last executing test programs: 2m3.55473706s ago: executing program 32 (id=2380): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$eJzs3U9vVF0ZAPDn3nbon7fv26Is1KggomgIM+0AlbDCjcYQEiNx5QJqOzRNZzpNZ4q0sijfwUQSV7rwA7gwcWHCyr073bnBhQkq0VATF2PmzhQKnSlF2s6b3t8vObn33DOd5zyd3HPaM+2cAHLrXERsRcSpiLgXEZPd60m3xM1OaT/u5YtH89svHs0n0Wrd+UeStbevxa6vafuo+5yjEfGD70b8ONkbt7GxuTxXrVbWuvVSs7ZaamxsXl6qzS1WFisr5fLszOz09SvXyoeW69nab55/Z+nWD3//uy89++PWN3/a7tZEt213Hoepk3rhVZy24Yi4dRTBBmCom8+pQXeE/0saEZ+JiPPZ/T8ZQ9mrCQCcZK3WZLQmd9cBgJMuzdbAkrQYUeicp2mx2FnDOxPjabXeaF66X19fWeislU1FIb2/VK1Md9cKp6KQtOsz2fnrevmt+pWIOB0RPxsZy+rF+Xp1YZA/+ABAjn30ev7P3gv490hn/gcATrjRQXcAADh25n8AyB/zPwDkj/kfAPLH/A8A+WP+B4D8Mf8DQK58//btdmltdz//euHBxvpy/cHlhUpjuVhbny/O19dWi4v1+mL2mT21dz1ftV5fnbka6w9LzUqjWWpsbN6t1ddXmnezz/W+WykcS1YAwH5On3365yQitm6MZSV27eVgroaTLR10B4CBGRp0B4CBsdsX5Jff8YEeW/S+ofMnQmN7G54cTX+Ao3fx89b/Ia+s/0N+Wf+H/LL+D/nVaiX2/AeAnLHGDxzs/f8evP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjk1kJUmL3b3AJyJNi8WIjyNiKgrJ/aVqZToiPomIP40URtr1mUF3GgD4QOnfku7+XxcnL0y83Xoq+c9IdoyIn/zizs8fzjWbazPt6//sXP/WWMST7vXyIPoPAHk09F6P3pmnd+bxHS9fPJrfKYffx/6ef7uzuWg77na3dFqGYzg7jkYhIsb/lXTrHcl7Z97b1uOI+Fyv/JNsbWSqu/Pp2/HbsT8+1vjpG/HTrK1zbH8vPnsIfYG8edoef272uv/SOJcde9//o9kI9eF2xr/tPeNf+mr8G+oz/p07SICxX0dc/cP3+sZ/HPGF4V7xk1fxkz7xLxwwx7988cvn+7W1fhlxMXrH3x2r1Kytlhobm5eXanOLlcXKSrk8OzM7ff3KtXIpW6Mu7axU7/X3G5c+2S//8T7xR9+R/9cOmP+v/nvvR1/ZJ/43vtr79T+zT/z2nPj1A8afG/9t3+272/EX+uT/rtf/0gHjP/vr5sIBHwoAHIPGxubyXLVaWRv0yU6HPi39ceIk1yeDHZeAo/f6ph90TwAAAAAAAAAAAAAAgH6O49+JBp0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9f/AgAA//9gOtV4") linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m21.028170282s ago: executing program 33 (id=2839): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x117b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1280, 0x32, 0x43a1bd7a, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x9, 0x43d97f73}, 0x0, 0x10008, 0x8, 0x1, 0x5, 0x20009, 0x1b, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 1m17.520111146s ago: executing program 5 (id=3110): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m17.384857024s ago: executing program 5 (id=3113): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0xe1, 0x0, 0x10000, 0x0, 0x2, 0x9, 0x0, 0x0, 0x20, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x76e2592f3c31d228) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000c0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2", 0xd) recvmmsg(r1, 0x0, 0x0, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r2, &(0x7f0000000000), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2000000000000000000000000a00000209ffffffff797a31000000002c000000180a050000000000000000000a0000080900010073797a31000000000c0005400000000000000002140000001100010000000000000000000300000a00000000"], 0x74}, 0x1, 0x0, 0x0, 0xd0}, 0x880) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000000400)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x6}) fcntl$lock(r4, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x100010, 0x10000, 0x1, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=@newtaction={0x2e0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x2cc, 0x1, [@m_xt={0x2c8, 0x4, 0x0, 0x0, {{0x7}, {0x214, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xe7, 0x6, {0x1, 'nat\x00', 0x0, 0x0, "940f6027a70b34e69a1478dfe45f9030a6584e3dccb7783352867692802af7b9060a35c68caeea6476b8c52cc30105807803ec18987a5ff49facb27f1fbde3700b97e5b10a51b79bedfccb2531468828072ec53c59b4fb9d6269e914fdfa492eab68237aa056198da8ded56957a7c610cb2837cd347a13a81ec20c5bde077151f359e5c661743496edc1fb054d6f159fbd8e26c467418ab3e012b57d0f8368bb8e89876ad235c59fd8e6c57d3a13f03c8ca4db25ccb2cfa514854c8836"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x11e, 0x6, {0x3, 'raw\x00', 0x81, 0x6, "2c15233baa60ba071861627e0223920b395185d4bb3784b0ef8774c2261c43c0073a87252015314e86b873752dcc85bb51aa24bcf83a6e382406455bb59162931eb65512c18666a6f80dbbc03d1397058df145b30625401f589f8979f13bd6b9789b993b84bfe37840e0f20114ec55b33267537d5f60d5804a1d352c5a28d3ace0e702849a637d199508e2088a2a0a76b57b1cab77b17f29466d444c7be5e5bc0deef865319a96c57c4373f72e2c7fa65210eec54192adf12d2bab37b358408147d972f6244723233d75e4dedb6ec27fd170da5626069fd99fb039388c2c6404d328cf703c74ec2616dcc62db1dd022f7f04e1ad"}}]}, {0x90, 0x6, "9b551be67f362aca05a61d123e669a9a46c023c53c51bd01661fe46566da17a08d03d69a3d2b24a087c2d5a8b1ca18b88163e7552e92bb657db9c1886d09001bbec9142c24e35195c8113ceabf9a30a694572adc9eff127269ba434e3d3b48770ffed5af38a36058fca29afc5bf99a1c9889f31a95733cc6a393c1159815aa731e6c9b665c2c25e78dbf877d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0, 0x2}, 0x118d0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r0, 0x1) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x356f, 0x80, 0x3, 0x285}, &(0x7f0000000380), &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) 1m16.482275637s ago: executing program 5 (id=3124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "883e59", 0x12e, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, {[@hopopts={0x2f, 0x1a, '\x00', [@generic={0x7, 0xcd, "bf79996858b427f3dfed8a3357a348c0083e83d1c7ad172146ca931cf0acf2d997c79724568b217a781ed9447df55fff4929d3d9799968f9bf60e15c075c26e042c3edc4bf904df9bf1b811c3e92e85ac8fe3e77f4837345d1696348d9993a2bc7b83ba79f630a4f768f7ca4b6f61800075b6031344382739fcc3248da784e02ced728737e303a7a9622cc86d04439ad6db88cbc6471c8080702558e225f9632c7a0b8248ed4a0556e9689e7e8e9506b55791ecca01888cd27dacefadbb7dbfe30eadbbaa8fe0265485aaaba34"}, @ra={0x5, 0x2, 0x8000}]}], "263b634d0223f9ea69c4ee4eca7cbf8408270df6b3bc909285cb8249f141f355bb698a3d2f97f420cea9d10d34aa67e8dfea58a66fe7d52e0ee837e3ce5c0a7c43f6c42c424adb50d0e70e7d61fe"}}}}}}, 0x168) 1m15.995188796s ago: executing program 5 (id=3130): syz_emit_ethernet(0x52, &(0x7f0000000200)={@multicast, @local, @val={@val={0x88a8, 0x7}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @local, {[@generic={0x44, 0x9, "b4bd247ba8558a"}, @lsrr={0x83, 0x3, 0xf1}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc2}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x2dd8806920477201, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) syz_clone3(&(0x7f0000000080)={0xa1800000, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022abd7000fcdbdf251e000000080004000100000008000100", @ANYRES32=r5, @ANYBLOB="00800000", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x20004010) 1m15.681801634s ago: executing program 5 (id=3132): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) (async, rerun: 64) ftruncate(r1, 0x100) (rerun: 64) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x20, 0x9, @remote, 0x9}], 0x1c) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 1m15.40038593s ago: executing program 5 (id=3136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090000008500000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xa, 0x1, [0x76d]}, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2081, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$inet6(0xa, 0x2, 0x0) (async) close(0x3) (async) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) (async) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@hopopts={{0x18, 0x29, 0x36, {0x87}}}], 0x18}, 0x1400c0c0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m15.340881983s ago: executing program 34 (id=3136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090000008500000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xa, 0x1, [0x76d]}, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2081, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$inet6(0xa, 0x2, 0x0) (async) close(0x3) (async) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) (async) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@hopopts={{0x18, 0x29, 0x36, {0x87}}}], 0x18}, 0x1400c0c0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.528839075s ago: executing program 6 (id=3226): perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = getpgrp(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, r0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) r2 = gettid() pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_CPUID(0x1e, r2, 0x0, 0x1011) write$P9_RGETLOCK(r3, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1m10.327198846s ago: executing program 6 (id=3234): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r1, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r5 = syz_pidfd_open(0x0, 0x0) process_madvise(r5, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000040)="89", 0x1}], 0x2, 0x11, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r7, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9, 0x8, 0x0, 0x0}}, 0x10) 1m10.206784593s ago: executing program 6 (id=3239): r0 = syz_clone3(&(0x7f0000001880)={0x1008c0700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pivot_root(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r2, 0x301154dd07c6328b) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x646041, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000040)=0x32) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}}, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r4 = open(&(0x7f00000004c0)='./file0\x00', 0x608501, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000001900)='./file0\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000e5080000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000098020400fcffffffbf91000000000000b7020000010000008500000085f8ffffb6000000000000009500000000000000982b08e3d437495946e6765de3e2ef5430ba88c3bac358548cb0d604c0c5d988c36d83ca56d6fa7ed150338e7a"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xa3, &(0x7f0000000500)=""/163, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xe, 0x9, 0xc3db}, 0x10, 0x15443, r4, 0x8, &(0x7f00000005c0)=[r2, r4, r4], &(0x7f0000000980)=[{0x0, 0x2, 0xe, 0xc}, {0x4, 0x1, 0x10, 0x5}, {0x0, 0x1, 0x9, 0x6}, {0x0, 0x3, 0x4, 0xb}, {0x5, 0x1, 0x1, 0x8}, {0x3, 0x4, 0x7}, {0x0, 0x4, 0x4, 0x6}, {0x2, 0x4, 0x9, 0x5903f0cda4bf21a}], 0x10, 0xda}, 0x94) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000640)=[{0x800000000, 0x800000000000000, 0x5}, {0x0, 0x400005, 0x4}], 0x2, 0x100000c01, 0x61, 0x0, 0x0, 0x24}) mprotect(&(0x7f0000632000/0x1000)=nil, 0x1000, 0xc) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x4, 0x6, @remote}, 0x14) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="88020000210010002dbd7000fcdbdf25fe880000000000000000000000000101fc0200000000000000000000000000014e2401a44e2100030a0020402b000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0x400d4}, 0x800) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe}) 1m9.849080554s ago: executing program 6 (id=3248): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001900010020100000000000000a10000000000005002e00000600150003020000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000050) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = semget$private(0x0, 0x6, 0x29b) semop(r5, &(0x7f0000000240)=[{0x0, 0x203}, {0x0, 0x0, 0x800}], 0x2) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x8, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x3920e, r1, 0x3, 0x1, 0x6, 0x6}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0", 0x3a}], 0x1) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x80000000, &(0x7f0000000000)={0x1e, 0xa, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x9, 0xfffffffc, 0x3, 0x6}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, r9, 0x41031, 0x455965fb809f3fbf}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m9.22292341s ago: executing program 6 (id=3257): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) rename(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ftruncate(r0, 0x87fffff) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r2, 0x0, 0x0, 0x720, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000300)=0x22, 0x4) sendfile(r1, r0, 0x0, 0x578410ed) 1m7.703644949s ago: executing program 6 (id=3287): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'hsr0\x00', {0x9}, 0x1000}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x2, 0x1, 0x80, 0xfff9, 0x920, 0x800}) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0x3, {{0x2, 0x4e20, @broadcast}}}, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x16}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, '\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xca}}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@errors_remount}]}, 0xfd, 0x5a4, &(0x7f0000001180)="$eJzs3c9vFGUfAPDvM7stP8r7trx5EwUONiERErWlBaMxJkLEmwd/kHjyUNtCCAs0tCaCGCHBsxf9A0y8eTEeiTFEvXj1ZuIfYIjEYC/eamY7U0q723ZxyyDz+STDzDPPTp5nln73mXn2eWYDqK3R/J8sYl9EzKWI4VV5zSgyR5df9+fdq9OLd69Op1haevuPFKnYV74+Feuh4uCdEfHz9yn+11hf7vzlK+emWq3ZS0V6fOH83Pj85SvPnT0/dWb2zOyFyYkXJp4/dnTy2JGudd//6dbPc09E/Dh2snnj9KsHvp7+cu/H3351M8Xx9v5Ycx79MhqjK+/Javn7+mK/C6tIY806l5oVVYaeNYq/x4GIeCKGoxH3/vOG45M3K60csK2WUsQSUFNJ/ENNldcB+f1vuVR7RQI8LHdOLHcAlH17iyvx31zuG4yd7b6B3YspVnfrpIjo3jO3dXkZc0+n4XyJbeqHAzq7dj0inuzU/qd2bI60e/Hz+M/ui/8sIt4o1vn+tx6w/NE1afEPD8+Dxv9gsS7j/70HLF/8AwAAAAAAQP/cOhERz3b6/i9bGf8THcb/DEXE8T6Uv/n3f9ntPhQDdHDnRMTLEbG4bvxfVr5kpFGk/tMeDzCQTp9tzR6JiP9GxOEY2JGnJzYoY/TATwNd81aN/8uXvPxyLGBRj9vNHfcfMzO1MPVPzhlYdud6xP5mHv8p7o//tNL+pw7tf/55MLfFMpZOvvJDt7zN4x/YLktfRBzq2P7fe3JF2vj5HOPt64Hx8qpgvQ/fvflNt/I7x/+1bThTYK28/d+9cfyPpNXP65nvvYyPfv+1x/jf/Pp/MJ1qP3KmHIf8wdTCwqWJiMH0+vr9k73XGR4La57FVMZDGS95/B8+2Pn+f6Pr/10RsdVW+tR3r93oluf6H6qTx/9MT+1/7xsH3/n8r27lb639P9Zu0w8Xe/T/wca2GqBV1xMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/o2yiNgTKRtb2c6ysbGIoYj4f+zOWhfnF545ffH9CzN5Xvv3/7Pyl36Hl9Op/P3/kVXpyTXpoxGxNyI+a+xqp8emL7Zmqj55AAAAAAAAAAAAAAAAAAAAeEQMdZn/n/utUXXtgG3XrLoCQGXEP9SX+If66jH+B7arHsDDp/2H+hL/UF/iH+pL/EN95fG/s+pKAJXQ/gMAAAAAwGNl71O3fkkRce2lXe0lN1jkGecPj7es6goAlfGIH6ivptE/UFvu8YG0SX736QGbHQkAAAAAAAAAAAAA9Muhfeb/Q12Z/w/1Zf4/1JfJ/1Bf7vGB3ub/D/RwJAAAAAAAAAAAAADQL/OXr5ybarVmL1WxsaOoRDWl27BR1UY8GtXYaKPiDyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDF3wEAAP//aRv1Ww==") 1m7.611460004s ago: executing program 35 (id=3287): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'hsr0\x00', {0x9}, 0x1000}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x2, 0x1, 0x80, 0xfff9, 0x920, 0x800}) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0x3, {{0x2, 0x4e20, @broadcast}}}, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x16}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, '\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xca}}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@errors_remount}]}, 0xfd, 0x5a4, &(0x7f0000001180)="$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") 39.312604456s ago: executing program 3 (id=3876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x40100) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6000001, 0x40010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dcb, &(0x7f0000000040)={0x0, 0x81c, 0x800, 0x3, 0x2c2}, &(0x7f0000000180), &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x10, 0x0, @fd=r1, 0x8, 0x0, 0xe}) epoll_create1(0x80000) r4 = socket$unix(0x1, 0x5, 0x0) close(r4) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r5 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116}) close_range(r5, r5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3ff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x24000840) 38.150487244s ago: executing program 3 (id=3897): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x84) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0xa, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r3, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 38.008922012s ago: executing program 3 (id=3902): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4f5121d6958c78cfc0e1f14f1b257f40", 0x10}], 0x1) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x4e24, @private=0xa010102}}) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r3, 0x1, 0x34, &(0x7f0000000040), 0x29) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mbind(&(0x7f000061d000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000080)=0x781, 0xfff, 0xc) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) close_range(r0, 0xffffffffffffffff, 0x0) 37.971903044s ago: executing program 3 (id=3904): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x3, 0x2, 0x0, 0xe61b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 37.638579743s ago: executing program 3 (id=3912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c000780060004409bc42000060005400000000008"], 0x64}}, 0x0) 37.301051913s ago: executing program 3 (id=3920): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000032380)=""/102400, &(0x7f0000000000)=0x19000) (fail_nth: 9) 37.300762323s ago: executing program 36 (id=3920): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000032380)=""/102400, &(0x7f0000000000)=0x19000) (fail_nth: 9) 28.188293125s ago: executing program 1 (id=4117): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0xa8, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x98, 0xf2, 0x0, 0x1, [@typed={0xc, 0x137, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb", @typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0xa8}], 0x1, 0x0, 0x0, 0x1}, 0x0) 28.148404717s ago: executing program 1 (id=4118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000088ff0000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000014000000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) 28.120334239s ago: executing program 1 (id=4119): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24080016}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24080016}, 0x94) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, 0x0, 0x0) (async) getsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, 0x0, &(0x7f00000000c0)) (async) 27.994664206s ago: executing program 1 (id=4123): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xffffffffffffffff, r0, 0xfffffffffffffffe, 0x0) prlimit64(r0, 0x6, &(0x7f0000000000)={0x7, 0x6}, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) fsync(r1) 27.812015727s ago: executing program 1 (id=4124): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000120001000000000000000000ac141400000000000000000000000000000000000000000014000d"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x20048081) 27.468321607s ago: executing program 1 (id=4133): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xd41e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200010, &(0x7f00000000c0), 0x2, 0xbfe, &(0x7f0000001800)="$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") 27.457412798s ago: executing program 37 (id=4133): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xd41e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200010, &(0x7f00000000c0), 0x2, 0xbfe, &(0x7f0000001800)="$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") 23.232331714s ago: executing program 9 (id=4195): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) r3 = dup(r2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000100)="d5", 0x1}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$CAIFSO_LINK_SELECT(r6, 0x116, 0x7f, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4000, r6}, 0x18) setreuid(0x0, 0xee00) close_range(r0, 0xffffffffffffffff, 0x0) 23.170542558s ago: executing program 9 (id=4197): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mmap(&(0x7f000017b000/0x3000)=nil, 0x3000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000040)=[{&(0x7f00008f9f09)=""/247, 0xf7}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x2, &(0x7f0000121000)=[{&(0x7f00000001c0)=""/231, 0xe7}], 0x1, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x43, &(0x7f0000000180), 0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x1}}, 0x10) r3 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) 23.118625831s ago: executing program 9 (id=4198): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, 0x0, 0x0) 23.117997291s ago: executing program 9 (id=4199): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @empty, 0x11}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0x20000814, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xc0463b18c99bb568, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) truncate(&(0x7f0000000040)='./file2\x00', 0x5) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) syz_clone(0x300000, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) read(r5, &(0x7f0000000080)=""/36, 0x24) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) close(r6) shutdown(r0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 22.826105128s ago: executing program 9 (id=4206): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000a80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e734fdc2da8c998a8700232e5263a04392efa56fc98553afa5a498c8c3a3206f2b25a00c0ec0d1202c822ab708037a4c29a9c81216c73358cda8b1a2532650070aaf77d3ac8e46f2b2b5ed7828c6165514d2f40c6cf8eb2e325f9d2b7750af696145751cdfc7d00f6021f29a689969eadb6a870fb43b3f6badebdc0048aa9956828007502b62", @ANYRES16, @ANYRES64, @ANYBLOB="f47d9d"], 0x1, 0x65c, &(0x7f0000002280)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0xfffd, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000ac0)="a3de", 0x2}], 0x1}}], 0x1, 0x400c404) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) times(0x0) setsockopt$inet6_int(r4, 0x29, 0x1f, &(0x7f0000000040)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r3, 0x8001}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 22.538128795s ago: executing program 9 (id=4212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff010000fffffff5000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000014000000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) 22.506650217s ago: executing program 38 (id=4212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff010000fffffff5000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000014000000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) 3.712980413s ago: executing program 8 (id=4580): r0 = socket$nl_rdma(0x10, 0x3, 0x14) close_range(r0, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, &(0x7f0000000040)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x44, 0x27, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x34, 0xf2, 0x0, 0x1, [@typed={0xc, 0x137, 0x0, 0x0, @u64=0x4000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @typed={0x5, 0x47, 0x0, 0x0, @str='\x00'}, @typed={0x530f01b9a42882d3, 0xa6, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x44}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.682501105s ago: executing program 8 (id=4581): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc}, 0x10}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000040)=@getqdisc={0x34, 0x26, 0x208, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1, 0x5}, {0x8, 0x1}, {0x5, 0xe}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c800}, 0x0) 3.576039961s ago: executing program 8 (id=4582): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x6}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 3.172552395s ago: executing program 4 (id=4590): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) listen(r1, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x24040010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x7, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") creat(&(0x7f0000000080)='./file1\x00', 0x182) r6 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="62ed992ee70e419c"}}) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000000000000a004e2400000000ff020000000000000000000000000001050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006900000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a00fffcfffffffc00000000000000000000ff"], 0x190) syz_emit_ethernet(0xc2, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaafe86dd60011c4e008c3a00fe8000000000000000000000000000bbff020000000000000000000000000001800090787fff00061c108f938fda4cf503c03ab5303aa162c5f0cdca33bcc981756a727d279cc68c4722289f3f5404e03cd6421135f28f679ffa11e6fa0ee790a99c3a79a0be504ee2f8111ebc96763b99a2f20d1b9b458a97de9ffb4a14bc94e58e4e2e1a7f818182c9cf3e466bd3ec7cbeaf2977d8a93ee2748128267bec00478b09d0ebbde94644cd2b3cae0c38a5386857e5f364eb3f56221bcd0823030263c512b9963cbe23466bf615268d76521f7f3a76bfed653a4d7c78f82c40cc731464059a9934a1e149"], 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x2, 0x9e, 0x8, @mcast2, @local, 0x710, 0x10, 0x5, 0xffffffff}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7500) chown(&(0x7f0000000200)='./file0\x00', r9, r10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) sendmsg$nl_xfrm(r7, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="34010000140020002dbd7000ffdbdf25ff010000000000000000000000000001ac1414bb0000000000000000000000004e220f2c040000000000000032000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="b86b6e0001000000e4000600fc000000000000000000000000000001ac1414bb0000000000000000000000004e2000044e23ffff0200800087000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="00000000000000000000000000000001000004d433000000200100000000000000000000000000006c09000000000000050000000000000033168238000000000300000000000000fffffffffffffffffdffffffffffffff02000000000000000400000000000000af0400000000000005000000000000000300000000000000030000000000000009000000ed0c0000ff7f00002abd700003350000020001349a00000000000000"], 0x134}, 0x1, 0x0, 0x0, 0xc00}, 0x40044c4) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e1f, 0x4, @mcast2, 0xb90}, 0x1c) bind$inet6(r4, &(0x7f0000001bc0)={0xa, 0x4e21, 0x399, @private0}, 0x1c) 2.500731294s ago: executing program 8 (id=4597): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x6}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (fail_nth: 3) 1.719643379s ago: executing program 4 (id=4605): msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0xffbf, 0x0, 0x0, 0x2) 1.621996825s ago: executing program 2 (id=4608): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000004000000040000000a"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f0000000240)="716c62659f"}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x120c000, 0x1000, 0x0, 0x7}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'bridge_slave_1\x00', {0x2, 0x4e24, @broadcast}}) 1.524945841s ago: executing program 8 (id=4609): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r1, &(0x7f0000000100)=""/57, 0x39) (async) getdents(r1, 0xfffffffffffffffd, 0xbb) (async) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x20009, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000760000000000000000001800000000000001000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmmsg$inet6(r4, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) (async) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = io_uring_setup(0x177f, &(0x7f00000002c0)) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) listen(r8, 0x0) (async) accept(r8, 0x0, 0x0) (async) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r9, 0x80047437, 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) 1.517883451s ago: executing program 8 (id=4611): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100030000000000f26f3cd45126670400010000"], 0x1c, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffe, 0x1, @perf_config_ext={0x3, 0x7}, 0x0, 0x10000, 0x653, 0x0, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x63, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x62, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', r0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) mmap$binder(&(0x7f0000899000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x6) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x1f) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) ioctl$LOOP_CONFIGURE(r7, 0xc0c0128e, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 1.387303569s ago: executing program 2 (id=4614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000020605000a000000c49b000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c000780060004409bc42000060005400000000008000640"], 0x64}}, 0x0) 1.296277644s ago: executing program 2 (id=4615): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x137, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 14) 982.143582ms ago: executing program 2 (id=4617): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0380000000000000300012"], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x900) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0xcb8, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0xf23, 0x0, 0xc, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r5, 0x0, r8, 0x0, 0x38f9, 0x0) splice(r7, 0x0, r6, 0x0, 0x7fffffffffffffff, 0x0) write(r4, &(0x7f0000000040), 0xffffff4a) socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2005, 0x201}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040855}, 0x40) 753.954216ms ago: executing program 0 (id=4623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x2, &(0x7f00000002c0)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000840)={r2, r3/1000+60000}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) (async) r5 = syz_io_uring_setup(0x2bf3, &(0x7f0000000180)={0x0, 0x257a, 0x40, 0x1, 0x3cb}, 0x0, 0x0) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async, rerun: 32) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0xfffffffffffffff0}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0xfffffffe, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 32) close(0x3) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r4, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) (async, rerun: 32) recvmmsg(r1, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0xc, &(0x7f0000000380)=0x5, 0x4) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xc0a55000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x2d, 0x20040040) (async) bind$unix(r10, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) write(r10, 0x0, 0x0) (async) recvmmsg(r9, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) dup(r5) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 64) close(r0) (rerun: 64) 753.377586ms ago: executing program 0 (id=4624): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@debug}], [{@subj_user={'subj_user', 0x3d, '\\-'}}, {@uid_gt}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, 'jqfmt=vfsold'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@permit_directio}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @local}}, 0x1, 0x4, 0x9, 0x0, 0x27, 0x7fffffff, 0x6}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000540)}], 0x3) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x14, 0x0, 0x301, 0x1, 0x0, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8}, @void}}}, 0x24}}, 0x20000004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000001a00)={0xfffffffffffffffe, 0xffffffffffffffff, 0x0, {0x8}, 0x4c}, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x8, 0x40, 0x4, 0x5, {{0x8, 0x4, 0x0, 0x32, 0x20, 0x65, 0x0, 0x6, 0x6d, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@generic={0x7, 0x7, "24877c5151"}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={0x0}}, 0x53a0312486921888) ioctl$sock_bt_hci(r5, 0x400448e0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) recvmsg$can_bcm(r6, &(0x7f0000000780)={&(0x7f0000001a40)=@alg, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/106, 0x6a}], 0x1, &(0x7f0000001ac0)=""/4095, 0x1047}, 0x121) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a000000000000000000000008001900c18a3775bcf732adf9855812430a6306511f707e3750e7ac820e339a8b6bbf363dfcde0095575d7b325eaa86fd189377b810979b627a28c3d0b7b8e95da15cad8f8e4f06d5ba395e8f82a6b71fcfefc9d1c3eb61bf9cdea980c9ccbdb99a58e81a11ee9f1c4702c1dd23cf53daa4dfc40f2ec6a7cddb003c0959786129018d4391f203a90067c42aa9c09cf9c9a422fe91653b7b24b7145986ddf5efdee6718c2e26277a4675431f275b78cf073e2183b46615ad29", @ANYRES32=0x0, @ANYBLOB="0800100000000000"], 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x23004002, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@nodelalloc}, {@sysvgroups}, {@jqfmt_vfsold}, {@nombcache}, {@grpjquota, 0x2e}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") mknod$loop(0x0, 0x0, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 753.177636ms ago: executing program 4 (id=4625): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r5, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) bind$can_raw(r3, &(0x7f0000000000), 0x10) read(r3, &(0x7f00000017c0)=""/4090, 0xffa) sendmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@can={{0x3, 0x0, 0x1}, 0x8}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x400c8c1) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000100)={0x58, "1e95e78356ef440eb95a54e5a95f1bbf1b3168fbcbaf44fe9637bc49aa65ca01b1f5120acbf4aad0c02908c59f24748dd8caabcf687d1f7232d8a8197e492056742e30f7b3b6f17d67da3f414416b0fe8bdc919d2b56e153ca71afd0ac3c6dff067199bb8cd0d91fb6f9f059153d4287613d0d38ed6fc98b8b3c6cacba08e5fd"}) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="000000000200ba97bbe4568e398e1c5a0000b7050000080000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff4, &(0x7f00000014c0)=""/4084, 0x41100, 0x44, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=0x0, @ANYBLOB="085fa3526c86a7d99df20e0cd1f61c5cf6e903b38637437edbbbbc4ccc4913bb8b3eb7f300853c66b34fcddfa8018cb09c4a5c56c2efa723b139baf0f408bdbcf0567e4ef70292eababe14ad6b5fd9e8fc500db2d58342a7be279472161755e75c4db150108960967bc25de6862c8254c3e6790974a60a5dae"], 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 752.572786ms ago: executing program 7 (id=4626): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200000000000000000000000000000000000000000000000800000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) 657.072682ms ago: executing program 7 (id=4627): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)="9faf3b", 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) 645.552862ms ago: executing program 4 (id=4628): r0 = socket$igmp(0x2, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x0, 0x8, @vifc_lcl_ifindex=r1, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) (async) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$inet6(r2, &(0x7f0000001300)={&(0x7f0000000100)={0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x15}, 0x7}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000140)="6e9068deac684108ee4eea2fa5c34cdcf249ec5dad43191b66945ed4d5fed40b4b3629f23b08623fba457c51e7395ac7f2c49549e8384cde3eeccb29fc25be804bc0a6fc69b7d26f9b960eea5be4cd5c82213e4153cdd9eac501f3c2b5719d5c938242f0286d0fc912fafc481f5837a385a49ab41cff4c1f1f764ca9ae301da7957bf4756a4b2390f84332f94b59cc118df871783ba3efce8e0f08cb64721fceac66f0bf5ee5565cf079d6f3fc1be1b8e85b2f546b", 0xb5}, {&(0x7f0000000200)="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", 0x1000}], 0x2, &(0x7f0000001240)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @dstopts={{0x30, 0x29, 0x37, {0x87, 0x2, '\x00', [@ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0xa1b}, @calipso={0x7, 0x8, {0x3, 0x0, 0x6, 0x8}}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x33, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xa}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0xd}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @mcast1}]}}}], 0xb0}, 0x4004810) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000001380)={0x0, @ax25={0x3, @null, 0x2}, @l2tp={0x2, 0x0, @remote, 0x1}, @l2={0x1f, 0xe, @none, 0x3, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x81, &(0x7f0000001340)='ip6gre0\x00', 0xc, 0x10, 0x3ff}) (async) r3 = syz_open_dev$evdev(&(0x7f0000001400), 0x7, 0x400300) splice(r3, &(0x7f0000001440)=0x8, r2, &(0x7f0000001480)=0x7a70, 0x4, 0xc) r4 = socket$netlink(0x10, 0x3, 0x1f) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001580)={'syztnl0\x00', &(0x7f0000001500)={'syztnl2\x00', r1, 0x4, 0x6, 0x4, 0x9, 0x24, @loopback, @rand_addr=' \x01\x00', 0x1, 0x700, 0x3, 0x6}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000001840)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001800)={&(0x7f00000015c0)={0x20c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20}, 0x8000) (async) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000001880)) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000018c0)) r6 = socket(0xa, 0x6, 0x0) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000001900), 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)=@deltclass={0x44, 0x29, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffe0, 0x8}, {0xf}, {0x1}}, [@TCA_RATE={0x6, 0x5, {0x2a, 0x7d}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_tbf={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004005}, 0x4) (async) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r7, 0x5405, &(0x7f0000001a80)) getsockopt$MRT(r6, 0x0, 0x1f, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) (async) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001b40), 0x200e02, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000001b80)=0x200, 0x4) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) recvmsg$can_bcm(r0, &(0x7f0000001e80)={&(0x7f0000001bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/194, 0xc2}], 0x1, &(0x7f0000001d80)=""/204, 0xcc}, 0x40000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r9) (async) bind$packet(r8, &(0x7f0000001f00)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @local}, 0x14) (async) r10 = socket$inet(0x2, 0x6, 0x9) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000001f40)='illinois', 0x8) (async) sendto$l2tp6(r2, &(0x7f0000001f80)="53cfb46f5dc0369fd5694d9c0f25700703ae485920388814a99f829c5c0f99", 0x1f, 0x48800, &(0x7f0000001fc0)={0xa, 0x0, 0x88, @remote, 0x9, 0x3}, 0x20) (async) ioctl$PPPIOCATTACH(r8, 0x4004743d, &(0x7f0000002000)=0x2) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f0000002040), &(0x7f0000002080)=0x4) 630.011343ms ago: executing program 0 (id=4629): socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 597.733055ms ago: executing program 7 (id=4630): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x28, 0xfffffffffffffd92, 0x0, 0x0, 0x0, 0x9e, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 528.819349ms ago: executing program 7 (id=4631): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x137, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 15) 517.83254ms ago: executing program 0 (id=4632): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x6}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty=0x91ff}, 0x106}, 0x1c) 246.368746ms ago: executing program 7 (id=4633): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r3, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r8, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r9, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000200020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200000000050007"], 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r9, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10850}, 0x8040) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x88, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x44890}, 0x80) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="f4ff410722207acca796c3d70af1795ea9fa5b21a2407bd323e6f9b3bbae8df0c267bb6ef2472c3011c4c3f8df88f0a538f9be0615540dc5ebfd2f13310fe9cd41955c5c7788213253c80f2028c0469b2a5893c368f213353be56401d9576f10ccebb40c65b00c49b9bfe33c4a0d7a55d85c4b9da5aa805b74c196740085115a390b7ab9965b6a0d4998897bdf6c069b4641adf802dc45eb3d071e9a67382ef90055fa909d91d8e48a330d61dde8", @ANYRES16=r9, @ANYBLOB="000405000000fcdbdf2508000000"], 0xfffffffffffffd9b}}, 0x4000) 189.031219ms ago: executing program 0 (id=4634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000f5ffffff0000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000014000000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) 188.414359ms ago: executing program 4 (id=4635): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x7ff, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa2, 0x0, &(0x7f0000000300)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240080cd4f4e5b5da601596c31f137d2ce6ca74fd87f90ea0be786fe13ac0805807dd6853458eccc84575e9af5fee935d3bc54f9bdf5cf073b5a597a9df9cb422ce2ab5ff0700000000000093b110a54f32ad69d05a805194", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2a, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x400100, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r4, 0x0, 0x40000004, &(0x7f00000006c0)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)={0xd8, 0x3c, 0x9, 0x0, 0x25dfdbfc, {0x1}, [@typed={0x4}, @typed={0xbf, 0x9, 0x0, 0x0, @binary="18a3e4db055504d0cf599353f082051d9a95a7492351fcf9082f300e3cf4ad80608974dff8b71ae06a40affd7295d4b0efd17500dcbde609b70262d1f062776e253f4812bdd7299747331104c950951896cea04f9079edc8c763adfce453ee1d18ce433c15849b8a11cbafee74a14ad02ecb29a333211dcde2766c55c75c09f99a4aec6512cf42d2277901f850a1f87a963425d4ce6a5f0f9fcb5f5b599dfc300e12c9424e30a02595b2619b5a5652e73a4a6ae0098f8ec8636514"}]}, 0xd8}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r5, 0x0, 0x0) r6 = getuid() quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000900, r6, &(0x7f0000000380)) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000180)) r8 = socket(0x10, 0x3, 0x0) r9 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0xd, 0x0, 0x38159f4e, 0xd21f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x9, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x3fffffffc, 0x1}, 0x1208, 0x4000000, 0xfffffffc, 0x6, 0xfff, 0x2003, 0x6}, 0x0, 0xffefffffffffffff, r9, 0x3) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd30, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff3, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x421}}]}}]}, 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000058d9ea4bc73b3ff37c2000000000000000000000000085000000ad936a"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1e, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) 176.52198ms ago: executing program 0 (id=4636): r0 = fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xf357c90590ae850f) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000400)='dirsync\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r3 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x1037, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r4, &(0x7f0000001600), 0x0}, 0x20) write(r3, &(0x7f0000000100)="240000001a005f0400f9f4070009040180202000000000faffffffff07001e0040000000", 0x24) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x220042, 0x0) ppoll(&(0x7f0000000380)=[{r9, 0x82}, {r10, 0x4690}, {r1}], 0x3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r11, 0x8001}}, 0x48) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/54, 0x36) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 115.472233ms ago: executing program 2 (id=4637): msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x18100, 0x0, 0x0, 0x2) 49.808937ms ago: executing program 7 (id=4638): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x23004002, &(0x7f0000000100)={[{@errors_continue}, {@nodelalloc}, {@jqfmt_vfsv0}, {@jqfmt_vfsold}, {@nombcache}, {@grpjquota, 0x2e}], [{@permit_directio}]}, 0x1, 0x480, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvbh59/fL4lWcfUENBRBSSJi3QAxcQSL0gIcEBjiENVanboiZItKpoQagcEQfOwBGJv4ATXBBwAnGFO0KqUC8UDmC09m67iR3XSeq4wZ+P5Hhmd9Yzs7MTz+7sOoC+Vcn+JBG1iPg5IsYa0aUJKo23a1cvzP159cJcErXaS78n9XR/XL0wVyQtttuRRybSiPT9JPa0yHfh3PmTs9Xq/Nk8PrV46s2phXPnHz9xavb4/PH50zNHjhw+NP3UkzNP3JJ6jmRl3f3Omb27jr760QtztXjtuy+y8v4vX1+uR8P4uvOsRGXpvqwbrv99eN2ffnsZKYWTwR4WhFUZiIisuYbq/X8sBuJG443F8+/1tHBAV9VqtdqWpqUDReBSDfgPS6LXJQB6o/iiz85/i9cGDj967sozjROgrN7X8ldjzWCk2dvWxhn7SJfyr0TEK5f++iR7RcvrEAAAt9ZX2fjnsVbjv9Hk7lK60XxuaDwiDkTEzoi4IyLujIi7IiJLe09E3Bvly0c3V1kWbx7//LhtzZXrQDb+ezqf21o6/kuLJOMDeWykXv+h5PUT1fmD+T6ZiKEtWXy6TR5fP/fThyutK4//sleWfzEWzMvx2+CyC3THZhdn11PnsivvRuwebFX/5PpMQBIRuyJi9xo+P9tnJx79fG8WHt3RvH7vTevfxi2YZ6p9FvFIo/0vxbL6F5JGTivNT05tjer8waniqGj2/Q+XXyzHh0rhm7d/d2Xtv73l8Z/Xv+gGxXztwurzuPzLByue06z1+B9OXq6Hh/Nlb88uLp6djhjOFyxZPnNj2yJepM/qP7G/Vf1Hk50Rf3+ab7cnP1bvi4j7I2JfXvYHIuLBiNjfpv7fPvvQG+33UG/b/1i79o8YT8rz9WsIDJz85suV8u+s/Q/XQxP5kk7+/3VawPXsOwAAANgs0vo98Ek6eT2cppOTjXv4B2N7Wj2zsHigEm+dPta4V348htLiStdY6XrodH5tuIjPLIsfioj/1+802laPT86dqXZrTh3ozI4V+n/m11XM4wCb1Krm0ZqfaAM2sVL//1j3hv7ieW3oX/o/9C/9H/pXq/5/MeJaD4oCbDDf/9C/8v6/tdflADae73/oX/o/9KXmR+KLn1tZy5P+NwI7j65r8z4KDHTpk6P8ox1dCETaJs0/+c9L9n73tg6kt0Mx9uWBLRHR6VYXu9qmy48fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAze/fAAAA//+13OYg") setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r4, &(0x7f00000004c0)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @local, 0x80000000}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000940)={0x0, 0x7, 0x2, 0x3, 0x1, 0x6, 0xe, 0x56cb, {0x0, @in6={{0xa, 0x4e21, 0xf, @mcast2}}, 0xb, 0x5, 0x8, 0x1, 0x1}}, &(0x7f0000000180)=0xb0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r3, r6}}, './file0\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000090001007384f1edde61df83321e797a30000000000900020073797a3200000800000004801c000180090001006d617371000000000c0002800800014000000001070000000000000000000000000000ff0013b70acdc6fe65454152a6af2256f6b4d4c302dfefd004"], 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) flistxattr(r7, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x1dba, &(0x7f00000002c0)={0x0, 0x1a99, 0x2000, 0x1, 0x15}, &(0x7f0000000240)=0x0, &(0x7f00000003c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x110, &(0x7f0000000400)=0x8, 0x0, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r2) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001000000dc000000000000001e26b94a091fe9aaa8b2bf12452aeb07dd0082d6e2d1fe33cd6463fbac35134c54934db6f435ef1b6ace77ec8980f1ce9a8734eec9851dbe0c80cc78d9641808734a606048cb8369883470ccec3d4706b863896d2498964b"], 0x18}, 0xfc00) 9.650519ms ago: executing program 2 (id=4639): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x20000880) socket(0x2, 0x80805, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r1, 0x5040, 0x7ccb, 0x4c, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x77, 0x4) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/20, 0x14}], 0x1) 0s ago: executing program 4 (id=4640): unshare(0x20060400) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) unshare(0x4000800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5dd36fc9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) kernel console output (not intermixed with test programs): 0007f0b90167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.130547][T16384] RAX: ffffffffffffffda RBX: 00007f0b91985fa0 RCX: 00007f0b9170aeb9 [ 194.130641][T16384] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000003 [ 194.130655][T16384] RBP: 00007f0b90167090 R08: 0000000000000000 R09: 0000000000000000 [ 194.130671][T16384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.130732][T16384] R13: 00007f0b91986038 R14: 00007f0b91985fa0 R15: 00007ffe6e1c6038 [ 194.130751][T16384] [ 194.137315][T16339] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.4059: mark_inode_dirty error [ 194.352096][T16396] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 194.354648][T16339] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 194.400746][T16396] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 194.424734][T16339] EXT4-fs (loop1): 1 truncate cleaned up [ 194.477562][T16396] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 194.477990][T16396] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 194.478354][T16396] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 194.478554][T16396] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 194.478848][T16396] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 194.479263][T16396] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 194.536274][T16399] FAULT_INJECTION: forcing a failure. [ 194.536274][T16399] name failslab, interval 1, probability 0, space 0, times 0 [ 194.541146][T16396] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 194.551671][T16399] CPU: 0 UID: 0 PID: 16399 Comm: syz.9.4080 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.551708][T16399] Tainted: [W]=WARN [ 194.551715][T16399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.551729][T16399] Call Trace: [ 194.551736][T16399] [ 194.551745][T16399] __dump_stack+0x1d/0x30 [ 194.551772][T16399] dump_stack_lvl+0x95/0xd0 [ 194.551846][T16399] dump_stack+0x15/0x1b [ 194.551867][T16399] should_fail_ex+0x263/0x280 [ 194.551900][T16399] should_failslab+0x8c/0xb0 [ 194.551956][T16399] __kmalloc_cache_noprof+0x64/0x4a0 [ 194.551984][T16399] ? cma_alloc_port+0x3d/0x320 [ 194.552028][T16399] cma_alloc_port+0x3d/0x320 [ 194.552134][T16399] rdma_bind_addr_dst+0x1813/0x2290 [ 194.552186][T16399] ? selinux_file_open+0x2e6/0x330 [ 194.552218][T16399] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 194.552292][T16399] rdma_resolve_addr+0x43a/0x1350 [ 194.552319][T16399] ? terminate_walk+0x1e6/0x210 [ 194.552345][T16399] ? path_openat+0x1d94/0x23c0 [ 194.552387][T16399] ucma_resolve_ip+0x283/0x370 [ 194.552421][T16399] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 194.552453][T16399] ucma_write+0x1c9/0x260 [ 194.552635][T16399] vfs_writev+0x42b/0x900 [ 194.552662][T16399] ? __pfx_ucma_write+0x10/0x10 [ 194.552775][T16399] do_writev+0xe9/0x210 [ 194.552862][T16399] __x64_sys_writev+0x45/0x50 [ 194.552885][T16399] x64_sys_call+0x1ba5/0x3000 [ 194.552959][T16399] do_syscall_64+0xc0/0x2a0 [ 194.552990][T16399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.553013][T16399] RIP: 0033:0x7f0b9170aeb9 [ 194.553030][T16399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.553092][T16399] RSP: 002b:00007f0b90167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 194.553114][T16399] RAX: ffffffffffffffda RBX: 00007f0b91985fa0 RCX: 00007f0b9170aeb9 [ 194.553130][T16399] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000004 [ 194.553145][T16399] RBP: 00007f0b90167090 R08: 0000000000000000 R09: 0000000000000000 [ 194.553160][T16399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.553273][T16399] R13: 00007f0b91986038 R14: 00007f0b91985fa0 R15: 00007ffe6e1c6038 [ 194.553294][T16399] [ 194.811020][T16396] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 194.841396][T16411] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 194.873908][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4082'. [ 194.909455][T16418] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4082'. [ 194.956960][T16418] netlink: 'syz.9.4082': attribute type 27 has an invalid length. [ 195.022394][T16424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4088'. [ 195.152172][T16437] EXT4-fs mount: 109 callbacks suppressed [ 195.152189][T16437] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.262302][T13557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.373619][T16418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.393618][T16457] gre0: entered promiscuous mode [ 195.505230][T16465] FAULT_INJECTION: forcing a failure. [ 195.505230][T16465] name failslab, interval 1, probability 0, space 0, times 0 [ 195.517955][T16465] CPU: 1 UID: 0 PID: 16465 Comm: syz.2.4099 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.517987][T16465] Tainted: [W]=WARN [ 195.517993][T16465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.518006][T16465] Call Trace: [ 195.518030][T16465] [ 195.518062][T16465] __dump_stack+0x1d/0x30 [ 195.518088][T16465] dump_stack_lvl+0x95/0xd0 [ 195.518125][T16465] dump_stack+0x15/0x1b [ 195.518157][T16465] should_fail_ex+0x263/0x280 [ 195.518209][T16465] should_failslab+0x8c/0xb0 [ 195.518312][T16465] kmem_cache_alloc_noprof+0x68/0x490 [ 195.518402][T16465] ? skb_clone+0x151/0x1f0 [ 195.518421][T16465] skb_clone+0x151/0x1f0 [ 195.518438][T16465] __netlink_deliver_tap+0x2c9/0x500 [ 195.518532][T16465] ? netlink_attachskb+0x2e2/0x660 [ 195.518557][T16465] netlink_sendskb+0x126/0x150 [ 195.518614][T16465] netlink_unicast+0x2a2/0x690 [ 195.518642][T16465] netlink_ack+0x4c8/0x500 [ 195.518726][T16465] netlink_rcv_skb+0x192/0x220 [ 195.518751][T16465] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 195.518784][T16465] nfnetlink_rcv+0x167/0x1720 [ 195.518822][T16465] ? __kfree_skb+0x109/0x150 [ 195.518866][T16465] ? nlmon_xmit+0x4f/0x60 [ 195.518968][T16465] ? consume_skb+0x49/0x140 [ 195.518992][T16465] ? nlmon_xmit+0x4f/0x60 [ 195.519034][T16465] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 195.519064][T16465] ? __dev_queue_xmit+0x139a/0x1f20 [ 195.519127][T16465] ? __dev_queue_xmit+0x148/0x1f20 [ 195.519207][T16465] ? ref_tracker_free+0x37d/0x3e0 [ 195.519238][T16465] ? __netlink_deliver_tap+0x4dc/0x500 [ 195.519320][T16465] netlink_unicast+0x5c0/0x690 [ 195.519347][T16465] netlink_sendmsg+0x5c8/0x6f0 [ 195.519366][T16465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.519407][T16465] ____sys_sendmsg+0x5af/0x600 [ 195.519456][T16465] ___sys_sendmsg+0x195/0x1e0 [ 195.519483][T16465] __x64_sys_sendmsg+0xd4/0x160 [ 195.519503][T16465] x64_sys_call+0x17ba/0x3000 [ 195.519529][T16465] do_syscall_64+0xc0/0x2a0 [ 195.519630][T16465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.519730][T16465] RIP: 0033:0x7f883885aeb9 [ 195.519746][T16465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.519844][T16465] RSP: 002b:00007f88372b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.519880][T16465] RAX: ffffffffffffffda RBX: 00007f8838ad5fa0 RCX: 00007f883885aeb9 [ 195.519893][T16465] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000003 [ 195.519928][T16465] RBP: 00007f88372b7090 R08: 0000000000000000 R09: 0000000000000000 [ 195.519940][T16465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.519952][T16465] R13: 00007f8838ad6038 R14: 00007f8838ad5fa0 R15: 00007fff2ea45388 [ 195.519970][T16465] [ 195.525956][T16467] EXT4-fs: Ignoring removed oldalloc option [ 195.585777][T16466] set_capacity_and_notify: 19 callbacks suppressed [ 195.585859][T16466] loop8: detected capacity change from 0 to 4096 [ 195.804030][T16481] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4106'. [ 195.821726][T16467] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.4098: Parent and EA inode have the same ino 15 [ 195.824942][T16466] ext4: Unknown parameter 'euid>00000000000000000000' [ 195.850602][T16467] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.4098: Parent and EA inode have the same ino 15 [ 195.871258][T16486] netlink: 'syz.2.4107': attribute type 3 has an invalid length. [ 195.879215][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4107'. [ 195.888507][T16467] EXT4-fs (loop1): 1 orphan inode deleted [ 195.895391][T16467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.952377][T16467] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.4098: deleted inode referenced: 15 [ 195.956977][T16488] loop8: detected capacity change from 0 to 1024 [ 196.071377][T16488] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.115121][T16495] lo speed is unknown, defaulting to 1000 [ 196.124615][T11668] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.139976][T16497] loop2: detected capacity change from 0 to 128 [ 196.148000][T16495] lo speed is unknown, defaulting to 1000 [ 196.166526][T13557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.252158][T16508] FAULT_INJECTION: forcing a failure. [ 196.252158][T16508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.265530][T16508] CPU: 1 UID: 0 PID: 16508 Comm: syz.1.4114 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 196.265566][T16508] Tainted: [W]=WARN [ 196.265575][T16508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.265589][T16508] Call Trace: [ 196.265598][T16508] [ 196.265610][T16508] __dump_stack+0x1d/0x30 [ 196.265638][T16508] dump_stack_lvl+0x95/0xd0 [ 196.265682][T16508] dump_stack+0x15/0x1b [ 196.265742][T16508] should_fail_ex+0x263/0x280 [ 196.265776][T16508] should_fail+0xb/0x20 [ 196.265801][T16508] should_fail_usercopy+0x1a/0x20 [ 196.265873][T16508] _copy_to_user+0x20/0xa0 [ 196.265915][T16508] simple_read_from_buffer+0xb5/0x130 [ 196.265949][T16508] proc_fail_nth_read+0x10e/0x150 [ 196.266026][T16508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.266060][T16508] vfs_read+0x1ab/0x7f0 [ 196.266090][T16508] ? __rcu_read_unlock+0x4e/0x70 [ 196.266123][T16508] ? __fget_files+0x184/0x1c0 [ 196.266192][T16508] ? mutex_lock+0x57/0x90 [ 196.266216][T16508] ksys_read+0xdc/0x1a0 [ 196.266239][T16508] __x64_sys_read+0x40/0x50 [ 196.266348][T16508] x64_sys_call+0x2889/0x3000 [ 196.266383][T16508] do_syscall_64+0xc0/0x2a0 [ 196.266494][T16508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.266518][T16508] RIP: 0033:0x7fe39914b78e [ 196.266537][T16508] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.266555][T16508] RSP: 002b:00007fe397be6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.266643][T16508] RAX: ffffffffffffffda RBX: 00007fe397be76c0 RCX: 00007fe39914b78e [ 196.266658][T16508] RDX: 000000000000000f RSI: 00007fe397be70a0 RDI: 0000000000000004 [ 196.266740][T16508] RBP: 00007fe397be7090 R08: 0000000000000000 R09: 0000000000000000 [ 196.266835][T16508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.266849][T16508] R13: 00007fe399406038 R14: 00007fe399405fa0 R15: 00007ffc319eb918 [ 196.266871][T16508] [ 196.606146][T14482] kworker/u8:26: attempt to access beyond end of device [ 196.606146][T14482] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 196.623045][T16524] netlink: 'syz.1.4119': attribute type 4 has an invalid length. [ 196.631104][T16524] netlink: 'syz.1.4119': attribute type 4 has an invalid length. [ 196.636154][T14482] kworker/u8:26: attempt to access beyond end of device [ 196.636154][T14482] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 196.669791][T14482] kworker/u8:26: attempt to access beyond end of device [ 196.669791][T14482] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 196.685225][T16527] loop9: detected capacity change from 0 to 1024 [ 196.714143][T14482] kworker/u8:26: attempt to access beyond end of device [ 196.714143][T14482] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 196.729859][T14482] kworker/u8:26: attempt to access beyond end of device [ 196.729859][T14482] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 196.746400][T14482] kworker/u8:26: attempt to access beyond end of device [ 196.746400][T14482] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 196.761396][T14482] kworker/u8:26: attempt to access beyond end of device [ 196.761396][T14482] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 196.775850][T16536] loop1: detected capacity change from 0 to 128 [ 196.782759][T14482] kworker/u8:26: attempt to access beyond end of device [ 196.782759][T14482] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 196.782995][T16527] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.799980][T14482] kworker/u8:26: attempt to access beyond end of device [ 196.799980][T14482] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 196.822166][T14482] kworker/u8:26: attempt to access beyond end of device [ 196.822166][T14482] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 196.863080][T16540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.883710][T16540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.907257][T16529] loop8: detected capacity change from 0 to 8192 [ 196.911729][T11668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 196.921551][T11668] FAT-fs (loop1): Filesystem has been set read-only [ 196.931976][T15808] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.969284][T16543] loop7: detected capacity change from 0 to 512 [ 197.038729][T16548] 9p: Bad value for 'rfdno' [ 197.047793][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 197.047810][ T29] audit: type=1400 audit(1770232263.121:2865): avc: denied { setattr } for pid=16547 comm="syz.9.4127" path="socket:[49712]" dev="sockfs" ino=49712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 197.078589][ T29] audit: type=1400 audit(1770232263.121:2866): avc: denied { lock } for pid=16547 comm="syz.9.4127" path="socket:[49713]" dev="sockfs" ino=49713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 197.085420][T16552] loop7: detected capacity change from 0 to 1024 [ 197.119762][T13557] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 197.127803][T13557] FAT-fs (loop8): Filesystem has been set read-only [ 197.135278][T16540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.144021][T16540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.153416][T16552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.153912][T16540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.188344][T12970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.212443][T16540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.237043][T12237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.247404][T12237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.257801][T12237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 39492 - 0 [ 197.290631][T16562] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4132'. [ 197.309341][T16540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.338471][T16540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.357083][T12237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.367437][T12237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.367454][ T29] audit: type=1400 audit(1770232263.431:2867): avc: denied { ioctl } for pid=16563 comm="syz.8.4135" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=50396 ioctlcmd=0x2408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 197.391076][T16540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.403730][T12237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 39492 - 0 [ 197.431023][T16540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.457055][ T29] audit: type=1326 audit(1770232263.531:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16574 comm="syz.8.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d88dfaeb9 code=0x7ffc0000 [ 197.527370][T12237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.533649][T16579] loop7: detected capacity change from 0 to 1764 [ 197.537785][T12237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.554417][T12237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 39492 - 0 [ 197.566380][ T29] audit: type=1326 audit(1770232263.561:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16574 comm="syz.8.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d88dfaeb9 code=0x7ffc0000 [ 197.589983][ T29] audit: type=1326 audit(1770232263.561:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16574 comm="syz.8.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d88dfaeb9 code=0x7ffc0000 [ 197.613561][ T29] audit: type=1326 audit(1770232263.611:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16574 comm="syz.8.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d88dfaeb9 code=0x7ffc0000 [ 197.616520][T16587] loop9: detected capacity change from 0 to 1024 [ 197.637104][ T29] audit: type=1326 audit(1770232263.611:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16574 comm="syz.8.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f7d88dfaeb9 code=0x7ffc0000 [ 197.637135][ T29] audit: type=1326 audit(1770232263.611:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16574 comm="syz.8.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d88dfaeb9 code=0x7ffc0000 [ 197.690705][ T29] audit: type=1400 audit(1770232263.611:2874): avc: denied { write } for pid=16574 comm="syz.8.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 197.711638][T16587] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.736960][T16568] lo speed is unknown, defaulting to 1000 [ 197.746003][T12237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.756404][T12237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.766768][T12237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 39492 - 0 [ 197.777978][T15808] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.795475][T16568] lo speed is unknown, defaulting to 1000 [ 197.891791][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4146'. [ 197.919796][T16568] chnl_net:caif_netlink_parms(): no params data found [ 197.982862][T16607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16607 comm=syz.7.4146 [ 197.998938][T12237] bridge_slave_1: left allmulticast mode [ 198.004752][T12237] bridge_slave_1: left promiscuous mode [ 198.010510][T12237] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.021833][T12237] bridge_slave_0: left allmulticast mode [ 198.027541][T12237] bridge_slave_0: left promiscuous mode [ 198.033353][T12237] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.164917][T16634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4147'. [ 198.263244][T12237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.273398][T12237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.283829][T12237] bond0 (unregistering): Released all slaves [ 198.291232][T12237] bond1 (unregistering): Released all slaves [ 198.300158][T12237] bond2 (unregistering): Released all slaves [ 198.358421][T16568] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.365671][T16568] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.373132][T16568] bridge_slave_0: entered allmulticast mode [ 198.379731][T16568] bridge_slave_0: entered promiscuous mode [ 198.386835][T16568] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.394219][T16568] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.402091][T16568] bridge_slave_1: entered allmulticast mode [ 198.408639][T16568] bridge_slave_1: entered promiscuous mode [ 198.425278][T16640] macvlan0: entered allmulticast mode [ 198.430732][T16640] veth1_vlan: entered allmulticast mode [ 198.449475][T12237] hsr_slave_0: left promiscuous mode [ 198.455572][T12237] hsr_slave_1: left promiscuous mode [ 198.464766][T12237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.472218][T12237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.479907][T12237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.487522][T12237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.513005][T12237] veth1_macvtap: left promiscuous mode [ 198.518654][T12237] veth0_macvtap: left promiscuous mode [ 198.524489][T12237] veth1_vlan: left promiscuous mode [ 198.530011][T12237] veth0_vlan: left promiscuous mode [ 198.619101][T12237] team0 (unregistering): Port device team_slave_1 removed [ 198.630105][T12237] team0 (unregistering): Port device C removed [ 198.675562][T16640] veth1_vlan: left allmulticast mode [ 198.684009][T16640] macvlan0 (unregistering): left allmulticast mode [ 198.696799][T16568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.733777][T16568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.743303][T16651] lo speed is unknown, defaulting to 1000 [ 198.768059][T16667] lo speed is unknown, defaulting to 1000 [ 198.770411][T16568] team0: Port device team_slave_0 added [ 198.779429][T16651] lo speed is unknown, defaulting to 1000 [ 198.789940][T16568] team0: Port device team_slave_1 added [ 198.809029][T16667] lo speed is unknown, defaulting to 1000 [ 198.878816][T16568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.885861][T16568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.912033][T16568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.940532][T16568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.947639][T16568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.973724][T16568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.032072][T16690] 9p: Bad value for 'rfdno' [ 199.203839][T16568] hsr_slave_0: entered promiscuous mode [ 199.209976][T16568] hsr_slave_1: entered promiscuous mode [ 199.216727][T16568] debugfs: 'hsr0' already exists in 'hsr' [ 199.222512][T16568] Cannot create hsr debugfs directory [ 199.338967][T16681] xt_TCPMSS: Only works on TCP SYN packets [ 199.791979][T16568] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.805393][T16568] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.831913][T16568] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.850816][T16568] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 199.942393][T16749] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.952174][T16568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.007363][T13557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.025504][T16568] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.070932][T12237] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.078058][T12237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.123416][T12237] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.130538][T12237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.167785][T16771] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 200.175928][T16568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.175952][T16568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.198330][T16771] FAT-fs (loop7): Filesystem has been set read-only [ 200.231931][T16771] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 200.240460][T16771] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 200.260074][T16568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.437089][T16568] veth0_vlan: entered promiscuous mode [ 200.458393][T16568] veth1_vlan: entered promiscuous mode [ 200.490291][T16568] veth0_macvtap: entered promiscuous mode [ 200.515093][T16568] veth1_macvtap: entered promiscuous mode [ 200.563066][T16568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.587498][T16568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.625078][T16808] set_capacity_and_notify: 2 callbacks suppressed [ 200.625099][T16808] loop9: detected capacity change from 0 to 1024 [ 200.664879][T14484] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.685756][T14484] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.706368][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.737115][T16808] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.749892][T14477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.876385][T16808] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4174'. [ 200.897435][T15808] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.904260][T16832] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4177'. [ 200.970437][T16838] loop0: detected capacity change from 0 to 128 [ 201.043251][T16852] loop2: detected capacity change from 0 to 512 [ 201.057017][T16853] loop8: detected capacity change from 0 to 1024 [ 201.081830][T16852] ext4: Bad value for 'resgid' [ 201.086663][T16852] ext4: Bad value for 'resgid' [ 201.092162][T16853] EXT4-fs: Ignoring removed oldalloc option [ 201.117626][T16852] loop2: detected capacity change from 0 to 2048 [ 201.125320][T16853] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.149090][T16853] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 201.183803][T16867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4185'. [ 201.184045][T16853] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.4181: bad orphan inode 11 [ 201.227604][T16853] ext4_test_bit(bit=10, block=4) = 1 [ 201.232960][T16853] is_bad_inode(inode)=0 [ 201.237129][T16853] NEXT_ORPHAN(inode)=3254779904 [ 201.242114][T16853] max_ino=32 [ 201.245309][T16853] i_nlink=0 [ 201.341347][T16853] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.4181: lblock 2 mapped to illegal pblock 2 (length 1) [ 201.367801][T16853] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.4181: lblock 0 mapped to illegal pblock 48 (length 1) [ 201.372518][T16888] loop0: detected capacity change from 0 to 128 [ 201.392892][T16885] netlink: 'syz.2.4188': attribute type 5 has an invalid length. [ 201.395614][T16853] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4181: Failed to acquire dquot type 0 [ 201.412800][T16853] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 201.461733][T16853] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.4181: mark_inode_dirty error [ 201.474682][T16888] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.509995][T16853] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 201.535250][T16888] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.552054][T16853] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.590460][T16908] loop7: detected capacity change from 0 to 1764 [ 201.622655][T16853] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.634122][T16853] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz.8.4181: Invalid inode table block 1 in block_group 0 [ 201.649938][T16568] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.674419][T16853] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 201.709644][T16853] EXT4-fs error (device loop8): ext4_quota_off:7270: inode #3: comm syz.8.4181: mark_inode_dirty error [ 201.816652][T16915] loop9: detected capacity change from 0 to 256 [ 201.870973][T16944] loop7: detected capacity change from 0 to 1024 [ 201.883478][T16944] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.914095][T15808] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 201.923352][T15808] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 202.034537][T12970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.117701][T16973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.139068][T16974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.161271][T16973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.188304][T16974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.243926][ T5776] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.254276][ T5776] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.327566][T16989] veth2: entered promiscuous mode [ 202.332769][T16989] veth2: entered allmulticast mode [ 202.374737][ T5776] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.385176][ T5776] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.406576][T17000] loop2: detected capacity change from 0 to 1024 [ 202.413392][T17000] EXT4-fs: Ignoring removed orlov option [ 202.447200][T17006] netlink: 'syz.8.4218': attribute type 3 has an invalid length. [ 202.469954][T17000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.507962][ T5776] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.518317][ T5776] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.558581][T17006] lo speed is unknown, defaulting to 1000 [ 202.571921][T17006] lo speed is unknown, defaulting to 1000 [ 202.604587][ T5776] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.614963][ T5776] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.634537][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 202.634560][ T29] audit: type=1400 audit(1770232268.711:2987): avc: denied { rename } for pid=16999 comm="syz.2.4216" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 202.666181][T16991] lo speed is unknown, defaulting to 1000 [ 202.693379][T17031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.693882][T16991] lo speed is unknown, defaulting to 1000 [ 202.736490][T16568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.767820][T11506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.872739][ T5776] bridge_slave_1: left allmulticast mode [ 202.878583][ T5776] bridge_slave_1: left promiscuous mode [ 202.878712][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.896857][ T5776] bridge_slave_0: left allmulticast mode [ 202.896879][ T5776] bridge_slave_0: left promiscuous mode [ 202.897057][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.925832][T17062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4226'. [ 203.117121][T17090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.149579][T16568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.162613][ T5776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.184719][ T5776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.205960][T17106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4231'. [ 203.216147][ T5776] bond0 (unregistering): Released all slaves [ 203.250536][T17106] netlink: 2812 bytes leftover after parsing attributes in process `syz.0.4231'. [ 203.289856][ T29] audit: type=1400 audit(1770232269.361:2988): avc: denied { setattr } for pid=17108 comm="syz.8.4232" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 203.325240][ T5776] hsr_slave_0: left promiscuous mode [ 203.339491][ T5776] hsr_slave_1: left promiscuous mode [ 203.353093][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.360707][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.393037][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.400518][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.445995][T17131] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4237: invalid indirect mapped block 256 (level 2) [ 203.462309][ T5776] veth1_macvtap: left promiscuous mode [ 203.467949][ T5776] veth0_macvtap: left promiscuous mode [ 203.474687][T17131] EXT4-fs (loop7): 2 truncates cleaned up [ 203.480901][T17131] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.498181][ T5776] veth1_vlan: left promiscuous mode [ 203.503624][ T5776] veth0_vlan: left promiscuous mode [ 203.539680][T12970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.648040][ T5776] team0 (unregistering): Port device team_slave_1 removed [ 203.667027][ T5776] team0 (unregistering): Port device team_slave_0 removed [ 203.758254][T16991] chnl_net:caif_netlink_parms(): no params data found [ 203.918431][T16991] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.925736][T16991] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.961722][T16991] bridge_slave_0: entered allmulticast mode [ 203.994602][T16991] bridge_slave_0: entered promiscuous mode [ 204.100182][T16991] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.107404][T16991] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.120748][T17200] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27666 sclass=netlink_xfrm_socket pid=17200 comm=syz.2.4248 [ 204.152607][T16991] bridge_slave_1: entered allmulticast mode [ 204.159715][T16991] bridge_slave_1: entered promiscuous mode [ 204.172546][T17144] lo speed is unknown, defaulting to 1000 [ 204.252008][T17144] lo speed is unknown, defaulting to 1000 [ 204.255971][T17209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4251'. [ 204.274938][T16991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.320332][T16991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.329963][T17213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4251'. [ 204.401799][T17209] 9p: Bad value for 'rfdno' [ 204.402088][ T29] audit: type=1400 audit(1770232270.471:2989): avc: denied { append } for pid=17208 comm="syz.2.4251" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 204.493966][T17213] 9p: Bad value for 'rfdno' [ 204.616852][T17147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.631752][T16991] team0: Port device team_slave_0 added [ 204.638626][T16991] team0: Port device team_slave_1 added [ 204.708739][T16991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.715759][T16991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.742117][T16991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.784618][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.833633][T16991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.840664][T16991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.866636][T16991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.904026][T17264] netlink: 'syz.8.4255': attribute type 2 has an invalid length. [ 204.906463][T17261] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 204.944437][T16991] hsr_slave_0: entered promiscuous mode [ 204.950775][T16991] hsr_slave_1: entered promiscuous mode [ 204.956872][T16991] debugfs: 'hsr0' already exists in 'hsr' [ 204.962795][T16991] Cannot create hsr debugfs directory [ 205.087051][T17279] geneve2: entered promiscuous mode [ 205.124871][T17290] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4263'. [ 205.141227][ T3304] Alternate GPT is invalid, using primary GPT. [ 205.147702][ T3304] loop8: p2 p3 p7 [ 205.161264][T17290] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4263'. [ 205.170444][T17290] netlink: 'syz.7.4263': attribute type 2 has an invalid length. [ 205.195081][T17286] Alternate GPT is invalid, using primary GPT. [ 205.201791][T17286] loop8: p2 p3 p7 [ 205.218793][ T29] audit: type=1400 audit(1770232271.291:2990): avc: denied { read write } for pid=17285 comm="syz.8.4261" name="loop8p3" dev="devtmpfs" ino=2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.242287][ T29] audit: type=1400 audit(1770232271.291:2991): avc: denied { open } for pid=17285 comm="syz.8.4261" path="/dev/loop8p3" dev="devtmpfs" ino=2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.358568][T17302] udevd[17302]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 205.373961][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 205.375540][ T7095] udevd[7095]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 205.400566][T17290] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4263: bg 0: block 248: padding at end of block bitmap is not set [ 205.415988][ T29] audit: type=1400 audit(1770232271.421:2992): avc: denied { ioctl } for pid=17303 comm="syz.0.4266" path="socket:[52829]" dev="sockfs" ino=52829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 205.426095][T17290] Quota error (device loop7): write_blk: dquota write failed [ 205.448402][T17290] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 205.462862][T17302] udevd[17302]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 205.467056][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 205.488201][ T7095] udevd[7095]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 205.502644][T16991] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.511556][T16991] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.536972][T17290] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.4263: Failed to acquire dquot type 1 [ 205.565553][T16991] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.589252][T17290] EXT4-fs (loop7): 1 truncate cleaned up [ 205.597683][T17290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.601275][T16991] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.610810][T17290] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.689679][T12970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.701140][T16991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.738726][T16991] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.756805][T14484] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.763971][T14484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.811373][T17353] set_capacity_and_notify: 11 callbacks suppressed [ 205.811388][T17353] loop7: detected capacity change from 0 to 512 [ 205.824166][T14484] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.824280][T14484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.824871][T17346] netlink: 'syz.2.4276': attribute type 1 has an invalid length. [ 205.825605][T17356] xt_l2tp: missing protocol rule (udp|l2tpip) [ 205.848616][T17353] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.848682][T17353] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.886611][T16991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.937459][T16991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.989059][T17375] loop8: detected capacity change from 0 to 1764 [ 206.145119][T17388] __nla_validate_parse: 4 callbacks suppressed [ 206.145136][T17388] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4283'. [ 206.158127][T16991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.436245][T17431] loop8: detected capacity change from 0 to 512 [ 206.463194][T16991] veth0_vlan: entered promiscuous mode [ 206.476757][T17431] ext4: Bad value for 'resgid' [ 206.481792][T17431] ext4: Bad value for 'resgid' [ 206.514014][T16991] veth1_vlan: entered promiscuous mode [ 206.558066][T17431] loop8: detected capacity change from 0 to 2048 [ 206.571244][T16991] veth0_macvtap: entered promiscuous mode [ 206.583065][T16991] veth1_macvtap: entered promiscuous mode [ 206.626634][T16991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.658860][T16991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.665301][T17438] loop8: detected capacity change from 0 to 1764 [ 206.678589][T12237] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.738975][T12237] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.802348][T12237] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.811194][T12237] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.820787][T17450] loop8: detected capacity change from 0 to 128 [ 206.849988][T17450] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.871941][T17450] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.905126][T17461] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4293'. [ 206.955396][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4292'. [ 206.987636][T12970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.008342][T13557] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.085438][ T29] audit: type=1326 audit(1770232273.161:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.4.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e2b8aeb9 code=0x7ffc0000 [ 207.109044][ T29] audit: type=1326 audit(1770232273.161:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.4.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e2b8aeb9 code=0x7ffc0000 [ 207.178358][T17495] loop0: detected capacity change from 0 to 1764 [ 207.181086][T17476] lo speed is unknown, defaulting to 1000 [ 207.199121][T17479] lo speed is unknown, defaulting to 1000 [ 207.238055][T17476] lo speed is unknown, defaulting to 1000 [ 207.247546][T17504] loop7: detected capacity change from 0 to 128 [ 207.267985][T17479] lo speed is unknown, defaulting to 1000 [ 207.289105][T17506] loop4: detected capacity change from 0 to 1024 [ 207.298212][T17509] random: crng reseeded on system resumption [ 207.373899][T17506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.407591][T16991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.410185][T17522] loop7: detected capacity change from 0 to 1024 [ 207.424067][T17509] tQ±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 207.454075][T17522] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.635493][T17556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=17556 comm=syz.2.4310 [ 207.967870][T17596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.988029][T17605] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 208.021604][T17605] EXT4-fs (loop8): orphan cleanup on readonly fs [ 208.040613][T17605] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 208.084286][T11506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.111893][T17605] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 208.133330][T17605] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #16: comm syz.8.4321: invalid fast symlink length 9000 [ 208.190476][T17605] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4321: couldn't read orphan inode 16 (err -117) [ 208.224052][T17605] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.290136][T12970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.367571][T13557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.412325][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 208.412340][ T29] audit: type=1400 audit(1770232274.491:3005): avc: denied { mounton } for pid=17653 comm="syz.2.4330" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 208.412358][T17654] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬( IrÝ\•žu}ibˆŒÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh–O„h'®ÈûrK1‚\kU{!e½úó¬Üš7»ßß [ 208.412358][T17654] ÄUúeâ[¦ÓÎ%#s' [ 208.481069][ T29] audit: type=1326 audit(1770232274.541:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883885aeb9 code=0x7ffc0000 [ 208.504714][ T29] audit: type=1326 audit(1770232274.541:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883885aeb9 code=0x7ffc0000 [ 208.528290][ T29] audit: type=1326 audit(1770232274.541:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f883885aeb9 code=0x7ffc0000 [ 208.551891][ T29] audit: type=1326 audit(1770232274.541:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883885aeb9 code=0x7ffc0000 [ 208.575416][ T29] audit: type=1326 audit(1770232274.541:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f883885aeb9 code=0x7ffc0000 [ 208.598892][ T29] audit: type=1326 audit(1770232274.551:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883885aeb9 code=0x7ffc0000 [ 208.622587][ T29] audit: type=1326 audit(1770232274.551:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883885aeb9 code=0x7ffc0000 [ 208.646704][ T29] audit: type=1326 audit(1770232274.551:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f883885aeb9 code=0x7ffc0000 [ 208.670234][ T29] audit: type=1326 audit(1770232274.551:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.2.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883885aeb9 code=0x7ffc0000 [ 208.799832][T17683] ext4: Bad value for 'resgid' [ 208.804707][T17683] ext4: Bad value for 'resgid' [ 208.902194][T17692] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.940013][T17700] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 208.978917][T17700] macvtap1: entered allmulticast mode [ 208.992164][T17709] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 209.010757][T17700] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 209.223222][T17740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.247650][T17740] FAULT_INJECTION: forcing a failure. [ 209.247650][T17740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.260972][T17740] CPU: 1 UID: 0 PID: 17740 Comm: syz.2.4345 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 209.261003][T17740] Tainted: [W]=WARN [ 209.261010][T17740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.261022][T17740] Call Trace: [ 209.261030][T17740] [ 209.261037][T17740] __dump_stack+0x1d/0x30 [ 209.261127][T17740] dump_stack_lvl+0x95/0xd0 [ 209.261158][T17740] dump_stack+0x15/0x1b [ 209.261193][T17740] should_fail_ex+0x263/0x280 [ 209.261226][T17740] should_fail+0xb/0x20 [ 209.261290][T17740] should_fail_usercopy+0x1a/0x20 [ 209.261350][T17740] _copy_from_user+0x1c/0xb0 [ 209.261375][T17740] ucma_write+0xd8/0x260 [ 209.261472][T17740] vfs_writev+0x42b/0x900 [ 209.261498][T17740] ? __pfx_ucma_write+0x10/0x10 [ 209.261530][T17740] do_writev+0xe9/0x210 [ 209.261576][T17740] __x64_sys_writev+0x45/0x50 [ 209.261600][T17740] x64_sys_call+0x1ba5/0x3000 [ 209.261623][T17740] do_syscall_64+0xc0/0x2a0 [ 209.261712][T17740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.261737][T17740] RIP: 0033:0x7f883885aeb9 [ 209.261756][T17740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.261858][T17740] RSP: 002b:00007f88372b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 209.261877][T17740] RAX: ffffffffffffffda RBX: 00007f8838ad5fa0 RCX: 00007f883885aeb9 [ 209.261891][T17740] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000b [ 209.261940][T17740] RBP: 00007f88372b7090 R08: 0000000000000000 R09: 0000000000000000 [ 209.261955][T17740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.261977][T17740] R13: 00007f8838ad6038 R14: 00007f8838ad5fa0 R15: 00007fff2ea45388 [ 209.261998][T17740] [ 209.467602][T11506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.489272][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4349'. [ 209.519367][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4349'. [ 209.528972][T17758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.547730][T17758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.629533][T17771] sctp: [Deprecated]: syz.0.4352 (pid 17771) Use of int in maxseg socket option. [ 209.629533][T17771] Use struct sctp_assoc_value instead [ 209.646615][T17771] sctp: [Deprecated]: syz.0.4352 (pid 17771) Use of int in maxseg socket option. [ 209.646615][T17771] Use struct sctp_assoc_value instead [ 209.694726][T17774] ext4: Bad value for 'resgid' [ 209.699680][T17774] ext4: Bad value for 'resgid' [ 209.758415][T13557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.758984][T17782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.892382][T16568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.944021][T17800] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.987187][T17800] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.008028][T17800] EXT4-fs error (device loop8): ext4_validate_inode_bitmap:105: comm syz.8.4355: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 210.032602][T17824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.049947][T17824] FAULT_INJECTION: forcing a failure. [ 210.049947][T17824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.063347][T17824] CPU: 0 UID: 0 PID: 17824 Comm: syz.0.4358 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 210.063380][T17824] Tainted: [W]=WARN [ 210.063387][T17824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.063398][T17824] Call Trace: [ 210.063405][T17824] [ 210.063413][T17824] __dump_stack+0x1d/0x30 [ 210.063455][T17824] dump_stack_lvl+0x95/0xd0 [ 210.063509][T17824] dump_stack+0x15/0x1b [ 210.063531][T17824] should_fail_ex+0x263/0x280 [ 210.063564][T17824] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 210.063599][T17824] should_fail+0xb/0x20 [ 210.063663][T17824] should_fail_usercopy+0x1a/0x20 [ 210.063699][T17824] _copy_from_user+0x1c/0xb0 [ 210.063723][T17824] ucma_resolve_ip+0x4e/0x370 [ 210.063769][T17824] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 210.063803][T17824] ucma_write+0x1c9/0x260 [ 210.063842][T17824] vfs_writev+0x42b/0x900 [ 210.063941][T17824] ? __pfx_ucma_write+0x10/0x10 [ 210.063980][T17824] do_writev+0xe9/0x210 [ 210.064009][T17824] __x64_sys_writev+0x45/0x50 [ 210.064074][T17824] x64_sys_call+0x1ba5/0x3000 [ 210.064101][T17824] do_syscall_64+0xc0/0x2a0 [ 210.064185][T17824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.064226][T17824] RIP: 0033:0x7fa8ec0eaeb9 [ 210.064274][T17824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.064306][T17824] RSP: 002b:00007fa8eab47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 210.064330][T17824] RAX: ffffffffffffffda RBX: 00007fa8ec365fa0 RCX: 00007fa8ec0eaeb9 [ 210.064346][T17824] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000b [ 210.064360][T17824] RBP: 00007fa8eab47090 R08: 0000000000000000 R09: 0000000000000000 [ 210.064426][T17824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.064440][T17824] R13: 00007fa8ec366038 R14: 00007fa8ec365fa0 R15: 00007fff8550c938 [ 210.064484][T17824] [ 210.065820][T13557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.268350][T16568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.383591][T17848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.407848][T17856] ext4: Bad value for 'resgid' [ 210.412879][T17856] ext4: Bad value for 'resgid' [ 210.574160][T17869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.703392][T17879] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 210.716086][T17879] bond1 (unregistering): Released all slaves [ 210.948985][T17894] tap0: tun_chr_ioctl cmd 2147767520 [ 211.222077][T17905] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4382'. [ 211.237309][T11506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.559211][T17919] set_capacity_and_notify: 19 callbacks suppressed [ 211.559229][T17919] loop2: detected capacity change from 0 to 1024 [ 211.620243][T16991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.643877][T17919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.644268][T17924] loop8: detected capacity change from 0 to 512 [ 211.680186][T17924] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 211.704943][T17933] loop4: detected capacity change from 0 to 1024 [ 211.719735][T17936] loop7: detected capacity change from 0 to 1764 [ 211.727950][T17924] EXT4-fs (loop8): 1 truncate cleaned up [ 211.745029][T17924] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.775658][T17933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.820052][T11506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.824003][T17943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4395'. [ 211.961798][T17956] loop4: detected capacity change from 0 to 1024 [ 212.003358][T17956] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 212.013222][T17956] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 212.025483][T17956] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 212.045768][T17961] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=17961 comm=syz.7.4401 [ 212.052594][T17956] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: inode #32: comm syz.4.4399: iget: special inode unallocated [ 212.086496][T17961] futex_wake_op: syz.7.4401 tries to shift op by 32; fix this program [ 212.090711][T17956] EXT4-fs (loop4): no journal found [ 212.099991][T17956] EXT4-fs (loop4): can't get journal size [ 212.122115][T17956] EXT4-fs error (device loop4): __ext4_iget:5426: inode #15: block 1803188595: comm syz.4.4399: invalid block [ 212.137786][T17956] EXT4-fs error (device loop4): __ext4_iget:5426: inode #15: block 1803188595: comm syz.4.4399: invalid block [ 212.156490][T17966] loop2: detected capacity change from 0 to 1764 [ 212.199341][T17977] random: crng reseeded on system resumption [ 212.211281][T17980] loop2: detected capacity change from 0 to 1024 [ 212.263515][T17985] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1324: inode #12: block 16: comm syz.4.4399: path /24/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 212.311521][T17988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4408'. [ 212.388714][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4409'. [ 212.400997][T17991] chnl_net:caif_netlink_parms(): no params data found [ 212.438809][T17978] SELinux: failed to load policy [ 212.607048][T18021] loop0: detected capacity change from 0 to 1764 [ 212.630658][T18024] loop8: detected capacity change from 0 to 1024 [ 212.653740][T18026] random: crng reseeded on system resumption [ 212.703185][T18032] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4421'. [ 212.824350][T18036] loop2: detected capacity change from 0 to 1024 [ 213.024803][T18058] team0: entered promiscuous mode [ 213.029942][T18058] team_slave_0: entered promiscuous mode [ 213.035753][T18058] team_slave_1: entered promiscuous mode [ 213.127333][T18067] ext4: Bad value for 'resgid' [ 213.132178][T18067] ext4: Bad value for 'resgid' [ 213.184411][T18010] netlink: 'syz.4.4412': attribute type 5 has an invalid length. [ 213.275443][T18065] team0: left promiscuous mode [ 213.280238][T18065] team_slave_0: left promiscuous mode [ 213.285764][T18065] team_slave_1: left promiscuous mode [ 213.351077][T18080] random: crng reseeded on system resumption [ 213.358388][T18082] netlink: 'syz.0.4435': attribute type 1 has an invalid length. [ 213.366263][T18082] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4435'. [ 213.403814][T18083] EXT4-fs: Ignoring removed i_version option [ 213.409937][T18083] EXT4-fs: Ignoring removed bh option [ 213.495685][T18083] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.508697][T18093] FAULT_INJECTION: forcing a failure. [ 213.508697][T18093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.511645][T18094] random: crng reseeded on system resumption [ 213.521924][T18093] CPU: 1 UID: 0 PID: 18093 Comm: syz.0.4437 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 213.521962][T18093] Tainted: [W]=WARN [ 213.522009][T18093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.522022][T18093] Call Trace: [ 213.522030][T18093] [ 213.522116][T18093] __dump_stack+0x1d/0x30 [ 213.522162][T18093] dump_stack_lvl+0x95/0xd0 [ 213.522186][T18093] dump_stack+0x15/0x1b [ 213.522209][T18093] should_fail_ex+0x263/0x280 [ 213.522241][T18093] should_fail+0xb/0x20 [ 213.522328][T18093] should_fail_usercopy+0x1a/0x20 [ 213.522364][T18093] _copy_from_user+0x1c/0xb0 [ 213.522386][T18093] ___sys_sendmsg+0xc1/0x1e0 [ 213.522469][T18093] __x64_sys_sendmsg+0xd4/0x160 [ 213.522495][T18093] x64_sys_call+0x17ba/0x3000 [ 213.522592][T18093] do_syscall_64+0xc0/0x2a0 [ 213.522626][T18093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.522650][T18093] RIP: 0033:0x7fa8ec0eaeb9 [ 213.522667][T18093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.522687][T18093] RSP: 002b:00007fa8eab47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.522735][T18093] RAX: ffffffffffffffda RBX: 00007fa8ec365fa0 RCX: 00007fa8ec0eaeb9 [ 213.522751][T18093] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 213.522766][T18093] RBP: 00007fa8eab47090 R08: 0000000000000000 R09: 0000000000000000 [ 213.522781][T18093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.522795][T18093] R13: 00007fa8ec366038 R14: 00007fa8ec365fa0 R15: 00007fff8550c938 [ 213.522817][T18093] [ 213.601519][T18006] syz.4.4412 (18006) used greatest stack depth: 7232 bytes left [ 213.654079][T18094] Restarting kernel threads ... [ 213.665323][T18099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4440'. [ 213.693692][T18094] Done restarting kernel threads. [ 213.698173][T18087] FAULT_INJECTION: forcing a failure. [ 213.698173][T18087] name failslab, interval 1, probability 0, space 0, times 0 [ 213.732988][T18087] CPU: 0 UID: 0 PID: 18087 Comm: syz.7.4438 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 213.733055][T18087] Tainted: [W]=WARN [ 213.733062][T18087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.733074][T18087] Call Trace: [ 213.733081][T18087] [ 213.733090][T18087] __dump_stack+0x1d/0x30 [ 213.733180][T18087] dump_stack_lvl+0x95/0xd0 [ 213.733281][T18087] dump_stack+0x15/0x1b [ 213.733300][T18087] should_fail_ex+0x263/0x280 [ 213.733331][T18087] ? __pfx_addr_handler+0x10/0x10 [ 213.733355][T18087] should_failslab+0x8c/0xb0 [ 213.733457][T18087] __kmalloc_cache_noprof+0x64/0x4a0 [ 213.733486][T18087] ? rdma_resolve_ip+0x4d/0x4b0 [ 213.733512][T18087] ? __pfx_addr_handler+0x10/0x10 [ 213.733592][T18087] rdma_resolve_ip+0x4d/0x4b0 [ 213.733618][T18087] rdma_resolve_addr+0x544/0x1350 [ 213.733645][T18087] ? terminate_walk+0x1e6/0x210 [ 213.733694][T18087] ? path_openat+0x1d94/0x23c0 [ 213.733727][T18087] ucma_resolve_ip+0x283/0x370 [ 213.733784][T18087] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 213.733813][T18087] ucma_write+0x1c9/0x260 [ 213.733845][T18087] vfs_writev+0x42b/0x900 [ 213.733923][T18087] ? __pfx_ucma_write+0x10/0x10 [ 213.733960][T18087] do_writev+0xe9/0x210 [ 213.733986][T18087] __x64_sys_writev+0x45/0x50 [ 213.734006][T18087] x64_sys_call+0x1ba5/0x3000 [ 213.734032][T18087] do_syscall_64+0xc0/0x2a0 [ 213.734096][T18087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.734119][T18087] RIP: 0033:0x7f996899aeb9 [ 213.734134][T18087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.734220][T18087] RSP: 002b:00007f99673f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 213.734260][T18087] RAX: ffffffffffffffda RBX: 00007f9968c15fa0 RCX: 00007f996899aeb9 [ 213.734275][T18087] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000b [ 213.734289][T18087] RBP: 00007f99673f7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.734304][T18087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.734317][T18087] R13: 00007f9968c16038 R14: 00007f9968c15fa0 R15: 00007ffd632d8e98 [ 213.734414][T18087] [ 213.995701][T18112] lo speed is unknown, defaulting to 1000 [ 214.008668][T18112] lo speed is unknown, defaulting to 1000 [ 214.074657][T18123] random: crng reseeded on system resumption [ 214.193841][T18131] netlink: 'syz.0.4449': attribute type 1 has an invalid length. [ 214.201612][T18131] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4449'. [ 214.293816][T18124] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.361647][T18142] ext4: Bad value for 'resgid' [ 214.366473][T18142] ext4: Bad value for 'resgid' [ 214.575446][ T3304] loop7: p3 < > p4 < > [ 214.579744][ T3304] loop7: partition table partially beyond EOD, truncated [ 214.616589][ T3304] loop7: p3 start 4284289 is beyond EOD, truncated [ 214.642010][T18153] FAULT_INJECTION: forcing a failure. [ 214.642010][T18153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.655229][T18153] CPU: 1 UID: 0 PID: 18153 Comm: syz.8.4455 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 214.655279][T18153] Tainted: [W]=WARN [ 214.655285][T18153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.655296][T18153] Call Trace: [ 214.655303][T18153] [ 214.655311][T18153] __dump_stack+0x1d/0x30 [ 214.655338][T18153] dump_stack_lvl+0x95/0xd0 [ 214.655393][T18153] dump_stack+0x15/0x1b [ 214.655411][T18153] should_fail_ex+0x263/0x280 [ 214.655447][T18153] should_fail+0xb/0x20 [ 214.655472][T18153] should_fail_usercopy+0x1a/0x20 [ 214.655562][T18153] _copy_from_user+0x1c/0xb0 [ 214.655626][T18153] ucma_write+0xd8/0x260 [ 214.655704][T18153] vfs_writev+0x42b/0x900 [ 214.655730][T18153] ? __pfx_ucma_write+0x10/0x10 [ 214.655764][T18153] do_writev+0xe9/0x210 [ 214.655791][T18153] __x64_sys_writev+0x45/0x50 [ 214.655835][T18153] x64_sys_call+0x1ba5/0x3000 [ 214.655857][T18153] do_syscall_64+0xc0/0x2a0 [ 214.655886][T18153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.655944][T18153] RIP: 0033:0x7f7d88dfaeb9 [ 214.655962][T18153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.655984][T18153] RSP: 002b:00007f7d87857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 214.656004][T18153] RAX: ffffffffffffffda RBX: 00007f7d89075fa0 RCX: 00007f7d88dfaeb9 [ 214.656017][T18153] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000b [ 214.656062][T18153] RBP: 00007f7d87857090 R08: 0000000000000000 R09: 0000000000000000 [ 214.656074][T18153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.656087][T18153] R13: 00007f7d89076038 R14: 00007f7d89075fa0 R15: 00007fff54268968 [ 214.656106][T18153] [ 214.932679][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 214.932703][ T29] audit: type=1400 audit(1770232281.011:3415): avc: denied { mount } for pid=18144 comm="syz.7.4453" name="/" dev="hugetlbfs" ino=55414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 214.968832][T18145] loop7: p3 < > p4 < > [ 214.973195][T18145] loop7: partition table partially beyond EOD, truncated [ 215.007493][T18145] loop7: p3 start 4284289 is beyond EOD, truncated [ 215.123797][T18187] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4463'. [ 215.146895][T17302] udevd[17302]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 215.258201][T18197] EXT4-fs: Ignoring removed orlov option [ 215.272255][T18199] ext4: Bad value for 'resgid' [ 215.277074][T18199] ext4: Bad value for 'resgid' [ 215.280070][T18178] FAULT_INJECTION: forcing a failure. [ 215.280070][T18178] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 215.297097][T18178] CPU: 1 UID: 0 PID: 18178 Comm: syz.0.4461 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 215.297133][T18178] Tainted: [W]=WARN [ 215.297140][T18178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.297154][T18178] Call Trace: [ 215.297161][T18178] [ 215.297241][T18178] __dump_stack+0x1d/0x30 [ 215.297264][T18178] dump_stack_lvl+0x95/0xd0 [ 215.297299][T18178] dump_stack+0x15/0x1b [ 215.297321][T18178] should_fail_ex+0x263/0x280 [ 215.297353][T18178] should_fail_alloc_page+0xf2/0x100 [ 215.297445][T18178] __alloc_frozen_pages_noprof+0x108/0x350 [ 215.297475][T18178] ? alloc_pages_mpol+0x55/0x260 [ 215.297546][T18178] alloc_pages_mpol+0xb3/0x260 [ 215.297578][T18178] alloc_migration_target_by_mpol+0x11b/0x280 [ 215.297604][T18178] migrate_pages_batch+0x399/0x2400 [ 215.297630][T18178] ? update_and_free_hugetlb_folio+0xee/0x1b0 [ 215.297672][T18178] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 215.297696][T18178] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 215.297761][T18178] ? migrate_pages+0xade/0x18c0 [ 215.297815][T18178] migrate_pages+0x1079/0x18c0 [ 215.297845][T18178] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 215.297872][T18178] __se_sys_mbind+0xc9c/0xde0 [ 215.297953][T18178] __x64_sys_mbind+0x78/0x90 [ 215.297999][T18178] x64_sys_call+0x2a2b/0x3000 [ 215.298021][T18178] do_syscall_64+0xc0/0x2a0 [ 215.298049][T18178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.298145][T18178] RIP: 0033:0x7fa8ec0eaeb9 [ 215.298163][T18178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.298183][T18178] RSP: 002b:00007fa8eab47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 215.298204][T18178] RAX: ffffffffffffffda RBX: 00007fa8ec365fa0 RCX: 00007fa8ec0eaeb9 [ 215.298218][T18178] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 215.298305][T18178] RBP: 00007fa8eab47090 R08: 0000000000000000 R09: 0000000000000002 [ 215.298317][T18178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.298331][T18178] R13: 00007fa8ec366038 R14: 00007fa8ec365fa0 R15: 00007fff8550c938 [ 215.298351][T18178] [ 215.589121][T18197] netlink: 'syz.7.4465': attribute type 4 has an invalid length. [ 215.596935][T18197] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4465'. [ 215.651713][ T29] audit: type=1400 audit(1770232281.701:3416): avc: denied { relabelto } for pid=18207 comm="syz.4.4469" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 215.677563][ T29] audit: type=1400 audit(1770232281.701:3417): avc: denied { associate } for pid=18207 comm="syz.4.4469" name="cgroup.procs" dev="cgroup" ino=200 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 215.704312][ T29] audit: type=1400 audit(1770232281.701:3418): avc: denied { read } for pid=18207 comm="syz.4.4469" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 215.742122][ T29] audit: type=1400 audit(1770232281.731:3419): avc: denied { rename } for pid=18196 comm="syz.7.4465" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.766101][ T29] audit: type=1400 audit(1770232281.821:3420): avc: denied { mounton } for pid=18212 comm="syz.4.4471" path="/32/file0" dev="hugetlbfs" ino=56423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 215.824611][T18213] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 215.861633][T18213] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 215.877685][T18226] random: crng reseeded on system resumption [ 215.888353][T18228] netlink: 'syz.0.4473': attribute type 298 has an invalid length. [ 215.913711][T18213] System zones: 0-2, 18-18, 34-35 [ 215.965429][ T29] audit: type=1400 audit(1770232282.041:3421): avc: denied { create } for pid=18212 comm="syz.4.4471" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 215.992621][T18234] dummy0: entered promiscuous mode [ 216.002113][T18234] macsec1: entered promiscuous mode [ 216.007469][T18234] macsec1: entered allmulticast mode [ 216.014631][T18211] FAULT_INJECTION: forcing a failure. [ 216.014631][T18211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.027743][T18211] CPU: 0 UID: 0 PID: 18211 Comm: syz.8.4470 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.027830][T18211] Tainted: [W]=WARN [ 216.027836][T18211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.027909][T18211] Call Trace: [ 216.027917][T18211] [ 216.027927][T18211] __dump_stack+0x1d/0x30 [ 216.027952][T18211] dump_stack_lvl+0x95/0xd0 [ 216.028005][T18211] dump_stack+0x15/0x1b [ 216.028023][T18211] should_fail_ex+0x263/0x280 [ 216.028050][T18211] ? __pfx_ucma_get_event+0x10/0x10 [ 216.028092][T18211] should_fail+0xb/0x20 [ 216.028161][T18211] should_fail_usercopy+0x1a/0x20 [ 216.028196][T18211] _copy_from_user+0x1c/0xb0 [ 216.028220][T18211] ucma_get_event+0x77/0x3e0 [ 216.028280][T18211] ? should_fail_ex+0xd9/0x280 [ 216.028313][T18211] ? __pfx_ucma_get_event+0x10/0x10 [ 216.028423][T18211] ucma_write+0x1c9/0x260 [ 216.028455][T18211] vfs_writev+0x42b/0x900 [ 216.028479][T18211] ? __pfx_ucma_write+0x10/0x10 [ 216.028568][T18211] do_writev+0xe9/0x210 [ 216.028595][T18211] __x64_sys_writev+0x45/0x50 [ 216.028670][T18211] x64_sys_call+0x1ba5/0x3000 [ 216.028698][T18211] do_syscall_64+0xc0/0x2a0 [ 216.028732][T18211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.028755][T18211] RIP: 0033:0x7f7d88dfaeb9 [ 216.028770][T18211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.028797][T18211] RSP: 002b:00007f7d87857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 216.028816][T18211] RAX: ffffffffffffffda RBX: 00007f7d89075fa0 RCX: 00007f7d88dfaeb9 [ 216.028830][T18211] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000b [ 216.028842][T18211] RBP: 00007f7d87857090 R08: 0000000000000000 R09: 0000000000000000 [ 216.028854][T18211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.028869][T18211] R13: 00007f7d89076038 R14: 00007f7d89075fa0 R15: 00007fff54268968 [ 216.028939][T18211] [ 216.039639][T18234] dummy0: entered allmulticast mode [ 216.155184][T18228] Alternate GPT is invalid, using primary GPT. [ 216.239703][T18228] loop0: p1 p2 p3 [ 216.297967][T18240] netlink: 'syz.2.4479': attribute type 3 has an invalid length. [ 216.312773][ T3001] Alternate GPT is invalid, using primary GPT. [ 216.319056][ T3001] loop0: p1 p2 p3 [ 216.325229][ T29] audit: type=1400 audit(1770232282.401:3422): avc: denied { unmount } for pid=16991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 216.363763][T18240] netlink: 'syz.2.4479': attribute type 3 has an invalid length. [ 216.369854][T18242] FAULT_INJECTION: forcing a failure. [ 216.369854][T18242] name failslab, interval 1, probability 0, space 0, times 0 [ 216.384289][T18242] CPU: 0 UID: 0 PID: 18242 Comm: syz.8.4477 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.384364][T18242] Tainted: [W]=WARN [ 216.384371][T18242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.384414][T18242] Call Trace: [ 216.384421][T18242] [ 216.384429][T18242] __dump_stack+0x1d/0x30 [ 216.384456][T18242] dump_stack_lvl+0x95/0xd0 [ 216.384479][T18242] dump_stack+0x15/0x1b [ 216.384503][T18242] should_fail_ex+0x263/0x280 [ 216.384604][T18242] should_failslab+0x8c/0xb0 [ 216.384686][T18242] __kmalloc_noprof+0xb8/0x580 [ 216.384713][T18242] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 216.384779][T18242] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 216.384806][T18242] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 216.384835][T18242] ? selinux_capable+0x31/0x40 [ 216.384863][T18242] ? security_capable+0x7b/0x90 [ 216.384890][T18242] ? ns_capable+0x7c/0xb0 [ 216.384979][T18242] genl_rcv_msg+0x432/0x470 [ 216.385072][T18242] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 216.385105][T18242] netlink_rcv_skb+0x123/0x220 [ 216.385138][T18242] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.385275][T18242] genl_rcv+0x28/0x40 [ 216.385300][T18242] netlink_unicast+0x5c0/0x690 [ 216.385387][T18242] netlink_sendmsg+0x5c8/0x6f0 [ 216.385440][T18242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.385460][T18242] ____sys_sendmsg+0x5af/0x600 [ 216.385481][T18242] ___sys_sendmsg+0x195/0x1e0 [ 216.385548][T18242] __x64_sys_sendmsg+0xd4/0x160 [ 216.385570][T18242] x64_sys_call+0x17ba/0x3000 [ 216.385597][T18242] do_syscall_64+0xc0/0x2a0 [ 216.385631][T18242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.385669][T18242] RIP: 0033:0x7f7d88dfaeb9 [ 216.385685][T18242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.385702][T18242] RSP: 002b:00007f7d87857028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.385775][T18242] RAX: ffffffffffffffda RBX: 00007f7d89075fa0 RCX: 00007f7d88dfaeb9 [ 216.385789][T18242] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 216.385801][T18242] RBP: 00007f7d87857090 R08: 0000000000000000 R09: 0000000000000000 [ 216.385840][T18242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.385854][T18242] R13: 00007f7d89076038 R14: 00007f7d89075fa0 R15: 00007fff54268968 [ 216.385877][T18242] [ 216.510111][T18238] FAULT_INJECTION: forcing a failure. [ 216.510111][T18238] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.529234][T18248] ext4: Bad value for 'resgid' [ 216.530663][T18238] CPU: 1 UID: 0 PID: 18238 Comm: syz.7.4478 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.530709][T18238] Tainted: [W]=WARN [ 216.530716][T18238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.530729][T18238] Call Trace: [ 216.530755][T18238] [ 216.530765][T18238] __dump_stack+0x1d/0x30 [ 216.530791][T18238] dump_stack_lvl+0x95/0xd0 [ 216.530814][T18238] dump_stack+0x15/0x1b [ 216.530909][T18238] should_fail_ex+0x263/0x280 [ 216.530964][T18238] should_fail_alloc_page+0xf2/0x100 [ 216.530991][T18238] __alloc_frozen_pages_noprof+0x108/0x350 [ 216.531024][T18238] alloc_pages_mpol+0xb3/0x260 [ 216.531095][T18238] alloc_migration_target_by_mpol+0x11b/0x280 [ 216.531120][T18238] migrate_pages_batch+0x399/0x2400 [ 216.531225][T18238] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 216.531254][T18238] migrate_pages+0x1079/0x18c0 [ 216.531305][T18238] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 216.531335][T18238] __se_sys_mbind+0xc9c/0xde0 [ 216.531372][T18238] __x64_sys_mbind+0x78/0x90 [ 216.531401][T18238] x64_sys_call+0x2a2b/0x3000 [ 216.531511][T18238] do_syscall_64+0xc0/0x2a0 [ 216.531542][T18238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.531565][T18238] RIP: 0033:0x7f996899aeb9 [ 216.531582][T18238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.531600][T18238] RSP: 002b:00007f99673f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 216.531624][T18238] RAX: ffffffffffffffda RBX: 00007f9968c15fa0 RCX: 00007f996899aeb9 [ 216.531681][T18238] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 216.531696][T18238] RBP: 00007f99673f7090 R08: 0000000000000000 R09: 0000000000000002 [ 216.531710][T18238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.531723][T18238] R13: 00007f9968c16038 R14: 00007f9968c15fa0 R15: 00007ffd632d8e98 [ 216.531743][T18238] [ 216.718745][ T29] audit: type=1400 audit(1770232282.791:3423): avc: denied { execute } for pid=18256 comm="syz.4.4484" path="/selinux/load" dev="selinuxfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 216.719441][T18248] ext4: Bad value for 'resgid' [ 216.763898][T18263] __nla_validate_parse: 3 callbacks suppressed [ 216.763914][T18263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4486'. [ 216.783060][T18248] set_capacity_and_notify: 18 callbacks suppressed [ 216.783077][T18248] loop2: detected capacity change from 0 to 2048 [ 216.823578][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4487'. [ 216.918708][T18258] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4485'. [ 216.938878][T18274] netlink: 'syz.2.4488': attribute type 1 has an invalid length. [ 216.946747][T18274] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4488'. [ 216.986757][T18277] random: crng reseeded on system resumption [ 217.051462][T18290] 9p: Bad value for 'wfdno' [ 217.058694][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 217.059362][ T29] audit: type=1400 audit(1770232283.121:3424): avc: denied { getopt } for pid=18278 comm="syz.8.4490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.070273][T17302] udevd[17302]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 217.090940][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 217.116369][T18288] loop0: detected capacity change from 0 to 1024 [ 217.125550][T18291] loop2: detected capacity change from 0 to 512 [ 217.203678][T18301] loop7: detected capacity change from 0 to 1764 [ 217.206433][T18291] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.4494: Directory hole found for htree leaf block 0 [ 217.233844][T18301] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 217.244298][T18305] loop0: detected capacity change from 0 to 512 [ 217.250943][T18301] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 217.260070][T18301] netlink: 'syz.7.4496': attribute type 1 has an invalid length. [ 217.266985][T18305] ext4: Bad value for 'resgid' [ 217.272602][T18305] ext4: Bad value for 'resgid' [ 217.298929][T18301] lo speed is unknown, defaulting to 1000 [ 217.305689][T18301] lo speed is unknown, defaulting to 1000 [ 217.360376][T18310] loop2: detected capacity change from 0 to 128 [ 217.401306][T18310] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 217.456304][T18314] mmap: syz.0.4500 (18314): VmData 29196288 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 217.549189][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4502'. [ 217.558182][T18322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4502'. [ 217.566539][T18325] loop8: detected capacity change from 0 to 1024 [ 217.583715][T18328] netlink: 'syz.7.4501': attribute type 10 has an invalid length. [ 217.600323][T18328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.643056][T18328] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 217.721421][T18338] random: crng reseeded on system resumption [ 217.744514][T18340] loop2: detected capacity change from 0 to 1024 [ 217.808660][T18348] loop8: detected capacity change from 0 to 512 [ 217.815647][T18348] ext4: Bad value for 'resgid' [ 217.820445][T18348] ext4: Bad value for 'resgid' [ 217.821174][T18346] lo speed is unknown, defaulting to 1000 [ 217.835724][T18346] lo speed is unknown, defaulting to 1000 [ 217.910920][T18352] loop8: detected capacity change from 0 to 1024 [ 217.944218][T18352] FAULT_INJECTION: forcing a failure. [ 217.944218][T18352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.957308][T18352] CPU: 0 UID: 0 PID: 18352 Comm: syz.8.4513 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 217.957354][T18352] Tainted: [W]=WARN [ 217.957361][T18352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.957376][T18352] Call Trace: [ 217.957383][T18352] [ 217.957391][T18352] __dump_stack+0x1d/0x30 [ 217.957417][T18352] dump_stack_lvl+0x95/0xd0 [ 217.957442][T18352] dump_stack+0x15/0x1b [ 217.957464][T18352] should_fail_ex+0x263/0x280 [ 217.957582][T18352] should_fail+0xb/0x20 [ 217.957606][T18352] should_fail_usercopy+0x1a/0x20 [ 217.957638][T18352] _copy_to_user+0x20/0xa0 [ 217.957672][T18352] simple_read_from_buffer+0xb5/0x130 [ 217.957711][T18352] proc_fail_nth_read+0x10e/0x150 [ 217.957743][T18352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.957821][T18352] vfs_read+0x1ab/0x7f0 [ 217.957842][T18352] ? __rcu_read_unlock+0x4e/0x70 [ 217.957873][T18352] ? __fget_files+0x184/0x1c0 [ 217.957897][T18352] ? mutex_lock+0x57/0x90 [ 217.957948][T18352] ksys_read+0xdc/0x1a0 [ 217.957971][T18352] __x64_sys_read+0x40/0x50 [ 217.957992][T18352] x64_sys_call+0x2889/0x3000 [ 217.958097][T18352] do_syscall_64+0xc0/0x2a0 [ 217.958130][T18352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.958154][T18352] RIP: 0033:0x7f7d88dbb78e [ 217.958175][T18352] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 217.958194][T18352] RSP: 002b:00007f7d87856fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.958217][T18352] RAX: ffffffffffffffda RBX: 00007f7d878576c0 RCX: 00007f7d88dbb78e [ 217.958234][T18352] RDX: 000000000000000f RSI: 00007f7d878570a0 RDI: 000000000000000d [ 217.958320][T18352] RBP: 00007f7d87857090 R08: 0000000000000000 R09: 0000000000000000 [ 217.958333][T18352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.958347][T18352] R13: 00007f7d89076038 R14: 00007f7d89075fa0 R15: 00007fff54268968 [ 217.958370][T18352] [ 218.205499][T18359] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4515'. [ 218.218144][T18361] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4516'. [ 218.250795][T18363] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.257858][T18363] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.266430][T18363] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.288473][T18363] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 218.298875][T18363] EXT4-fs (loop8): can't mount with commit=, fs mounted w/o journal [ 218.385528][T18370] random: crng reseeded on system resumption [ 218.427136][T18379] ext4: Bad value for 'resgid' [ 218.431979][T18379] ext4: Bad value for 'resgid' [ 218.519464][T18390] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4526'. [ 218.587214][T18396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4528'. [ 218.599830][T18397] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 218.599830][T18397] The task syz.8.4526 (18397) triggered the difference, watch for misbehavior. [ 218.623630][T18399] netlink: 'syz.7.4530': attribute type 1 has an invalid length. [ 218.680389][T18399] bond2: entered promiscuous mode [ 218.698926][T18405] netlink: 'syz.0.4531': attribute type 10 has an invalid length. [ 218.707400][T18399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.812554][T18399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.824596][T18399] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 218.834741][T18399] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 218.863052][T18416] random: crng reseeded on system resumption [ 218.905993][T18399] bond2: (slave xfrm1): making interface the new active one [ 218.913420][T18399] xfrm1: entered promiscuous mode [ 218.920652][T18399] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 218.944979][T18405] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.960959][T18405] bond0: (slave team0): Enslaving as an active interface with an up link [ 219.076587][T18403] syz.2.4532 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 219.085808][T18430] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 219.091136][T18403] CPU: 1 UID: 0 PID: 18403 Comm: syz.2.4532 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 219.091171][T18403] Tainted: [W]=WARN [ 219.091179][T18403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.091194][T18403] Call Trace: [ 219.091201][T18403] [ 219.091219][T18403] __dump_stack+0x1d/0x30 [ 219.091246][T18403] dump_stack_lvl+0x95/0xd0 [ 219.091269][T18403] dump_stack+0x15/0x1b [ 219.091292][T18403] dump_header+0x80/0x240 [ 219.091314][T18403] oom_kill_process+0x295/0x350 [ 219.091425][T18403] out_of_memory+0x97d/0xb80 [ 219.091452][T18403] try_charge_memcg+0x62e/0xa10 [ 219.091481][T18403] obj_cgroup_charge_pages+0x23/0xc0 [ 219.091583][T18403] __memcg_kmem_charge_page+0x9e/0x170 [ 219.091642][T18403] __alloc_frozen_pages_noprof+0x18a/0x350 [ 219.091857][T18403] alloc_pages_mpol+0xb3/0x260 [ 219.091890][T18403] alloc_pages_noprof+0x8f/0x130 [ 219.091925][T18403] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 219.091982][T18403] __kvmalloc_node_noprof+0x471/0x680 [ 219.092090][T18403] ? ip_set_alloc+0x24/0x30 [ 219.092176][T18403] ? ip_set_alloc+0x24/0x30 [ 219.092235][T18403] ip_set_alloc+0x24/0x30 [ 219.092265][T18403] hash_netiface_create+0x282/0x740 [ 219.092298][T18403] ? __pfx_hash_netiface_create+0x10/0x10 [ 219.092386][T18403] ip_set_create+0x3cf/0x970 [ 219.092491][T18403] ? __nla_parse+0x40/0x60 [ 219.092512][T18403] nfnetlink_rcv_msg+0x509/0x5d0 [ 219.092595][T18403] netlink_rcv_skb+0x123/0x220 [ 219.092629][T18403] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 219.092721][T18403] nfnetlink_rcv+0x167/0x1720 [ 219.092830][T18403] ? __kfree_skb+0x109/0x150 [ 219.092861][T18403] ? nlmon_xmit+0x4f/0x60 [ 219.092894][T18403] ? consume_skb+0x49/0x140 [ 219.092951][T18403] ? nlmon_xmit+0x4f/0x60 [ 219.092983][T18403] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 219.093020][T18403] ? __dev_queue_xmit+0x139a/0x1f20 [ 219.093080][T18403] ? __dev_queue_xmit+0x148/0x1f20 [ 219.093115][T18403] ? ref_tracker_free+0x37d/0x3e0 [ 219.093151][T18403] ? __netlink_deliver_tap+0x4dc/0x500 [ 219.093207][T18403] netlink_unicast+0x5c0/0x690 [ 219.093239][T18403] netlink_sendmsg+0x5c8/0x6f0 [ 219.093302][T18403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.093323][T18403] ____sys_sendmsg+0x5af/0x600 [ 219.093407][T18403] ___sys_sendmsg+0x195/0x1e0 [ 219.093440][T18403] __x64_sys_sendmsg+0xd4/0x160 [ 219.093465][T18403] x64_sys_call+0x17ba/0x3000 [ 219.093511][T18403] do_syscall_64+0xc0/0x2a0 [ 219.093543][T18403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.093566][T18403] RIP: 0033:0x7f883885aeb9 [ 219.093584][T18403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.093612][T18403] RSP: 002b:00007f88372b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.093633][T18403] RAX: ffffffffffffffda RBX: 00007f8838ad5fa0 RCX: 00007f883885aeb9 [ 219.093701][T18403] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000007 [ 219.093716][T18403] RBP: 00007f88388c8c1f R08: 0000000000000000 R09: 0000000000000000 [ 219.093730][T18403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.093744][T18403] R13: 00007f8838ad6038 R14: 00007f8838ad5fa0 R15: 00007fff2ea45388 [ 219.093808][T18403] [ 219.093834][T18403] memory: usage 307200kB, limit 307200kB, failcnt 69 [ 219.263096][T18434] ext4: Bad value for 'resgid' [ 219.267043][T18403] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 219.267073][T18403] kmem: usage 306384kB, limit 9007199254740988kB, failcnt 0 [ 219.271587][T18434] ext4: Bad value for 'resgid' [ 219.275907][T18403] Memory cgroup stats for /syz2: [ 219.453697][T18403] cache 114688 [ 219.462099][T18403] rss 712704 [ 219.465288][T18403] shmem 0 [ 219.468224][T18403] mapped_file 114688 [ 219.472135][T18403] dirty 114688 [ 219.475578][T18403] writeback 0 [ 219.478860][T18403] workingset_refault_anon 7 [ 219.483464][T18403] workingset_refault_file 0 [ 219.487961][T18403] swap 0 [ 219.490876][T18403] swapcached 0 [ 219.494288][T18403] pgpgin 195724 [ 219.497737][T18403] pgpgout 195520 [ 219.501286][T18403] pgfault 216894 [ 219.504872][T18403] pgmajfault 7 [ 219.508237][T18403] inactive_anon 659456 [ 219.512380][T18403] active_anon 53248 [ 219.516187][T18403] inactive_file 0 [ 219.519896][T18403] active_file 122880 [ 219.523846][T18403] unevictable 0 [ 219.527306][T18403] hierarchical_memory_limit 314572800 [ 219.532758][T18403] hierarchical_memsw_limit 9223372036854771712 [ 219.538947][T18403] total_cache 114688 [ 219.542883][T18403] total_rss 712704 [ 219.546610][T18403] total_shmem 0 [ 219.550075][T18403] total_mapped_file 114688 [ 219.554538][T18403] total_dirty 114688 [ 219.558518][T18403] total_writeback 0 [ 219.562445][T18403] total_workingset_refault_anon 7 [ 219.567662][T18403] total_workingset_refault_file 0 [ 219.572711][T18403] total_swap 0 [ 219.576090][T18403] total_swapcached 0 [ 219.579975][T18403] total_pgpgin 195724 [ 219.584031][T18403] total_pgpgout 195520 [ 219.588107][T18403] total_pgfault 216894 [ 219.592221][T18403] total_pgmajfault 7 [ 219.596117][T18403] total_inactive_anon 659456 [ 219.600795][T18403] total_active_anon 53248 [ 219.605183][T18403] total_inactive_file 0 [ 219.609324][T18403] total_active_file 122880 [ 219.613912][T18403] total_unevictable 0 [ 219.617892][T18403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4532,pid=18402,uid=0 [ 219.632666][T18403] Memory cgroup out of memory: Killed process 18402 (syz.2.4532) total-vm:94264kB, anon-rss:1336kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 219.800424][T18455] netlink: 'syz.8.4547': attribute type 1 has an invalid length. [ 219.943444][T18469] ext3: Unknown parameter 'uid' [ 219.953374][T10109] IPVS: starting estimator thread 0... [ 220.036130][T18457] netlink: 'syz.4.4548': attribute type 2 has an invalid length. [ 220.041623][T18470] IPVS: using max 2160 ests per chain, 108000 per kthread [ 220.313059][T18498] netlink: 'syz.0.4562': attribute type 1 has an invalid length. [ 220.321052][T18498] FAULT_INJECTION: forcing a failure. [ 220.321052][T18498] name failslab, interval 1, probability 0, space 0, times 0 [ 220.333809][T18498] CPU: 1 UID: 0 PID: 18498 Comm: syz.0.4562 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.333919][T18498] Tainted: [W]=WARN [ 220.333926][T18498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.333937][T18498] Call Trace: [ 220.333944][T18498] [ 220.333953][T18498] __dump_stack+0x1d/0x30 [ 220.334005][T18498] dump_stack_lvl+0x95/0xd0 [ 220.334025][T18498] dump_stack+0x15/0x1b [ 220.334043][T18498] should_fail_ex+0x263/0x280 [ 220.334115][T18498] should_failslab+0x8c/0xb0 [ 220.334143][T18498] __kmalloc_cache_noprof+0x64/0x4a0 [ 220.334172][T18498] ? alloc_workqueue_noprof+0x1ab/0x1710 [ 220.334207][T18498] alloc_workqueue_noprof+0x1ab/0x1710 [ 220.334295][T18498] ? crng_make_state+0xbc/0x200 [ 220.334336][T18498] ieee802154_register_hw+0xa3/0x6a0 [ 220.334365][T18498] ? should_failslab+0x8c/0xb0 [ 220.334447][T18498] hwsim_add_one+0x3ac/0xa80 [ 220.334474][T18498] hwsim_new_radio_nl+0x2e/0x40 [ 220.334562][T18498] genl_family_rcv_msg_doit+0x187/0x1f0 [ 220.334605][T18498] genl_rcv_msg+0x432/0x470 [ 220.334776][T18498] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 220.334814][T18498] netlink_rcv_skb+0x123/0x220 [ 220.334925][T18498] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.334957][T18498] genl_rcv+0x28/0x40 [ 220.335053][T18498] netlink_unicast+0x5c0/0x690 [ 220.335088][T18498] netlink_sendmsg+0x5c8/0x6f0 [ 220.335137][T18498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.335159][T18498] ____sys_sendmsg+0x5af/0x600 [ 220.335289][T18498] ___sys_sendmsg+0x195/0x1e0 [ 220.335320][T18498] __x64_sys_sendmsg+0xd4/0x160 [ 220.335344][T18498] x64_sys_call+0x17ba/0x3000 [ 220.335370][T18498] do_syscall_64+0xc0/0x2a0 [ 220.335415][T18498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.335443][T18498] RIP: 0033:0x7fa8ec0eaeb9 [ 220.335463][T18498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.335482][T18498] RSP: 002b:00007fa8eab47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.335503][T18498] RAX: ffffffffffffffda RBX: 00007fa8ec365fa0 RCX: 00007fa8ec0eaeb9 [ 220.335549][T18498] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 220.335565][T18498] RBP: 00007fa8eab47090 R08: 0000000000000000 R09: 0000000000000000 [ 220.335595][T18498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.335660][T18498] R13: 00007fa8ec366038 R14: 00007fa8ec365fa0 R15: 00007fff8550c938 [ 220.335691][T18498] [ 220.365966][T18500] netlink: 'syz.7.4563': attribute type 1 has an invalid length. [ 220.845076][T18561] netlink: 'syz.7.4575': attribute type 1 has an invalid length. [ 220.854211][T18561] FAULT_INJECTION: forcing a failure. [ 220.854211][T18561] name failslab, interval 1, probability 0, space 0, times 0 [ 220.856954][T18562] netlink: 'syz.2.4576': attribute type 1 has an invalid length. [ 220.866950][T18561] CPU: 1 UID: 0 PID: 18561 Comm: syz.7.4575 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.866986][T18561] Tainted: [W]=WARN [ 220.867058][T18561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.867117][T18561] Call Trace: [ 220.867126][T18561] [ 220.867135][T18561] __dump_stack+0x1d/0x30 [ 220.867161][T18561] dump_stack_lvl+0x95/0xd0 [ 220.867184][T18561] dump_stack+0x15/0x1b [ 220.867282][T18561] should_fail_ex+0x263/0x280 [ 220.867389][T18561] should_failslab+0x8c/0xb0 [ 220.867470][T18561] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 220.867499][T18561] ? alloc_workqueue_noprof+0x4f2/0x1710 [ 220.867673][T18561] alloc_workqueue_noprof+0x4f2/0x1710 [ 220.867708][T18561] ? __schedule+0x82d/0xc90 [ 220.867750][T18561] ieee802154_register_hw+0xa3/0x6a0 [ 220.867781][T18561] ? should_failslab+0x8c/0xb0 [ 220.867807][T18561] hwsim_add_one+0x3ac/0xa80 [ 220.867838][T18561] hwsim_new_radio_nl+0x2e/0x40 [ 220.867944][T18561] genl_family_rcv_msg_doit+0x187/0x1f0 [ 220.867977][T18561] genl_rcv_msg+0x432/0x470 [ 220.868046][T18561] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 220.868075][T18561] netlink_rcv_skb+0x123/0x220 [ 220.868107][T18561] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.868181][T18561] genl_rcv+0x28/0x40 [ 220.868203][T18561] netlink_unicast+0x5c0/0x690 [ 220.868236][T18561] netlink_sendmsg+0x5c8/0x6f0 [ 220.868300][T18561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.868320][T18561] ____sys_sendmsg+0x5af/0x600 [ 220.868400][T18561] ___sys_sendmsg+0x195/0x1e0 [ 220.868434][T18561] __x64_sys_sendmsg+0xd4/0x160 [ 220.868459][T18561] x64_sys_call+0x17ba/0x3000 [ 220.868485][T18561] do_syscall_64+0xc0/0x2a0 [ 220.868556][T18561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.868579][T18561] RIP: 0033:0x7f996899aeb9 [ 220.868691][T18561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.868710][T18561] RSP: 002b:00007f99673f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.868732][T18561] RAX: ffffffffffffffda RBX: 00007f9968c15fa0 RCX: 00007f996899aeb9 [ 220.868760][T18561] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 220.868773][T18561] RBP: 00007f99673f7090 R08: 0000000000000000 R09: 0000000000000000 [ 220.868787][T18561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.868800][T18561] R13: 00007f9968c16038 R14: 00007f9968c15fa0 R15: 00007ffd632d8e98 [ 220.868864][T18561] [ 220.950952][T18569] FAULT_INJECTION: forcing a failure. [ 220.950952][T18569] name failslab, interval 1, probability 0, space 0, times 0 [ 221.132947][T18569] CPU: 1 UID: 0 PID: 18569 Comm: syz.7.4579 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 221.132981][T18569] Tainted: [W]=WARN [ 221.132988][T18569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.133009][T18569] Call Trace: [ 221.133015][T18569] [ 221.133023][T18569] __dump_stack+0x1d/0x30 [ 221.133048][T18569] dump_stack_lvl+0x95/0xd0 [ 221.133069][T18569] dump_stack+0x15/0x1b [ 221.133105][T18569] should_fail_ex+0x263/0x280 [ 221.133137][T18569] should_failslab+0x8c/0xb0 [ 221.133163][T18569] kmem_cache_alloc_noprof+0x68/0x490 [ 221.133211][T18569] ? dst_alloc+0xbd/0x100 [ 221.133239][T18569] ? avc_has_perm+0x101/0x190 [ 221.133270][T18569] dst_alloc+0xbd/0x100 [ 221.133375][T18569] ? ip_route_input_rcu+0x1282/0x1c10 [ 221.133398][T18569] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 221.133460][T18569] ip_route_output_key_hash+0x63/0xa0 [ 221.133483][T18569] tcp_v4_connect+0x3e4/0xaf0 [ 221.133520][T18569] tcp_v6_connect+0x838/0xc90 [ 221.133557][T18569] __inet_stream_connect+0x169/0x7f0 [ 221.133744][T18569] ? _raw_spin_lock_bh+0x56/0xb0 [ 221.133799][T18569] ? _raw_spin_unlock_bh+0x18/0x20 [ 221.133819][T18569] ? lock_sock_nested+0x132/0x160 [ 221.133842][T18569] ? selinux_netlbl_socket_connect+0x114/0x130 [ 221.133868][T18569] inet_stream_connect+0x44/0x70 [ 221.133928][T18569] ? __pfx_inet_stream_connect+0x10/0x10 [ 221.133964][T18569] __sys_connect+0x1f1/0x2a0 [ 221.134082][T18569] __x64_sys_connect+0x3f/0x50 [ 221.134113][T18569] x64_sys_call+0x2e09/0x3000 [ 221.134140][T18569] do_syscall_64+0xc0/0x2a0 [ 221.134176][T18569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.134199][T18569] RIP: 0033:0x7f996899aeb9 [ 221.134227][T18569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.134246][T18569] RSP: 002b:00007f99673f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 221.134354][T18569] RAX: ffffffffffffffda RBX: 00007f9968c15fa0 RCX: 00007f996899aeb9 [ 221.134425][T18569] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000004 [ 221.134440][T18569] RBP: 00007f99673f7090 R08: 0000000000000000 R09: 0000000000000000 [ 221.134499][T18569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.134513][T18569] R13: 00007f9968c16038 R14: 00007f9968c15fa0 R15: 00007ffd632d8e98 [ 221.134535][T18569] [ 221.418835][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 221.418850][ T29] audit: type=1400 audit(1770232287.491:3429): avc: denied { getopt } for pid=18593 comm="syz.4.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 221.427552][T18594] ip6t_srh: unknown srh match flags 4000 [ 221.458920][T18594] 9p: Bad value for 'wfdno' [ 221.502563][T18604] netlink: 'syz.0.4588': attribute type 1 has an invalid length. [ 221.571317][T18604] FAULT_INJECTION: forcing a failure. [ 221.571317][T18604] name failslab, interval 1, probability 0, space 0, times 0 [ 221.584073][T18604] CPU: 0 UID: 0 PID: 18604 Comm: syz.0.4588 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 221.584120][T18604] Tainted: [W]=WARN [ 221.584129][T18604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.584143][T18604] Call Trace: [ 221.584151][T18604] [ 221.584200][T18604] __dump_stack+0x1d/0x30 [ 221.584227][T18604] dump_stack_lvl+0x95/0xd0 [ 221.584272][T18604] dump_stack+0x15/0x1b [ 221.584295][T18604] should_fail_ex+0x263/0x280 [ 221.584330][T18604] should_failslab+0x8c/0xb0 [ 221.584357][T18604] __kmalloc_noprof+0xb8/0x580 [ 221.584411][T18604] ? apply_wqattrs_prepare+0x67/0x840 [ 221.584505][T18604] apply_wqattrs_prepare+0x67/0x840 [ 221.584535][T18604] alloc_workqueue_noprof+0xd3a/0x1710 [ 221.584608][T18604] ieee802154_register_hw+0xa3/0x6a0 [ 221.584640][T18604] ? should_failslab+0x8c/0xb0 [ 221.584729][T18604] hwsim_add_one+0x3ac/0xa80 [ 221.584760][T18604] hwsim_new_radio_nl+0x2e/0x40 [ 221.584834][T18604] genl_family_rcv_msg_doit+0x187/0x1f0 [ 221.584944][T18604] genl_rcv_msg+0x432/0x470 [ 221.584971][T18604] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 221.585003][T18604] netlink_rcv_skb+0x123/0x220 [ 221.585037][T18604] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.585126][T18604] genl_rcv+0x28/0x40 [ 221.585151][T18604] netlink_unicast+0x5c0/0x690 [ 221.585186][T18604] netlink_sendmsg+0x5c8/0x6f0 [ 221.585210][T18604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.585237][T18604] ____sys_sendmsg+0x5af/0x600 [ 221.585264][T18604] ___sys_sendmsg+0x195/0x1e0 [ 221.585298][T18604] __x64_sys_sendmsg+0xd4/0x160 [ 221.585325][T18604] x64_sys_call+0x17ba/0x3000 [ 221.585455][T18604] do_syscall_64+0xc0/0x2a0 [ 221.585486][T18604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.585508][T18604] RIP: 0033:0x7fa8ec0eaeb9 [ 221.585591][T18604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.585625][T18604] RSP: 002b:00007fa8eab47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.585646][T18604] RAX: ffffffffffffffda RBX: 00007fa8ec365fa0 RCX: 00007fa8ec0eaeb9 [ 221.585662][T18604] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 221.585677][T18604] RBP: 00007fa8eab47090 R08: 0000000000000000 R09: 0000000000000000 [ 221.585753][T18604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.585768][T18604] R13: 00007fa8ec366038 R14: 00007fa8ec365fa0 R15: 00007fff8550c938 [ 221.585790][T18604] [ 221.865743][T18611] __nla_validate_parse: 8 callbacks suppressed [ 221.865760][T18611] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4586'. [ 221.909991][T18611] netlink: 59 bytes leftover after parsing attributes in process `syz.7.4586'. [ 221.920208][ T29] audit: type=1326 audit(1770232287.981:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18613 comm="syz.0.4591" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8ec0eaeb9 code=0x0 [ 222.032272][T18632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18632 comm=syz.2.4593 [ 222.141808][T18647] set_capacity_and_notify: 9 callbacks suppressed [ 222.141824][T18647] loop0: detected capacity change from 0 to 1024 [ 222.157630][T18650] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=50 sclass=netlink_audit_socket pid=18650 comm=syz.2.4596 [ 222.192077][T18610] loop4: detected capacity change from 0 to 4096 [ 222.228698][T18647] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 222.252853][T18647] syzkaller0: linktype set to 773 [ 222.310234][T18610] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.4590: corrupted inode contents [ 222.331788][T18610] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.4590: mark_inode_dirty error [ 222.360685][T18633] EXT4-fs (loop4): shut down requested (1) [ 222.374393][ T29] audit: type=1400 audit(1770232288.451:3431): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 222.396529][ T29] audit: type=1400 audit(1770232288.451:3432): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.418141][ T29] audit: type=1400 audit(1770232288.451:3433): avc: denied { append } for pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 222.440692][ T29] audit: type=1400 audit(1770232288.451:3434): avc: denied { open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 222.463435][ T29] audit: type=1400 audit(1770232288.451:3435): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 222.559422][T18610] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 222.576998][T18610] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 222.605190][ T29] audit: type=1400 audit(1770232288.681:3436): avc: denied { setattr } for pid=18607 comm="syz.4.4590" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.629617][ T29] audit: type=1400 audit(1770232288.701:3437): avc: denied { connect } for pid=18607 comm="syz.4.4590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 222.682818][T18690] netlink: 'syz.7.4601': attribute type 1 has an invalid length. [ 222.690604][T18690] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4601'. [ 222.715852][T18690] FAULT_INJECTION: forcing a failure. [ 222.715852][T18690] name failslab, interval 1, probability 0, space 0, times 0 [ 222.729015][T18690] CPU: 1 UID: 0 PID: 18690 Comm: syz.7.4601 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 222.729052][T18690] Tainted: [W]=WARN [ 222.729059][T18690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.729071][T18690] Call Trace: [ 222.729079][T18690] [ 222.729089][T18690] __dump_stack+0x1d/0x30 [ 222.729116][T18690] dump_stack_lvl+0x95/0xd0 [ 222.729139][T18690] dump_stack+0x15/0x1b [ 222.729280][T18690] should_fail_ex+0x263/0x280 [ 222.729315][T18690] should_failslab+0x8c/0xb0 [ 222.729452][T18690] __kmalloc_cache_noprof+0x64/0x4a0 [ 222.729507][T18690] ? apply_wqattrs_prepare+0x8c/0x840 [ 222.729530][T18690] apply_wqattrs_prepare+0x8c/0x840 [ 222.729559][T18690] alloc_workqueue_noprof+0xd3a/0x1710 [ 222.729656][T18690] ieee802154_register_hw+0xa3/0x6a0 [ 222.729688][T18690] ? should_failslab+0x8c/0xb0 [ 222.729712][T18690] hwsim_add_one+0x3ac/0xa80 [ 222.729740][T18690] hwsim_new_radio_nl+0x2e/0x40 [ 222.729837][T18690] genl_family_rcv_msg_doit+0x187/0x1f0 [ 222.729922][T18690] genl_rcv_msg+0x432/0x470 [ 222.729948][T18690] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 222.729976][T18690] netlink_rcv_skb+0x123/0x220 [ 222.730072][T18690] ? __pfx_genl_rcv_msg+0x10/0x10 [ 222.730101][T18690] genl_rcv+0x28/0x40 [ 222.730191][T18690] netlink_unicast+0x5c0/0x690 [ 222.730221][T18690] netlink_sendmsg+0x5c8/0x6f0 [ 222.730242][T18690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.730260][T18690] ____sys_sendmsg+0x5af/0x600 [ 222.730302][T18690] ___sys_sendmsg+0x195/0x1e0 [ 222.730355][T18690] __x64_sys_sendmsg+0xd4/0x160 [ 222.730382][T18690] x64_sys_call+0x17ba/0x3000 [ 222.730405][T18690] do_syscall_64+0xc0/0x2a0 [ 222.730557][T18690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.730580][T18690] RIP: 0033:0x7f996899aeb9 [ 222.730597][T18690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.730618][T18690] RSP: 002b:00007f99673f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.730698][T18690] RAX: ffffffffffffffda RBX: 00007f9968c15fa0 RCX: 00007f996899aeb9 [ 222.730773][T18690] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 222.730808][T18690] RBP: 00007f99673f7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.730823][T18690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.730842][T18690] R13: 00007f9968c16038 R14: 00007f9968c15fa0 R15: 00007ffd632d8e98 [ 222.730866][T18690] [ 222.988637][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4602'. [ 223.024708][ T4966] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 223.035481][ T4966] Quota error (device loop4): write_blk: dquota write failed [ 223.090378][T18715] loop0: detected capacity change from 0 to 512 [ 223.134676][T18720] loop2: detected capacity change from 0 to 1024 [ 223.159023][T18715] ext4: Bad value for 'resgid' [ 223.163879][T18715] ext4: Bad value for 'resgid' [ 223.195070][T18720] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.209252][T18715] loop0: detected capacity change from 0 to 2048 [ 223.218564][T18730] team_slave_1: entered promiscuous mode [ 223.233378][T18730] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 223.275868][T18736] loop8: detected capacity change from 0 to 4096 [ 223.414178][T18757] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4615'. [ 223.425716][T18757] FAULT_INJECTION: forcing a failure. [ 223.425716][T18757] name failslab, interval 1, probability 0, space 0, times 0 [ 223.438497][T18757] CPU: 1 UID: 0 PID: 18757 Comm: syz.2.4615 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 223.438553][T18757] Tainted: [W]=WARN [ 223.438561][T18757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.438575][T18757] Call Trace: [ 223.438583][T18757] [ 223.438592][T18757] __dump_stack+0x1d/0x30 [ 223.438677][T18757] dump_stack_lvl+0x95/0xd0 [ 223.438702][T18757] dump_stack+0x15/0x1b [ 223.438778][T18757] should_fail_ex+0x263/0x280 [ 223.438885][T18757] should_failslab+0x8c/0xb0 [ 223.438910][T18757] __kmalloc_cache_noprof+0x64/0x4a0 [ 223.438938][T18757] ? apply_wqattrs_prepare+0x8c/0x840 [ 223.438964][T18757] apply_wqattrs_prepare+0x8c/0x840 [ 223.439044][T18757] alloc_workqueue_noprof+0xd3a/0x1710 [ 223.439080][T18757] ieee802154_register_hw+0xa3/0x6a0 [ 223.439112][T18757] ? should_failslab+0x8c/0xb0 [ 223.439191][T18757] hwsim_add_one+0x3ac/0xa80 [ 223.439296][T18757] hwsim_new_radio_nl+0x2e/0x40 [ 223.439319][T18757] genl_family_rcv_msg_doit+0x187/0x1f0 [ 223.439353][T18757] genl_rcv_msg+0x432/0x470 [ 223.439375][T18757] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 223.439404][T18757] netlink_rcv_skb+0x123/0x220 [ 223.439465][T18757] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.439496][T18757] genl_rcv+0x28/0x40 [ 223.439516][T18757] netlink_unicast+0x5c0/0x690 [ 223.439549][T18757] netlink_sendmsg+0x5c8/0x6f0 [ 223.439575][T18757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.439611][T18757] ____sys_sendmsg+0x5af/0x600 [ 223.439639][T18757] ___sys_sendmsg+0x195/0x1e0 [ 223.439674][T18757] __x64_sys_sendmsg+0xd4/0x160 [ 223.439734][T18757] x64_sys_call+0x17ba/0x3000 [ 223.439785][T18757] do_syscall_64+0xc0/0x2a0 [ 223.439814][T18757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.439872][T18757] RIP: 0033:0x7f883885aeb9 [ 223.439891][T18757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.439909][T18757] RSP: 002b:00007f88372b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.439937][T18757] RAX: ffffffffffffffda RBX: 00007f8838ad5fa0 RCX: 00007f883885aeb9 [ 223.439950][T18757] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 223.439962][T18757] RBP: 00007f88372b7090 R08: 0000000000000000 R09: 0000000000000000 [ 223.440004][T18757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.440020][T18757] R13: 00007f8838ad6038 R14: 00007f8838ad5fa0 R15: 00007fff2ea45388 [ 223.440042][T18757] [ 223.721187][T18759] lo speed is unknown, defaulting to 1000 [ 223.732385][T18759] lo speed is unknown, defaulting to 1000 [ 223.785062][T18768] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.4617'. [ 223.794622][T18768] netlink: zone id is out of range [ 223.799728][T18768] netlink: zone id is out of range [ 223.805390][T18768] netlink: zone id is out of range [ 223.810550][T18768] netlink: zone id is out of range [ 223.815710][T18768] netlink: del zone limit has 8 unknown bytes [ 223.867423][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4621'. [ 223.879652][T18770] sctp: [Deprecated]: syz.0.4618 (pid 18770) Use of int in max_burst socket option. [ 223.879652][T18770] Use struct sctp_assoc_value instead [ 223.912312][T18785] loop7: detected capacity change from 0 to 512 [ 223.921798][T18785] ext4: Bad value for 'resgid' [ 223.926695][T18785] ext4: Bad value for 'resgid' [ 223.949754][T18785] loop7: detected capacity change from 0 to 2048 [ 223.997636][T18796] loop0: detected capacity change from 0 to 128 [ 224.021932][T18796] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 224.048793][T18768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.050487][T18801] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.177024][T18816] validate_nla: 1 callbacks suppressed [ 224.177042][T18816] netlink: 'syz.7.4631': attribute type 1 has an invalid length. [ 224.190385][T18816] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4631'. [ 224.200189][T18816] FAULT_INJECTION: forcing a failure. [ 224.200189][T18816] name failslab, interval 1, probability 0, space 0, times 0 [ 224.212932][T18816] CPU: 1 UID: 0 PID: 18816 Comm: syz.7.4631 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 224.212965][T18816] Tainted: [W]=WARN [ 224.213002][T18816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.213016][T18816] Call Trace: [ 224.213024][T18816] [ 224.213032][T18816] __dump_stack+0x1d/0x30 [ 224.213055][T18816] dump_stack_lvl+0x95/0xd0 [ 224.213129][T18816] dump_stack+0x15/0x1b [ 224.213151][T18816] should_fail_ex+0x263/0x280 [ 224.213221][T18816] should_failslab+0x8c/0xb0 [ 224.213247][T18816] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 224.213291][T18816] ? alloc_unbound_pwq+0x641/0x7e0 [ 224.213316][T18816] alloc_unbound_pwq+0x641/0x7e0 [ 224.213342][T18816] apply_wqattrs_prepare+0x1df/0x840 [ 224.213376][T18816] alloc_workqueue_noprof+0xd3a/0x1710 [ 224.213443][T18816] ieee802154_register_hw+0xa3/0x6a0 [ 224.213481][T18816] ? should_failslab+0x8c/0xb0 [ 224.213569][T18816] hwsim_add_one+0x3ac/0xa80 [ 224.213600][T18816] hwsim_new_radio_nl+0x2e/0x40 [ 224.213628][T18816] genl_family_rcv_msg_doit+0x187/0x1f0 [ 224.213700][T18816] genl_rcv_msg+0x432/0x470 [ 224.213722][T18816] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 224.213811][T18816] netlink_rcv_skb+0x123/0x220 [ 224.213839][T18816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.213890][T18816] genl_rcv+0x28/0x40 [ 224.213910][T18816] netlink_unicast+0x5c0/0x690 [ 224.213971][T18816] netlink_sendmsg+0x5c8/0x6f0 [ 224.214084][T18816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.214101][T18816] ____sys_sendmsg+0x5af/0x600 [ 224.214123][T18816] ___sys_sendmsg+0x195/0x1e0 [ 224.214176][T18816] __x64_sys_sendmsg+0xd4/0x160 [ 224.214200][T18816] x64_sys_call+0x17ba/0x3000 [ 224.214223][T18816] do_syscall_64+0xc0/0x2a0 [ 224.214252][T18816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.214277][T18816] RIP: 0033:0x7f996899aeb9 [ 224.214298][T18816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.214377][T18816] RSP: 002b:00007f99673f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.214398][T18816] RAX: ffffffffffffffda RBX: 00007f9968c15fa0 RCX: 00007f996899aeb9 [ 224.214415][T18816] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 224.214430][T18816] RBP: 00007f99673f7090 R08: 0000000000000000 R09: 0000000000000000 [ 224.214446][T18816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.214507][T18816] R13: 00007f9968c16038 R14: 00007f9968c15fa0 R15: 00007ffd632d8e98 [ 224.214530][T18816] [ 224.517680][T18822] loop7: detected capacity change from 0 to 1024 [ 224.519486][T18825] program syz.4.4635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.573461][T18831] netlink: 'syz.0.4636': attribute type 30 has an invalid length. [ 224.598020][T18833] : renamed from bond_slave_0 (while UP) [ 224.612911][T18833] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 224.665762][T18839] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 224.674792][T18839] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #13: comm syz.7.4638: iget: bad i_size value: 12154757448730 [ 224.687925][T18839] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4638: couldn't read orphan inode 13 (err -117) [ 224.706869][T18839] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4638'. [ 224.760936][T12970] ================================================================== [ 224.769052][T12970] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 224.776791][T12970] [ 224.779120][T12970] read-write to 0xffff888237d27550 of 8 bytes by task 18846 on cpu 1: [ 224.787287][T12970] find_get_block_common+0x498/0x8e0 [ 224.792605][T12970] bdev_getblk+0x4d/0x3f0 [ 224.796943][T12970] __ext4_get_inode_loc+0x303/0x930 [ 224.802250][T12970] ext4_reserve_inode_write+0xd7/0x250 [ 224.807709][T12970] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 224.813096][T12970] ext4_dirty_inode+0x92/0xc0 [ 224.817784][T12970] __mark_inode_dirty+0x162/0x740 [ 224.822817][T12970] touch_atime+0x229/0x340 [ 224.827236][T12970] ext4_file_mmap_prepare+0x13a/0x1a0 [ 224.832609][T12970] mmap_region+0xc1a/0x1d20 [ 224.837109][T12970] do_mmap+0x9b2/0xbd0 [ 224.841173][T12970] vm_mmap_pgoff+0x183/0x2d0 [ 224.845754][T12970] ksys_mmap_pgoff+0x267/0x310 [ 224.850532][T12970] x64_sys_call+0x16bb/0x3000 [ 224.855222][T12970] do_syscall_64+0xc0/0x2a0 [ 224.859730][T12970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.865632][T12970] [ 224.867946][T12970] read to 0xffff888237d27550 of 8 bytes by task 12970 on cpu 0: [ 224.875574][T12970] has_bh_in_lru+0x35/0x1f0 [ 224.880097][T12970] smp_call_function_many_cond+0x2a9/0xc30 [ 224.885935][T12970] on_each_cpu_cond_mask+0x3c/0x80 [ 224.891065][T12970] invalidate_bh_lrus+0x2a/0x30 [ 224.896030][T12970] invalidate_bdev+0x42/0x70 [ 224.900628][T12970] ext4_put_super+0x624/0x7d0 [ 224.905307][T12970] generic_shutdown_super+0xe6/0x210 [ 224.910599][T12970] kill_block_super+0x2a/0x70 [ 224.915263][T12970] ext4_kill_sb+0x42/0x80 [ 224.919593][T12970] deactivate_locked_super+0x75/0x1c0 [ 224.924982][T12970] deactivate_super+0x97/0xa0 [ 224.929659][T12970] cleanup_mnt+0x2bb/0x330 [ 224.934068][T12970] __cleanup_mnt+0x19/0x20 [ 224.938567][T12970] task_work_run+0x130/0x1a0 [ 224.943164][T12970] exit_to_user_mode_loop+0x1f7/0x6f0 [ 224.948533][T12970] do_syscall_64+0x1d3/0x2a0 [ 224.953117][T12970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.959014][T12970] [ 224.961321][T12970] value changed: 0x0000000000000000 -> 0xffff888107566208 [ 224.968413][T12970] [ 224.970723][T12970] Reported by Kernel Concurrency Sanitizer on: [ 224.976858][T12970] CPU: 0 UID: 0 PID: 12970 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 224.988417][T12970] Tainted: [W]=WARN [ 224.992211][T12970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.002263][T12970] ================================================================== [ 226.240622][T13557] EXT4-fs unmount: 53 callbacks suppressed [ 226.240635][T13557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.