T16911] __se_sys_io_submit+0xfb/0x280 [ 230.346233][T16911] __x64_sys_io_submit+0x43/0x50 [ 230.351166][T16911] x64_sys_call+0x2e40/0x3000 [ 230.355842][T16911] do_syscall_64+0xc0/0x2a0 [ 230.360440][T16911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.366348][T16911] [ 230.368659][T16911] value changed: 0x0000000000000fff -> 0x0000000000007fff [ 230.375751][T16911] [ 230.378061][T16911] Reported by Kernel Concurrency Sanitizer on: [ 230.384201][T16911] CPU: 1 UID: 0 PID: 16911 Comm: syz.6.4027 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 230.395655][T16911] Tainted: [W]=WARN [ 230.399472][T16911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.409518][T16911] ==================================================================