last executing test programs: 12.091476449s ago: executing program 0 (id=170): r0 = socket(0xf, 0x3, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_io_uring_setup(0x36b2, &(0x7f0000000440)={0x0, 0xffffffff, 0x0, 0x0, 0x108}, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000000)=[0xc6f, 0x6], 0x2) (async) io_uring_enter(r5, 0xbe9, 0x10a5, 0x3, 0x0, 0x0) (async) io_uring_enter(r5, 0x5e5, 0xf419, 0x1, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000001c0)) (async) socket$inet(0x2, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r7, 0x2000, 0x0) (async) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0) pwritev(r8, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c56a7482", 0x4}], 0x1, 0xe1, 0xfffffffc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) write$binfmt_register(r7, &(0x7f0000000780)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xf8\xcd%\xbe\\\xd3\x03H\xd6r\x19\x05\x90JfY}\x15H&\xd7\xc7v\xdaB8\xd0\xec4#\x03\x85\xab6\v> \xd8\xdcM\xd5\x18X\xbf\x18<=\x97V\v\xd6\xb4\xf0&\x0f\n\x123Z\xed\x8aE\xe9\x1c\x89\xf8f\xea\x1c\x8c\xa0\x00`\xe4q\x00\xd6\xa3\x9f_\x92.7\th\xcfa\x01\x8a\xcf9\x0e\x8d\xac\xed\xd2c\x16\xf5\xc0\x03\x1b\x18\xcf\xa2\x98\x88\xdd@1\xbd\x01\x00\x00\x00\xe3\xfb$\x83\xf6f\xbe\x8a\x8d\x14\x8d)v\x960\xa0\xdfCs\xa8QY\xe2tP\xf9\x93x\xb4\xcbe\xfab\x04\x11\x9e\x1aBx', 0x3a, '\x005\x9d\xc9\xfb\x15\x89pR\xe4L\x86\x8a\x9e\x00\xdc\xc0\xcf\xba\xb7\xdb\xb8\x1a\x9ea\xb1\x98I^\x14}n\'\xa8\xea\xad\xe9\xfd\xe5t\xc4\xe5\xa4\\\xfb4 \xd6\xcd\xcd\xd3?r\xda5.\xe2\xb1\xcf\xccU$\xf9\xa5\x1f\x02\xe0\x95\xb0\xb2\xc2v\xc5\xa1\xd8\xccn\x01\xb7\x1f\x84|\x98\xc0E\xfa\x8a.\x81N\x1c\xe3\xcd\'\x15\x05\xdf\xc9=[\xabZW%\x11\xa2?=\xb7\xbd*\xc3\xf6\x81\x8ds\x98^\x9c\xfe\x1a\xe3\x9bK\xb7\x91\x04\xf3\xc3\x9a\x88\xe5\xf2\rY\n\xaa\x18[{D:\xe2\xe1\x8c*\x8b^g\x97\xf1\xc0\x981\xda\xf2_w\x9c\x0e1c\xc5\xc5\x85\xf9\x83:\xaa\xda\xa0\xb5\xf2\xcbG\x1e\\\r\x8f:\xee\x86l\xf67\x8e\xec\x0f(\x98.\x0f\xe3}\xb1\x88-'}, 0x17f) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x2, 0x3, 0x5, 0x9}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000801) (async) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="000000000101040008001b0000000000dc4090dae74fd283b96f7fae7710062d6ea9e7e195d27f089971e4e6d3f4bffe"], 0x28}}, 0x0) 11.845420264s ago: executing program 0 (id=172): r0 = socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@init_itable}]}, 0xfe, 0x274, &(0x7f0000000980)="$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") perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x3, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000080)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="300000000000000029000000370000005c02000000000000c910fe80000000000000000000000000002d0401090000001400000000000000290000000b00000000005ad100000000140000000000000029000000430000000c000000000000001400000000000000290000000b"], 0x78}, 0x4010000) 11.503286696s ago: executing program 0 (id=181): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r1, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500920001000000f80022"], 0x11c}, 0x1, 0x0, 0x1400000000000000, 0x4088}, 0x44840) 11.462599548s ago: executing program 0 (id=183): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") unshare(0x2c020400) unshare(0x2c020400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x9, 0xe, [0x24, 0x16, 0x8, 0x33, 0x3, 0x24, 0x12, 0x10, 0x8, 0x4, 0x0, 0xc, 0x25, 0x2c, 0xa, 0x7], 0x0, 0x200, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010100, 0xff, 0x0, 'pimreg1\x00', 'veth0_to_batadv\x00', {}, {}, 0x11, 0x1, 0x20}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x10}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x4879, 0x7f, 'syz1\x00', 'syz1\x00', {0x80000000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) r4 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)='keyring\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11.319921487s ago: executing program 0 (id=187): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x13) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x9, 0x1, {{0x18, 0x4, 0x0, 0x3e, 0x60, 0x66, 0x0, 0x24, 0x4, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x14, 0x77, 0x0, 0xf, [0x4, 0x3ff, 0x40, 0x5]}, @ssrr={0x89, 0x17, 0x51, [@multicast1, @rand_addr=0x64010102, @multicast1, @private=0xa010101, @remote]}, @rr={0x7, 0x1f, 0xdf, [@remote, @multicast1, @local, @empty, @local, @local, @multicast1]}]}}}}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff}}}, 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, r6, 0x6e2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xffffffb7, 0x200401, 0x0, 0xc7cf, 0x3, "40000868245eb03100", 0x23fffd, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xe) 11.071116423s ago: executing program 0 (id=191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x6f, 0x2002) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 11.062414053s ago: executing program 32 (id=191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x6f, 0x2002) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 3.594225746s ago: executing program 1 (id=289): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000340)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003\t\x00\x00\x00\x00\x00\x00\x00,nodots,flush,dots,dots,gid=', @ANYRESOCT, @ANYBLOB="514752e977bd2dbed50372a91428499dcbc16b19cc139d95fbddb36385413bd2c0ce3caa2ab59f6ad4526f05a313fdb6714994"], 0x0, 0x214, &(0x7f0000000840)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x7c037, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x8000000002, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800001801"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) epoll_create1(0x0) r2 = inotify_init1(0x80800) dup(r2) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r3], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(r5, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x4, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000740)}}, {{0x0, 0x0, &(0x7f0000004680)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000004440)}, {0x0}, {&(0x7f0000004540)}], 0x6}}, {{&(0x7f0000004740)=@sco={0x1f, @none}, 0x80, &(0x7f0000004880)=[{&(0x7f00000047c0)="6d420d9eb303695ddc1a6c91a1215b7ed4a6aec8d753bd9fffff8dd398ef3e518ad52a8ccdbcd037bb1d7c592c70972b552f6c1a4d737f714dc880256a", 0x3d}], 0x1}}], 0x4, 0x20040040) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x0}) capset(&(0x7f0000000500)={0x20080522}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) 2.811606905s ago: executing program 1 (id=297): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x238, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010101, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 2.809229855s ago: executing program 1 (id=299): r0 = socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x28}, 0x28) r1 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r2, 0x0, 0x0, 0x0, 0x0, 0xd, @private2, @loopback, 0x40, 0x7800, 0xfffffffc}}) 2.73570893s ago: executing program 1 (id=301): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r1, 0x0, 0x0, 0x40000022, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, 0x1, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040895}, 0x40810) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.658569825s ago: executing program 1 (id=303): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r0, 0x0, 0x0, 0x40000022, 0x0, 0x0) pipe(&(0x7f0000000500)) fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) 2.563162081s ago: executing program 1 (id=305): getgid() r0 = socket$netlink(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x6}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x4, 0x9, 0x728, 0x5}, 0x19) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x1cad, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000100)="0c01e8e64e4127ce9035232f203b80c1", 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) fallocate(r4, 0xd, 0xfb, 0x2) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c567de", @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004881}, 0x0) getgid() (async) socket$netlink(0x10, 0x3, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x6}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x4, 0x9, 0x728, 0x5}, 0x19) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x1cad, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000100)="0c01e8e64e4127ce9035232f203b80c1", 0x10) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) (async) fallocate(r4, 0xd, 0xfb, 0x2) (async) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c567de", @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004881}, 0x0) (async) 2.526254633s ago: executing program 2 (id=306): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000040000000001000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d6974000000240002800800044000000001", @ANYRES64, @ANYBLOB], 0x118}}, 0x0) (fail_nth: 1) 2.366876573s ago: executing program 2 (id=307): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x20, r1, 0xc33, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x4000010) ptrace$cont(0x18, r0, 0x7, 0xf0) move_pages(r0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000040)=[0x3d6, 0x3ff, 0x5, 0x3, 0xb90, 0x8], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000003c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@user_xattr}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 1.971856387s ago: executing program 2 (id=310): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x244900) ioctl$BLKCRYPTOIMPORTKEY(r1, 0xc0401289, &(0x7f00000001c0)={&(0x7f0000000100)="b000a51015c9824f5fb67c8823c06b218703f29ca196a9935712a01e3107f75c7bd2c70ada1d2910031f4eb04cd11a470837b3f7724fabd068ab7488", 0x3c, &(0x7f0000000140)=""/93, 0x5d}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000001940)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@init={0x18, 0x84, 0x0, {0x3, 0x3d, 0x9, 0x6}}], 0x18, 0x20000000}], 0x1, 0x20000000) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008809c000780080077144ebb00000800060000000000080005"], 0xd0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0xbc, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x8c, 0x2, {{0xfffffffd, 0x9, 0x3, 0x1, 0x1, 0x9}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3b5a7dd1, 0x10000, 0xa895, 0x7, 0xf, 0x20f8019b}}, @TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5ef0, 0x51a, 0x9, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x862, 0x2, 0x401, 0x5266}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0xa, 0x6, 0x3, 0x2}}]}]}}}]}, 0xbc}}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 1.872205654s ago: executing program 4 (id=312): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) unshare(0x400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) readahead(r2, 0x6, 0x221d45e7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0x20, 0x0, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x8818, 0x1000040000, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x2) recvmsg$unix(r5, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000380)=r7, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @multicast2}, 0x280, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='veth0\x00', 0x3, 0x6, 0x8}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x10, 0x1, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x8}, {0xe, 0xb}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x75, 0x7}}]}, 0xffffffac}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xffffffbc}, 0x10) write(r11, &(0x7f0000000000)="240000001a00570214f9f407000904ff8100c00efe0000ff0000000008000f00fd000000", 0x24) sendmsg$TIPC_NL_KEY_FLUSH(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01222bbd7000fc7afec0a8", @ANYRESHEX=r10, @ANYRESDEC=r4, @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x4024000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") 1.796127859s ago: executing program 2 (id=313): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r1, 0x0, 0x0, 0x40000022, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, 0x1, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040895}, 0x40810) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.728512553s ago: executing program 2 (id=315): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mknod$loop(0x0, 0x6000, 0x0) syz_read_part_table(0x1053, &(0x7f0000001080)="$eJzsz8EJwlAQBND5MYkBPaQDtRR70H4C9uLBArxaik1YgPhREAtQD+9ddmGGhQ0/dk1K0iRllsdaPvI2mSe5ZVFb3fCWTetNDtsmGZJyWWZKcly90u45+5RxTJtzpvTZlVqvl/enb3wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/uHgAA//+AkQhu") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000000001"], 0x20}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x44}, 0x50) 1.654751737s ago: executing program 4 (id=316): fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) 1.654132928s ago: executing program 5 (id=317): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x11}, 0x0, 0xc0, 0xe8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x1]}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010101, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 1.641811698s ago: executing program 4 (id=318): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) timer_settime(0x0, 0x0, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) clock_nanosleep(0x2, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0) (async) syz_clone(0x640c7000, 0x0, 0x300, 0x0, 0x0, 0x0) 1.631520529s ago: executing program 5 (id=319): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000002890000"], 0x2b) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) 1.556090433s ago: executing program 5 (id=320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) io_setup(0x3, &(0x7f0000008240)) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x200800, &(0x7f0000000200), 0x1, 0x4c9, &(0x7f0000010000)="$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") 1.542294094s ago: executing program 5 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") creat(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) mprotect(&(0x7f00009fa000/0x2000)=nil, 0x2000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, 0x19, 0x1, 0x70bd26, 0x0, {0x1c, 0x0, 0x6e80}, [@typed={0x8, 0x100, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x20048800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000640)="5b065e02e505f19a31a74dc0497250d3c4cd4e661aaabe12", 0x18, 0x20000045, &(0x7f0000000680)={0xa, 0x4e21, 0x0, @mcast2, 0x5cd2}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x1}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000006c0), 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40222}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r5, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000}) io_uring_enter(r5, 0x47f8, 0x1e43, 0x2000000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000018000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$vsock_stream(r2, &(0x7f0000000700)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.272483251s ago: executing program 2 (id=323): r0 = socket(0x15, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = eventfd2(0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x2, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r2, 0x0, 0x0, 0x4, 0x0, 0x1, r2}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x8, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) connect$can_j1939(r0, &(0x7f0000000040)={0xa, 0x0, 0xffffc0fe}, 0x18) 956.30062ms ago: executing program 4 (id=324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000afa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 939.471102ms ago: executing program 4 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000"], 0xc4}}, 0x4008800) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t>0&&\t') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000380)=r4, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000580)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffff0f7, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x118) sendmsg$sock(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)='g', 0x1}], 0x1}, 0x40840) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\b\x00'], 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r9, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, r9, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020400020a0000002cbd7000fcdbdf25030006000000000002004e21ac1414bb000001000000000002000100000000000000070300000000030005000000000002004e22ac1e00010000000000000000"], 0x50}, 0x1, 0x7}, 0x8014) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000400000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c4e"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 716.992645ms ago: executing program 4 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") creat(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) mprotect(&(0x7f00009fa000/0x2000)=nil, 0x2000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, 0x19, 0x1, 0x70bd26, 0x0, {0x1c, 0x0, 0x6e80}, [@typed={0x8, 0x100, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x20048800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000640)="5b065e02e505f19a31a74dc0497250d3c4cd4e661aaabe12", 0x18, 0x20000045, &(0x7f0000000680)={0xa, 0x4e21, 0x0, @mcast2, 0x5cd2}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x1}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000006c0), 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40222}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r6, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000}) io_uring_enter(r6, 0x47f8, 0x1e43, 0x2000000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000018000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r5) 628.292631ms ago: executing program 3 (id=327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000003000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000003f40000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001"], 0x140}, 0x1, 0x0, 0x0, 0x50}, 0x0) 520.560658ms ago: executing program 3 (id=328): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d04000000040000000400000000000000000000100400000000000000000000020300000000000000"], 0x0, 0x5a, 0x0, 0x0, 0x80000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000001680)=""/4098, 0x1002, 0x0, &(0x7f0000000000)=""/65, 0x41}}, 0x10) 468.189321ms ago: executing program 5 (id=329): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x11}, 0x0, 0xc0, 0xe8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x1]}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010101, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 396.321885ms ago: executing program 3 (id=330): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x80ff, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x800000001}}, [@offload={0xc, 0x1c, {0x0, 0x1}}]}, 0xc4}}, 0x2c000010) 395.488916ms ago: executing program 3 (id=331): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0xc00, 0x13) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@none, 0x9}) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f00000000c0)={0xbb8, 0x0, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0x2}, 0x57, 0x6, 0x5, 0xbcf2, 0xd, 'syz0\x00', "516d0da3bc75fe0e83bda36810e8be004ce8eb77fca91e269b45a80bc825b4fe", "69da2281c541c7116b177674d15517419bc1af73ae4ec931e46487672dcbab1d", [{0xff, 0xc65c, {0x3, 0x3}}, {0x7, 0x5, {0x3, 0xd}}, {0x3, 0xff, {0x0, 0x27}}, {0x81, 0x8, {0x1, 0xd9}}, {0xc0, 0x40, {0x2, 0xcb}}, {0x5, 0xe, {0x3, 0x6}}, {0x8, 0x4, {0x1, 0x7}}, {0xfff, 0x9, {0x3, 0x4525}}, {0x0, 0x8, {0x0, 0x447}}, {0x4, 0x3, {0x1, 0x80}}, {0x6, 0x8001, {0x0, 0x40000000}}, {0x63, 0x9, {0x2, 0x5}}, {0x400, 0xb4, {0x0, 0x2}}, {0x1, 0x1, {0x2, 0x24000}}, {0x3, 0x5, {0x2, 0x8}}, {0x900, 0x84, {0x2, 0xd38e}}, {0x40, 0x4, {0x3, 0xfffffffb}}, {0x9, 0x9b6, {0x3, 0x33}}, {0x5, 0x6, {0x1, 0x1000}}, {0xe, 0x6, {0x3, 0x2}}, {0xf59, 0x2, {0x3, 0x7}}, {0xfaee, 0x9, {0x1, 0xb8}}, {0x1, 0x4, {0x1, 0x92a}}, {0xf, 0x0, {0x3, 0x2}}, {0x2, 0x5589, {0x3, 0x9}}, {0x3, 0xfe62, {0x3, 0x8}}, {0xe1bd, 0x8, {0x0, 0x9}}, {0xff, 0xff, {0x1, 0x6}}, {0x9c0, 0x6, {0x0, 0xcd}}, {0x100, 0x3ff, {0x1, 0x9}}, {0xff, 0xd, {0x0, 0x1ff}}, {0x2, 0xd94b, {0x3, 0x2}}, {0x9, 0x5, {0x2, 0x2}}, {0x1, 0xfff, {0x2, 0x5510}}, {0x7e2f, 0x3, {0x0, 0x1000}}, {0xacb, 0x6, {0x2, 0x6}}, {0x2, 0x6, {0x0, 0x3}}, {0x80, 0xb4, {0x0, 0x400}}, {0x9, 0x2, {0x2, 0x65e9b4c3}}, {0x3c, 0x4, {0x1, 0xe}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x2, 0xe, 0x9, 0x8, 0xa, 'syz0\x00', "01c8738a7cc7d1d7f5017049e13009b702554ec6cb1d6c06f34a8d29b9ffbc06", "f3b4fcc1eb78c5906443db589ae31ed067cd2ac0ef7ec343f18a24545b970f0d", [{0x0, 0x3, {0x1, 0x209cb09c}}, {0x0, 0x3ff, {0x1, 0x5}}, {0x1ff, 0xe, {0x3}}, {0x8, 0x401, {0x1, 0x7}}, {0xff7b, 0x800, {0x0, 0x81}}, {0x7ff, 0xfff9, {0x3, 0x4}}, {0x0, 0xfffe, {0x3, 0x1}}, {0xd7c, 0x2, {0x0, 0x1}}, {0xb, 0x3, {0x1, 0x7}}, {0x3, 0x8000, {0x0, 0xfffffffe}}, {0x8001, 0x5, {0x3, 0x728a}}, {0xf4, 0xfff, {0x3, 0x4}}, {0x66e, 0x5, {0x1, 0xa3c}}, {0x0, 0x1000, {0x0, 0xb1}}, {0x697e, 0xa, {0x3, 0x8}}, {0x2, 0x8, {0x2, 0xc}}, {0xf073, 0x401, {0x2, 0x7}}, {0x7, 0x0, {0x2, 0x1}}, {0x0, 0xf15d, {0x1, 0x9}}, {0x4, 0x6, {0x2, 0x647}}, {0x9, 0x4, {0x0, 0x2b}}, {0x6, 0x5, {0x2, 0x10001}}, {0x1000, 0x6, {0x0, 0x9}}, {0x3, 0xe, {0x3}}, {0x5, 0x9, {0x2, 0x6}}, {0x3, 0xe36, {0x1, 0x6}}, {0x0, 0x4, {0x0, 0x6}}, {0x101, 0xd85f}, {0x100, 0xc38b, {0x3, 0x4}}, {0x40, 0x0, {0x0, 0xa}}, {0x8001, 0x7, {0x2, 0x200000}}, {0x3, 0x3, {0x1, 0x273}}, {0x6, 0x578, {0x0, 0xc13b}}, {0x98, 0x1000, {0x1, 0x3}}, {0x0, 0x3, {0x1, 0x7}}, {0x8, 0x40, {0x1, 0x10001}}, {0xa, 0x8, {0x3, 0x3}}, {0x2, 0x80, {0x2, 0x4c}}, {0x1ff, 0xd09b, {0x0, 0xffff}}, {0x5, 0x3, {0x2, 0xa}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x9, 0x8, 0x1, 0x3, 0x6, 'syz0\x00', "fc435766ca3d506c5134d15e0dac41beaca33669901c9ca8d3674e96cba32af6", "83b1e5e9ba442dbaa92890fab94faba32749a33d9c7731730b14e0e6f97b7b90", [{0x1, 0xc7, {0x0, 0xcc0}}, {0x3, 0x8, {0x2, 0x7}}, {0x59b6, 0x400, {0x2, 0x1}}, {0x800, 0xe094, {0x2, 0x1}}, {0x0, 0x4, {0x0, 0xf2}}, {0x6, 0x1, {0x3, 0xca7}}, {0x6, 0x3, {0x3, 0x9f}}, {0xb, 0x100, {0x3, 0xffff0000}}, {0xc2, 0x9, {0x3, 0x8}}, {0x1000, 0x7, {0x1, 0x3ec}}, {0x75, 0x5, {0x2, 0x1}}, {0x5, 0x1eaf, {0x3}}, {0x5, 0x6, {0x3, 0x80000001}}, {0x4, 0x8001, {0x0, 0x665}}, {0x1, 0x7, {0x2, 0x2}}, {0x9, 0xfd99, {0x0, 0x4}}, {0x10, 0x4, {0x3, 0x2}}, {0x0, 0x0, {0x0, 0x8}}, {0xc, 0xb79d, {0x1, 0x3}}, {0x200, 0x8, {0x2, 0xf}}, {0x4, 0x6, {0x0, 0x53}}, {0x3, 0xf9, {0x1, 0x2}}, {0x8e, 0x2, {0x0, 0xf}}, {0x401, 0x1, {0x1, 0xba56}}, {0x1, 0xa8, {0x1, 0x4}}, {0x5, 0x86d5, {0x3, 0x1ca1}}, {0x5, 0x4, {0x0, 0xfff}}, {0x7ff, 0x8, {0x1, 0x9}}, {0x2, 0x8, {0x1, 0x7}}, {0x4, 0xff, {0x1, 0x9}}, {0xf, 0xb, {0x2, 0x4}}, {0xcd6f, 0x3, {0x6, 0xfff80000}}, {0x81, 0x1, {0x3, 0xe41f}}, {0x2, 0x1c, {0x1, 0x9}}, {0x7fa, 0x4, {0x0, 0x7}}, {0x7, 0xd6a, {0x1, 0x9}}, {0x7, 0x100, {0x3, 0x9}}, {0x5, 0x4, {0x3, 0x3ff}}, {0xffff, 0x9, {0x2, 0x80000001}}, {0xe0, 0x6, {0x3, 0x8d}}]}}}, {{0x254, 0x1, {{0x3, 0x288}, 0xb, 0xfb, 0x80, 0x1, 0x19, 'syz1\x00', "04f99e241f1d6f3141fe3565788047381ec38d309c82063242ea2b33021a849a", "26f06c4ced6f7d1da9fc240c858854c7f0dfee734a1b218758b5ffe5a77fe21c", [{0x800, 0x7, {0x1, 0xb82}}, {0x7, 0x1, {0x2, 0x3}}, {0xea54, 0x8e06, {0x3, 0x9c13}}, {0x3, 0x8, {0x1, 0x6}}, {0x95, 0x5, {0x2, 0x7fff}}, {0x5, 0x0, {0x0, 0x1000}}, {0x6, 0x9, {0x3, 0xc04}}, {0x5, 0x80, {0xa93496dcc1d7e1d, 0x5}}, {0x0, 0x200, {0x0, 0x8}}, {0x1, 0x5, {0x1, 0x7}}, {0x4, 0x9, {0x2, 0x9}}, {0x8, 0x4, {0x3, 0x2}}, {0x7e61, 0x9, {0x2, 0x7fffffff}}, {0x2, 0x3, {0x2, 0x536}}, {0x6, 0x7, {0x1, 0x2}}, {0x1, 0x0, {0x1, 0x7fffffff}}, {0x8, 0x9, {0x1, 0x6a}}, {0x1, 0x8001, {0x1, 0x4}}, {0x7, 0x2, {0x3, 0x3}}, {0x1, 0x7, {0x0, 0xfffffffa}}, {0x3, 0x2, {0x0, 0x9a0d}}, {0xfffb, 0x7, {0x2, 0x3}}, {0x3, 0x8261, {0x2, 0x7f}}, {0xb02, 0x5465, {0x1, 0x5}}, {0x0, 0x1c2, {0x1, 0x5}}, {0xe9, 0x67f, {0x0, 0x7ff}}, {0x800, 0xe, {0x3, 0x6}}, {0xfff, 0x1ff, {0x1, 0x4}}, {0x8, 0x3ff, {0x1, 0x48e}}, {0x4, 0x5, {0x0, 0x9}}, {0x6, 0x36, {0x2, 0xa65}}, {0x7186, 0x3, {0x1, 0xfffffffb}}, {0x711, 0x3ff, {0x0, 0x9}}, {0x4, 0x7, {0x0, 0x6}}, {0x3, 0xfff, {0x0, 0x1}}, {0xff, 0x5, {0x1, 0x9}}, {0x9, 0xffff, {0x1, 0xe4c56c6d}}, {0xaacf, 0x5, {0x3, 0x6}}, {0x2, 0x400, {0x3, 0x1}}, {0xc, 0x3, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x6, 0x1, 0xd, 0x9, 0xd, 'syz0\x00', "627dd139671ea15965aed57b6fbf5d75441415b1e0b53c8056f3085e7d86c963", "808f345038c774501fea90196122b1d31fb35ad32cf9caf1dc0cb83b482a78d9", [{0x823, 0x6, {0x1, 0xfffffc01}}, {0x800, 0x4, {0x3, 0x4}}, {0x4c, 0x0, {0x2, 0x3}}, {0x0, 0x4, {0x3, 0x1}}, {0x6, 0x7, {0x0, 0x2}}, {0xc373, 0x8, {0x3, 0x1}}, {0x80, 0xffff, {0x2, 0x2}}, {0x4, 0x4, {0x0, 0x5}}, {0x3f5, 0x5fc, {0x1, 0x3}}, {0x6, 0x6, {0x0, 0x3}}, {0x6, 0x86, {0x1, 0xfffff801}}, {0x956d, 0x5, {0x3, 0x2}}, {0x7, 0x26, {0x2, 0x7}}, {0x2, 0x0, {0x1, 0xffffff27}}, {0x2, 0x1, {0x2, 0x9}}, {0x2, 0xb, {0x3, 0x6151}}, {0x4, 0x3, {0x1, 0x7}}, {0x3, 0x5, {0x0, 0x8}}, {0x1, 0x6, {0x3, 0x10}}, {0x3, 0x7f, {0x1, 0x3}}, {0x7, 0x7, {0x3, 0x10}}, {0x9, 0x1, {0x1, 0xbfb5}}, {0x9, 0x400, {0x0, 0x1}}, {0x4, 0x2, {0x1, 0xa000}}, {0x4db3, 0x6, {0x0, 0x9}}, {0x3, 0x0, {0x1, 0x40}}, {0x0, 0x401, {0x0, 0x7}}, {0xd47, 0x1, {0x2, 0x3}}, {0x7, 0x7, {0x3, 0x5}}, {0x401, 0x7, {0x3}}, {0x7, 0xc4, {0x0, 0x4}}, {0x4, 0x8, {0x2, 0x7}}, {0x2, 0x1, {0x3, 0x3}}, {0x0, 0x4, {0x1, 0x6}}, {0x7, 0x7, {0x1, 0x4}}, {0x80, 0x1, {0x2, 0x8}}, {0x1, 0x9, {0x3, 0x14}}, {0x9, 0x0, {0x0, 0x3}}, {0x3, 0x1ff, {0x1, 0x1}}, {0x7fff, 0xfffc, {0x1, 0x6}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x20000804}, 0x800) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000d00)={0x10, 0x0, "46c4aebc471c269884afe2bb6882c07d"}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000d40), 0x381000, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000d80), 0x16c2, 0x0) writev(r1, &(0x7f00000010c0)=[{&(0x7f0000000dc0)="28925164840e21fe7e9184717e6c14e68e584c827f9c1dc1cf2e06d54689a35a62143dda8280ee0baf0d0d01fd4353f3a270ddfdfe5bfb9bd5a574d7b2359b3c5ffef5c86e05fc25ad14bd74f47fe5a67d62417ed4f455cddaf807833479fca8b1fb7113d04e81416bac6e9028dc9a472435782f24d2a1bd7449b0855ffa49d5d08173b4f3ed12c635f3155bfcc373775e403d9269f80f10e45c4c1ca9e32099deb9aca66e84c894d668df3af9a1ff1724c55ad68da11f67629b1c45afb70562dfcdd4cd846e4fd333a361ae2bcc75f186", 0xd1}, {&(0x7f0000000ec0)="11a2355adfa42669c635eca0eb3b1cf1337ba115ff09e80b5a69bd0e3ebd2514dc740fb50be5e99c4813c20cc03ffbd37a1f41d52399d5f26c12f89e2446530b9a281854d936c34c0cbcb49d558f5c8a5bdd2481522872b37c4781b1738309b628e1d523e80ad764c91d61da1123b2407412c4d297aed6381a3c62c4134a276e99f44a2c1bea748458d0bb10309643b3ad4a7f55d9e9f2d69accad23ccbba56731dcc21e7934bde394c67319e295b084b5e680e88dbccb8e24", 0xb9}, {&(0x7f0000000f80)="2ed5226fc84dd4a12baa0a4c4fca3ce2d6", 0x11}, {&(0x7f0000000fc0)="5d91489f18695ca74ef94eb47bfb7a2ac419ec75d7c69d31c6d5424ce9135a59eeb5d5ba740ce6bbf04dc8bbc091ecff280a0d17d7eaa18e767263516a0375af445286a7780b67342791e33aab60d65b940ebec0bc6fe345550fcd7f67aa851ea4d7edc909f1ad1a4fe856ad6d580ebe9f217817a6695d83aeb42f1f37a8f636c703aad8d2bee41d46d90e78bec38d4914388812784474b55d3f7b0d7e1d5faad265d31a11da8ca4ae2d37e9d4800b30781d7a83c3baf1d5c2190d8a5764afac7dbaf3c9bd9f5cf3f16cb649687c19c24fcb0c4f84dfbe39603e2610370a9628e81fe7712c8635ba27e8ba1589c092aedfb0", 0xf2}], 0x4) sendmsg$AUDIT_GET(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x10, 0x3e8, 0x200, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x4008000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000001200)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x64, r2, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x40084}, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001500)={r0, 0xffffffffffffffff, 0x5, 0x95, &(0x7f0000001440)="0fcdff81ec68afa60a0cd9c50774a0734d5f77f6923a80e1ef999340c0be09bd43cf7c03ebffd789c2cb383c0006c1a3831904643baeba25840fe437913785c0f18e6c2a6d77cf8745a15187ca39c36707380b8bf7875dce6e6ebc555440273a64d48cdf2aec8c817b00fb32e5f764ac780006ceb3b604f04b516e5fa30e2dc1dbfced153896688fcbc0cf369af271f1f37bd5606c", 0xf1, 0xc8, 0x3, 0xfff3, 0x2, 0x2, 0xfffffff8, 'syz1\x00'}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r1, {r4}}, './file0\x00'}) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x6c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x10001, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x9}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x10001}, @NFULA_CFG_FLAGS={0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4804) recvfrom(r0, &(0x7f0000001740)=""/4096, 0x1000, 0x10042, 0x0, 0x0) r7 = io_uring_setup(0x1219, &(0x7f0000002740)={0x0, 0x6be3, 0x4000, 0x2, 0x197, 0x0, r6}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f00000027c0)={0x452a, r4, 0x26, {0xed5, 0x5}, 0x3}, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002800), 0x100, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002840), 0x400100, 0x0) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000002880)={{0x5, 0x2}, {0x3, 0x1000}, 0x1, 0x1}) io_uring_enter(r6, 0x1e5d, 0xc410, 0xe0, &(0x7f00000028c0)={[0x100]}, 0x8) sendmsg$inet(r0, &(0x7f0000003d00)={&(0x7f0000002900)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003b40)=[{&(0x7f0000002940)="36758fb0d3eaa0195d4ed08b55563f83f2773ae5508ea5968aac1fa3abe21b73f0656c6c28f274617844a5453f52427a01ef389f090835feae940db4d1012d2ee278ec7568751490b69c15e28091552a191806bb5c2d2eb6832a140d002cc56af8ea6a0ce839b0ff1ff7c788b70fe42719d781a0cf0904cc27d4e2125cdbcef6574a05a8a2cd9a9ab6a57d1c09d6be41191f638b8665e79b702a0f59d4f592728506b2e3befcdd653b9470d447681b2c3813e4d16ece4e748b24b6611282428d131318d31a2e9b7e412924d565d3cb3464d2f889313ce0ee814d2e5d14ae3abadf8f", 0xe2}, {&(0x7f0000002a40)="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", 0x1000}, {&(0x7f0000003a40)="87b9a22cec217bfc18f1cd7e2c0a90da", 0x10}, {&(0x7f0000003a80)="8885ca73ff55d005ab3ac5e2030dd253cabfd11e935593061e381d14e2be292933fe0edc151028b2aa5981d879a20fba54d6958f9cbbe34383f69adaa5db145b5936b18266c7310f6964ebd0764f36be22819ac56a9a2641abb033d965e2a140640da8a3d1ea09d2b09efbc5c000b8295fc04c073a34684b2987de8a8c08b6583dfd7f55d6b9e82a0f3d06a12d90ad04288a2f86ea659641c631e53375b554961e93e6ecd64d86728e330a9093cb06aa46a6bc", 0xb3}], 0x4, &(0x7f0000003b80)=[@ip_retopts={{0x38, 0x0, 0x7, {[@rr={0x7, 0x13, 0x72, [@dev={0xac, 0x14, 0x14, 0x28}, @local, @multicast2, @multicast1]}, @lsrr={0x83, 0x13, 0x2a, [@empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @end]}}}, @ip_retopts={{0x130, 0x0, 0x7, {[@generic={0x7, 0x3, "e3"}, @cipso={0x86, 0x44, 0x3, [{0x5, 0xa, "798cd7a66df7e076"}, {0x1, 0x12, "cdfa52bc9d04584a2ef9493680d3f551"}, {0x2, 0xb, "f1f2d485d762521410"}, {0x3, 0x2}, {0x5, 0x2}, {0x5, 0x8, "2dd5794ede39"}, {0x6, 0xb, "67affcd47d3fe5ffb1"}]}, @lsrr={0x83, 0x13, 0xa3, [@remote, @empty, @multicast1, @local]}, @rr={0x7, 0xf, 0x83, [@rand_addr=0x64010100, @multicast2, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x29, 0x3, 0xc, [{@rand_addr=0x64010100, 0x10000}, {@remote, 0x7fff}, {@multicast2, 0xfffffffc}, {@private=0xa010100, 0xd}, {@local, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x7}]}, @noop, @ssrr={0x89, 0x1f, 0xf7, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010101, @empty, @multicast2, @local, @remote]}, @timestamp_addr={0x44, 0x54, 0x58, 0x1, 0x5, [{@multicast2, 0x9}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x8}, {@multicast2, 0xfffffff8}, {@remote, 0x1a9}, {@multicast2, 0xa46f}, {@rand_addr=0x64010101, 0xe4b6}, {@multicast1, 0x3}, {@private=0xa010102, 0x6}, {@multicast1, 0x5}]}]}}}], 0x168}, 0x20000000) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000003e00)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) r9 = getpgid(0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000003e40)={'\x00', 0x2, 0x5, 0x80000001, 0x4, 0x9c2, 0xffffffffffffffff}) tgkill(r9, r10, 0x1a) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000003f00)={0x81, 0x28, '\x00', 0x8919ed5423b8fb12, &(0x7f0000003ec0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000004080)={&(0x7f0000003f40), 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x4000040) 299.490791ms ago: executing program 3 (id=332): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a000725250000000c600e41b0000900ac00081e25000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) (fail_nth: 1) 75.108296ms ago: executing program 3 (id=333): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2508"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,fmask=00000000000000000006675,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c73686f77657865632c6e6f646f74732c74696d655f6f66667365743d3078303030303030303030303030303131312c6e6f646f74732c646f74732c00fb298227e882bf345354297c737aa0d01f11809b19ba8949352bd13bb4c792980f6a9902d4928f9ea4ac4b12a09f703a90a9a1995197865ec7"], 0x1, 0x1f5, &(0x7f0000000600)="$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") r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x9}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) nanosleep(&(0x7f0000000240), 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x11a}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1, 0x0, 0x1}) io_uring_enter(r5, 0x847ba, 0x2000, 0xe, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x40, 0x9, 0x3, 0xfff00000}, {0x50, 0x7, 0x48, 0x400005}, {0x6, 0x25, 0x7, 0x205}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 0s ago: executing program 5 (id=334): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") creat(&(0x7f0000000040)='./file0\x00', 0x9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = memfd_create(&(0x7f0000000040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\xff\xff\x00\x00\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0', [{0x20, '\t'}]}, 0xd) socket(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="cd852623768acec7c8f3ebff93c2b9f3", 0x10) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) kernel console output (not intermixed with test programs): [ 19.858000][ T29] audit: type=1400 audit(1770437028.330:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.879993][ T29] audit: type=1400 audit(1770437028.330:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.902820][ T29] audit: type=1400 audit(1770437028.330:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.925998][ T29] audit: type=1400 audit(1770437028.330:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.949210][ T29] audit: type=1400 audit(1770437028.330:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 24.736021][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 24.736040][ T29] audit: type=1400 audit(1770437033.210:70): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.741750][ T3297] cgroup: Unknown subsys name 'net' [ 24.742116][ T29] audit: type=1400 audit(1770437033.220:71): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.792730][ T29] audit: type=1400 audit(1770437033.240:72): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.931671][ T3297] cgroup: Unknown subsys name 'cpuset' [ 24.937783][ T3297] cgroup: Unknown subsys name 'rlimit' [ 25.028678][ T29] audit: type=1400 audit(1770437033.500:73): avc: denied { setattr } for pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.052278][ T29] audit: type=1400 audit(1770437033.500:74): avc: denied { create } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.072740][ T29] audit: type=1400 audit(1770437033.500:75): avc: denied { write } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.093175][ T29] audit: type=1400 audit(1770437033.500:76): avc: denied { read } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.100706][ T3300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.113458][ T29] audit: type=1400 audit(1770437033.510:77): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.147203][ T29] audit: type=1400 audit(1770437033.510:78): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.170655][ T29] audit: type=1400 audit(1770437033.530:79): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.201004][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.314846][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.344846][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.356214][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 26.395286][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.407891][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 26.466398][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.473491][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.480663][ T3310] bridge_slave_0: entered allmulticast mode [ 26.487148][ T3310] bridge_slave_0: entered promiscuous mode [ 26.493530][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.500580][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.507954][ T3312] bridge_slave_0: entered allmulticast mode [ 26.514457][ T3312] bridge_slave_0: entered promiscuous mode [ 26.525261][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.532479][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.539589][ T3312] bridge_slave_1: entered allmulticast mode [ 26.546085][ T3312] bridge_slave_1: entered promiscuous mode [ 26.562698][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.569755][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.577005][ T3310] bridge_slave_1: entered allmulticast mode [ 26.583281][ T3310] bridge_slave_1: entered promiscuous mode [ 26.600017][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.607145][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.614469][ T3309] bridge_slave_0: entered allmulticast mode [ 26.621002][ T3309] bridge_slave_0: entered promiscuous mode [ 26.640592][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.649900][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.657002][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.664340][ T3309] bridge_slave_1: entered allmulticast mode [ 26.670721][ T3309] bridge_slave_1: entered promiscuous mode [ 26.693004][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.700249][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.707788][ T3316] bridge_slave_0: entered allmulticast mode [ 26.714105][ T3316] bridge_slave_0: entered promiscuous mode [ 26.721770][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.744192][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.753985][ T3312] team0: Port device team_slave_0 added [ 26.764075][ T3312] team0: Port device team_slave_1 added [ 26.773695][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.780986][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.788203][ T3316] bridge_slave_1: entered allmulticast mode [ 26.794532][ T3316] bridge_slave_1: entered promiscuous mode [ 26.806340][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.816724][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.825974][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.833103][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.840569][ T3314] bridge_slave_0: entered allmulticast mode [ 26.847127][ T3314] bridge_slave_0: entered promiscuous mode [ 26.858483][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.865593][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.872780][ T3314] bridge_slave_1: entered allmulticast mode [ 26.879294][ T3314] bridge_slave_1: entered promiscuous mode [ 26.899039][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.917562][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.924636][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.950543][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.965522][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.972505][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.998847][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.010728][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.020910][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.042836][ T3310] team0: Port device team_slave_0 added [ 27.049853][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.062687][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.076455][ T3309] team0: Port device team_slave_0 added [ 27.083069][ T3310] team0: Port device team_slave_1 added [ 27.103176][ T3309] team0: Port device team_slave_1 added [ 27.109640][ T3316] team0: Port device team_slave_0 added [ 27.128311][ T3314] team0: Port device team_slave_0 added [ 27.139343][ T3314] team0: Port device team_slave_1 added [ 27.145686][ T3316] team0: Port device team_slave_1 added [ 27.151733][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.158675][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.184908][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.200642][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.207635][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.233838][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.263786][ T3312] hsr_slave_0: entered promiscuous mode [ 27.270002][ T3312] hsr_slave_1: entered promiscuous mode [ 27.278935][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.286052][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.312099][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.327374][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.334371][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.360376][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.371318][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.378269][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.404385][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.429003][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.436042][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.462351][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.476035][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.483079][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.509676][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.532558][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.539603][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.565681][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.597128][ T3316] hsr_slave_0: entered promiscuous mode [ 27.603025][ T3316] hsr_slave_1: entered promiscuous mode [ 27.608803][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 27.614546][ T3316] Cannot create hsr debugfs directory [ 27.629508][ T3310] hsr_slave_0: entered promiscuous mode [ 27.635538][ T3310] hsr_slave_1: entered promiscuous mode [ 27.641414][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 27.647137][ T3310] Cannot create hsr debugfs directory [ 27.671807][ T3309] hsr_slave_0: entered promiscuous mode [ 27.677857][ T3309] hsr_slave_1: entered promiscuous mode [ 27.683980][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 27.689890][ T3309] Cannot create hsr debugfs directory [ 27.712722][ T3314] hsr_slave_0: entered promiscuous mode [ 27.718778][ T3314] hsr_slave_1: entered promiscuous mode [ 27.724838][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 27.730580][ T3314] Cannot create hsr debugfs directory [ 27.902804][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.911725][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.920403][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.931697][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.954067][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.962748][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.971366][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.979905][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.020437][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.030660][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.045560][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.054645][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.097187][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.114002][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.122265][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.131778][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.140487][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.159275][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.179572][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.194909][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.202336][ T3325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.211423][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.223518][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.230687][ T3325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.240822][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.250236][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.259695][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.268403][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.283907][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.291087][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.317792][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.324992][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.351368][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.384933][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.399048][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.420084][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.432125][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.439247][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.454656][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.461748][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.480949][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.492701][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.511175][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.540783][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.547928][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.556829][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.564029][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.594133][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.601225][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.625582][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.632841][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.653361][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.684095][ T3312] veth0_vlan: entered promiscuous mode [ 28.703773][ T3312] veth1_vlan: entered promiscuous mode [ 28.742826][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.766784][ T3312] veth0_macvtap: entered promiscuous mode [ 28.788114][ T3312] veth1_macvtap: entered promiscuous mode [ 28.801608][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.818997][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.845928][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.865313][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.889084][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.898550][ T3310] veth0_vlan: entered promiscuous mode [ 28.912456][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.924321][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.924495][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.947926][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.982286][ T3309] veth0_vlan: entered promiscuous mode [ 28.994231][ T3310] veth1_vlan: entered promiscuous mode [ 28.996848][ T3466] netlink: 'syz.0.1': attribute type 11 has an invalid length. [ 29.029734][ T3310] veth0_macvtap: entered promiscuous mode [ 29.038036][ T3309] veth1_vlan: entered promiscuous mode [ 29.056422][ T3310] veth1_macvtap: entered promiscuous mode [ 29.084605][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.109571][ T3309] veth0_macvtap: entered promiscuous mode [ 29.124047][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.143713][ T3325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.153396][ T3316] veth0_vlan: entered promiscuous mode [ 29.160281][ T3309] veth1_macvtap: entered promiscuous mode [ 29.172117][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.193433][ T3316] veth1_vlan: entered promiscuous mode [ 29.200301][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.210832][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.230161][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.249240][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.274990][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.284148][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.298857][ T3314] veth0_vlan: entered promiscuous mode [ 29.309089][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.320271][ T3314] veth1_vlan: entered promiscuous mode [ 29.340898][ T3316] veth0_macvtap: entered promiscuous mode [ 29.347322][ T3492] loop1: detected capacity change from 0 to 512 [ 29.348612][ T3316] veth1_macvtap: entered promiscuous mode [ 29.362949][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.387422][ T3492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.394358][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.410649][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.436165][ T3492] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.453729][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.467420][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.485750][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.514154][ T3314] veth0_macvtap: entered promiscuous mode [ 29.525005][ C0] hrtimer: interrupt took 30217 ns [ 29.537792][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.547537][ T3314] veth1_macvtap: entered promiscuous mode [ 29.590296][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.607726][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.636239][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.650570][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.771800][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.783138][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.827817][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 29.827835][ T29] audit: type=1400 audit(1770437038.300:173): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.930330][ T29] audit: type=1400 audit(1770437038.400:174): avc: denied { create } for pid=3510 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.940739][ T3513] loop3: detected capacity change from 0 to 512 [ 30.001947][ T3513] ======================================================= [ 30.001947][ T3513] WARNING: The mand mount option has been deprecated and [ 30.001947][ T3513] and is ignored by this kernel. Remove the mand [ 30.001947][ T3513] option from the mount to silence this warning. [ 30.001947][ T3513] ======================================================= [ 30.002453][ T3513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.021608][ T3513] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.8: invalid block [ 30.022139][ T3513] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8: invalid indirect mapped block 4294967295 (level 1) [ 30.022332][ T3513] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8: invalid indirect mapped block 4294967295 (level 1) [ 30.022644][ T3513] EXT4-fs (loop3): 2 truncates cleaned up [ 30.023035][ T3513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.040892][ T3497] loop2: detected capacity change from 0 to 512 [ 30.041314][ T3507] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 30.049597][ T3513] bridge0: entered promiscuous mode [ 30.049655][ T3513] macvtap1: entered promiscuous mode [ 30.049783][ T3513] macvtap1: entered allmulticast mode [ 30.049796][ T3513] bridge0: entered allmulticast mode [ 30.050778][ T3513] bridge0: port 3(macvtap1) entered blocking state [ 30.050927][ T3513] bridge0: port 3(macvtap1) entered disabled state [ 30.086658][ T3513] bridge0: left allmulticast mode [ 30.086801][ T3513] bridge0: left promiscuous mode [ 30.090897][ T29] audit: type=1400 audit(1770437038.430:175): avc: denied { create } for pid=3510 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.090926][ T29] audit: type=1400 audit(1770437038.430:176): avc: denied { write } for pid=3510 comm="syz.4.5" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.090949][ T29] audit: type=1400 audit(1770437038.430:177): avc: denied { write } for pid=3510 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.090969][ T29] audit: type=1400 audit(1770437038.430:178): avc: denied { nlmsg_write } for pid=3510 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.091042][ T29] audit: type=1400 audit(1770437038.440:179): avc: denied { read write } for pid=3510 comm="syz.4.5" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.091063][ T29] audit: type=1400 audit(1770437038.440:180): avc: denied { open } for pid=3510 comm="syz.4.5" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.091103][ T29] audit: type=1400 audit(1770437038.440:181): avc: denied { ioctl } for pid=3510 comm="syz.4.5" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.091124][ T29] audit: type=1400 audit(1770437038.440:182): avc: denied { create } for pid=3491 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.096464][ T3519] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 30.096533][ T3519] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5'. [ 30.210700][ T3497] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.219652][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.299649][ T3527] loop3: detected capacity change from 0 to 1024 [ 30.464745][ T3497] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3: invalid block [ 30.597220][ T3527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.639871][ T3497] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3: invalid indirect mapped block 4294967295 (level 1) [ 30.696492][ T3497] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3: invalid indirect mapped block 4294967295 (level 1) [ 30.726378][ T3534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=3534 comm=syz.4.12 [ 30.788931][ T3497] EXT4-fs (loop2): 2 truncates cleaned up [ 30.797048][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.866827][ T3497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.883950][ T3537] netlink: 'syz.3.13': attribute type 1 has an invalid length. [ 30.891670][ T3537] netlink: 'syz.3.13': attribute type 2 has an invalid length. [ 30.902053][ T3538] 9p: Bad value for 'wfdno' [ 31.167989][ T3497] bridge0: entered promiscuous mode [ 31.196347][ T3497] macvtap1: entered promiscuous mode [ 31.202061][ T3497] macvtap1: entered allmulticast mode [ 31.207463][ T3497] bridge0: entered allmulticast mode [ 31.219543][ T3549] loop0: detected capacity change from 0 to 512 [ 31.225220][ T3497] bridge0: port 3(macvtap1) entered blocking state [ 31.232567][ T3497] bridge0: port 3(macvtap1) entered disabled state [ 31.247986][ T3549] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.258006][ T3497] bridge0: left allmulticast mode [ 31.263362][ T3497] bridge0: left promiscuous mode [ 31.268187][ T3549] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 31.285399][ T3549] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 31.294231][ T3549] System zones: 0-2, 18-18, 34-34 [ 31.300608][ T3549] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.17: bad orphan inode 15 [ 31.327281][ T3549] ext4_test_bit(bit=14, block=18) = 1 [ 31.332746][ T3549] is_bad_inode(inode)=0 [ 31.337003][ T3549] NEXT_ORPHAN(inode)=2264924160 [ 31.341991][ T3549] max_ino=32 [ 31.345199][ T3549] i_nlink=0 [ 31.359492][ T3549] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.17: corrupted inode contents [ 31.361772][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.372803][ T3549] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.17: mark_inode_dirty error [ 31.401472][ T3549] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.17: corrupted inode contents [ 31.421303][ T3549] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.17: mark_inode_dirty error [ 31.451202][ T3554] loop2: detected capacity change from 0 to 128 [ 31.462533][ T3549] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.17: mark inode dirty (error -117) [ 31.477240][ T3549] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 31.481491][ T3554] msdos: Bad value for 'dmask' [ 31.490798][ T3549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.526526][ T3549] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.17: bg 0: block 80: padding at end of block bitmap is not set [ 31.544041][ T3507] syz.1.2 (3507) used greatest stack depth: 10120 bytes left [ 31.553181][ T3554] Zero length message leads to an empty skb [ 31.612830][ T3492] syz.1.2 (3492) used greatest stack depth: 6208 bytes left [ 31.633271][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.702295][ T3561] loop4: detected capacity change from 0 to 512 [ 31.722936][ T3561] ext2: Unknown parameter 'obj_type' [ 31.742068][ T3562] netlink: 52 bytes leftover after parsing attributes in process `syz.1.20'. [ 31.772275][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.779475][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.801332][ T3565] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.816949][ T3565] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 31.826271][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.844084][ T3565] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 31.855267][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.862698][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.896172][ T3552] loop3: detected capacity change from 0 to 512 [ 31.966345][ T3552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.000495][ T3552] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.19: invalid indirect mapped block 4294967295 (level 1) [ 32.021605][ T3558] loop2: detected capacity change from 0 to 512 [ 32.023726][ T3552] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.19: invalid indirect mapped block 4294967295 (level 1) [ 32.051288][ T3558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.086653][ T3569] loop0: detected capacity change from 0 to 512 [ 32.109532][ T3569] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.124372][ T3552] EXT4-fs (loop3): 2 truncates cleaned up [ 32.149835][ T3552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.176343][ T3569] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.24: invalid block [ 32.193312][ T3558] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.22: invalid indirect mapped block 4294967295 (level 1) [ 32.214422][ T3558] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.22: invalid indirect mapped block 4294967295 (level 1) [ 32.218264][ T3569] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.24: invalid indirect mapped block 4294967295 (level 1) [ 32.252678][ T3558] EXT4-fs (loop2): 2 truncates cleaned up [ 32.264770][ T3579] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 32.265309][ T3569] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.24: invalid indirect mapped block 4294967295 (level 1) [ 32.308132][ T3558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.308638][ T3301] loop1: p3 p4 < > [ 32.325041][ T3301] loop1: p3 start 11362048 is beyond EOD, truncated [ 32.337460][ T3567] loop1: p3 p4 < > [ 32.340255][ T3569] EXT4-fs (loop0): 2 truncates cleaned up [ 32.341466][ T3567] loop1: p3 start 11362048 is beyond EOD, truncated [ 32.415673][ T3569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.459935][ T3552] bridge0: entered promiscuous mode [ 32.465524][ T3552] macvtap1: entered promiscuous mode [ 32.471162][ T3552] macvtap1: entered allmulticast mode [ 32.476672][ T3552] bridge0: entered allmulticast mode [ 32.483872][ T3552] bridge0: port 3(macvtap1) entered blocking state [ 32.490593][ T3552] bridge0: port 3(macvtap1) entered disabled state [ 32.498858][ T3552] bridge0: left allmulticast mode [ 32.504129][ T3552] bridge0: left promiscuous mode [ 32.530146][ T3558] bridge0: entered promiscuous mode [ 32.536245][ T3558] macvtap1: entered promiscuous mode [ 32.543705][ T3558] macvtap1: entered allmulticast mode [ 32.549266][ T3558] bridge0: entered allmulticast mode [ 32.561406][ T3558] bridge0: port 3(macvtap1) entered blocking state [ 32.568316][ T3558] bridge0: port 3(macvtap1) entered disabled state [ 32.580795][ T3558] bridge0: left allmulticast mode [ 32.588017][ T3558] bridge0: left promiscuous mode [ 32.623843][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.653116][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.666260][ T3569] bridge0: entered promiscuous mode [ 32.679396][ T3569] macvtap1: entered promiscuous mode [ 32.690004][ T3569] macvtap1: entered allmulticast mode [ 32.695974][ T3569] bridge0: entered allmulticast mode [ 32.717295][ T3587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.735007][ T3569] bridge0: port 3(macvtap1) entered blocking state [ 32.741699][ T3569] bridge0: port 3(macvtap1) entered disabled state [ 32.744261][ T3587] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.761949][ T3569] bridge0: left allmulticast mode [ 32.767110][ T3569] bridge0: left promiscuous mode [ 32.871877][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.979229][ T3607] netlink: 52 bytes leftover after parsing attributes in process `syz.0.35'. [ 32.995977][ T3607] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.003317][ T3607] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.010132][ T3600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.33'. [ 33.072960][ T3601] netlink: 'syz.2.32': attribute type 1 has an invalid length. [ 33.528729][ T3309] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 33.540037][ T3309] CPU: 0 UID: 0 PID: 3309 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.540062][ T3309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 33.540075][ T3309] Call Trace: [ 33.540082][ T3309] [ 33.540102][ T3309] __dump_stack+0x1d/0x30 [ 33.540126][ T3309] dump_stack_lvl+0x95/0xd0 [ 33.540148][ T3309] dump_stack+0x15/0x1b [ 33.540169][ T3309] dump_header+0x80/0x240 [ 33.540190][ T3309] oom_kill_process+0x295/0x350 [ 33.540262][ T3309] out_of_memory+0x97d/0xb80 [ 33.540288][ T3309] try_charge_memcg+0x62e/0xa10 [ 33.540311][ T3309] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 33.540427][ T3309] __read_swap_cache_async+0x17b/0x2d0 [ 33.540454][ T3309] swap_cluster_readahead+0x262/0x3c0 [ 33.540489][ T3309] swapin_readahead+0xde/0x840 [ 33.540576][ T3309] ? __perf_event_task_sched_in+0xa65/0xad0 [ 33.540602][ T3309] ? __rcu_read_unlock+0x4e/0x70 [ 33.540635][ T3309] ? swap_cache_get_folio+0x26f/0x280 [ 33.540709][ T3309] do_swap_page+0x59b/0x2a50 [ 33.540741][ T3309] ? finish_task_switch+0x79/0x280 [ 33.540819][ T3309] ? __schedule+0x82d/0xc90 [ 33.540844][ T3309] ? __rcu_read_lock+0x36/0x50 [ 33.540881][ T3309] ? __pfx_default_wake_function+0x10/0x10 [ 33.540907][ T3309] handle_mm_fault+0xb40/0x3030 [ 33.540945][ T3309] ? vma_start_read+0x1c7/0x2c0 [ 33.540977][ T3309] do_user_addr_fault+0x62f/0x1050 [ 33.541071][ T3309] exc_page_fault+0x62/0xa0 [ 33.541091][ T3309] asm_exc_page_fault+0x26/0x30 [ 33.541111][ T3309] RIP: 0033:0x7f99632760d7 [ 33.541130][ T3309] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 33.541203][ T3309] RSP: 002b:00007fff7f350dd0 EFLAGS: 00010202 [ 33.541219][ T3309] RAX: 0000000000000000 RBX: 000055557d963500 RCX: 00007f99632760d7 [ 33.541234][ T3309] RDX: 00007fff7f350e10 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.541248][ T3309] RBP: 00007fff7f350e7c R08: 0000000000000000 R09: 0000000000000000 [ 33.541262][ T3309] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 33.541277][ T3309] R13: 00000000000927c0 R14: 000000000000826d R15: 00007fff7f350ed0 [ 33.541360][ T3309] [ 33.761202][ T3309] memory: usage 307200kB, limit 307200kB, failcnt 517 [ 33.768044][ T3309] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 33.776472][ T3309] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 33.783976][ T3309] Memory cgroup stats for /syz2: [ 33.784831][ T3309] cache 24576 [ 33.793387][ T3309] rss 0 [ 33.796182][ T3309] shmem 0 [ 33.799134][ T3309] mapped_file 1642496 [ 33.803758][ T3309] dirty 0 [ 33.806712][ T3309] writeback 0 [ 33.810011][ T3309] workingset_refault_anon 167 [ 33.814950][ T3309] workingset_refault_file 815 [ 33.819633][ T3309] swap 446464 [ 33.822949][ T3309] swapcached 8192 [ 33.826586][ T3309] pgpgin 4633 [ 33.829968][ T3309] pgpgout 4625 [ 33.833462][ T3309] pgfault 3715 [ 33.837011][ T3309] pgmajfault 57 [ 33.840514][ T3309] inactive_anon 8192 [ 33.844546][ T3309] active_anon 0 [ 33.848030][ T3309] inactive_file 12288 [ 33.852472][ T3309] active_file 12288 [ 33.856534][ T3309] unevictable 0 [ 33.860198][ T3309] hierarchical_memory_limit 314572800 [ 33.865686][ T3309] hierarchical_memsw_limit 9223372036854771712 [ 33.871904][ T3309] total_cache 24576 [ 33.875773][ T3309] total_rss 0 [ 33.879085][ T3309] total_shmem 0 [ 33.882985][ T3309] total_mapped_file 1642496 [ 33.887526][ T3309] total_dirty 0 [ 33.891209][ T3309] total_writeback 0 [ 33.895045][ T3309] total_workingset_refault_anon 167 [ 33.900256][ T3309] total_workingset_refault_file 815 [ 33.905515][ T3309] total_swap 446464 [ 33.909333][ T3309] total_swapcached 8192 [ 33.913547][ T3309] total_pgpgin 4633 [ 33.917447][ T3309] total_pgpgout 4625 [ 33.921454][ T3309] total_pgfault 3715 [ 33.925361][ T3309] total_pgmajfault 57 [ 33.929407][ T3309] total_inactive_anon 8192 [ 33.933883][ T3309] total_active_anon 0 [ 33.937931][ T3309] total_inactive_file 12288 [ 33.942473][ T3309] total_active_file 12288 [ 33.946948][ T3309] total_unevictable 0 [ 33.951051][ T3309] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.32,pid=3586,uid=0 [ 33.966276][ T3309] Memory cgroup out of memory: Killed process 3586 (syz.2.32) total-vm:97928kB, anon-rss:1340kB, file-rss:24192kB, shmem-rss:12kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 34.000288][ T3633] batadv0: entered promiscuous mode [ 34.068470][ T3309] EXT4-fs error (device loop2): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 34.111749][ T3309] EXT4-fs (loop2): Remounting filesystem read-only [ 34.148356][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.161057][ T41] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 34.260539][ T3654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 34.319767][ T3303] loop0: p3 p4 < > [ 34.335947][ T3670] syz.3.58 uses obsolete (PF_INET,SOCK_PACKET) [ 34.342697][ T3303] loop0: p3 start 11362048 is beyond EOD, truncated [ 34.354032][ T3637] loop0: p3 p4 < > [ 34.358068][ T3637] loop0: p3 start 11362048 is beyond EOD, truncated [ 34.365001][ T3673] set_capacity_and_notify: 3 callbacks suppressed [ 34.365018][ T3673] loop4: detected capacity change from 0 to 512 [ 34.403279][ T3673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.426332][ T3673] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.450945][ T3681] netlink: 256 bytes leftover after parsing attributes in process `syz.3.62'. [ 34.462447][ T3681] loop3: detected capacity change from 0 to 256 [ 34.678608][ T3682] netlink: 'syz.4.59': attribute type 1 has an invalid length. [ 34.690606][ T3683] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.200265][ T3673] syz.4.59 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 35.214505][ T3673] CPU: 0 UID: 0 PID: 3673 Comm: syz.4.59 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.214539][ T3673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 35.214553][ T3673] Call Trace: [ 35.214560][ T3673] [ 35.214568][ T3673] __dump_stack+0x1d/0x30 [ 35.214591][ T3673] dump_stack_lvl+0x95/0xd0 [ 35.214614][ T3673] dump_stack+0x15/0x1b [ 35.214674][ T3673] dump_header+0x80/0x240 [ 35.214693][ T3673] oom_kill_process+0x295/0x350 [ 35.214715][ T3673] out_of_memory+0x97d/0xb80 [ 35.214774][ T3673] try_charge_memcg+0x62e/0xa10 [ 35.214872][ T3673] obj_cgroup_charge_pages+0x23/0xc0 [ 35.214899][ T3673] __memcg_kmem_charge_page+0x9e/0x170 [ 35.214925][ T3673] __alloc_frozen_pages_noprof+0x18a/0x350 [ 35.215033][ T3673] alloc_pages_mpol+0xb3/0x260 [ 35.215060][ T3673] alloc_pages_noprof+0x8f/0x130 [ 35.215176][ T3673] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 35.215221][ T3673] __kvmalloc_node_noprof+0x471/0x680 [ 35.215254][ T3673] ? ip_set_alloc+0x24/0x30 [ 35.215281][ T3673] ? ip_set_alloc+0x24/0x30 [ 35.215354][ T3673] ip_set_alloc+0x24/0x30 [ 35.215395][ T3673] hash_netiface_create+0x282/0x740 [ 35.215421][ T3673] ? __pfx_hash_netiface_create+0x10/0x10 [ 35.215558][ T3673] ip_set_create+0x3cf/0x970 [ 35.215594][ T3673] ? __nla_parse+0x40/0x60 [ 35.215700][ T3673] nfnetlink_rcv_msg+0x509/0x5d0 [ 35.215753][ T3673] netlink_rcv_skb+0x123/0x220 [ 35.215780][ T3673] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 35.215818][ T3673] nfnetlink_rcv+0x167/0x1720 [ 35.215851][ T3673] ? __kfree_skb+0x109/0x150 [ 35.215882][ T3673] ? nlmon_xmit+0x4f/0x60 [ 35.215948][ T3673] ? consume_skb+0x49/0x140 [ 35.215977][ T3673] ? nlmon_xmit+0x4f/0x60 [ 35.216012][ T3673] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 35.216062][ T3673] ? __dev_queue_xmit+0x139a/0x1f20 [ 35.216095][ T3673] ? __dev_queue_xmit+0x148/0x1f20 [ 35.216153][ T3673] ? ref_tracker_free+0x37d/0x3e0 [ 35.216182][ T3673] ? __netlink_deliver_tap+0x4dc/0x500 [ 35.216220][ T3673] netlink_unicast+0x5c0/0x690 [ 35.216256][ T3673] netlink_sendmsg+0x5c8/0x6f0 [ 35.216324][ T3673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.216342][ T3673] ____sys_sendmsg+0x5af/0x600 [ 35.216427][ T3673] ___sys_sendmsg+0x195/0x1e0 [ 35.216453][ T3673] __x64_sys_sendmsg+0xd4/0x160 [ 35.216479][ T3673] x64_sys_call+0x17ba/0x3000 [ 35.216506][ T3673] do_syscall_64+0xc0/0x2a0 [ 35.216542][ T3673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.216590][ T3673] RIP: 0033:0x7f5ece6faeb9 [ 35.216606][ T3673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.216715][ T3673] RSP: 002b:00007f5ecd14f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.216816][ T3673] RAX: ffffffffffffffda RBX: 00007f5ece975fa0 RCX: 00007f5ece6faeb9 [ 35.216830][ T3673] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000005 [ 35.216843][ T3673] RBP: 00007f5ece768c1f R08: 0000000000000000 R09: 0000000000000000 [ 35.216857][ T3673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.216869][ T3673] R13: 00007f5ece976038 R14: 00007f5ece975fa0 R15: 00007ffde5fa9988 [ 35.216891][ T3673] [ 35.216899][ T3673] memory: usage 307200kB, limit 307200kB, failcnt 315 [ 35.243154][ T3698] loop0: detected capacity change from 0 to 512 [ 35.244165][ T3673] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 35.248305][ T3698] ext4: Unknown parameter 'smackfsfloor' [ 35.252411][ T3673] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 35.252429][ T3673] Memory cgroup stats for /syz4: [ 35.290906][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 35.290923][ T29] audit: type=1400 audit(1770437043.740:465): avc: denied { execute } for pid=3699 comm="syz.2.69" path="/6/cpuset.memory_pressure" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.336961][ T3702] loop2: detected capacity change from 0 to 512 [ 35.341368][ T3673] cache 36864 [ 35.344154][ T3702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.347947][ T3673] rss 0 [ 35.347958][ T3673] shmem 0 [ 35.347965][ T3673] mapped_file 1642496 [ 35.347974][ T3673] dirty 0 [ 35.436569][ T3702] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.70: corrupted in-inode xattr: e_value size too large [ 35.437783][ T3673] writeback 0 [ 35.437795][ T3673] workingset_refault_anon 281 [ 35.437804][ T3673] workingset_refault_file 1783 [ 35.501998][ T3702] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.70: couldn't read orphan inode 15 (err -117) [ 35.507130][ T3673] swap 454656 [ 35.507141][ T3673] swapcached 0 [ 35.507170][ T3673] pgpgin 6318 [ 35.507177][ T3673] pgpgout 6309 [ 35.507183][ T3673] pgfault 4928 [ 35.575237][ T3702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.580091][ T3673] pgmajfault 77 [ 35.610222][ T29] audit: type=1400 audit(1770437044.080:466): avc: denied { rename } for pid=3701 comm="syz.2.70" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.613386][ T3673] inactive_anon 0 [ 35.620662][ T3702] tipc: Started in network mode [ 35.623162][ T3673] active_anon 0 [ 35.623172][ T3673] inactive_file 16384 [ 35.626164][ T3702] tipc: Node identity 4620220c6659, cluster identity 4711 [ 35.630153][ T3673] active_file 20480 [ 35.633212][ T3702] tipc: Enabled bearer , priority 0 [ 35.647228][ T3673] unevictable 0 [ 35.657159][ T29] audit: type=1400 audit(1770437044.130:467): avc: denied { ioctl } for pid=3701 comm="syz.2.70" path="socket:[5522]" dev="sockfs" ino=5522 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.660052][ T3673] hierarchical_memory_limit 314572800 [ 35.693274][ T3702] syzkaller0: entered promiscuous mode [ 35.701125][ T3673] hierarchical_memsw_limit 9223372036854771712 [ 35.701138][ T3673] total_cache 36864 [ 35.701145][ T3673] total_rss 0 [ 35.701152][ T3673] total_shmem 0 [ 35.701159][ T3673] total_mapped_file 1642496 [ 35.701219][ T3673] total_dirty 0 [ 35.701226][ T3673] total_writeback 0 [ 35.701233][ T3673] total_workingset_refault_anon 281 [ 35.701242][ T3673] total_workingset_refault_file 1783 [ 35.704763][ T3702] syzkaller0: entered allmulticast mode [ 35.726885][ T3673] total_swap 454656 [ 35.736218][ T3713] loop0: detected capacity change from 0 to 128 [ 35.738840][ T3673] total_swapcached 0 [ 35.738851][ T3673] total_pgpgin 6318 [ 35.738857][ T3673] total_pgpgout 6309 [ 35.738864][ T3673] total_pgfault 4928 [ 35.738871][ T3673] total_pgmajfault 77 [ 35.738878][ T3673] total_inactive_anon 0 [ 35.738909][ T3673] total_active_anon 0 [ 35.738918][ T3673] total_inactive_file 16384 [ 35.749426][ T3713] FAT-fs (loop0): bogus number of reserved sectors [ 35.750154][ T3673] total_active_file 20480 [ 35.750164][ T3673] total_unevictable 0 [ 35.754050][ T3713] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 35.760626][ T3673] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 35.764110][ T3713] FAT-fs (loop0): Can't find a valid FAT filesystem [ 35.811254][ T3702] tipc: Resetting bearer [ 35.813864][ T3673] ,cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.59,pid=3668,uid=0 [ 35.813948][ T3673] Memory cgroup out of memory: Killed process 3668 (syz.4.59) total-vm:97928kB, anon-rss:1212kB, file-rss:23948kB, shmem-rss:128kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 35.972230][ T29] audit: type=1400 audit(1770437044.450:468): avc: denied { read } for pid=3701 comm="syz.2.70" name="file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.994575][ T29] audit: type=1400 audit(1770437044.450:469): avc: denied { open } for pid=3701 comm="syz.2.70" path="/7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.098196][ T29] audit: type=1400 audit(1770437044.560:470): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.129040][ T3701] tipc: Resetting bearer [ 36.141624][ T3701] tipc: Disabling bearer [ 36.184067][ T3314] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 36.209371][ T29] audit: type=1400 audit(1770437044.680:471): avc: denied { bind } for pid=3725 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.211813][ T3726] netlink: 'syz.0.79': attribute type 1 has an invalid length. [ 36.228884][ T29] audit: type=1400 audit(1770437044.680:472): avc: denied { read } for pid=3725 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.236471][ T3726] netlink: 'syz.0.79': attribute type 2 has an invalid length. [ 36.238015][ T3314] EXT4-fs (loop4): Remounting filesystem read-only [ 36.274033][ T29] audit: type=1400 audit(1770437044.730:473): avc: denied { bind } for pid=3727 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.293245][ T29] audit: type=1400 audit(1770437044.730:474): avc: denied { name_bind } for pid=3727 comm="syz.3.80" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 36.327474][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.337432][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 36.359121][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.368894][ T3640] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.403528][ T3735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 36.415563][ T3737] netlink: 'syz.4.78': attribute type 1 has an invalid length. [ 36.423194][ T3737] netlink: 'syz.4.78': attribute type 2 has an invalid length. [ 36.457905][ T3741] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 36.488547][ T3748] loop4: detected capacity change from 0 to 512 [ 36.506899][ T3748] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.533753][ T3748] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 36.542809][ T3748] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.572797][ T3748] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.86: corrupted inode contents [ 36.587506][ T3748] EXT4-fs (loop4): Remounting filesystem read-only [ 36.594540][ T3762] netlink: 'syz.2.92': attribute type 26 has an invalid length. [ 36.602533][ T3748] EXT4-fs (loop4): 1 truncate cleaned up [ 36.608434][ T41] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 36.619080][ T41] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 36.631401][ T41] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 36.642417][ T3748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.709664][ T3743] loop0: detected capacity change from 0 to 2048 [ 36.761710][ T3301] loop0: p3 p4 < > [ 36.765633][ T3301] loop0: p3 start 11362048 is beyond EOD, truncated [ 36.784163][ T3743] loop0: p3 p4 < > [ 36.788103][ T3743] loop0: p3 start 11362048 is beyond EOD, truncated [ 36.810070][ T2999] loop0: p3 p4 < > [ 36.814232][ T2999] loop0: p3 start 11362048 is beyond EOD, truncated [ 36.824909][ T3765] loop2: detected capacity change from 0 to 512 [ 36.853853][ T3765] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.872060][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.893789][ T3765] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.93: invalid indirect mapped block 4294967295 (level 1) [ 36.912566][ T3765] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.93: invalid indirect mapped block 4294967295 (level 1) [ 36.939429][ T3765] EXT4-fs (loop2): 2 truncates cleaned up [ 36.954585][ T3785] netlink: 'syz.3.97': attribute type 1 has an invalid length. [ 36.962267][ T3785] netlink: 'syz.3.97': attribute type 2 has an invalid length. [ 36.970373][ T3787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 36.996564][ T3787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3787 comm=syz.4.95 [ 37.015425][ T3789] loop1: detected capacity change from 0 to 512 [ 37.016143][ T3765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.026078][ T3789] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.058260][ T3794] tmpfs: Bad value for 'mpol' [ 37.080568][ T3794] loop3: detected capacity change from 0 to 512 [ 37.096831][ T3794] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.118333][ T3789] EXT4-fs (loop1): 1 truncate cleaned up [ 37.125246][ T3794] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.131479][ T3789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.152739][ T3794] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 37.159568][ T3794] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.99: bad orphan inode 4095 [ 37.192087][ T3794] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.218933][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.235126][ T3316] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 37.242799][ T3765] bridge0: entered promiscuous mode [ 37.252131][ T3765] macvtap1: entered promiscuous mode [ 37.261007][ T3765] macvtap1: entered allmulticast mode [ 37.266920][ T3765] bridge0: entered allmulticast mode [ 37.346551][ T3765] bridge0: port 3(macvtap1) entered blocking state [ 37.355010][ T3765] bridge0: port 3(macvtap1) entered disabled state [ 37.362733][ T3812] FAT-fs (loop3): bogus number of reserved sectors [ 37.369301][ T3812] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 37.378636][ T3812] FAT-fs (loop3): Can't find a valid FAT filesystem [ 37.432588][ T3765] bridge0: left allmulticast mode [ 37.440925][ T3765] bridge0: left promiscuous mode [ 37.569824][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.697287][ T3838] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 37.709918][ T3838] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.111: casefold flag without casefold feature [ 37.723645][ T3838] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.111: couldn't read orphan inode 15 (err -117) [ 37.736298][ T3838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.750940][ T3838] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.111: bg 0: block 5: invalid block bitmap [ 37.771877][ T3838] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 4: comm syz.3.111: lblock 0 mapped to illegal pblock 4 (length 1) [ 37.828249][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.847998][ T3850] EXT4-fs: inline encryption not supported [ 37.854136][ T3850] EXT4-fs: dax option not supported [ 37.877159][ T3853] netlink: 'syz.4.118': attribute type 1 has an invalid length. [ 37.884934][ T3853] netlink: 'syz.4.118': attribute type 2 has an invalid length. [ 37.898104][ T3851] FAT-fs (loop2): bogus number of reserved sectors [ 37.904734][ T3851] FAT-fs (loop2): Can't find a valid FAT filesystem [ 38.218890][ T3844] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.249804][ T3844] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.113: invalid block [ 38.265755][ T3844] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.113: invalid indirect mapped block 4294967295 (level 1) [ 38.272514][ T3856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.301915][ T3856] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.115: inode #778331508: comm syz.3.115: iget: illegal inode # [ 38.306591][ T3844] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.113: invalid indirect mapped block 4294967295 (level 1) [ 38.318409][ T3856] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.115: error while reading EA inode 778331508 err=-117 [ 38.335037][ T3844] EXT4-fs (loop1): 2 truncates cleaned up [ 38.349580][ T3862] EXT4-fs error (device loop3): ext4_xattr_block_list:766: inode #15: comm syz.3.115: corrupted xattr block 113: invalid header [ 38.358639][ T3844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.418582][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.454894][ T1037] IPVS: starting estimator thread 0... [ 38.499710][ T3890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=3890 comm=syz.3.127 [ 38.541495][ T3885] IPVS: using max 2784 ests per chain, 139200 per kthread [ 38.554105][ T3844] macvtap1: entered promiscuous mode [ 38.560465][ T3844] bridge0: entered promiscuous mode [ 38.569587][ T3844] macvtap1: entered allmulticast mode [ 38.575635][ T3844] bridge0: entered allmulticast mode [ 38.599425][ T3844] bridge0: port 3(macvtap1) entered blocking state [ 38.606782][ T3844] bridge0: port 3(macvtap1) entered disabled state [ 38.628491][ T3844] bridge0: left allmulticast mode [ 38.637641][ T3844] bridge0: left promiscuous mode [ 38.700298][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.773359][ T3908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.782763][ T3908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.919967][ T3911] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.942250][ T3911] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.136: invalid indirect mapped block 4294967295 (level 1) [ 38.958792][ T3911] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.136: invalid indirect mapped block 4294967295 (level 1) [ 38.976265][ T3911] EXT4-fs (loop3): 2 truncates cleaned up [ 38.986242][ T3911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.036689][ T3911] bridge0: entered promiscuous mode [ 39.045687][ T3911] macvtap1: entered promiscuous mode [ 39.055016][ T3911] macvtap1: entered allmulticast mode [ 39.061746][ T3911] bridge0: entered allmulticast mode [ 39.076985][ T3911] bridge0: port 3(macvtap1) entered blocking state [ 39.086573][ T3911] bridge0: port 3(macvtap1) entered disabled state [ 39.101117][ T3911] bridge0: left allmulticast mode [ 39.107329][ T3911] bridge0: left promiscuous mode [ 39.152629][ T3922] FAULT_INJECTION: forcing a failure. [ 39.152629][ T3922] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.165912][ T3922] CPU: 1 UID: 0 PID: 3922 Comm: syz.2.140 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.165933][ T3922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 39.165940][ T3922] Call Trace: [ 39.165956][ T3922] [ 39.165961][ T3922] __dump_stack+0x1d/0x30 [ 39.165978][ T3922] dump_stack_lvl+0x95/0xd0 [ 39.165991][ T3922] dump_stack+0x15/0x1b [ 39.166002][ T3922] should_fail_ex+0x263/0x280 [ 39.166020][ T3922] should_fail+0xb/0x20 [ 39.166094][ T3922] should_fail_usercopy+0x1a/0x20 [ 39.166152][ T3922] _copy_from_user+0x1c/0xb0 [ 39.166172][ T3922] get_user_ifreq+0x52/0x110 [ 39.166190][ T3922] inet_ioctl+0x24f/0x3a0 [ 39.166214][ T3922] sock_do_ioctl+0x73/0x230 [ 39.166246][ T3922] sock_ioctl+0x41b/0x610 [ 39.166268][ T3922] ? mutex_lock+0x57/0x90 [ 39.166310][ T3922] ? __pfx_sock_ioctl+0x10/0x10 [ 39.166331][ T3922] __se_sys_ioctl+0xce/0x140 [ 39.166414][ T3922] __x64_sys_ioctl+0x43/0x50 [ 39.166447][ T3922] x64_sys_call+0x14b0/0x3000 [ 39.166471][ T3922] do_syscall_64+0xc0/0x2a0 [ 39.166535][ T3922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.166557][ T3922] RIP: 0033:0x7f99632baeb9 [ 39.166576][ T3922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.166595][ T3922] RSP: 002b:00007f9961d0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.166618][ T3922] RAX: ffffffffffffffda RBX: 00007f9963535fa0 RCX: 00007f99632baeb9 [ 39.166631][ T3922] RDX: 0000200000000000 RSI: 000000000000891b RDI: 0000000000000003 [ 39.166692][ T3922] RBP: 00007f9961d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 39.166707][ T3922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.166765][ T3922] R13: 00007f9963536038 R14: 00007f9963535fa0 R15: 00007fff7f350ad8 [ 39.166784][ T3922] [ 39.398942][ T3930] set_capacity_and_notify: 9 callbacks suppressed [ 39.398960][ T3930] loop1: detected capacity change from 0 to 512 [ 39.453751][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.477398][ T3930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.506163][ T3930] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.535736][ T3931] loop2: detected capacity change from 0 to 512 [ 39.540188][ T3930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.141'. [ 39.564288][ T3931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.593706][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.603550][ T3931] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.143: invalid indirect mapped block 4294967295 (level 1) [ 39.633440][ T3931] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.143: invalid indirect mapped block 4294967295 (level 1) [ 39.649809][ T3672] Bluetooth: hci0: command 0x1003 tx timeout [ 39.656137][ T3640] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.667773][ T3931] EXT4-fs (loop2): 2 truncates cleaned up [ 39.680142][ T3931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.697157][ T3950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 39.772389][ T3953] SELinux: failed to load policy [ 39.816818][ T3931] bridge0: entered promiscuous mode [ 39.825254][ T3931] macvtap1: entered promiscuous mode [ 39.833314][ T3931] macvtap1: entered allmulticast mode [ 39.839456][ T3931] bridge0: entered allmulticast mode [ 39.888857][ T3931] bridge0: port 3(macvtap1) entered blocking state [ 39.907946][ T3931] bridge0: port 3(macvtap1) entered disabled state [ 39.973592][ T3931] bridge0: left allmulticast mode [ 39.981872][ T3931] bridge0: left promiscuous mode [ 40.083438][ T3966] loop3: detected capacity change from 0 to 512 [ 40.126699][ T3966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.126813][ T3981] netlink: 'syz.4.161': attribute type 4 has an invalid length. [ 40.152939][ T3983] netlink: 256 bytes leftover after parsing attributes in process `syz.4.162'. [ 40.170064][ T3983] loop4: detected capacity change from 0 to 256 [ 40.188232][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.190548][ T3966] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.154: invalid block [ 40.218805][ T3966] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.154: invalid indirect mapped block 4294967295 (level 1) [ 40.240154][ T3966] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.154: invalid indirect mapped block 4294967295 (level 1) [ 40.259712][ T3966] EXT4-fs (loop3): 2 truncates cleaned up [ 40.276480][ T3966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.322467][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 40.322480][ T29] audit: type=1326 audit(1770437048.800:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece6faeb9 code=0x7ffc0000 [ 40.352242][ T29] audit: type=1326 audit(1770437048.800:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece6faeb9 code=0x7ffc0000 [ 40.407194][ T3997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'. [ 40.416053][ T3997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 40.453051][ T4003] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 40.455187][ T4005] loop2: detected capacity change from 0 to 1024 [ 40.469927][ T4005] EXT4-fs: dax option not supported [ 40.484193][ T29] audit: type=1400 audit(1770437048.960:568): avc: denied { remount } for pid=4004 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.507955][ T4005] loop2: detected capacity change from 0 to 512 [ 40.519496][ T4005] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.531981][ T4005] EXT4-fs (loop2): 1 orphan inode deleted [ 40.537864][ T4005] EXT4-fs (loop2): 1 truncate cleaned up [ 40.553909][ T4005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.594130][ T3966] bridge0: entered promiscuous mode [ 40.603129][ T3966] macvtap1: entered promiscuous mode [ 40.611791][ T3966] macvtap1: entered allmulticast mode [ 40.617741][ T3966] bridge0: entered allmulticast mode [ 40.649763][ T29] audit: type=1400 audit(1770437049.110:569): avc: denied { name_bind } for pid=4004 comm="syz.2.169" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 40.725841][ T3966] bridge0: port 3(macvtap1) entered blocking state [ 40.732714][ T3966] bridge0: port 3(macvtap1) entered disabled state [ 40.757162][ T3966] bridge0: left allmulticast mode [ 40.762932][ T3966] bridge0: left promiscuous mode [ 40.795931][ T29] audit: type=1400 audit(1770437049.270:570): avc: denied { mount } for pid=4014 comm="syz.1.173" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 40.820547][ T29] audit: type=1400 audit(1770437049.270:571): avc: denied { remount } for pid=4014 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 40.837304][ T4017] loop0: detected capacity change from 0 to 128 [ 40.862517][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.863780][ T29] audit: type=1400 audit(1770437049.340:572): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 40.872499][ T4017] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.911072][ T4017] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.936686][ T36] kernel write not supported for file [eventfd] (pid: 36 comm: kworker/1:1) [ 40.952535][ T29] audit: type=1400 audit(1770437049.390:573): avc: denied { create } for pid=4024 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 40.972606][ T29] audit: type=1400 audit(1770437049.390:574): avc: denied { create } for pid=4024 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 40.995202][ T29] audit: type=1400 audit(1770437049.450:575): avc: denied { write } for pid=4024 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 41.081937][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.113010][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.132447][ T4035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.180'. [ 41.150710][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.164779][ T4036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.179'. [ 41.173926][ T4036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.179'. [ 41.182931][ T4036] netlink: 'syz.1.179': attribute type 3 has an invalid length. [ 41.212721][ T4041] loop0: detected capacity change from 0 to 128 [ 41.261498][ T4041] x_tables: duplicate underflow at hook 3 [ 41.273381][ T4048] loop4: detected capacity change from 0 to 512 [ 41.458008][ T4046] loop1: detected capacity change from 0 to 512 [ 41.480220][ T4046] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.510105][ T4046] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.185: invalid block [ 41.536842][ T4046] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.185: invalid indirect mapped block 4294967295 (level 1) [ 41.552365][ T4058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.552441][ T4058] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.603435][ T4046] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.185: invalid indirect mapped block 4294967295 (level 1) [ 41.632206][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.669010][ T4046] EXT4-fs (loop1): 2 truncates cleaned up [ 41.693985][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.710135][ T4046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.775218][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.812024][ T4062] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 41.876516][ T4046] macvtap1: entered promiscuous mode [ 41.882745][ T4046] bridge0: entered promiscuous mode [ 41.890716][ T4046] macvtap1: entered allmulticast mode [ 41.896984][ T4046] bridge0: entered allmulticast mode [ 41.917332][ T4046] bridge0: port 3(macvtap1) entered blocking state [ 41.925029][ T4046] bridge0: port 3(macvtap1) entered disabled state [ 41.962594][ T4046] bridge0: left allmulticast mode [ 41.968283][ T4046] bridge0: left promiscuous mode [ 42.126188][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.191539][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.314272][ T4084] capability: warning: `syz.2.197' uses deprecated v2 capabilities in a way that may be insecure [ 42.325864][ T53] bridge_slave_1: left allmulticast mode [ 42.331730][ T53] bridge_slave_1: left promiscuous mode [ 42.337537][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.346166][ T4083] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.388667][ T4083] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.198: bg 0: block 384: padding at end of block bitmap is not set [ 42.416139][ T53] bridge_slave_0: left allmulticast mode [ 42.421985][ T53] bridge_slave_0: left promiscuous mode [ 42.427729][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.437325][ T4083] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 42.446495][ T4083] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.198: attempt to clear invalid blocks 983260 len 1 [ 42.461521][ T4083] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.198: Invalid inode table block 0 in block_group 0 [ 42.481227][ T4083] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 42.514515][ T4094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.526692][ T4083] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 42.541196][ T4094] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.558063][ T4083] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.198: Invalid inode table block 0 in block_group 0 [ 42.604428][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.614377][ T4058] syz.4.190 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 42.628511][ T4058] CPU: 0 UID: 0 PID: 4058 Comm: syz.4.190 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.628538][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 42.628551][ T4058] Call Trace: [ 42.628558][ T4058] [ 42.628570][ T4058] __dump_stack+0x1d/0x30 [ 42.628596][ T4058] dump_stack_lvl+0x95/0xd0 [ 42.628616][ T4058] dump_stack+0x15/0x1b [ 42.628635][ T4058] dump_header+0x80/0x240 [ 42.628660][ T4058] oom_kill_process+0x295/0x350 [ 42.628697][ T4058] out_of_memory+0x97d/0xb80 [ 42.628722][ T4058] try_charge_memcg+0x62e/0xa10 [ 42.628797][ T4058] obj_cgroup_charge_pages+0x23/0xc0 [ 42.628825][ T4058] __memcg_kmem_charge_page+0x9e/0x170 [ 42.628859][ T4058] __alloc_frozen_pages_noprof+0x18a/0x350 [ 42.628963][ T4058] alloc_pages_mpol+0xb3/0x260 [ 42.628992][ T4058] alloc_pages_noprof+0x8f/0x130 [ 42.629095][ T4058] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 42.629133][ T4058] __kvmalloc_node_noprof+0x471/0x680 [ 42.629158][ T4058] ? ip_set_alloc+0x24/0x30 [ 42.629246][ T4058] ? ip_set_alloc+0x24/0x30 [ 42.629274][ T4058] ip_set_alloc+0x24/0x30 [ 42.629298][ T4058] hash_netiface_create+0x282/0x740 [ 42.629373][ T4058] ? __pfx_hash_netiface_create+0x10/0x10 [ 42.629426][ T4058] ip_set_create+0x3cf/0x970 [ 42.629470][ T4058] ? __nla_parse+0x40/0x60 [ 42.629538][ T4058] nfnetlink_rcv_msg+0x509/0x5d0 [ 42.629584][ T4058] netlink_rcv_skb+0x123/0x220 [ 42.629649][ T4058] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 42.629686][ T4058] nfnetlink_rcv+0x167/0x1720 [ 42.629756][ T4058] ? __kfree_skb+0x109/0x150 [ 42.629786][ T4058] ? nlmon_xmit+0x4f/0x60 [ 42.629940][ T4058] ? consume_skb+0x49/0x140 [ 42.629972][ T4058] ? nlmon_xmit+0x4f/0x60 [ 42.629999][ T4058] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 42.630083][ T4058] ? __dev_queue_xmit+0x139a/0x1f20 [ 42.630185][ T4058] ? __dev_queue_xmit+0x148/0x1f20 [ 42.630219][ T4058] ? ref_tracker_free+0x37d/0x3e0 [ 42.630254][ T4058] ? __netlink_deliver_tap+0x4dc/0x500 [ 42.630339][ T4058] netlink_unicast+0x5c0/0x690 [ 42.630486][ T4058] netlink_sendmsg+0x5c8/0x6f0 [ 42.630540][ T4058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.630551][ T4058] ____sys_sendmsg+0x5af/0x600 [ 42.630565][ T4058] ___sys_sendmsg+0x195/0x1e0 [ 42.630587][ T4058] __x64_sys_sendmsg+0xd4/0x160 [ 42.630610][ T4058] x64_sys_call+0x17ba/0x3000 [ 42.630681][ T4058] do_syscall_64+0xc0/0x2a0 [ 42.630707][ T4058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.630779][ T4058] RIP: 0033:0x7f5ece6faeb9 [ 42.630797][ T4058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.630817][ T4058] RSP: 002b:00007f5ecd14f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.630847][ T4058] RAX: ffffffffffffffda RBX: 00007f5ece975fa0 RCX: 00007f5ece6faeb9 [ 42.630872][ T4058] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000005 [ 42.630903][ T4058] RBP: 00007f5ece768c1f R08: 0000000000000000 R09: 0000000000000000 [ 42.630915][ T4058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.630985][ T4058] R13: 00007f5ece976038 R14: 00007f5ece975fa0 R15: 00007ffde5fa9988 [ 42.631007][ T4058] [ 42.943898][ T4058] memory: usage 307196kB, limit 307200kB, failcnt 634 [ 42.951568][ T4058] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 42.959504][ T4058] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 42.967181][ T4058] Memory cgroup stats for /syz4: [ 42.969298][ T4083] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 42.970812][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.974979][ T4083] EXT4-fs error (device loop1): ext4_truncate:4635: inode #11: comm syz.1.198: mark_inode_dirty error [ 42.985713][ T4058] cache 8192 [ 42.997028][ T4083] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 43.003352][ T4058] rss 8192 [ 43.009206][ T4083] EXT4-fs (loop1): 1 truncate cleaned up [ 43.015553][ T4058] shmem 0 [ 43.015563][ T4058] mapped_file 0 [ 43.015570][ T4058] dirty 0 [ 43.015576][ T4058] writeback 4096 [ 43.015582][ T4058] workingset_refault_anon 480 [ 43.015590][ T4058] workingset_refault_file 2563 [ 43.026496][ T4083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.027197][ T4058] swap 454656 [ 43.062360][ T4058] swapcached 8192 [ 43.066083][ T4058] pgpgin 14613 [ 43.069463][ T4058] pgpgout 14609 [ 43.073001][ T4058] pgfault 13679 [ 43.076471][ T4058] pgmajfault 151 [ 43.080116][ T4058] inactive_anon 0 [ 43.083826][ T4058] active_anon 0 [ 43.087310][ T4058] inactive_file 8192 [ 43.091267][ T4058] active_file 0 [ 43.094762][ T4058] unevictable 0 [ 43.098248][ T4058] hierarchical_memory_limit 314572800 [ 43.103720][ T4058] hierarchical_memsw_limit 9223372036854771712 [ 43.109891][ T4058] total_cache 8192 [ 43.114009][ T4058] total_rss 8192 [ 43.117587][ T4058] total_shmem 0 [ 43.121102][ T4058] total_mapped_file 0 [ 43.125114][ T4058] total_dirty 0 [ 43.128563][ T4058] total_writeback 4096 [ 43.132769][ T4058] total_workingset_refault_anon 480 [ 43.138133][ T4058] total_workingset_refault_file 2563 [ 43.143463][ T4058] total_swap 454656 [ 43.147356][ T4058] total_swapcached 8192 [ 43.151540][ T4058] total_pgpgin 14613 [ 43.155445][ T4058] total_pgpgout 14609 [ 43.159409][ T4058] total_pgfault 13679 [ 43.163401][ T4058] total_pgmajfault 151 [ 43.167525][ T4058] total_inactive_anon 0 [ 43.170897][ T3672] Bluetooth: hci0: command 0x1003 tx timeout [ 43.171706][ T4058] total_active_anon 0 [ 43.177676][ T3640] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.188035][ T4058] total_inactive_file 8192 [ 43.192496][ T4058] total_active_file 0 [ 43.196513][ T4058] total_unevictable 0 [ 43.200514][ T4058] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.190,pid=4057,uid=0 [ 43.215186][ T4058] Memory cgroup out of memory: Killed process 4057 (syz.4.190) total-vm:96324kB, anon-rss:1216kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 43.234255][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.258698][ T4108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 43.267999][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.278454][ T53] bond0 (unregistering): Released all slaves [ 43.306799][ T4063] chnl_net:caif_netlink_parms(): no params data found [ 43.327200][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.336948][ T4108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.200'. [ 43.381323][ T53] hsr_slave_0: left promiscuous mode [ 43.394548][ T53] hsr_slave_1: left promiscuous mode [ 43.417649][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.425285][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.443283][ T4122] netlink: 'syz.1.201': attribute type 9 has an invalid length. [ 43.458349][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.465952][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.487665][ T53] veth1_macvtap: left promiscuous mode [ 43.493741][ T53] veth0_macvtap: left promiscuous mode [ 43.499542][ T53] veth1_vlan: left promiscuous mode [ 43.505062][ T53] veth0_vlan: left promiscuous mode [ 43.600973][ T53] team0 (unregistering): Port device team_slave_1 removed [ 43.610632][ T53] team0 (unregistering): Port device team_slave_0 removed [ 43.654669][ T4128] team0: entered promiscuous mode [ 43.659829][ T4128] team_slave_0: entered promiscuous mode [ 43.665752][ T4128] team_slave_1: entered promiscuous mode [ 43.673499][ T4063] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.680943][ T4063] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.691374][ T4063] bridge_slave_0: entered allmulticast mode [ 43.698030][ T4063] bridge_slave_0: entered promiscuous mode [ 43.705632][ T4063] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.712755][ T4063] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.720127][ T4063] bridge_slave_1: entered allmulticast mode [ 43.726673][ T4063] bridge_slave_1: entered promiscuous mode [ 43.744056][ T4063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.754622][ T4063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.773664][ T4063] team0: Port device team_slave_0 added [ 43.780325][ T4063] team0: Port device team_slave_1 added [ 43.795590][ T4063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.802622][ T4063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.828772][ T4063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.842329][ T4063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.849302][ T4063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.875333][ T4063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.927638][ T4063] hsr_slave_0: entered promiscuous mode [ 43.935532][ T4063] hsr_slave_1: entered promiscuous mode [ 43.973469][ T3303] loop2: p3 p4 < > [ 43.979501][ T3303] loop2: p3 start 11362048 is beyond EOD, truncated [ 43.993454][ T4138] loop2: p3 p4 < > [ 43.998627][ T4138] loop2: p3 start 11362048 is beyond EOD, truncated [ 44.094071][ T4063] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.103371][ T4063] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.124355][ T4063] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.137552][ T4160] rock: directory entry would overflow storage [ 44.143942][ T4160] rock: sig=0x5245, size=8, remaining=5 [ 44.157443][ T4063] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.193827][ T4169] FAULT_INJECTION: forcing a failure. [ 44.193827][ T4169] name failslab, interval 1, probability 0, space 0, times 1 [ 44.206643][ T4169] CPU: 0 UID: 0 PID: 4169 Comm: syz.1.207 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.206673][ T4169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 44.206687][ T4169] Call Trace: [ 44.206696][ T4169] [ 44.206705][ T4169] __dump_stack+0x1d/0x30 [ 44.206766][ T4169] dump_stack_lvl+0x95/0xd0 [ 44.206790][ T4169] dump_stack+0x15/0x1b [ 44.206810][ T4169] should_fail_ex+0x263/0x280 [ 44.206882][ T4169] should_failslab+0x8c/0xb0 [ 44.206908][ T4169] __kmalloc_cache_noprof+0x64/0x4a0 [ 44.206933][ T4169] ? __se_sys_memfd_create+0x1df/0x3b0 [ 44.207010][ T4169] ? fput+0x8f/0xc0 [ 44.207074][ T4169] __se_sys_memfd_create+0x1df/0x3b0 [ 44.207109][ T4169] __x64_sys_memfd_create+0x31/0x40 [ 44.207186][ T4169] x64_sys_call+0x28cb/0x3000 [ 44.207246][ T4169] do_syscall_64+0xc0/0x2a0 [ 44.207279][ T4169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.207319][ T4169] RIP: 0033:0x7f85af1faeb9 [ 44.207338][ T4169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.207422][ T4169] RSP: 002b:00007f85adc56e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 44.207441][ T4169] RAX: ffffffffffffffda RBX: 0000000000000688 RCX: 00007f85af1faeb9 [ 44.207453][ T4169] RDX: 00007f85adc56ee0 RSI: 0000000000000000 RDI: 00007f85af267333 [ 44.207466][ T4169] RBP: 0000200000000100 R08: 00000000ffffffff R09: 0000000000000000 [ 44.207533][ T4169] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 44.207544][ T4169] R13: 00007f85adc56ee0 R14: 00007f85adc56ea0 R15: 0000200000000880 [ 44.207563][ T4169] [ 44.382030][ T4063] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.389313][ T4063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.396607][ T4063] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.403669][ T4063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.425152][ T4151] set_capacity_and_notify: 6 callbacks suppressed [ 44.425205][ T4151] loop3: detected capacity change from 0 to 512 [ 44.439984][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.449196][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.465000][ T4151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.476548][ T4119] team0: left promiscuous mode [ 44.481458][ T4119] team_slave_0: left promiscuous mode [ 44.486927][ T4119] team_slave_1: left promiscuous mode [ 44.504578][ T4151] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.205: invalid indirect mapped block 4294967295 (level 1) [ 44.517965][ T4063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.542435][ T4151] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.205: invalid indirect mapped block 4294967295 (level 1) [ 44.559596][ T4063] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.573284][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.580374][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.581579][ T4151] EXT4-fs (loop3): 2 truncates cleaned up [ 44.613597][ T4063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.624242][ T4063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.641556][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.642979][ T4151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.648659][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.730745][ T4063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.771362][ T4200] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 44.837522][ T3450] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.851853][ T4151] bridge0: entered promiscuous mode [ 44.857823][ T4151] macvtap1: entered promiscuous mode [ 44.864303][ T4151] macvtap1: entered allmulticast mode [ 44.870473][ T4151] bridge0: entered allmulticast mode [ 44.885436][ T4151] bridge0: port 3(macvtap1) entered blocking state [ 44.893135][ T4151] bridge0: port 3(macvtap1) entered disabled state [ 44.906892][ T4151] bridge0: left allmulticast mode [ 44.913713][ T4151] bridge0: left promiscuous mode [ 44.975972][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.980260][ T4203] loop4: detected capacity change from 0 to 2048 [ 45.011762][ T3301] loop4: p3 p4 < > [ 45.017959][ T3301] loop4: p3 start 11362048 is beyond EOD, truncated [ 45.043058][ T4203] loop4: p3 p4 < > [ 45.047202][ T4203] loop4: p3 start 11362048 is beyond EOD, truncated [ 45.065292][ T4063] veth0_vlan: entered promiscuous mode [ 45.092966][ T4063] veth1_vlan: entered promiscuous mode [ 45.114707][ T4063] veth0_macvtap: entered promiscuous mode [ 45.122435][ T4063] veth1_macvtap: entered promiscuous mode [ 45.135123][ T4063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.148048][ T4063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.161820][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.177475][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.196813][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.198210][ T4223] loop3: detected capacity change from 0 to 512 [ 45.210581][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.227677][ T4223] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 45.255248][ T4226] loop5: detected capacity change from 0 to 512 [ 45.268610][ T4226] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.295465][ T4063] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 45.358684][ T4237] loop3: detected capacity change from 0 to 512 [ 45.365745][ T4237] EXT4-fs: Ignoring removed orlov option [ 45.372523][ T4237] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 45.388615][ T4237] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 45.405006][ T4237] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.221: corrupted in-inode xattr: e_value size too large [ 45.419448][ T4237] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.221: couldn't read orphan inode 15 (err -117) [ 45.432404][ T4237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.447044][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 45.447109][ T29] audit: type=1400 audit(1770437053.920:617): avc: denied { write } for pid=4236 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.480504][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.553524][ T4235] loop5: detected capacity change from 0 to 2048 [ 45.573725][ T4248] netlink: 176 bytes leftover after parsing attributes in process `syz.1.224'. [ 45.583268][ T3301] loop5: p3 p4 < > [ 45.587230][ T3301] loop5: p3 start 11362048 is beyond EOD, truncated [ 45.595444][ T4245] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.224'. [ 45.608687][ T4245] netlink: zone id is out of range [ 45.613979][ T4245] netlink: zone id is out of range [ 45.619310][ T4235] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) [ 45.628295][ T4245] netlink: zone id is out of range [ 45.633512][ T4245] netlink: zone id is out of range [ 45.638748][ T4245] netlink: zone id is out of range [ 45.646456][ T4245] netlink: zone id is out of range [ 45.646477][ T2999] loop5: p3 p4 < > [ 45.652895][ T4245] netlink: zone id is out of range [ 45.661353][ T4245] netlink: zone id is out of range [ 45.666516][ T4245] netlink: zone id is out of range [ 45.666643][ T2999] loop5: p3 start 11362048 is beyond EOD, truncated [ 45.681173][ T4252] loop3: detected capacity change from 0 to 512 [ 45.726880][ T4252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.740751][ T4252] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.763000][ T4252] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz.3.227: Directory hole found for htree leaf block 0 [ 45.786764][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.832744][ T29] audit: type=1400 audit(1770437054.310:618): avc: denied { ioctl } for pid=4269 comm="syz.3.235" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=7635 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 45.876632][ T29] audit: type=1400 audit(1770437054.350:619): avc: denied { bind } for pid=4272 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.927849][ T4273] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.973658][ T29] audit: type=1400 audit(1770437054.450:620): avc: denied { mount } for pid=4279 comm="syz.4.239" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.997298][ T4273] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.043810][ T4273] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.093909][ T4273] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.148520][ T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.160592][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.171806][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.183067][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.265450][ T4288] loop3: detected capacity change from 0 to 1024 [ 46.272761][ T4288] EXT4-fs: Ignoring removed nobh option [ 46.280055][ T4288] EXT4-fs: Mount option(s) incompatible with ext2 [ 46.296627][ T29] audit: type=1326 audit(1770437054.770:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343241aeb9 code=0x7ffc0000 [ 46.320282][ T29] audit: type=1326 audit(1770437054.770:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343241aeb9 code=0x7ffc0000 [ 46.351563][ T29] audit: type=1326 audit(1770437054.800:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f343241aeb9 code=0x7ffc0000 [ 46.375234][ T29] audit: type=1326 audit(1770437054.800:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343241aeb9 code=0x7ffc0000 [ 46.398571][ T29] audit: type=1326 audit(1770437054.800:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343241aeb9 code=0x7ffc0000 [ 46.422015][ T29] audit: type=1326 audit(1770437054.800:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f343241aeb9 code=0x7ffc0000 [ 46.516083][ T4299] netlink: 'syz.3.244': attribute type 2 has an invalid length. [ 46.769117][ T4317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.253'. [ 46.778138][ T4317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 46.796162][ T4304] loop5: detected capacity change from 0 to 512 [ 46.811629][ T4317] 9p: Bad value for 'wfdno' [ 46.831131][ T4304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.834156][ T4321] veth0: entered promiscuous mode [ 46.849518][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 46.853452][ T3640] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.858580][ T3672] Bluetooth: hci0: command 0x1003 tx timeout [ 46.893406][ T4304] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.246: invalid block [ 46.908762][ T4304] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.246: invalid indirect mapped block 4294967295 (level 1) [ 46.926432][ T4304] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.246: invalid indirect mapped block 4294967295 (level 1) [ 46.930541][ T4324] syzkaller0: entered promiscuous mode [ 46.946793][ T4324] syzkaller0: entered allmulticast mode [ 46.948681][ T4304] EXT4-fs (loop5): 2 truncates cleaned up [ 46.975409][ T4304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.989531][ T4313] loop3: detected capacity change from 0 to 2048 [ 47.021953][ T4313] loop3: p3 p4 < > [ 47.026092][ T4313] loop3: p3 start 11362048 is beyond EOD, truncated [ 47.117393][ T4304] bridge0: entered promiscuous mode [ 47.123851][ T4304] macvtap1: entered promiscuous mode [ 47.129645][ T4304] macvtap1: entered allmulticast mode [ 47.136000][ T4304] bridge0: entered allmulticast mode [ 47.148992][ T4304] bridge0: port 3(macvtap1) entered blocking state [ 47.158042][ T4304] bridge0: port 3(macvtap1) entered disabled state [ 47.220326][ T4304] bridge0: left allmulticast mode [ 47.227126][ T4304] bridge0: left promiscuous mode [ 47.402331][ T4063] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.433632][ T4350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.447558][ T4350] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.651222][ T4365] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.660365][ T4365] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 47.691733][ T4365] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 47.711359][ T4365] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 47.729759][ T4365] System zones: 0-2, 18-18, 34-35 [ 47.768012][ T4365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.782794][ T4365] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.265: bg 0: block 353: padding at end of block bitmap is not set [ 47.802897][ T4365] netlink: 'syz.3.265': attribute type 5 has an invalid length. [ 47.816692][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 47.862379][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.888554][ T4368] netlink: 'syz.5.260': attribute type 1 has an invalid length. [ 47.914821][ T4378] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 47.922681][ T4378] netlink: 'syz.3.270': attribute type 2 has an invalid length. [ 47.972413][ T4370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.000488][ T4385] netlink: 256 bytes leftover after parsing attributes in process `syz.4.273'. [ 48.021853][ T4370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.151205][ T4389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 48.189076][ T4381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.250898][ T4381] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.271: invalid indirect mapped block 4294967295 (level 1) [ 48.271347][ T4381] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.271: invalid indirect mapped block 4294967295 (level 1) [ 48.292704][ T4381] EXT4-fs (loop1): 2 truncates cleaned up [ 48.308053][ T4381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.436441][ T4381] macvtap1: entered promiscuous mode [ 48.444760][ T4381] bridge0: entered promiscuous mode [ 48.453031][ T4381] macvtap1: entered allmulticast mode [ 48.459300][ T4381] bridge0: entered allmulticast mode [ 48.479110][ T4381] bridge0: port 3(macvtap1) entered blocking state [ 48.487558][ T4381] bridge0: port 3(macvtap1) entered disabled state [ 48.517578][ T4381] bridge0: left allmulticast mode [ 48.529870][ T4381] bridge0: left promiscuous mode [ 48.743972][ T4063] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 48.764012][ T4063] EXT4-fs (loop5): Remounting filesystem read-only [ 48.766825][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.804404][ T4063] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.820993][ T53] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.850078][ T3414] IPVS: starting estimator thread 0... [ 48.940945][ T4402] IPVS: using max 2736 ests per chain, 136800 per kthread [ 49.005370][ T4418] netlink: 'syz.1.285': attribute type 1 has an invalid length. [ 49.013136][ T4418] netlink: 668 bytes leftover after parsing attributes in process `syz.1.285'. [ 49.077948][ T4428] msdos: Bad value for 'dmask' [ 49.085565][ T4427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.288'. [ 49.239961][ T4426] syz.1.289 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 49.251079][ T4426] CPU: 1 UID: 0 PID: 4426 Comm: syz.1.289 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.251123][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 49.251171][ T4426] Call Trace: [ 49.251178][ T4426] [ 49.251237][ T4426] __dump_stack+0x1d/0x30 [ 49.251261][ T4426] dump_stack_lvl+0x95/0xd0 [ 49.251280][ T4426] dump_stack+0x15/0x1b [ 49.251355][ T4426] dump_header+0x80/0x240 [ 49.251383][ T4426] oom_kill_process+0x295/0x350 [ 49.251404][ T4426] out_of_memory+0x97d/0xb80 [ 49.251425][ T4426] try_charge_memcg+0x62e/0xa10 [ 49.251450][ T4426] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 49.251549][ T4426] __read_swap_cache_async+0x17b/0x2d0 [ 49.251585][ T4426] swap_cluster_readahead+0x262/0x3c0 [ 49.251669][ T4426] swapin_readahead+0xde/0x840 [ 49.251704][ T4426] ? __rcu_read_unlock+0x33/0x70 [ 49.251732][ T4426] ? __rcu_read_unlock+0x4e/0x70 [ 49.251756][ T4426] ? swap_cache_get_folio+0x26f/0x280 [ 49.251902][ T4426] do_swap_page+0x59b/0x2a50 [ 49.251939][ T4426] ? __rcu_read_lock+0x36/0x50 [ 49.251966][ T4426] ? __pfx_default_wake_function+0x10/0x10 [ 49.251997][ T4426] handle_mm_fault+0xb40/0x3030 [ 49.252077][ T4426] ? vma_start_read+0x1c7/0x2c0 [ 49.252104][ T4426] do_user_addr_fault+0x62f/0x1050 [ 49.252138][ T4426] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 49.252185][ T4426] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 49.252219][ T4426] ? irqentry_exit+0x3c/0x510 [ 49.252253][ T4426] exc_page_fault+0x62/0xa0 [ 49.252273][ T4426] asm_exc_page_fault+0x26/0x30 [ 49.252293][ T4426] RIP: 0033:0x7f85af1b6083 [ 49.252313][ T4426] Code: 25 00 03 00 00 e8 1d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ce 24 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 49.252367][ T4426] RSP: 002b:00007ffc95ca8140 EFLAGS: 00010246 [ 49.252383][ T4426] RAX: 0000000000000000 RBX: 000055555b50e500 RCX: 0000000000000000 [ 49.252436][ T4426] RDX: 00007ffc95ca8180 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.252448][ T4426] RBP: 00007f85af477da0 R08: 0000000000000000 R09: 0000000000000000 [ 49.252490][ T4426] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000c2e7 [ 49.252503][ T4426] R13: 00007f85af47609c R14: 000000000000c03b R15: 00007f85af476090 [ 49.252523][ T4426] [ 49.252530][ T4426] memory: usage 300700kB, limit 307200kB, failcnt 1056 [ 49.484944][ T4426] memory+swap: usage 74428kB, limit 9007199254740988kB, failcnt 0 [ 49.492826][ T4426] kmem: usage 65056kB, limit 9007199254740988kB, failcnt 0 [ 49.500065][ T4426] Memory cgroup stats for /syz1: [ 49.502127][ T4426] cache 524288 [ 49.510642][ T4426] rss 24576 [ 49.513877][ T4426] shmem 0 [ 49.516870][ T4426] mapped_file 65536 [ 49.520686][ T4426] dirty 0 [ 49.523652][ T4426] writeback 4096 [ 49.527198][ T4426] workingset_refault_anon 194 [ 49.531892][ T4426] workingset_refault_file 1823 [ 49.536748][ T4426] swap 184320 [ 49.540048][ T4426] swapcached 20480 [ 49.543783][ T4426] pgpgin 12176 [ 49.547242][ T4426] pgpgout 12040 [ 49.550696][ T4426] pgfault 12973 [ 49.554181][ T4426] pgmajfault 83 [ 49.557773][ T4426] inactive_anon 12288 [ 49.561836][ T4426] active_anon 8192 [ 49.565567][ T4426] inactive_file 0 [ 49.569223][ T4426] active_file 524288 [ 49.573141][ T4426] unevictable 0 [ 49.576605][ T4426] hierarchical_memory_limit 314572800 [ 49.581987][ T4426] hierarchical_memsw_limit 9223372036854771712 [ 49.588200][ T4426] total_cache 524288 [ 49.592192][ T4426] total_rss 24576 [ 49.595899][ T4426] total_shmem 0 [ 49.599373][ T4426] total_mapped_file 65536 [ 49.603717][ T4426] total_dirty 0 [ 49.607187][ T4426] total_writeback 4096 [ 49.611402][ T4426] total_workingset_refault_anon 194 [ 49.616904][ T4426] total_workingset_refault_file 1823 [ 49.622223][ T4426] total_swap 184320 [ 49.626126][ T4426] total_swapcached 20480 [ 49.630396][ T4426] total_pgpgin 12176 [ 49.634299][ T4426] total_pgpgout 12040 [ 49.638320][ T4426] total_pgfault 12973 [ 49.642351][ T4426] total_pgmajfault 83 [ 49.646335][ T4426] total_inactive_anon 12288 [ 49.650894][ T4426] total_active_anon 8192 [ 49.655212][ T4426] total_inactive_file 0 [ 49.659355][ T4426] total_active_file 524288 [ 49.663810][ T4426] total_unevictable 0 [ 49.667882][ T4426] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.289,pid=4426,uid=0 [ 49.682462][ T4426] Memory cgroup out of memory: Killed process 4426 (syz.1.289) total-vm:94144kB, anon-rss:1212kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 49.716779][ T3487] IPVS: starting estimator thread 0... [ 49.790225][ T4447] set_capacity_and_notify: 7 callbacks suppressed [ 49.790315][ T4447] loop4: detected capacity change from 0 to 512 [ 49.811308][ T4438] IPVS: using max 2784 ests per chain, 139200 per kthread [ 49.837389][ T4447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.865657][ T4451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.296'. [ 49.872340][ T4447] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.942625][ T4463] netlink: 'syz.1.301': attribute type 1 has an invalid length. [ 49.950328][ T4463] netlink: 'syz.1.301': attribute type 2 has an invalid length. [ 50.149459][ T4477] FAULT_INJECTION: forcing a failure. [ 50.149459][ T4477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.162684][ T4477] CPU: 0 UID: 0 PID: 4477 Comm: syz.2.306 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.162781][ T4477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 50.162796][ T4477] Call Trace: [ 50.162803][ T4477] [ 50.162811][ T4477] __dump_stack+0x1d/0x30 [ 50.162837][ T4477] dump_stack_lvl+0x95/0xd0 [ 50.162868][ T4477] dump_stack+0x15/0x1b [ 50.162889][ T4477] should_fail_ex+0x263/0x280 [ 50.162921][ T4477] should_fail+0xb/0x20 [ 50.163012][ T4477] should_fail_usercopy+0x1a/0x20 [ 50.163112][ T4477] _copy_from_user+0x1c/0xb0 [ 50.163136][ T4477] ___sys_sendmsg+0xc1/0x1e0 [ 50.163240][ T4477] __x64_sys_sendmsg+0xd4/0x160 [ 50.163265][ T4477] x64_sys_call+0x17ba/0x3000 [ 50.163290][ T4477] do_syscall_64+0xc0/0x2a0 [ 50.163384][ T4477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.163407][ T4477] RIP: 0033:0x7f99632baeb9 [ 50.163425][ T4477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.163441][ T4477] RSP: 002b:00007f9961d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.163486][ T4477] RAX: ffffffffffffffda RBX: 00007f9963535fa0 RCX: 00007f99632baeb9 [ 50.163499][ T4477] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 50.163512][ T4477] RBP: 00007f9961d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.163525][ T4477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.163613][ T4477] R13: 00007f9963536038 R14: 00007f9963535fa0 R15: 00007fff7f350ad8 [ 50.163668][ T4477] [ 50.174836][ T4467] netlink: 'syz.4.295': attribute type 1 has an invalid length. [ 50.368822][ T4469] batman_adv: batadv0: Adding interface: ipvlan2 [ 50.386080][ T4469] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.412502][ T4469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.425892][ T4469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.436589][ T4469] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 50.458855][ T4481] loop2: detected capacity change from 0 to 512 [ 50.501985][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 50.502000][ T29] audit: type=1400 audit(1770437058.980:744): avc: denied { bind } for pid=4473 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.508341][ T4481] EXT4-fs (loop2): 1 orphan inode deleted [ 50.579633][ T4481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.649868][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.734758][ T4495] loop5: detected capacity change from 0 to 512 [ 50.753811][ T4494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.310'. [ 50.768415][ T4495] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.783551][ T4447] syz.4.295 (4447) used greatest stack depth: 6104 bytes left [ 50.792535][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.833536][ T4495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.853594][ T4499] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 50.892176][ T29] audit: type=1400 audit(1770437059.360:745): avc: denied { shutdown } for pid=4500 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.912195][ T4063] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.087485][ T4512] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4512 comm=syz.4.318 [ 51.130382][ T4522] loop5: detected capacity change from 0 to 512 [ 51.136792][ T4505] loop2: detected capacity change from 0 to 8192 [ 51.155907][ T4522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.180023][ T4525] loop3: detected capacity change from 0 to 1024 [ 51.191158][ T4522] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.205220][ T4505] loop2: p1 p2 p3 p4[DM] [ 51.209644][ T4505] loop2: p1 size 835329 extends beyond EOD, truncated [ 51.226609][ T4525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.243058][ T4505] loop2: p2 size 327680 extends beyond EOD, truncated [ 51.252917][ T4505] loop2: p3 start 1052673 is beyond EOD, truncated [ 51.259470][ T4505] loop2: p4 size 262144 extends beyond EOD, truncated [ 51.347649][ T29] audit: type=1400 audit(1770437059.820:746): avc: denied { read } for pid=4519 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.458731][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 51.462391][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 51.470210][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 51.520827][ T29] audit: type=1400 audit(1770437059.990:747): avc: denied { connect } for pid=4531 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.645824][ T4535] validate_nla: 1 callbacks suppressed [ 51.645841][ T4535] netlink: 'syz.5.322': attribute type 1 has an invalid length. [ 51.780186][ T4541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 51.966985][ T4544] loop4: detected capacity change from 0 to 512 [ 51.999641][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.051602][ T4546] netlink: 96 bytes leftover after parsing attributes in process `syz.3.327'. [ 52.084478][ T4544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.131415][ T4544] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.202111][ T4063] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 52.256481][ T4063] EXT4-fs (loop5): Remounting filesystem read-only [ 52.280278][ T4063] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.304185][ T41] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.314848][ T41] Quota error (device loop5): write_blk: dquota write failed [ 52.322273][ T41] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 52.379341][ T4556] FAULT_INJECTION: forcing a failure. [ 52.379341][ T4556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.392589][ T4556] CPU: 0 UID: 0 PID: 4556 Comm: syz.3.332 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.392617][ T4556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 52.392647][ T4556] Call Trace: [ 52.392656][ T4556] [ 52.392664][ T4556] __dump_stack+0x1d/0x30 [ 52.392688][ T4556] dump_stack_lvl+0x95/0xd0 [ 52.392758][ T4556] dump_stack+0x15/0x1b [ 52.392778][ T4556] should_fail_ex+0x263/0x280 [ 52.392823][ T4556] should_fail+0xb/0x20 [ 52.392849][ T4556] should_fail_usercopy+0x1a/0x20 [ 52.392880][ T4556] _copy_from_user+0x1c/0xb0 [ 52.392943][ T4556] ___sys_sendmsg+0xc1/0x1e0 [ 52.392973][ T4556] __x64_sys_sendmsg+0xd4/0x160 [ 52.392997][ T4556] x64_sys_call+0x17ba/0x3000 [ 52.393062][ T4556] do_syscall_64+0xc0/0x2a0 [ 52.393148][ T4556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.393171][ T4556] RIP: 0033:0x7f41c81eaeb9 [ 52.393257][ T4556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.393273][ T4556] RSP: 002b:00007f41c6c47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.393296][ T4556] RAX: ffffffffffffffda RBX: 00007f41c8465fa0 RCX: 00007f41c81eaeb9 [ 52.393310][ T4556] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 52.393324][ T4556] RBP: 00007f41c6c47090 R08: 0000000000000000 R09: 0000000000000000 [ 52.393337][ T4556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.393416][ T4556] R13: 00007f41c8466038 R14: 00007f41c8465fa0 R15: 00007ffe58eea6d8 [ 52.393435][ T4556] [ 52.596568][ T4560] netlink: 256 bytes leftover after parsing attributes in process `syz.3.333'. [ 52.649765][ T4560] loop3: detected capacity change from 0 to 256 [ 52.686835][ T29] audit: type=1326 audit(1770437061.160:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4559 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c81eaeb9 code=0x7ffc0000 [ 52.710312][ T29] audit: type=1326 audit(1770437061.160:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4559 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c81eaeb9 code=0x7ffc0000 [ 52.733168][ T4557] netlink: 'syz.4.326': attribute type 1 has an invalid length. [ 52.745703][ T4563] loop5: detected capacity change from 0 to 4096 [ 52.783932][ T4563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.801690][ T4563] process 'syz.5.334' launched '/dev/fd/4' with NULL argv: empty string added [ 52.879884][ T4544] ================================================================== [ 52.888022][ T4544] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 52.895856][ T4544] [ 52.898192][ T4544] write to 0xffffea000421a858 of 8 bytes by task 4557 on cpu 1: [ 52.905831][ T4544] __filemap_remove_folio+0x201/0x300 [ 52.911223][ T4544] filemap_remove_folio+0x6d/0x1d0 [ 52.916359][ T4544] truncate_inode_folio+0x42/0x50 [ 52.921411][ T4544] shmem_undo_range+0x26d/0xb10 [ 52.926370][ T4544] shmem_evict_inode+0x12e/0x510 [ 52.931349][ T4544] evict+0x2af/0x510 [ 52.935282][ T4544] iput+0x4b9/0x650 [ 52.939203][ T4544] dentry_unlink_inode+0x24f/0x260 [ 52.944480][ T4544] __dentry_kill+0x13f/0x460 [ 52.949111][ T4544] finish_dput+0x2b/0x200 [ 52.951005][ T29] audit: type=1326 audit(1770437061.230:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4559 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41c81eaeb9 code=0x7ffc0000 [ 52.953458][ T4544] dput+0x52/0x60 [ 52.953483][ T4544] __fput+0x444/0x650 [ 52.976776][ T29] audit: type=1326 audit(1770437061.230:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4559 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c81eaeb9 code=0x7ffc0000 [ 52.980378][ T4544] ____fput+0x1c/0x30 [ 53.011760][ T4544] task_work_run+0x130/0x1a0 [ 53.016373][ T4544] exit_to_user_mode_loop+0x1f7/0x6f0 [ 53.021765][ T4544] do_syscall_64+0x1d3/0x2a0 [ 53.026383][ T4544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.032368][ T4544] [ 53.034688][ T4544] read to 0xffffea000421a858 of 8 bytes by task 4544 on cpu 0: [ 53.042231][ T4544] folio_mapping+0xa1/0xe0 [ 53.046673][ T4544] evict_folios+0x2b67/0x35b0 [ 53.051350][ T4544] try_to_shrink_lruvec+0x5f6/0x960 [ 53.056548][ T4544] shrink_lruvec+0x24e/0x1bc0 [ 53.061352][ T4544] shrink_node+0x68e/0x2000 [ 53.065874][ T4544] do_try_to_free_pages+0x404/0xcc0 [ 53.071091][ T4544] try_to_free_mem_cgroup_pages+0x222/0x470 [ 53.076998][ T4544] try_charge_memcg+0x37e/0xa10 [ 53.081866][ T4544] obj_cgroup_charge_pages+0x23/0xc0 [ 53.087177][ T4544] __memcg_kmem_charge_page+0x9e/0x170 [ 53.092652][ T4544] __alloc_frozen_pages_noprof+0x18a/0x350 [ 53.098470][ T4544] alloc_pages_mpol+0xb3/0x260 [ 53.103244][ T4544] alloc_pages_noprof+0x8f/0x130 [ 53.108201][ T4544] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 53.114155][ T4544] __kvmalloc_node_noprof+0x471/0x680 [ 53.119640][ T4544] ip_set_alloc+0x24/0x30 [ 53.123991][ T4544] hash_netiface_create+0x282/0x740 [ 53.129199][ T4544] ip_set_create+0x3cf/0x970 [ 53.133799][ T4544] nfnetlink_rcv_msg+0x509/0x5d0 [ 53.138834][ T4544] netlink_rcv_skb+0x123/0x220 [ 53.143606][ T4544] nfnetlink_rcv+0x167/0x1720 [ 53.148288][ T4544] netlink_unicast+0x5c0/0x690 [ 53.153060][ T4544] netlink_sendmsg+0x5c8/0x6f0 [ 53.157821][ T4544] ____sys_sendmsg+0x5af/0x600 [ 53.162585][ T4544] ___sys_sendmsg+0x195/0x1e0 [ 53.167264][ T4544] __x64_sys_sendmsg+0xd4/0x160 [ 53.172112][ T4544] x64_sys_call+0x17ba/0x3000 [ 53.176891][ T4544] do_syscall_64+0xc0/0x2a0 [ 53.181403][ T4544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.187300][ T4544] [ 53.189622][ T4544] value changed: 0xffff88810746a1e8 -> 0x0000000000000000 [ 53.196727][ T4544] [ 53.199052][ T4544] Reported by Kernel Concurrency Sanitizer on: [ 53.205286][ T4544] CPU: 0 UID: 0 PID: 4544 Comm: syz.4.326 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.214921][ T4544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 53.224998][ T4544] ================================================================== [ 53.341752][ T4063] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.715525][ T3314] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 53.727187][ T3314] EXT4-fs (loop4): Remounting filesystem read-only [ 53.735799][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.753425][ T41] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started