last executing test programs: 30.534369995s ago: executing program 4 (id=1378): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x800000, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x800000001fe, 0x2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 29.608943921s ago: executing program 4 (id=1385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 29.530953385s ago: executing program 4 (id=1386): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x840, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,dots,nodots,nodots,quiet,dots,dots,nocase,dots,dots,dots,check=relaxed,nocase,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d6e6f726d616c2c6e6f646f74732c6e66732c6e6f646f74732c0085631469e4e3ebe0f848a069f81e50c93409023d7e4dba3e8c4d8a10a9d296b30d58f9509e00bb34b7828749c7d8f731945afa8a19f315a9bc5e8f36d11609786bb0568a5cdc4806eb6c9bdf47e7ec9616ee240aa0913c1ae2a4a2b172982688119c245062290e392d538e2a7f7d101281cb737e2777fe36c8fdb305fb2b9240a5fe96a39cbb1c9d13c41da60f15645c2e7f2708730b7b91c4d29a0b64caab07109beb5dec6f777effe7c525c26748f8627760b7c6c13e3947e6cf6c2300"/261], 0xfd, 0x1bf, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000003040)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00') (fail_nth: 1) 28.758009283s ago: executing program 4 (id=1388): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4263, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3ffffffffd, 0xffffffffffffffff, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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") sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404089d}, 0x80) unshare(0x20060400) r5 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x3, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, &(0x7f0000000600)="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", 0x9a4, 0x6, 0x0) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 26.745024371s ago: executing program 4 (id=1393): socket$kcm(0xa, 0x2, 0x88) socket$kcm(0x10, 0x2, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f000000cf00)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x97fa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r9, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r8, &(0x7f0000000040)={0x11, 0x4, r9, 0x1, 0x3, 0x6, @remote}, 0x14) close(0x3) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)='\"', 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 26.043194285s ago: executing program 4 (id=1400): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 26.042706295s ago: executing program 32 (id=1400): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 3.949196497s ago: executing program 1 (id=1580): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f00000005c0)={[{@sysvgroups}, {@bsdgroups}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa1) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@sg0, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x6, 0x7e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x8f7be000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 2.754461306s ago: executing program 5 (id=1585): symlink(0x0, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000002240)=ANY=[], 0xff70) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fallocate(r0, 0x0, 0x22001, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r3, r3, 0x0, 0xe3aa6ea) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.721673477s ago: executing program 0 (id=1586): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x43, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) pipe(&(0x7f0000000000)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$packet(r5, &(0x7f00000006c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x15}, @remote}}}], 0x20}}, {{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}], 0x20}}], 0x2, 0x4000800) 2.327505496s ago: executing program 2 (id=1588): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x81, r6, 'id0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r10, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r11, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0800050003d00000"], 0x24}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "66aac1", 0x0, 0x73, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2}}}}, 0x0) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0500000000000000339f30dd2f2eed4e94c93ebf5b00000f00000008000300", @ANYRES32=r12, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r9, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000001800)={0x500, r5, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2b, 0x5a, 0x1, 0x18, 0x24, 0x12, 0x2e, 0x4, 0x12, 0x9, 0x51, 0xb, 0xc, 0x48, 0x6, 0xc, 0x16, 0x72, 0x30, 0x1b]}]}]}, @NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x3, 0x5, 0x7ff, 0x8, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb, 0x2b, 0x2, 0x13d9, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0x30, 0x6, 0x24, 0x4, 0x9, 0xc, 0x1b, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x5, 0x5}, {0x1}, {0x3, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x6}, {0x2, 0x5}, {0x6, 0x6}, {0x2}, {0x4, 0x8}, {0x4, 0x4}, {}, {0x5, 0x9}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x2}, {0x2, 0x3}, {0x5, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x4, 0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x4, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x6, 0x4}, {0x1, 0x5}, {0x1}, {0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x5}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x9}, {0x3}, {0x4, 0xa}, {0x6, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x7, 0x9}, {0x3, 0x7}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x30, 0x48, 0x48, 0x38e31bd2d4b6b189, 0x7c, 0x4, 0xc, 0x24, 0x60, 0x6c, 0x16, 0x6c, 0x5, 0x16, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xee, 0x3, 0x6, 0x62b, 0x57, 0x100, 0x9, 0x2bb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x84, 0x2, 0xfd2, 0xffc5, 0x8, 0xb499, 0xcac]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x8, 0x100, 0x16, 0x9, 0x6, 0x2]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x18, 0x4, 0xc, 0x5, 0x1, 0x1b, 0x24, 0x1c, 0x2, 0x16, 0x18, 0x24, 0x36, 0x30, 0x1]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x5, 0x3}, {0x1, 0x8}, {0x3}, {0x1, 0x4}, {0x7, 0x5}, {0x6, 0x4}, {0x4, 0x4}, {0x0, 0x4}, {0x7, 0x9}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x1}, {0x6}, {0x1, 0x4}, {0x7, 0xa}, {0x2, 0x7}, {0x1}, {0x0, 0xa}, {0x5}, {0x2, 0x6}, {0x6, 0x5}, {0x3, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0x2}, {0x7, 0x4}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x5}, {0x7, 0x3}, {0x0, 0x2}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6, 0x4}, {0x0, 0x1}, {0x4, 0x4}, {0x3, 0x2}, {}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x1}, {}, {0x1, 0x9}, {0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x7}, {0x4, 0xa}, {0x7, 0x6}, {0x3, 0x1}, {0x6, 0x7}, {0x6, 0x6}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0x4}, {0x6}, {0x6, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0x9}, {0x7, 0x5}, {0x3, 0x4}, {0x7}, {0x1, 0x1}, {0x2, 0x7}, {0x3, 0x9}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x1, 0x3}, {0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x2}, {0x6}, {0x3, 0xa}, {0x6, 0x3}, {0x7, 0x6}, {0x1, 0x8}, {0x7, 0x8}, {0x0, 0x4}, {0x3, 0x4}, {0x5, 0x5}, {0x6, 0x7}, {0x2, 0x6}, {0x1, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x200, 0x5, 0x1, 0x4, 0x8, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x60, 0x16, 0xb, 0x1, 0x48, 0x4, 0x0, 0x16, 0x30, 0x1, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x9}, {0x2}, {0x0, 0x4}, {0x3, 0x1}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x4}, {0x2, 0xa}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0x2}, {0x6, 0xa}, {0x1, 0x4}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x3}, {0x5, 0x9}, {0x5, 0x1}, {0x0, 0x5}, {0x2, 0x4}, {0x6, 0xa}, {0x7, 0x8}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x2}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x36d, 0x5, 0x97, 0x5, 0x5, 0x3, 0x9, 0x2d]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x9, 0x4, 0x0, 0x6, 0x1, 0x200]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x5, 0x1b, 0x5b, 0xf, 0x48, 0x9, 0x24, 0x6c, 0x60, 0x12, 0xc, 0x18, 0x6c, 0xc, 0x5, 0x24, 0x3, 0x16, 0x18, 0x12, 0x24]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x5, 0x0, 0x8, 0x5, 0x73c, 0x40, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb1f, 0x3, 0x4, 0x83d4, 0x6, 0x8000, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x12, 0x30, 0x9, 0x3, 0x16, 0x36, 0x6c, 0x6, 0x9, 0x9, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x1b, 0xb, 0x6c, 0x16, 0x6c, 0x12, 0x2, 0x6, 0x3, 0x1b, 0x64, 0x23, 0x2, 0x24, 0x48, 0x16, 0x6c, 0x18]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x9}, {0x4, 0x7}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x1}, {0x1, 0x6}, {}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x2}, {0x6, 0x7}, {}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x2}, {0x5}, {0x1, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x7, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x3, 0x4}, {0x5, 0xa}, {0x0, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x3, 0x8}, {0x6, 0xa}, {0x5, 0x3}, {0x4, 0x6}, {0x2, 0x1}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x1}, {}, {0x3, 0x5}, {0x3, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x1ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x18, 0x24, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x4}, {0x4}, {0x4, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x5, 0x4}, {0x7}, {0x5}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x6}, {0x7, 0x5}, {0x2, 0x5}, {0x2, 0x8}, {0x3, 0x9}, {0x2, 0x6}, {0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x1, 0x1}, {0x2, 0x4}, {0x0, 0xa}, {0x3, 0x9}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x7, 0x2}, {0x3, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xc, 0xc, 0x3, 0x16, 0xc, 0x5, 0x18, 0x16, 0x60, 0x9, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x200, 0x0, 0x4d7, 0x3, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0x1}, {0x7, 0x6}, {0x4}, {0x3, 0x7}, {0x5, 0x5}, {0x4, 0x9}, {0x3, 0x1}, {0x1, 0x4}, {0x5, 0x4}, {0x3, 0x7}, {0x4, 0x6}, {0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x1}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x3}, {0x1, 0x2}, {0x3, 0x7}, {0x7, 0x6}, {0x3, 0x4}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x6}, {0x6, 0x8}, {0x0, 0x3}, {}, {0x6, 0x8}, {0x4}, {0x2, 0x2}, {0x4, 0x3}, {0x3, 0x3}, {0x7, 0x2}, {0x4, 0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x2, 0x9}, {0x3, 0x9}, {0x2, 0xa}, {0x6, 0x9}, {0x2, 0x4}, {0x4}, {0x4, 0x8}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0x7}, {0x3, 0x4}, {0x3, 0x4}, {0x1, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x2, 0x2, 0x8000, 0x2, 0x2, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7e4b, 0x8, 0xd, 0x5, 0xd8, 0x8, 0x1]}}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x800, 0x2, 0x5, 0x100, 0xdd01, 0xfff7, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x1, 0x3, 0x1, 0x626, 0xd5, 0x7, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x3}, {0x0, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0xa}, {0x4}, {0x0, 0x1}, {0x7, 0x4}, {0x2, 0x9}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0x2}, {}, {0x3, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x7, 0x3}, {0x1}, {0x1, 0x3}, {0x5, 0xa}, {0x7, 0x5}, {0x6, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x2, 0xa}, {0x1, 0x4}, {0x4, 0x9}, {0x7}, {0x2, 0x6}, {0x1, 0x5}, {0x7, 0x6}, {0x7}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x9}, {0x3, 0x8}, {0x3}, {0x3, 0x5}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x2}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x0, 0x800, 0x101, 0xf9, 0xe, 0x828]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x59a, 0xffff, 0x8001, 0x7, 0x1, 0x8, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x500}, 0x1, 0x0, 0x0, 0x20004010}, 0x48000) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14040}, 0x980) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'}) 2.326220716s ago: executing program 1 (id=1589): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.25328264s ago: executing program 0 (id=1590): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES16=0xffffffffffffffff, @ANYRESHEX], 0x4, 0x1296, &(0x7f0000001b80)="$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") r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r5, &(0x7f0000004d00)=ANY=[@ANYRESDEC, @ANYBLOB="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", @ANYRES32=r5, @ANYRESHEX=r0, @ANYBLOB="d074c6f8a161d996aabc67de99e7de1fc8bf64f1b989a7f0177474c031d9edee51fed8c77b266d566cc600cb9337d221f03097b5f93ce6b427ade2b2887080dd112cb6e82a360507960d539c936997e51f180cad9930ee8ce7b4de7bc0de7600c9bfc95abd1ba4815c72a6d591cdeb1abbd5b917e82e4bdd50b306a6c6b8e714f60982c95196fff7b22d"], 0xa) sendfile(r5, r3, 0x0, 0x40001) sendfile(r5, r4, 0x0, 0x7ffff000) 2.156140885s ago: executing program 3 (id=1591): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000040), 0x3b) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000380)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdc01, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084090) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80530, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x107882, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_io_uring_setup(0x2152, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x8000153}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x9860a67ed9df7fda}], 0x1) r4 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300)) syz_io_uring_setup(0x17b9, &(0x7f0000000140)={0x0, 0xe0db, 0x400, 0x3, 0x3c4, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, 0x0, 0x0) 2.107547077s ago: executing program 5 (id=1592): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create(0x4) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3, 0x3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x2, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') ftruncate(r1, 0x7fffffffffffffff) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @empty, 0x2}, 0x1c) r5 = io_uring_setup(0xaaf, &(0x7f0000000340)={0x0, 0x60b13e, 0x40, 0x2, 0x201}) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x4) close_range(r5, r6, 0x0) 2.105975387s ago: executing program 2 (id=1593): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000080)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}, {@size={'size', 0x3d, [0x25]}}]}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xffffffffffff, 0x5, 0xfffffffffffffffa}, {0x2, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x2, 0x7c, 0xfffffffe}}, 0xe8) io_setup(0xa, &(0x7f0000000140)) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa082de2580045000028006400000400e000000211009078e0000002000000010000000008"], 0x0) rename(&(0x7f0000000540)='.\x00', &(0x7f0000000580)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x388, 0x218, 0x218, 0x0, 0x2e8, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@uncond, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'macvlan1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x5}}}}, {{@ip={@multicast2, @private, 0xffffffff, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x1ff, 0x6, [0x32, 0x7, 0x19, 0x27, 0x2b, 0x41, 0x23, 0x12, 0x2a, 0x12, 0x9, 0xd, 0x34, 0xb, 0x3c, 0x29], 0x0, 0x40, 0x9}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/23, 0xfffffffffffffc70}, 0xee37}], 0x1, 0x1122, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 1.986308743s ago: executing program 3 (id=1594): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1040046, &(0x7f0000000180)={[{@dioread_nolock}, {@minixdf}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x8}}, {@norecovery}, {@dioread_nolock}, {@grpquota}, {@jqfmt_vfsold}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobarrier}], [{@appraise_type}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'V}.'}}, {@smackfsroot={'smackfsroot', 0x3d, 'jqfmt=vfsold'}}, {@smackfshat={'smackfshat', 0x3d, 'grpquota'}}, {@seclabel}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefefffb, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0xff, @mcast1}]}, &(0x7f0000000080)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r6, &(0x7f0000000940)=@random={'osx.', ']\\\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x100000001, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000080)='!\x00') io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000380)={r5, 0x1, 0x5, 0x1, 0x0, 0xe}, 0x14) pwrite64(r10, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 1.877788069s ago: executing program 5 (id=1595): ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000000080)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x1e) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x80000, @empty}, 0x1c) select(0x40, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x7, 0x798, 0x40, 0x5, 0x6}, &(0x7f0000000140)={0x7, 0x39ff, 0x9, 0x1, 0xf, 0x0, 0xe10a, 0x7}, &(0x7f00000002c0)={0x7, 0x8000000000000001, 0x401, 0x8, 0x7, 0x9, 0x0, 0x358}, &(0x7f0000000300)={0x0, 0xea60}) 1.83898136s ago: executing program 1 (id=1596): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpriority(0x0, r0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xffffff5e, &(0x7f00000002c0)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c050010ffff0af30000000075f800250003000f600000251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.708563157s ago: executing program 5 (id=1597): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_pidfd_open(0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', 0x0) wait4(r5, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc040ff0b, &(0x7f0000000180)) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x23, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}}, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket(0xa, 0x5, 0x0) r9 = socket$inet(0x2, 0x2, 0x80000001) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000000), 0x4) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0xf0, 0x2e0, 0x248, 0x248, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@private=0xa010100, @remote, 0xff000000, 0xff000000, 'ip6erspan0\x00', 'syzkaller0\x00', {}, {0xff}, 0x2e, 0x1, 0xa2}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x8, 0x1}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'erspan0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x89, 0x2, 0x48}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x40, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x10}}}, {{@ip={@multicast2, @local, 0xffffffff, 0xffffff00, 'hsr0\x00', 'macvlan0\x00', {}, {}, 0x5e, 0x1, 0x2}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_setup(0x2, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) fallocate(r10, 0x0, 0x22001, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.707192277s ago: executing program 2 (id=1598): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0003001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.188857972s ago: executing program 2 (id=1599): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, 0x0, 0x80) 1.127948165s ago: executing program 0 (id=1600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000004000000000a00000154000480500001e59faa27e2cfd98f0c0dba82800b0001007461726765740040000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000000e9000000000008000100544545000900020073797a32000000ff0800010073797a31e8d83600"/170], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) 1.075958188s ago: executing program 2 (id=1601): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE1MzOzPttt3dbrfQCvv5JNs+zzPPvHyfedmZeWYngLY1kP1JInoj4peI6MuzCysM5P+uX70w/ufVC+NJzM6+8EdSqXft6oXxsmo53uYiM5hGpG8nsbvGfKfOnT85Njk5cbbID0+fem146tz5h0+cGjs+cXzi9Ojhw4cOjjz26OgjTcVxcZnhWVzXdr15Zs/OIy+99+z4bLz83cfZ8vYWw6vjyPU3Nd9GBmIgZgvzpV2Vv/eveur/LVsiortIJxvWeWFoWkdEZKurs7L/90VHzK+8vnjmrbnMV+u0gMBNk303bVtS2lH8T+e+v4DbUWIfhzZVfuNn17/lZy3PP9bblSezvxOV+K8Xnx+ey9smza5l+/Mr9o464/+/RlnPfHK2b5n590bE0Zm/3s8+UfM+RANJ0zUBAOZ8kZ3/PFTr/C9dcG6ztehD6Y+I/RGxPSL+FxE7Ip2rc0dE3LnC+Q8syi89//lp4wonuSLZ+d/jRd9W+cmHlHElc7ktlfg7k1dOTE4cKNpkMDq7s/xIg3l8+fTP79YbNlB1/pd9svmX54LFcvy+oXvhOMfGpsdWEfICVy5FEhtqxZ/M9QRkLbAzIna1MP2szU48+NGeLL1189Lhy8ffwA3oZ5r9MOKBfP3PxKL4S0k+p3r9k8M9MTlxYLjcKpb6/sfLz1fnO6vSC+LvaS6mnlaDreHKpYhNNbf/Iv5yNyj7a6eK/Ne9Tc/j8q/v1L2mWbr+kzg6U12j2P43zjdbtv13JS9W0l1F2Rtj09NnRyI+LwoWlI/OT63Ml/Wz+Af3LYw/vy5Os2PcPx8U4+2OiGwjvisi7o6IvcWy3xMR90bEvgbxf/vUfa82bqEWt/8bIIv/WKP1H9GfVPfXt5DoOPnNZ/Xm39zx71AlNViUVB//uupMt9kFXG37AQAAwK0grfRBJ+lQ1fPbpR2xKZ08MzW9fyBeP30s76vuj860vNPVV3U/dKS4N1zmRxflD0bEtsqTRhsr+aHxM5Nb1ilmILe5av/PjwVpOjSUD/ut3kMvwO1jRf1o1Q+dffLpjV8YYE35vSa0L/s/tC/7P7Qv+z+0r1r7/8WI6+uwKMAaa/X7f/EDA8Atx2skoI25/of2Zf+HtrT0J/HF61ayY0LrP/mf3H5kNW8MuPmJ2b7WR4/6g2ZWPsGO5iqXb79oesrNVc6u/YqStEFcNRKRzpf8XbxNslLSmdfpan5R1z6RLlvnieVao3NF78ToqdEae4tEd0Q0O52La9aq5REicXsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4pf0bAAD//5ng5vk=") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x9d5, 0x4) recvmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/156, 0x9c}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000380)=""/30, 0x1e}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f0000000580)=""/246, 0xf6}, {&(0x7f00000006c0)=""/165, 0xa5}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000001780)=""/114, 0x72}], 0x9, &(0x7f00000018c0)=""/24, 0x18}, 0x6}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001900)=""/9, 0x9}, {&(0x7f0000001940)=""/126, 0x7e}, {&(0x7f00000019c0)=""/30, 0x1e}, {&(0x7f0000001a00)=""/149, 0x95}, {&(0x7f0000001ac0)=""/81, 0x51}, {&(0x7f0000001b40)=""/198, 0xc6}], 0x6, &(0x7f0000002300)=""/163, 0xa3}, 0x6a}, {{&(0x7f0000001cc0)=@isdn, 0x80, &(0x7f0000003980)=[{&(0x7f00000023c0)=""/238, 0xee}, {&(0x7f00000024c0)=""/116, 0x74}, {&(0x7f0000002540)=""/77, 0x4d}, {&(0x7f00000025c0)=""/155, 0x9b}, {&(0x7f0000002680)=""/16, 0x10}, {&(0x7f00000026c0)=""/66, 0x42}, {&(0x7f0000002740)=""/164, 0xa4}, {&(0x7f0000003880)=""/69, 0x45}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/210, 0xd2}], 0xa}, 0xe}], 0x3, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x89, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa152f18a6609408004629007b006800000c019078ac1414bb6401010144020000cc3f7ca78048e91fb386c632c30b5ac006dbdcec518ebd0a2c56e06fcd7daf49b2468a8eb912260c7f8fdd9a2043a9c3e95b659637107e57dbfb2a04b37987470f5f7afb0259fddfb52e10e2a4da8a23396b9b33da9e9066267d550e7e8e72f7f77cb0"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) 1.053968159s ago: executing program 3 (id=1602): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@errors_remount}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) lseek(r0, 0x4, 0x3) 893.054187ms ago: executing program 0 (id=1603): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x81, r6, 'id0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r10, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r11, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0800050003d00000"], 0x24}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "66aac1", 0x0, 0x73, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2}}}}, 0x0) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0500000000000000339f30dd2f2eed4e94c93ebf5b00000f00000008000300", @ANYRES32=r12, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r9, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000001800)={0x500, r5, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2b, 0x5a, 0x1, 0x18, 0x24, 0x12, 0x2e, 0x4, 0x12, 0x9, 0x51, 0xb, 0xc, 0x48, 0x6, 0xc, 0x16, 0x72, 0x30, 0x1b]}]}]}, @NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x3, 0x5, 0x7ff, 0x8, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb, 0x2b, 0x2, 0x13d9, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0x30, 0x6, 0x24, 0x4, 0x9, 0xc, 0x1b, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x5, 0x5}, {0x1}, {0x3, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x6}, {0x2, 0x5}, {0x6, 0x6}, {0x2}, {0x4, 0x8}, {0x4, 0x4}, {}, {0x5, 0x9}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x2}, {0x2, 0x3}, {0x5, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x4, 0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x4, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x6, 0x4}, {0x1, 0x5}, {0x1}, {0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x5}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x9}, {0x3}, {0x4, 0xa}, {0x6, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x7, 0x9}, {0x3, 0x7}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x30, 0x48, 0x48, 0x38e31bd2d4b6b189, 0x7c, 0x4, 0xc, 0x24, 0x60, 0x6c, 0x16, 0x6c, 0x5, 0x16, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xee, 0x3, 0x6, 0x62b, 0x57, 0x100, 0x9, 0x2bb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x84, 0x2, 0xfd2, 0xffc5, 0x8, 0xb499, 0xcac]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x8, 0x100, 0x16, 0x9, 0x6, 0x2]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x18, 0x4, 0xc, 0x5, 0x1, 0x1b, 0x24, 0x1c, 0x2, 0x16, 0x18, 0x24, 0x36, 0x30, 0x1]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x5, 0x3}, {0x1, 0x8}, {0x3}, {0x1, 0x4}, {0x7, 0x5}, {0x6, 0x4}, {0x4, 0x4}, {0x0, 0x4}, {0x7, 0x9}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x1}, {0x6}, {0x1, 0x4}, {0x7, 0xa}, {0x2, 0x7}, {0x1}, {0x0, 0xa}, {0x5}, {0x2, 0x6}, {0x6, 0x5}, {0x3, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0x2}, {0x7, 0x4}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x5}, {0x7, 0x3}, {0x0, 0x2}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6, 0x4}, {0x0, 0x1}, {0x4, 0x4}, {0x3, 0x2}, {}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x1}, {}, {0x1, 0x9}, {0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x7}, {0x4, 0xa}, {0x7, 0x6}, {0x3, 0x1}, {0x6, 0x7}, {0x6, 0x6}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0x4}, {0x6}, {0x6, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0x9}, {0x7, 0x5}, {0x3, 0x4}, {0x7}, {0x1, 0x1}, {0x2, 0x7}, {0x3, 0x9}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x1, 0x3}, {0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x2}, {0x6}, {0x3, 0xa}, {0x6, 0x3}, {0x7, 0x6}, {0x1, 0x8}, {0x7, 0x8}, {0x0, 0x4}, {0x3, 0x4}, {0x5, 0x5}, {0x6, 0x7}, {0x2, 0x6}, {0x1, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x200, 0x5, 0x1, 0x4, 0x8, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x60, 0x16, 0xb, 0x1, 0x48, 0x4, 0x0, 0x16, 0x30, 0x1, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x9}, {0x2}, {0x0, 0x4}, {0x3, 0x1}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x4}, {0x2, 0xa}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0x2}, {0x6, 0xa}, {0x1, 0x4}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x3}, {0x5, 0x9}, {0x5, 0x1}, {0x0, 0x5}, {0x2, 0x4}, {0x6, 0xa}, {0x7, 0x8}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x2}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x36d, 0x5, 0x97, 0x5, 0x5, 0x3, 0x9, 0x2d]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x9, 0x4, 0x0, 0x6, 0x1, 0x200]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x5, 0x1b, 0x5b, 0xf, 0x48, 0x9, 0x24, 0x6c, 0x60, 0x12, 0xc, 0x18, 0x6c, 0xc, 0x5, 0x24, 0x3, 0x16, 0x18, 0x12, 0x24]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x5, 0x0, 0x8, 0x5, 0x73c, 0x40, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb1f, 0x3, 0x4, 0x83d4, 0x6, 0x8000, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x12, 0x30, 0x9, 0x3, 0x16, 0x36, 0x6c, 0x6, 0x9, 0x9, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x1b, 0xb, 0x6c, 0x16, 0x6c, 0x12, 0x2, 0x6, 0x3, 0x1b, 0x64, 0x23, 0x2, 0x24, 0x48, 0x16, 0x6c, 0x18]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x9}, {0x4, 0x7}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x1}, {0x1, 0x6}, {}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x2}, {0x6, 0x7}, {}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x2}, {0x5}, {0x1, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x7, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x3, 0x4}, {0x5, 0xa}, {0x0, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x3, 0x8}, {0x6, 0xa}, {0x5, 0x3}, {0x4, 0x6}, {0x2, 0x1}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x1}, {}, {0x3, 0x5}, {0x3, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x1ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x18, 0x24, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x4}, {0x4}, {0x4, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x5, 0x4}, {0x7}, {0x5}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x6}, {0x7, 0x5}, {0x2, 0x5}, {0x2, 0x8}, {0x3, 0x9}, {0x2, 0x6}, {0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x1, 0x1}, {0x2, 0x4}, {0x0, 0xa}, {0x3, 0x9}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x7, 0x2}, {0x3, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xc, 0xc, 0x3, 0x16, 0xc, 0x5, 0x18, 0x16, 0x60, 0x9, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x200, 0x0, 0x4d7, 0x3, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0x1}, {0x7, 0x6}, {0x4}, {0x3, 0x7}, {0x5, 0x5}, {0x4, 0x9}, {0x3, 0x1}, {0x1, 0x4}, {0x5, 0x4}, {0x3, 0x7}, {0x4, 0x6}, {0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x1}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x3}, {0x1, 0x2}, {0x3, 0x7}, {0x7, 0x6}, {0x3, 0x4}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x6}, {0x6, 0x8}, {0x0, 0x3}, {}, {0x6, 0x8}, {0x4}, {0x2, 0x2}, {0x4, 0x3}, {0x3, 0x3}, {0x7, 0x2}, {0x4, 0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x2, 0x9}, {0x3, 0x9}, {0x2, 0xa}, {0x6, 0x9}, {0x2, 0x4}, {0x4}, {0x4, 0x8}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0x7}, {0x3, 0x4}, {0x3, 0x4}, {0x1, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x2, 0x2, 0x8000, 0x2, 0x2, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7e4b, 0x8, 0xd, 0x5, 0xd8, 0x8, 0x1]}}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x800, 0x2, 0x5, 0x100, 0xdd01, 0xfff7, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x1, 0x3, 0x1, 0x626, 0xd5, 0x7, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x3}, {0x0, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0xa}, {0x4}, {0x0, 0x1}, {0x7, 0x4}, {0x2, 0x9}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0x2}, {}, {0x3, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x7, 0x3}, {0x1}, {0x1, 0x3}, {0x5, 0xa}, {0x7, 0x5}, {0x6, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x2, 0xa}, {0x1, 0x4}, {0x4, 0x9}, {0x7}, {0x2, 0x6}, {0x1, 0x5}, {0x7, 0x6}, {0x7}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x9}, {0x3, 0x8}, {0x3}, {0x3, 0x5}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x2}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x0, 0x800, 0x101, 0xf9, 0xe, 0x828]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x59a, 0xffff, 0x8001, 0x7, 0x1, 0x8, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x500}, 0x1, 0x0, 0x0, 0x20004010}, 0x48000) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14040}, 0x980) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'}) 892.691106ms ago: executing program 1 (id=1604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 819.86624ms ago: executing program 1 (id=1605): r0 = socket$packet(0x11, 0x3, 0x300) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x8, [{0x1, 0x2, 0xa}, {0x0, 0x3, 0x5}]}]}, {0x0, [0x61]}}, &(0x7f0000000100)=""/7, 0x3f, 0x7, 0x1, 0x4}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x2a, &(0x7f0000000180)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@uni_xlateno}, {}, {@shortname_lower}, {@shortname_mixed}, {@shortname_win95}, {@shortname_lower}, {@shortname_lower}, {@shortname_mixed}, {@fat=@check_strict}, {@shortname_win95}]}, 0x1, 0x369, &(0x7f0000000700)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000080000000000000002000500", @ANYRES32=0x0, @ANYBLOB="0400010000000000100001000000000020"], 0x2c, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$packet(r0, 0x0, 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) 814.704151ms ago: executing program 3 (id=1606): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3ff, 0x140) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x18, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 753.207383ms ago: executing program 1 (id=1607): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000080)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}, {@size={'size', 0x3d, [0x25]}}]}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xffffffffffff, 0x5, 0xfffffffffffffffa}, {0x2, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x2, 0x7c, 0xfffffffe}}, 0xe8) io_setup(0xa, &(0x7f0000000140)) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa082de2580045000028006400000400e000000211009078e0000002000000010000000008"], 0x0) rename(&(0x7f0000000540)='.\x00', &(0x7f0000000580)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x388, 0x218, 0x218, 0x0, 0x2e8, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@uncond, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'macvlan1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x5}}}}, {{@ip={@multicast2, @private, 0xffffffff, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x1ff, 0x6, [0x32, 0x7, 0x19, 0x27, 0x2b, 0x41, 0x23, 0x12, 0x2a, 0x12, 0x9, 0xd, 0x34, 0xb, 0x3c, 0x29], 0x0, 0x40, 0x9}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/23, 0xfffffffffffffc70}, 0xee37}], 0x1, 0x1122, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 724.668455ms ago: executing program 0 (id=1608): r0 = getpid() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x429a, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008}, 0x88025, 0xccf8, 0x0, 0x1, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = fsopen(&(0x7f0000001c80)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000001cc0)='noxattr', &(0x7f0000001d00)="a9ba630f", 0x4) open_by_handle_at(r2, &(0x7f0000000040)=@isofs_parent={0x14, 0x2, {0x6, 0x200, 0x4, 0x8, 0x8, 0xfff}}, 0x101200) r3 = syz_pidfd_open(r0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000300)=0x8c1, 0x4) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmmsg$inet6(r4, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) setns(r3, 0x24020000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2201, 0x0) write$binfmt_elf32(r6, 0x0, 0x69) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) socket$packet(0x11, 0x3, 0x300) ptrace$setregs(0xd, r0, 0x4, &(0x7f0000000200)="201c7890bddce9a4c918a029999bda5975f29950bcee51af762c78be167cf57d6b36050062fab535c974e8759fc66953010000806309943c7e5f497039949944d3b70bbd8072618d6ce15384792e9be4199943d1d21ae2e10788140ca5ac050c00"/114) ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) modify_ldt$write2(0x11, &(0x7f0000000140)={0x1c82a536, 0x20001000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) 702.184066ms ago: executing program 3 (id=1609): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x454a83, 0x5c, 0x8}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@nobarrier}, {@noblock_validity}]}, 0x3, 0x48c, &(0x7f0000000ec0)="$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") mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) 596.081951ms ago: executing program 0 (id=1610): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES16=0xffffffffffffffff, @ANYRESHEX], 0x4, 0x1296, &(0x7f0000001b80)="$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") r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r5, &(0x7f0000004d00)=ANY=[@ANYRESDEC, @ANYBLOB="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", @ANYRES32=r5, @ANYRESHEX=r0, @ANYBLOB="d074c6f8a161d996aabc67de99e7de1fc8bf64f1b989a7f0177474c031d9edee51fed8c77b266d566cc600cb9337d221f03097b5f93ce6b427ade2b2887080dd112cb6e82a360507960d539c936997e51f180cad9930ee8ce7b4de7bc0de7600c9bfc95abd1ba4815c72a6d591cdeb1abbd5b917e82e4bdd50b306a6c6b8e714f60982c95196fff7b22d"], 0xa) sendfile(r5, r3, 0x0, 0x40001) sendfile(r5, r4, 0x0, 0x7ffff000) 595.719601ms ago: executing program 3 (id=1611): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) 251.118148ms ago: executing program 2 (id=1612): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xabcb84a6e667a3e9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000002100)={0x1, 0x10, 0xfa00, {0xffffffffffffffff, r1}}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='westwood', 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18) semget(0x0, 0x0, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount_setattr(r3, 0x0, 0x9800, &(0x7f0000000040)={0x1000f0, 0xf4, 0x0, {r3}}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)=' ', 0x1}], 0x1, 0x0, 0x5a}, 0x40000) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1}, 0x700) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x111, 0x3}}, 0x20) 239.803618ms ago: executing program 5 (id=1613): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="65694d7b84d81c7675b5c1cbff79", 0x0, 0x6fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) 0s ago: executing program 5 (id=1614): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={0x0, 0xc}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) (async) sync() sync() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) (async) r1 = syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x80, 0x200, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x40044}, 0x4044010) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}}) (async) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x900) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async, rerun: 32) sync() (async, rerun: 32) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) getpgrp(0x0) (async) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x20040090) socket$packet(0x11, 0x2, 0x300) kernel console output (not intermixed with test programs): m 0 to 1024 [ 222.164246][ T8190] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 222.260883][ T8190] bond8 (unregistering): Released all slaves [ 222.357532][ T8203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1038'. [ 222.904149][ T8216] FAULT_INJECTION: forcing a failure. [ 222.904149][ T8216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.936615][ T8217] netlink: 'syz.2.1042': attribute type 1 has an invalid length. [ 222.949118][ T8216] CPU: 0 UID: 0 PID: 8216 Comm: syz.4.1041 Not tainted syzkaller #0 PREEMPT(full) [ 222.949145][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.949158][ T8216] Call Trace: [ 222.949164][ T8216] [ 222.949241][ T8216] __dump_stack+0x1d/0x30 [ 222.949277][ T8216] dump_stack_lvl+0x95/0xd0 [ 222.949301][ T8216] dump_stack+0x15/0x1b [ 222.949325][ T8216] should_fail_ex+0x263/0x280 [ 222.949354][ T8216] should_fail+0xb/0x20 [ 222.949465][ T8216] should_fail_usercopy+0x1a/0x20 [ 222.949500][ T8216] _copy_to_user+0x20/0xa0 [ 222.949576][ T8216] simple_read_from_buffer+0xb5/0x130 [ 222.949613][ T8216] proc_fail_nth_read+0x10e/0x150 [ 222.949652][ T8216] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.949682][ T8216] vfs_read+0x1ab/0x7f0 [ 222.949717][ T8216] ? __rcu_read_unlock+0x4e/0x70 [ 222.949737][ T8216] ? __fget_files+0x184/0x1c0 [ 222.949800][ T8216] ? mutex_lock+0x57/0x90 [ 222.949841][ T8216] ksys_read+0xdc/0x1a0 [ 222.949863][ T8216] __x64_sys_read+0x40/0x50 [ 222.949906][ T8216] x64_sys_call+0x2886/0x3020 [ 222.949937][ T8216] do_syscall_64+0x12c/0x370 [ 222.949965][ T8216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.950009][ T8216] RIP: 0033:0x7fa2ce85cfce [ 222.950031][ T8216] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 222.950087][ T8216] RSP: 002b:00007fa2cd2eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.950113][ T8216] RAX: ffffffffffffffda RBX: 00007fa2cd2ef6c0 RCX: 00007fa2ce85cfce [ 222.950130][ T8216] RDX: 000000000000000f RSI: 00007fa2cd2ef0a0 RDI: 0000000000000004 [ 222.950143][ T8216] RBP: 00007fa2cd2ef090 R08: 0000000000000000 R09: 0000000000000000 [ 222.950154][ T8216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.950164][ T8216] R13: 00007fa2ceb16038 R14: 00007fa2ceb15fa0 R15: 00007fffe88ce418 [ 222.950181][ T8216] [ 223.287571][ T8219] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 223.307088][ T8219] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 223.335277][ T8225] macvlan23: entered promiscuous mode [ 223.340909][ T8225] macvlan23: entered allmulticast mode [ 223.347033][ T8225] bond8: (slave macvlan23): Error -98 calling set_mac_address [ 223.521886][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 223.564504][ T8230] bond_slave_0: entered promiscuous mode [ 223.570343][ T8230] bond_slave_1: entered promiscuous mode [ 223.617151][ T8230] vlan2: entered promiscuous mode [ 223.622407][ T8230] bond0: entered promiscuous mode [ 223.765522][ T8221] veth0_virt_wifi: entered promiscuous mode [ 224.808301][ T72] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.897917][ T28] audit: type=1400 audit(1774438820.976:1121): avc: denied { ioctl } for pid=8243 comm="syz.3.1051" path="socket:[22094]" dev="sockfs" ino=22094 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.984977][ T72] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.046041][ T28] audit: type=1400 audit(1774438820.976:1122): avc: denied { setopt } for pid=8243 comm="syz.3.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.079887][ T8247] loop0: detected capacity change from 0 to 8192 [ 225.086859][ T8254] random: crng reseeded on system resumption [ 225.118657][ T72] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.282924][ T8254] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 225.340380][ T8254] bond1 (unregistering): Released all slaves [ 225.459020][ T72] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.688365][ T8246] lo speed is unknown, defaulting to 1000 [ 225.877987][ T72] bridge_slave_1: left allmulticast mode [ 225.883842][ T72] bridge_slave_1: left promiscuous mode [ 225.900027][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.910112][ T72] bridge_slave_0: left allmulticast mode [ 225.915945][ T72] bridge_slave_0: left promiscuous mode [ 225.922231][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.138121][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.148017][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.374993][ T8288] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1059'. [ 226.547781][ T72] bond0 (unregistering): Released all slaves [ 226.555652][ T8246] chnl_net:caif_netlink_parms(): no params data found [ 226.610310][ T72] hsr_slave_0: left promiscuous mode [ 226.623237][ T72] hsr_slave_1: left promiscuous mode [ 226.632449][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.640981][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.648934][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.668169][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.683003][ T72] veth1_macvtap: left promiscuous mode [ 226.689167][ T72] veth0_macvtap: left promiscuous mode [ 226.694891][ T72] veth1_vlan: left promiscuous mode [ 226.706377][ T72] veth0_vlan: left promiscuous mode [ 226.794633][ T72] team_slave_1 (unregistering): left promiscuous mode [ 226.805953][ T72] team0 (unregistering): Port device team_slave_1 removed [ 226.817561][ T72] team_slave_0 (unregistering): left promiscuous mode [ 226.824788][ T72] team0 (unregistering): Port device team_slave_0 removed [ 226.914170][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. [ 226.931660][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'. [ 226.964293][ T8307] bond_slave_0: entered promiscuous mode [ 226.970063][ T8307] bond_slave_1: entered promiscuous mode [ 226.989673][ T8307] vlan2: entered promiscuous mode [ 226.994804][ T8307] bond0: entered promiscuous mode [ 227.026366][ T8246] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.033731][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.041240][ T8246] bridge_slave_0: entered allmulticast mode [ 227.048247][ T8246] bridge_slave_0: entered promiscuous mode [ 227.057092][ T8246] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.064332][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.071814][ T8246] bridge_slave_1: entered allmulticast mode [ 227.081445][ T8246] bridge_slave_1: entered promiscuous mode [ 227.119702][ T28] audit: type=1400 audit(1774438823.196:1123): avc: denied { ioctl } for pid=8316 comm="syz.3.1063" path="socket:[22183]" dev="sockfs" ino=22183 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.119978][ T8246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.157154][ T8318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.164433][ T8318] IPv6: NLM_F_CREATE should be set when creating new route [ 227.171690][ T8318] IPv6: NLM_F_CREATE should be set when creating new route [ 227.175632][ T8246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.178929][ T8318] IPv6: NLM_F_CREATE should be set when creating new route [ 227.215165][ T8326] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.1065'. [ 227.224104][ T8246] team0: Port device team_slave_0 added [ 227.237150][ T8326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1065'. [ 227.375560][ T8335] loop3: detected capacity change from 0 to 8192 [ 227.425327][ T8246] team0: Port device team_slave_1 added [ 227.468167][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.475360][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.503687][ T8246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.575877][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.587262][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.614260][ T8246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.196429][ T8246] hsr_slave_0: entered promiscuous mode [ 228.202636][ T8246] hsr_slave_1: entered promiscuous mode [ 228.208620][ T8246] debugfs: 'hsr0' already exists in 'hsr' [ 228.214363][ T8246] Cannot create hsr debugfs directory [ 228.593809][ T8246] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.609772][ T8392] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1074'. [ 228.638203][ T8246] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.676052][ T8246] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.699505][ T8246] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.789298][ T8246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.801983][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 228.813870][ T8405] vlan2: entered promiscuous mode [ 228.834071][ T8246] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.849635][ T4750] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.856753][ T4750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.887191][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.894418][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.007843][ T8415] sctp: [Deprecated]: syz.0.1078 (pid 8415) Use of int in maxseg socket option. [ 229.007843][ T8415] Use struct sctp_assoc_value instead [ 229.065964][ T8422] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.1079'. [ 229.101040][ T8422] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1079'. [ 229.125463][ T8246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.565750][ T8446] FAULT_INJECTION: forcing a failure. [ 229.565750][ T8446] name failslab, interval 1, probability 0, space 0, times 0 [ 229.603757][ T8446] CPU: 0 UID: 0 PID: 8446 Comm: syz.3.1083 Not tainted syzkaller #0 PREEMPT(full) [ 229.603785][ T8446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.603820][ T8446] Call Trace: [ 229.603826][ T8446] [ 229.603833][ T8446] __dump_stack+0x1d/0x30 [ 229.603905][ T8446] dump_stack_lvl+0x95/0xd0 [ 229.603935][ T8446] dump_stack+0x15/0x1b [ 229.603995][ T8446] should_fail_ex+0x263/0x280 [ 229.604020][ T8446] should_failslab+0x8c/0xb0 [ 229.604040][ T8446] kmem_cache_alloc_noprof+0x66/0x400 [ 229.604061][ T8446] ? skb_clone+0x151/0x1f0 [ 229.604151][ T8446] skb_clone+0x151/0x1f0 [ 229.604179][ T8446] __netlink_deliver_tap+0x2c9/0x500 [ 229.604224][ T8446] netlink_unicast+0x66b/0x690 [ 229.604260][ T8446] netlink_sendmsg+0x5c8/0x6f0 [ 229.604376][ T8446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.604446][ T8446] ____sys_sendmsg+0x563/0x5b0 [ 229.604537][ T8446] ___sys_sendmsg+0x195/0x1e0 [ 229.604589][ T8446] __x64_sys_sendmsg+0xd4/0x160 [ 229.604661][ T8446] x64_sys_call+0x194c/0x3020 [ 229.604695][ T8446] do_syscall_64+0x12c/0x370 [ 229.604734][ T8446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.604810][ T8446] RIP: 0033:0x7fb6f124c799 [ 229.604901][ T8446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.604923][ T8446] RSP: 002b:00007fb6efca7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.604942][ T8446] RAX: ffffffffffffffda RBX: 00007fb6f14c5fa0 RCX: 00007fb6f124c799 [ 229.604955][ T8446] RDX: 00000000440088c4 RSI: 0000200000000040 RDI: 0000000000000003 [ 229.604968][ T8446] RBP: 00007fb6efca7090 R08: 0000000000000000 R09: 0000000000000000 [ 229.604980][ T8446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.605025][ T8446] R13: 00007fb6f14c6038 R14: 00007fb6f14c5fa0 R15: 00007ffc83958f18 [ 229.605106][ T8446] [ 229.981190][ T8246] veth0_vlan: entered promiscuous mode [ 229.987046][ T8471] tipc: Started in network mode [ 229.992305][ T8471] tipc: Node identity , cluster identity 4711 [ 229.999152][ T8471] tipc: Failed to set node id, please configure manually [ 230.006418][ T8471] tipc: Enabling of bearer rejected, failed to enable media [ 230.022415][ T8246] veth1_vlan: entered promiscuous mode [ 230.032227][ T8471] netlink: 'syz.1.1082': attribute type 2 has an invalid length. [ 230.064683][ T8246] veth0_macvtap: entered promiscuous mode [ 230.391494][ T8246] veth1_macvtap: entered promiscuous mode [ 230.470866][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.520926][ T8477] can0: slcan on ttyS3. [ 230.525038][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.539112][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.558834][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.569431][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.587664][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.597013][ T8470] can0 (unregistered): slcan off ttyS3. [ 230.701617][ T8497] loop4: detected capacity change from 0 to 128 [ 230.801736][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 230.816316][ T8501] 8021q: VLANs not supported on nlmon0 [ 230.888887][ T8499] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1087'. [ 230.913946][ T8507] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.1090'. [ 230.933088][ T8507] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1090'. [ 231.454145][ T8525] loop3: detected capacity change from 0 to 164 [ 231.539618][ T8525] Unable to read rock-ridge attributes [ 231.661990][ T8525] Unable to read rock-ridge attributes [ 231.764522][ T8531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1094'. [ 232.051969][ T8525] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 232.084565][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1094'. [ 233.185520][ T8546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.218726][ T8546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.314167][ T28] audit: type=1400 audit(1774438829.386:1124): avc: denied { ioctl } for pid=8545 comm="syz.0.1099" path="socket:[22951]" dev="sockfs" ino=22951 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 233.442797][ T8573] loop4: detected capacity change from 0 to 1024 [ 234.121890][ T8588] siw: device registration error -23 [ 234.172489][ T8559] delete_channel: no stack [ 234.586285][ T28] audit: type=1400 audit(1774438830.606:1125): avc: denied { mounton } for pid=8594 comm="syz.3.1109" path="/proc/55/task" dev="proc" ino=22998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 234.769713][ T28] audit: type=1400 audit(1774438830.616:1126): avc: denied { setopt } for pid=8594 comm="syz.3.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 234.969362][ T8609] __nla_validate_parse: 4 callbacks suppressed [ 234.969378][ T8609] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.1112'. [ 235.039598][ T8610] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1112'. [ 235.725041][ T8617] loop4: detected capacity change from 0 to 1024 [ 235.819405][ T8614] loop1: detected capacity change from 0 to 8192 [ 236.094232][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 237.165223][ T8647] netlink: 'syz.4.1123': attribute type 1 has an invalid length. [ 237.440940][ T8655] siw: device registration error -23 [ 237.519585][ T8651] veth0_virt_wifi: entered promiscuous mode [ 237.704594][ T28] audit: type=1400 audit(1774438833.776:1127): avc: denied { getopt } for pid=8658 comm="syz.2.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.613382][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 238.625786][ T8717] bond_slave_0: entered promiscuous mode [ 238.631564][ T8717] bond_slave_1: entered promiscuous mode [ 238.642028][ T8719] loop0: detected capacity change from 0 to 1024 [ 238.648599][ T8717] vlan2: entered promiscuous mode [ 238.653647][ T8717] bond0: entered promiscuous mode [ 238.873717][ T8729] loop4: detected capacity change from 0 to 8192 [ 238.940369][ T8742] loop0: detected capacity change from 0 to 1024 [ 239.176808][ T8762] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 239.820850][ T8792] siw: device registration error -23 [ 241.112492][ T28] audit: type=1400 audit(1774438837.176:1128): avc: denied { ioctl } for pid=8840 comm="syz.2.1142" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 241.151785][ T8841] hsr0: entered promiscuous mode [ 241.414879][ T8845] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1152'. [ 241.509003][ T28] audit: type=1400 audit(1774438837.586:1129): avc: denied { append } for pid=8840 comm="syz.2.1142" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 241.630971][ T8862] loop3: detected capacity change from 0 to 8192 [ 241.643856][ T8866] loop0: detected capacity change from 0 to 1024 [ 241.692447][ T8864] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1145'. [ 241.743714][ T8841] loop2: detected capacity change from 0 to 1024 [ 241.757647][ T8841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.775066][ T8841] netlink: 'syz.2.1142': attribute type 16 has an invalid length. [ 241.793465][ T8841] netlink: 'syz.2.1142': attribute type 3 has an invalid length. [ 241.806166][ T8841] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1142'. [ 241.826552][ T8876] netlink: 'syz.1.1147': attribute type 1 has an invalid length. [ 241.853809][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1142'. [ 241.951298][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 241.964936][ T8879] vlan2: entered promiscuous mode [ 242.007314][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.097090][ T8881] loop4: detected capacity change from 0 to 8192 [ 242.103525][ T8884] random: crng reseeded on system resumption [ 242.130420][ T8884] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 242.154276][ T8884] bond9 (unregistering): Released all slaves [ 242.543746][ T8895] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 242.555447][ T8895] bond1 (unregistering): Released all slaves [ 243.034977][ T28] audit: type=1400 audit(1774438839.106:1130): avc: denied { execute } for pid=8910 comm="syz.2.1157" name="file1" dev="tmpfs" ino=1328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 243.143381][ T8911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1157'. [ 243.270185][ T28] audit: type=1400 audit(1774438839.106:1131): avc: denied { execute_no_trans } for pid=8910 comm="syz.2.1157" path="/243/file1" dev="tmpfs" ino=1328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 243.576701][ T8915] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1158'. [ 243.918999][ T8926] loop4: detected capacity change from 0 to 1024 [ 244.519811][ T8932] netlink: 'syz.2.1161': attribute type 1 has an invalid length. [ 244.749166][ T8941] loop2: detected capacity change from 0 to 256 [ 244.749623][ T8945] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.1167'. [ 244.796906][ T8945] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1167'. [ 244.836486][ T8941] FAT-fs (loop2): bogus number of directory entries (2) [ 244.843923][ T8941] FAT-fs (loop2): Can't find a valid FAT filesystem [ 245.128635][ T8948] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.1168'. [ 245.260524][ T28] audit: type=1326 audit(1774438841.306:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 245.326121][ T28] audit: type=1326 audit(1774438841.326:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 245.396133][ T28] audit: type=1326 audit(1774438841.336:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 245.466130][ T28] audit: type=1326 audit(1774438841.336:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 245.537928][ T28] audit: type=1326 audit(1774438841.376:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 245.627619][ T28] audit: type=1326 audit(1774438841.376:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 245.826918][ T8965] loop4: detected capacity change from 0 to 512 [ 245.892282][ T8968] loop0: detected capacity change from 0 to 1024 [ 247.935180][ T8989] __nla_validate_parse: 2 callbacks suppressed [ 247.935197][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 248.067042][ T8996] loop4: detected capacity change from 0 to 8192 [ 248.203837][ T9006] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1184'. [ 248.235384][ T9015] loop0: detected capacity change from 0 to 2048 [ 248.330408][ T9015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.371289][ T9015] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.388884][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 248.388899][ T28] audit: type=1400 audit(1774438844.466:1144): avc: denied { accept } for pid=9014 comm="syz.0.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 248.527244][ T9024] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.1188'. [ 248.538256][ T9024] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1188'. [ 249.135584][ T9028] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1187: bg 0: block 345: padding at end of block bitmap is not set [ 249.151890][ T9028] EXT4-fs (loop0): Remounting filesystem read-only [ 249.179408][ T50] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 249.464872][ T9037] bond1: option min_links: invalid value (18446744073709530014) [ 249.483133][ T9037] bond1: option min_links: allowed values 0 - 2147483647 [ 249.496813][ T6465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.498071][ T9037] bond1 (unregistering): Released all slaves [ 249.534599][ T9038] bond1: option min_links: invalid value (18446744073709530014) [ 249.556057][ T9038] bond1: option min_links: allowed values 0 - 2147483647 [ 249.591289][ T9038] bond1 (unregistering): Released all slaves [ 249.697166][ T9042] syzkaller0: entered promiscuous mode [ 249.702742][ T9042] syzkaller0: entered allmulticast mode [ 249.850290][ T9050] loop0: detected capacity change from 0 to 1024 [ 250.466786][ T9061] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1198'. [ 251.459305][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 251.470966][ T9085] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.1205'. [ 251.499223][ T9083] vlan2: entered promiscuous mode [ 251.635754][ T9091] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1205'. [ 251.954300][ T9093] netlink: 'syz.3.1208': attribute type 1 has an invalid length. [ 251.997691][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 252.009499][ T9095] vlan2: entered promiscuous mode [ 252.135822][ T9104] random: crng reseeded on system resumption [ 252.147544][ T9105] netlink: 64691 bytes leftover after parsing attributes in process `syz.2.1212'. [ 252.165833][ T9104] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 252.205351][ T9104] bond1 (unregistering): Released all slaves [ 252.294697][ T28] audit: type=1400 audit(1774438848.366:1145): avc: denied { connect } for pid=9112 comm="syz.2.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 252.327117][ T28] audit: type=1400 audit(1774438848.366:1146): avc: denied { getopt } for pid=9112 comm="syz.2.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 252.685593][ T28] audit: type=1400 audit(1774438848.756:1147): avc: denied { create } for pid=9122 comm="syz.4.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 252.711520][ T28] audit: type=1400 audit(1774438848.756:1148): avc: denied { write } for pid=9122 comm="syz.4.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 252.717766][ T9123] tipc: Started in network mode [ 252.739231][ T9123] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 252.761774][ T9123] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 252.786431][ T9123] tipc: Enabled bearer , priority 10 [ 252.919138][ T9126] FAULT_INJECTION: forcing a failure. [ 252.919138][ T9126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.946174][ T9126] CPU: 1 UID: 0 PID: 9126 Comm: syz.4.1217 Not tainted syzkaller #0 PREEMPT(full) [ 252.946271][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.946305][ T9126] Call Trace: [ 252.946313][ T9126] [ 252.946322][ T9126] __dump_stack+0x1d/0x30 [ 252.946355][ T9126] dump_stack_lvl+0x95/0xd0 [ 252.946414][ T9126] dump_stack+0x15/0x1b [ 252.946442][ T9126] should_fail_ex+0x263/0x280 [ 252.946468][ T9126] should_fail+0xb/0x20 [ 252.946555][ T9126] should_fail_usercopy+0x1a/0x20 [ 252.946588][ T9126] strncpy_from_user+0x27/0x250 [ 252.946685][ T9126] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 252.946717][ T9126] do_getname+0x59/0x1c0 [ 252.946756][ T9126] user_path_at+0x28/0x100 [ 252.946794][ T9126] __se_sys_mount+0x25b/0x2e0 [ 252.946894][ T9126] ? fput+0x8f/0xc0 [ 252.946928][ T9126] __x64_sys_mount+0x67/0x80 [ 252.947026][ T9126] x64_sys_call+0x2d61/0x3020 [ 252.947062][ T9126] do_syscall_64+0x12c/0x370 [ 252.947127][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.947217][ T9126] RIP: 0033:0x7f35aec6c799 [ 252.947236][ T9126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.947258][ T9126] RSP: 002b:00007f35ad6bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.947344][ T9126] RAX: ffffffffffffffda RBX: 00007f35aeee5fa0 RCX: 00007f35aec6c799 [ 252.947362][ T9126] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000 [ 252.947378][ T9126] RBP: 00007f35ad6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 252.947394][ T9126] R10: 0000000000206002 R11: 0000000000000246 R12: 0000000000000001 [ 252.947411][ T9126] R13: 00007f35aeee6038 R14: 00007f35aeee5fa0 R15: 00007fff5683af48 [ 252.947520][ T9126] [ 253.150842][ T9128] __nla_validate_parse: 3 callbacks suppressed [ 253.150855][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'. [ 253.169947][ T9130] loop3: detected capacity change from 0 to 512 [ 253.189120][ T9132] netlink: 64691 bytes leftover after parsing attributes in process `syz.2.1220'. [ 253.192451][ T9128] team_slave_0: entered promiscuous mode [ 253.204079][ T9128] team_slave_1: entered promiscuous mode [ 253.217431][ T9130] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 253.227621][ T9128] vlan2: entered promiscuous mode [ 253.232876][ T9128] team0: entered promiscuous mode [ 253.241279][ T9132] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1220'. [ 253.265464][ T9130] EXT4-fs (loop3): 1 truncate cleaned up [ 253.273023][ T9130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.276323][ T28] audit: type=1400 audit(1774438849.346:1149): avc: denied { connect } for pid=9134 comm="syz.1.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.380901][ T28] audit: type=1400 audit(1774438849.456:1150): avc: denied { lock } for pid=9129 comm="syz.3.1218" path="/32/file1/cgroup.kill" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 253.437546][ T7952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.630469][ T9140] loop4: detected capacity change from 0 to 8192 [ 253.867098][ T3402] tipc: Node number set to 1 [ 254.087497][ T9152] SELinux: failed to load policy [ 254.412453][ T9159] random: crng reseeded on system resumption [ 254.438927][ T9159] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 254.494351][ T9159] bond3 (unregistering): Released all slaves [ 254.502010][ T9165] loop4: detected capacity change from 0 to 1024 [ 254.677779][ T9170] netlink: 'syz.2.1231': attribute type 39 has an invalid length. [ 255.000500][ T9178] tmpfs: Bad value for 'size' [ 255.014305][ T9170] loop2: detected capacity change from 0 to 4096 [ 255.064286][ T28] audit: type=1400 audit(1774438851.136:1151): avc: denied { mounton } for pid=9169 comm="syz.2.1231" path="/254/file0" dev="tmpfs" ino=1387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 255.115756][ T9182] FAULT_INJECTION: forcing a failure. [ 255.115756][ T9182] name failslab, interval 1, probability 0, space 0, times 0 [ 255.136199][ T9182] CPU: 1 UID: 0 PID: 9182 Comm: syz.4.1233 Not tainted syzkaller #0 PREEMPT(full) [ 255.136265][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.136284][ T9182] Call Trace: [ 255.136291][ T9182] [ 255.136299][ T9182] __dump_stack+0x1d/0x30 [ 255.136355][ T9182] dump_stack_lvl+0x95/0xd0 [ 255.136380][ T9182] dump_stack+0x15/0x1b [ 255.136407][ T9182] should_fail_ex+0x263/0x280 [ 255.136458][ T9182] should_failslab+0x8c/0xb0 [ 255.136486][ T9182] __kvmalloc_node_noprof+0x155/0x650 [ 255.136518][ T9182] ? bpf_test_run_xdp_live+0x137/0x1360 [ 255.136592][ T9182] ? mutex_unlock+0x4e/0x90 [ 255.136644][ T9182] bpf_test_run_xdp_live+0x137/0x1360 [ 255.136684][ T9182] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 255.136718][ T9182] ? __pfx_autoremove_wake_function+0x10/0x10 [ 255.136834][ T9182] ? mutex_unlock+0x4e/0x90 [ 255.136874][ T9182] ? 0xffffffffa0205240 [ 255.136889][ T9182] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 255.137001][ T9182] ? 0xffffffffa0205240 [ 255.137028][ T9182] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 255.137079][ T9182] bpf_prog_test_run_xdp+0x57b/0xa10 [ 255.137126][ T9182] ? __rcu_read_unlock+0x4e/0x70 [ 255.137210][ T9182] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 255.137245][ T9182] bpf_prog_test_run+0x204/0x340 [ 255.137276][ T9182] __sys_bpf+0x52e/0x7e0 [ 255.137372][ T9182] __x64_sys_bpf+0x41/0x50 [ 255.137410][ T9182] x64_sys_call+0x10cb/0x3020 [ 255.137455][ T9182] do_syscall_64+0x12c/0x370 [ 255.137494][ T9182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.137579][ T9182] RIP: 0033:0x7f35aec6c799 [ 255.137596][ T9182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.137616][ T9182] RSP: 002b:00007f35ad6bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.137637][ T9182] RAX: ffffffffffffffda RBX: 00007f35aeee5fa0 RCX: 00007f35aec6c799 [ 255.137648][ T9182] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 255.137660][ T9182] RBP: 00007f35ad6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 255.137701][ T9182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.137714][ T9182] R13: 00007f35aeee6038 R14: 00007f35aeee5fa0 R15: 00007fff5683af48 [ 255.137736][ T9182] [ 255.390400][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'. [ 255.408724][ T9170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.433237][ T9186] vlan2: entered promiscuous mode [ 255.468377][ T9170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.518779][ T9192] 9p: Bad value for 'wfdno' [ 255.543526][ T9193] syzkaller0: entered promiscuous mode [ 255.552392][ T9193] syzkaller0: entered allmulticast mode [ 255.670605][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 255.870895][ T9205] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.1240'. [ 255.939005][ T9205] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1240'. [ 255.963767][ T9203] loop2: detected capacity change from 0 to 8192 [ 256.273661][ T9211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1241'. [ 256.738839][ T9228] loop0: detected capacity change from 0 to 1024 [ 256.744151][ T9229] random: crng reseeded on system resumption [ 256.779955][ T9228] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 256.802238][ T9229] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 256.823440][ T9227] loop4: detected capacity change from 0 to 4096 [ 256.831483][ T9229] bond10 (unregistering): Released all slaves [ 256.856360][ T9228] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 256.856554][ T9227] EXT4-fs: Ignoring removed bh option [ 256.867225][ T9228] EXT4-fs (loop0): invalid journal inode [ 256.877251][ T9228] EXT4-fs (loop0): can't get journal size [ 256.911224][ T9227] journal_path: Non-blockdev passed as './file0' [ 256.918180][ T9227] EXT4-fs: error: could not find journal device path [ 256.938483][ T9228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.065720][ T9237] tmpfs: Bad value for 'size' [ 257.415529][ T9245] syzkaller0: entered promiscuous mode [ 257.421117][ T9245] syzkaller0: entered allmulticast mode [ 257.551639][ T9250] tmpfs: Bad value for 'size' [ 257.687549][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'. [ 257.699268][ T9253] vlan2: entered promiscuous mode [ 257.792750][ T9256] loop1: detected capacity change from 0 to 1024 [ 257.849932][ T9256] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 257.928679][ T9256] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 257.956482][ T9256] EXT4-fs (loop1): invalid journal inode [ 257.972343][ T9256] EXT4-fs (loop1): can't get journal size [ 257.996236][ T28] audit: type=1400 audit(1774438854.066:1152): avc: denied { bind } for pid=9266 comm="syz.2.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 258.020299][ T9256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 258.052980][ T28] audit: type=1400 audit(1774438854.066:1153): avc: denied { setopt } for pid=9266 comm="syz.2.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 258.115812][ T28] audit: type=1400 audit(1774438854.186:1154): avc: denied { mount } for pid=9268 comm="syz.2.1259" name="/" dev="configfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 258.150743][ T9263] loop4: detected capacity change from 0 to 8192 [ 258.785725][ T9276] loop3: detected capacity change from 0 to 1024 [ 258.812586][ T9276] EXT4-fs: Ignoring removed orlov option [ 258.864496][ T9276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.977325][ T7952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.044834][ T9285] syzkaller0: entered promiscuous mode [ 259.062204][ T9285] syzkaller0: entered allmulticast mode [ 259.069602][ T28] audit: type=1400 audit(1774438855.156:1155): avc: denied { ioctl } for pid=9279 comm="syz.4.1262" path="socket:[24422]" dev="sockfs" ino=24422 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 259.115274][ T28] audit: type=1400 audit(1774438855.156:1156): avc: denied { map } for pid=9279 comm="syz.4.1262" path="socket:[24422]" dev="sockfs" ino=24422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 259.146177][ T28] audit: type=1400 audit(1774438855.156:1157): avc: denied { read } for pid=9279 comm="syz.4.1262" path="socket:[24422]" dev="sockfs" ino=24422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 259.308921][ T9289] random: crng reseeded on system resumption [ 259.388006][ T9289] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 259.427359][ T9289] bond1 (unregistering): Released all slaves [ 259.894442][ T9304] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 259.901086][ T9304] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 259.985411][ T9304] vhci_hcd vhci_hcd.0: Device attached [ 260.111207][ T9305] vhci_hcd: connection closed [ 260.111818][ T50] vhci_hcd vhci_hcd.2: stop threads [ 260.134710][ T50] vhci_hcd vhci_hcd.2: release socket [ 260.146396][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 260.186141][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 260.853934][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 260.897770][ T28] audit: type=1400 audit(1774438856.976:1158): avc: denied { setopt } for pid=9315 comm="syz.4.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 261.026363][ T9318] loop2: detected capacity change from 0 to 8192 [ 261.202654][ T9324] FAULT_INJECTION: forcing a failure. [ 261.202654][ T9324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.246996][ T9324] CPU: 1 UID: 0 PID: 9324 Comm: syz.3.1274 Not tainted syzkaller #0 PREEMPT(full) [ 261.247023][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.247103][ T9324] Call Trace: [ 261.247110][ T9324] [ 261.247118][ T9324] __dump_stack+0x1d/0x30 [ 261.247152][ T9324] dump_stack_lvl+0x95/0xd0 [ 261.247183][ T9324] dump_stack+0x15/0x1b [ 261.247211][ T9324] should_fail_ex+0x263/0x280 [ 261.247303][ T9324] should_fail+0xb/0x20 [ 261.247413][ T9324] should_fail_usercopy+0x1a/0x20 [ 261.247491][ T9324] _copy_from_user+0x1c/0xb0 [ 261.247527][ T9324] ___sys_sendmsg+0xc1/0x1e0 [ 261.247626][ T9324] __x64_sys_sendmsg+0xd4/0x160 [ 261.247663][ T9324] x64_sys_call+0x194c/0x3020 [ 261.247712][ T9324] do_syscall_64+0x12c/0x370 [ 261.247747][ T9324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.247770][ T9324] RIP: 0033:0x7fb6f124c799 [ 261.247788][ T9324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.247878][ T9324] RSP: 002b:00007fb6efca7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.247989][ T9324] RAX: ffffffffffffffda RBX: 00007fb6f14c5fa0 RCX: 00007fb6f124c799 [ 261.248001][ T9324] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 261.248014][ T9324] RBP: 00007fb6efca7090 R08: 0000000000000000 R09: 0000000000000000 [ 261.248026][ T9324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.248037][ T9324] R13: 00007fb6f14c6038 R14: 00007fb6f14c5fa0 R15: 00007ffc83958f18 [ 261.248071][ T9324] [ 261.510279][ T9327] loop3: detected capacity change from 0 to 1024 [ 261.916944][ T9330] loop2: detected capacity change from 0 to 1024 [ 261.917621][ T6465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.073985][ T9337] x_tables: ip_tables: osf match: only valid for protocol 6 [ 262.127476][ T9334] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1279'. [ 262.198920][ T9343] tmpfs: Bad value for 'size' [ 262.564271][ T9359] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 262.967386][ T7159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.063000][ T9368] random: crng reseeded on system resumption [ 263.078192][ T9368] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 263.090410][ T9368] bond2 (unregistering): Released all slaves [ 263.189685][ T9374] loop3: detected capacity change from 0 to 1024 [ 263.196884][ T9374] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.259742][ T9367] lo speed is unknown, defaulting to 1000 [ 263.270902][ T9374] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 263.286367][ T9374] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 263.343199][ T9381] loop1: detected capacity change from 0 to 1024 [ 263.498237][ T28] audit: type=1400 audit(1774438859.576:1159): avc: denied { ioctl } for pid=9376 comm="syz.2.1290" path="socket:[25101]" dev="sockfs" ino=25101 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.563551][ T9374] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.1289: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 263.598812][ T9381] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 263.616919][ T9374] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 263.617132][ T9374] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1289: couldn't read orphan inode 11 (err -117) [ 263.626347][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 263.626364][ C0] EXT4-fs (loop3): initial error at time 1774438859: ext4_ext_check_inode:521: inode 11 [ 263.626396][ C0] EXT4-fs (loop3): last error at time 1774438859: ext4_ext_check_inode:521: inode 11 [ 263.670417][ T9381] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 263.687031][ T9381] EXT4-fs (loop1): invalid journal inode [ 263.692865][ T9374] loop3: lost filesystem error report for type 5 error -117 [ 263.695438][ T9374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.744768][ T9374] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1289: Invalid block bitmap block 0 in block_group 0 [ 263.758396][ T9381] EXT4-fs (loop1): can't get journal size [ 263.765230][ T9374] Quota error (device loop3): write_blk: dquota write failed [ 263.775267][ T9374] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 263.790760][ T9381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.804174][ T9374] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.1289: Failed to acquire dquot type 0 [ 264.015765][ T9391] random: crng reseeded on system resumption [ 264.069590][ T9391] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 264.144257][ T9391] bond2 (unregistering): Released all slaves [ 264.174423][ T9394] loop0: detected capacity change from 0 to 1024 [ 264.235620][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 264.277803][ T9399] vlan2: entered promiscuous mode [ 264.283107][ T9401] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.1289: iget: bad extra_isize 65535 (inode size 256) [ 264.286812][ T28] audit: type=1400 audit(1774438860.346:1160): avc: denied { getopt } for pid=9373 comm="syz.3.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 264.349293][ T28] audit: type=1400 audit(1774438860.346:1161): avc: denied { setattr } for pid=9373 comm="syz.3.1289" path="/47/file2" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.475996][ T28] audit: type=1326 audit(1774438860.546:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35aec6c799 code=0x7ffc0000 [ 264.666234][ T28] audit: type=1326 audit(1774438860.546:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35aec6c799 code=0x7ffc0000 [ 264.737501][ T7952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.790936][ T9413] FAULT_INJECTION: forcing a failure. [ 264.790936][ T9413] name failslab, interval 1, probability 0, space 0, times 0 [ 264.794173][ T28] audit: type=1400 audit(1774438860.866:1164): avc: denied { getopt } for pid=9410 comm="syz.3.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.804004][ T9413] CPU: 1 UID: 0 PID: 9413 Comm: syz.2.1296 Not tainted syzkaller #0 PREEMPT(full) [ 264.804078][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.804115][ T9413] Call Trace: [ 264.804164][ T9413] [ 264.804184][ T9413] __dump_stack+0x1d/0x30 [ 264.804247][ T9413] dump_stack_lvl+0x95/0xd0 [ 264.804321][ T9413] dump_stack+0x15/0x1b [ 264.804399][ T9413] should_fail_ex+0x263/0x280 [ 264.804534][ T9413] should_failslab+0x8c/0xb0 [ 264.804597][ T9413] kmem_cache_alloc_noprof+0x66/0x400 [ 264.804674][ T9413] ? dst_alloc+0xbd/0x100 [ 264.804776][ T9413] dst_alloc+0xbd/0x100 [ 264.804866][ T9413] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 264.804929][ T9413] ? __rcu_read_unlock+0x4e/0x70 [ 264.804986][ T9413] ip_route_output_flow+0x65/0x110 [ 264.805057][ T9413] raw_sendmsg+0xc91/0x1140 [ 264.805272][ T9413] ? __pfx_raw_sendmsg+0x10/0x10 [ 264.805377][ T9413] ? __pfx_inet_sendmsg+0x10/0x10 [ 264.805526][ T9413] inet_sendmsg+0xc5/0xd0 [ 264.805643][ T9413] sock_sendmsg+0x1db/0x240 [ 264.805727][ T9413] splice_to_socket+0x6e2/0xa80 [ 264.805864][ T9413] ? rw_verify_area+0x8d/0x160 [ 264.805952][ T9413] ? __pfx_splice_to_socket+0x10/0x10 [ 264.806080][ T9413] do_splice+0x970/0x10b0 [ 264.806152][ T9413] ? proc_fail_nth_write+0x13b/0x160 [ 264.806262][ T9413] ? __rcu_read_unlock+0x4e/0x70 [ 264.806361][ T9413] ? __fget_files+0x184/0x1c0 [ 264.806536][ T9413] __se_sys_splice+0x26c/0x3a0 [ 264.806648][ T9413] __x64_sys_splice+0x78/0x90 [ 264.806741][ T9413] x64_sys_call+0x16ef/0x3020 [ 264.806825][ T9413] do_syscall_64+0x12c/0x370 [ 264.806933][ T9413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.807004][ T9413] RIP: 0033:0x7fb4b6efc799 [ 264.807055][ T9413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.807116][ T9413] RSP: 002b:00007fb4b594f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 264.807171][ T9413] RAX: ffffffffffffffda RBX: 00007fb4b7175fa0 RCX: 00007fb4b6efc799 [ 264.807220][ T9413] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 264.807271][ T9413] RBP: 00007fb4b594f090 R08: 0000000000008000 R09: 0000000000000000 [ 264.807341][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.807396][ T9413] R13: 00007fb4b7176038 R14: 00007fb4b7175fa0 R15: 00007fffbce3c4b8 [ 264.807460][ T9413] [ 265.135623][ T9422] loop4: detected capacity change from 0 to 512 [ 265.276337][ T9415] syzkaller0: entered promiscuous mode [ 265.285956][ T9422] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 265.336555][ T9415] syzkaller0: entered allmulticast mode [ 265.346629][ T9422] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 265.392665][ T9422] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1299: Corrupt directory, running e2fsck is recommended [ 265.453857][ T9434] loop2: detected capacity change from 0 to 8192 [ 265.476870][ T9422] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 265.485094][ T9422] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1299: corrupted in-inode xattr: e_name out of bounds [ 265.520421][ T9422] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.526129][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 265.541728][ C1] EXT4-fs (loop4): initial error at time 1774438861: ext4_iget_extra_inode:5025: inode 15 [ 265.551715][ C1] EXT4-fs (loop4): last error at time 1774438861: ext4_iget_extra_inode:5025: inode 15 [ 265.562773][ T9422] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1299: couldn't read orphan inode 15 (err -117) [ 265.598365][ T9422] loop4: lost filesystem error report for type 5 error -117 [ 265.608100][ T9422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.726958][ T9437] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 265.746227][ T9437] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 265.756445][ T28] audit: type=1400 audit(1774438861.806:1165): avc: denied { watch } for pid=9421 comm="syz.4.1299" path="/59/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.806489][ T9437] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1299: Corrupt directory, running e2fsck is recommended [ 266.065881][ T9441] loop0: detected capacity change from 0 to 256 [ 266.161702][ T9441] FAT-fs (loop0): Directory bread(block 64) failed [ 266.186482][ T9441] FAT-fs (loop0): Directory bread(block 65) failed [ 266.193061][ T9441] FAT-fs (loop0): Directory bread(block 66) failed [ 266.211586][ T9441] FAT-fs (loop0): Directory bread(block 67) failed [ 266.223605][ T8246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.226196][ T9441] FAT-fs (loop0): Directory bread(block 68) failed [ 266.239748][ T9441] FAT-fs (loop0): Directory bread(block 69) failed [ 266.264254][ T9441] FAT-fs (loop0): Directory bread(block 70) failed [ 266.299374][ T9441] FAT-fs (loop0): Directory bread(block 71) failed [ 266.326224][ T9441] FAT-fs (loop0): Directory bread(block 72) failed [ 266.332844][ T9441] FAT-fs (loop0): Directory bread(block 73) failed [ 266.478563][ T9447] IPVS: set_ctl: invalid protocol: 25972 95.115.108.97:30309 [ 266.502331][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 266.502680][ T28] audit: type=1400 audit(1774438862.566:1167): avc: denied { wake_alarm } for pid=9440 comm="syz.0.1302" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.576151][ T28] audit: type=1400 audit(1774438862.646:1168): avc: denied { write } for pid=9442 comm="syz.4.1303" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 266.596681][ T9443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1303'. [ 266.636137][ T28] audit: type=1400 audit(1774438862.646:1169): avc: denied { create } for pid=9442 comm="syz.4.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 266.700226][ T28] audit: type=1400 audit(1774438862.766:1170): avc: denied { write } for pid=9452 comm="syz.2.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 266.967668][ T28] audit: type=1326 audit(1774438863.046:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 267.327256][ T28] audit: type=1326 audit(1774438863.146:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 267.492129][ T9467] loop2: detected capacity change from 0 to 1024 [ 267.507432][ T28] audit: type=1326 audit(1774438863.186:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 267.533176][ T28] audit: type=1326 audit(1774438863.186:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 267.763440][ T9476] loop0: detected capacity change from 0 to 1024 [ 267.779420][ T9480] tmpfs: Bad value for 'nr_inodes' [ 267.798255][ T9476] EXT4-fs: Ignoring removed orlov option [ 267.822467][ T9476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.870222][ T9487] netlink: 64691 bytes leftover after parsing attributes in process `syz.3.1315'. [ 267.929425][ T6465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.399798][ T28] audit: type=1400 audit(1774438865.466:1175): avc: denied { read } for pid=9528 comm="syz.4.1325" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 269.709444][ T7159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.747434][ T9538] random: crng reseeded on system resumption [ 269.773922][ T9540] loop1: detected capacity change from 0 to 1024 [ 269.794963][ T9538] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 269.811992][ T9538] bond2 (unregistering): Released all slaves [ 269.832691][ T9541] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1328'. [ 269.941941][ T28] audit: type=1400 audit(1774438865.916:1176): avc: denied { create } for pid=9534 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 270.000948][ T9552] tmpfs: Bad value for 'nr_inodes' [ 271.320501][ T9578] lo speed is unknown, defaulting to 1000 [ 271.406623][ T9595] random: crng reseeded on system resumption [ 271.459747][ T9597] loop3: detected capacity change from 0 to 1024 [ 271.492584][ T9598] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1343'. [ 271.516271][ T9597] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 271.558725][ T9597] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 271.691859][ T9597] EXT4-fs (loop3): invalid journal inode [ 271.809094][ T9597] EXT4-fs (loop3): can't get journal size [ 271.857494][ T9597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.911986][ T9614] loop1: detected capacity change from 0 to 1024 [ 272.646981][ T9624] loop0: detected capacity change from 0 to 8192 [ 272.897480][ T9631] tipc: Enabling of bearer rejected, already enabled [ 272.910788][ T9632] loop1: detected capacity change from 0 to 512 [ 272.959555][ T9632] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 272.981678][ T9632] EXT4-fs (loop1): orphan cleanup on readonly fs [ 273.000695][ T9632] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1350: bg 0: block 305: padding at end of block bitmap is not set [ 273.015453][ T9632] loop1: lost filesystem error report for type 5 error -117 [ 273.016095][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 273.029891][ C1] EXT4-fs (loop1): initial error at time 1774438869: ext4_validate_block_bitmap:441 [ 273.036554][ T9632] EXT4-fs (loop1): Remounting filesystem read-only [ 273.039771][ C1] EXT4-fs (loop1): last error at time 1774438869: ext4_validate_block_bitmap:441 [ 273.068291][ T9634] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 273.084924][ T9632] EXT4-fs (loop1): 1 truncate cleaned up [ 273.106287][ T72] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 273.126163][ T72] __quota_error: 5 callbacks suppressed [ 273.126179][ T72] Quota error (device loop1): write_blk: dquota write failed [ 273.156133][ T72] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 273.176194][ T72] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 273.208606][ T72] Quota error (device loop1): write_blk: dquota write failed [ 273.216030][ T72] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 273.239674][ T72] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 273.264856][ T72] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 273.276463][ T72] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 273.286949][ T9632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 273.364953][ T7159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.502490][ T9639] loop2: detected capacity change from 0 to 1024 [ 273.540727][ T9639] EXT4-fs: Ignoring removed orlov option [ 273.610904][ T9639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.659966][ T28] audit: type=1400 audit(1774438869.736:1182): avc: denied { write } for pid=9648 comm="syz.0.1355" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 273.709559][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.726442][ T9651] SELinux: Context : is not valid (left unmapped). [ 273.755754][ T28] audit: type=1400 audit(1774438869.766:1183): avc: denied { open } for pid=9648 comm="syz.0.1355" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 273.805850][ T28] audit: type=1400 audit(1774438869.806:1184): avc: denied { mac_admin } for pid=9650 comm="syz.1.1356" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 273.827630][ T28] audit: type=1400 audit(1774438869.866:1185): avc: denied { relabelto } for pid=9650 comm="syz.1.1356" name="rdma.current" dev="tmpfs" ino=425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 273.871677][ T9658] loop1: detected capacity change from 0 to 1024 [ 273.907754][ T9658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.951707][ T9658] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1359'. [ 273.960931][ T9658] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1359'. [ 274.434376][ T7159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.871092][ T9678] loop0: detected capacity change from 0 to 1024 [ 275.076664][ T9678] EXT4-fs: Ignoring removed orlov option [ 275.097858][ T9678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.281492][ T6465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.436189][ T9686] lo speed is unknown, defaulting to 1000 [ 276.525692][ T9708] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.1371'. [ 276.673599][ T9709] lo speed is unknown, defaulting to 1000 [ 276.757133][ T9715] netlink: 'syz.1.1375': attribute type 4 has an invalid length. [ 277.410984][ T7952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.464106][ T9728] loop3: detected capacity change from 0 to 1024 [ 277.472120][ T9728] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.487991][ T9731] loop2: detected capacity change from 0 to 256 [ 277.498033][ T9728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.605957][ T7952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.641380][ T9742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1382'. [ 277.659152][ T9742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1382'. [ 277.785884][ T9742] macvlan0: entered allmulticast mode [ 277.792803][ T9742] veth1_vlan: entered allmulticast mode [ 278.295271][ T9757] loop4: detected capacity change from 0 to 256 [ 278.324526][ T9757] FAULT_INJECTION: forcing a failure. [ 278.324526][ T9757] name failslab, interval 1, probability 0, space 0, times 0 [ 278.379601][ T9757] CPU: 0 UID: 0 PID: 9757 Comm: syz.4.1386 Not tainted syzkaller #0 PREEMPT(full) [ 278.379669][ T9757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.379684][ T9757] Call Trace: [ 278.379690][ T9757] [ 278.379696][ T9757] __dump_stack+0x1d/0x30 [ 278.379748][ T9757] dump_stack_lvl+0x95/0xd0 [ 278.379790][ T9757] dump_stack+0x15/0x1b [ 278.379812][ T9757] should_fail_ex+0x263/0x280 [ 278.379840][ T9757] should_failslab+0x8c/0xb0 [ 278.379869][ T9757] kmem_cache_alloc_noprof+0x66/0x400 [ 278.379893][ T9757] ? do_getname+0x2e/0x1c0 [ 278.379956][ T9757] ? mutex_lock+0x57/0x90 [ 278.380001][ T9757] do_getname+0x2e/0x1c0 [ 278.380022][ T9757] __se_sys_symlinkat+0x23/0x1b0 [ 278.380112][ T9757] __x64_sys_symlinkat+0x43/0x50 [ 278.380137][ T9757] x64_sys_call+0x2b7d/0x3020 [ 278.380170][ T9757] do_syscall_64+0x12c/0x370 [ 278.380202][ T9757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.380234][ T9757] RIP: 0033:0x7f35aec6c799 [ 278.380253][ T9757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.380272][ T9757] RSP: 002b:00007f35ad6bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 278.380367][ T9757] RAX: ffffffffffffffda RBX: 00007f35aeee5fa0 RCX: 00007f35aec6c799 [ 278.380384][ T9757] RDX: 0000200000000240 RSI: ffffffffffffff9c RDI: 0000200000000140 [ 278.380402][ T9757] RBP: 00007f35ad6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 278.380418][ T9757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.380433][ T9757] R13: 00007f35aeee6038 R14: 00007f35aeee5fa0 R15: 00007fff5683af48 [ 278.380456][ T9757] [ 278.670227][ T9763] tmpfs: Bad value for 'nr_inodes' [ 279.021611][ T9773] loop4: detected capacity change from 0 to 1024 [ 279.058377][ T9773] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 279.069367][ T9773] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 279.080611][ T9773] EXT4-fs (loop4): invalid journal inode [ 279.086415][ T9773] EXT4-fs (loop4): can't get journal size [ 279.177870][ T9774] loop1: detected capacity change from 0 to 1024 [ 279.233352][ T9774] EXT4-fs: inline encryption not supported [ 279.448357][ T9779] loop3: detected capacity change from 0 to 512 [ 279.480589][ T9779] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 279.638258][ T9773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.679224][ T9774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.694435][ T9779] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 279.706742][ T9779] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1392: bad orphan inode 4 [ 279.720751][ T9779] loop3: lost filesystem error report for type 5 error -117 [ 279.726093][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 279.739873][ C0] EXT4-fs (loop3): initial error at time 1774438875: ext4_orphan_get:1417 [ 279.748410][ C0] EXT4-fs (loop3): last error at time 1774438875: ext4_orphan_get:1417 [ 279.882987][ T9761] lo speed is unknown, defaulting to 1000 [ 280.630576][ T8246] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /81/file0: bad entry in directory: inode out of bounds - offset=0, inode=511, rec_len=1024, size=1024 fake=0 [ 280.659815][ T9779] EXT4-fs (loop3): 1 orphan inode deleted [ 280.805322][ T9779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.876932][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 280.876983][ T28] audit: type=1400 audit(1774438876.756:1192): avc: denied { name_connect } for pid=9770 comm="syz.1.1390" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 280.996179][ T8246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.084920][ T7159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.142522][ T9793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1397'. [ 281.218569][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1397'. [ 281.397365][ T7952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.436883][ T4750] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.473297][ T9814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1404'. [ 281.517232][ T9814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1404'. [ 282.100029][ T4750] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.337045][ T4750] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.363503][ T9830] netlink: 'syz.1.1406': attribute type 10 has an invalid length. [ 282.516840][ T9832] netlink: 'syz.1.1406': attribute type 10 has an invalid length. [ 282.545535][ T9832] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1406'. [ 282.565707][ T9832] batadv0: entered promiscuous mode [ 282.577607][ T9832] batadv0: entered allmulticast mode [ 282.593315][ T9832] bridge0: port 3(batadv0) entered blocking state [ 282.616174][ T9832] bridge0: port 3(batadv0) entered disabled state [ 282.624099][ T9830] batadv0: left allmulticast mode [ 282.647432][ T9830] batadv0: left promiscuous mode [ 282.652820][ T9830] bridge0: port 3(batadv0) entered disabled state [ 282.677602][ T9830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.695651][ T9830] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 282.725602][ T9808] lo speed is unknown, defaulting to 1000 [ 282.761365][ T4750] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.054851][ T9859] 9p: Bad value for 'source' [ 283.294435][ T9860] loop2: detected capacity change from 0 to 512 [ 283.345239][ T4750] bridge_slave_1: left allmulticast mode [ 283.435014][ T4750] bridge_slave_1: left promiscuous mode [ 283.468993][ T9860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.506327][ T4750] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.559016][ T4750] bridge_slave_0: left allmulticast mode [ 283.573359][ T9860] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.605362][ T4750] bridge_slave_0: left promiscuous mode [ 283.816361][ T4750] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.877152][ T28] audit: type=1400 audit(1774438879.936:1193): avc: denied { mounton } for pid=9858 comm="syz.2.1412" path="/298/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.107874][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.128894][ T4750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.156608][ T4750] bond_slave_0: left promiscuous mode [ 284.186482][ T4750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.210897][ T9883] loop3: detected capacity change from 0 to 8192 [ 284.217744][ T4750] bond_slave_1: left promiscuous mode [ 284.237547][ T4750] bond0 (unregistering): Released all slaves [ 284.285964][ T4750] bond1 (unregistering): Released all slaves [ 284.359059][ T9808] chnl_net:caif_netlink_parms(): no params data found [ 284.399806][ T4750] tipc: Disabling bearer [ 284.423324][ T4750] tipc: Left network mode [ 284.478245][ T4750] hsr_slave_0: left promiscuous mode [ 284.498893][ T4750] hsr_slave_1: left promiscuous mode [ 284.519282][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.552157][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.580915][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.608955][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.652112][ T4750] veth0_virt_wifi: left promiscuous mode [ 284.678693][ T4750] veth1_macvtap: left promiscuous mode [ 284.711338][ T4750] veth0_macvtap: left promiscuous mode [ 284.732651][ T4750] veth1_vlan: left promiscuous mode [ 284.756236][ T4750] veth0_vlan: left promiscuous mode [ 285.011517][ T4750] team_slave_1 (unregistering): left promiscuous mode [ 285.031916][ T4750] team0 (unregistering): Port device team_slave_1 removed [ 285.061326][ T4750] team_slave_0 (unregistering): left promiscuous mode [ 285.072023][ T4750] team0 (unregistering): Port device team_slave_0 removed [ 285.199367][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.216170][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.223462][ T9808] bridge_slave_0: entered allmulticast mode [ 285.230223][ T9808] bridge_slave_0: entered promiscuous mode [ 285.237174][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.244532][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.251932][ T9808] bridge_slave_1: entered allmulticast mode [ 285.258547][ T9808] bridge_slave_1: entered promiscuous mode [ 285.281425][ T9808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.299650][ T9808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.325086][ T9808] team0: Port device team_slave_0 added [ 285.331979][ T9808] team0: Port device team_slave_1 added [ 285.349036][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.356051][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.385038][ T9808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.403983][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.423177][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.484181][ T9808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.560031][ T9808] hsr_slave_0: entered promiscuous mode [ 285.576877][ T9808] hsr_slave_1: entered promiscuous mode [ 285.606572][ T9944] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 285.699561][ T9955] loop2: detected capacity change from 0 to 512 [ 285.742547][ T9955] EXT4-fs: Ignoring removed nobh option [ 285.757747][ T9955] ------------[ cut here ]------------ [ 285.763312][ T9955] EA inode 11 i_nlink=1026 [ 285.763336][ T9955] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.2.1428/9955 [ 285.778592][ T9955] Modules linked in: [ 285.782559][ T9955] CPU: 0 UID: 0 PID: 9955 Comm: syz.2.1428 Not tainted syzkaller #0 PREEMPT(full) [ 285.791990][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.802160][ T9955] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 285.808930][ T9955] Code: 34 4b 99 ff 4c 8d 2d 0d b4 5d 05 49 8d 7e 40 e8 84 df b5 ff 49 8b 6e 40 4c 89 e7 e8 b8 da b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 8f 9b dd 03 66 66 66 66 66 66 2e [ 285.828681][ T9955] RSP: 0000:ffffc90007a3b5a8 EFLAGS: 00010246 [ 285.834816][ T9955] RAX: ffff888104939b88 RBX: ffff88811b63cec8 RCX: ffffffff81c01408 [ 285.842907][ T9955] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dc800 [ 285.851035][ T9955] RBP: 000000000000000b R08: 000188811b63ce7b R09: 0000000000000000 [ 285.859073][ T9955] R10: ffffc90007a3b4d8 R11: 0001c90007a3b4d8 R12: ffff88811b63ce78 [ 285.867179][ T9955] R13: ffffffff871dc800 R14: ffff88811b63ce30 R15: 0000000000000001 [ 285.875262][ T9955] FS: 00007fb4b594f6c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 285.884239][ T9955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.890894][ T9955] CR2: 00007f221ac4cd30 CR3: 000000010acbc000 CR4: 00000000003506f0 [ 285.898953][ T9955] Call Trace: [ 285.902256][ T9955] [ 285.905306][ T9955] ext4_xattr_set_entry+0x77c/0x1010 [ 285.910734][ T9955] ext4_xattr_ibody_set+0x184/0x3c0 [ 285.916144][ T9955] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 285.922033][ T9955] __ext4_expand_extra_isize+0x246/0x280 [ 285.927798][ T9955] __ext4_mark_inode_dirty+0x29b/0x400 [ 285.933341][ T9955] ext4_evict_inode+0x7c3/0xd60 [ 285.938384][ T9955] ? __pfx_ext4_evict_inode+0x10/0x10 [ 285.943784][ T9955] evict+0x2af/0x510 [ 285.947811][ T9955] ? __dquot_initialize+0x146/0x7c0 [ 285.953152][ T9955] iput+0x41a/0x580 [ 285.957037][ T9955] ext4_process_orphan+0x1a9/0x1c0 [ 285.962273][ T9955] ext4_orphan_cleanup+0x6a8/0xa00 [ 285.967589][ T9955] ext4_fill_super+0x3408/0x37c0 [ 285.972606][ T9955] ? set_blocksize+0x14c/0x270 [ 285.977440][ T9955] ? setup_bdev_super+0x30e/0x370 [ 285.982589][ T9955] ? __pfx_ext4_fill_super+0x10/0x10 [ 285.988014][ T9955] get_tree_bdev_flags+0x291/0x300 [ 285.993191][ T9955] ? __pfx_ext4_fill_super+0x10/0x10 [ 285.998590][ T9955] get_tree_bdev+0x1f/0x30 [ 286.003190][ T9955] ext4_get_tree+0x1c/0x30 [ 286.007663][ T9955] vfs_get_tree+0x57/0x1d0 [ 286.012133][ T9955] do_new_mount+0x288/0x8d0 [ 286.016699][ T9955] path_mount+0x4d0/0xbc0 [ 286.021079][ T9955] __se_sys_mount+0x28c/0x2e0 [ 286.025796][ T9955] __x64_sys_mount+0x67/0x80 [ 286.030454][ T9955] x64_sys_call+0x2d61/0x3020 [ 286.035279][ T9955] do_syscall_64+0x12c/0x370 [ 286.039962][ T9955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.045943][ T9955] RIP: 0033:0x7fb4b6efda0a [ 286.050413][ T9955] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.070182][ T9955] RSP: 002b:00007fb4b594ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 286.078649][ T9955] RAX: ffffffffffffffda RBX: 00007fb4b594eee0 RCX: 00007fb4b6efda0a [ 286.086730][ T9955] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fb4b594eea0 [ 286.094749][ T9955] RBP: 0000200000000180 R08: 00007fb4b594eee0 R09: 0000000000000740 [ 286.102777][ T9955] R10: 0000000000000740 R11: 0000000000000246 R12: 0000200000000140 [ 286.110819][ T9955] R13: 00007fb4b594eea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 286.118947][ T9955] [ 286.121994][ T9955] ---[ end trace 0000000000000000 ]--- [ 286.128702][ T9955] EXT4-fs (loop2): 1 orphan inode deleted [ 286.135521][ T9955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.154943][ T9808] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 286.218289][ T9808] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 286.235564][ T9808] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 286.266607][ T9808] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 286.356631][ T9808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.385044][ T9808] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.404478][ T4750] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.411616][ T4750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.448776][ T4750] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.455891][ T4750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.635540][ T9808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.849516][T10040] loop0: detected capacity change from 0 to 1024 [ 286.878457][T10040] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.903466][T10040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 286.917248][T10040] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 286.994208][T10047] lo speed is unknown, defaulting to 1000 [ 287.148834][T10040] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.1441: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 287.190191][ T9808] veth0_vlan: entered promiscuous mode [ 287.221130][ T9808] veth1_vlan: entered promiscuous mode [ 287.244851][T10040] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 287.245477][T10040] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1441: couldn't read orphan inode 11 (err -117) [ 287.254844][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 287.254880][ C1] EXT4-fs (loop0): initial error at time 1774438883: ext4_ext_check_inode:521: inode 11 [ 287.254919][ C1] EXT4-fs (loop0): last error at time 1774438883: ext4_ext_check_inode:521: inode 11 [ 287.347724][ T9808] veth0_macvtap: entered promiscuous mode [ 287.381624][ T9808] veth1_macvtap: entered promiscuous mode [ 287.413341][T10040] loop0: lost filesystem error report for type 5 error -117 [ 287.413739][T10040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.438201][ T9808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.447209][ T9808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.459326][T10040] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1441: Invalid block bitmap block 0 in block_group 0 [ 287.475307][ T61] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.476681][T10040] Quota error (device loop0): write_blk: dquota write failed [ 287.490336][ T61] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.500127][T10040] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 287.510447][T10040] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.1441: Failed to acquire dquot type 0 [ 287.543932][ T61] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.565536][ T61] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.584637][ T28] audit: type=1400 audit(1774438883.656:1194): avc: denied { mount } for pid=9808 comm="syz-executor" name="/" dev="gadgetfs" ino=4577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 287.760992][T10064] loop1: detected capacity change from 0 to 1024 [ 287.844634][ T6465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.855096][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.001567][T10074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10074 comm=syz.2.1447 [ 288.093901][T10075] loop0: detected capacity change from 0 to 1024 [ 288.138700][T10075] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 288.149680][T10075] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 288.161570][T10075] EXT4-fs (loop0): invalid journal inode [ 288.167706][T10075] EXT4-fs (loop0): can't get journal size [ 288.224938][T10075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.250244][T10075] FAULT_INJECTION: forcing a failure. [ 288.250244][T10075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.263438][T10075] CPU: 0 UID: 0 PID: 10075 Comm: syz.0.1446 Tainted: G W syzkaller #0 PREEMPT(full) [ 288.263547][T10075] Tainted: [W]=WARN [ 288.263568][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 288.263582][T10075] Call Trace: [ 288.263589][T10075] [ 288.263597][T10075] __dump_stack+0x1d/0x30 [ 288.263627][T10075] dump_stack_lvl+0x95/0xd0 [ 288.263649][T10075] dump_stack+0x15/0x1b [ 288.263673][T10075] should_fail_ex+0x263/0x280 [ 288.263850][T10075] should_fail+0xb/0x20 [ 288.263874][T10075] should_fail_usercopy+0x1a/0x20 [ 288.263976][T10075] _copy_to_user+0x20/0xa0 [ 288.264010][T10075] simple_read_from_buffer+0xb5/0x130 [ 288.264033][T10075] proc_fail_nth_read+0x10e/0x150 [ 288.264114][T10075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.264180][T10075] vfs_read+0x1ab/0x7f0 [ 288.264214][T10075] ksys_read+0xdc/0x1a0 [ 288.264229][T10075] __x64_sys_read+0x40/0x50 [ 288.264261][T10075] x64_sys_call+0x2886/0x3020 [ 288.264285][T10075] do_syscall_64+0x12c/0x370 [ 288.264310][T10075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.264349][T10075] RIP: 0033:0x7f60e154cfce [ 288.264362][T10075] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 288.264377][T10075] RSP: 002b:00007f60dffa4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.264424][T10075] RAX: ffffffffffffffda RBX: 00007f60dffa56c0 RCX: 00007f60e154cfce [ 288.264435][T10075] RDX: 000000000000000f RSI: 00007f60dffa50a0 RDI: 000000000000000a [ 288.264445][T10075] RBP: 00007f60dffa5090 R08: 0000000000000000 R09: 0000000000000000 [ 288.264456][T10075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.264467][T10075] R13: 00007f60e1806218 R14: 00007f60e1806180 R15: 00007ffd97743f48 [ 288.264487][T10075] [ 288.478183][ T28] audit: type=1326 audit(1774438884.546:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 288.512720][ T28] audit: type=1326 audit(1774438884.546:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 288.540955][ T28] audit: type=1326 audit(1774438884.546:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 288.607515][T10081] loop5: detected capacity change from 0 to 512 [ 288.623779][ T28] audit: type=1326 audit(1774438884.546:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 288.710919][ T28] audit: type=1326 audit(1774438884.546:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 288.750580][ T28] audit: type=1326 audit(1774438884.546:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 288.780735][T10089] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 288.791447][T10081] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1449: inode has both inline data and extents flags [ 288.808698][T10089] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 288.816313][T10081] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 288.816605][T10081] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1449: couldn't read orphan inode 15 (err -117) [ 288.837735][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 288.837752][ C0] EXT4-fs (loop5): initial error at time 1774438884: ext4_orphan_get:1391: inode 15 [ 288.837783][ C0] EXT4-fs (loop5): last error at time 1774438884: ext4_orphan_get:1391: inode 15 [ 288.873170][ T28] audit: type=1326 audit(1774438884.546:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b6efc799 code=0x7ffc0000 [ 288.933000][T10085] macvlan5: entered promiscuous mode [ 288.956255][T10085] macvlan5: entered allmulticast mode [ 288.965735][T10085] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 289.048928][T10081] loop5: lost filesystem error report for type 5 error -117 [ 289.049503][T10081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.210928][ T9808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.548508][T10121] lo speed is unknown, defaulting to 1000 [ 289.724621][ T6465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.159018][T10132] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.1466'. [ 290.903793][T10145] loop0: detected capacity change from 0 to 512 [ 290.919907][T10145] EXT4-fs: Ignoring removed oldalloc option [ 290.941728][T10145] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1470: bad orphan inode 458767 [ 290.960896][T10145] loop0: lost filesystem error report for type 5 error -117 [ 290.961379][T10145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.085507][T10153] loop1: detected capacity change from 0 to 512 [ 291.110086][T10153] EXT4-fs: Ignoring removed oldalloc option [ 291.185900][T10153] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1472: bad orphan inode 458767 [ 291.196750][T10153] loop1: lost filesystem error report for type 5 error -117 [ 291.197345][T10153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.225208][T10153] FAULT_INJECTION: forcing a failure. [ 291.225208][T10153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.241648][T10153] CPU: 0 UID: 0 PID: 10153 Comm: syz.1.1472 Tainted: G W syzkaller #0 PREEMPT(full) [ 291.241682][T10153] Tainted: [W]=WARN [ 291.241742][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.241774][T10153] Call Trace: [ 291.241787][T10153] [ 291.241862][T10153] __dump_stack+0x1d/0x30 [ 291.241891][T10153] dump_stack_lvl+0x95/0xd0 [ 291.241999][T10153] dump_stack+0x15/0x1b [ 291.242104][T10153] should_fail_ex+0x263/0x280 [ 291.242181][T10153] should_fail+0xb/0x20 [ 291.242207][T10153] should_fail_usercopy+0x1a/0x20 [ 291.242325][T10153] _copy_from_user+0x1c/0xb0 [ 291.242374][T10153] copy_clone_args_from_user+0x3fc/0x500 [ 291.242435][T10153] __se_sys_clone3+0x79/0x230 [ 291.242467][T10153] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 291.242517][T10153] __x64_sys_clone3+0x31/0x40 [ 291.242567][T10153] x64_sys_call+0x580/0x3020 [ 291.242711][T10153] do_syscall_64+0x12c/0x370 [ 291.242743][T10153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.242770][T10153] RIP: 0033:0x7ff6fa01c799 [ 291.242791][T10153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.242811][T10153] RSP: 002b:00007ff6f8a76ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 291.242895][T10153] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff6fa01c799 [ 291.242913][T10153] RDX: 00007ff6f8a76f10 RSI: 0000000000000058 RDI: 00007ff6f8a76f10 [ 291.242930][T10153] RBP: 00007ff6f8a77090 R08: 0000000000000000 R09: 0000000000000058 [ 291.242947][T10153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.242963][T10153] R13: 00007ff6fa296038 R14: 00007ff6fa295fa0 R15: 00007ffcdde64298 [ 291.243013][T10153] [ 291.425482][T10159] openvswitch: netlink: Missing key (keys=40, expected=100) [ 291.443956][ T6465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.516662][ T7159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.568926][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'. [ 292.415113][T10191] 9pnet_fd: Insufficient options for proto=fd [ 292.612892][T10200] random: crng reseeded on system resumption [ 292.640025][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'. [ 292.665218][T10205] loop5: detected capacity change from 0 to 1024 [ 293.220563][T10210] bond3: (slave vxcan7): The slave device specified does not support setting the MAC address [ 293.271087][T10210] bond3: (slave vxcan7): Error -95 calling set_mac_address [ 293.364941][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1489'. [ 293.422708][T10212] macvlan10: entered promiscuous mode [ 293.452802][T10212] macvlan10: entered allmulticast mode [ 293.580006][T10212] bond3: (slave macvlan10): Error -98 calling set_mac_address [ 293.850455][T10228] lo speed is unknown, defaulting to 1000 [ 293.915053][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 293.915093][ T28] audit: type=1400 audit(1774438889.986:1211): avc: denied { read } for pid=10231 comm="syz.5.1493" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 293.948755][ T28] audit: type=1400 audit(1774438889.986:1212): avc: denied { ioctl } for pid=10231 comm="syz.5.1493" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 293.974336][ T28] audit: type=1400 audit(1774438890.026:1213): avc: denied { read } for pid=10231 comm="syz.5.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 294.004337][T10233] loop5: detected capacity change from 0 to 512 [ 294.022095][ T28] audit: type=1400 audit(1774438890.076:1214): avc: denied { listen } for pid=10231 comm="syz.5.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 294.045877][T10233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.189342][T10244] loop1: detected capacity change from 0 to 1024 [ 295.209798][T10244] EXT4-fs: Ignoring removed orlov option [ 295.241884][T10244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.268592][ T9808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.602191][ T7159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.763024][ T28] audit: type=1400 audit(1774438891.836:1215): avc: denied { ioctl } for pid=10263 comm="syz.1.1503" path="socket:[28449]" dev="sockfs" ino=28449 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 295.798359][T10266] random: crng reseeded on system resumption [ 296.758626][T10284] loop0: detected capacity change from 0 to 1024 [ 296.775794][T10284] EXT4-fs: Ignoring removed orlov option [ 296.827705][T10284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.017294][T10299] loop2: detected capacity change from 0 to 128 [ 297.197342][ T6465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.213197][T10313] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.1511'. [ 297.233876][T10313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1511'. [ 297.390665][T10326] loop1: detected capacity change from 0 to 1024 [ 297.410743][T10317] lo speed is unknown, defaulting to 1000 [ 297.461871][T10326] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.486032][T10326] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.522694][T10326] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 297.543471][T10326] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.1514: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 297.569304][T10326] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 297.569505][T10326] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1514: couldn't read orphan inode 11 (err -117) [ 297.578725][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 297.578755][ C1] EXT4-fs (loop1): initial error at time 1774438893: ext4_ext_check_inode:521: inode 11 [ 297.578780][ C1] EXT4-fs (loop1): last error at time 1774438893: ext4_ext_check_inode:521: inode 11 [ 297.621411][T10326] loop1: lost filesystem error report for type 5 error -117 [ 297.635125][T10326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.727026][T10326] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1514: Invalid block bitmap block 0 in block_group 0 [ 297.748686][T10340] veth0_virt_wifi: entered promiscuous mode [ 297.759926][T10326] Quota error (device loop1): write_blk: dquota write failed [ 297.768941][T10326] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 297.780842][T10326] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1514: Failed to acquire dquot type 0 [ 297.832669][T10355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1520'. [ 297.987552][T10381] loop2: detected capacity change from 0 to 1024 [ 298.017118][ T28] audit: type=1400 audit(1774438894.096:1216): avc: denied { setopt } for pid=10363 comm="syz.5.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 298.163315][T10385] loop0: detected capacity change from 0 to 1024 [ 298.205404][T10385] EXT4-fs: Ignoring removed orlov option [ 298.252690][ T7159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.334499][T10385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.447362][T10406] netlink: 'syz.3.1534': attribute type 10 has an invalid length. [ 298.456996][T10406] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.475146][T10406] bridge_slave_1: left allmulticast mode [ 298.481399][T10406] bridge_slave_1: left promiscuous mode [ 298.488093][T10406] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.621608][T10406] bridge_slave_1: entered promiscuous mode [ 298.630919][T10406] team0: Port device bridge_slave_1 added [ 298.660328][ T6465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.065753][T10419] loop5: detected capacity change from 0 to 8192 [ 299.296178][T10435] loop2: detected capacity change from 0 to 8192 [ 299.409942][T10438] loop0: detected capacity change from 0 to 1024 [ 299.418490][T10439] FAULT_INJECTION: forcing a failure. [ 299.418490][T10439] name failslab, interval 1, probability 0, space 0, times 0 [ 299.433030][T10438] EXT4-fs: Ignoring removed orlov option [ 299.447964][T10439] CPU: 0 UID: 0 PID: 10439 Comm: syz.2.1545 Tainted: G W syzkaller #0 PREEMPT(full) [ 299.448010][T10439] Tainted: [W]=WARN [ 299.448016][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.448029][T10439] Call Trace: [ 299.448034][T10439] [ 299.448082][T10439] __dump_stack+0x1d/0x30 [ 299.448116][T10439] dump_stack_lvl+0x95/0xd0 [ 299.448146][T10439] dump_stack+0x15/0x1b [ 299.448173][T10439] should_fail_ex+0x263/0x280 [ 299.448225][T10439] ? alloc_pipe_info+0xad/0x340 [ 299.448244][T10439] should_failslab+0x8c/0xb0 [ 299.448264][T10439] __kmalloc_cache_noprof+0x5f/0x410 [ 299.448291][T10439] alloc_pipe_info+0xad/0x340 [ 299.448316][T10439] splice_direct_to_actor+0x591/0x670 [ 299.448444][T10439] ? kstrtouint_from_user+0xa8/0xf0 [ 299.448478][T10439] ? __pfx_direct_splice_actor+0x10/0x10 [ 299.448598][T10439] ? avc_policy_seqno+0x15/0x30 [ 299.448644][T10439] ? selinux_file_permission+0x1f2/0x690 [ 299.448678][T10439] do_splice_direct+0x119/0x1a0 [ 299.448703][T10439] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 299.448781][T10439] do_sendfile+0x382/0x650 [ 299.448819][T10439] __x64_sys_sendfile64+0x105/0x150 [ 299.448850][T10439] x64_sys_call+0x2dc4/0x3020 [ 299.448923][T10439] do_syscall_64+0x12c/0x370 [ 299.448968][T10439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.448995][T10439] RIP: 0033:0x7fb4b6efc799 [ 299.449052][T10439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.449069][T10439] RSP: 002b:00007fb4b592e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 299.449088][T10439] RAX: ffffffffffffffda RBX: 00007fb4b7176090 RCX: 00007fb4b6efc799 [ 299.449102][T10439] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000a [ 299.449117][T10439] RBP: 00007fb4b592e090 R08: 0000000000000000 R09: 0000000000000000 [ 299.449133][T10439] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 299.449153][T10439] R13: 00007fb4b7176128 R14: 00007fb4b7176090 R15: 00007fffbce3c4b8 [ 299.449178][T10439] [ 299.684178][T10438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.714293][ T6465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.750218][T10446] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.1547'. [ 299.815948][T10452] loop0: detected capacity change from 0 to 128 [ 299.840891][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 299.857937][ T28] audit: type=1326 audit(1774438895.936:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e158c799 code=0x7ffc0000 [ 299.888633][ T28] audit: type=1326 audit(1774438895.956:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60e158c799 code=0x7ffc0000 [ 299.914632][T10452] loop0: detected capacity change from 0 to 512 [ 299.915657][ T28] audit: type=1326 audit(1774438895.956:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e158c799 code=0x7ffc0000 [ 299.936687][T10452] journal_path: Non-blockdev passed as './file2' [ 299.948706][ T28] audit: type=1326 audit(1774438895.956:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f60e158c799 code=0x7ffc0000 [ 299.989847][T10452] EXT4-fs: error: could not find journal device path [ 300.004422][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1548'. [ 300.018555][T10459] netlink: 'syz.3.1549': attribute type 13 has an invalid length. [ 300.043901][T10452] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1548'. [ 300.053018][ T28] audit: type=1326 audit(1774438895.956:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e158c799 code=0x7ffc0000 [ 300.074699][T10459] netlink: 'syz.3.1549': attribute type 17 has an invalid length. [ 300.076789][ T28] audit: type=1326 audit(1774438895.966:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f60e158c799 code=0x7ffc0000 [ 300.173631][ T28] audit: type=1326 audit(1774438895.966:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e158c799 code=0x7ffc0000 [ 300.204017][ T28] audit: type=1326 audit(1774438895.966:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f60e158c799 code=0x7ffc0000 [ 300.227805][ T28] audit: type=1326 audit(1774438895.966:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e158c799 code=0x7ffc0000 [ 300.251467][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 300.262830][ T28] audit: type=1326 audit(1774438895.966:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f60e158c799 code=0x7ffc0000 [ 300.311470][T10478] loop0: detected capacity change from 0 to 512 [ 300.338448][T10478] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 300.362019][T10478] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 300.372213][T10478] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1554: Corrupt directory, running e2fsck is recommended [ 300.391579][T10478] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 300.401756][T10484] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 300.412581][T10478] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.1554: corrupted in-inode xattr: e_name out of bounds [ 300.431896][T10478] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 300.432045][T10478] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1554: couldn't read orphan inode 15 (err -117) [ 300.441856][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 300.441877][ C1] EXT4-fs (loop0): initial error at time 1774438896: ext4_iget_extra_inode:5025: inode 15 [ 300.441910][ C1] EXT4-fs (loop0): last error at time 1774438896: ext4_iget_extra_inode:5025: inode 15 [ 300.530363][T10478] loop0: lost filesystem error report for type 5 error -117 [ 300.532139][T10478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.588588][T10490] lo speed is unknown, defaulting to 1000 [ 300.602070][T10486] loop5: detected capacity change from 0 to 1024 [ 300.610870][T10486] EXT4-fs: Ignoring removed orlov option [ 300.620740][T10491] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 300.648324][T10491] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 300.659255][T10491] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1554: Corrupt directory, running e2fsck is recommended [ 300.818650][T10486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.859291][ T9808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.117755][T10507] loop5: detected capacity change from 0 to 512 [ 301.140752][T10507] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 301.168672][T10505] loop2: detected capacity change from 0 to 1024 [ 301.175308][T10507] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 301.195831][ T6465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.205807][T10507] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1565: Corrupt directory, running e2fsck is recommended [ 301.206929][T10505] EXT4-fs: Ignoring removed oldalloc option [ 301.226000][T10505] EXT4-fs: Ignoring removed bh option [ 301.233167][T10507] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 301.241779][T10507] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1565: corrupted in-inode xattr: e_name out of bounds [ 301.255899][T10507] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 301.266098][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 301.281818][ C0] EXT4-fs (loop5): initial error at time 1774438897: ext4_iget_extra_inode:5025: inode 15 [ 301.291781][ C0] EXT4-fs (loop5): last error at time 1774438897: ext4_iget_extra_inode:5025: inode 15 [ 301.301717][ T9786] IPVS: starting estimator thread 0... [ 301.302024][T10507] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1565: couldn't read orphan inode 15 (err -117) [ 301.327096][T10505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.333885][T10507] loop5: lost filesystem error report for type 5 error -117 [ 301.341323][T10507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.365722][T10505] FAULT_INJECTION: forcing a failure. [ 301.365722][T10505] name failslab, interval 1, probability 0, space 0, times 0 [ 301.406212][T10512] IPVS: using max 2016 ests per chain, 100800 per kthread [ 301.426137][T10505] CPU: 1 UID: 0 PID: 10505 Comm: syz.2.1564 Tainted: G W syzkaller #0 PREEMPT(full) [ 301.426221][T10505] Tainted: [W]=WARN [ 301.426227][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.426244][T10505] Call Trace: [ 301.426250][T10505] [ 301.426274][T10505] __dump_stack+0x1d/0x30 [ 301.426309][T10505] dump_stack_lvl+0x95/0xd0 [ 301.426340][T10505] dump_stack+0x15/0x1b [ 301.426397][T10505] should_fail_ex+0x263/0x280 [ 301.426434][T10505] should_failslab+0x8c/0xb0 [ 301.426457][T10505] kmem_cache_alloc_noprof+0x66/0x400 [ 301.426480][T10505] ? ext4_mb_new_blocks+0x785/0x1f50 [ 301.426516][T10505] ext4_mb_new_blocks+0x785/0x1f50 [ 301.426557][T10505] ? __kmalloc_noprof+0x1e3/0x4e0 [ 301.426615][T10505] ? ext4_inode_to_goal_block+0x1bd/0x1d0 [ 301.426641][T10505] ext4_ext_map_blocks+0xdc9/0x2fb0 [ 301.426754][T10505] ? __brelse+0x32/0x60 [ 301.426786][T10505] ? from_kprojid+0x171/0x3a0 [ 301.426821][T10505] ? ext4_mark_iloc_dirty+0xd4e/0xdb0 [ 301.426850][T10505] ? mark_buffer_dirty+0xfa/0x220 [ 301.426921][T10505] ? ext4_fc_track_inode+0x9f/0x5f0 [ 301.426945][T10505] ext4_map_create_blocks+0xce/0x3a0 [ 301.427062][T10505] ext4_map_blocks+0x594/0x970 [ 301.427108][T10505] ext4_convert_inline_data_nolock+0x195/0x5a0 [ 301.427157][T10505] ext4_convert_inline_data+0x2bd/0x360 [ 301.427200][T10505] ext4_fallocate+0x163/0x2f0 [ 301.427239][T10505] vfs_fallocate+0x3b6/0x450 [ 301.427269][T10505] __x64_sys_fallocate+0x7a/0xd0 [ 301.427298][T10505] x64_sys_call+0x298e/0x3020 [ 301.427377][T10505] do_syscall_64+0x12c/0x370 [ 301.427451][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.427488][T10505] RIP: 0033:0x7fb4b6efc799 [ 301.427544][T10505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.427592][T10505] RSP: 002b:00007fb4b594f028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 301.427611][T10505] RAX: ffffffffffffffda RBX: 00007fb4b7175fa0 RCX: 00007fb4b6efc799 [ 301.427623][T10505] RDX: 0000000000022001 RSI: 0000000000000000 RDI: 0000000000000006 [ 301.427637][T10505] RBP: 00007fb4b594f090 R08: 0000000000000000 R09: 0000000000000000 [ 301.427650][T10505] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 301.427661][T10505] R13: 00007fb4b7176038 R14: 00007fb4b7175fa0 R15: 00007fffbce3c4b8 [ 301.427681][T10505] [ 301.553993][T10520] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 301.687804][T10520] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 301.698179][T10520] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1565: Corrupt directory, running e2fsck is recommended [ 301.720858][T10525] loop0: detected capacity change from 0 to 1024 [ 301.738383][T10525] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.749981][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.759756][T10525] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 301.768664][T10525] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 301.804306][T10525] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.1568: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 301.832471][T10529] netlink: 'syz.1.1563': attribute type 4 has an invalid length. [ 301.847896][T10525] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 301.850740][T10525] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1568: couldn't read orphan inode 11 (err -117) [ 301.859962][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 301.859992][ C0] EXT4-fs (loop0): initial error at time 1774438897: ext4_ext_check_inode:521: inode 11 [ 301.860018][ C0] EXT4-fs (loop0): last error at time 1774438897: ext4_ext_check_inode:521: inode 11 [ 301.864716][T10528] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 301.874224][T10525] loop0: lost filesystem error report for type 5 error -117 [ 301.906991][T10525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.944860][T10525] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1568: Invalid block bitmap block 0 in block_group 0 [ 301.973396][ T9808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.977417][T10525] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.1568: Failed to acquire dquot type 0 [ 302.142241][T10536] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 302.532289][ T6465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.983305][T10554] FAULT_INJECTION: forcing a failure. [ 302.983305][T10554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.037343][T10554] CPU: 1 UID: 0 PID: 10554 Comm: syz.2.1576 Tainted: G W syzkaller #0 PREEMPT(full) [ 303.037380][T10554] Tainted: [W]=WARN [ 303.037389][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.037471][T10554] Call Trace: [ 303.037478][T10554] [ 303.037486][T10554] __dump_stack+0x1d/0x30 [ 303.037518][T10554] dump_stack_lvl+0x95/0xd0 [ 303.037561][T10554] dump_stack+0x15/0x1b [ 303.037586][T10554] should_fail_ex+0x263/0x280 [ 303.037618][T10554] should_fail+0xb/0x20 [ 303.037650][T10554] should_fail_usercopy+0x1a/0x20 [ 303.037770][T10554] _copy_to_user+0x20/0xa0 [ 303.037810][T10554] simple_read_from_buffer+0xb5/0x130 [ 303.037830][T10554] proc_fail_nth_read+0x10e/0x150 [ 303.037854][T10554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.037884][T10554] vfs_read+0x1ab/0x7f0 [ 303.037968][T10554] ? __rcu_read_unlock+0x4e/0x70 [ 303.037985][T10554] ? __fget_files+0x184/0x1c0 [ 303.038007][T10554] ? mutex_lock+0x57/0x90 [ 303.038041][T10554] ksys_read+0xdc/0x1a0 [ 303.038110][T10554] __x64_sys_read+0x40/0x50 [ 303.038124][T10554] x64_sys_call+0x2886/0x3020 [ 303.038149][T10554] do_syscall_64+0x12c/0x370 [ 303.038175][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.038283][T10554] RIP: 0033:0x7fb4b6ebcfce [ 303.038300][T10554] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 303.038317][T10554] RSP: 002b:00007fb4b592dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.038352][T10554] RAX: ffffffffffffffda RBX: 00007fb4b592e6c0 RCX: 00007fb4b6ebcfce [ 303.038395][T10554] RDX: 000000000000000f RSI: 00007fb4b592e0a0 RDI: 0000000000000008 [ 303.038405][T10554] RBP: 00007fb4b592e090 R08: 0000000000000000 R09: 0000000000000000 [ 303.038418][T10554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.038431][T10554] R13: 00007fb4b7176128 R14: 00007fb4b7176090 R15: 00007fffbce3c4b8 [ 303.038452][T10554] [ 303.301234][T10557] lo speed is unknown, defaulting to 1000 [ 303.326332][T10559] lo speed is unknown, defaulting to 1000 [ 303.439011][T10562] FAULT_INJECTION: forcing a failure. [ 303.439011][T10562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.453727][T10562] CPU: 0 UID: 0 PID: 10562 Comm: syz.5.1579 Tainted: G W syzkaller #0 PREEMPT(full) [ 303.453776][T10562] Tainted: [W]=WARN [ 303.453782][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.453847][T10562] Call Trace: [ 303.453852][T10562] [ 303.453858][T10562] __dump_stack+0x1d/0x30 [ 303.453884][T10562] dump_stack_lvl+0x95/0xd0 [ 303.453949][T10562] dump_stack+0x15/0x1b [ 303.453970][T10562] should_fail_ex+0x263/0x280 [ 303.453994][T10562] should_fail+0xb/0x20 [ 303.454013][T10562] should_fail_usercopy+0x1a/0x20 [ 303.454090][T10562] _copy_to_user+0x20/0xa0 [ 303.454126][T10562] simple_read_from_buffer+0xb5/0x130 [ 303.454207][T10562] proc_fail_nth_read+0x10e/0x150 [ 303.454241][T10562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.454287][T10562] vfs_read+0x1ab/0x7f0 [ 303.454318][T10562] ? __rcu_read_unlock+0x4e/0x70 [ 303.454345][T10562] ? __fget_files+0x184/0x1c0 [ 303.454408][T10562] ? mutex_lock+0x57/0x90 [ 303.454442][T10562] ksys_read+0xdc/0x1a0 [ 303.454458][T10562] __x64_sys_read+0x40/0x50 [ 303.454521][T10562] x64_sys_call+0x2886/0x3020 [ 303.454552][T10562] do_syscall_64+0x12c/0x370 [ 303.454627][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.454651][T10562] RIP: 0033:0x7f38bb55cfce [ 303.454665][T10562] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 303.454680][T10562] RSP: 002b:00007f38b9ff6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.454699][T10562] RAX: ffffffffffffffda RBX: 00007f38b9ff76c0 RCX: 00007f38bb55cfce [ 303.454778][T10562] RDX: 000000000000000f RSI: 00007f38b9ff70a0 RDI: 0000000000000003 [ 303.454789][T10562] RBP: 00007f38b9ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 303.454800][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.454810][T10562] R13: 00007f38bb816038 R14: 00007f38bb815fa0 R15: 00007fff4bf45b48 [ 303.454830][T10562] [ 303.717081][T10569] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.736594][T10569] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.745769][T10569] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 303.793945][T10569] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.1580: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 303.833042][T10569] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 303.836138][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 303.839546][T10569] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1580: couldn't read orphan inode 11 (err -117) [ 303.845448][ C0] EXT4-fs (loop1): initial error at time 1774438899: ext4_ext_check_inode:521 [ 303.863424][T10569] loop1: lost filesystem error report for type 5 error -117 [ 303.863765][ C0] : inode 11 [ 303.883099][ C0] EXT4-fs (loop1): last error at time 1774438899: ext4_ext_check_inode:521: inode 11 [ 303.924489][T10569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.050937][T10569] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1580: Invalid block bitmap block 0 in block_group 0 [ 304.101857][T10569] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1580: Failed to acquire dquot type 0 [ 304.732142][T10587] set_capacity_and_notify: 2 callbacks suppressed [ 304.732256][T10587] loop5: detected capacity change from 0 to 1024 [ 304.747065][T10588] netlink: 'syz.0.1586': attribute type 1 has an invalid length. [ 304.865453][T10587] EXT4-fs: Ignoring removed oldalloc option [ 304.905786][T10588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.956345][T10587] EXT4-fs: Ignoring removed bh option [ 304.992676][T10589] bond1: (slave ip6erspan0): making interface the new active one [ 305.020485][T10587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.023676][T10589] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 305.055191][ T7159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.171867][T10597] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1588'. [ 305.193621][T10601] lo speed is unknown, defaulting to 1000 [ 305.247045][T10606] loop0: detected capacity change from 0 to 8192 [ 305.292656][ T9808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.293375][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 305.293409][ T28] audit: type=1400 audit(1774438901.366:1259): avc: denied { sqpoll } for pid=10607 comm="syz.3.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 305.409754][T10618] mmap: syz.5.1592 (10618) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 305.427886][ T28] audit: type=1400 audit(1774438901.506:1260): avc: denied { bind } for pid=10617 comm="syz.5.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 305.460879][ T28] audit: type=1400 audit(1774438901.536:1261): avc: denied { listen } for pid=10617 comm="syz.5.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 305.718618][T10632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1598'. [ 305.731689][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 305.975420][T10632] vlan2: entered promiscuous mode [ 306.276612][T10638] loop2: detected capacity change from 0 to 512 [ 306.289482][T10638] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 306.306615][T10638] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 306.333358][T10638] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1601: Corrupt directory, running e2fsck is recommended [ 306.348571][T10641] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1600'. [ 306.357941][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1600'. [ 306.360375][T10638] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 306.389695][T10638] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1601: corrupted in-inode xattr: e_name out of bounds [ 306.432664][T10638] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 306.432809][T10638] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1601: couldn't read orphan inode 15 (err -117) [ 306.442016][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 306.442039][ C0] EXT4-fs (loop2): initial error at time 1774438902: ext4_iget_extra_inode:5025: inode 15 [ 306.442064][ C0] EXT4-fs (loop2): last error at time 1774438902: ext4_iget_extra_inode:5025: inode 15 [ 306.511760][T10638] loop2: lost filesystem error report for type 5 error -117 [ 306.520545][T10638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.588025][T10647] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1603'. [ 306.598463][T10650] loop1: detected capacity change from 0 to 256 [ 306.611685][T10656] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 306.644227][T10656] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 306.673270][ T28] audit: type=1400 audit(1774438902.746:1262): avc: denied { setopt } for pid=10657 comm="syz.0.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 306.682753][T10656] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1601: Corrupt directory, running e2fsck is recommended [ 306.777088][T10642] loop5: detected capacity change from 0 to 1024 [ 306.801604][T10669] loop0: detected capacity change from 0 to 8192 [ 306.814526][T10642] EXT4-fs: Ignoring removed oldalloc option [ 306.818462][ T28] audit: type=1400 audit(1774438902.886:1263): avc: denied { mounton } for pid=10628 comm="syz.5.1597" path="/file1" dev="bpf" ino=30258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 306.824222][T10642] EXT4-fs: Ignoring removed bh option [ 306.872084][T10642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.885339][T10642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.131182][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.170008][T10675] Illegal XDP return value 4294967282 on prog (id 462) dev N/A, expect packet loss! [ 307.509969][T10681] lo speed is unknown, defaulting to 1000 [ 307.516630][T10669] ================================================================== [ 307.524755][T10669] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 307.532674][T10669] [ 307.535013][T10669] write to 0xffff88811b499114 of 4 bytes by task 10673 on cpu 1: [ 307.542737][T10669] xas_set_mark+0x12b/0x140 [ 307.547267][T10669] tag_pages_for_writeback+0xe3/0x2e0 [ 307.552670][T10669] writeback_iter+0x340/0x830 [ 307.557368][T10669] mpage_writepages+0x87/0x1310 [ 307.562258][T10669] fat_writepages+0x24/0x30 [ 307.566783][T10669] do_writepages+0x1c6/0x310 [ 307.571394][T10669] file_write_and_wait_range+0x178/0x2f0 [ 307.577036][T10669] __generic_file_fsync+0x46/0x160 [ 307.582174][T10669] fat_file_fsync+0x49/0x100 [ 307.586788][T10669] vfs_fsync_range+0xc5/0xe0 [ 307.591399][T10669] generic_file_write_iter+0x1ba/0x310 [ 307.596880][T10669] iter_file_splice_write+0x6c4/0xa80 [ 307.602272][T10669] direct_splice_actor+0x156/0x2a0 [ 307.607402][T10669] splice_direct_to_actor+0x311/0x670 [ 307.612797][T10669] do_splice_direct+0x119/0x1a0 [ 307.617642][T10669] do_sendfile+0x382/0x650 [ 307.622067][T10669] __x64_sys_sendfile64+0x105/0x150 [ 307.627283][T10669] x64_sys_call+0x2dc4/0x3020 [ 307.631983][T10669] do_syscall_64+0x12c/0x370 [ 307.636579][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.642488][T10669] [ 307.644797][T10669] read to 0xffff88811b499114 of 4 bytes by task 10669 on cpu 0: [ 307.652414][T10669] __writeback_single_inode+0x26b/0x860 [ 307.657995][T10669] writeback_single_inode+0x16d/0x3f0 [ 307.663387][T10669] sync_inode_metadata+0x6e/0xa0 [ 307.668335][T10669] __generic_file_fsync+0x109/0x160 [ 307.673625][T10669] fat_file_fsync+0x49/0x100 [ 307.678213][T10669] vfs_fsync_range+0xc5/0xe0 [ 307.682994][T10669] generic_file_write_iter+0x1ba/0x310 [ 307.688481][T10669] iter_file_splice_write+0x6c4/0xa80 [ 307.693880][T10669] direct_splice_actor+0x156/0x2a0 [ 307.699003][T10669] splice_direct_to_actor+0x311/0x670 [ 307.704389][T10669] do_splice_direct+0x119/0x1a0 [ 307.709253][T10669] do_sendfile+0x382/0x650 [ 307.713706][T10669] __x64_sys_sendfile64+0x105/0x150 [ 307.718917][T10669] x64_sys_call+0x2dc4/0x3020 [ 307.723626][T10669] do_syscall_64+0x12c/0x370 [ 307.728235][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.734166][T10669] [ 307.736492][T10669] value changed: 0x02000021 -> 0x04000021 [ 307.742225][T10669] [ 307.744560][T10669] Reported by Kernel Concurrency Sanitizer on: [ 307.750713][T10669] CPU: 0 UID: 0 PID: 10669 Comm: syz.0.1610 Tainted: G W syzkaller #0 PREEMPT(full) [ 307.761677][T10669] Tainted: [W]=WARN [ 307.765485][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.775627][T10669] ================================================================== [ 314.676141][ T1033] page_pool_release_retry() stalled pool shutdown: id 58, 1 inflight 60 sec