last executing test programs: 4m47.453591387s ago: executing program 32 (id=523): syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@routing={0x2f, 0x0, 0x0, 0x5}], "13d86558da0a7f6b"}}}}}}}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@loopback, @local, 0x0}, &(0x7f0000000300)=0xc) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001000)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001040)={{0x1, 0x1, 0x18, r0, {0x1ff, 0x3}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xf, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x7, 0x8, 0xa, 0x20, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000200)=""/151, 0x41100, 0xd, '\x00', r1, @fallback=0x23, r2, 0x8, &(0x7f0000000380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x2, 0x5, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001080)=[r3, r4], &(0x7f00000010c0)=[{0x3, 0x3, 0x0, 0x2}, {0x3, 0x1, 0x1, 0x2}], 0x10, 0x3}, 0x94) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r5 = getpgrp(0x0) capget(&(0x7f0000000040)={0x19980330, r5}, &(0x7f0000000080)={0xc7, 0x7, 0xf, 0x9, 0x7f, 0xa2c8}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4m42.019010234s ago: executing program 0 (id=797): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 4m41.961863157s ago: executing program 0 (id=798): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x264, 0x7}, 0x3, 0x8, 0xf09}}, @TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x2, 0xc, 0xfff, 0xfffffffe, 0x4, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x403, 0x255, 0x6, 0x9, 0xd81, 0x8, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff309, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3c, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0xe, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x0, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x4000000, 0x5, 0x800, 0x4, 0x6, 0x8, 0x6cdf139d, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9484, 0x80, 0x5, 0x80000000, 0xdb, 0x40, 0x80, 0xffbf7ffc, 0x0, 0x8, 0x7, 0x1, 0x2, 0x8008, 0xffffffff, 0x9, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x81, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x3f, 0x7, 0x4, 0x7, 0xff, 0x400, 0x6, 0x7fffffff, 0xfffffff7, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0xfffffff5, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x0, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0x3, 0x0, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x6, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x8001, 0x9, 0x401, 0x2, 0x1ff, 0x8, 0x157, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x20000005, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x74, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x3, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x20000040) mmap$xdp(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0xb, 0x10, r0, 0x180000000) 4m41.840979984s ago: executing program 0 (id=800): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x1008041, &(0x7f0000000000)=ANY=[], 0x0, 0x2dc, &(0x7f0000000640)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="001c86dd070010000000400000006022ec97000600000000000000000000000000aaff02000000000000000000000000000000000000d16aae6e639ccb971f57a11b6cd14ddae78ffac500c762c5d95e8cd1c15b551314310923e193a6d9b283c7024d78279c1236b4880637f852cc72e135f7f39123c6573186245f35c979cfaca79c81948a723ae55544822b1e83c54c9c45e17622afdf7bf875704f2ee73f60b864e37b01e05067005fdd6e85d08f9c0c94edd410e5f866e29d13fa2a9650810fa0d1f435c526574b4faddd3c44b28a851e4089f6a203adc3fc21d737e86cd71b45d546eef9fd1cad9e0eaaece81e6ceaa12521e39000"/258], 0xffe) 4m41.542721832s ago: executing program 0 (id=805): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES8=r0, @ANYRES32=r1, @ANYRES64=0x0, @ANYRES32=r1, @ANYRESOCT, @ANYRES32, @ANYRESHEX=r1, @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x44090}, 0x4040) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "0aa4ef40632818b4", "a4af99b36f2afe4cdea2a1ef2c530fe6", "4f4f75db"}, 0x28) 4m41.485547285s ago: executing program 0 (id=807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800034000000003240002000c0002800500010a0000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) 4m41.356559403s ago: executing program 0 (id=808): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) (async) listen(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x119) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x119) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) socket$packet(0x11, 0x2, 0x300) listen(r1, 0x204) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000280)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00094080020efffeffe809020000ff0084f03a09000000fffffffffffffb02eb8dffe7ee0000000000000000020000d16be8935116be7055f98aa8d36dfd0d071928acac560d3e2a00deb21977c5b853be5a3e8c1fcad57d5cb6723fdcfce4c671dd9731d700000000", 0x1d}], 0x1000000000000366) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030017000000000002000000ac1414000000000000000000030006000000", @ANYRES16=0x0], 0x50}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030017000000000002000000ac1414000000000000000000030006000000", @ANYRES16=0x0], 0x50}}, 0x0) 4m26.31030003s ago: executing program 33 (id=808): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) (async) listen(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x119) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x119) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) socket$packet(0x11, 0x2, 0x300) listen(r1, 0x204) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000280)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00094080020efffeffe809020000ff0084f03a09000000fffffffffffffb02eb8dffe7ee0000000000000000020000d16be8935116be7055f98aa8d36dfd0d071928acac560d3e2a00deb21977c5b853be5a3e8c1fcad57d5cb6723fdcfce4c671dd9731d700000000", 0x1d}], 0x1000000000000366) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030017000000000002000000ac1414000000000000000000030006000000", @ANYRES16=0x0], 0x50}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030017000000000002000000ac1414000000000000000000030006000000", @ANYRES16=0x0], 0x50}}, 0x0) 2m36.405477994s ago: executing program 3 (id=2472): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e00130010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 2m36.262818832s ago: executing program 3 (id=2473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000001e40)={0x2, 0x80, 0x6, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_io_uring_setup(0x5c72, &(0x7f0000000080)={0x0, 0xffffffff, 0x13580, 0xfffffffd, 0x400}, &(0x7f0000000100), &(0x7f0000000240)) r2 = io_uring_setup(0x6bfb, &(0x7f0000000480)={0x0, 0x2812, 0x2, 0xdffffcff, 0x185}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) close_range(r2, r2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0x20000000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) 2m35.361171385s ago: executing program 3 (id=2490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x0, 0x4, 0x100000000000003, 0x3}) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)={0x17c04, 0xffffffffffffffff, 0x7, 0x100000002, 0x7, 0xfff}) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000081400080000000000000000000000000000000000050013000b0000000500140007000000"], 0x38}}, 0x0) 2m34.882985223s ago: executing program 3 (id=2494): r0 = syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async, rerun: 64) ptrace$setregs(0x11, r1, 0x5, &(0x7f0000000480)) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x1041}, 0x10) (async, rerun: 64) r5 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) (async, rerun: 32) r6 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) (async) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008840}, 0x2004c886) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r2], 0x1c}}, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x40) 2m34.622696858s ago: executing program 3 (id=2501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000002400000a00fffe0900020073797a32000000000900010073797a31000000003800048034000180090001007866726d000000002400028005000300000000000800014000000000080002400000000608000440000000be"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2m34.314930006s ago: executing program 3 (id=2506): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xc}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) unshare(0x2000400) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000080)="d3", 0x1}, {&(0x7f0000000540)="d7010268549791d49dcba47249e48961c6940035", 0x14}, {&(0x7f00000005c0)="2a843d924fc98e19bdc5d0a1b4195c7ed39128e1f5ea882c89bc7437ab9f796912003fc04abd76795c8c6ea08536ad6eca2b62896c5feea5d7eb9d3f61dc7da4b7c8b357a5b13a70506a172c77b4036df14f969d8106940b5727a468930cdb962b46b40abed9f978ee7a7b0fed0f3707160415ed1338183df395fd7d03ecbe7e8a81ffc61cc6582fdcee131352355df922260568185ccc0e42d62fa1eb77004bb57c51f5d6b6944931e6fee5310a30f77e8198373593d3b58996f4188669ad295656415d380363046196ede6a273e3ffe6bd80701a7c805e58d75bf199cdf3bfe8edb1acfce07a005e9ab262e458b9dd2dbf0b4e3278a46866c19c828e4254ebb1e76b2d6776da1565bb9b7138cd96d21484048a1fc43ea3bba5a640eaf9961916567e52eefd3cfc962f2841aea375656305114e5e2ce61a8621f42ab63e2497ac77550658a4a23dddd5d1fdbd58c69d9f5925d86c7db23cd8a401a9011580a8e03b341fff489b9441c36cef94c65f0d693e367ba7e90cea60d792bab92418578a49df4312de0ea8a37682178e18a5f7b6199cd485030998ce102f19c4990205d812a2a29d0de530ffae8db0d85e319a56ad703fa3f128e0fd968fe5faf41926aaec1f7951b2105150d3dbaf731d2c840433e534a1672cde28f7edd273f72cb7fa635993511403a66394647d9215dc50e7377aa913f550cd2b2668fd9052753c118cda7c72b6fd42401a244508fcb238c3ba5d5e065d3b65d3a95aac667bf2dc79b0665c52b46220f15fa45be82dba0db815b849c2795a624009c1ffc8803d1e9355440ccc4ecca29c348296777cc0ed1eaa9a1aab3fe8a08e0faa36bf5018f022ddeb74a1fb977002a946b6c25d935339081d290a88742450b5fa178f0e2f710ea8fe80381d626876ce7717f06792e382edd34ba30084e59340b6e4f40cbd5cbf6a714185c0745902e63ca7cec806f4556eaf24a931193c57a41720bcb3f55de00bb82e189c69175a78a57cf431fb2f2ac0da33b16af003e74d51df9c329cb70604f902fafa9708cd3c0b3f07d0f14fddffcc72ef1e22457c923550f4926191cd392c5060a83f82b42a0c9908c04af4bdaac30f10466c86d93433abaeb525088e051795626a629dfbc190fd1f4a7bd89afa2080d9d313baf84d503d28dceca3fa6ac2b42a3d79b8fcf26ba557815d6bde9ea3768571b7336439b611d9cc6771d48ad8019185544e5c2a81e30355232d7526670a39df9e5215a9ea30af5976a9aab85b0b2747840b5379f7a9bb047493771ff65cad1e38e98a6bf92d5614fe3f5ad7f32bf0453e61bb643e733cbaaa5cb5e542ddbf38fd4dfe048f3dbc4e70e730898eaf6c44c65b00c393ace71cc15e9c16865f182587caeeed335ea00d8986780a03ec12c012937a6965e0f7412952d0a2d87f0504926619fd55cfd90ad6c9617fa16a80d54e22f40a420dae262cb83f3d78cf4188883d18430f068e21e7f5e1dd2315c22098bc5ab4e4a6c8da3a2a3c7439b9fd8e488a94e89404f44c01753cf48d7295dc79764f5ccae253052cd4da7513d6aa7a0aa5df64f0fcf8cdbe6ff7b81b152d82b3f74d897ebe0d8c042a2b32e9de5fcdea28f8b6d6e75ef6329ddedb83babf9b0090b1ba04d25d6a672fbf62011e8481a9c5141578bf29f82307e8bb2cc3ab7ac1d51e0d0271aa17021de9f5f19f6bd9e5cd71669bfdc355aacc39a15ae4d856a8fff645ba529a4fa2", 0x4cf}], 0x3}}], 0x1, 0x801) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000020"], 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x17, &(0x7f0000000100), 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x20008040}, 0x200000c0) 2m34.314772886s ago: executing program 34 (id=2506): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xc}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) unshare(0x2000400) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000080)="d3", 0x1}, {&(0x7f0000000540)="d7010268549791d49dcba47249e48961c6940035", 0x14}, {&(0x7f00000005c0)="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", 0x4cf}], 0x3}}], 0x1, 0x801) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000020"], 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x17, &(0x7f0000000100), 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x20008040}, 0x200000c0) 2m13.528466129s ago: executing program 6 (id=2787): epoll_create(0x3) socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) pwrite64(r1, 0x0, 0x0, 0x6) write$selinux_create(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) write$nci(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="500403"], 0x7) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000300)="1163469003d4166957cc7c2fe84c5849a3a94fd56840876c9b109421381fedea5fa252d62e9c7418336a7997447107c343f1df409a1e130986ed409cc71d38459ca274094820cce499", 0x49}], 0x1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 2m13.101882704s ago: executing program 6 (id=2791): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x1, 0xfffffffffffffd52, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800, 0x209}, 0x89c0, 0x32, 0x43a1bd76, 0x7, 0x1, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x10, r0, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r3, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x9}, 0x3}, 0x1c) 2m12.178792737s ago: executing program 6 (id=2801): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000780)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sendmsg$key(0xffffffffffffffff, 0x0, 0x80) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=r5], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in=@local, 0x0, 0x0, 0xffff, 0xfffc, 0x2, 0x0, 0x0, 0xd0}, {0x0, 0x28c, 0x4, 0x34, 0x0, 0x0, 0x2}, {0x7, 0x80000000}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x2000000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x2, 0x0, 0xb5, 0x0, 0x8000000}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 2m11.835813557s ago: executing program 6 (id=2802): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000ec0)="$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") gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={&(0x7f00000002c0)="38646bb4a2776ba588811e14151e3d9beeb49ca9f7c8f31c840fc2953500dd257af227c67e86312eae4a6e412de44f286a72aae543a9ff57aac7c78cb37b7decd97c85701f28023f90ac957252e695e9af133d635de00f", &(0x7f0000000680)="ecbd56d4be869b37d6f7bba4ce75a75e4303d37615c909de73ab48fe1fc9a2eb"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="139f38604d6266e2eaa81022eb09dbf2f4966cadb7347f679b3b55d06c0d73b9024c0e340d0000000000000079c32f405a124a") r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000400)={&(0x7f0000000100)=@can, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="f8e9d932d8f9fb4bcd4986f8a9c7ba23e5984388d392f666a7bd65dd24375fcdbcc567f0c06b8ab87a7abb04776cb48cc5517040", 0x34}, {&(0x7f0000000180)="43aac638e7672b55b6c56d5b6dff7c276243d0b8730552092e890322b61bc2fc972363087a6e83a960ed1be5e1f77e76f3dffc05795a18a8a8e696c3d36334e264a8915d5c72afe50e5af5842274ff50", 0x50}, {&(0x7f0000000340)="f3c0eae78bd453efa46e36bc0ef31f4686000a43745d689fb0072ca26390d3978542554a643922dad176fcfd67298f1c0e7ed5e4f931dd609016450f54387a47e74ac7ca93a5418df59191f9e6b6034eec0c7fd9ccb2bc76437f14d2767aaab2d377e88692da00f0adb7f57015d54276bc89f834aad830ea7ed9505d58dc97f313a7a632e1d6c590c1fb031aec5befd13780e66a50d4857e242ae1aa6ceac47a92593eefb1fbd2f71212", 0xaa}], 0x3, &(0x7f0000000280)}, 0x8005) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x3, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r3}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) kcmp(r7, r7, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r8, 0x80049370, &(0x7f0000000640)) execve(0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0xfffe, 0x1, 0x0, 0xffffaa0f, 0xfffffffc}, 0x1c) 2m9.559004821s ago: executing program 6 (id=2834): syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x39e}, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0500000003080000020f5800000000", @ANYRES64=0x0], 0x80}}, 0x0) 2m9.469929485s ago: executing program 6 (id=2837): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000bc0)={0xa, 0x4e21, 0x3ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000002900000032000000fe880000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="c14634"], 0x28}}], 0x1, 0x4000000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x4}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {r3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x7399, @empty, 0x2}}}, 0x118) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0xe84, r2, 'id0\x00'}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r4}, 0x18) getpeername$l2tp6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000480)=0x20) write$P9_RSETATTR(r4, &(0x7f0000000400)={0x7, 0x1b, 0x2}, 0x7) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000300)={0x7fff, 0x8, 0xfffffff8, 0x9, 0xe1d0, 0x4}) 2m9.407480329s ago: executing program 35 (id=2837): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000bc0)={0xa, 0x4e21, 0x3ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000002900000032000000fe880000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="c14634"], 0x28}}], 0x1, 0x4000000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x4}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {r3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x7399, @empty, 0x2}}}, 0x118) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0xe84, r2, 'id0\x00'}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r4}, 0x18) getpeername$l2tp6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000480)=0x20) write$P9_RSETATTR(r4, &(0x7f0000000400)={0x7, 0x1b, 0x2}, 0x7) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000300)={0x7fff, 0x8, 0xfffffff8, 0x9, 0xe1d0, 0x4}) 1m21.91459177s ago: executing program 1 (id=3783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800034000000004240002000c0002800500010a0000000014000280080001000003000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) 1m21.734540101s ago: executing program 1 (id=3787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x220, 0x4000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x40}}, 0x20000090) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x83) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3fa, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000300000003000000580001800d0001007564703a73797a3100000000440004"], 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x7c, r8, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfaf1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcd5b}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdc0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x800) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0x81ff) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x230) 1m21.660785795s ago: executing program 1 (id=3788): syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x23752, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x80, 0x2}, 0x0, 0x7, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0xfffffffe, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRESHEX=r2], 0x20) write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[], 0xe) add_key(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m21.255870778s ago: executing program 2 (id=3795): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) socket$packet(0x11, 0x2, 0x300) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e20, 0x6, @remote, 0xffffffff}}}, 0x38) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x4848ff7d, @empty, 0x240000}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) socketpair(0x2a, 0x2, 0x3, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a, 0xff7f0000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) fallocate(r3, 0x0, 0x0, 0x2000402) lseek(r3, 0x0, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x1) getdents(r3, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) r7 = creat(&(0x7f0000000140)='./file0\x00', 0x80) recvmsg$inet_nvme(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f0000000700)=""/68, 0x44}, {0x0}, {&(0x7f00000003c0)=""/177, 0xb1}, {0x0}], 0x6}, 0x0) 1m20.649087883s ago: executing program 2 (id=3806): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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") 1m20.522491171s ago: executing program 1 (id=3810): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4409e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000000000000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0xe8, 0x340, 0xe8, 0xfeffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'team0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x4, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xd, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000008400000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}, 0x1, 0x0, 0x0, 0x4c004}, 0x0) 1m20.177873191s ago: executing program 2 (id=3815): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") creat(&(0x7f00000000c0)='./bus\x00', 0x182) dup3(r0, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0xd35}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/158) 1m20.110719986s ago: executing program 1 (id=3817): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_config_ext={0x2, 0x3}, 0x0, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x70}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2) socket(0x200000000000011, 0x2, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x40000) geteuid() syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r2 = open(&(0x7f0000000100)='./file1\x00', 0x44000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1013}], 0x2, 0x0, 0x0, 0xef) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/247, 0x18, 0xf7, 0x1}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0xffc3, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x20, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="18000000690001"], 0x18}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00000003c0)='./file1\x00', 0x1, 0x10) bind$x25(r0, &(0x7f0000000380), 0x12) ioperm(0x2, 0x7ff, 0x8) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x9, 0x6, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01000008000a00459c06f372dfed06f3d013", @ANYRES32=r9, @ANYBLOB='\b\x00\t\x00', @ANYRES8=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040004) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="28010004", @ANYRES16=r7, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x48080}, 0x4) 1m19.894480038s ago: executing program 2 (id=3822): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r1 = open(0x0, 0x2000, 0x0) fcntl$notify(r1, 0x402, 0x80000018) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 46.992255234s ago: executing program 2 (id=3824): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x6a, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') r1 = perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x7, 0xfb, 0x9, 0x1, 0x0, 0x100000001, 0xcf615e38e24aac83, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0x10880, 0x8, 0x1, 0x4, 0x3, 0xa86, 0x6, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x4) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000100000001d44000000000000db0a00fee10000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x10f, &(0x7f00000005c0)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0x67f, 0x64, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) eventfd(0x5000000) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), 0x4) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0xb3) 46.986690124s ago: executing program 1 (id=3833): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f00000003c0), &(0x7f0000000280)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4ed, 0x8000000000000001, &(0x7f0000000140)) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6}]}) pwritev(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)='&-', 0x2}], 0x1, 0x0, 0x10001) r7 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r7, 0x47f6, 0x810001, 0x4b, 0x0, 0x0) 46.986445104s ago: executing program 2 (id=3834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8010000120a010200000000000000000200fffe0900020073797a310000000008000440000000000900010073797a30000000000800034000000008"], 0x220}, 0x1, 0x0, 0x0, 0x890}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$inet_opts(r1, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000010) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x3ffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e7", 0x42}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="f4000900062b2c25fe8000000000e40ddc8b850f238466cc00007a00b02dc56e911b51818462b400", 0x28}], 0x1}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="03", 0x1}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_uring_setup(0xad5, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x1, 0xe1}) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r5, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r5, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) 31.92428942s ago: executing program 36 (id=3833): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f00000003c0), &(0x7f0000000280)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4ed, 0x8000000000000001, &(0x7f0000000140)) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6}]}) pwritev(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)='&-', 0x2}], 0x1, 0x0, 0x10001) r7 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r7, 0x47f6, 0x810001, 0x4b, 0x0, 0x0) 31.882771983s ago: executing program 37 (id=3834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8010000120a010200000000000000000200fffe0900020073797a310000000008000440000000000900010073797a30000000000800034000000008"], 0x220}, 0x1, 0x0, 0x0, 0x890}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$inet_opts(r1, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000010) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x3ffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e7", 0x42}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="f4000900062b2c25fe8000000000e40ddc8b850f238466cc00007a00b02dc56e911b51818462b400", 0x28}], 0x1}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="03", 0x1}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_uring_setup(0xad5, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x1, 0xe1}) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r5, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r5, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) 1.761049566s ago: executing program 4 (id=4353): r0 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x88, 0x32, 0x43a1bd76, 0x3, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x7, 0x0, 0xfffffffc}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xc6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r2]}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) r5 = socket$caif_stream(0x25, 0x1, 0x2) unshare(0x22020400) getsockopt$sock_cred(r5, 0x1, 0x4c, 0x0, &(0x7f0000cab000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r6, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1000000000000048) signalfd4(r6, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) 1.662846821s ago: executing program 7 (id=4356): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"/627], 0x1, 0x17e, &(0x7f0000000c40)="$eJzs3M1qE1EUB/AzZlpTXdi1uBhw4yqoT6CUCuKAomShK4XqppWC3Yyu8gw+gS8oSFfdXZkZTNrSoEHHycfvt8kh/9xw7mYONx/z9s7Hw4Pjkw/HL05jmGWRP4oizrLYjWsxiNYkAIB1cpZS/EgppTwivkVKqe+OAICuTef/9UnsLDb/b3TaGADQmb+Y/wDAijL/AWDzvHr95tnjstx/WRTDiO+TalyNm8e9Nn/ytNy/XzR2Z6tOq2o8mOYP2ry4mG81XxDU+cMmPf8rwjrfjnt327xO956Xl9bfjIPOdw8AAACbYVRMXXm+H43m5W117vOB+vx+a5bncTv/r1sBAP7Qyecvh++Ojt5/WvHi170KFly+M4yI3pv/h8XX5WijyyJbjjbWrNiKiAvP9HxhAjo3uwz03QkAAAAAAAAAAAAAADDPAv8QGvz2xdtXv2HfewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDLfgYAAP//A41IDg==") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x1, [0x2, 0x2000005f, 0x0, 0x9, 0x10, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=0x0]}, 0x79) syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000600)) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xf8, 0x0, &(0x7f00000000c0)) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, 0x0) 1.609828545s ago: executing program 7 (id=4359): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {@noinit_itable}, {@nodelalloc}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@auto_da_alloc}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0xffff, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x40, 0x40, 0x0, 0xfffffffe}, {0x6, 0x0, 0x40, 0x1}]}, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000016c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd4, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x35}, 0x94) sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket(0x10, 0x800, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001400010004000000000000002d"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000180)={0x17c04, r0, 0x5, 0x934, 0x800004}) 1.502686601s ago: executing program 9 (id=4362): setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) clock_adjtime(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a0000000500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b1a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff5843f6739a8ec5ff33791394a5c075018b5d92bbd7d9874589f3561fbdfc44653bb6c56b522a3413"], 0x3, 0x37c, &(0x7f0000000ec0)="$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") 1.499154471s ago: executing program 8 (id=4363): r0 = semget$private(0x0, 0x6, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) (async) r3 = epoll_create1(0x0) unshare(0x22020600) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) socket$netlink(0x10, 0x3, 0xc) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x11, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x18, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) semtimedop(r0, &(0x7f0000000200)=[{0x2, 0x0, 0x800}, {0x3, 0x9, 0x1800}], 0x2, &(0x7f0000000300)={0x77359400}) 1.490777862s ago: executing program 5 (id=4364): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xa17, 0x10, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x9, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x20, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000000a00)={0xf, {"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", 0x1000}}, 0x1006) 1.488568562s ago: executing program 9 (id=4365): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r1 = open(0x0, 0x2000, 0x0) fcntl$notify(r1, 0x402, 0x80000018) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.366899549s ago: executing program 7 (id=4366): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r1 = open(0x0, 0x2000, 0x0) fcntl$notify(r1, 0x402, 0x80000018) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.328635912s ago: executing program 5 (id=4367): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x88219, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x8, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000ac0)={0x0, 0xfffffffd, 0x100, 0xfffffffe, 0xca}, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) 1.284632344s ago: executing program 8 (id=4368): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f00000003c0), &(0x7f0000000280)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4ed, 0x8000000000000001, &(0x7f0000000140)) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6}]}) pwritev(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)='&-', 0x2}], 0x1, 0x0, 0x10001) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r6, 0x47f6, 0x810001, 0x4b, 0x0, 0x0) 1.218988238s ago: executing program 5 (id=4369): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440100001000130722bd70000000efffffff0000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fea033688e345774a6000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000500ac000000000000004c001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000008002900"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.218712728s ago: executing program 5 (id=4370): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) socket$packet(0x11, 0x2, 0x300) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e20, 0x6, @remote, 0xffffffff}}}, 0x38) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x4848ff7d, @empty, 0x240000}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) socketpair(0x2a, 0x2, 0x3, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x25, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) fallocate(r3, 0x0, 0x0, 0x2000402) lseek(r3, 0x0, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x1) getdents(r3, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) r7 = creat(&(0x7f0000000140)='./file0\x00', 0x80) recvmsg$inet_nvme(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f0000000700)=""/68, 0x44}, {0x0}, {&(0x7f00000003c0)=""/177, 0xb1}, {0x0}], 0x6}, 0x0) 1.00848921s ago: executing program 8 (id=4371): ptrace$getregset(0x4205, 0x0, 0x200, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0xb9ddd000) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x1a}, 0x20) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 967.989262ms ago: executing program 5 (id=4372): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x80010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) r4 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r9 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r9, &(0x7f0000000240)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffff801, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x43c, 0x2}, 0x80, 0x0}, 0x200c60c0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="400002803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b"], 0x5c}}, 0x110) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x14c1e, &(0x7f0000000400)={[{@nomblk_io_submit}, {@nogrpid}, {@bh}]}, 0x1, 0x526, &(0x7f0000000ac0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) r12 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4b, 0x0, @fd_index=0x9, 0x100, 0x0, 0xbab, 0x4, 0x0, {0x0, r14}}) io_uring_enter(r4, 0x15f0, 0x892d9, 0x69, 0x0, 0x0) close(0x3) epoll_create1(0x0) close(r1) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000000c0)={{0x5, 0x6}, {0xfb, 0xff}, 0x19, 0x1, 0xb}) 854.65713ms ago: executing program 8 (id=4373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000080000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x2e, &(0x7f0000002080)=""/4102}, 0x94) 824.068291ms ago: executing program 4 (id=4374): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r1, r1, 0x2f}, 0x20) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup=r1, r2, 0x2f, 0x10, 0x4, @void, @value=r1}, 0x20) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='$*\x00', 0x0, r0) 774.898264ms ago: executing program 4 (id=4375): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 722.084747ms ago: executing program 8 (id=4376): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (fail_nth: 1) 721.471698ms ago: executing program 4 (id=4377): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000040000000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000e0d00000000000012800b00010062726964676500001800028008fab0002e000000000001000000"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rfcomm\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x8, 0xfef8}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x1, 0x7, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf6, 0x2d}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4048050) 519.733499ms ago: executing program 9 (id=4378): socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfc6]}, &(0x7f0000000000), 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000003580)=@raw={'raw\x00', 0x41, 0x3, 0xa18, 0x8a8, 0x19, 0x0, 0x8a8, 0x0, 0x980, 0x1f0, 0x1f0, 0x980, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0xffffffff, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x888, 0x8a8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}, {0x1}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x3ff}, {0x3, 0x3}, {0x3, 0x1}, {0x995, 0x2}, {0x5, 0x1}, {0x8896}, {0x6, 0x3}, {0x8, 0x1}, {0x101, 0x2}, {0x6}, {0x5, 0x1}], [{0xff, 0x5}, {0x2, 0x881d}, {0x0, 0xb}, {0x3, 0x7f}, {0x7ff, 0x8}, {0x6, 0x6}, {0x9, 0x7}, {0x9, 0x4}, {0x5, 0x2}, {0x1d1e, 0x9}, {0x0, 0x7}], 0x5, 0x1}, {[{0x1}, {0x7fffffff, 0x2}, {0x4, 0x3}, {}, {0x383, 0x1}, {0xebea, 0x2}, {0x3}, {0x800, 0x2}, {0x7, 0x2}, {0x3, 0x3}, {0xfffffff7}], [{0x5, 0x9}, {0x1, 0x9}, {0x7, 0x4}, {0x3, 0x5}, {0x3, 0x8}, {0x6, 0x1000}, {0x9, 0x6f528900}, {0x6, 0x3}, {0x10, 0x3}, {0xfffffff8, 0x3}, {0x400, 0x80}], 0x1, 0x5}, {[{0x7, 0x2}, {0x9}, {0x5}, {0xffffffff, 0x1}, {0xd, 0x3}, {0x313, 0x1}, {0xfed}, {0x5, 0x3}, {0x80, 0x2}, {0x7fff, 0x2}, {0x1, 0x3}], [{0x3, 0x6a}, {0x400, 0xfff}, {0x100, 0x5d68}, {0x8dc, 0x5}, {0x800, 0x1}, {0x6, 0x3ff}, {0xa2, 0x200}, {0x9, 0x2}, {0x3, 0x6}, {0x2, 0x4}, {0x60, 0x78395991}], 0x0, 0x2}, {[{0x7, 0x3}, {0xffff, 0x2}, {0x4, 0x2}, {0x2, 0x2}, {0xffffff81, 0x2}, {0xfff}, {0x1, 0x2}, {0xddc4, 0x3}, {0x7fffffff}, {0x6, 0x1}, {0x6, 0x2}], [{0xd6f, 0x9}, {0x2, 0x5}, {0x100, 0xd12}, {0x0, 0x2}, {0x800, 0x1}, {0xfffffffe, 0x3}, {0xffffff9d, 0x10001}, {0x3ff, 0x9}, {0x6, 0xf2}, {0x8, 0x8}, {0xfff}], 0xb, 0xb}, {[{0x7, 0x3}, {0x1, 0x3}, {0xc756, 0x1}, {0x2, 0x1294a4f2d4f6b7e4}, {0x0, 0x1}, {0xb}, {0x537, 0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x6}, {0x4, 0x2}], [{0xffffffff, 0x9}, {0x4, 0x2}, {0x8, 0x9}, {0x1, 0x10001}, {0x2, 0x6}, {0x9}, {0x3}, {0x9, 0x1}, {0x6}, {0x5, 0x9}, {0x6, 0x1}], 0x5, 0x7}, {[{0x8, 0x7}, {0x400}, {0x5, 0x3}, {0x6}, {0x8, 0x3}, {0x7, 0x3}, {0x3ff}, {0x4, 0x1}, {0x9, 0x3}, {0x86c, 0x1}, {0x1, 0x1}], [{0xa, 0x17}, {0x9, 0x3}, {0xbc72, 0x5}, {0xe, 0x6}, {0x3ff, 0x401}, {0x10001, 0x10}, {0x0, 0x5}, {0x4, 0x6}, {0x7, 0x40}, {0x2}, {0x7, 0x8001}], 0xb, 0xa}, {[{0x8, 0x7}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x3}, {0x651, 0x3}, {0x3}, {0xbac, 0x1}, {0xffffffff, 0x3}], [{0xfffffff9, 0xdb}, {0x9b, 0x5}, {0x600000, 0x2}, {0x267, 0x3}, {0x6, 0xffffff0c}, {0x9, 0x6}, {0x3, 0x9}, {0x9, 0x8}, {0x8, 0x40}, {0x4, 0x6}, {0x4, 0x7}], 0x2, 0x1}, {[{0x2, 0x3}, {0x2, 0x2}, {0x6, 0x3}, {0x7f, 0x3}, {0x2, 0x2}, {0x1, 0x3}, {0x7, 0x3}, {0x3ff}, {0x763, 0x1}, {0xe1e5, 0x1}, {0xba, 0x3}], [{0xc, 0x8}, {0x0, 0x6}, {0x7fffffff, 0x8}, {0x8001, 0x7}, {0x39bd, 0x3}, {0xfffffffe, 0x5}, {0x7d53, 0x5}, {0x6, 0x3}, {0x1, 0x695e}, {0x4, 0x3}, {0xd1}], 0xa, 0x9}, {[{}, {0xac2}, {0x8001, 0x3}, {0x3, 0x2}, {0xe, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x7b}, {0x9, 0x1}, {0x1, 0x1}, {0x245, 0x3}], [{0x9, 0x7f}, {0x0, 0x6}, {0x2, 0x68}, {0x30000000, 0x2}, {0x1c0, 0xe5}, {0x9, 0x1}, {0x3, 0xfffffff7}, {0x0, 0x400}, {0x86f, 0x3b}, {0x80, 0x5}, {0x7, 0x40}], 0x4, 0x1}, {[{0x7ff}, {0x2, 0x3}, {0x9, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0xe9, 0x3}, {0x0, 0x3}, {0x3}], [{0x40, 0x1}, {0x3, 0x9}, {0x5ee500, 0x9}, {0x100, 0x8001}, {0x3}, {0xffff, 0x3}, {0x5, 0x3}, {0x68b, 0x3ff}, {0x8, 0x7fff}, {0x6, 0x8001}, {0xffffff7f, 0x9}], 0x2, 0x5}, {[{0x80000001, 0x1}, {0x3, 0x1}, {0x10, 0x1}, {0x3, 0x1}, {0x8, 0x3}, {0x1, 0x3}, {0x6, 0x2}, {0x2, 0x3}, {0xfffffffd, 0x2}, {0x4, 0x1}, {0xd8e, 0x3}], [{0x40000000, 0x7}, {0x5, 0x5e48670}, {0x7, 0x7f}, {0x6, 0x8}, {0xfffffff8, 0x3}, {0x0, 0x8}, {0x7e7a, 0xd09}, {0x7727, 0x8}, {0x3, 0xa}, {0x1, 0x8}, {0x6, 0x5}], 0x9}], 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0xff84}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x21, 0xffffffff, 0x3, '\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa78) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r2 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto(r3, 0x0, 0x0, 0x20008011, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2, 0xffffffffffffffff}, 0x4) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000180)=0x1) setsockopt$inet_int(r3, 0x0, 0x7, 0x0, 0x28) fcntl$notify(r2, 0x402, 0x80000018) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000010027bd7000fcdbdf250a002040000000070000000014000200fe880000200000000000000000000401080018004e"], 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = gettid() r8 = accept4$nfc_llcp(r2, &(0x7f0000000340)={0x27, 0x0}, &(0x7f00000003c0)=0x60, 0x800) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYRES16=r9, @ANYRES32=r8, @ANYBLOB="08007f00", @ANYRES8=r3, @ANYBLOB="14000f0000000000000000000000ffffe0000002"], 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) fcntl$notify(r5, 0x402, 0x8000003d) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000020c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="240000f8efffff00", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 490.671331ms ago: executing program 7 (id=4379): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) fcntl$getflags(r0, 0x408) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0xf00) 438.671794ms ago: executing program 8 (id=4380): r0 = syz_io_uring_setup(0x5c72, &(0x7f0000000080)={0x0, 0xffffffff, 0x13580, 0xfffffffd, 0x400}, &(0x7f0000000100), &(0x7f0000000240)) r1 = io_uring_setup(0x6bfb, &(0x7f0000000480)={0x0, 0x2812, 0x2, 0x0, 0x185}) r2 = syz_open_procfs(0x0, &(0x7f0000019140)='net/ip_mr_cache\x00') read$eventfd(r2, &(0x7f0000000000), 0x8) ioctl$TIOCEXCL(r2, 0x540c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) close_range(r1, r1, 0x0) r3 = perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90) r4 = epoll_create1(0x0) r5 = socket(0x10, 0x3, 0x3) sendto$isdn(r5, &(0x7f0000000500)={0x5, 0x3}, 0x8, 0x0, &(0x7f00000001c0)={0x22, 0x81, 0xba, 0x8, 0xac}, 0x6) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000003c00)=[{0x0}, {&(0x7f0000003bc0)=""/27, 0x1b}], 0x2}, 0x10000}], 0x1, 0x10002, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000180)={0x0, 0x2, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000140)={0x20000000}) socketpair$unix(0x1, 0x2, 0x0, 0x0) 437.384934ms ago: executing program 9 (id=4381): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000020000280000c0012", 0x2e}], 0x1}, 0x0) 437.244385ms ago: executing program 7 (id=4382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c0000000000001c001280090001007866726d0000fffe0c000280080002000100"], 0x50}}, 0x0) 383.977627ms ago: executing program 5 (id=4383): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) socket(0x80000000000000a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0xff, 0x0, 0x0, 0x0, 0x7, 0xa558, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fffffffffffffff, 0x1}, 0x0, 0x10000, 0x201, 0x3, 0x1, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xc, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x58, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x6, 0x1f, {0xf, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a88088bea18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x14, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000200)='./file1\x00', 0xc20004c4) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00028006"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r5}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r5, 0x12) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r9, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0xfffffffffffffcc0}, 0x1, 0x0, 0x0, 0x20000889}, 0x20000000) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4) 357.577959ms ago: executing program 4 (id=4384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x10000000, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d0) 315.751972ms ago: executing program 9 (id=4385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x116c0000}]}, 0x38}}, 0x0) (fail_nth: 8) 258.725885ms ago: executing program 4 (id=4386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") 242.810846ms ago: executing program 7 (id=4387): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000040), 0x75, r0}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000040), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) link(&(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00') r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000080)={'vcan0\x00'}) 0s ago: executing program 9 (id=4388): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r1 = open(0x0, 0x2000, 0x0) fcntl$notify(r1, 0x402, 0x80000018) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): k+0x4e/0x70 [ 336.633134][T16968] ? swap_cache_get_folio+0x26f/0x280 [ 336.633307][T16968] do_swap_page+0x59b/0x2a50 [ 336.633353][T16968] ? __rcu_read_lock+0x36/0x50 [ 336.633392][T16968] ? __pfx_default_wake_function+0x10/0x10 [ 336.633444][T16968] handle_mm_fault+0xb40/0x3030 [ 336.633493][T16968] ? vma_start_read+0x1c7/0x2c0 [ 336.633578][T16968] do_user_addr_fault+0x62f/0x1050 [ 336.633615][T16968] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 336.633647][T16968] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 336.633698][T16968] ? irqentry_exit+0x3c/0x510 [ 336.633732][T16968] exc_page_fault+0x62/0xa0 [ 336.633765][T16968] asm_exc_page_fault+0x26/0x30 [ 336.633794][T16968] RIP: 0033:0x7f86d77860b8 [ 336.633836][T16968] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 336.633862][T16968] RSP: 002b:00007ffd841188b0 EFLAGS: 00010246 [ 336.633885][T16968] RAX: 0000000000000000 RBX: 00005555756e8500 RCX: 00007f86d778b78e [ 336.633914][T16968] RDX: 00007ffd84118900 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.633932][T16968] RBP: 00007f86d7a47da0 R08: 0000000000000000 R09: 0000000000000000 [ 336.634015][T16968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000052328 [ 336.634088][T16968] R13: 00007f86d7a4609c R14: 0000000000052ff8 R15: 00007f86d7a46090 [ 336.634116][T16968] [ 336.869984][T16968] memory: usage 307200kB, limit 307200kB, failcnt 444 [ 336.876863][T16968] memory+swap: usage 307520kB, limit 9007199254740988kB, failcnt 0 [ 336.884814][T16968] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 336.892125][T16968] Memory cgroup stats for /syz5: [ 336.892590][T16968] cache 4096 [ 336.900814][T16968] rss 0 [ 336.903612][T16968] shmem 0 [ 336.906606][T16968] mapped_file 0 [ 336.910156][T16968] dirty 0 [ 336.913121][T16968] writeback 0 [ 336.916512][T16968] workingset_refault_anon 80 [ 336.921120][T16968] workingset_refault_file 1 [ 336.925694][T16968] swap 327680 [ 336.929072][T16968] swapcached 4096 [ 336.932721][T16968] pgpgin 279393 [ 336.936242][T16968] pgpgout 279389 [ 336.939820][T16968] pgfault 224521 [ 336.943521][T16968] pgmajfault 44 [ 336.947096][T16968] inactive_anon 0 [ 336.950770][T16968] active_anon 4096 [ 336.954586][T16968] inactive_file 0 [ 336.958238][T16968] active_file 12288 [ 336.962164][T16968] unevictable 0 [ 336.965686][T16968] hierarchical_memory_limit 314572800 [ 336.971082][T16968] hierarchical_memsw_limit 9223372036854771712 [ 336.977536][T16968] total_cache 4096 [ 336.981282][T16968] total_rss 0 [ 336.984652][T16968] total_shmem 0 [ 336.988212][T16968] total_mapped_file 0 [ 336.992211][T16968] total_dirty 0 [ 336.995756][T16968] total_writeback 0 [ 336.999584][T16968] total_workingset_refault_anon 80 [ 337.004815][T16968] total_workingset_refault_file 1 [ 337.009853][T16968] total_swap 327680 [ 337.013731][T16968] total_swapcached 4096 [ 337.017947][T16968] total_pgpgin 279393 [ 337.021981][T16968] total_pgpgout 279389 [ 337.026110][T16968] total_pgfault 224521 [ 337.030211][T16968] total_pgmajfault 44 [ 337.034297][T16968] total_inactive_anon 0 [ 337.038541][T16968] total_active_anon 4096 [ 337.042813][T16968] total_inactive_file 0 [ 337.047115][T16968] total_active_file 12288 [ 337.051574][T16968] total_unevictable 0 [ 337.055647][T16968] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3924,pid=16968,uid=0 [ 337.070481][T16968] Memory cgroup out of memory: Killed process 16968 (syz.5.3924) total-vm:94132kB, anon-rss:1284kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 337.111294][T16840] udevd[16840]: symlink '../../loop8' '/dev/disk/by-diskseq/1417.tmp-b7:8' failed: Read-only file system [ 337.138965][T16840] udevd[16840]: symlink '../../loop8' '/dev/disk/by-diskseq/1417.tmp-b7:8' failed: Read-only file system [ 337.155740][T16840] udevd[16840]: symlink '../../loop8' '/dev/disk/by-diskseq/1420.tmp-b7:8' failed: Read-only file system [ 337.171026][T16969] syz.5.3924 (16969) used greatest stack depth: 6104 bytes left [ 337.196371][T16840] udevd[16840]: symlink '../../loop5' '/dev/disk/by-diskseq/1418.tmp-b7:5' failed: Read-only file system [ 337.219860][T16640] udevd[16640]: symlink '../../loop8' '/dev/disk/by-diskseq/1420.tmp-b7:8' failed: Read-only file system [ 337.235856][T16840] udevd[16840]: symlink '../../loop5' '/dev/disk/by-diskseq/1418.tmp-b7:5' failed: Read-only file system [ 337.249164][ T29] audit: type=1400 audit(1769695166.699:6172): avc: denied { bind } for pid=17011 comm="syz.5.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 337.281627][T16840] udevd[16840]: symlink '../../loop5' '/dev/disk/by-diskseq/1421.tmp-b7:5' failed: Read-only file system [ 337.293539][ T29] audit: type=1326 audit(1769695166.739:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 337.317277][ T29] audit: type=1326 audit(1769695166.739:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 337.340982][ T29] audit: type=1326 audit(1769695166.739:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 337.364608][ T29] audit: type=1326 audit(1769695166.739:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 337.387498][T16840] udevd[16840]: symlink '../../loop7' '/dev/disk/by-diskseq/1419.tmp-b7:7' failed: Read-only file system [ 337.388236][ T29] audit: type=1326 audit(1769695166.739:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 337.422951][ T29] audit: type=1326 audit(1769695166.739:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 337.457068][T17018] set_capacity_and_notify: 5 callbacks suppressed [ 337.457095][T17018] loop7: detected capacity change from 0 to 512 [ 337.490304][T16840] udevd[16840]: symlink '../../loop7' '/dev/disk/by-diskseq/1422.tmp-b7:7' failed: Read-only file system [ 337.506060][T17018] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 337.522361][T17018] EXT4-fs (loop7): orphan cleanup on readonly fs [ 337.541466][T17018] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.3933: Failed to acquire dquot type 1 [ 337.555475][T17018] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3933: bg 0: block 40: padding at end of block bitmap is not set [ 337.594536][T17018] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 337.624379][T17018] EXT4-fs (loop7): 1 truncate cleaned up [ 337.630724][T17018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 337.651469][T17018] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.3933: iget: bad i_size value: 360287970189639690 [ 337.745239][T17031] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.3933: iget: bad i_size value: 360287970189639690 [ 337.820038][T12218] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.062927][T17033] loop8: detected capacity change from 0 to 512 [ 338.136209][T17033] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.152539][T17033] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.239782][T17033] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 338.256681][T17033] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 338.269791][T17033] EXT4-fs (loop8): This should not happen!! Data will be lost [ 338.269791][T17033] [ 338.280242][T17033] EXT4-fs (loop8): Total free blocks count 0 [ 338.287591][T17033] EXT4-fs (loop8): Free/Dirty block details [ 338.294775][T17033] EXT4-fs (loop8): free_blocks=65280 [ 338.300621][T17033] EXT4-fs (loop8): dirty_blocks=31 [ 338.307115][T17033] EXT4-fs (loop8): Block reservation details [ 338.313712][T17033] EXT4-fs (loop8): i_reserved_data_blocks=31 [ 338.450561][ T57] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 338.474333][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 338.474350][ T29] audit: type=1326 audit(1769695167.939:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.8.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 338.504088][ T29] audit: type=1326 audit(1769695167.939:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.8.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 338.562951][ T29] audit: type=1326 audit(1769695167.989:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.8.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 338.580682][T17064] loop8: detected capacity change from 0 to 8192 [ 338.586578][ T29] audit: type=1326 audit(1769695167.989:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.8.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe5901aac22 code=0x7ffc0000 [ 338.597238][T17066] bridge4: entered promiscuous mode [ 338.616276][ T29] audit: type=1326 audit(1769695167.999:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.8.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe59016b78e code=0x7ffc0000 [ 338.621545][T17066] bridge4: entered allmulticast mode [ 338.650265][ T29] audit: type=1326 audit(1769695168.019:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.8.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe5901aace7 code=0x7ffc0000 [ 338.673837][ T29] audit: type=1326 audit(1769695168.019:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.8.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe59016b78e code=0x7ffc0000 [ 338.677822][T17066] team0: Port device bridge4 added [ 338.697448][ T29] audit: type=1326 audit(1769695168.019:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.8.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5901aab4b code=0x7ffc0000 [ 338.726665][ T29] audit: type=1326 audit(1769695168.109:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.8.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe59016b78e code=0x7ffc0000 [ 338.750144][ T29] audit: type=1326 audit(1769695168.109:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17063 comm="syz.8.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5901aab4b code=0x7ffc0000 [ 338.776592][T17064] loop8: p1 p2 p3 p4 [ 338.780951][T17064] loop8: p1 size 196608 extends beyond EOD, truncated [ 338.788666][T17064] loop8: p2 start 164919041 is beyond EOD, truncated [ 338.795469][T17064] loop8: p3 size 66846464 extends beyond EOD, truncated [ 338.819473][T17064] loop8: p4 size 37048832 extends beyond EOD, truncated [ 339.219510][T17083] loop8: detected capacity change from 0 to 128 [ 339.236793][T17083] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 339.244209][T17083] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 339.348790][T17088] __nla_validate_parse: 7 callbacks suppressed [ 339.348830][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3958'. [ 339.364063][T17088] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3958'. [ 339.373076][T17088] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3958'. [ 339.382073][T17088] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3958'. [ 339.425654][T17090] tmpfs: Bad value for 'mpol' [ 339.440781][T17090] loop8: detected capacity change from 0 to 2048 [ 339.496650][T17090] loop8: p1 p2 p3 [ 339.501982][T17090] loop8: p3 start 8388352 is beyond EOD, truncated [ 339.514909][T17090] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3959'. [ 339.526685][T17090] geneve2: entered promiscuous mode [ 339.571658][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3961'. [ 339.679302][T17104] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3963'. [ 339.775565][T17111] loop5: detected capacity change from 0 to 1024 [ 339.782870][T17111] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 339.792851][T17111] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 339.802471][T17111] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 339.813648][T17111] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: inode #5: comm syz.5.3966: unexpected bad inode w/o EXT4_IGET_BAD [ 339.829316][T17111] EXT4-fs (loop5): no journal found [ 339.834665][T17111] EXT4-fs (loop5): can't get journal size [ 339.841359][T17111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.870987][T16544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.972900][T17123] ieee802154 phy0 wpan0: encryption failed: -22 [ 340.030459][T17123] loop7: detected capacity change from 0 to 1024 [ 340.133200][T17114] netlink: 'syz.8.3968': attribute type 3 has an invalid length. [ 340.976679][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3983'. [ 341.025470][T17155] loop5: detected capacity change from 0 to 1024 [ 341.036269][T17155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 341.048782][T17155] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.063208][T17155] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3984: bg 0: block 112: padding at end of block bitmap is not set [ 341.078754][T17155] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 54 with error 117 [ 341.091713][T17155] EXT4-fs (loop5): This should not happen!! Data will be lost [ 341.091713][T17155] [ 341.120084][T17164] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3986'. [ 341.134815][T17164] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 341.146612][T17164] bond1 (unregistering): Released all slaves [ 341.266776][T16544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 341.289346][T17178] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3990'. [ 341.406231][T16840] udevd[16840]: symlink '../../loop8' '/dev/disk/by-diskseq/1431.tmp-b7:8' failed: Read-only file system [ 341.440458][T16640] udevd[16640]: symlink '../../loop7' '/dev/disk/by-diskseq/1435.tmp-b7:7' failed: Read-only file system [ 341.454563][T17200] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.473158][T17196] loop7: detected capacity change from 0 to 2048 [ 341.483184][T17203] vhci_hcd vhci_hcd.0: invalid port number 65 [ 341.489410][T17203] vhci_hcd vhci_hcd.0: invalid port number 65 [ 341.496726][T17203] netlink: 'syz.8.3993': attribute type 3 has an invalid length. [ 341.507320][T17171] ip6_vti0 speed is unknown, defaulting to 1000 [ 341.519085][T17200] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.538764][T16640] udevd[16640]: symlink '../../loop5' '/dev/disk/by-diskseq/1437.tmp-b7:5' failed: Read-only file system [ 341.550930][T16840] loop7: p2 < > p4 [ 341.554814][T16840] loop7: partition table partially beyond EOD, truncated [ 341.562924][T16840] loop7: p2 start 4278190080 is beyond EOD, truncated [ 341.569884][T16840] loop7: p4 size 8192 extends beyond EOD, truncated [ 341.583204][T17196] loop7: p2 < > p4 [ 341.587102][T17196] loop7: partition table partially beyond EOD, truncated [ 341.594719][T17196] loop7: p2 start 4278190080 is beyond EOD, truncated [ 341.601553][T17196] loop7: p4 size 8192 extends beyond EOD, truncated [ 341.621839][T17174] ip6_vti0 speed is unknown, defaulting to 1000 [ 341.630976][T17200] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.632367][T16840] udevd[16840]: symlink '../../loop7' '/dev/disk/by-diskseq/1438.tmp-b7:7' failed: Read-only file system [ 341.670332][T16640] udevd[16640]: symlink '../../loop5' '/dev/disk/by-diskseq/1437.tmp-b7:5' failed: Read-only file system [ 341.696276][T16840] udevd[16840]: symlink '../../loop7' '/dev/disk/by-diskseq/1438.tmp-b7:7' failed: Read-only file system [ 341.726978][T16840] udevd[16840]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 341.748832][T16840] udevd[16840]: symlink '../../loop7' '/dev/disk/by-diskseq/1438.tmp-b7:7' failed: Read-only file system [ 341.749184][T17200] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.775620][T16840] udevd[16840]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 341.860323][ T3835] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.879026][ T3835] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.898363][T16840] udevd[16840]: symlink '../../loop7' '/dev/disk/by-diskseq/1438.tmp-b7:7' failed: Read-only file system [ 341.924187][ T57] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.938873][T17171] chnl_net:caif_netlink_parms(): no params data found [ 341.956382][T17174] chnl_net:caif_netlink_parms(): no params data found [ 341.979731][ T37] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.061685][T17228] loop7: detected capacity change from 0 to 2048 [ 342.078981][T17228] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.086934][T17174] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.098176][T17174] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.105568][T17174] bridge_slave_0: entered allmulticast mode [ 342.112248][T17174] bridge_slave_0: entered promiscuous mode [ 342.143971][T17174] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.151186][T17174] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.158777][T17174] bridge_slave_1: entered allmulticast mode [ 342.159231][T12218] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.167036][T17174] bridge_slave_1: entered promiscuous mode [ 342.180257][T17171] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.187381][T17171] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.194768][T17171] bridge_slave_0: entered allmulticast mode [ 342.202108][T17171] bridge_slave_0: entered promiscuous mode [ 342.221301][T17174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.230658][T17171] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.237873][T17171] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.250838][T17171] bridge_slave_1: entered allmulticast mode [ 342.260311][T17171] bridge_slave_1: entered promiscuous mode [ 342.274147][T17174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.306647][T17171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.323714][T17171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.348321][T17174] team0: Port device team_slave_0 added [ 342.359407][T17174] team0: Port device team_slave_1 added [ 342.366116][T17171] team0: Port device team_slave_0 added [ 342.378416][T17171] team0: Port device team_slave_1 added [ 342.394714][T17174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.401788][T17174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.427937][T17174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.439280][T17174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.446374][T17174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.472405][T17174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.512193][T17171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.514517][T17257] xt_hashlimit: Unknown mode mask 500, kernel too old? [ 342.519295][T17171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.552044][T17171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.563717][T17171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.570865][T17171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.596876][T17171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.611671][T17174] hsr_slave_0: entered promiscuous mode [ 342.618652][T17174] hsr_slave_1: entered promiscuous mode [ 342.624690][T17174] debugfs: 'hsr0' already exists in 'hsr' [ 342.630422][T17174] Cannot create hsr debugfs directory [ 342.656089][T17171] hsr_slave_0: entered promiscuous mode [ 342.662406][T17171] hsr_slave_1: entered promiscuous mode [ 342.669859][T17171] debugfs: 'hsr0' already exists in 'hsr' [ 342.675657][T17171] Cannot create hsr debugfs directory [ 342.813714][T17171] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 342.830429][T17269] loop5: detected capacity change from 0 to 1024 [ 342.834889][T17171] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 342.851141][T17171] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 342.862994][T17269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 342.867983][T17171] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 342.879044][T17269] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.902961][T17269] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4010: bg 0: block 112: padding at end of block bitmap is not set [ 342.918883][T17269] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 54 with error 117 [ 342.931468][T17269] EXT4-fs (loop5): This should not happen!! Data will be lost [ 342.931468][T17269] [ 342.973169][T16544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 343.029474][T17171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.052759][T17171] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.065056][ T3824] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.072315][ T3824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.084594][ T3835] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.091678][ T3835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.177640][T17303] Cannot find add_set index 0 as target [ 343.187648][T17174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 343.221077][T17174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 343.264328][T17174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 343.285449][T17174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 343.333614][T17171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.429839][T17174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.459909][T17174] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.488400][ T3835] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.495589][ T3835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.519478][ T3835] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.526695][ T3835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.672966][T17174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.705872][T17171] veth0_vlan: entered promiscuous mode [ 343.726103][T17171] veth1_vlan: entered promiscuous mode [ 343.761189][T17171] veth0_macvtap: entered promiscuous mode [ 343.772654][T17171] veth1_macvtap: entered promiscuous mode [ 343.806994][T17171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.836324][T17171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.851174][ T37] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.870005][ T37] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.893168][ T37] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.910061][ T3844] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.039292][T17174] veth0_vlan: entered promiscuous mode [ 344.058548][T17174] veth1_vlan: entered promiscuous mode [ 344.120340][T17174] veth0_macvtap: entered promiscuous mode [ 344.130215][T17174] veth1_macvtap: entered promiscuous mode [ 344.136253][T17410] loop7: detected capacity change from 0 to 1024 [ 344.177970][T17174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.188588][T17410] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 344.207934][T17174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.232205][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.255922][T17410] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 344.266114][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.288959][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.299111][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.309612][T17410] EXT4-fs (loop7): orphan cleanup on readonly fs [ 344.329472][T17410] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.4019: Invalid inode table block 0 in block_group 0 [ 344.380176][T17410] EXT4-fs (loop7): Remounting filesystem read-only [ 344.387061][T17410] __quota_error: 109 callbacks suppressed [ 344.387081][T17410] Quota error (device loop7): write_blk: dquota write failed [ 344.400276][T17410] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 344.410894][T17410] EXT4-fs (loop7): 1 truncate cleaned up [ 344.417559][T17410] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.430715][T17410] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.451144][T17435] loop4: detected capacity change from 0 to 512 [ 344.478297][T17435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.524737][T17435] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.553319][T17174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.600842][T17452] bond1: (slave bond_slave_1): Device is not our slave [ 344.607798][T17452] bond1: option active_slave: invalid value (bond_slave_1) [ 344.617774][T17458] loop9: detected capacity change from 0 to 128 [ 344.669749][T17452] bond1 (unregistering): Released all slaves [ 345.059092][T17502] __nla_validate_parse: 5 callbacks suppressed [ 345.059107][T17502] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4033'. [ 345.104718][T17502] vlan0: entered promiscuous mode [ 345.261287][T17521] netlink: 256 bytes leftover after parsing attributes in process `syz.9.4037'. [ 345.321736][ T29] audit: type=1326 audit(1769695174.779:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17527 comm="syz.5.4038" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86d77caeb9 code=0x0 [ 345.489844][T17537] loop5: detected capacity change from 0 to 8192 [ 345.509609][T17547] loop7: detected capacity change from 0 to 128 [ 345.686397][T17568] loop8: detected capacity change from 0 to 128 [ 345.835184][T17589] loop8: detected capacity change from 0 to 128 [ 346.429332][T16840] udevd[16840]: symlink '../../loop4' '/dev/disk/by-diskseq/1447.tmp-b7:4' failed: Read-only file system [ 346.463351][T17647] loop4: detected capacity change from 0 to 1024 [ 346.471665][T17647] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (23577!=28264) [ 346.481407][T17647] EXT4-fs (loop4): group descriptors corrupted! [ 346.501647][T16840] udevd[16840]: symlink '../../loop4' '/dev/disk/by-diskseq/1458.tmp-b7:4' failed: Read-only file system [ 346.527506][T16840] udevd[16840]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 346.566832][T16840] udevd[16840]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 346.589832][T17451] udevd[17451]: symlink '../../loop9' '/dev/disk/by-diskseq/1449.tmp-b7:9' failed: Read-only file system [ 346.605572][T16840] udevd[16840]: symlink '../../loop4' '/dev/disk/by-diskseq/1458.tmp-b7:4' failed: Read-only file system [ 346.641066][T16840] udevd[16840]: symlink '../../loop4' '/dev/disk/by-diskseq/1458.tmp-b7:4' failed: Read-only file system [ 346.678256][T16840] udevd[16840]: symlink '../../loop4' '/dev/disk/by-diskseq/1458.tmp-b7:4' failed: Read-only file system [ 346.711017][ T29] audit: type=1326 audit(1769695176.169:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17651 comm="syz.4.4061" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13a3edaeb9 code=0x0 [ 346.756761][T17653] loop9: detected capacity change from 0 to 256 [ 346.777402][T17653] program syz.9.4060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.809795][T16840] udevd[16840]: symlink '../../loop9' '/dev/disk/by-diskseq/1460.tmp-b7:9' failed: Read-only file system [ 346.827534][T17451] udevd[17451]: symlink '../../loop8' '/dev/disk/by-diskseq/1456.tmp-b7:8' failed: Read-only file system [ 346.866079][T17658] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4063'. [ 346.989127][ T29] audit: type=1400 audit(1769695176.449:6306): avc: denied { execute } for pid=17665 comm="syz.5.4067" path="/selinux/commit_pending_bools" dev="selinuxfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 346.995345][T17663] EXT4-fs: Ignoring removed orlov option [ 347.130369][T17663] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.167951][T17663] EXT4-fs error (device loop8): __ext4_new_inode:1279: comm syz.8.4066: failed to insert inode 15: doubly allocated? [ 347.222058][T13429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.240115][T17675] FAT-fs (loop7): Directory bread(block 64) failed [ 347.262853][T17675] FAT-fs (loop7): Directory bread(block 65) failed [ 347.280175][T17675] FAT-fs (loop7): Directory bread(block 66) failed [ 347.297017][T17675] FAT-fs (loop7): Directory bread(block 67) failed [ 347.310498][T17675] FAT-fs (loop7): Directory bread(block 68) failed [ 347.324339][T17675] FAT-fs (loop7): Directory bread(block 69) failed [ 347.339034][T17675] FAT-fs (loop7): Directory bread(block 70) failed [ 347.352903][T17675] FAT-fs (loop7): Directory bread(block 71) failed [ 347.374046][T17675] FAT-fs (loop7): Directory bread(block 72) failed [ 347.380919][T17675] FAT-fs (loop7): Directory bread(block 73) failed [ 347.397828][T17678] FAT-fs (loop8): Directory bread(block 64) failed [ 347.417836][T17678] FAT-fs (loop8): Directory bread(block 65) failed [ 347.424519][T17678] FAT-fs (loop8): Directory bread(block 66) failed [ 347.424781][T17667] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 347.431093][T17678] FAT-fs (loop8): Directory bread(block 67) failed [ 347.431125][T17678] FAT-fs (loop8): Directory bread(block 68) failed [ 347.431184][T17678] FAT-fs (loop8): Directory bread(block 69) failed [ 347.431215][T17678] FAT-fs (loop8): Directory bread(block 70) failed [ 347.431239][T17678] FAT-fs (loop8): Directory bread(block 71) failed [ 347.431270][T17678] FAT-fs (loop8): Directory bread(block 72) failed [ 347.431293][T17678] FAT-fs (loop8): Directory bread(block 73) failed [ 347.516455][T17650] syz.9.4060 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 347.530672][T17650] CPU: 0 UID: 0 PID: 17650 Comm: syz.9.4060 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 347.530831][T17650] Tainted: [W]=WARN [ 347.530838][T17650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.530852][T17650] Call Trace: [ 347.530859][T17650] [ 347.530867][T17650] __dump_stack+0x1d/0x30 [ 347.530895][T17650] dump_stack_lvl+0x95/0xd0 [ 347.530919][T17650] dump_stack+0x15/0x1b [ 347.530949][T17650] dump_header+0x80/0x240 [ 347.530978][T17650] oom_kill_process+0x295/0x350 [ 347.531049][T17650] out_of_memory+0x97d/0xb80 [ 347.531203][T17650] try_charge_memcg+0x62e/0xa10 [ 347.531232][T17650] obj_cgroup_charge_pages+0x23/0xc0 [ 347.531340][T17650] __memcg_kmem_charge_page+0x9e/0x170 [ 347.531381][T17650] __alloc_frozen_pages_noprof+0x18a/0x350 [ 347.531448][T17650] alloc_pages_mpol+0xb3/0x260 [ 347.531495][T17650] alloc_pages_noprof+0x8f/0x130 [ 347.531539][T17650] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 347.531613][T17650] __kvmalloc_node_noprof+0x471/0x680 [ 347.531644][T17650] ? ip_set_alloc+0x24/0x30 [ 347.531806][T17650] ? ip_set_alloc+0x24/0x30 [ 347.531848][T17650] ? __slab_alloc+0x25/0x50 [ 347.531892][T17650] ip_set_alloc+0x24/0x30 [ 347.531970][T17650] hash_netiface_create+0x282/0x740 [ 347.532082][T17650] ? __pfx_hash_netiface_create+0x10/0x10 [ 347.532127][T17650] ip_set_create+0x3cf/0x970 [ 347.532198][T17650] ? __nla_parse+0x40/0x60 [ 347.532248][T17650] nfnetlink_rcv_msg+0x509/0x5d0 [ 347.532393][T17650] netlink_rcv_skb+0x123/0x220 [ 347.532449][T17650] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 347.532544][T17650] nfnetlink_rcv+0x167/0x1720 [ 347.532585][T17650] ? __kfree_skb+0x109/0x150 [ 347.532635][T17650] ? nlmon_xmit+0x4f/0x60 [ 347.532680][T17650] ? consume_skb+0x49/0x140 [ 347.532733][T17650] ? nlmon_xmit+0x4f/0x60 [ 347.532777][T17650] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 347.532867][T17650] ? __dev_queue_xmit+0x139a/0x1f20 [ 347.532916][T17650] ? __dev_queue_xmit+0x148/0x1f20 [ 347.532967][T17650] ? ref_tracker_free+0x37d/0x3e0 [ 347.533022][T17650] ? __netlink_deliver_tap+0x4dc/0x500 [ 347.533076][T17650] netlink_unicast+0x5c0/0x690 [ 347.533120][T17650] netlink_sendmsg+0x5c8/0x6f0 [ 347.533151][T17650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.533243][T17650] ____sys_sendmsg+0x5af/0x600 [ 347.533307][T17650] ___sys_sendmsg+0x195/0x1e0 [ 347.533332][T17650] ? sched_clock+0x3f/0x60 [ 347.533380][T17650] __x64_sys_sendmsg+0xd4/0x160 [ 347.533449][T17650] x64_sys_call+0x17ba/0x3000 [ 347.533486][T17650] do_syscall_64+0xc0/0x2a0 [ 347.533602][T17650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.533626][T17650] RIP: 0033:0x7fab417faeb9 [ 347.533643][T17650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.533670][T17650] RSP: 002b:00007fab40257028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.533771][T17650] RAX: ffffffffffffffda RBX: 00007fab41a75fa0 RCX: 00007fab417faeb9 [ 347.533793][T17650] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 347.533881][T17650] RBP: 00007fab41868c1f R08: 0000000000000000 R09: 0000000000000000 [ 347.533920][T17650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.533939][T17650] R13: 00007fab41a76038 R14: 00007fab41a75fa0 R15: 00007ffe5bb9b5c8 [ 347.533968][T17650] [ 347.533977][T17650] memory: usage 307200kB, limit 307200kB, failcnt 277 [ 347.534527][T17667] EXT4-fs (loop5): orphan cleanup on readonly fs [ 347.545463][T17650] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 347.545486][T17650] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 347.545509][T17650] Memory cgroup stats for /syz9: [ 347.545772][T17650] cache 0 [ 347.545781][T17650] rss 4096 [ 347.545789][T17650] shmem 0 [ 347.545797][T17650] mapped_file 0 [ 347.545877][T17650] dirty 0 [ 347.545886][T17650] writeback 0 [ 347.674108][T17667] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 347.678767][T17650] workingset_refault_anon 8 [ 347.678783][T17650] workingset_refault_file 0 [ 347.678795][T17650] swap 204800 [ 347.678835][T17650] swapcached 4096 [ 347.678846][T17650] pgpgin 3963 [ 347.678856][T17650] pgpgout 3962 [ 347.678865][T17650] pgfault 5153 [ 347.678873][T17650] pgmajfault 3 [ 347.678883][T17650] inactive_anon 0 [ 347.678893][T17650] active_anon 0 [ 347.678904][T17650] inactive_file 0 [ 347.678915][T17650] active_file 0 [ 347.679000][T17650] unevictable 0 [ 347.679011][T17650] hierarchical_memory_limit 314572800 [ 347.679024][T17650] hierarchical_memsw_limit 9223372036854771712 [ 347.679061][T17650] total_cache 0 [ 347.679078][T17650] total_rss 4096 [ 347.679089][T17650] total_shmem 0 [ 347.679099][T17650] total_mapped_file 0 [ 347.679114][T17650] total_dirty 0 [ 347.679127][T17650] total_writeback 0 [ 347.679138][T17650] total_workingset_refault_anon 8 [ 347.679151][T17650] total_workingset_refault_file 0 [ 347.684079][T17667] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 347.689417][T17650] total_swap 204800 [ 347.689430][T17650] total_swapcached 4096 [ 347.689442][T17650] total_pgpgin 3963 [ 347.689530][T17650] total_pgpgout 3962 [ 347.689600][T17650] total_pgfault 5153 [ 347.689612][T17650] total_pgmajfault 3 [ 347.689631][T17650] total_inactive_anon 0 [ 347.689664][T17650] total_active_anon 0 [ 347.689676][T17650] total_inactive_file 0 [ 347.689688][T17650] total_active_file 0 [ 347.689699][T17650] total_unevictable 0 [ 347.689732][T17650] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9 [ 347.694636][T17667] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4067: Failed to acquire dquot type 1 [ 347.699105][T17650] ,task_memcg=/syz9,task=syz.9.4060,pid=17649,uid=0 [ 347.699153][T17650] Memory cgroup out of memory: Killed process 17649 (syz.9.4060) total-vm:94132kB, anon-rss:1204kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 348.269977][T17667] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4067: bg 0: block 40: padding at end of block bitmap is not set [ 348.286515][T17667] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 348.316721][T17667] EXT4-fs (loop5): 1 truncate cleaned up [ 348.366766][T17667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.474268][ T29] audit: type=1400 audit(1769695177.929:6307): avc: denied { name_bind } for pid=17685 comm="syz.7.4073" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 348.477187][T17686] macvlan2: entered promiscuous mode [ 348.545682][T17697] set_capacity_and_notify: 4 callbacks suppressed [ 348.545782][T17697] loop4: detected capacity change from 0 to 2048 [ 348.572339][T17686] batman_adv: batadv0: Adding interface: macvlan2 [ 348.578967][T17686] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 348.593448][T17667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.613121][T17697] EXT4-fs: Ignoring removed mblk_io_submit option [ 348.674558][T17697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.707899][T17708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4081'. [ 348.707969][T17708] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4081'. [ 348.707990][T17708] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4081'. [ 348.708024][T17708] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4081'. [ 348.762257][ T29] audit: type=1400 audit(1769695178.219:6308): avc: denied { accept } for pid=17701 comm="syz.8.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 348.781635][T17692] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4075: bg 0: block 234: padding at end of block bitmap is not set [ 348.782026][T17692] EXT4-fs (loop4): Remounting filesystem read-only [ 348.782971][T17713] loop9: detected capacity change from 0 to 1024 [ 348.801919][T17709] netlink: 'syz.8.4078': attribute type 41 has an invalid length. [ 348.888088][T17174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.907323][T17721] loop9: detected capacity change from 0 to 512 [ 348.907694][T17721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 348.917676][T17721] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 348.917698][T17721] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 348.917745][T17721] System zones: 0-2, 18-18, 34-34 [ 348.917844][T17721] EXT4-fs (loop9): write access unavailable, skipping orphan cleanup [ 348.918417][T17721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 349.046272][T17730] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4087'. [ 349.055603][T17730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17730 comm=syz.8.4087 [ 349.109056][T17171] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.183655][T17732] loop5: detected capacity change from 0 to 8192 [ 349.193613][T17732] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 349.205740][T17741] loop7: detected capacity change from 0 to 256 [ 349.255358][T17732] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 349.264381][T17732] FAT-fs (loop5): Filesystem has been set read-only [ 349.341908][T17748] loop4: detected capacity change from 0 to 256 [ 349.352491][T17732] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 349.384036][T17732] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 349.414358][T17732] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 349.423223][T17732] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 349.500300][T17748] FAT-fs (loop4): Directory bread(block 64) failed [ 349.508583][T17753] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4096'. [ 349.518943][T17732] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 349.534471][T17748] FAT-fs (loop4): Directory bread(block 65) failed [ 349.541127][T17732] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 349.583761][T17732] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 349.632090][T17748] FAT-fs (loop4): Directory bread(block 66) failed [ 349.643328][T17732] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 349.665478][T17765] FAULT_INJECTION: forcing a failure. [ 349.665478][T17765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.678843][T17765] CPU: 1 UID: 0 PID: 17765 Comm: syz.9.4100 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 349.678928][T17765] Tainted: [W]=WARN [ 349.678935][T17765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.678957][T17765] Call Trace: [ 349.678967][T17765] [ 349.678979][T17765] __dump_stack+0x1d/0x30 [ 349.679011][T17765] dump_stack_lvl+0x95/0xd0 [ 349.679092][T17765] dump_stack+0x15/0x1b [ 349.679121][T17765] should_fail_ex+0x263/0x280 [ 349.679175][T17765] should_fail+0xb/0x20 [ 349.679217][T17765] should_fail_usercopy+0x1a/0x20 [ 349.679253][T17765] _copy_to_user+0x20/0xa0 [ 349.679379][T17765] simple_read_from_buffer+0xb5/0x130 [ 349.679555][T17765] proc_fail_nth_read+0x10e/0x150 [ 349.679593][T17765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 349.679630][T17765] vfs_read+0x1ab/0x7f0 [ 349.679655][T17765] ? __rcu_read_unlock+0x4e/0x70 [ 349.679769][T17765] ? __fget_files+0x184/0x1c0 [ 349.679793][T17765] ? mutex_lock+0x57/0x90 [ 349.679822][T17765] ksys_read+0xdc/0x1a0 [ 349.679867][T17765] __x64_sys_read+0x40/0x50 [ 349.679963][T17765] x64_sys_call+0x2889/0x3000 [ 349.679997][T17765] do_syscall_64+0xc0/0x2a0 [ 349.680030][T17765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.680093][T17765] RIP: 0033:0x7fab417bb78e [ 349.680114][T17765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 349.680140][T17765] RSP: 002b:00007fab40256fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 349.680167][T17765] RAX: ffffffffffffffda RBX: 00007fab402576c0 RCX: 00007fab417bb78e [ 349.680249][T17765] RDX: 000000000000000f RSI: 00007fab402570a0 RDI: 0000000000000004 [ 349.680265][T17765] RBP: 00007fab40257090 R08: 0000000000000000 R09: 0000000000000000 [ 349.680283][T17765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.680414][T17765] R13: 00007fab41a76038 R14: 00007fab41a75fa0 R15: 00007ffe5bb9b5c8 [ 349.680482][T17765] [ 349.898853][T17732] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 350.045420][T17748] FAT-fs (loop4): Directory bread(block 67) failed [ 350.078499][T17748] FAT-fs (loop4): Directory bread(block 68) failed [ 350.234270][T17748] FAT-fs (loop4): Directory bread(block 69) failed [ 350.447660][T17748] FAT-fs (loop4): Directory bread(block 70) failed [ 350.466238][T17748] FAT-fs (loop4): Directory bread(block 71) failed [ 351.433503][T17748] FAT-fs (loop4): Directory bread(block 72) failed [ 351.450482][T17781] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4105'. [ 351.485158][T17748] FAT-fs (loop4): Directory bread(block 73) failed [ 351.512457][T17789] FAULT_INJECTION: forcing a failure. [ 351.512457][T17789] name failslab, interval 1, probability 0, space 0, times 0 [ 351.525283][T17789] CPU: 1 UID: 0 PID: 17789 Comm: syz.9.4106 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 351.525318][T17789] Tainted: [W]=WARN [ 351.525325][T17789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.525340][T17789] Call Trace: [ 351.525348][T17789] [ 351.525437][T17789] __dump_stack+0x1d/0x30 [ 351.525496][T17789] dump_stack_lvl+0x95/0xd0 [ 351.525521][T17789] dump_stack+0x15/0x1b [ 351.525595][T17789] should_fail_ex+0x263/0x280 [ 351.525632][T17789] should_failslab+0x8c/0xb0 [ 351.525659][T17789] __kmalloc_noprof+0xb8/0x580 [ 351.525688][T17789] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 351.525780][T17789] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 351.525816][T17789] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 351.525858][T17789] ? genl_get_cmd+0x639/0x660 [ 351.525918][T17789] genl_rcv_msg+0x432/0x470 [ 351.525947][T17789] ? __pfx_ovs_flow_cmd_get+0x10/0x10 [ 351.525970][T17789] netlink_rcv_skb+0x123/0x220 [ 351.526049][T17789] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.526091][T17789] genl_rcv+0x28/0x40 [ 351.526119][T17789] netlink_unicast+0x5c0/0x690 [ 351.526265][T17789] netlink_sendmsg+0x5c8/0x6f0 [ 351.526295][T17789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.526315][T17789] ____sys_sendmsg+0x5af/0x600 [ 351.526416][T17789] ___sys_sendmsg+0x195/0x1e0 [ 351.526454][T17789] __x64_sys_sendmsg+0xd4/0x160 [ 351.526486][T17789] x64_sys_call+0x17ba/0x3000 [ 351.526519][T17789] do_syscall_64+0xc0/0x2a0 [ 351.526629][T17789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.526652][T17789] RIP: 0033:0x7fab417faeb9 [ 351.526749][T17789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.526818][T17789] RSP: 002b:00007fab40257028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.526839][T17789] RAX: ffffffffffffffda RBX: 00007fab41a75fa0 RCX: 00007fab417faeb9 [ 351.526863][T17789] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 351.526881][T17789] RBP: 00007fab40257090 R08: 0000000000000000 R09: 0000000000000000 [ 351.526899][T17789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.526916][T17789] R13: 00007fab41a76038 R14: 00007fab41a75fa0 R15: 00007ffe5bb9b5c8 [ 351.526989][T17789] [ 351.863441][T16640] udevd[16640]: symlink '../../loop7' '/dev/disk/by-diskseq/1478.tmp-b7:7' failed: Read-only file system [ 351.888911][T17451] udevd[17451]: symlink '../../loop5' '/dev/disk/by-diskseq/1476.tmp-b7:5' failed: Read-only file system [ 351.902433][T16840] udevd[16840]: symlink '../../loop9' '/dev/disk/by-diskseq/1475.tmp-b7:9' failed: Read-only file system [ 351.916894][T17451] udevd[17451]: symlink '../../loop5' '/dev/disk/by-diskseq/1476.tmp-b7:5' failed: Read-only file system [ 351.928612][T17797] netlink: 'syz.5.4109': attribute type 1 has an invalid length. [ 351.936481][T17797] netlink: 'syz.5.4109': attribute type 2 has an invalid length. [ 351.983919][T16840] udevd[16840]: symlink '../../loop5' '/dev/disk/by-diskseq/1480.tmp-b7:5' failed: Read-only file system [ 351.999584][T17451] udevd[17451]: symlink '../../loop9' '/dev/disk/by-diskseq/1475.tmp-b7:9' failed: Read-only file system [ 352.014235][T17797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4109'. [ 352.026068][T17800] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4110'. [ 352.068731][T16840] udevd[16840]: symlink '../../loop5' '/dev/disk/by-diskseq/1480.tmp-b7:5' failed: Read-only file system [ 352.100427][T17451] udevd[17451]: symlink '../../loop7' '/dev/disk/by-diskseq/1478.tmp-b7:7' failed: Read-only file system [ 352.161160][T17451] udevd[17451]: symlink '../../loop9' '/dev/disk/by-diskseq/1475.tmp-b7:9' failed: Read-only file system [ 352.173586][T16840] udevd[16840]: symlink '../../loop5' '/dev/disk/by-diskseq/1480.tmp-b7:5' failed: Read-only file system [ 352.216576][T17810] loop5: detected capacity change from 0 to 512 [ 352.250969][T17810] EXT4-fs: Ignoring removed oldalloc option [ 352.328901][T17810] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4115: Parent and EA inode have the same ino 15 [ 352.397769][T17810] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4115: Parent and EA inode have the same ino 15 [ 352.436086][T17810] EXT4-fs (loop5): 1 orphan inode deleted [ 352.444631][T17810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.466251][T17810] netlink: 'syz.5.4115': attribute type 39 has an invalid length. [ 352.501540][T17821] loop4: detected capacity change from 0 to 8192 [ 352.513752][T17823] loop8: detected capacity change from 0 to 128 [ 352.526440][T17823] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 352.544773][T17823] ext4 filesystem being mounted at /295/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 352.591072][T17821] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 352.625857][T16544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.639169][T13429] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 352.728558][T17832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=17832 comm=syz.8.4121 [ 352.741564][ T29] audit: type=1400 audit(1769695182.189:6309): avc: denied { read } for pid=17825 comm="syz.8.4121" path="socket:[54329]" dev="sockfs" ino=54329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 352.961158][T17841] loop5: detected capacity change from 0 to 256 [ 352.992310][T17841] FAT-fs (loop5): Directory bread(block 64) failed [ 352.998918][T17841] FAT-fs (loop5): Directory bread(block 65) failed [ 353.013344][T17841] FAT-fs (loop5): Directory bread(block 66) failed [ 353.027884][T17841] FAT-fs (loop5): Directory bread(block 67) failed [ 353.034601][T17841] FAT-fs (loop5): Directory bread(block 68) failed [ 353.041175][T17841] FAT-fs (loop5): Directory bread(block 69) failed [ 353.073383][T17841] FAT-fs (loop5): Directory bread(block 70) failed [ 353.080189][T17841] FAT-fs (loop5): Directory bread(block 71) failed [ 353.087140][T17841] FAT-fs (loop5): Directory bread(block 72) failed [ 353.093885][T17841] FAT-fs (loop5): Directory bread(block 73) failed [ 353.275355][T17848] FAT-fs (loop4): Directory bread(block 64) failed [ 353.314238][T17848] FAT-fs (loop4): Directory bread(block 65) failed [ 353.320835][T17848] FAT-fs (loop4): Directory bread(block 66) failed [ 353.336134][T17860] EXT4-fs: Ignoring removed orlov option [ 353.341896][T17860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 353.354363][T17860] ext4: Unknown parameter 'subj_role' [ 353.397437][T17848] FAT-fs (loop4): Directory bread(block 67) failed [ 353.404036][T17848] FAT-fs (loop4): Directory bread(block 68) failed [ 353.435528][T17859] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.474703][T17848] FAT-fs (loop4): Directory bread(block 69) failed [ 353.492863][T17848] FAT-fs (loop4): Directory bread(block 70) failed [ 353.561372][T17848] FAT-fs (loop4): Directory bread(block 71) failed [ 353.587262][T17848] FAT-fs (loop4): Directory bread(block 72) failed [ 353.614221][T17865] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4133'. [ 353.641140][T17848] FAT-fs (loop4): Directory bread(block 73) failed [ 354.277941][T17883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4141'. [ 354.300695][T17883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4141'. [ 354.355661][T17883] set_capacity_and_notify: 3 callbacks suppressed [ 354.355684][T17883] loop4: detected capacity change from 0 to 2048 [ 354.445568][T16840] loop4: p2 < > p4 [ 354.449515][T16840] loop4: partition table partially beyond EOD, truncated [ 354.550870][T16840] loop4: p2 start 4278190080 is beyond EOD, truncated [ 354.557765][T16840] loop4: p4 size 8192 extends beyond EOD, truncated [ 354.584894][T17891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4141'. [ 354.593965][T17891] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4141'. [ 354.628412][T17883] loop4: p2 < > p4 [ 354.632290][T17883] loop4: partition table partially beyond EOD, truncated [ 354.663899][T17883] loop4: p2 start 4278190080 is beyond EOD, truncated [ 354.670781][T17883] loop4: p4 size 8192 extends beyond EOD, truncated [ 354.692563][T17889] loop8: detected capacity change from 0 to 8192 [ 354.726077][T17889] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 354.750071][ T3002] loop4: p2 < > p4 [ 354.753985][ T3002] loop4: partition table partially beyond EOD, truncated [ 354.770431][ T3002] loop4: p2 start 4278190080 is beyond EOD, truncated [ 354.777333][ T3002] loop4: p4 size 8192 extends beyond EOD, truncated [ 354.796770][T17898] loop9: detected capacity change from 0 to 1024 [ 354.827682][T17898] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 354.838634][T17898] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 354.846231][T17897] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4146'. [ 354.896658][T17898] JBD2: no valid journal superblock found [ 354.903014][T17898] EXT4-fs (loop9): Could not load journal inode [ 354.963838][T17902] loop5: detected capacity change from 0 to 256 [ 355.026485][T17902] FAT-fs (loop5): Directory bread(block 64) failed [ 355.054373][T17902] FAT-fs (loop5): Directory bread(block 65) failed [ 355.060980][T17902] FAT-fs (loop5): Directory bread(block 66) failed [ 355.092674][T17902] FAT-fs (loop5): Directory bread(block 67) failed [ 355.110767][T17902] FAT-fs (loop5): Directory bread(block 68) failed [ 355.130501][T17902] FAT-fs (loop5): Directory bread(block 69) failed [ 355.138729][T17902] FAT-fs (loop5): Directory bread(block 70) failed [ 355.147395][T17902] FAT-fs (loop5): Directory bread(block 71) failed [ 355.154777][T17902] FAT-fs (loop5): Directory bread(block 72) failed [ 355.161543][T17902] FAT-fs (loop5): Directory bread(block 73) failed [ 355.350131][T17922] bridge_slave_0: left allmulticast mode [ 355.355903][T17922] bridge_slave_0: left promiscuous mode [ 355.361590][T17922] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.418953][T17922] bridge_slave_1: left allmulticast mode [ 355.424726][T17922] bridge_slave_1: left promiscuous mode [ 355.430494][T17922] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.440937][T17922] bond0: (slave bond_slave_0): Releasing backup interface [ 355.457341][T17922] bond0: (slave bond_slave_1): Releasing backup interface [ 355.479896][T17922] team0: Port device team_slave_0 removed [ 355.489485][T17922] team0: Port device team_slave_1 removed [ 355.496534][T17922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.503986][T17922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.513423][T17922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.520911][T17922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.531868][T17922] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 355.562321][T17924] syz_tun: entered promiscuous mode [ 355.586746][T17924] macvtap1: entered promiscuous mode [ 355.608448][T17927] ip6gre1: entered allmulticast mode [ 355.629342][T17927] team0: Port device ip6gre1 added [ 355.780808][T17933] loop5: detected capacity change from 0 to 256 [ 355.830096][T17933] FAT-fs (loop5): Directory bread(block 64) failed [ 355.853323][T17933] FAT-fs (loop5): Directory bread(block 65) failed [ 355.874438][T17933] FAT-fs (loop5): Directory bread(block 66) failed [ 355.888931][T17933] FAT-fs (loop5): Directory bread(block 67) failed [ 355.907802][T17933] FAT-fs (loop5): Directory bread(block 68) failed [ 355.927474][T17933] FAT-fs (loop5): Directory bread(block 69) failed [ 355.943680][T17933] FAT-fs (loop5): Directory bread(block 70) failed [ 355.963280][T17933] FAT-fs (loop5): Directory bread(block 71) failed [ 355.982244][T17933] FAT-fs (loop5): Directory bread(block 72) failed [ 356.000203][T17933] FAT-fs (loop5): Directory bread(block 73) failed [ 356.040562][T17935] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4159'. [ 356.200995][T17942] loop5: detected capacity change from 0 to 1024 [ 356.271166][T17942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.287696][T17942] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 356.352108][T17942] EXT4-fs (loop5): Remounting filesystem read-only [ 356.469261][T16544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.516071][T17959] FAULT_INJECTION: forcing a failure. [ 356.516071][T17959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.529311][T17959] CPU: 0 UID: 0 PID: 17959 Comm: syz.5.4168 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 356.529381][T17959] Tainted: [W]=WARN [ 356.529392][T17959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.529410][T17959] Call Trace: [ 356.529419][T17959] [ 356.529430][T17959] __dump_stack+0x1d/0x30 [ 356.529507][T17959] dump_stack_lvl+0x95/0xd0 [ 356.529572][T17959] dump_stack+0x15/0x1b [ 356.529597][T17959] should_fail_ex+0x263/0x280 [ 356.529631][T17959] should_fail+0xb/0x20 [ 356.529682][T17959] should_fail_usercopy+0x1a/0x20 [ 356.529782][T17959] _copy_from_user+0x1c/0xb0 [ 356.529807][T17959] kstrtouint_from_user+0x69/0xf0 [ 356.529895][T17959] proc_fail_nth_write+0x50/0x160 [ 356.529970][T17959] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 356.530001][T17959] vfs_write+0x269/0x9f0 [ 356.530026][T17959] ? __rcu_read_unlock+0x4e/0x70 [ 356.530093][T17959] ? __fget_files+0x184/0x1c0 [ 356.530157][T17959] ? __sys_bind+0x222/0x290 [ 356.530196][T17959] ? mutex_lock+0x57/0x90 [ 356.530232][T17959] ksys_write+0xdc/0x1a0 [ 356.530331][T17959] __x64_sys_write+0x40/0x50 [ 356.530359][T17959] x64_sys_call+0x2847/0x3000 [ 356.530402][T17959] do_syscall_64+0xc0/0x2a0 [ 356.530505][T17959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.530536][T17959] RIP: 0033:0x7f86d778b78e [ 356.530557][T17959] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 356.530623][T17959] RSP: 002b:00007f86d6226fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.530707][T17959] RAX: ffffffffffffffda RBX: 00007f86d62276c0 RCX: 00007f86d778b78e [ 356.530727][T17959] RDX: 0000000000000001 RSI: 00007f86d62270a0 RDI: 0000000000000003 [ 356.530747][T17959] RBP: 00007f86d6227090 R08: 0000000000000000 R09: 0000000000000000 [ 356.530766][T17959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.530784][T17959] R13: 00007f86d7a46038 R14: 00007f86d7a45fa0 R15: 00007ffd841187c8 [ 356.530813][T17959] [ 356.754681][T17956] netlink: 'syz.4.4167': attribute type 10 has an invalid length. [ 356.762705][T17956] __nla_validate_parse: 3 callbacks suppressed [ 356.762752][T17956] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4167'. [ 356.778031][T17956] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 356.876815][T16840] udevd[16840]: symlink '../../loop4' '/dev/disk/by-diskseq/1500.tmp-b7:4' failed: Read-only file system [ 356.927905][T17966] loop4: detected capacity change from 0 to 1024 [ 356.953607][T16840] udevd[16840]: symlink '../../loop4' '/dev/disk/by-diskseq/1508.tmp-b7:4' failed: Read-only file system [ 356.977860][T17966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 356.991195][T16840] udevd[16840]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 356.997245][T17966] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.041904][T16840] udevd[16840]: symlink '../../loop4' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:4' failed: Read-only file system [ 357.074601][T17966] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4171: bg 0: block 112: padding at end of block bitmap is not set [ 357.121977][T16840] udevd[16840]: symlink '../../loop4' '/dev/disk/by-diskseq/1508.tmp-b7:4' failed: Read-only file system [ 357.136139][T17966] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 54 with error 117 [ 357.148705][T17966] EXT4-fs (loop4): This should not happen!! Data will be lost [ 357.148705][T17966] [ 357.172100][T16840] udevd[16840]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 357.191122][T16840] udevd[16840]: symlink '../../loop4' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:4' failed: Read-only file system [ 357.218228][T17451] udevd[17451]: symlink '../../loop7' '/dev/disk/by-diskseq/1478.tmp-b7:7' failed: Read-only file system [ 357.248491][T17174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 357.288396][T16640] udevd[16640]: symlink '../../loop5' '/dev/disk/by-diskseq/1507.tmp-b7:5' failed: Read-only file system [ 357.324173][T16840] udevd[16840]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 357.373644][T17909] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4151'. [ 357.544033][ T29] audit: type=1326 audit(1769695186.999:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17985 comm="syz.7.4175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90a53aaeb9 code=0x0 [ 357.570308][ T29] audit: type=1400 audit(1769695187.009:6311): avc: denied { setopt } for pid=17979 comm="syz.4.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 357.578284][T17982] loop4: detected capacity change from 0 to 512 [ 357.599976][T17982] EXT4-fs: Ignoring removed bh option [ 357.612826][T17982] EXT4-fs: Ignoring removed oldalloc option [ 357.619292][T17982] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 357.664085][T17982] EXT4-fs (loop4): 1 truncate cleaned up [ 357.683245][T17982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.981362][T18001] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4181'. [ 358.018418][T18001] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4181'. [ 358.054439][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4182'. [ 358.063393][T18006] lo: entered promiscuous mode [ 358.068358][T18006] lo: entered allmulticast mode [ 358.135526][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4182'. [ 358.169111][T18006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.219689][T18008] loop9: detected capacity change from 0 to 1024 [ 358.283068][ T29] audit: type=1326 audit(1769695187.739:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.9.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab417faeb9 code=0x7ffc0000 [ 358.306784][ T29] audit: type=1326 audit(1769695187.739:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.9.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab417faeb9 code=0x7ffc0000 [ 358.330376][ T29] audit: type=1326 audit(1769695187.739:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.9.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab417faeb9 code=0x7ffc0000 [ 358.354040][ T29] audit: type=1326 audit(1769695187.739:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.9.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab417faeb9 code=0x7ffc0000 [ 358.420124][T17174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.431992][ T29] audit: type=1326 audit(1769695187.739:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.9.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fab417faeb9 code=0x7ffc0000 [ 358.455448][ T29] audit: type=1326 audit(1769695187.749:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.9.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab417faeb9 code=0x7ffc0000 [ 358.479051][ T29] audit: type=1326 audit(1769695187.749:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.9.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab417faeb9 code=0x7ffc0000 [ 358.502734][ T29] audit: type=1326 audit(1769695187.829:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.9.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fab417faeb9 code=0x7ffc0000 [ 358.526344][ T29] audit: type=1326 audit(1769695187.829:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.9.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab417faeb9 code=0x7ffc0000 [ 358.550014][ T29] audit: type=1326 audit(1769695187.829:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.9.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab417faeb9 code=0x7ffc0000 [ 358.774587][T18038] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4192'. [ 358.889917][T18038] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4192'. [ 358.947477][T18049] loop4: detected capacity change from 0 to 1024 [ 358.993036][T18049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 359.013303][T18049] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.091915][T18046] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4196: bg 0: block 112: padding at end of block bitmap is not set [ 359.157043][T18046] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 54 with error 117 [ 359.169593][T18046] EXT4-fs (loop4): This should not happen!! Data will be lost [ 359.169593][T18046] [ 359.230254][T18064] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4199'. [ 359.275834][T17174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 359.385103][T18071] loop7: detected capacity change from 0 to 764 [ 359.403606][T18071] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 359.462007][T18077] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4206'. [ 359.567540][T18087] bond0 (unregistering): Released all slaves [ 359.873861][T18092] syz.7.4211 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 359.888106][T18092] CPU: 1 UID: 0 PID: 18092 Comm: syz.7.4211 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 359.888154][T18092] Tainted: [W]=WARN [ 359.888164][T18092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.888215][T18092] Call Trace: [ 359.888224][T18092] [ 359.888234][T18092] __dump_stack+0x1d/0x30 [ 359.888266][T18092] dump_stack_lvl+0x95/0xd0 [ 359.888306][T18092] dump_stack+0x15/0x1b [ 359.888335][T18092] dump_header+0x80/0x240 [ 359.888362][T18092] oom_kill_process+0x295/0x350 [ 359.888418][T18092] out_of_memory+0x97d/0xb80 [ 359.888454][T18092] try_charge_memcg+0x62e/0xa10 [ 359.888549][T18092] obj_cgroup_charge_pages+0x23/0xc0 [ 359.888596][T18092] __memcg_kmem_charge_page+0x9e/0x170 [ 359.888636][T18092] __alloc_frozen_pages_noprof+0x18a/0x350 [ 359.888761][T18092] alloc_pages_mpol+0xb3/0x260 [ 359.888807][T18092] alloc_pages_noprof+0x8f/0x130 [ 359.888917][T18092] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 359.888975][T18092] __kvmalloc_node_noprof+0x471/0x680 [ 359.889082][T18092] ? ip_set_alloc+0x24/0x30 [ 359.889126][T18092] ? ip_set_alloc+0x24/0x30 [ 359.889163][T18092] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 359.889267][T18092] ip_set_alloc+0x24/0x30 [ 359.889308][T18092] hash_netiface_create+0x282/0x740 [ 359.889413][T18092] ? __pfx_hash_netiface_create+0x10/0x10 [ 359.889459][T18092] ip_set_create+0x3cf/0x970 [ 359.889548][T18092] ? __nla_parse+0x40/0x60 [ 359.889663][T18092] nfnetlink_rcv_msg+0x509/0x5d0 [ 359.889740][T18092] netlink_rcv_skb+0x123/0x220 [ 359.889786][T18092] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 359.889839][T18092] nfnetlink_rcv+0x167/0x1720 [ 359.889891][T18092] ? __kfree_skb+0x109/0x150 [ 359.889936][T18092] ? nlmon_xmit+0x4f/0x60 [ 359.890068][T18092] ? consume_skb+0x49/0x140 [ 359.890112][T18092] ? nlmon_xmit+0x4f/0x60 [ 359.890173][T18092] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 359.890228][T18092] ? __dev_queue_xmit+0x139a/0x1f20 [ 359.890284][T18092] ? __dev_queue_xmit+0x148/0x1f20 [ 359.890336][T18092] ? ref_tracker_free+0x37d/0x3e0 [ 359.890383][T18092] ? __netlink_deliver_tap+0x4dc/0x500 [ 359.890475][T18092] netlink_unicast+0x5c0/0x690 [ 359.890619][T18092] netlink_sendmsg+0x5c8/0x6f0 [ 359.890645][T18092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.890673][T18092] ____sys_sendmsg+0x5af/0x600 [ 359.890705][T18092] ___sys_sendmsg+0x195/0x1e0 [ 359.890752][T18092] __x64_sys_sendmsg+0xd4/0x160 [ 359.890902][T18092] x64_sys_call+0x17ba/0x3000 [ 359.890940][T18092] do_syscall_64+0xc0/0x2a0 [ 359.890973][T18092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.891054][T18092] RIP: 0033:0x7f90a53aaeb9 [ 359.891150][T18092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.891178][T18092] RSP: 002b:00007f90a3e07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.891207][T18092] RAX: ffffffffffffffda RBX: 00007f90a5625fa0 RCX: 00007f90a53aaeb9 [ 359.891229][T18092] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 359.891291][T18092] RBP: 00007f90a5418c1f R08: 0000000000000000 R09: 0000000000000000 [ 359.891362][T18092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.891456][T18092] R13: 00007f90a5626038 R14: 00007f90a5625fa0 R15: 00007ffc96369998 [ 359.891485][T18092] [ 359.891492][T18092] memory: usage 307200kB, limit 307200kB, failcnt 774 [ 360.223585][T18092] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0 [ 360.231552][T18092] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 360.238891][T18092] Memory cgroup stats for /syz7: [ 360.254411][T18092] cache 0 [ 360.262365][T18092] rss 4096 [ 360.265518][T18092] shmem 0 [ 360.268474][T18092] mapped_file 0 [ 360.271954][T18092] dirty 0 [ 360.274972][T18092] writeback 0 [ 360.278279][T18092] workingset_refault_anon 275 [ 360.283000][T18092] workingset_refault_file 1 [ 360.287574][T18092] swap 372736 [ 360.290884][T18092] swapcached 12288 [ 360.294650][T18092] pgpgin 77804 [ 360.298035][T18092] pgpgout 77799 [ 360.301508][T18092] pgfault 112101 [ 360.305125][T18092] pgmajfault 132 [ 360.308695][T18092] inactive_anon 8192 [ 360.312617][T18092] active_anon 4096 [ 360.316398][T18092] inactive_file 8192 [ 360.320321][T18092] active_file 0 [ 360.323808][T18092] unevictable 0 [ 360.327329][T18092] hierarchical_memory_limit 314572800 [ 360.332730][T18092] hierarchical_memsw_limit 9223372036854771712 [ 360.338969][T18092] total_cache 0 [ 360.342457][T18092] total_rss 4096 [ 360.346074][T18092] total_shmem 0 [ 360.349572][T18092] total_mapped_file 0 [ 360.353580][T18092] total_dirty 0 [ 360.357145][T18092] total_writeback 0 [ 360.360963][T18092] total_workingset_refault_anon 275 [ 360.366263][T18092] total_workingset_refault_file 1 [ 360.371477][T18092] total_swap 372736 [ 360.375397][T18092] total_swapcached 12288 [ 360.379740][T18092] total_pgpgin 77804 [ 360.383658][T18092] total_pgpgout 77799 [ 360.387835][T18092] total_pgfault 112101 [ 360.391921][T18092] total_pgmajfault 132 [ 360.396132][T18092] total_inactive_anon 8192 [ 360.400581][T18092] total_active_anon 4096 [ 360.404877][T18092] total_inactive_file 8192 [ 360.409323][T18092] total_active_file 0 [ 360.413323][T18092] total_unevictable 0 [ 360.417405][T18092] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4211,pid=18091,uid=0 [ 360.432349][T18092] Memory cgroup out of memory: Killed process 18091 (syz.7.4211) total-vm:94000kB, anon-rss:1332kB, file-rss:22028kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 360.674886][T18106] ip6_vti0 speed is unknown, defaulting to 1000 [ 360.686621][T18127] loop5: detected capacity change from 0 to 8192 [ 360.785371][T18136] batadv_slave_1: entered promiscuous mode [ 361.036342][T18139] batadv_slave_1: left promiscuous mode [ 361.260783][T18155] loop8: detected capacity change from 0 to 8192 [ 361.284672][T18155] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.305654][T18155] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 361.314518][T18155] FAT-fs (loop8): Filesystem has been set read-only [ 361.335519][T18155] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 361.365765][T18155] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 361.375813][T18155] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 361.407806][T18155] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 361.434283][T18155] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 361.472493][T18155] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 361.484469][T18155] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 361.493302][T18155] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 361.503058][T18155] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 361.900445][T18168] __nla_validate_parse: 7 callbacks suppressed [ 361.900461][T18168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4234'. [ 362.050580][T16840] udevd[16840]: symlink '../../loop5' '/dev/disk/by-diskseq/1519.tmp-b7:5' failed: Read-only file system [ 362.086417][T17451] udevd[17451]: symlink '../../loop8' '/dev/disk/by-diskseq/1520.tmp-b7:8' failed: Read-only file system [ 362.098411][T16640] udevd[16640]: symlink '../../loop4' '/dev/disk/by-diskseq/1515.tmp-b7:4' failed: Read-only file system [ 362.114809][T16635] udevd[16635]: symlink '../../loop7' '/dev/disk/by-diskseq/1517.tmp-b7:7' failed: Read-only file system [ 362.141656][T18182] loop7: detected capacity change from 0 to 512 [ 362.150612][T16840] udevd[16840]: symlink '../../loop8' '/dev/disk/by-diskseq/1520.tmp-b7:8' failed: Read-only file system [ 362.161249][T18171] FAULT_INJECTION: forcing a failure. [ 362.161249][T18171] name failslab, interval 1, probability 0, space 0, times 0 [ 362.174582][T18171] CPU: 0 UID: 0 PID: 18171 Comm: syz.4.4236 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 362.174625][T18171] Tainted: [W]=WARN [ 362.174635][T18171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.174653][T18171] Call Trace: [ 362.174662][T18171] [ 362.174673][T18171] __dump_stack+0x1d/0x30 [ 362.174887][T18171] dump_stack_lvl+0x95/0xd0 [ 362.174955][T18171] dump_stack+0x15/0x1b [ 362.174983][T18171] should_fail_ex+0x263/0x280 [ 362.175027][T18171] should_failslab+0x8c/0xb0 [ 362.175060][T18171] kmem_cache_alloc_noprof+0x68/0x490 [ 362.175137][T18171] ? skb_clone+0x151/0x1f0 [ 362.175164][T18171] skb_clone+0x151/0x1f0 [ 362.175230][T18171] __netlink_deliver_tap+0x2c9/0x500 [ 362.175313][T18171] netlink_unicast+0x66b/0x690 [ 362.175386][T18171] netlink_sendmsg+0x5c8/0x6f0 [ 362.175435][T18171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.175462][T18171] ____sys_sendmsg+0x5af/0x600 [ 362.175493][T18171] ___sys_sendmsg+0x195/0x1e0 [ 362.175544][T18171] __x64_sys_sendmsg+0xd4/0x160 [ 362.175569][T18171] x64_sys_call+0x17ba/0x3000 [ 362.175604][T18171] do_syscall_64+0xc0/0x2a0 [ 362.175644][T18171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.175746][T18171] RIP: 0033:0x7f13a3edaeb9 [ 362.175766][T18171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.175818][T18171] RSP: 002b:00007f13a2937028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.175839][T18171] RAX: ffffffffffffffda RBX: 00007f13a4155fa0 RCX: 00007f13a3edaeb9 [ 362.175857][T18171] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 362.175885][T18171] RBP: 00007f13a2937090 R08: 0000000000000000 R09: 0000000000000000 [ 362.175914][T18171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.175931][T18171] R13: 00007f13a4156038 R14: 00007f13a4155fa0 R15: 00007ffca5525728 [ 362.175959][T18171] [ 362.381026][T17451] udevd[17451]: symlink '../../loop7' '/dev/disk/by-diskseq/1517.tmp-b7:7' failed: Read-only file system [ 362.405303][T18184] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4237'. [ 362.416061][T16840] udevd[16840]: symlink '../../loop8' '/dev/disk/by-diskseq/1521.tmp-b7:8' failed: Read-only file system [ 362.419452][T18182] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 362.435490][T18182] EXT4-fs (loop7): orphan cleanup on readonly fs [ 362.442900][T18182] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.4239: Failed to acquire dquot type 1 [ 362.448709][T17451] udevd[17451]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 362.467216][T17451] udevd[17451]: symlink '../../loop7' '/dev/disk/by-uuid/00000000-0000-0000-0000-0000002a0000.tmp-b7:7' failed: Read-only file system [ 362.471185][T16640] udevd[16640]: symlink '../../loop5' '/dev/disk/by-diskseq/1519.tmp-b7:5' failed: Read-only file system [ 362.512974][T18182] EXT4-fs (loop7): Remounting filesystem read-only [ 362.541242][T18182] EXT4-fs (loop7): 1 truncate cleaned up [ 362.544595][ T57] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 362.557508][ T57] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 362.611111][ T57] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 362.677201][T18182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 362.840360][T12218] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 362.918388][T18202] syz.8.4245 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 362.932689][T18202] CPU: 1 UID: 0 PID: 18202 Comm: syz.8.4245 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 362.932747][T18202] Tainted: [W]=WARN [ 362.932754][T18202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.932772][T18202] Call Trace: [ 362.932781][T18202] [ 362.932791][T18202] __dump_stack+0x1d/0x30 [ 362.932831][T18202] dump_stack_lvl+0x95/0xd0 [ 362.932862][T18202] dump_stack+0x15/0x1b [ 362.932887][T18202] dump_header+0x80/0x240 [ 362.932922][T18202] oom_kill_process+0x295/0x350 [ 362.932958][T18202] out_of_memory+0x97d/0xb80 [ 362.933006][T18202] try_charge_memcg+0x62e/0xa10 [ 362.933035][T18202] obj_cgroup_charge_pages+0x23/0xc0 [ 362.933079][T18202] __memcg_kmem_charge_page+0x9e/0x170 [ 362.933187][T18202] __alloc_frozen_pages_noprof+0x18a/0x350 [ 362.933225][T18202] alloc_pages_mpol+0xb3/0x260 [ 362.933344][T18202] alloc_pages_noprof+0x8f/0x130 [ 362.933388][T18202] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 362.933433][T18202] __kvmalloc_node_noprof+0x471/0x680 [ 362.933527][T18202] ? ip_set_alloc+0x24/0x30 [ 362.933567][T18202] ? ip_set_alloc+0x24/0x30 [ 362.933607][T18202] ? __slab_alloc+0x25/0x50 [ 362.933642][T18202] ip_set_alloc+0x24/0x30 [ 362.933726][T18202] hash_netiface_create+0x282/0x740 [ 362.933769][T18202] ? __pfx_hash_netiface_create+0x10/0x10 [ 362.933810][T18202] ip_set_create+0x3cf/0x970 [ 362.933904][T18202] ? __nla_parse+0x40/0x60 [ 362.933949][T18202] nfnetlink_rcv_msg+0x509/0x5d0 [ 362.934013][T18202] netlink_rcv_skb+0x123/0x220 [ 362.934090][T18202] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 362.934173][T18202] nfnetlink_rcv+0x167/0x1720 [ 362.934231][T18202] ? __kfree_skb+0x109/0x150 [ 362.934416][T18202] ? nlmon_xmit+0x4f/0x60 [ 362.934520][T18202] ? consume_skb+0x49/0x140 [ 362.934558][T18202] ? nlmon_xmit+0x4f/0x60 [ 362.934605][T18202] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 362.934730][T18202] ? __dev_queue_xmit+0x139a/0x1f20 [ 362.934803][T18202] ? __dev_queue_xmit+0x148/0x1f20 [ 362.934854][T18202] ? ref_tracker_free+0x37d/0x3e0 [ 362.934928][T18202] ? __netlink_deliver_tap+0x4dc/0x500 [ 362.935023][T18202] netlink_unicast+0x5c0/0x690 [ 362.935071][T18202] netlink_sendmsg+0x5c8/0x6f0 [ 362.935155][T18202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.935184][T18202] ____sys_sendmsg+0x5af/0x600 [ 362.935219][T18202] ___sys_sendmsg+0x195/0x1e0 [ 362.935263][T18202] __x64_sys_sendmsg+0xd4/0x160 [ 362.935362][T18202] x64_sys_call+0x17ba/0x3000 [ 362.935476][T18202] do_syscall_64+0xc0/0x2a0 [ 362.935522][T18202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.935554][T18202] RIP: 0033:0x7fe5901aaeb9 [ 362.935577][T18202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.935661][T18202] RSP: 002b:00007fe58ec07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.935690][T18202] RAX: ffffffffffffffda RBX: 00007fe590425fa0 RCX: 00007fe5901aaeb9 [ 362.935711][T18202] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 362.935730][T18202] RBP: 00007fe590218c1f R08: 0000000000000000 R09: 0000000000000000 [ 362.935749][T18202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.935768][T18202] R13: 00007fe590426038 R14: 00007fe590425fa0 R15: 00007ffceea5ce38 [ 362.935821][T18202] [ 363.258347][T18202] memory: usage 307200kB, limit 307200kB, failcnt 660 [ 363.265399][T18202] memory+swap: usage 307544kB, limit 9007199254740988kB, failcnt 0 [ 363.273330][T18202] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 363.280691][T18202] Memory cgroup stats for /syz8: [ 363.304712][T18202] cache 0 [ 363.312722][T18202] rss 4096 [ 363.315853][T18202] shmem 0 [ 363.318824][T18202] mapped_file 0 [ 363.322304][T18202] dirty 0 [ 363.325291][T18202] writeback 0 [ 363.328598][T18202] workingset_refault_anon 81 [ 363.333202][T18202] workingset_refault_file 1 [ 363.337918][T18202] swap 344064 [ 363.341216][T18202] swapcached 36864 [ 363.345010][T18202] pgpgin 81061 [ 363.348440][T18202] pgpgout 81049 [ 363.351918][T18202] pgfault 84172 [ 363.355505][T18202] pgmajfault 109 [ 363.359118][T18202] inactive_anon 0 [ 363.362771][T18202] active_anon 36864 [ 363.366634][T18202] inactive_file 0 [ 363.370400][T18202] active_file 12288 [ 363.374311][T18202] unevictable 0 [ 363.377797][T18202] hierarchical_memory_limit 314572800 [ 363.383291][T18202] hierarchical_memsw_limit 9223372036854771712 [ 363.389617][T18202] total_cache 0 [ 363.393104][T18202] total_rss 4096 [ 363.396755][T18202] total_shmem 0 [ 363.400240][T18202] total_mapped_file 0 [ 363.404292][T18202] total_dirty 0 [ 363.407775][T18202] total_writeback 0 [ 363.411598][T18202] total_workingset_refault_anon 81 [ 363.416805][T18202] total_workingset_refault_file 1 [ 363.421901][T18202] total_swap 344064 [ 363.425834][T18202] total_swapcached 36864 [ 363.430103][T18202] total_pgpgin 81061 [ 363.434014][T18202] total_pgpgout 81049 [ 363.438058][T18202] total_pgfault 84172 [ 363.442070][T18202] total_pgmajfault 109 [ 363.446198][T18202] total_inactive_anon 0 [ 363.450369][T18202] total_active_anon 36864 [ 363.454744][T18202] total_inactive_file 0 [ 363.458922][T18202] total_active_file 12288 [ 363.463271][T18202] total_unevictable 0 [ 363.467356][T18202] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4245,pid=18201,uid=0 [ 363.482143][T18202] Memory cgroup out of memory: Killed process 18201 (syz.8.4245) total-vm:94000kB, anon-rss:1204kB, file-rss:21968kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 363.766974][T18200] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4244'. [ 364.390689][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 364.390710][ T29] audit: type=1326 audit(1769695193.849:6359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.8.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 364.426960][ T29] audit: type=1326 audit(1769695193.879:6360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.8.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 364.450507][ T29] audit: type=1326 audit(1769695193.879:6361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.8.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 364.474081][ T29] audit: type=1326 audit(1769695193.879:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.8.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 364.535208][ T29] audit: type=1326 audit(1769695193.979:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18231 comm="syz.8.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 364.558857][ T29] audit: type=1326 audit(1769695193.979:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18231 comm="syz.8.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 364.582526][ T29] audit: type=1326 audit(1769695193.979:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18231 comm="syz.8.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 364.606149][ T29] audit: type=1326 audit(1769695193.979:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18231 comm="syz.8.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 364.629687][ T29] audit: type=1326 audit(1769695193.979:6367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18231 comm="syz.8.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 364.653461][ T29] audit: type=1326 audit(1769695193.979:6368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18231 comm="syz.8.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5901aaeb9 code=0x7ffc0000 [ 364.670324][T18232] loop8: detected capacity change from 0 to 1756 [ 364.744716][T18236] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4255'. [ 364.918345][T18244] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4258'. [ 364.948988][T18248] IPv6: addrconf: prefix option has invalid lifetime [ 365.323003][T18271] netlink: 'syz.9.4269': attribute type 1 has an invalid length. [ 365.380961][T18271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.683759][T18249] syz.4.4261 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 365.694926][T18249] CPU: 1 UID: 0 PID: 18249 Comm: syz.4.4261 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 365.694970][T18249] Tainted: [W]=WARN [ 365.694985][T18249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.694998][T18249] Call Trace: [ 365.695004][T18249] [ 365.695011][T18249] __dump_stack+0x1d/0x30 [ 365.695039][T18249] dump_stack_lvl+0x95/0xd0 [ 365.695068][T18249] dump_stack+0x15/0x1b [ 365.695116][T18249] dump_header+0x80/0x240 [ 365.695144][T18249] oom_kill_process+0x295/0x350 [ 365.695173][T18249] out_of_memory+0x97d/0xb80 [ 365.695201][T18249] try_charge_memcg+0x62e/0xa10 [ 365.695286][T18249] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 365.695338][T18249] __read_swap_cache_async+0x17b/0x2d0 [ 365.695467][T18249] swap_cluster_readahead+0x262/0x3c0 [ 365.695562][T18249] swapin_readahead+0xde/0x840 [ 365.695682][T18249] ? __perf_event_task_sched_in+0xa65/0xad0 [ 365.695719][T18249] ? __rcu_read_unlock+0x4e/0x70 [ 365.695795][T18249] ? swap_cache_get_folio+0x26f/0x280 [ 365.695828][T18249] do_swap_page+0x59b/0x2a50 [ 365.695923][T18249] ? finish_task_switch+0x79/0x280 [ 365.695962][T18249] ? __schedule+0x82d/0xc90 [ 365.695987][T18249] ? __rcu_read_lock+0x36/0x50 [ 365.696025][T18249] ? __pfx_default_wake_function+0x10/0x10 [ 365.696099][T18249] handle_mm_fault+0xb40/0x3030 [ 365.696145][T18249] ? vma_start_read+0x1c7/0x2c0 [ 365.696179][T18249] do_user_addr_fault+0x62f/0x1050 [ 365.696221][T18249] exc_page_fault+0x62/0xa0 [ 365.696253][T18249] asm_exc_page_fault+0x26/0x30 [ 365.696274][T18249] RIP: 0033:0x7f13a3e960b8 [ 365.696291][T18249] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 365.696334][T18249] RSP: 002b:00007ffca5525810 EFLAGS: 00010246 [ 365.696357][T18249] RAX: 0000000000000000 RBX: 000055557ce26500 RCX: 00007f13a3e9b78e [ 365.696377][T18249] RDX: 00007ffca5525860 RSI: 0000000000000000 RDI: 0000000000000000 [ 365.696395][T18249] RBP: 00007f13a4157da0 R08: 0000000000000000 R09: 0000000000000000 [ 365.696411][T18249] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000594df [ 365.696424][T18249] R13: 00007f13a4155fac R14: 000000000005925e R15: 00007ffca5525990 [ 365.696514][T18249] [ 365.696523][T18249] memory: usage 307200kB, limit 307200kB, failcnt 857 [ 365.928597][T18249] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 365.936733][T18249] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 365.944273][T18249] Memory cgroup stats for /syz4: [ 365.957072][T18249] cache 0 [ 365.965112][T18249] rss 0 [ 365.967915][T18249] shmem 0 [ 365.970868][T18249] mapped_file 0 [ 365.974418][T18249] dirty 0 [ 365.977371][T18249] writeback 4096 [ 365.980943][T18249] workingset_refault_anon 344 [ 365.985738][T18249] workingset_refault_file 1 [ 365.990292][T18249] swap 184320 [ 365.993567][T18249] swapcached 4096 [ 365.997221][T18249] pgpgin 40119 [ 366.000610][T18249] pgpgout 40117 [ 366.004092][T18249] pgfault 53991 [ 366.007605][T18249] pgmajfault 168 [ 366.011175][T18249] inactive_anon 4096 [ 366.015184][T18249] active_anon 0 [ 366.018148][T18289] loop9: detected capacity change from 0 to 256 [ 366.018663][T18249] inactive_file 4096 [ 366.018677][T18249] active_file 0 [ 366.032354][T18249] unevictable 0 [ 366.035913][T18249] hierarchical_memory_limit 314572800 [ 366.041310][T18249] hierarchical_memsw_limit 9223372036854771712 [ 366.047530][T18249] total_cache 0 [ 366.051030][T18249] total_rss 0 [ 366.054354][T18249] total_shmem 0 [ 366.057836][T18249] total_mapped_file 0 [ 366.061839][T18249] total_dirty 0 [ 366.065364][T18249] total_writeback 4096 [ 366.069463][T18249] total_workingset_refault_anon 344 [ 366.074701][T18249] total_workingset_refault_file 1 [ 366.079802][T18249] total_swap 184320 [ 366.083636][T18249] total_swapcached 4096 [ 366.087833][T18249] total_pgpgin 40119 [ 366.091836][T18249] total_pgpgout 40117 [ 366.095927][T18249] total_pgfault 53991 [ 366.099938][T18249] total_pgmajfault 168 [ 366.104019][T18249] total_inactive_anon 4096 [ 366.108476][T18249] total_active_anon 0 [ 366.112471][T18249] total_inactive_file 4096 [ 366.116920][T18249] total_active_file 0 [ 366.121007][T18249] total_unevictable 0 [ 366.125123][T18249] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4261,pid=18249,uid=0 [ 366.139894][T18249] Memory cgroup out of memory: Killed process 18249 (syz.4.4261) total-vm:94000kB, anon-rss:1200kB, file-rss:22028kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 366.176170][T18293] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4275'. [ 366.223593][T18292] loop8: detected capacity change from 0 to 8192 [ 366.246472][T18292] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 366.260966][T18292] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 366.269874][T18292] FAT-fs (loop8): Filesystem has been set read-only [ 366.330703][T18292] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 366.404229][T18292] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 366.454224][T18292] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 366.465916][T18315] netlink: 444 bytes leftover after parsing attributes in process `syz.5.4284'. [ 366.485400][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4284'. [ 366.493856][T18292] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 366.518351][T18292] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 366.544217][T18292] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 366.594240][T18292] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 366.608616][T18292] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 366.628325][T18322] loop7: detected capacity change from 0 to 256 [ 366.639735][T18292] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 366.655539][T18323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4288'. [ 366.666489][T18322] FAT-fs (loop7): Directory bread(block 64) failed [ 366.670801][T18323] team0: Device vlan2 is already an upper device of the team interface [ 366.692559][T18322] FAT-fs (loop7): Directory bread(block 65) failed [ 366.714220][T18322] FAT-fs (loop7): Directory bread(block 66) failed [ 366.733291][T18322] FAT-fs (loop7): Directory bread(block 67) failed [ 366.756081][T18322] FAT-fs (loop7): Directory bread(block 68) failed [ 366.774215][T18322] FAT-fs (loop7): Directory bread(block 69) failed [ 366.780893][T18322] FAT-fs (loop7): Directory bread(block 70) failed [ 366.796531][T18322] FAT-fs (loop7): Directory bread(block 71) failed [ 366.809791][T18322] FAT-fs (loop7): Directory bread(block 72) failed [ 366.844233][T18322] FAT-fs (loop7): Directory bread(block 73) failed [ 366.955798][T18333] loop7: detected capacity change from 0 to 764 [ 366.976329][T18333] iso9660: Bad value for 'uid' [ 366.981249][T18333] iso9660: Bad value for 'uid' [ 367.007236][T18333] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4291'. [ 367.058669][T17451] udevd[17451]: symlink '../../loop8' '/dev/disk/by-diskseq/1528.tmp-b7:8' failed: Read-only file system [ 367.079118][T16840] udevd[16840]: symlink '../../loop7' '/dev/disk/by-diskseq/1531.tmp-b7:7' failed: Read-only file system [ 367.116204][T17451] udevd[17451]: symlink '../../loop8' '/dev/disk/by-diskseq/1532.tmp-b7:8' failed: Read-only file system [ 367.136123][T16840] udevd[16840]: symlink '../../loop7' '/dev/disk/by-diskseq/1531.tmp-b7:7' failed: Read-only file system [ 367.184861][T16840] udevd[16840]: symlink '../../loop7' '/dev/disk/by-diskseq/1531.tmp-b7:7' failed: Read-only file system [ 367.221456][T16840] udevd[16840]: symlink '../../loop5' '/dev/disk/by-diskseq/1519.tmp-b7:5' failed: Read-only file system [ 367.260237][T17451] udevd[17451]: symlink '../../loop8' '/dev/disk/by-diskseq/1532.tmp-b7:8' failed: Read-only file system [ 367.272169][T18331] loop4: detected capacity change from 0 to 1024 [ 367.284678][T18331] EXT4-fs: Ignoring removed oldalloc option [ 367.307894][T16635] udevd[16635]: symlink '../../loop7' '/dev/disk/by-diskseq/1533.tmp-b7:7' failed: Read-only file system [ 367.319584][T18331] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 367.339159][T16640] udevd[16640]: symlink '../../loop4' '/dev/disk/by-diskseq/1534.tmp-b7:4' failed: Read-only file system [ 367.356017][T18331] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 367.363022][T16640] udevd[16640]: symlink '../../loop4' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:4' failed: Read-only file system [ 367.416514][T18349] netlink: 444 bytes leftover after parsing attributes in process `syz.8.4296'. [ 367.425677][T18348] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4297'. [ 367.435313][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4296'. [ 367.445270][T18331] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4290: bad orphan inode 11 [ 367.464499][T18331] ext4_test_bit(bit=10, block=4) = 1 [ 367.469846][T18331] is_bad_inode(inode)=0 [ 367.474028][T18331] NEXT_ORPHAN(inode)=3254779904 [ 367.478957][T18331] max_ino=32 [ 367.482176][T18331] i_nlink=0 [ 367.497301][T18331] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.4290: lblock 2 mapped to illegal pblock 2 (length 1) [ 367.524787][T18331] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.4290: lblock 0 mapped to illegal pblock 48 (length 1) [ 367.539236][T18331] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4290: Failed to acquire dquot type 0 [ 367.550801][T18331] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 367.560453][T18331] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.4290: mark_inode_dirty error [ 367.571935][T18331] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 367.583575][T18331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.625182][T18361] loop8: detected capacity change from 0 to 512 [ 367.631953][T18361] EXT4-fs: Ignoring removed bh option [ 367.637443][T18361] EXT4-fs: Ignoring removed mblk_io_submit option [ 367.647420][T18355] loop5: detected capacity change from 0 to 512 [ 367.655515][T18361] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 367.668452][T18355] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4299: bg 0: block 248: padding at end of block bitmap is not set [ 367.689236][T18361] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 367.697514][T18361] EXT4-fs (loop8): orphan cleanup on readonly fs [ 367.715800][T18355] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4299: Failed to acquire dquot type 1 [ 367.727590][T18361] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4300: Failed to acquire dquot type 1 [ 367.728329][T17174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.749024][T17174] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 367.750843][T18355] EXT4-fs (loop5): 1 truncate cleaned up [ 367.762440][T17174] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 367.777424][T17174] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 367.784850][T18361] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4300: Invalid block bitmap block 0 in block_group 0 [ 367.812697][T18355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.826809][T18361] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4300: Invalid block bitmap block 0 in block_group 0 [ 367.854289][T18355] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.854968][T18366] loop4: detected capacity change from 0 to 256 [ 367.871592][T18361] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4300: Invalid block bitmap block 0 in block_group 0 [ 367.892413][T18366] FAT-fs (loop4): Directory bread(block 64) failed [ 367.899239][T18366] FAT-fs (loop4): Directory bread(block 65) failed [ 367.907044][T18366] FAT-fs (loop4): Directory bread(block 66) failed [ 367.915725][T18366] FAT-fs (loop4): Directory bread(block 67) failed [ 367.922539][T18366] FAT-fs (loop4): Directory bread(block 68) failed [ 367.922540][T18361] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4300: Failed to acquire dquot type 1 [ 367.941283][T18366] FAT-fs (loop4): Directory bread(block 69) failed [ 367.948042][T18366] FAT-fs (loop4): Directory bread(block 70) failed [ 367.950332][T18361] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4300: Failed to acquire dquot type 1 [ 367.955354][T18366] FAT-fs (loop4): Directory bread(block 71) failed [ 367.972543][T18366] FAT-fs (loop4): Directory bread(block 72) failed [ 367.977579][T18361] EXT4-fs (loop8): 1 orphan inode deleted [ 367.979725][T18366] FAT-fs (loop4): Directory bread(block 73) failed [ 367.995294][T18361] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 368.012593][T18367] loop9: detected capacity change from 0 to 8192 [ 368.059056][T16544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.071773][T13429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.081152][ T3844] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 1 [ 368.201147][T18369] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 368.238979][T18369] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 368.248002][T18369] FAT-fs (loop4): Filesystem has been set read-only [ 368.257420][T18380] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4306'. [ 368.270603][T18369] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 368.279926][T18369] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 368.292693][T18369] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 368.302614][T18369] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 368.320766][T18369] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 368.329699][T18369] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 368.339056][T18369] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 368.347929][T18369] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 368.359005][T18369] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 368.405713][T18382] netlink: 'syz.7.4308': attribute type 4 has an invalid length. [ 368.472856][T18388] netlink: 444 bytes leftover after parsing attributes in process `syz.8.4309'. [ 368.482183][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4309'. [ 369.267240][T18415] EXT4-fs: inline encryption not supported [ 369.279050][T18415] EXT4-fs: Ignoring removed bh option [ 369.286789][T18415] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 369.298252][T18415] EXT4-fs (loop4): orphan cleanup on readonly fs [ 369.304971][T18415] EXT4-fs error (device loop4): ext4_quota_enable:7177: comm syz.4.4319: inode #2304: comm syz.4.4319: iget: illegal inode # [ 369.320356][T18415] EXT4-fs (loop4): Remounting filesystem read-only [ 369.326988][T18415] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 369.342966][T18415] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 369.350213][T18415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 369.379252][T17174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.391410][T18419] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4320'. [ 369.417371][T18419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45852 sclass=netlink_route_socket pid=18419 comm=syz.8.4320 [ 369.433348][T18424] EXT4-fs: Ignoring removed orlov option [ 369.439247][T18424] EXT4-fs: Ignoring removed mblk_io_submit option [ 369.456824][T18419] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4320'. [ 369.474628][T18424] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 369.481686][T18426] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 369.499560][T18419] bond1: option broadcast_neighbor: invalid value (30) [ 369.513668][T18419] bond1 (unregistering): Released all slaves [ 369.530992][T18424] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 369.611253][T18432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.626353][T18432] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.642048][T18432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4325'. [ 369.699584][T18436] set_capacity_and_notify: 7 callbacks suppressed [ 369.699605][T18436] loop7: detected capacity change from 0 to 8192 [ 369.706094][T18436] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 369.707536][T18436] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 369.707629][T18436] FAT-fs (loop7): Filesystem has been set read-only [ 369.707653][T18436] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 369.707677][T18436] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 369.707706][T18436] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 369.707800][T18436] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 369.707889][T18436] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 369.707918][T18436] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 369.707939][T18436] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 369.707960][T18436] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 369.708133][T18436] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 369.725400][T17174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.951044][T18445] loop5: detected capacity change from 0 to 2048 [ 370.015414][T16840] loop5: p2 < > p4 [ 370.019718][T16840] loop5: partition table partially beyond EOD, truncated [ 370.052661][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 370.052679][ T29] audit: type=1400 audit(2000000003.510:6432): avc: denied { bind } for pid=18450 comm="syz.9.4331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 370.068645][T18448] xt_CT: No such helper "pptp" [ 370.080485][T16840] loop5: p2 start 4278190080 is beyond EOD, truncated [ 370.089855][T16840] loop5: p4 size 8192 extends beyond EOD, truncated [ 370.165781][T18445] loop5: p2 < > p4 [ 370.169709][T18445] loop5: partition table partially beyond EOD, truncated [ 370.179422][T18445] loop5: p2 start 4278190080 is beyond EOD, truncated [ 370.186287][T18445] loop5: p4 size 8192 extends beyond EOD, truncated [ 370.207514][ T3002] loop5: p2 < > p4 [ 370.211484][ T3002] loop5: partition table partially beyond EOD, truncated [ 370.220054][ T3002] loop5: p2 start 4278190080 is beyond EOD, truncated [ 370.226951][ T3002] loop5: p4 size 8192 extends beyond EOD, truncated [ 370.286051][T18456] loop4: detected capacity change from 0 to 1764 [ 370.317830][T18456] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 370.480961][ T3002] loop5: p2 < > p4 [ 370.481059][T18471] serio: Serial port ttyS3 [ 370.484906][ T3002] loop5: partition table partially beyond EOD, truncated [ 370.505371][ T3002] loop5: p2 start 4278190080 is beyond EOD, truncated [ 370.512216][ T3002] loop5: p4 size 8192 extends beyond EOD, truncated [ 370.585549][T18475] loop5: detected capacity change from 0 to 256 [ 370.605098][T18475] vfat: Unknown parameter 'ioc`arsetÖkoi8-ru' [ 370.627608][ T29] audit: type=1326 audit(2000000004.090:6433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18478 comm="syz.9.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab417faeb9 code=0x7ffc0000 [ 370.651391][T18475] xt_hashlimit: size too large, truncated to 1048576 [ 370.831988][T18479] loop9: detected capacity change from 0 to 8192 [ 370.857382][ T29] audit: type=1326 audit(2000000004.120:6434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18478 comm="syz.9.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fab417faeb9 code=0x7ffc0000 [ 370.881206][ T29] audit: type=1326 audit(2000000004.120:6435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18478 comm="syz.9.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fab417fac22 code=0x7ffc0000 [ 370.904673][ T29] audit: type=1326 audit(2000000004.260:6436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18478 comm="syz.9.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab417bb78e code=0x7ffc0000 [ 370.928096][ T29] audit: type=1326 audit(2000000004.290:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18478 comm="syz.9.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fab417face7 code=0x7ffc0000 [ 370.951527][ T29] audit: type=1326 audit(2000000004.290:6438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18478 comm="syz.9.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab417bb78e code=0x7ffc0000 [ 370.975330][ T29] audit: type=1326 audit(2000000004.290:6439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18478 comm="syz.9.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab417fab4b code=0x7ffc0000 [ 370.998840][ T29] audit: type=1326 audit(2000000004.310:6440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18478 comm="syz.9.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fab417bb78e code=0x7ffc0000 [ 371.022414][ T29] audit: type=1326 audit(2000000004.310:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18478 comm="syz.9.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab417fab4b code=0x7ffc0000 [ 371.050487][T18479] loop9: p1 p2 p3 p4 [ 371.054747][T18479] loop9: p1 size 196608 extends beyond EOD, truncated [ 371.064329][T18479] loop9: p2 start 164919041 is beyond EOD, truncated [ 371.071170][T18479] loop9: p3 size 66846464 extends beyond EOD, truncated [ 371.097753][T18479] loop9: p4 size 37048832 extends beyond EOD, truncated [ 371.114037][T18489] netlink: zone id is out of range [ 371.119365][T18489] netlink: zone id is out of range [ 371.164855][T18489] netlink: zone id is out of range [ 371.170078][T18489] netlink: zone id is out of range [ 371.175349][T18489] netlink: zone id is out of range [ 371.180489][T18489] netlink: zone id is out of range [ 371.185719][T18489] netlink: zone id is out of range [ 371.206070][T18489] netlink: del zone limit has 8 unknown bytes [ 371.273603][T18503] loop7: detected capacity change from 0 to 1024 [ 371.300499][T18503] EXT4-fs (loop7): blocks per group (131072) and clusters per group (32) inconsistent [ 371.417984][T18513] loop5: detected capacity change from 0 to 1024 [ 371.428711][T18516] loop7: detected capacity change from 0 to 128 [ 371.435212][T18513] EXT4-fs: Ignoring removed bh option [ 371.471849][T18517] loop9: detected capacity change from 0 to 512 [ 371.495096][T18513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.558530][T18527] loop7: detected capacity change from 0 to 1024 [ 371.630727][T16544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.665743][T18527] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.709332][T12218] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.899868][T18559] netlink: 'syz.5.4370': attribute type 37 has an invalid length. [ 372.113649][T16840] udevd[16840]: symlink '../../loop8' '/dev/disk/by-diskseq/1546.tmp-b7:8' failed: Read-only file system [ 372.156343][T16840] udevd[16840]: symlink '../../loop5' '/dev/disk/by-diskseq/1578.tmp-b7:5' failed: Read-only file system [ 372.157455][T18566] __nla_validate_parse: 19 callbacks suppressed [ 372.157498][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4372'. [ 372.183094][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4372'. [ 372.196275][T18566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.203073][T18566] EXT4-fs: Ignoring removed bh option [ 372.225853][T16840] udevd[16840]: symlink '../../loop5' '/dev/disk/by-diskseq/1580.tmp-b7:5' failed: Read-only file system [ 372.242114][T17451] udevd[17451]: symlink '../../loop8' '/dev/disk/by-diskseq/1546.tmp-b7:8' failed: Read-only file system [ 372.254064][T18566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.267537][T16840] udevd[16840]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 372.280953][T18566] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 372.288577][T16640] udevd[16640]: symlink '../../loop4' '/dev/disk/by-diskseq/1566.tmp-b7:4' failed: Read-only file system [ 372.312782][T16840] udevd[16840]: symlink '../../loop5' '/dev/disk/by-diskseq/1580.tmp-b7:5' failed: Read-only file system [ 372.326052][T16840] udevd[16840]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 372.349871][T16840] udevd[16840]: symlink '../../loop4' '/dev/disk/by-diskseq/1566.tmp-b7:4' failed: Read-only file system [ 372.372320][T17451] udevd[17451]: symlink '../../loop8' '/dev/disk/by-diskseq/1546.tmp-b7:8' failed: Read-only file system [ 372.394785][T18577] FAULT_INJECTION: forcing a failure. [ 372.394785][T18577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.408069][T18577] CPU: 0 UID: 0 PID: 18577 Comm: syz.8.4376 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 372.408115][T18577] Tainted: [W]=WARN [ 372.408124][T18577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.408141][T18577] Call Trace: [ 372.408150][T18577] [ 372.408158][T18577] __dump_stack+0x1d/0x30 [ 372.408245][T18577] dump_stack_lvl+0x95/0xd0 [ 372.408279][T18577] dump_stack+0x15/0x1b [ 372.408301][T18577] should_fail_ex+0x263/0x280 [ 372.408401][T18577] should_fail+0xb/0x20 [ 372.408503][T18577] should_fail_usercopy+0x1a/0x20 [ 372.408674][T18577] _copy_from_user+0x1c/0xb0 [ 372.408697][T18577] ___sys_sendmsg+0xc1/0x1e0 [ 372.408741][T18577] __sys_sendmmsg+0x185/0x320 [ 372.408895][T18577] __x64_sys_sendmmsg+0x57/0x70 [ 372.408921][T18577] x64_sys_call+0x1e28/0x3000 [ 372.408971][T18577] do_syscall_64+0xc0/0x2a0 [ 372.409009][T18577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.409038][T18577] RIP: 0033:0x7fe5901aaeb9 [ 372.409127][T18577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.409152][T18577] RSP: 002b:00007fe58ec07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 372.409180][T18577] RAX: ffffffffffffffda RBX: 00007fe590425fa0 RCX: 00007fe5901aaeb9 [ 372.409199][T18577] RDX: 0000000000000001 RSI: 0000200000002c40 RDI: 0000000000000003 [ 372.409215][T18577] RBP: 00007fe58ec07090 R08: 0000000000000000 R09: 0000000000000000 [ 372.409232][T18577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.409249][T18577] R13: 00007fe590426038 R14: 00007fe590425fa0 R15: 00007ffceea5ce38 [ 372.409313][T18577] [ 372.618388][T18582] No such timeout policy "syz0" [ 372.672146][T18591] netlink: 14 bytes leftover after parsing attributes in process `syz.9.4381'. [ 372.686843][T18592] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4382'. [ 372.698387][T18591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.709209][T18591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.722447][T18591] bond0 (unregistering): Released all slaves [ 372.739650][T16544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.776501][T18595] Cannot find add_set index 0 as target [ 372.814872][T18600] FAULT_INJECTION: forcing a failure. [ 372.814872][T18600] name failslab, interval 1, probability 0, space 0, times 0 [ 372.827626][T18600] CPU: 0 UID: 0 PID: 18600 Comm: syz.9.4385 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 372.827711][T18600] Tainted: [W]=WARN [ 372.827721][T18600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.827791][T18600] Call Trace: [ 372.827798][T18600] [ 372.827809][T18600] __dump_stack+0x1d/0x30 [ 372.827904][T18600] dump_stack_lvl+0x95/0xd0 [ 372.827936][T18600] dump_stack+0x15/0x1b [ 372.827960][T18600] should_fail_ex+0x263/0x280 [ 372.828001][T18600] ? __pfx_ingress_init+0x10/0x10 [ 372.828066][T18600] should_failslab+0x8c/0xb0 [ 372.828100][T18600] __kmalloc_cache_noprof+0x64/0x4a0 [ 372.828130][T18600] ? ingress_init+0x175/0x340 [ 372.828178][T18600] ? __pfx_ingress_init+0x10/0x10 [ 372.828209][T18600] ingress_init+0x175/0x340 [ 372.828241][T18600] ? __pfx_ingress_init+0x10/0x10 [ 372.828301][T18600] qdisc_create+0x582/0x9d0 [ 372.828331][T18600] tc_modify_qdisc+0xb07/0x14f0 [ 372.828367][T18600] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 372.828402][T18600] rtnetlink_rcv_msg+0x6a7/0x720 [ 372.828487][T18600] netlink_rcv_skb+0x123/0x220 [ 372.828532][T18600] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 372.828570][T18600] rtnetlink_rcv+0x1c/0x30 [ 372.828651][T18600] netlink_unicast+0x5c0/0x690 [ 372.828688][T18600] netlink_sendmsg+0x5c8/0x6f0 [ 372.828798][T18600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.828819][T18600] ____sys_sendmsg+0x5af/0x600 [ 372.828844][T18600] ___sys_sendmsg+0x195/0x1e0 [ 372.828923][T18600] __x64_sys_sendmsg+0xd4/0x160 [ 372.828958][T18600] x64_sys_call+0x17ba/0x3000 [ 372.828995][T18600] do_syscall_64+0xc0/0x2a0 [ 372.829039][T18600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.829084][T18600] RIP: 0033:0x7fab417faeb9 [ 372.829105][T18600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.829131][T18600] RSP: 002b:00007fab40257028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.829158][T18600] RAX: ffffffffffffffda RBX: 00007fab41a75fa0 RCX: 00007fab417faeb9 [ 372.829177][T18600] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 372.829208][T18600] RBP: 00007fab40257090 R08: 0000000000000000 R09: 0000000000000000 [ 372.829226][T18600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.829243][T18600] R13: 00007fab41a76038 R14: 00007fab41a75fa0 R15: 00007ffe5bb9b5c8 [ 372.829272][T18600] [ 373.105152][T18603] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 373.115861][T18603] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 373.127464][T18603] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (22515!=20869) [ 373.137248][T18603] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 373.147674][T18603] EXT4-fs (loop4): invalid journal inode [ 373.153394][T18603] EXT4-fs (loop4): can't get journal size [ 373.160495][T18603] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.4386: iget: bad extra_isize 65535 (inode size 1024) [ 373.174834][T18603] EXT4-fs (loop4): get root inode failed [ 373.174951][ T2991] ================================================================== [ 373.180569][T18603] EXT4-fs (loop4): mount failed [ 373.188691][ T2991] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 373.188734][ T2991] [ 373.188744][ T2991] write to 0xffffffff86a85170 of 8 bytes by task 18603 on cpu 1: [ 373.210649][ T2991] data_alloc+0x310/0x390 [ 373.215027][ T2991] prb_reserve+0x8d7/0xae0 [ 373.219486][ T2991] vprintk_store+0x54a/0x910 [ 373.224116][ T2991] vprintk_emit+0x1a4/0x600 [ 373.228744][ T2991] vprintk_default+0x26/0x30 [ 373.233388][ T2991] vprintk+0x1d/0x30 [ 373.237344][ T2991] _printk+0x79/0xa0 [ 373.241385][ T2991] __ext4_msg+0x1aa/0x1c0 [ 373.245763][ T2991] ext4_fill_super+0x29aa/0x3800 [ 373.250735][ T2991] get_tree_bdev_flags+0x291/0x300 [ 373.255879][ T2991] get_tree_bdev+0x1f/0x30 [ 373.260340][ T2991] ext4_get_tree+0x1c/0x30 [ 373.264820][ T2991] vfs_get_tree+0x57/0x1d0 [ 373.269291][ T2991] do_new_mount+0x288/0x700 [ 373.273831][ T2991] path_mount+0x4d0/0xbc0 [ 373.278433][ T2991] __se_sys_mount+0x28c/0x2e0 [ 373.283169][ T2991] __x64_sys_mount+0x67/0x80 [ 373.287836][ T2991] x64_sys_call+0x2cca/0x3000 [ 373.292585][ T2991] do_syscall_64+0xc0/0x2a0 [ 373.297157][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.303096][ T2991] [ 373.305448][ T2991] read to 0xffffffff86a85170 of 16 bytes by task 2991 on cpu 0: [ 373.313097][ T2991] _prb_read_valid+0x1bc/0x950 [ 373.317896][ T2991] prb_read_valid+0x3c/0x60 [ 373.322437][ T2991] syslog_print+0x164/0x560 [ 373.326981][ T2991] do_syslog+0x52b/0x7f0 [ 373.331340][ T2991] __x64_sys_syslog+0x41/0x50 [ 373.336047][ T2991] x64_sys_call+0x27ce/0x3000 [ 373.340758][ T2991] do_syscall_64+0xc0/0x2a0 [ 373.345295][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.351212][ T2991] [ 373.353559][ T2991] Reported by Kernel Concurrency Sanitizer on: [ 373.359733][ T2991] CPU: 0 UID: 0 PID: 2991 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 373.370614][ T2991] Tainted: [W]=WARN [ 373.374434][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.384514][ T2991] ==================================================================