last executing test programs: 27.82322233s ago: executing program 4 (id=338): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x3, 0x2, 0x0, 0xe61b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40), 0x0, 0x0) unshare(0x2040400) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000140), 0x0}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x29800) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000000), 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f0000000040)=@other={'decodes', ' ', 'io+mem'}, 0xf) r6 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) 27.752727224s ago: executing program 4 (id=341): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001c00010453e692fbcf7c00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000140008000400780000000a000100aaaaaaaaaaaa000005000c0001000000"], 0x38}}, 0x4040004) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x2, 0x2, 0xb, 0x8, 0x100}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x2, 0x2, 0xb, 0x8, 0x100}, 0x20) socket$inet_sctp(0x2, 0xe, 0x84) (async) r4 = socket$inet_sctp(0x2, 0xe, 0x84) socket(0x2b, 0x80000, 0x1) (async) r5 = socket(0x2b, 0x80000, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x8000000, 0x2, 0x0, 0x2, 0x4}, 0x20) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10) listen(r0, 0x401) 27.702950517s ago: executing program 4 (id=343): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbdf, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, 0x0) 27.509668998s ago: executing program 4 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000081007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09279c362f80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c000000008da68076774bb4db2c769937000090af27db5b56024dcbbbd2cb2000ce94284673b4e8d5467e357754508535766c801100000000b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f301000000000000000000000000100000aaf253886c0b9f6d4731d714ad72e5ad8530a6380ed2d29f47f96a576cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e1577c10e509c9b133c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202900000d322717c338033213c18a34ee0ca2cf61efb4b3797a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff3283076cda3d0b1a2905cf7bd04f2db530abcbe44bc40528ad807970727fb819afa14aad99f93093ced7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bfb38d04c8441ceec8bcaffbe800aa41307bd8325a76f395bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cacebfcd55f8c81f5eb1f8d615ca27efb2193bb61665b8ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50223517a07a3484124c5563cd3700000000001825b05a580ea8cb7f85b77b35a06a895b287b47efbe220bc215aca4a65d7018a7f91c4228b35f71a7c183360ab7a7b6b7870086d851ff861ee07bbec801b79afa477ebab255c7265820456fdc3f34f9d729315d856be7ec564613d5e28cf7c405d6e2b6aeb20000b8505a36a8067cb459fab87c8de118117733d30f4fe049658a2c3edd43546ead9c7882858868cff89a49a693731140db1b7b7116060c30690a39de8b3e0eb4f5401e8354870848c546f9defe1a9c534c9030830fec3eeb5faf1d64bb8e80000000f6ff0000000000000055d843352632b829ceb5200a2cdeb63c0bc7e835e061f9ac3c052b5b6f689bf203aeb8858be07691bc83e178181fab55e6ed9e8a17819de49564d0f0c00dd507441b80cd499c39c5d03d6c00cf5be5215bae09a4f52abf8f1c1add498470a0bb9d7ab757a8b28e4accc939b3621e4c2c9e02741c51eeeaad40cf2e1c3659d83ed71fc628807739d70edda93542445e3204828c49bef648efdc2208341357dd158f411d379df9b1feffbe7c7ee80558a040fa3d5a303f36d5c1a66d9644fc0559aa0e291355ee3de6c7a705b8f7b45bb825044b9a82a6fd2f6eeb14eee0c3f71eeea9984e14c57022ef72850b6dc5fda167d6f98f6c1c73feb424b7937e3c7ca0d2525efbdac50eb94797cf3747b83b56cfea8c74dd3f957dc462e715b789934b422b7ddf3e11a6ad6ad9afd5389c728d14"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ff}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000000)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$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") r4 = inotify_init1(0x80000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) inotify_add_watch(r4, &(0x7f0000000040)='./file1\x00', 0x60000726) r6 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="20d1eb00", @ANYRES16=r9, @ANYBLOB="010025bd7000fddbdf2501000000040005000500040002000000"], 0x20}, 0x1, 0x0, 0x0, 0x888c}, 0x20000004) sendmsg$FOU_CMD_DEL(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x3c, r9, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) setuid(r7) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r10, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) inotify_add_watch(r4, &(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000880) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000940)={0x100, 0x2, 0x6, 0x5, 0x0, 0x0, {0xe, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfff}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x10) getdents64(r11, 0x0, 0x0) 27.30328393s ago: executing program 4 (id=345): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbdf, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, 0x0) (fail_nth: 1) 27.066311644s ago: executing program 4 (id=351): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x3, 0x2, 0x0, 0xe61b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40), 0x0, 0x0) unshare(0x2040400) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000140), 0x0}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x29800) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000000), 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f0000000040)=@other={'decodes', ' ', 'io+mem'}, 0xf) r6 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) 27.019278657s ago: executing program 32 (id=351): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x3, 0x2, 0x0, 0xe61b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40), 0x0, 0x0) unshare(0x2040400) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000140), 0x0}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x29800) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000000), 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f0000000040)=@other={'decodes', ' ', 'io+mem'}, 0xf) r6 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) 12.129836014s ago: executing program 5 (id=587): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) open_tree(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) mremap(&(0x7f0000797000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000228000/0x3000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xd, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xff6, &(0x7f0000001580)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800000000000056, 0x3) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0x14, r3, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x8800) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f000058e000/0x3000)=nil) 11.487019601s ago: executing program 5 (id=596): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r5 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000040)={0x0, 0x24, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029b57000fcdbdf251200000008000300", @ANYRES32, @ANYBLOB="0a000600082211000001000005001900010000000600120109"], 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@deltclass={0x34, 0x29, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x8}, {0xa, 0x7}, {0xb, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x6}}, @TCA_RATE={0x6, 0x5, {0x3, 0x62}}]}, 0x34}}, 0x80000) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendfile(r2, r2, 0x0, 0x7) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x1c, 0x1f, 0x1a5, &(0x7f00000007c0)="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"}) 11.17052915s ago: executing program 5 (id=606): r0 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") close(0x3) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfc, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000200)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xb2}, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r1, 0x43f4, 0x5c18, 0x6, 0x0, 0x0) r5 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) set_mempolicy(0x3, 0x0, 0x9) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$inet(r6, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./bus/file0\x00', 0x1a4243c, &(0x7f00000022c0)=ANY=[@ANYRES16, @ANYRESDEC=r5, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32, @ANYRESOCT, @ANYRES16, @ANYRESOCT=r5, @ANYBLOB="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", @ANYRESOCT, @ANYRES64=r5, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 10.900060955s ago: executing program 5 (id=609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa1551, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x1, @perf_bp={0x0, 0x4}, 0x101280, 0x26f, 0x6, 0x6, 0x4, 0x20005, 0xa5b, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x4, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (rerun: 64) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000000000085000000d0000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x100451, 0x0, 0x7fffffff, 0x7, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r5 = socket(0xa, 0x3, 0x3a) (async) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xa8, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x20}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20008840}, 0x800) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0xf7, r7, 0x80000004}, 0xc) (async) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) (async, rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 64) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (rerun: 64) 10.681951068s ago: executing program 5 (id=613): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 10.65186412s ago: executing program 33 (id=613): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330283ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 3.932721931s ago: executing program 6 (id=707): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) 3.43037939s ago: executing program 3 (id=715): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setresuid(0xee00, 0xee00, 0x0) capset(&(0x7f0000000080)={0x19980330}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a00060001117e6d92600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6e001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79811835d3a71d85667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000011008af26ca6823a45b8f3ef47b9daff4270dff3beac799e87bd711ac353", 0xd8}], 0x1}, 0x94) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x14, 0x14, 0x105, 0x70bd2c, 0x25dfdb7b, {0x28, 0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x14800) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 3.236725172s ago: executing program 3 (id=718): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r6, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c2000000aa9caaaaaaaa88004500001c0067000000019078ac1e0001ffffffff12009078000004002d5e84cea7f7d6b9004599aa2080b77cc3db69c249e59758fee8c3c18bd262676cc4ec4d39b5e31b1d815b35c29b49f760fda13092165551772b9577ccbf455933f96a5b2ba6255651c2ce37fef32911a4f32606d0196061d6a4b49979cb6a74e4418b802fe26af6ead5c2b687dc8a281faf5467c7a5648be5306160a9cb923ed726a265827bf8137d7d31443684c0b01ee7ede246bde18fa7f1b46d0779c9a30876ae5b"], 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000180)={0x2, 0x6, 0x8, 0x0, 0x8c55, 0x8, 0x1, 0x1}, &(0x7f0000000240)=0x20) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=0x64010101, 0x16, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.014527424s ago: executing program 6 (id=721): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) 2.312073655s ago: executing program 3 (id=729): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0xca7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc8, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x100, 0x0, 0x0, 0x6, 0xbb2, 0x0, 0x272, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x8, 0x0, 0x400000, 0x7, 0x4, 0xd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x75, 0x3, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1088, &(0x7f00000001c0)={[{@discard}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@acl}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nombcache'}}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x46942, 0x0) pwrite64(r4, &(0x7f0000000000)="6c0b546bc2", 0x5, 0x404043000) 1.924948448s ago: executing program 3 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000000000100"/28]) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdffffeffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x1e, 0x0, @val=@perf_event={0x400}}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) clock_adjtime(0xa00, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/212, 0xd4}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) eventfd2(0xffffffff, 0x80001) 1.872387731s ago: executing program 0 (id=735): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x1e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e24, 0x3, 'ovf\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010102, 0x4e23, 0x10000, 0xfffffffd, 0x12d5c, 0x12d5c}}, 0x44) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f0000000080)=""/84, 0x54, 0xc1, 0x7}) 1.820021824s ago: executing program 6 (id=736): sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000128bd5f00fedbdf25740000000800550b", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x851}, 0x10890) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8040) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 1.819817984s ago: executing program 0 (id=737): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x300, 0x2) 1.569610739s ago: executing program 0 (id=738): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") 1.538249641s ago: executing program 6 (id=739): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0x7, 0x1098}, &(0x7f0000000040)=0x10) r3 = socket$inet(0x2, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf251b00000008009a000c"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000002140)={0x1b30, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x800}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x434, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb5, 0x3, "d83066644c9397ced25fe1898ed6e7735002b115a709d4f5b084660445d9dd91d8b889a5b1e0271da89e7c84e992b99a3a284bef1190ae4d6c1e4d53114173d7b76c9ac36323e6b2036efed6540ff1ee24bdcd8f8e6894b9dabdae7ec3c2f8482eec6020844155dddc157373b1bb34cb2241ae719dfa923714d5f416a917c2b600c8ae82cb850b53fc3228e4ef85b1817294fe1caec4675c36f6ccd1ac636ac56524bf1fb65f53499531947a7f91ca51e3"}, @NL80211_BAND_2GHZ={0xdc, 0x0, "90f71ce5ba95c0e8f03aa4a7d7ef9cb9115a8c5192a05fe8510c916ebd2ae2414d98b5d81cda1374b5d5ca4fa828b99be0fa1cdce79b1c4db4cd48e78c2830818a55d99dcd90ef9a422c5a3e4ee5e290cc920b56f7957a705279a37e21a0e577a2a777f5f198d0a66e08181ce6a21e1d53ec713c1471fb771b617d11f6cab8846545f304b77c12250f61a27a185ff45964993a7234c4bce1c61bfd4c242a9b57ec94419135c27d789fe46af848973b0df880bb83345c380908af34cc5b288d3da4006aa87096df66b7352753a7ae1d3cbbc5b3d57c971c20"}, @NL80211_BAND_6GHZ={0xff, 0x3, "3459997bb2c5236f1ceb3b657818521bf3f4274c7039b2affa1090846498e433786be3b43c352d7db4027046bcd0f49d7cae2a59ee7c09ac3d4d51c37cbbebab633ce5c94d0fdb2ffef589953bfeb161e3cfe9d26b106cb09db92104d8471cc76327906f6300260916c2facd12aad3ce04aabbf2f66223cff4ced9645d8150a5ce6486580321b410fe80f1341c8faff866ba0bbf0ca5c8c3d8e1de6b79632e50bf8fde1cac10bdb0185a4d2b940730ada1e2235fd7925874a00c42a915f7d261bd6a1241a376022c7c6eb9f7826299b7c16a294c76ca1f0ca9f0c9a29580a0516c31bd7de7c0c90d3acae2c038d97e3b4fabe6427dee9103507aa1"}, @NL80211_BAND_5GHZ={0x61, 0x1, "6ba8da1307e6bd0bf3d80162c9a301e2e75c087a891a33600b0ff83207a6bab0accfe5fbeefd74a7433f7de5851d26895647f827b0e7e9b18024b2f52d6dee2fb4c2ff4d0425206ff34d1972ff8770b7b73818f232fe61e080671e9458"}, @NL80211_BAND_2GHZ={0xe3, 0x0, "9f3cbccf1a621e45c3f7fd7b1aadbcc104de7fb7d467a6edb838b33ca694a1d8d8b1f8e4b8e4087e0b3471ed5fe0be13aa96c213f8508d82a3d9ba913ab352c0982980dc388eb7a9ba218ce8eb9f8afbf894abd9fecd289513212f612e2b38fdfca423480fe3389de764dcb5f289fc1d979a0c7c9ccfe75c75a3027e2f6411a1416762f0b217f9e1be7b22bf6fc01e2eb9fb31c585552c5fd22ea436bfb5f0d947346ba32860dc435a99775991c105e34d47cca29ed10fd54d86f43e59ce7c9e99af4b97ac00ef7af17a9fe1c7a82d8a682f4b367eaff2744a40adaa632d57"}, @NL80211_BAND_6GHZ={0x54, 0x3, "69b54c069ddc8b2beb7a76d4c99c414004bb535950fbbcc95032ebdd15a11b4c1be5df36e673a069f18d761951ebb7e0abe683dea82b76e7fe61f9f7315c34ba45ae62bdadd62fead0ed9055e15d3531"}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2000}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xdc, 0x84, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xb2b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x19b7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x10000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x800}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x12d}, @NL80211_BAND_LC={0x8, 0x5, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="702b4dc87bfc"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}]}]}, @NL80211_ATTR_IE={0x127, 0x2a, [@supported_rates={0x1, 0x5, [{0xb}, {0x16}, {0x36, 0x1}, {0x36}, {0x1b}]}, @dsss={0x3, 0x1, 0x34}, @chsw_timing={0x68, 0x4, {0x1, 0x8}}, @preq={0x82, 0x41, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x3, 0x2, 0x2, @device_b, 0xfffffffe, @value, 0x7, 0x81, 0x3, [{{}, @device_b, 0x8}, {{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x1}, @device_b}]}}, @fast_bss_trans={0x37, 0xce, {0x7f, 0x7, "e908f05517e2edbec0c09b4367cb1017", "343a666d1bba235c5acbaa6e0c815660011d513ccc30b3df107df6c2dc2dc042", "3bb14623b7080bd6c4f81e35a4d0dbc467fbfbb713d5495d257945ee53a3123b", [{0x3}, {0x3, 0x16, "4c4543ee93740cb5a632e223e09722f0a66b776a2bfd"}, {0x1, 0x6, "31bc41d1e4d3"}, {0x2, 0x22, "3c34c22750d66195ce33f46cdd1d76e644b4a166387dfeb2643a01ffc5354428af91"}, {0x9, 0x3, "d73d8d"}, {0x1, 0x19, "ad36e5ae135bc26826415492fa174617faa24acbc023e47dbc"}, {0x3, 0x14, "c745f4fcaceba2b183a77bd2ca6ff58f804030e0"}]}}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x2c4, 0x84, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0xac, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1dd9}, @NL80211_BAND_LC={0x8, 0x5, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="f3900f70f537"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="fc7c52f780ca"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, @random="16a5ac9bb7eca0608cd9"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e36290d74037"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x16, 0x1, @random="343c793fd4ca324179cd673069f8896e145f"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x1}]}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x140000}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, @random="4ab64dc84fd3f22e55004792ce54b0c1d94a1ba6bf2ba1fb22324f"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xfffff000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x5c5}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xb}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xc, 0x1, @random="0049534a90ac5fba"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffd}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x6, 0x1, @random="acd1"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="af206f08cb81d7ebf7f8c363d6e6db0340f62379bc8cf201d487"}]}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xb617}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x11f8, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x86, 0x0, "1502383f7ab6889e4d642d0b7b2d30960d6e6687cc9a95d2544ae1e038db5a8b153977325143567b273f7aa12bce2870474a7bc6a91b7c9c4acb5a6be7a22770712b16d2443200f9537f3d83dd4275b49c794ee50a01396a1abf7881ea6fbf9d6b62501fc5ab65db869f5079a5dc1e85fead527ebaae0e7be6e4bc48f3d5cdd62703"}, @NL80211_BAND_5GHZ={0xd, 0x1, "3a2c6437a9dc209a05"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "8059dd703cb4c68a7fcc1e03810cb5b29e28bac5515e7c00ffdfbf814e878ab52ab5d5db3ec65ebd9296d83f0c0d1a36f0be4ad93c676b5d13c53a15678d9a83129e5eccc869ba4ba8843c"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}, @NL80211_BAND_2GHZ={0x84, 0x0, "92aeac82b8219d7a59793ad89aef1c1a0277479a94a86f3106043a5394295f57e6ff354502c065e9e7b209f986cac71e430992e964b1436aa93818cdaea60431719cb4c7f8c67ac59f46311d8437f09e9191d54382d670cfc7d956572f76f74e9576a45ba1f0b77a8f148d2dc4d88a103ffbe4bd2edb10dd9b0c6e56e0a410de"}, @NL80211_BAND_60GHZ={0x81, 0x2, "ddca892a414353f84f3425abeb1584fe32071e08c6aa53f4ce5863205e1f5b0efeb6b2e09a8d083474a7c340310d4cba117633ce169f04b3a8f30212b57cd11dd625341018c56f80cf521f00319a12498584c3abb1ca862e37b82b8985f1daa4206076c2f9ca790b7769517a9cd62fcbfeb06cdb47c8c14b8ae17011e8"}]}]}, 0x1b30}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000000) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000830704"], 0x30}, 0x0) 1.326810313s ago: executing program 2 (id=741): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000001840)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYBLOB="c8c3f25eaef4878031c53d8bdd7d374bee6b63596889fdee9d581957ce7c5258332a829a0bdc25b9d86432338ded4088b2a38cda1f4ab909ddaa732ff79bcb48e9bbbcd24bd7cfdb68045e65382f3c4ac6a557ce2a775185275de0153804913db5a94ff9caf3e54e7b49f5915c670b2117b862be204e4e", @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa12, &(0x7f0000000e00)="$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") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) unshare(0x4020400) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, 0x0, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0xffffffffdfffffff, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x3, [@union={0x5, 0x1, 0x0, 0x5, 0x0, 0xfffffff7, [{0x10, 0x1, 0x8000}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0xd, 0x3}, {0x10, 0x5}, {0x8, 0x3}, {0xc}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x400d, 0x2}, {0x3, 0x1}]}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x83d0}}]}, {0x0, [0x0]}}, &(0x7f00000001c0)=""/41, 0xa7, 0x29, 0x1, 0x81, 0x10000, @value=r5}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x7, 0x3, 0x3, 0xc8048, 0x1, 0x9, '\x00', 0x0, r6, 0x1, 0x3, 0x1}, 0x50) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8000}]}]}, 0x28}}, 0x8004) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x0, @random="9705000000e8"}, 0x48, {0x2, 0x4e21, @local}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 1.292677435s ago: executing program 0 (id=742): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="99800300000700003472657461700000002000028014000600fe80000000000000000000000000003308000500003000"/80], 0x68}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfefffffd, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r6, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x6a040000) 1.122117015s ago: executing program 1 (id=743): connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) write$tun(0xffffffffffffffff, 0x0, 0x96) unshare(0x2a060480) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x20, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r6 = socket$inet(0x2, 0x801, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r6, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x3, 0x10) 1.057609049s ago: executing program 2 (id=744): r0 = socket$inet6(0xa, 0x3, 0xb) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000230000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900030073797a30000000000900010073797a310000000008000b4000000003640008800c000140000000008000"], 0x92fc}}, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000000206010800000000000014000000fffd14000780080011408856ddb1050015000c0000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a69702c706f7274"], 0x60}}, 0x80) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xe}}], 0x1, 0x0) 1.03755933s ago: executing program 2 (id=745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x2400}, 0x0) 1.03698139s ago: executing program 3 (id=746): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) 1.001707862s ago: executing program 2 (id=747): getsockopt(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000002180)) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r1, &(0x7f0000000300)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x0, 0xffffffff, 0x0) 768.018045ms ago: executing program 1 (id=748): r0 = mq_open(&(0x7f0000000080)='+.}-[-{-\x00', 0x40, 0x140, &(0x7f0000000100)={0x7fff, 0x874, 0x1, 0x7f}) mq_notify(r0, &(0x7f0000000140)={0x0, 0x1000005, 0x0, @thr={0x0, 0x0}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xa3}}, './cgroup.net/devices.allow\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r3) mount$9p_fd(0x0, &(0x7f0000000380)='./cgroup.net/devices.allow\x00', &(0x7f00000003c0), 0x2000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@cache_readahead}, {@version_u}, {@directio}, {@mmap}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@access_uid={'access', 0x3d, r3}}], [{@dont_measure}, {@euid_gt={'euid>', 0xee00}}, {@measure}, {@flag='rw'}, {@subj_role={'subj_role', 0x3d, 'fq_codel\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r5, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) pwrite64(r4, &(0x7f0000000040)="aa09e01909ed2f", 0x7, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_pwait(r1, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000600)={[0x3]}, 0x8) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) sendmsg$NL80211_CMD_SET_PMK(r10, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, r11, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2e}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "05b58e71e03d7894394b87f9de498d81"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "35586621a8c7969b5e821786ff9cdb23"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "65d5f8397a896a2fac72859a5b5a2cae"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "33fbc765c10c41a49b42f15f5eac1928"}, @NL80211_ATTR_PMK={0x14, 0xfe, "19163dc66bcafc59135b80870b0da54d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "57189e03073f9932bb182877571f0c01"}, @NL80211_ATTR_PMK={0x14, 0xfe, "bc68c8efcdbcba8a834a32e1805e6d4d"}]}, 0xac}, 0x1, 0x0, 0x0, 0x40004}, 0x4040) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x23c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x20c, 0x2, {{0x2, [0x7, 0x5, 0xf, 0xa, 0xd, 0x10, 0x2, 0x10, 0x6, 0x2, 0x6, 0x9, 0xb, 0x1, 0x10, 0x3], 0x0, [0x25, 0x0, 0x14, 0x0, 0x6, 0x5, 0x3, 0xf31, 0x44e3, 0x8, 0xcde5, 0x9, 0xfff, 0x0, 0x406, 0x5], [0x9, 0x0, 0x7, 0x1, 0xc17, 0x9a29, 0xb, 0xf, 0xf7a, 0xfffc, 0x8, 0x9, 0x8, 0xa, 0x9]}, [@TCA_MQPRIO_MIN_RATE64={0x58, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x8}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0xffffffffb802542a}, {0xc, 0x3, 0x2a00}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0xf}]}, @TCA_MQPRIO_MIN_RATE64={0x4}, @TCA_MQPRIO_MAX_RATE64={0x88, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x4}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x77f}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xc}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x4000000000}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x51}, {0xc, 0x4, 0x4}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0xa0, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xffffffffffffffff}, {0xc, 0x3, 0x8000000000000001}, {0xc, 0x3, 0x7f}, {0xc}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0xc45}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0xb}, {0xc, 0x3, 0x1}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MODE={0x6}]}}}]}, 0x23c}}, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) munlockall() 765.852225ms ago: executing program 2 (id=749): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c918ff00000000040000860188a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 643.161392ms ago: executing program 2 (id=750): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffc]}, 0x8, 0x800) r1 = syz_io_uring_setup(0x27eb, &(0x7f0000000440)={0x0, 0xd2c7, 0x8, 0x80000002, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f00000002c0)=0xffdffffc, 0x0, 0x4) r4 = socket(0x11, 0x2, 0x10001) getpid() r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, 0x0, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) clock_getres(0xeaffffff, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f1, 0x6}, {0x10007, 0x30000080}]}}) r10 = gettid() r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r11) sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="bbfb2bbd7000fddbdf2567"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000229bd7000fcdbdf255a000000fb000000", @ANYRES32=r13, @ANYBLOB="0c0099000101000047000000"], 0x28}, 0x1, 0x0, 0x0, 0x40040c0}, 0x40041) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0x7, &(0x7f00000003c0)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0x1, 0x0, 0x0) r14 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) bind$inet(r14, &(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10) 642.829593ms ago: executing program 1 (id=751): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000ac0)={0x0, 0x0, 0x3000000, 0x8, 0x3, r0, 0x0, 0x0, 0x2, 0x0, 0x4}]) 616.684075ms ago: executing program 6 (id=752): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140005"], 0x78}, 0x1, 0x0, 0x0, 0x44091}, 0x24000800) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0xec, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3f}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffb9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000040}, 0x40008800) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) 357.768829ms ago: executing program 1 (id=753): io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x1) socket$vsock_stream(0x28, 0x1, 0x0) 297.071303ms ago: executing program 3 (id=754): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000a80)="790a09002f0c204d2b220bdc86dd", 0x0, 0xf5b6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = io_uring_setup(0x623b, &(0x7f00000001c0)={0x0, 0x6155, 0x400, 0x3, 0x242}) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x0, 0x3, 0xa, 0x5}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200080}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0xdc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x20000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8}, @TCA_PIE_ECN={0x8}]}}, @TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x2, 0x0, 0x0]}}]}]}, 0xdc}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xffffffffffffffe1, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000000194029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x6b, 0x60000000, 0x0, 0x0, &(0x7f0000000400)="bf2b4ee7955c04f6ffcda24251ef32f5b1d254b3cb5b193a6c4881486a052ed53c682015bb2ceb0237dfb0b5a8a64cdc932ae709cd51bd087ddb000000000000000000b4c7081c86a774b850e2dcc8822a374b446c5102c1eac18db2b4518e9d83f76d7465cdd8d7d188640f33bc16b8b77ad695057b724101a87c2c44305cd9a136dbc377466fb2ec77db453874f54acb3473afb3f0dfff7fd14cc1e1d3595e61182b6ac285dfcc34e51c3d971b25ba883e3ad1d4396daae9a95e67a246d16a04fac2c8e8191d3ebdd1e790db0f2521243b1aaf657031feaf4153628730dd86899a060375c71f3aa741bd3ada5c5f1874a51c88ec1457f9f0e37ab20d770025834431bcfb74fea7aa4d1c"}, 0xf) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r5}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb0100180f000000000000480000004890af00030000000d0000000000000a050000000b00000002000013030000000a0000000600000005000000050000000300000004000000020000000000001205000000020000000000000201000000000000eac6b0080ee8d5cb281cd9146cdf2421e4738536bc7d47fe793fc3ed7b1648606f25fe8f530165298eb1a98182d5cf47e890da92b7b5b1dbc5f1d04f2217b5a5a03bba8e80c3ccb65ae7fc2b"], &(0x7f0000000700)=""/251, 0x63, 0xfb, 0x0, 0x0, 0x10000, @value=r6}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f00000008c0)="5a6d22630828a8d46cc78a0e2edddd4526774e7bc42229ea1ee4f0365bea4b61501037c7e6bd05570ce93916598fd782bb3adfc15e7b132095895252f4b523bb409401413e1a3f6bc075cd99", &(0x7f0000000940)=""/83}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000005700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48003, 0x2800}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r12 = creat(&(0x7f0000000080)='./file0\x00', 0x8d) close(r12) socket(0x40000000015, 0x5, 0x0) 296.121153ms ago: executing program 0 (id=755): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellinkprop={0x34, 0x6d, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x8, 0x200}, [@IFLA_IFNAME={0x14}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) socket$nl_rdma(0x10, 0x3, 0x14) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x1, r4, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) r8 = dup3(r4, r3, 0x80000) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r9, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0x2fff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x82803, 0x130) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000000280)={r13, 0x1000, {0x0, 0x0, 0x0, 0x10000032, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237600a8ca5b07dcc14fa02c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$LOOP_SET_CAPACITY(r12, 0x4c07) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, 0x0, 0x0) sendmsg(r10, 0x0, 0x40008) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x1090d2, 0x10, 0x43a1bd76, 0x9, 0x9, 0x8006, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4, r8, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r14, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) 235.296667ms ago: executing program 1 (id=756): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="d8003f0019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500808178a8001500030001400200000901ac040000d69b6f940071009807a290457f0189b316277ce06bbade8017cbec4c0000001fb791643a5ee4b11602b2a10e11ce1b25d6d9300000730d7a5025ccca262f2240fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a9230000e9703000000000000000000000000129ae100000000000000000000080000400000000000000000000080b6fcdb2ab01ec2bb13", 0xd8}], 0x1}, 0x8000194) 161.750391ms ago: executing program 1 (id=757): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000000200)="000bda", 0x3) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000fd3f1400e27f000001"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, r4}, 0x38) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200081, 0x0) 54.040967ms ago: executing program 0 (id=758): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002400000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f00000002c0)="a7cf1787e535bb49508b4e712b8c73bee2c95f06b5348c3830803a61f7922a18a22ecf6f81a7e23f2b034f1cf981ea6e3786c183b55cac56e20311801a83bf0229696848137ab109faa3ee124d04e0535a3fe1312f2727aa12fbecd8a5bb3d74080d7e71bc4e152574ed5abf4135f35bf9c0944054d2a1925320de4262c5944ea00d24ac0c225ee5c9cc2d6dd0bbf4789e25b06b6fb9ad5943ee43dd6a973fa6"}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xf802}) r4 = socket$netlink(0x10, 0x3, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1, 0x0, 0xfffffffc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r6, &(0x7f0000000e00)={0x6, 0x20, 0x7ff, 0x20, 0x5}, 0x48) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c89600000500"}]}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x508}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_open_dev$vcsn(&(0x7f0000000000), 0x101, 0x42000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000365000/0x3000)=nil, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@jmp={0x5, 0x1, 0x6, 0x8, 0xe, 0x18, 0x10}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000000000000000000d0a0000000000000002000006040000000500000008000002040000000a00000000000030612e"], &(0x7f0000000f40)=""/4073, 0x47, 0xfe9, 0x1}, 0x28) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x6b579764e768c97a, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x5}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 0s ago: executing program 6 (id=759): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa1551, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x1, @perf_bp={0x0, 0x4}, 0x101280, 0x26f, 0x6, 0x6, 0x4, 0x20005, 0xa5b, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0xe0, 0x0, 0x0, 0x0, 0x8, 0x4416, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x4, 0x4, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000d0000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x100451, 0x0, 0x7fffffff, 0x7, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): mode: writeback. [ 53.245588][ T4067] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 53.279029][ T4075] netlink: 36 bytes leftover after parsing attributes in process `syz.4.197'. [ 53.434309][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.508821][ T4085] loop4: detected capacity change from 0 to 128 [ 53.516196][ T4085] EXT4-fs: test_dummy_encryption option not supported [ 53.558199][ T4095] syz.2.205 uses obsolete (PF_INET,SOCK_PACKET) [ 53.638643][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 53.746871][ T4111] netlink: 'syz.3.211': attribute type 3 has an invalid length. [ 53.754921][ T4111] netlink: 'syz.3.211': attribute type 4 has an invalid length. [ 54.143172][ T4132] FAULT_INJECTION: forcing a failure. [ 54.143172][ T4132] name failslab, interval 1, probability 0, space 0, times 0 [ 54.155903][ T4132] CPU: 1 UID: 0 PID: 4132 Comm: syz.4.219 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.155958][ T4132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.155976][ T4132] Call Trace: [ 54.155985][ T4132] [ 54.155995][ T4132] __dump_stack+0x1d/0x30 [ 54.156023][ T4132] dump_stack_lvl+0x95/0xd0 [ 54.156052][ T4132] dump_stack+0x15/0x1b [ 54.156077][ T4132] should_fail_ex+0x263/0x280 [ 54.156127][ T4132] should_failslab+0x8c/0xb0 [ 54.156156][ T4132] __kmalloc_noprof+0xb8/0x580 [ 54.156189][ T4132] ? bitmap_zalloc+0x29/0x40 [ 54.156219][ T4132] bitmap_zalloc+0x29/0x40 [ 54.156250][ T4132] dev_prep_valid_name+0x139/0x540 [ 54.156283][ T4132] netif_change_name+0xf4/0x720 [ 54.156309][ T4132] ? nla_strscpy+0xec/0x120 [ 54.156328][ T4132] do_setlink+0x731/0x2940 [ 54.156368][ T4132] ? selinux_capable+0x31/0x40 [ 54.156393][ T4132] ? security_capable+0x7b/0x90 [ 54.156431][ T4132] ? ns_capable+0x7c/0xb0 [ 54.156466][ T4132] ? netlink_ns_capable+0x86/0xa0 [ 54.156503][ T4132] rtnl_setlink+0x3a4/0x4f0 [ 54.156547][ T4132] ? selinux_capable+0x31/0x40 [ 54.156570][ T4132] ? security_capable+0x7b/0x90 [ 54.156607][ T4132] ? ns_capable+0x7c/0xb0 [ 54.156641][ T4132] ? __pfx_rtnl_setlink+0x10/0x10 [ 54.156670][ T4132] rtnetlink_rcv_msg+0x64b/0x720 [ 54.156697][ T4132] netlink_rcv_skb+0x123/0x220 [ 54.156730][ T4132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 54.156764][ T4132] rtnetlink_rcv+0x1c/0x30 [ 54.156786][ T4132] netlink_unicast+0x5c0/0x690 [ 54.156819][ T4132] netlink_sendmsg+0x5c8/0x6f0 [ 54.156847][ T4132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.156872][ T4132] sock_write_iter+0x32a/0x360 [ 54.156901][ T4132] do_iter_readv_writev+0x4fd/0x5a0 [ 54.156933][ T4132] vfs_writev+0x2e1/0x900 [ 54.156976][ T4132] do_writev+0xe9/0x210 [ 54.157011][ T4132] __x64_sys_writev+0x45/0x50 [ 54.157039][ T4132] x64_sys_call+0x1ba5/0x3000 [ 54.157067][ T4132] do_syscall_64+0xc0/0x2a0 [ 54.157102][ T4132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.157137][ T4132] RIP: 0033:0x7f0c38f5aeb9 [ 54.157158][ T4132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.157178][ T4132] RSP: 002b:00007f0c379b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 54.157199][ T4132] RAX: ffffffffffffffda RBX: 00007f0c391d5fa0 RCX: 00007f0c38f5aeb9 [ 54.157217][ T4132] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 54.157234][ T4132] RBP: 00007f0c379b7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.157251][ T4132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.157267][ T4132] R13: 00007f0c391d6038 R14: 00007f0c391d5fa0 R15: 00007ffcdf8dc978 [ 54.157292][ T4132] [ 54.482341][ T4135] loop3: detected capacity change from 0 to 1024 [ 54.493324][ T4135] EXT4-fs: Ignoring removed nobh option [ 54.543735][ T4135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.596084][ T4144] loop4: detected capacity change from 0 to 512 [ 54.639004][ T4144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.694662][ T4144] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.749653][ T4151] xt_hashlimit: max too large, truncated to 1048576 [ 54.775731][ T4151] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 54.789318][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.410728][ T4177] loop4: detected capacity change from 0 to 8192 [ 55.448133][ T3304] loop4: p1 < > p2 p4 < p5 > [ 55.452922][ T3304] loop4: partition table partially beyond EOD, truncated [ 55.466064][ T3304] loop4: p1 start 8388608 is beyond EOD, truncated [ 55.472817][ T3304] loop4: p2 size 16128 extends beyond EOD, truncated [ 55.488743][ T3304] loop4: p5 size 16128 extends beyond EOD, truncated [ 55.503150][ T4177] loop4: p1 < > p2 p4 < p5 > [ 55.507994][ T4177] loop4: partition table partially beyond EOD, truncated [ 55.515407][ T4177] loop4: p1 start 8388608 is beyond EOD, truncated [ 55.522197][ T4177] loop4: p2 size 16128 extends beyond EOD, truncated [ 55.531793][ T4177] loop4: p5 size 16128 extends beyond EOD, truncated [ 55.559693][ T4188] loop0: detected capacity change from 0 to 128 [ 55.587198][ T4188] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.635416][ T4190] loop2: detected capacity change from 0 to 512 [ 55.642884][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 55.653906][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 55.667635][ T2753] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.668386][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 55.750405][ T4190] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #3: comm syz.2.238: corrupted inode contents [ 55.764993][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 55.771837][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 55.778601][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 55.797609][ T4190] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #3: comm syz.2.238: mark_inode_dirty error [ 55.822169][ T4190] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #3: comm syz.2.238: corrupted inode contents [ 55.883491][ T4190] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.238: mark_inode_dirty error [ 55.883523][ T4202] wireguard0: entered promiscuous mode [ 55.883543][ T4202] wireguard0: entered allmulticast mode [ 55.941042][ T4190] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.238: Failed to acquire dquot type 0 [ 55.981743][ T4210] loop0: detected capacity change from 0 to 136 [ 56.026763][ T4210] Attempt to read inode for relocated directory [ 56.066265][ T4190] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.238: corrupted inode contents [ 56.151240][ T4210] tipc: Started in network mode [ 56.157957][ T4210] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 56.168040][ T4210] tipc: Enabling of bearer rejected, failed to enable media [ 56.202796][ T4190] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #16: comm syz.2.238: mark_inode_dirty error [ 56.215325][ T4211] netlink: 'syz.4.239': attribute type 8 has an invalid length. [ 56.234416][ T4190] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.238: corrupted inode contents [ 56.265426][ T4190] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.238: mark_inode_dirty error [ 56.287490][ T4190] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.238: corrupted inode contents [ 56.318054][ T4190] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 56.335136][ T4190] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.238: corrupted inode contents [ 56.358089][ T4190] EXT4-fs error (device loop2): ext4_truncate:4635: inode #16: comm syz.2.238: mark_inode_dirty error [ 56.374914][ T4219] netlink: 'syz.0.245': attribute type 3 has an invalid length. [ 56.388418][ T4190] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 56.418031][ T4190] EXT4-fs (loop2): 1 truncate cleaned up [ 56.424317][ T4190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.439351][ T4190] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.543957][ T4228] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 56.550794][ T4228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.558603][ T4228] vhci_hcd vhci_hcd.0: Device attached [ 56.599755][ T4228] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 56.606735][ T4228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.614414][ T4228] vhci_hcd vhci_hcd.0: Device attached [ 56.647880][ T4228] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 56.654761][ T4228] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 56.662417][ T4228] vhci_hcd vhci_hcd.0: Device attached [ 56.706057][ T4238] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(19) [ 56.712749][ T4238] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.720364][ T4238] vhci_hcd vhci_hcd.0: Device attached [ 56.778103][ T4190] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.787715][ T4228] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 56.794679][ T4228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.797795][ T3411] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 56.802752][ T4228] vhci_hcd vhci_hcd.0: Device attached [ 56.822451][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 56.822472][ T29] audit: type=1400 audit(1769877370.989:430): avc: denied { create } for pid=4227 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 56.860036][ T4228] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(23) [ 56.866917][ T4228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.874629][ T4228] vhci_hcd vhci_hcd.0: Device attached [ 56.900938][ T4238] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.910409][ T4228] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.929808][ T4228] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.963707][ T4244] vhci_hcd: connection closed [ 56.963707][ T4239] vhci_hcd: connection closed [ 56.964209][ T4241] vhci_hcd: connection closed [ 56.971992][ T4229] vhci_hcd: connection reset by peer [ 56.983477][ T2753] vhci_hcd vhci_hcd.0: stop threads [ 56.988890][ T2753] vhci_hcd vhci_hcd.0: release socket [ 56.994403][ T2753] vhci_hcd vhci_hcd.0: disconnect device [ 57.008970][ T4232] vhci_hcd: connection closed [ 57.009131][ T4234] vhci_hcd: connection closed [ 57.019272][ T2753] vhci_hcd vhci_hcd.0: stop threads [ 57.029161][ T4247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=511 sclass=netlink_audit_socket pid=4247 comm=syz.2.249 [ 57.034695][ T4247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4247 comm=syz.2.249 [ 57.041785][ T2753] vhci_hcd vhci_hcd.0: release socket [ 57.059957][ T2753] vhci_hcd vhci_hcd.0: disconnect device [ 57.066673][ T29] audit: type=1326 audit(1769877371.209:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4413a8aeb9 code=0x7ffc0000 [ 57.090525][ T29] audit: type=1326 audit(1769877371.209:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f4413a8aeb9 code=0x7ffc0000 [ 57.114104][ T29] audit: type=1326 audit(1769877371.209:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4413a8aeb9 code=0x7ffc0000 [ 57.137654][ T29] audit: type=1326 audit(1769877371.209:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f4413a8aeb9 code=0x7ffc0000 [ 57.161056][ T29] audit: type=1326 audit(1769877371.209:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4413a8aeb9 code=0x7ffc0000 [ 57.184538][ T29] audit: type=1326 audit(1769877371.209:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4413a8aeb9 code=0x7ffc0000 [ 57.208001][ T29] audit: type=1326 audit(1769877371.209:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4413a8aeb9 code=0x7ffc0000 [ 57.218601][ T2753] vhci_hcd vhci_hcd.0: stop threads [ 57.231480][ T29] audit: type=1326 audit(1769877371.209:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4246 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4413a4b78e code=0x7ffc0000 [ 57.236762][ T2753] vhci_hcd vhci_hcd.0: release socket [ 57.260128][ T29] audit: type=1400 audit(1769877371.229:439): avc: denied { write } for pid=4248 comm="syz.1.250" path="socket:[8237]" dev="sockfs" ino=8237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.265623][ T2753] vhci_hcd vhci_hcd.0: disconnect device [ 57.333635][ T2753] vhci_hcd vhci_hcd.0: stop threads [ 57.338969][ T2753] vhci_hcd vhci_hcd.0: release socket [ 57.344516][ T2753] vhci_hcd vhci_hcd.0: disconnect device [ 57.350754][ T2753] vhci_hcd vhci_hcd.0: stop threads [ 57.356110][ T2753] vhci_hcd vhci_hcd.0: release socket [ 57.361646][ T2753] vhci_hcd vhci_hcd.0: disconnect device [ 57.369261][ T2753] vhci_hcd vhci_hcd.0: stop threads [ 57.374579][ T2753] vhci_hcd vhci_hcd.0: release socket [ 57.380164][ T2753] vhci_hcd vhci_hcd.0: disconnect device [ 57.458868][ T4260] loop4: detected capacity change from 0 to 1024 [ 57.465566][ T4260] EXT4-fs: Ignoring removed orlov option [ 57.495186][ T4260] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #4: comm syz.4.253: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 57.514021][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.528741][ T4260] EXT4-fs error (device loop4): ext4_quota_enable:7180: comm syz.4.253: Bad quota inode: 4, type: 1 [ 57.540242][ T4260] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.555921][ T4260] EXT4-fs (loop4): mount failed [ 57.816905][ T4279] loop0: detected capacity change from 0 to 128 [ 57.895661][ T4284] __nla_validate_parse: 8 callbacks suppressed [ 57.895685][ T4284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.261'. [ 57.910954][ T4284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 57.934449][ T4284] bond2: option arp_validate: invalid value (609091586) [ 57.945146][ T4279] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.974918][ T4284] bond2 (unregistering): Released all slaves [ 57.989462][ T4279] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.146309][ T2753] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.223926][ T4289] loop4: detected capacity change from 0 to 512 [ 58.244988][ T4290] bond1 (unregistering): Released all slaves [ 58.262404][ T4289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.353075][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.383971][ T4296] loop4: detected capacity change from 0 to 1024 [ 58.401821][ T4265] syz.2.254 (4265) used greatest stack depth: 7232 bytes left [ 58.432215][ T4296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.474012][ T4301] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 58.511210][ T4303] EXT4-fs: Ignoring removed nobh option [ 58.529283][ T4301] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 58.541764][ T4301] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.541764][ T4301] [ 58.551927][ T4301] EXT4-fs (loop4): Total free blocks count 0 [ 58.558143][ T4301] EXT4-fs (loop4): Free/Dirty block details [ 58.564084][ T4301] EXT4-fs (loop4): free_blocks=20480 [ 58.569740][ T4301] EXT4-fs (loop4): dirty_blocks=16 [ 58.574908][ T4301] EXT4-fs (loop4): Block reservation details [ 58.581132][ T4301] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 58.591764][ T4303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.629310][ T1909] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.636083][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.703433][ T4310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.265'. [ 58.715452][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 59.536222][ T4312] FAULT_INJECTION: forcing a failure. [ 59.536222][ T4312] name failslab, interval 1, probability 0, space 0, times 0 [ 59.553199][ T4312] CPU: 1 UID: 0 PID: 4312 Comm: syz.0.268 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.553239][ T4312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.553252][ T4312] Call Trace: [ 59.553309][ T4312] [ 59.553317][ T4312] __dump_stack+0x1d/0x30 [ 59.553372][ T4312] dump_stack_lvl+0x95/0xd0 [ 59.553399][ T4312] dump_stack+0x15/0x1b [ 59.553429][ T4312] should_fail_ex+0x263/0x280 [ 59.553467][ T4312] should_failslab+0x8c/0xb0 [ 59.553493][ T4312] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 59.553594][ T4312] ? __alloc_skb+0x2f0/0x4b0 [ 59.553623][ T4312] __alloc_skb+0x2f0/0x4b0 [ 59.553648][ T4312] ? __alloc_skb+0x219/0x4b0 [ 59.553694][ T4312] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 59.553729][ T4312] nfc_genl_device_removed+0x39/0x1d0 [ 59.553759][ T4312] nfc_unregister_rfkill+0x1b/0xc0 [ 59.553865][ T4312] nci_unregister_device+0x27/0x170 [ 59.553895][ T4312] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 59.553929][ T4312] virtual_ncidev_close+0x2a/0x50 [ 59.553971][ T4312] __fput+0x29b/0x650 [ 59.553999][ T4312] ____fput+0x1c/0x30 [ 59.554028][ T4312] task_work_run+0x130/0x1a0 [ 59.554127][ T4312] get_signal+0xe09/0xf60 [ 59.554177][ T4312] ? vfs_readv+0x594/0x6e0 [ 59.554204][ T4312] arch_do_signal_or_restart+0x96/0x450 [ 59.554232][ T4312] exit_to_user_mode_loop+0x6a/0x6f0 [ 59.554324][ T4312] ? __x64_sys_preadv2+0x67/0x80 [ 59.554346][ T4312] do_syscall_64+0x1d3/0x2a0 [ 59.554375][ T4312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.554395][ T4312] RIP: 0033:0x7f11e6b7aeb9 [ 59.554466][ T4312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.554482][ T4312] RSP: 002b:00007f11e55d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 59.554500][ T4312] RAX: fffffffffffffff2 RBX: 00007f11e6df5fa0 RCX: 00007f11e6b7aeb9 [ 59.554513][ T4312] RDX: 0000000000000001 RSI: 0000200000002580 RDI: 0000000000000003 [ 59.554524][ T4312] RBP: 00007f11e55d7090 R08: 0000000000000007 R09: 0000000000000000 [ 59.554535][ T4312] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 59.554546][ T4312] R13: 00007f11e6df6038 R14: 00007f11e6df5fa0 R15: 00007ffee33e0858 [ 59.554577][ T4312] [ 59.810924][ T4324] set_capacity_and_notify: 1 callbacks suppressed [ 59.811010][ T4324] loop0: detected capacity change from 0 to 1024 [ 59.838045][ T4324] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 59.859810][ T4324] loop0: detected capacity change from 0 to 2048 [ 59.899343][ T4331] netlink: 'syz.0.272': attribute type 1 has an invalid length. [ 59.920201][ T4331] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 59.931732][ T4331] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 60.015276][ T4337] loop0: detected capacity change from 0 to 256 [ 60.183275][ T4346] FAULT_INJECTION: forcing a failure. [ 60.183275][ T4346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.196577][ T4346] CPU: 0 UID: 0 PID: 4346 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.196668][ T4346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.196680][ T4346] Call Trace: [ 60.196686][ T4346] [ 60.196758][ T4346] __dump_stack+0x1d/0x30 [ 60.196783][ T4346] dump_stack_lvl+0x95/0xd0 [ 60.196808][ T4346] dump_stack+0x15/0x1b [ 60.196873][ T4346] should_fail_ex+0x263/0x280 [ 60.196963][ T4346] should_fail+0xb/0x20 [ 60.196988][ T4346] should_fail_usercopy+0x1a/0x20 [ 60.197149][ T4346] _copy_from_user+0x1c/0xb0 [ 60.197181][ T4346] kstrtouint_from_user+0x69/0xf0 [ 60.197218][ T4346] proc_fail_nth_write+0x50/0x160 [ 60.197246][ T4346] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 60.197271][ T4346] vfs_write+0x269/0x9f0 [ 60.197306][ T4346] ? __rcu_read_unlock+0x4e/0x70 [ 60.197390][ T4346] ? __fget_files+0x184/0x1c0 [ 60.197411][ T4346] ? mutex_lock+0x57/0x90 [ 60.197434][ T4346] ksys_write+0xdc/0x1a0 [ 60.197455][ T4346] __x64_sys_write+0x40/0x50 [ 60.197524][ T4346] x64_sys_call+0x2847/0x3000 [ 60.197568][ T4346] do_syscall_64+0xc0/0x2a0 [ 60.197688][ T4346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.197753][ T4346] RIP: 0033:0x7f11e6b3b78e [ 60.197769][ T4346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.197808][ T4346] RSP: 002b:00007f11e55d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.197826][ T4346] RAX: ffffffffffffffda RBX: 00007f11e55d76c0 RCX: 00007f11e6b3b78e [ 60.197838][ T4346] RDX: 0000000000000001 RSI: 00007f11e55d70a0 RDI: 0000000000000006 [ 60.197952][ T4346] RBP: 00007f11e55d7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.197964][ T4346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.197983][ T4346] R13: 00007f11e6df6038 R14: 00007f11e6df5fa0 R15: 00007ffee33e0858 [ 60.198002][ T4346] [ 60.414802][ T4349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.278'. [ 60.528478][ T4359] loop0: detected capacity change from 0 to 512 [ 60.535732][ T4359] ext3: Bad value for 'init_itable' [ 60.579924][ T4364] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 60.600262][ T4364] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 60.612125][ T4364] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 60.648414][ T4355] hub 6-0:1.0: USB hub found [ 60.653847][ T4355] hub 6-0:1.0: 8 ports detected [ 60.851108][ T4371] 9p: Bad value for 'rfdno' [ 61.441240][ T4394] loop4: detected capacity change from 0 to 512 [ 61.469934][ T4394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.482897][ T4394] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.500015][ T4394] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.293: corrupted inode contents [ 61.513166][ T4394] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.293: mark_inode_dirty error [ 61.524804][ T4394] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.293: corrupted inode contents [ 61.536984][ T4394] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #18: comm syz.4.293: mark_inode_dirty error [ 61.537402][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.549305][ T4394] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #18: comm syz.4.293: mark inode dirty (error -117) [ 61.571070][ T4394] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 61.620001][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.629519][ T4401] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 61.638334][ T4401] ref_ctr increment failed for inode: 0x19b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104795100 [ 61.650989][ T4401] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 61.659949][ T4401] ref_ctr decrement failed for inode: 0x19b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104795100 [ 61.674232][ T4401] uprobe: syz.2.294:4401 failed to unregister, leaking uprobe [ 61.699110][ T4408] netlink: 'syz.4.296': attribute type 1 has an invalid length. [ 61.733267][ T4411] loop1: detected capacity change from 0 to 512 [ 61.745190][ T4411] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.747176][ T4408] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 61.751704][ T4411] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 61.771672][ T4408] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 61.775983][ T4411] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 61.810931][ T4411] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.298: attempt to clear invalid blocks 2 len 1 [ 61.824153][ T4411] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.298: invalid indirect mapped block 1819239214 (level 0) [ 61.839286][ T4411] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.298: invalid indirect mapped block 1819239214 (level 1) [ 61.876020][ T4411] EXT4-fs (loop1): 1 truncate cleaned up [ 61.881948][ T3411] usb 1-1: enqueue for inactive port 0 [ 61.889754][ T3411] usb 1-1: enqueue for inactive port 0 [ 61.906024][ T4411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.916647][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 61.916702][ T29] audit: type=1400 audit(1769877376.069:490): avc: denied { getopt } for pid=4416 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.945778][ T4411] EXT4-fs error (device loop1): ext4_lookup:1782: inode #2: comm syz.1.298: 'file1' linked to parent dir [ 61.949748][ T29] audit: type=1400 audit(1769877376.099:491): avc: denied { setopt } for pid=4416 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.972288][ T3411] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 61.987417][ T4419] Driver unsupported XDP return value 0 on prog (id 62) dev N/A, expect packet loss! [ 62.013927][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.137016][ T4429] loop1: detected capacity change from 0 to 1024 [ 62.162346][ T4429] EXT4-fs: Ignoring removed nobh option [ 62.182231][ T4429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.197823][ T4421] hub 6-0:1.0: USB hub found [ 62.202841][ T4421] hub 6-0:1.0: 8 ports detected [ 62.267202][ T4434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.304'. [ 62.770321][ T29] audit: type=1400 audit(1769877376.939:492): avc: denied { block_suspend } for pid=4435 comm="syz.4.305" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.884412][ T4438] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.892625][ T4438] bridge_slave_1: left allmulticast mode [ 62.898412][ T4438] bridge_slave_1: left promiscuous mode [ 62.904163][ T4438] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.915364][ T4438] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 63.068798][ T4460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 63.078950][ T4460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.310'. [ 63.089940][ T4460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.310'. [ 63.114139][ T4457] loop2: detected capacity change from 0 to 8192 [ 63.179065][ T4469] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 63.218803][ T4469] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 63.230319][ T4469] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 63.310605][ T4480] xt_hashlimit: size too large, truncated to 1048576 [ 63.801271][ T29] audit: type=1400 audit(1769877377.969:493): avc: denied { ioctl } for pid=4526 comm="syz.4.314" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.805262][ T4527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 63.839770][ T4527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 63.848663][ T4527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 63.857473][ T4527] netlink: 'syz.4.314': attribute type 13 has an invalid length. [ 63.865283][ T4527] netlink: 'syz.4.314': attribute type 12 has an invalid length. [ 63.876162][ T4529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 63.885378][ T4529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 63.899067][ T4529] wireguard0: entered promiscuous mode [ 63.904678][ T4529] wireguard0: entered allmulticast mode [ 63.980255][ T4534] netlink: 'syz.3.313': attribute type 8 has an invalid length. [ 64.231017][ T4537] hub 6-0:1.0: USB hub found [ 64.235767][ T4537] hub 6-0:1.0: 8 ports detected [ 64.475547][ T4542] loop0: detected capacity change from 0 to 1024 [ 64.498005][ T4542] EXT4-fs: Ignoring removed i_version option [ 64.504267][ T4542] EXT4-fs: Ignoring removed bh option [ 64.507054][ T4540] loop3: detected capacity change from 0 to 128 [ 64.534616][ T4540] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.547341][ T4542] EXT4-fs: inline encryption not supported [ 64.554268][ T4542] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.566490][ T4540] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.592518][ T4542] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.327: lblock 2 mapped to illegal pblock 2 (length 1) [ 64.607014][ T4542] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 64.615534][ T4542] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.327: lblock 0 mapped to illegal pblock 48 (length 1) [ 64.629905][ T4542] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 64.638795][ T4542] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.327: Failed to acquire dquot type 0 [ 64.650617][ T4542] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 64.660344][ T4542] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.327: mark_inode_dirty error [ 64.679289][ T4542] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 64.692975][ T4545] bond2 (unregistering): Released all slaves [ 64.702833][ T4542] EXT4-fs (loop0): 1 orphan inode deleted [ 64.709307][ T4542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.721649][ T1909] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.736637][ T1909] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 64.745340][ T1909] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 64.776203][ T1909] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm kworker/u8:6: lblock 2 mapped to illegal pblock 2 (length 1) [ 64.803366][ T37] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.813565][ T1909] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 64.821844][ T1909] EXT4-fs error (device loop0): ext4_write_dquot:6966: comm kworker/u8:6: Failed to commit dquot type 0 [ 64.842519][ T1909] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 64.855732][ T3371] IPVS: starting estimator thread 0... [ 64.857409][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.862741][ T4548] FAULT_INJECTION: forcing a failure. [ 64.862741][ T4548] name failslab, interval 1, probability 0, space 0, times 0 [ 64.877938][ T3321] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 64.883409][ T4548] CPU: 1 UID: 0 PID: 4548 Comm: syz.3.319 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.883565][ T4548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.883623][ T4548] Call Trace: [ 64.883646][ T4548] [ 64.883696][ T4548] __dump_stack+0x1d/0x30 [ 64.883783][ T4548] dump_stack_lvl+0x95/0xd0 [ 64.883849][ T4548] dump_stack+0x15/0x1b [ 64.883985][ T4548] should_fail_ex+0x263/0x280 [ 64.884087][ T4548] should_failslab+0x8c/0xb0 [ 64.884228][ T4548] __kvmalloc_node_noprof+0x148/0x680 [ 64.884384][ T4548] ? __nf_hook_entries_try_shrink+0x24c/0x410 [ 64.884493][ T4548] __nf_hook_entries_try_shrink+0x24c/0x410 [ 64.884569][ T4548] __nf_unregister_net_hook+0x2db/0x370 [ 64.884701][ T4548] nf_unregister_net_hooks+0xab/0xe0 [ 64.884777][ T4548] ip_vs_unregister_hooks+0x91/0xc0 [ 64.884947][ T4548] ip_vs_unlink_service+0x26f/0x560 [ 64.885050][ T4548] do_ip_vs_set_ctl+0x8e7/0xa60 [ 64.885136][ T4548] ? _parse_integer_limit+0x170/0x190 [ 64.885268][ T4548] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 64.885471][ T4548] ? ip4_datagram_release_cb+0x3ee/0x420 [ 64.885677][ T4548] nf_setsockopt+0x199/0x1b0 [ 64.885764][ T4548] ip_setsockopt+0x102/0x110 [ 64.885895][ T4548] raw_setsockopt+0xbd/0x150 [ 64.886004][ T4548] sock_common_setsockopt+0x69/0x80 [ 64.886141][ T4548] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 64.886316][ T4548] __sys_setsockopt+0x184/0x200 [ 64.886458][ T4548] __x64_sys_setsockopt+0x64/0x80 [ 64.886583][ T4548] x64_sys_call+0x21d5/0x3000 [ 64.886742][ T4548] do_syscall_64+0xc0/0x2a0 [ 64.886844][ T4548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.886942][ T4548] RIP: 0033:0x7f1cbb16aeb9 [ 64.887006][ T4548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.887118][ T4548] RSP: 002b:00007f1cb9bc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.887184][ T4548] RAX: ffffffffffffffda RBX: 00007f1cbb3e5fa0 RCX: 00007f1cbb16aeb9 [ 64.887233][ T4548] RDX: 0000000000000484 RSI: 0000000000000000 RDI: 0000000000000004 [ 64.887289][ T4548] RBP: 00007f1cb9bc7090 R08: 000000000000002c R09: 0000000000000000 [ 64.887387][ T4548] R10: 0000200000001280 R11: 0000000000000246 R12: 0000000000000001 [ 64.887431][ T4548] R13: 00007f1cbb3e6038 R14: 00007f1cbb3e5fa0 R15: 00007ffcb2c8c3e8 [ 64.887572][ T4548] [ 65.117799][ T4549] IPVS: using max 1824 ests per chain, 91200 per kthread [ 65.142155][ T3321] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 65.173099][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.190510][ T3321] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 65.205822][ T4551] netlink: 'syz.4.322': attribute type 1 has an invalid length. [ 65.226117][ T4553] loop3: detected capacity change from 0 to 2048 [ 65.262671][ T4551] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 65.287642][ T4553] Alternate GPT is invalid, using primary GPT. [ 65.294158][ T4553] loop3: p2 p3 p7 [ 65.315319][ T4553] loop6: detected capacity change from 0 to 7 [ 65.335196][ T4551] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 65.355295][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 65.371926][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 65.380985][ T4193] udevd[4193]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 65.400003][ T29] audit: type=1400 audit(1769877379.569:494): avc: denied { create } for pid=4563 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.436112][ T4564] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 65.497649][ T4565] loop3: detected capacity change from 0 to 512 [ 65.520662][ T4569] netlink: 'syz.1.328': attribute type 10 has an invalid length. [ 65.548928][ T4569] team0: Port device vlan0 added [ 65.577755][ T4565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.657455][ T4565] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.745208][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.837009][ T4589] tipc: Started in network mode [ 65.842130][ T4589] tipc: Node identity cada6f5b0c93, cluster identity 4711 [ 65.849671][ T4589] tipc: Enabled bearer , priority 0 [ 65.877045][ T4589] tipc: Resetting bearer [ 65.891231][ T4587] tipc: Resetting bearer [ 65.891486][ T4593] hub 6-0:1.0: USB hub found [ 65.908456][ T4587] tipc: Disabling bearer [ 65.917951][ T4593] hub 6-0:1.0: 8 ports detected [ 65.923171][ T4558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.318'. [ 65.934961][ T4595] loop1: detected capacity change from 0 to 128 [ 65.939586][ T4558] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 65.958937][ T4595] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.980441][ T4558] batman_adv: batadv0: Adding interface: ip6gretap1 [ 65.987123][ T4558] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.013303][ T4595] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.034036][ T4558] batman_adv: batadv0: Interface activated: ip6gretap1 [ 66.049146][ T4598] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 66.145218][ T4606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.341'. [ 66.215889][ T4608] infiniband syz2: set active [ 66.220698][ T4608] infiniband syz2: added bond_slave_1 [ 66.221234][ T4611] loop0: detected capacity change from 0 to 256 [ 66.248550][ T4612] loop4: detected capacity change from 0 to 4096 [ 66.264575][ T4612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.284792][ T4608] RDS/IB: syz2: added [ 66.307648][ T4608] smc: adding ib device syz2 with port count 1 [ 66.339319][ T4608] smc: ib device syz2 port 1 has no pnetid [ 66.375910][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.460097][ T4616] loop4: detected capacity change from 0 to 1764 [ 66.713853][ T4619] loop0: detected capacity change from 0 to 4096 [ 66.732229][ T4619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.761762][ T4624] loop3: detected capacity change from 0 to 1024 [ 66.776303][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.810337][ T4624] EXT4-fs: Ignoring removed nobh option [ 66.816062][ T4624] EXT4-fs: Ignoring removed oldalloc option [ 66.823764][ T2753] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.838309][ T4624] EXT4-fs: Ignoring removed orlov option [ 66.839282][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.908507][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 66.908527][ T29] audit: type=1400 audit(1769877381.079:507): avc: denied { load_policy } for pid=4626 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 66.962172][ T4627] SELinux: failed to load policy [ 66.967450][ T4624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.982088][ T2753] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.049129][ T29] audit: type=1400 audit(1769877381.219:508): avc: denied { read } for pid=4633 comm="syz.0.353" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.072488][ T29] audit: type=1400 audit(1769877381.219:509): avc: denied { open } for pid=4633 comm="syz.0.353" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.103721][ T2753] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.133147][ T29] audit: type=1400 audit(1769877381.299:510): avc: denied { write } for pid=4637 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.180755][ T2753] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.207995][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.264218][ T4648] loop3: detected capacity change from 0 to 136 [ 67.305438][ T4648] Attempt to read inode for relocated directory [ 67.311902][ T29] audit: type=1400 audit(1769877381.469:511): avc: denied { read } for pid=3041 comm="dhcpcd" name="n25" dev="tmpfs" ino=2536 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.333847][ T29] audit: type=1400 audit(1769877381.469:512): avc: denied { open } for pid=3041 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2536 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.356832][ T29] audit: type=1400 audit(1769877381.469:513): avc: denied { getattr } for pid=3041 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2536 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.395043][ T4648] FAULT_INJECTION: forcing a failure. [ 67.395043][ T4648] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 67.408711][ T4648] CPU: 1 UID: 0 PID: 4648 Comm: syz.3.355 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.408739][ T4648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.408752][ T4648] Call Trace: [ 67.408761][ T4648] [ 67.408770][ T4648] __dump_stack+0x1d/0x30 [ 67.408863][ T4648] dump_stack_lvl+0x95/0xd0 [ 67.408893][ T4648] dump_stack+0x15/0x1b [ 67.408968][ T4648] should_fail_ex+0x263/0x280 [ 67.409045][ T4648] should_fail_alloc_page+0xf2/0x100 [ 67.409081][ T4648] __alloc_frozen_pages_noprof+0x108/0x350 [ 67.409153][ T4648] alloc_pages_mpol+0xb3/0x260 [ 67.409198][ T4648] alloc_pages_noprof+0x8f/0x130 [ 67.409241][ T4648] ? __pfx_isofs_lookup+0x10/0x10 [ 67.409322][ T4648] isofs_lookup+0x3c/0x920 [ 67.409372][ T4648] ? d_alloc_parallel+0xc01/0xce0 [ 67.409474][ T4648] ? __rcu_read_unlock+0x4e/0x70 [ 67.409515][ T4648] ? __d_lookup+0x316/0x340 [ 67.409605][ T4648] ? __pfx_isofs_lookup+0x10/0x10 [ 67.409641][ T4648] path_openat+0xee1/0x23c0 [ 67.409771][ T4648] do_filp_open+0x15d/0x280 [ 67.409824][ T4648] do_sys_openat2+0xa6/0x150 [ 67.409871][ T4648] __x64_sys_openat+0xf2/0x120 [ 67.409988][ T4648] x64_sys_call+0x2b07/0x3000 [ 67.410023][ T4648] do_syscall_64+0xc0/0x2a0 [ 67.410068][ T4648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.410109][ T4648] RIP: 0033:0x7f1cbb16aeb9 [ 67.410131][ T4648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.410214][ T4648] RSP: 002b:00007f1cb9bc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 67.410297][ T4648] RAX: ffffffffffffffda RBX: 00007f1cbb3e5fa0 RCX: 00007f1cbb16aeb9 [ 67.410316][ T4648] RDX: 0000000000101842 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 67.410369][ T4648] RBP: 00007f1cb9bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.410388][ T4648] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 67.410405][ T4648] R13: 00007f1cbb3e6038 R14: 00007f1cbb3e5fa0 R15: 00007ffcb2c8c3e8 [ 67.410433][ T4648] [ 67.411621][ T2753] bridge_slave_1: left allmulticast mode [ 67.545669][ T4654] hub 6-0:1.0: USB hub found [ 67.565030][ T2753] bridge_slave_1: left promiscuous mode [ 67.615660][ T4654] hub 6-0:1.0: 8 ports detected [ 67.616978][ T2753] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.670460][ T2753] bridge_slave_0: left allmulticast mode [ 67.676284][ T2753] bridge_slave_0: left promiscuous mode [ 67.682277][ T2753] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.776174][ T4667] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 67.777009][ T29] audit: type=1400 audit(1769877381.939:514): avc: denied { execute } for pid=4665 comm="syz.3.359" path="/57/file0" dev="tmpfs" ino=326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.785414][ T4667] ref_ctr increment failed for inode: 0x146 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811b2057c0 [ 67.800056][ T4667] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 67.827829][ T4667] ref_ctr decrement failed for inode: 0x146 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811b2057c0 [ 67.856752][ T2753] bond1 (unregistering): (slave gretap1): Releasing active interface [ 67.861345][ T4667] uprobe: syz.3.359:4667 failed to unregister, leaking uprobe [ 67.887584][ T29] audit: type=1400 audit(1769877382.049:515): avc: denied { create } for pid=4655 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.910145][ T29] audit: type=1400 audit(1769877382.049:516): avc: denied { write } for pid=4655 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2583 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.012607][ T2753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.038812][ T2753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.050406][ T4674] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 68.059310][ T4674] FAT-fs (loop0): Filesystem has been set read-only [ 68.071921][ T2753] bond0 (unregistering): Released all slaves [ 68.087167][ T4674] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 68.098126][ T2753] bond1 (unregistering): Released all slaves [ 68.107982][ T2753] bond2 (unregistering): Released all slaves [ 68.114795][ T4674] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 68.130267][ T2753] bond3 (unregistering): Released all slaves [ 68.170817][ T2753] bond4 (unregistering): Released all slaves [ 68.250726][ T2753] tipc: Left network mode [ 68.494271][ T2753] hsr_slave_0: left promiscuous mode [ 68.519517][ T2753] hsr_slave_1: left promiscuous mode [ 68.531774][ T4717] vhci_hcd vhci_hcd.0: invalid port number 129 [ 68.532554][ T2753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.538235][ T4717] vhci_hcd vhci_hcd.0: default hub control req: 020f v0004 i0081 l0 [ 68.545693][ T2753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.573461][ T2753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.581018][ T2753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.617731][ T2753] veth1_macvtap: left promiscuous mode [ 68.626098][ T4723] hub 6-0:1.0: USB hub found [ 68.630871][ T2753] veth0_macvtap: left promiscuous mode [ 68.636651][ T2753] veth1_vlan: left promiscuous mode [ 68.640320][ T4723] hub 6-0:1.0: 8 ports detected [ 68.654839][ T2753] veth0_vlan: left promiscuous mode [ 68.833770][ T2753] team0 (unregistering): Port device team_slave_1 removed [ 68.849225][ T2753] team0 (unregistering): Port device team_slave_0 removed [ 68.917184][ T4733] Process accounting resumed [ 69.076346][ T4632] chnl_net:caif_netlink_parms(): no params data found [ 69.187398][ T4768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.217713][ T4768] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.262928][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.288100][ T4632] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.295261][ T4632] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.306703][ T4632] bridge_slave_0: entered allmulticast mode [ 69.314150][ T4632] bridge_slave_0: entered promiscuous mode [ 69.322142][ T4632] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.329345][ T4632] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.336721][ T4632] bridge_slave_1: entered allmulticast mode [ 69.343734][ T4632] bridge_slave_1: entered promiscuous mode [ 69.420604][ T4787] syz.2.390: attempt to access beyond end of device [ 69.420604][ T4787] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 69.438223][ T4787] syz.2.390: attempt to access beyond end of device [ 69.438223][ T4787] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 69.452257][ T4787] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 69.466353][ T4787] syz.2.390: attempt to access beyond end of device [ 69.466353][ T4787] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 69.524696][ T4632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.556870][ T4787] syz.2.390: attempt to access beyond end of device [ 69.556870][ T4787] loop2: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 69.577111][ T4632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.619106][ T4785] syz.2.390: attempt to access beyond end of device [ 69.619106][ T4785] loop2: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 69.632830][ T4785] Buffer I/O error on dev loop2, logical block 77, async page read [ 69.648834][ T4632] team0: Port device team_slave_0 added [ 69.659780][ T4632] team0: Port device team_slave_1 added [ 69.667172][ T4785] syz.2.390: attempt to access beyond end of device [ 69.667172][ T4785] loop2: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 69.681042][ T4785] Buffer I/O error on dev loop2, logical block 78, async page read [ 69.737281][ T4632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.744518][ T4632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.770793][ T4632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.794062][ T4785] syz.2.390: attempt to access beyond end of device [ 69.794062][ T4785] loop2: rw=8388608, sector=158, nr_sectors = 2 limit=128 [ 69.807946][ T4785] Buffer I/O error on dev loop2, logical block 79, async page read [ 69.829760][ T4785] syz.2.390: attempt to access beyond end of device [ 69.829760][ T4785] loop2: rw=8388608, sector=160, nr_sectors = 2 limit=128 [ 69.843675][ T4785] Buffer I/O error on dev loop2, logical block 80, async page read [ 69.860270][ T4785] syz.2.390: attempt to access beyond end of device [ 69.860270][ T4785] loop2: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 69.873986][ T4785] Buffer I/O error on dev loop2, logical block 77, async page read [ 69.884572][ T4632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.891873][ T4632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.920849][ T4632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.932095][ T4785] syz.2.390: attempt to access beyond end of device [ 69.932095][ T4785] loop2: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 69.945760][ T4785] Buffer I/O error on dev loop2, logical block 78, async page read [ 69.962365][ T4785] Buffer I/O error on dev loop2, logical block 79, async page read [ 70.015718][ T4785] Buffer I/O error on dev loop2, logical block 80, async page read [ 70.024123][ T4785] Buffer I/O error on dev loop2, logical block 77, async page read [ 70.060858][ T4632] hsr_slave_0: entered promiscuous mode [ 70.094556][ T4820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.394'. [ 70.094743][ T4632] hsr_slave_1: entered promiscuous mode [ 70.109739][ T4632] debugfs: 'hsr0' already exists in 'hsr' [ 70.115518][ T4632] Cannot create hsr debugfs directory [ 70.278154][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 70.366945][ T4832] set_capacity_and_notify: 4 callbacks suppressed [ 70.366962][ T4832] loop2: detected capacity change from 0 to 4096 [ 70.429028][ T4832] EXT4-fs: Ignoring removed bh option [ 70.434485][ T4832] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.480046][ T4832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.493885][ T4632] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.509886][ T4632] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.520906][ T4632] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.530301][ T4632] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.603184][ T4842] loop0: detected capacity change from 0 to 1024 [ 70.629890][ T4842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.646745][ T4632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.675093][ T4632] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.693891][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.701060][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.727684][ T4632] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.735942][ T4852] hub 6-0:1.0: USB hub found [ 70.738323][ T4632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.753372][ T4852] hub 6-0:1.0: 8 ports detected [ 70.777617][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.778693][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.784973][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.904955][ T4862] FAULT_INJECTION: forcing a failure. [ 70.904955][ T4862] name failslab, interval 1, probability 0, space 0, times 0 [ 70.905001][ T4862] CPU: 0 UID: 0 PID: 4862 Comm: syz.0.406 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.905032][ T4862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.905098][ T4862] Call Trace: [ 70.905107][ T4862] [ 70.905116][ T4862] __dump_stack+0x1d/0x30 [ 70.905145][ T4862] dump_stack_lvl+0x95/0xd0 [ 70.905245][ T4862] dump_stack+0x15/0x1b [ 70.905336][ T4862] should_fail_ex+0x263/0x280 [ 70.905398][ T4862] should_failslab+0x8c/0xb0 [ 70.905423][ T4862] __kmalloc_noprof+0xb8/0x580 [ 70.905449][ T4862] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 70.905556][ T4862] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 70.905599][ T4862] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 70.905709][ T4862] ? selinux_capable+0x31/0x40 [ 70.905736][ T4862] ? security_capable+0x7b/0x90 [ 70.905788][ T4862] ? ns_capable+0x7c/0xb0 [ 70.905881][ T4862] genl_rcv_msg+0x432/0x470 [ 70.905991][ T4862] ? __pfx_wg_set_device_doit+0x10/0x10 [ 70.906036][ T4862] netlink_rcv_skb+0x123/0x220 [ 70.906094][ T4862] ? __pfx_genl_rcv_msg+0x10/0x10 [ 70.906143][ T4862] genl_rcv+0x28/0x40 [ 70.906180][ T4862] netlink_unicast+0x5c0/0x690 [ 70.906279][ T4862] netlink_sendmsg+0x5c8/0x6f0 [ 70.906311][ T4862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.906337][ T4862] ____sys_sendmsg+0x5af/0x600 [ 70.906367][ T4862] ___sys_sendmsg+0x195/0x1e0 [ 70.906464][ T4862] __x64_sys_sendmsg+0xd4/0x160 [ 70.906535][ T4862] x64_sys_call+0x17ba/0x3000 [ 70.906568][ T4862] do_syscall_64+0xc0/0x2a0 [ 70.906613][ T4862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.906641][ T4862] RIP: 0033:0x7f11e6b7aeb9 [ 70.906709][ T4862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.906732][ T4862] RSP: 002b:00007f11e55d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.906754][ T4862] RAX: ffffffffffffffda RBX: 00007f11e6df5fa0 RCX: 00007f11e6b7aeb9 [ 70.906775][ T4862] RDX: 0000000004000814 RSI: 0000200000001040 RDI: 0000000000000003 [ 70.906788][ T4862] RBP: 00007f11e55d7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.906858][ T4862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.906874][ T4862] R13: 00007f11e6df6038 R14: 00007f11e6df5fa0 R15: 00007ffee33e0858 [ 70.906958][ T4862] [ 70.939208][ T4632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.039060][ T4870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.408'. [ 71.109432][ T4876] loop0: detected capacity change from 0 to 764 [ 71.116277][ T4876] FAULT_INJECTION: forcing a failure. [ 71.116277][ T4876] name failslab, interval 1, probability 0, space 0, times 0 [ 71.116369][ T4876] CPU: 0 UID: 0 PID: 4876 Comm: syz.0.409 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.116474][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.116488][ T4876] Call Trace: [ 71.116496][ T4876] [ 71.116505][ T4876] __dump_stack+0x1d/0x30 [ 71.116591][ T4876] dump_stack_lvl+0x95/0xd0 [ 71.116618][ T4876] dump_stack+0x15/0x1b [ 71.116644][ T4876] should_fail_ex+0x263/0x280 [ 71.116874][ T4876] should_failslab+0x8c/0xb0 [ 71.116904][ T4876] kmem_cache_alloc_noprof+0x68/0x490 [ 71.117011][ T4876] ? security_inode_alloc+0x37/0x100 [ 71.117056][ T4876] security_inode_alloc+0x37/0x100 [ 71.117099][ T4876] inode_init_always_gfp+0x4b7/0x500 [ 71.117202][ T4876] ? __pfx_isofs_iget5_test+0x10/0x10 [ 71.117253][ T4876] ? __pfx_isofs_alloc_inode+0x10/0x10 [ 71.117277][ T4876] alloc_inode+0x58/0x170 [ 71.117302][ T4876] ? __pfx_isofs_iget5_set+0x10/0x10 [ 71.117470][ T4876] iget5_locked+0x4a/0xa0 [ 71.117522][ T4876] __isofs_iget+0xe9/0x1110 [ 71.117623][ T4876] ? _raw_spin_lock+0x52/0xa0 [ 71.117787][ T4876] ? __rcu_read_unlock+0x33/0x70 [ 71.117892][ T4876] ? _raw_spin_unlock+0x9/0x30 [ 71.118001][ T4876] ? list_lru_add+0x1a0/0x290 [ 71.118118][ T4876] ? __rcu_read_unlock+0x4e/0x70 [ 71.118278][ T4876] ? list_lru_add_obj+0xc8/0xf0 [ 71.118372][ T4876] ? _raw_spin_unlock+0x9/0x30 [ 71.118478][ T4876] ? iput+0x306/0x650 [ 71.118567][ T4876] isofs_get_blocks+0x185/0x490 [ 71.118836][ T4876] isofs_bread+0x6a/0x120 [ 71.119024][ T4876] isofs_lookup+0x1a3/0x920 [ 71.119172][ T4876] ? __pfx_isofs_lookup+0x10/0x10 [ 71.119283][ T4876] path_openat+0xee1/0x23c0 [ 71.119444][ T4876] do_filp_open+0x15d/0x280 [ 71.119661][ T4876] do_sys_openat2+0xa6/0x150 [ 71.119769][ T4876] __x64_sys_open+0xe6/0x110 [ 71.119866][ T4876] x64_sys_call+0x166f/0x3000 [ 71.119952][ T4876] do_syscall_64+0xc0/0x2a0 [ 71.120122][ T4876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.120277][ T4876] RIP: 0033:0x7f11e6b7aeb9 [ 71.120354][ T4876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.120427][ T4876] RSP: 002b:00007f11e55d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 71.120492][ T4876] RAX: ffffffffffffffda RBX: 00007f11e6df5fa0 RCX: 00007f11e6b7aeb9 [ 71.120691][ T4876] RDX: 00000000000001ef RSI: 0000000000147842 RDI: 0000200000000000 [ 71.120735][ T4876] RBP: 00007f11e55d7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.120788][ T4876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.120830][ T4876] R13: 00007f11e6df6038 R14: 00007f11e6df5fa0 R15: 00007ffee33e0858 [ 71.120967][ T4876] [ 71.311281][ T4632] veth0_vlan: entered promiscuous mode [ 71.690945][ T4632] veth1_vlan: entered promiscuous mode [ 71.700527][ T4632] veth0_macvtap: entered promiscuous mode [ 71.702562][ T4632] veth1_macvtap: entered promiscuous mode [ 71.708157][ T4632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.709887][ T4632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.720881][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.722138][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.722384][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.722610][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.814395][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'. [ 71.815533][ T4896] FAULT_INJECTION: forcing a failure. [ 71.815533][ T4896] name failslab, interval 1, probability 0, space 0, times 0 [ 71.815571][ T4896] CPU: 1 UID: 0 PID: 4896 Comm: syz.0.413 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.815598][ T4896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.815611][ T4896] Call Trace: [ 71.815625][ T4896] [ 71.815633][ T4896] __dump_stack+0x1d/0x30 [ 71.815716][ T4896] dump_stack_lvl+0x95/0xd0 [ 71.815745][ T4896] dump_stack+0x15/0x1b [ 71.815821][ T4896] should_fail_ex+0x263/0x280 [ 71.815933][ T4896] should_failslab+0x8c/0xb0 [ 71.815958][ T4896] __kmalloc_noprof+0xb8/0x580 [ 71.815985][ T4896] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 71.816072][ T4896] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 71.816142][ T4896] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 71.816248][ T4896] ? selinux_capable+0x31/0x40 [ 71.816275][ T4896] ? security_capable+0x7b/0x90 [ 71.816316][ T4896] ? ns_capable+0x7c/0xb0 [ 71.816352][ T4896] genl_rcv_msg+0x432/0x470 [ 71.816394][ T4896] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 71.816438][ T4896] netlink_rcv_skb+0x123/0x220 [ 71.816482][ T4896] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.816530][ T4896] genl_rcv+0x28/0x40 [ 71.816558][ T4896] netlink_unicast+0x5c0/0x690 [ 71.816594][ T4896] netlink_sendmsg+0x5c8/0x6f0 [ 71.816619][ T4896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.816640][ T4896] ____sys_sendmsg+0x5af/0x600 [ 71.816670][ T4896] ___sys_sendmsg+0x195/0x1e0 [ 71.816704][ T4896] __x64_sys_sendmsg+0xd4/0x160 [ 71.816732][ T4896] x64_sys_call+0x17ba/0x3000 [ 71.816764][ T4896] do_syscall_64+0xc0/0x2a0 [ 71.816817][ T4896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.816840][ T4896] RIP: 0033:0x7f11e6b7aeb9 [ 71.816858][ T4896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.816927][ T4896] RSP: 002b:00007f11e55d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.816948][ T4896] RAX: ffffffffffffffda RBX: 00007f11e6df5fa0 RCX: 00007f11e6b7aeb9 [ 71.816964][ T4896] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 71.817038][ T4896] RBP: 00007f11e55d7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.817053][ T4896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.817067][ T4896] R13: 00007f11e6df6038 R14: 00007f11e6df5fa0 R15: 00007ffee33e0858 [ 71.817087][ T4896] [ 71.855063][ T4898] loop5: detected capacity change from 0 to 512 [ 72.156869][ T4898] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #17: comm syz.5.352: iget: immutable or append flags not allowed on symlinks [ 72.180137][ T4898] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.352: couldn't read orphan inode 17 (err -117) [ 72.200878][ T4898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.280657][ T4898] netlink: 12 bytes leftover after parsing attributes in process `syz.5.352'. [ 72.364386][ T4904] bond2: entered promiscuous mode [ 72.369662][ T4904] bond2: entered allmulticast mode [ 72.378385][ T4632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.388091][ T4904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.471619][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 72.471639][ T29] audit: type=1400 audit(1769877386.639:539): avc: denied { name_bind } for pid=4931 comm="syz.0.426" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 72.560656][ T4936] hub 6-0:1.0: USB hub found [ 72.565678][ T4936] hub 6-0:1.0: 8 ports detected [ 72.609964][ T29] audit: type=1326 audit(1769877386.779:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f612aeb9 code=0x7ffc0000 [ 72.633575][ T29] audit: type=1326 audit(1769877386.779:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f612aeb9 code=0x7ffc0000 [ 72.656979][ T29] audit: type=1326 audit(1769877386.779:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f612aeb9 code=0x7ffc0000 [ 72.680465][ T29] audit: type=1326 audit(1769877386.779:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fe1f612aeb9 code=0x7ffc0000 [ 72.704041][ T29] audit: type=1326 audit(1769877386.779:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f612aeb9 code=0x7ffc0000 [ 72.727500][ T29] audit: type=1326 audit(1769877386.779:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f612aeb9 code=0x7ffc0000 [ 72.751093][ T29] audit: type=1326 audit(1769877386.779:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f612aeb9 code=0x7ffc0000 [ 72.774690][ T29] audit: type=1326 audit(1769877386.779:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1f612aeb9 code=0x7ffc0000 [ 72.798385][ T29] audit: type=1326 audit(1769877386.779:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f612aeb9 code=0x7ffc0000 [ 72.893274][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.964005][ T4947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.430'. [ 72.973011][ T4947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 73.042567][ T4958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.434'. [ 73.051705][ T4958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.434'. [ 73.065800][ T4960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 73.069841][ T4958] loop1: detected capacity change from 0 to 1024 [ 73.089136][ T4958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.109286][ T4958] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.434: inode #42191579: comm syz.1.434: iget: illegal inode # [ 73.125410][ T4958] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.434: error while reading EA inode 42191579 err=-117 [ 73.154163][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.283468][ T4978] netlink: 180 bytes leftover after parsing attributes in process `syz.2.449'. [ 73.337649][ T4980] tipc: Started in network mode [ 73.342671][ T4980] tipc: Node identity 7f000001, cluster identity 4711 [ 73.383353][ T4980] tipc: Enabled bearer , priority 10 [ 73.512140][ T4995] netlink: 'syz.1.446': attribute type 1 has an invalid length. [ 73.557747][ T4997] loop2: detected capacity change from 0 to 1024 [ 73.576699][ T4997] EXT4-fs: inline encryption not supported [ 73.580781][ T4999] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 73.595268][ T4999] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 73.640898][ T4995] bond1: (slave gretap1): making interface the new active one [ 73.660066][ T4997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.677720][ T4995] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 73.784345][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.827926][ T5011] netlink: 'syz.1.452': attribute type 1 has an invalid length. [ 73.857711][ T5011] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 73.869624][ T5011] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 73.908018][ T5014] macvlan2: entered promiscuous mode [ 73.913514][ T5014] macvlan2: entered allmulticast mode [ 73.919594][ T5014] bond2: entered promiscuous mode [ 73.924975][ T5014] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 73.934172][ T5014] bond2: left promiscuous mode [ 73.978362][ T5018] hub 6-0:1.0: USB hub found [ 73.988015][ T5018] hub 6-0:1.0: 8 ports detected [ 74.031584][ T5022] loop2: detected capacity change from 0 to 764 [ 74.079920][ T5029] FAULT_INJECTION: forcing a failure. [ 74.079920][ T5029] name failslab, interval 1, probability 0, space 0, times 0 [ 74.092795][ T5029] CPU: 0 UID: 0 PID: 5029 Comm: syz.1.457 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.092851][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.092913][ T5029] Call Trace: [ 74.092923][ T5029] [ 74.093032][ T5029] __dump_stack+0x1d/0x30 [ 74.093071][ T5029] dump_stack_lvl+0x95/0xd0 [ 74.093136][ T5029] dump_stack+0x15/0x1b [ 74.093186][ T5029] should_fail_ex+0x263/0x280 [ 74.093258][ T5029] should_failslab+0x8c/0xb0 [ 74.093368][ T5029] kmem_cache_alloc_noprof+0x68/0x490 [ 74.093404][ T5029] ? skb_clone+0x151/0x1f0 [ 74.093438][ T5029] skb_clone+0x151/0x1f0 [ 74.093462][ T5029] __netlink_deliver_tap+0x2c9/0x500 [ 74.093506][ T5029] ? netlink_attachskb+0x2e2/0x660 [ 74.093543][ T5029] netlink_sendskb+0x126/0x150 [ 74.093600][ T5029] netlink_unicast+0x2a2/0x690 [ 74.093712][ T5029] netlink_ack+0x4c8/0x500 [ 74.093745][ T5029] netlink_rcv_skb+0x192/0x220 [ 74.093774][ T5029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.093836][ T5029] rtnetlink_rcv+0x1c/0x30 [ 74.093879][ T5029] netlink_unicast+0x5c0/0x690 [ 74.093909][ T5029] netlink_sendmsg+0x5c8/0x6f0 [ 74.093992][ T5029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.094010][ T5029] ____sys_sendmsg+0x5af/0x600 [ 74.094102][ T5029] ___sys_sendmsg+0x195/0x1e0 [ 74.094206][ T5029] __sys_sendmmsg+0x185/0x320 [ 74.094289][ T5029] __x64_sys_sendmmsg+0x57/0x70 [ 74.094308][ T5029] x64_sys_call+0x1e28/0x3000 [ 74.094385][ T5029] do_syscall_64+0xc0/0x2a0 [ 74.094460][ T5029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.094484][ T5029] RIP: 0033:0x7fe1f612aeb9 [ 74.094500][ T5029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.094518][ T5029] RSP: 002b:00007fe1f4b87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 74.094660][ T5029] RAX: ffffffffffffffda RBX: 00007fe1f63a5fa0 RCX: 00007fe1f612aeb9 [ 74.094738][ T5029] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 74.094751][ T5029] RBP: 00007fe1f4b87090 R08: 0000000000000000 R09: 0000000000000000 [ 74.094762][ T5029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.094774][ T5029] R13: 00007fe1f63a6038 R14: 00007fe1f63a5fa0 R15: 00007ffc8a6103e8 [ 74.094792][ T5029] [ 74.411756][ T5036] syz_tun: entered allmulticast mode [ 74.457610][ T3411] tipc: Node number set to 2130706433 [ 74.526718][ T5043] vlan2: entered allmulticast mode [ 74.532084][ T5043] bridge0: port 2(vlan2) entered blocking state [ 74.538504][ T5043] bridge0: port 2(vlan2) entered disabled state [ 74.546740][ T5043] vlan2: entered promiscuous mode [ 74.552842][ T5037] syz_tun: left allmulticast mode [ 74.702932][ T5061] loop5: detected capacity change from 0 to 1024 [ 74.710200][ T5061] EXT4-fs: Ignoring removed bh option [ 74.719944][ T5061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.769454][ T5060] 9p: Bad value for 'rfdno' [ 74.774691][ T5061] EXT4-fs error (device loop5): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.5.468: path /5/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 74.836264][ T5070] loop2: detected capacity change from 0 to 512 [ 74.905341][ T5075] loop2: detected capacity change from 0 to 512 [ 74.917478][ T5075] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.949676][ T5075] EXT4-fs (loop2): 1 truncate cleaned up [ 74.957079][ T5075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.974267][ T5074] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.995347][ T4632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.223188][ T5090] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 75.287375][ T5095] netlink: 'syz.5.482': attribute type 1 has an invalid length. [ 75.370922][ T5098] __nla_validate_parse: 6 callbacks suppressed [ 75.370954][ T5098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'. [ 75.386400][ T5098] netlink: 48 bytes leftover after parsing attributes in process `syz.0.483'. [ 75.426811][ T5104] set_capacity_and_notify: 1 callbacks suppressed [ 75.426833][ T5104] loop3: detected capacity change from 0 to 2048 [ 75.459954][ T5104] ext4: Unknown parameter 'fowner>00000000000000000000' [ 75.498664][ T5108] netlink: 'syz.5.485': attribute type 1 has an invalid length. [ 76.441070][ T5154] FAULT_INJECTION: forcing a failure. [ 76.441070][ T5154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 76.454459][ T5154] CPU: 1 UID: 0 PID: 5154 Comm: syz.1.502 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.454494][ T5154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.454563][ T5154] Call Trace: [ 76.454571][ T5154] [ 76.454600][ T5154] __dump_stack+0x1d/0x30 [ 76.454634][ T5154] dump_stack_lvl+0x95/0xd0 [ 76.454666][ T5154] dump_stack+0x15/0x1b [ 76.454686][ T5154] should_fail_ex+0x263/0x280 [ 76.454737][ T5154] should_fail_alloc_page+0xf2/0x100 [ 76.454850][ T5154] __alloc_frozen_pages_noprof+0x108/0x350 [ 76.454895][ T5154] alloc_pages_mpol+0xb3/0x260 [ 76.454942][ T5154] alloc_migration_target_by_mpol+0x11b/0x280 [ 76.455001][ T5154] migrate_pages_batch+0x399/0x2400 [ 76.455044][ T5154] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 76.455077][ T5154] ? vma_modify+0xc8a/0xd30 [ 76.455110][ T5154] migrate_pages+0x1079/0x18c0 [ 76.455145][ T5154] ? rb_next+0x5c/0x80 [ 76.455169][ T5154] ? _raw_write_unlock+0xd/0x30 [ 76.455194][ T5154] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 76.455295][ T5154] __se_sys_mbind+0xc9c/0xde0 [ 76.455455][ T5154] __x64_sys_mbind+0x78/0x90 [ 76.455505][ T5154] x64_sys_call+0x2a2b/0x3000 [ 76.455533][ T5154] do_syscall_64+0xc0/0x2a0 [ 76.455572][ T5154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.455600][ T5154] RIP: 0033:0x7fe1f612aeb9 [ 76.455699][ T5154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.455724][ T5154] RSP: 002b:00007fe1f4b87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 76.455748][ T5154] RAX: ffffffffffffffda RBX: 00007fe1f63a5fa0 RCX: 00007fe1f612aeb9 [ 76.455767][ T5154] RDX: 0000000000004000 RSI: 0000000000800000 RDI: 0000200000001000 [ 76.455784][ T5154] RBP: 00007fe1f4b87090 R08: 0000000000000000 R09: 0000000000000002 [ 76.455873][ T5154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.455885][ T5154] R13: 00007fe1f63a6038 R14: 00007fe1f63a5fa0 R15: 00007ffc8a6103e8 [ 76.455975][ T5154] [ 76.693501][ T5170] netlink: 'syz.5.507': attribute type 1 has an invalid length. [ 76.814627][ T5179] tipc: Started in network mode [ 76.819693][ T5179] tipc: Node identity 1, cluster identity 4711 [ 76.825885][ T5179] tipc: Node number set to 1 [ 76.847446][ T5179] tipc: Cannot configure node identity twice [ 76.933941][ T5190] loop5: detected capacity change from 0 to 512 [ 76.942325][ T5190] EXT4-fs: Ignoring removed oldalloc option [ 76.961875][ T5190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.051305][ T4632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.104469][ T5201] loop5: detected capacity change from 0 to 512 [ 77.114558][ T5198] syz.3.518: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 77.129258][ T5198] CPU: 0 UID: 0 PID: 5198 Comm: syz.3.518 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.129294][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.129313][ T5198] Call Trace: [ 77.129369][ T5198] [ 77.129381][ T5198] __dump_stack+0x1d/0x30 [ 77.129419][ T5198] dump_stack_lvl+0x95/0xd0 [ 77.129446][ T5198] dump_stack+0x15/0x1b [ 77.129468][ T5198] warn_alloc+0x145/0x1c0 [ 77.129498][ T5198] ? update_curr+0xb0/0x150 [ 77.129531][ T5198] ? enqueue_task_fair+0x85c/0x960 [ 77.129575][ T5198] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 77.129668][ T5198] ? ttwu_do_activate+0x1cf/0x210 [ 77.129695][ T5198] ? __rcu_read_unlock+0x4e/0x70 [ 77.129732][ T5198] ? avc_has_perm_noaudit+0xab/0x130 [ 77.129773][ T5198] vmalloc_user_noprof+0x7d/0xb0 [ 77.129867][ T5198] ? xskq_create+0x80/0xe0 [ 77.129951][ T5198] xskq_create+0x80/0xe0 [ 77.129985][ T5198] xsk_init_queue+0x91/0xe0 [ 77.130022][ T5198] xsk_setsockopt+0x477/0x640 [ 77.130084][ T5198] ? __pfx_xsk_setsockopt+0x10/0x10 [ 77.130121][ T5198] __sys_setsockopt+0x184/0x200 [ 77.130232][ T5198] __x64_sys_setsockopt+0x64/0x80 [ 77.130270][ T5198] x64_sys_call+0x21d5/0x3000 [ 77.130309][ T5198] do_syscall_64+0xc0/0x2a0 [ 77.130391][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.130468][ T5198] RIP: 0033:0x7f1cbb16aeb9 [ 77.130491][ T5198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.130516][ T5198] RSP: 002b:00007f1cb9bc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 77.130543][ T5198] RAX: ffffffffffffffda RBX: 00007f1cbb3e5fa0 RCX: 00007f1cbb16aeb9 [ 77.130557][ T5198] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000010 [ 77.130591][ T5198] RBP: 00007f1cbb1d8c1f R08: 0000000000000004 R09: 0000000000000000 [ 77.130605][ T5198] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 77.130618][ T5198] R13: 00007f1cbb3e6038 R14: 00007f1cbb3e5fa0 R15: 00007ffcb2c8c3e8 [ 77.130646][ T5198] [ 77.130655][ T5198] Mem-Info: [ 77.171347][ T5201] EXT4-fs: Ignoring removed orlov option [ 77.174737][ T5198] active_anon:7817 inactive_anon:0 isolated_anon:0 [ 77.174737][ T5198] active_file:9805 inactive_file:2547 isolated_file:0 [ 77.174737][ T5198] unevictable:0 dirty:262 writeback:0 [ 77.174737][ T5198] slab_reclaimable:3341 slab_unreclaimable:16636 [ 77.174737][ T5198] mapped:29490 shmem:525 pagetables:1296 [ 77.174737][ T5198] sec_pagetables:0 bounce:0 [ 77.174737][ T5198] kernel_misc_reclaimable:0 [ 77.174737][ T5198] free:1879804 free_pcp:10691 free_cma:0 [ 77.179365][ T5201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.203490][ T5201] ext4: Unknown parameter 'pcr' [ 77.206260][ T5198] Node 0 active_anon:31384kB inactive_anon:0kB active_file:39220kB inactive_file:10188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117960kB dirty:1048kB writeback:0kB shmem:2100kB kernel_stack:3776kB pagetables:5184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 77.430269][ T5198] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.460094][ T5198] lowmem_reserve[]: 0 2879 7858 7858 [ 77.465599][ T5198] Node 0 DMA32 free:2944852kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948380kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 77.497698][ T5198] lowmem_reserve[]: 0 0 4978 4978 [ 77.502861][ T5198] Node 0 Normal free:4559004kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31384kB inactive_anon:0kB active_file:39220kB inactive_file:10188kB unevictable:0kB writepending:1048kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:39136kB local_pcp:21660kB free_cma:0kB [ 77.536345][ T5198] lowmem_reserve[]: 0 0 0 0 [ 77.540975][ T5198] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 77.554060][ T5198] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944852kB [ 77.570419][ T5198] Node 0 Normal: 753*4kB (UME) 434*8kB (UM) 120*16kB (UM) 217*32kB (UME) 211*64kB (UME) 216*128kB (UM) 178*256kB (UM) 131*512kB (UM) 81*1024kB (UM) 45*2048kB (UME) 1029*4096kB (UM) = 4559028kB [ 77.589828][ T5198] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 77.599176][ T5198] 12812 total pagecache pages [ 77.603924][ T5198] 0 pages in swap cache [ 77.608145][ T5198] Free swap = 124996kB [ 77.612760][ T5198] Total swap = 124996kB [ 77.617011][ T5198] 2097051 pages RAM [ 77.620881][ T5198] 0 pages HighMem/MovableOnly [ 77.625693][ T5198] 81556 pages reserved [ 77.626203][ T29] kauditd_printk_skb: 2508 callbacks suppressed [ 77.626248][ T29] audit: type=1400 audit(1769877391.789:3057): avc: denied { bind } for pid=5200 comm="syz.5.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.666436][ T5195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.517'. [ 77.677192][ T5201] netlink: 32 bytes leftover after parsing attributes in process `syz.5.519'. [ 77.691131][ T29] audit: type=1400 audit(1769877391.849:3058): avc: denied { setopt } for pid=5200 comm="syz.5.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.710653][ T29] audit: type=1400 audit(1769877391.859:3059): avc: denied { write } for pid=5200 comm="syz.5.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.748026][ T29] audit: type=1400 audit(1769877391.909:3060): avc: denied { create } for pid=5207 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.768275][ T29] audit: type=1400 audit(1769877391.909:3061): avc: denied { setopt } for pid=5207 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.792622][ T29] audit: type=1400 audit(1769877391.919:3062): avc: denied { create } for pid=5207 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.812351][ T29] audit: type=1400 audit(1769877391.919:3063): avc: denied { shutdown } for pid=5207 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.832344][ T29] audit: type=1400 audit(1769877391.919:3064): avc: denied { getopt } for pid=5207 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.852197][ T29] audit: type=1400 audit(1769877391.919:3065): avc: denied { connect } for pid=5207 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.872436][ T29] audit: type=1400 audit(1769877391.919:3066): avc: denied { name_connect } for pid=5207 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 77.906742][ T5209] loop3: detected capacity change from 0 to 2368 [ 77.919851][ T5209] iso9660: Unknown parameter 'ŠXðÓ-¥¤ô' [ 77.940397][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888104e1f800: rx timeout, send abort [ 78.144639][ T5233] FAULT_INJECTION: forcing a failure. [ 78.144639][ T5233] name failslab, interval 1, probability 0, space 0, times 0 [ 78.158099][ T5233] CPU: 0 UID: 0 PID: 5233 Comm: syz.1.529 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.158194][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.158224][ T5233] Call Trace: [ 78.158240][ T5233] [ 78.158250][ T5233] __dump_stack+0x1d/0x30 [ 78.158284][ T5233] dump_stack_lvl+0x95/0xd0 [ 78.158312][ T5233] dump_stack+0x15/0x1b [ 78.158397][ T5233] should_fail_ex+0x263/0x280 [ 78.158453][ T5233] should_failslab+0x8c/0xb0 [ 78.158520][ T5233] kmem_cache_alloc_noprof+0x68/0x490 [ 78.158547][ T5233] ? alloc_empty_file+0x76/0x200 [ 78.158605][ T5233] alloc_empty_file+0x76/0x200 [ 78.158711][ T5233] alloc_file_pseudo+0xf6/0x190 [ 78.158751][ T5233] sock_alloc_file+0x9c/0x1e0 [ 78.158786][ T5233] do_accept+0x1e3/0x390 [ 78.158826][ T5233] __sys_accept4+0xbe/0x170 [ 78.158999][ T5233] __x64_sys_accept4+0x51/0x60 [ 78.159046][ T5233] x64_sys_call+0x2b3e/0x3000 [ 78.159141][ T5233] do_syscall_64+0xc0/0x2a0 [ 78.159183][ T5233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.159210][ T5233] RIP: 0033:0x7fe1f612aeb9 [ 78.159228][ T5233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.159320][ T5233] RSP: 002b:00007fe1f4b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 78.159388][ T5233] RAX: ffffffffffffffda RBX: 00007fe1f63a6090 RCX: 00007fe1f612aeb9 [ 78.159405][ T5233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 78.159426][ T5233] RBP: 00007fe1f4b66090 R08: 0000000000000000 R09: 0000000000000000 [ 78.159444][ T5233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.159497][ T5233] R13: 00007fe1f63a6128 R14: 00007fe1f63a6090 R15: 00007ffc8a6103e8 [ 78.159523][ T5233] [ 78.440424][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811b053400: rx timeout, send abort [ 78.448850][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888104e1f800: abort rx timeout. Force session deactivation [ 78.556813][ T5246] loop3: detected capacity change from 0 to 128 [ 78.658895][ T5256] tmpfs: Bad value for 'mpol' [ 78.823709][ T5262] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.860849][ T5262] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.948780][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811b053400: abort rx timeout. Force session deactivation [ 79.158484][ T5288] loop5: detected capacity change from 0 to 128 [ 79.165791][ T5288] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.178426][ T5288] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.217078][ T5289] loop0: detected capacity change from 0 to 256 [ 79.235564][ T1635] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.261086][ T5289] bio_check_eod: 718 callbacks suppressed [ 79.261111][ T5289] syz.0.549: attempt to access beyond end of device [ 79.261111][ T5289] loop0: rw=8388608, sector=260, nr_sectors = 4 limit=256 [ 79.363384][ T5297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.554'. [ 79.423417][ T5302] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 79.613639][ T5313] loop3: detected capacity change from 0 to 1024 [ 80.059078][ T5328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.066556][ T5328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.074787][ T5328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.083097][ T5328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.092324][ T5328] batman_adv: batadv0: Removing interface: gretap1 [ 80.102972][ T5328] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 80.110278][ T5328] batman_adv: batadv0: Removing interface: ip6gretap1 [ 80.127775][ T5333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5333 comm=syz.0.564 [ 80.274768][ T5338] FAULT_INJECTION: forcing a failure. [ 80.274768][ T5338] name failslab, interval 1, probability 0, space 0, times 0 [ 80.289349][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.5.566 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.289441][ T5338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.289458][ T5338] Call Trace: [ 80.289469][ T5338] [ 80.289480][ T5338] __dump_stack+0x1d/0x30 [ 80.289546][ T5338] dump_stack_lvl+0x95/0xd0 [ 80.289575][ T5338] dump_stack+0x15/0x1b [ 80.289600][ T5338] should_fail_ex+0x263/0x280 [ 80.289652][ T5338] should_failslab+0x8c/0xb0 [ 80.289680][ T5338] __kmalloc_cache_noprof+0x64/0x4a0 [ 80.289708][ T5338] ? ip_vs_add_service+0x286/0xa70 [ 80.289745][ T5338] ip_vs_add_service+0x286/0xa70 [ 80.289819][ T5338] ? selinux_capable+0x31/0x40 [ 80.289839][ T5338] ? __ip_vs_service_find+0x25a/0x280 [ 80.289867][ T5338] do_ip_vs_set_ctl+0x886/0xa60 [ 80.289910][ T5338] ? do_ip_setsockopt+0x1af1/0x2290 [ 80.290078][ T5338] nf_setsockopt+0x199/0x1b0 [ 80.290112][ T5338] ip_setsockopt+0x102/0x110 [ 80.290148][ T5338] sctp_setsockopt+0x126/0xea0 [ 80.290177][ T5338] sock_common_setsockopt+0x69/0x80 [ 80.290239][ T5338] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 80.290330][ T5338] __sys_setsockopt+0x184/0x200 [ 80.290376][ T5338] __x64_sys_setsockopt+0x64/0x80 [ 80.290415][ T5338] x64_sys_call+0x21d5/0x3000 [ 80.290483][ T5338] do_syscall_64+0xc0/0x2a0 [ 80.290548][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.290576][ T5338] RIP: 0033:0x7f916fdaaeb9 [ 80.290594][ T5338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.290618][ T5338] RSP: 002b:00007f916e807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 80.290639][ T5338] RAX: ffffffffffffffda RBX: 00007f9170025fa0 RCX: 00007f916fdaaeb9 [ 80.290655][ T5338] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000006 [ 80.290723][ T5338] RBP: 00007f916e807090 R08: 000000000000002c R09: 0000000000000000 [ 80.290740][ T5338] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 80.290757][ T5338] R13: 00007f9170026038 R14: 00007f9170025fa0 R15: 00007ffe7cc6ea08 [ 80.290851][ T5338] [ 80.592388][ T5346] netlink: 'syz.5.569': attribute type 1 has an invalid length. [ 80.642871][ T5348] bridge0: entered promiscuous mode [ 80.648611][ T5348] macvtap1: entered promiscuous mode [ 80.654096][ T5348] macvtap1: entered allmulticast mode [ 80.659663][ T5348] bridge0: entered allmulticast mode [ 80.689406][ T5348] bridge0: port 3(macvtap1) entered blocking state [ 80.696121][ T5348] bridge0: port 3(macvtap1) entered disabled state [ 80.767183][ T5348] bridge0: left allmulticast mode [ 80.772627][ T5348] bridge0: left promiscuous mode [ 81.054095][ T5378] loop1: detected capacity change from 0 to 512 [ 81.080319][ T5378] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 81.164019][ T5387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.579'. [ 81.172656][ T5378] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 81.211466][ T5378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.218963][ T5378] IPv6: NLM_F_CREATE should be set when creating new route [ 81.226411][ T5378] IPv6: NLM_F_CREATE should be set when creating new route [ 81.233723][ T5378] IPv6: NLM_F_CREATE should be set when creating new route [ 81.247798][ T5378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.423681][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 81.432828][ T5408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 81.486441][ T1635] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.495570][ T1635] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.506262][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 81.515396][ T5408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 81.534653][ T1635] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.551533][ T1635] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.656067][ T5418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.585'. [ 81.844119][ T5428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 81.854092][ T5428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 81.894800][ T5432] FAULT_INJECTION: forcing a failure. [ 81.894800][ T5432] name failslab, interval 1, probability 0, space 0, times 0 [ 81.907569][ T5432] CPU: 0 UID: 0 PID: 5432 Comm: syz.1.589 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.907626][ T5432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.907677][ T5432] Call Trace: [ 81.907686][ T5432] [ 81.907697][ T5432] __dump_stack+0x1d/0x30 [ 81.907741][ T5432] dump_stack_lvl+0x95/0xd0 [ 81.907851][ T5432] dump_stack+0x15/0x1b [ 81.907876][ T5432] should_fail_ex+0x263/0x280 [ 81.907979][ T5432] should_failslab+0x8c/0xb0 [ 81.908005][ T5432] __kmalloc_cache_noprof+0x64/0x4a0 [ 81.908036][ T5432] ? alloc_fs_context+0x46/0x590 [ 81.908063][ T5432] ? should_fail_ex+0xd9/0x280 [ 81.908164][ T5432] alloc_fs_context+0x46/0x590 [ 81.908188][ T5432] ? kfree+0x10a/0x3b0 [ 81.908210][ T5432] fs_context_for_mount+0x22/0x30 [ 81.908231][ T5432] __se_sys_fsopen+0xa0/0x1e0 [ 81.908292][ T5432] __x64_sys_fsopen+0x31/0x40 [ 81.908326][ T5432] x64_sys_call+0xb84/0x3000 [ 81.908357][ T5432] do_syscall_64+0xc0/0x2a0 [ 81.908464][ T5432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.908489][ T5432] RIP: 0033:0x7fe1f612aeb9 [ 81.908506][ T5432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.908528][ T5432] RSP: 002b:00007fe1f4b87028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 81.908548][ T5432] RAX: ffffffffffffffda RBX: 00007fe1f63a5fa0 RCX: 00007fe1f612aeb9 [ 81.908598][ T5432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340 [ 81.908615][ T5432] RBP: 00007fe1f4b87090 R08: 0000000000000000 R09: 0000000000000000 [ 81.908633][ T5432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.908650][ T5432] R13: 00007fe1f63a6038 R14: 00007fe1f63a5fa0 R15: 00007ffc8a6103e8 [ 81.908677][ T5432] [ 82.454097][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.596'. [ 82.502435][ T5467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 82.595033][ T5475] netlink: 'syz.5.602': attribute type 1 has an invalid length. [ 82.726443][ T5489] loop5: detected capacity change from 0 to 128 [ 82.814975][ T5489] raw_sendmsg: syz.5.606 forgot to set AF_INET. Fix it! [ 82.823592][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 82.823617][ T29] audit: type=1400 audit(1769877396.989:3248): avc: denied { map } for pid=5495 comm="syz.1.607" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.898678][ T5489] 9p: Bad value for 'rfdno' [ 82.903485][ T29] audit: type=1400 audit(1769877397.069:3249): avc: denied { mounton } for pid=5488 comm="syz.5.606" path="/31/bus/file0" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 82.926292][ T5502] loop1: detected capacity change from 0 to 1024 [ 82.937337][ T29] audit: type=1400 audit(1769877397.109:3250): avc: denied { remount } for pid=5488 comm="syz.5.606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 82.955149][ T5502] EXT4-fs: Ignoring removed nobh option [ 82.962858][ T5502] EXT4-fs: Ignoring removed oldalloc option [ 82.994925][ T5502] EXT4-fs: Ignoring removed orlov option [ 83.014897][ T5502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.028859][ T29] audit: type=1400 audit(1769877397.199:3251): avc: denied { remount } for pid=5501 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.051020][ T5502] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 83.109978][ T5510] bond_slave_0: entered promiscuous mode [ 83.115729][ T5510] bond_slave_1: entered promiscuous mode [ 83.122552][ T5510] macsec1: entered allmulticast mode [ 83.127958][ T5510] bond0: entered allmulticast mode [ 83.133221][ T5510] bond_slave_0: entered allmulticast mode [ 83.139004][ T5510] bond_slave_1: entered allmulticast mode [ 83.145734][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.243342][ T29] audit: type=1400 audit(1769877397.409:3252): avc: denied { write } for pid=5514 comm="syz.1.612" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.266617][ T29] audit: type=1400 audit(1769877397.409:3253): avc: denied { ioctl } for pid=5514 comm="syz.1.612" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.291734][ T5517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.302208][ T5517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.323877][ T29] audit: type=1400 audit(1769877397.479:3254): avc: denied { read write } for pid=5514 comm="syz.1.612" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.348106][ T29] audit: type=1400 audit(1769877397.479:3255): avc: denied { open } for pid=5514 comm="syz.1.612" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.372359][ T29] audit: type=1400 audit(1769877397.479:3256): avc: denied { read } for pid=5514 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.392037][ T29] audit: type=1400 audit(1769877397.479:3257): avc: denied { ioctl } for pid=5514 comm="syz.1.612" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.425030][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.482410][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.539428][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.604148][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.646830][ T5522] chnl_net:caif_netlink_parms(): no params data found [ 83.701468][ T5522] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.708714][ T5522] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.716241][ T5522] bridge_slave_0: entered allmulticast mode [ 83.723868][ T5522] bridge_slave_0: entered promiscuous mode [ 83.743432][ T5522] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.750887][ T5522] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.758461][ T5522] bridge_slave_1: entered allmulticast mode [ 83.766588][ T5522] bridge_slave_1: entered promiscuous mode [ 83.798144][ T5522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.808248][ T52] bridge_slave_1: left allmulticast mode [ 83.814032][ T52] bridge_slave_1: left promiscuous mode [ 83.819796][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.827950][ T52] bridge_slave_0: left allmulticast mode [ 83.833690][ T52] bridge_slave_0: left promiscuous mode [ 83.839734][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.944477][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.957135][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.970397][ T52] bond0 (unregistering): Released all slaves [ 83.979263][ T52] bond1 (unregistering): Released all slaves [ 83.990517][ T52] bond2 (unregistering): Released all slaves [ 84.001140][ T5522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.032884][ T5522] team0: Port device team_slave_0 added [ 84.042009][ T5522] team0: Port device team_slave_1 added [ 84.090427][ T52] hsr_slave_0: left promiscuous mode [ 84.096396][ T52] hsr_slave_1: left promiscuous mode [ 84.102469][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.109967][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.118851][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.126409][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.140740][ T52] veth1_macvtap: left promiscuous mode [ 84.146349][ T52] veth0_macvtap: left promiscuous mode [ 84.153315][ T52] veth1_vlan: left promiscuous mode [ 84.158902][ T52] veth0_vlan: left promiscuous mode [ 84.349152][ T52] team0 (unregistering): Port device team_slave_1 removed [ 84.361252][ T52] team0 (unregistering): Port device team_slave_0 removed [ 84.404712][ T5522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.411778][ T5522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.437998][ T5522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.452015][ T5522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.459250][ T5522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.485363][ T5522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.523529][ T5522] hsr_slave_0: entered promiscuous mode [ 84.530372][ T5522] hsr_slave_1: entered promiscuous mode [ 84.536616][ T5522] debugfs: 'hsr0' already exists in 'hsr' [ 84.542462][ T5522] Cannot create hsr debugfs directory [ 84.606683][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.705641][ T5522] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 84.715638][ T5522] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 84.725438][ T5522] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 84.742980][ T5522] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 84.834586][ T5522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.853724][ T5522] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.864215][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.871363][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.910273][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.917870][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.073812][ T5522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.307368][ T5522] veth0_vlan: entered promiscuous mode [ 85.342939][ T5522] veth1_vlan: entered promiscuous mode [ 85.372386][ T5522] veth0_macvtap: entered promiscuous mode [ 85.388659][ T5522] veth1_macvtap: entered promiscuous mode [ 85.412558][ T5522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.460456][ T5522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.480089][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.504627][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.522484][ T5693] SELinux: failed to load policy [ 85.539339][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.567231][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.647372][ T5709] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 85.684399][ T5709] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 85.695889][ T5709] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 85.731819][ T5711] loop6: detected capacity change from 0 to 8192 [ 85.742231][ T5713] macvlan2: entered promiscuous mode [ 85.747816][ T5713] macvlan2: entered allmulticast mode [ 85.758621][ T5713] bond3: entered promiscuous mode [ 85.768698][ T5713] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.778468][ T5713] bond3: left promiscuous mode [ 85.786569][ T5711] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.809132][ T5711] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 85.818114][ T5711] FAT-fs (loop6): Filesystem has been set read-only [ 85.826789][ T5711] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 85.839572][ T5711] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 85.848834][ T5711] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 85.858205][ T5711] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 85.867297][ T5711] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 85.876367][ T5711] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 85.885331][ T5711] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 85.894370][ T5711] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 85.904129][ T5711] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 85.982011][ T5730] loop3: detected capacity change from 0 to 512 [ 86.009680][ T5730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.026907][ T5730] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.129625][ T5736] hub 6-0:1.0: USB hub found [ 86.140320][ T5736] hub 6-0:1.0: 8 ports detected [ 86.156237][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.243537][ T5744] syz.1.660(5744): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 86.270104][ T5746] loop0: detected capacity change from 0 to 256 [ 86.287184][ T5746] vfat: Unknown parameter 'ÿÿÿÿ' [ 86.459043][ T5753] bond3: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 86.469389][ T5753] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.481924][ T5753] loop1: detected capacity change from 0 to 512 [ 86.499588][ T5753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.512347][ T5753] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.532485][ T5753] __nla_validate_parse: 10 callbacks suppressed [ 86.532506][ T5753] netlink: 348 bytes leftover after parsing attributes in process `syz.1.663'. [ 86.555567][ T5753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.566181][ T5758] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.631410][ T5758] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.691062][ T5758] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.742795][ T5758] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.998235][ T1635] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.119173][ T5775] TCP: TCP_TX_DELAY enabled [ 87.124248][ T5778] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 87.159572][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.207446][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.298250][ T5771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5771 comm=syz.1.666 [ 87.339068][ T5788] loop3: detected capacity change from 0 to 512 [ 87.355721][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.381497][ T5790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 87.646395][ T5801] tipc: Started in network mode [ 87.651490][ T5801] tipc: Node identity , cluster identity 4711 [ 87.657681][ T5801] tipc: Failed to obtain node identity [ 87.663178][ T5801] tipc: Enabling of bearer rejected, failed to enable media [ 87.810201][ T5811] netlink: 20 bytes leftover after parsing attributes in process `syz.6.679'. [ 87.874893][ T5804] syzkaller0: entered promiscuous mode [ 87.880809][ T5804] syzkaller0: entered allmulticast mode [ 88.038707][ T5815] netlink: 'syz.6.680': attribute type 1 has an invalid length. [ 88.154257][ T5821] loop1: detected capacity change from 0 to 512 [ 88.186721][ T5820] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 88.288412][ T5815] batman_adv: batadv0: Adding interface: gretap1 [ 88.294888][ T5815] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 88.317383][ T5826] macvlan2: entered promiscuous mode [ 88.322860][ T5826] macvlan2: entered allmulticast mode [ 88.417967][ T5834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.686'. [ 88.435086][ T5834] IPv6: Can't replace route, no match found [ 88.508267][ T5833] uprobe: syz.2.686:5833 failed to unregister, leaking uprobe [ 88.602799][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 88.602823][ T29] audit: type=1400 audit(1769877402.739:3297): avc: denied { write } for pid=5843 comm="syz.1.688" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 88.667447][ T5848] loop6: detected capacity change from 0 to 2048 [ 88.700555][ T3304] loop6: p1 < > p2 p3 [ 88.704707][ T3304] loop6: partition table partially beyond EOD, truncated [ 88.734787][ T3304] loop6: p1 start 4096 is beyond EOD, truncated [ 88.741367][ T3304] loop6: p2 start 4294508544 is beyond EOD, truncated [ 88.748207][ T3304] loop6: p3 size 134217728 extends beyond EOD, truncated [ 88.775145][ T5851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.691'. [ 88.795317][ T5848] loop6: p1 < > p2 p3 [ 88.799932][ T5848] loop6: partition table partially beyond EOD, truncated [ 88.814313][ T5848] loop6: p1 start 4096 is beyond EOD, truncated [ 88.820920][ T5848] loop6: p2 start 4294508544 is beyond EOD, truncated [ 88.827795][ T5848] loop6: p3 size 134217728 extends beyond EOD, truncated [ 88.963271][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 89.039049][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 89.337321][ T5880] loop1: detected capacity change from 0 to 512 [ 89.365091][ T5880] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 89.644037][ T37] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 89.782130][ T5888] loop1: detected capacity change from 0 to 128 [ 89.881860][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 89.891533][ T5888] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.008568][ T5888] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.200717][ T5888] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.276474][ T29] audit: type=1400 audit(1769877404.439:3298): avc: denied { write } for pid=5918 comm="syz.3.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.355539][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 90.365626][ T5930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.712'. [ 90.367686][ T29] audit: type=1400 audit(1769877404.479:3299): avc: denied { read } for pid=5922 comm="syz.1.712" path="socket:[14361]" dev="sockfs" ino=14361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.422897][ T5932] netlink: 'syz.0.714': attribute type 41 has an invalid length. [ 90.477727][ T5934] capability: warning: `syz.3.715' uses 32-bit capabilities (legacy support in use) [ 90.522755][ T5936] netlink: 64 bytes leftover after parsing attributes in process `syz.0.716'. [ 90.555242][ T29] audit: type=1400 audit(1769877404.709:3300): avc: denied { setopt } for pid=5935 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.660670][ T29] audit: type=1400 audit(1769877404.829:3301): avc: denied { ioctl } for pid=5937 comm="syz.0.717" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.763331][ T29] audit: type=1400 audit(1769877404.879:3302): avc: denied { bind } for pid=5941 comm="syz.0.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.790688][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 90.862112][ T29] audit: type=1400 audit(1769877404.969:3303): avc: denied { read } for pid=5944 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.881486][ T29] audit: type=1400 audit(1769877405.019:3304): avc: denied { write } for pid=5944 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.901052][ T29] audit: type=1400 audit(1769877405.019:3305): avc: denied { firmware_load } for pid=5939 comm="syz.3.718" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 91.315058][ T29] audit: type=1400 audit(1769877405.479:3306): avc: denied { bind } for pid=5963 comm="syz.0.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.547717][ T5970] wg1 speed is unknown, defaulting to 1000 [ 91.553878][ T5970] wg1 speed is unknown, defaulting to 1000 [ 91.643155][ T5970] wg1 speed is unknown, defaulting to 1000 [ 91.643656][ T5977] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 91.650747][ T5970] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.671053][ T5977] loop3: detected capacity change from 0 to 512 [ 91.690019][ T5970] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 91.750277][ T5970] wg1 speed is unknown, defaulting to 1000 [ 91.756559][ T5970] wg1 speed is unknown, defaulting to 1000 [ 91.765434][ T5970] wg1 speed is unknown, defaulting to 1000 [ 91.804936][ T5970] wg1 speed is unknown, defaulting to 1000 [ 91.833183][ T5970] wg1 speed is unknown, defaulting to 1000 [ 91.844890][ T5985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.732'. [ 91.853985][ T5985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.732'. [ 91.862925][ T5985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.732'. [ 91.875431][ T5985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.732'. [ 91.962963][ T5985] netlink: 104 bytes leftover after parsing attributes in process `syz.0.732'. [ 91.973730][ T5990] vhci_hcd vhci_hcd.4: invalid port number 254 [ 92.103978][ T5991] loop3: detected capacity change from 0 to 512 [ 92.115325][ T5991] EXT4-fs: inline encryption not supported [ 92.138031][ T5991] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 92.150310][ T5991] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.734: invalid indirect mapped block 2683928664 (level 1) [ 92.170237][ T5991] EXT4-fs (loop3): 1 truncate cleaned up [ 92.185562][ T5991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.202168][ T5996] loop6: detected capacity change from 0 to 4096 [ 92.228936][ T5991] netlink: 104 bytes leftover after parsing attributes in process `syz.3.734'. [ 92.244643][ T5994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.260088][ T5996] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.302997][ T5994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.350067][ T5522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.361013][ T6006] loop0: detected capacity change from 0 to 1024 [ 92.369634][ T5994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.401365][ T6006] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 92.417316][ T6006] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 92.429068][ T6006] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: inode #32: comm syz.0.738: iget: special inode unallocated [ 92.444076][ T6006] EXT4-fs (loop0): Remounting filesystem read-only [ 92.453962][ T5994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.464813][ T6006] EXT4-fs (loop0): no journal found [ 92.470206][ T6006] EXT4-fs (loop0): can't get journal size [ 92.479013][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.739'. [ 92.488690][ T6006] EXT4-fs (loop0): filesystem is read-only [ 92.518795][ T6006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 92.566428][ T57] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.581751][ T57] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.590613][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.606189][ T57] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.607719][ T5894] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 92.630861][ T5894] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 92.660141][ T57] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.740547][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.742'. [ 92.803080][ T6022] netlink: 84 bytes leftover after parsing attributes in process `syz.2.744'. [ 92.854951][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.075099][ T6018] wg1 speed is unknown, defaulting to 1000 [ 93.120776][ T6033] process 'syz.1.748' launched '/dev/fd/6' with NULL argv: empty string added [ 93.392073][ T6043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.750'. [ 93.614924][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 93.614942][ T29] audit: type=1400 audit(1769877407.779:3454): avc: denied { lock } for pid=6047 comm="syz.3.754" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.656071][ T6053] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 93.665204][ T6055] netlink: 'syz.6.752': attribute type 5 has an invalid length. [ 93.713421][ T6053] bond4: entered promiscuous mode [ 93.736556][ T6062] loop1: detected capacity change from 0 to 128 [ 93.747075][ T6053] 8021q: adding VLAN 0 to HW filter on device bond4 [ 93.849097][ T6053] bond4: (slave bridge4): making interface the new active one [ 93.856699][ T6053] bridge4: entered promiscuous mode [ 93.863033][ T29] audit: type=1400 audit(1769877408.029:3455): avc: denied { cpu } for pid=6064 comm="syz.6.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 93.887776][ T6053] bridge4: left promiscuous mode [ 93.941344][ T6063] ================================================================== [ 93.949766][ T6063] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 93.957821][ T6063] [ 93.960431][ T6063] write to 0xffff88811a852914 of 4 bytes by task 6062 on cpu 0: [ 93.968288][ T6063] xas_set_mark+0x12b/0x140 [ 93.972835][ T6063] __folio_start_writeback+0x17b/0x370 [ 93.978348][ T6063] mpage_writepages+0xd5e/0x1310 [ 93.983631][ T6063] fat_writepages+0x24/0x30 [ 93.988192][ T6063] do_writepages+0x1c6/0x310 [ 93.992999][ T6063] file_write_and_wait_range+0x178/0x2f0 [ 93.998688][ T6063] __generic_file_fsync+0x46/0x160 [ 94.003860][ T6063] fat_file_fsync+0x49/0x100 [ 94.008518][ T6063] vfs_fsync_range+0x10d/0x130 [ 94.013338][ T6063] generic_file_write_iter+0x1ba/0x310 [ 94.019088][ T6063] iter_file_splice_write+0x6bc/0xa80 [ 94.024593][ T6063] direct_splice_actor+0x156/0x2a0 [ 94.029820][ T6063] splice_direct_to_actor+0x311/0x670 [ 94.035273][ T6063] do_splice_direct+0x119/0x1a0 [ 94.040148][ T6063] do_sendfile+0x382/0x650 [ 94.045192][ T6063] __x64_sys_sendfile64+0x105/0x150 [ 94.050542][ T6063] x64_sys_call+0x2db1/0x3000 [ 94.055453][ T6063] do_syscall_64+0xc0/0x2a0 [ 94.060055][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.066006][ T6063] [ 94.068378][ T6063] read to 0xffff88811a852914 of 4 bytes by task 6063 on cpu 1: [ 94.076116][ T6063] __writeback_single_inode+0x201/0x7b0 [ 94.081709][ T6063] writeback_single_inode+0x16d/0x3f0 [ 94.087144][ T6063] sync_inode_metadata+0x6e/0xa0 [ 94.092106][ T6063] __generic_file_fsync+0x109/0x160 [ 94.097355][ T6063] fat_file_fsync+0x49/0x100 [ 94.102192][ T6063] vfs_fsync_range+0x10d/0x130 [ 94.107036][ T6063] generic_file_write_iter+0x1ba/0x310 [ 94.112636][ T6063] iter_file_splice_write+0x6bc/0xa80 [ 94.118054][ T6063] direct_splice_actor+0x156/0x2a0 [ 94.123457][ T6063] splice_direct_to_actor+0x311/0x670 [ 94.128846][ T6063] do_splice_direct+0x119/0x1a0 [ 94.133725][ T6063] do_sendfile+0x382/0x650 [ 94.138184][ T6063] __x64_sys_sendfile64+0x105/0x150 [ 94.143612][ T6063] x64_sys_call+0x2db1/0x3000 [ 94.148350][ T6063] do_syscall_64+0xc0/0x2a0 [ 94.153021][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.158948][ T6063] [ 94.161304][ T6063] value changed: 0x0a000021 -> 0x04000021 [ 94.167074][ T6063] [ 94.169419][ T6063] Reported by Kernel Concurrency Sanitizer on: [ 94.176095][ T6063] CPU: 1 UID: 0 PID: 6063 Comm: syz.1.757 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.185919][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.196096][ T6063] ================================================================== [ 101.637699][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!