last executing test programs: 10m49.686696184s ago: executing program 32 (id=3779): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$inet(r0, &(0x7f0000001c40)={&(0x7f0000000b40)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000000b80)="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", 0xf7e}], 0x1, &(0x7f0000001bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14}}], 0x30}, 0x11813d0ebc9614dc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32, @ANYBLOB="050000000300029c63a20000000000000084aa05b65d8b2702220f8cf7dd92ee9f0000000000000000000000ce611201112426191ef851c52f7dd5a490a700448082067b5a1138f3d0b3da4181c5fcd47f58e41f3234a9074c79dfe6b39e1c913891e9bf1fac676dc3fdaac687a7de2d7c2ac97fea3fc4d9fc85a1320583bae2c4a491c02e57fb88081f488fad3d1076669da850e2d54d041026a4b303f6e70b86c6a23bad5fffc8e77e8c7bbe7c2dd8072af6d62d50da8c8879a0386fc2466af08a5069c5af51da65"], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x18}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value=r4}, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 10m36.37833114s ago: executing program 33 (id=4281): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r1, 0x1c, "bf127dca6b28efc07bdc0e2f9b42622c60c0d9a493a8b928ad058a64"}, &(0x7f0000000000)=0x24) 10m4.740001986s ago: executing program 34 (id=5551): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xfdef) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 10m2.61924319s ago: executing program 35 (id=5588): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) 9m49.819198317s ago: executing program 36 (id=5985): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 9m45.65095269s ago: executing program 37 (id=6053): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) shutdown(r0, 0x0) 9m45.371592727s ago: executing program 38 (id=6061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x8, 0x2) 9m39.83246466s ago: executing program 39 (id=6159): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x7ffffffe}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[], 0x0) 9m38.881275655s ago: executing program 40 (id=6176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0xc101) sendmsg$inet6(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000140)=0x2, 0x4) 9m34.075398636s ago: executing program 41 (id=6262): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x10000, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x80000005) getdents64(r2, 0x0, 0xffffffffffffffb9) 9m31.26536766s ago: executing program 42 (id=6323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @private0}}, 0x0, 0x0, 0x40, 0x0, "94711652090000000000000012bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 9m22.206677079s ago: executing program 43 (id=6557): prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='$\\\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 9m15.829865701s ago: executing program 44 (id=6730): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x3ff, 0x9, 0x9}, &(0x7f00000001c0)=0x10) 9m0.952572419s ago: executing program 45 (id=7029): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0xfffffffffffffffe) 9m0.525947053s ago: executing program 46 (id=7034): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0xf}}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66) 8m58.843081622s ago: executing program 47 (id=7067): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x11, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x7, 0x401}, @generic={0x5, 0xc, "97134cb6ce50e935f628"}, @exp_fastopen={0xfe, 0x7, 0xf989, "5d7d04"}]}}}}}}}, 0x0) 8m38.399606195s ago: executing program 48 (id=7587): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 8m0.694070345s ago: executing program 49 (id=8270): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="0803000016000100000000000000000064010100000000000000000000000000ac1e0001000000000000000000000000000000e300000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000200000000033000000fe80000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000400000096070000000000000000000000000002be0000000000000000000000b1a00100e4000600ffffffff0000000000000000000000000a010102000000000000000000000000000900094e2300050a0020c01d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0100000000000000000000000000000000000e33000000fe8000000000000000000000000000bb04000000000000006be200000000000001000000000000000400000000000000f7ffffffffffffff040000000000000009000000000000000500000000000000fffffffffeffffff08000000000000000800000000000000891800000000000005000000080000000800000029bd7000ff3400000200040ca20000000000000008000b00"], 0x308}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 7m53.104088517s ago: executing program 50 (id=8487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x77}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) 7m51.787958514s ago: executing program 51 (id=8506): socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fd7089b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 7m48.983561268s ago: executing program 52 (id=8551): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 7m41.341670494s ago: executing program 6 (id=8832): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e105000700810000", 0x19}], 0x1}, 0x0) 7m41.291593377s ago: executing program 6 (id=8833): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 7m41.191314163s ago: executing program 6 (id=8834): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x82, 0x0, 0x0, 0x0, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x816ac1f4127f23eb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000}, 0x48) 7m41.07327554s ago: executing program 6 (id=8835): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m40.913739199s ago: executing program 6 (id=8836): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0x1a06002, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x1946}, 0xa0, 0x0, 0x0, 0x8, 0x0, 0xfccc}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0) 7m40.843315993s ago: executing program 6 (id=8837): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000800)}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 7m38.32177303s ago: executing program 53 (id=8668): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x4e20, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 7m28.89548644s ago: executing program 54 (id=8796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 7m28.680464633s ago: executing program 55 (id=8809): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x88) sendmmsg$inet(r0, &(0x7f0000003100)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="b3bd296539fff3fb9bb64f722bbd5dd7f840dc1d194d5026fec2c15904a12bd66b750e44460230d41547fd623cb270eb7e3c56df888021bbe6fd81d83323babf985d67039100ab0439becd237d23d8f494a3d3e4201c35a616f64471bbd2c9e2d7e7bb62941fcb5454143359a3c740e308724a2c5f9884a23a544261f62961b547ec9ff7ea0a4da080123f4e6e98598e9cd620d5c3808fe39ce98ac6055b3aec24bb5bbdfed24e521cd347fcc0d376d622e3b561b1650e9135de383ca92da47ec7f43d66ac5efc60536df8345ecc3128039af59d00e4a44b190800fdcdbda5e344588d1ae0574663a1ba1694515cabce7f65b34f32ee6f4b73fe8a46140d41ec33add3f4f74bbcc82305777edd3fdecf24057e245d233bdd6bbacf368a46b709204773b2f860dbeb4fc78c116b8c187a3741811ffc75530cc67d3cdf83c378805aece5c6ea4dc87e260259e500276f53b6e95ece102907a9dcfed9e6d15d5c0ab5a6365cb6560951dc098ce1b8c4ae617343000afa98e14d4a35fb3a11990d1161a2ea56ea7e01a2f23c8f3d3e5e600a4e6c995a46ef717cb347fc9a5d830ab5f2520d098995605ba4e05b790a89392b9894a0c03ba5d92b910c1bd6641666a59d5126c4bdc7e149b5f77bf95d5efb5029a32671fffd7e638b3e4174121ed6f1b709b31d0bf7995a3b56338ecbc1b4008730ec40baa9e1048ea13e75e00c48c19a5cd4a0186a0dc9379cfda2565b2a5ef9ddd25669184ef5f0c4eca0bc010250e1437c78ce0ee713a5bafe9db7d19f870de835b6e397ffedd3506ecc8b6b09567195477d7ce09e3080be1f690d5f9d471b90130917f974a5ae026a89e4c5252311df4e97cd0324a25f2c7105a42e35554a92c44faa077c07149e629183e49b1ad78188460d2a6cf694489837ed81848c4eb88173d60b39e89f7314c261f91ef967b6702b5af2f4aa3a816b79be35789f59c6372e26be3c7652e851174cd36b101254f635e007f92d40c466be9da5f97918e87e855d416a1b9df8597222be13433dc89a117b4d9dfe75cb8caf0d6cac73c8d8de769e9bda3543c51d38ea05add9bbe2eeeb2609fbfdd7d69efe4957e36ba44fbe850627fb42a76fd9a6cffadaf25236437eb46679a263e8f94bb6ed2ae6e9d7e07c5d735a011c60b8cb5b5cb5e4e09b02150e2afaa1a7e9e4bf28363a88bb24e57a6beb2c112e0b0534774f4cd1f5ef850b54d3c298ab268048c9c21b49288f04acba09e0905c2f63fc4b5c38559cbe44bcaf85f2cccfa0afce1d9c5ed25b58a085bc60373373d1271bfb6502df78347e6cc19f8a60eaf85915ead04dd4e2c6848054629bd1a913673cd71a3f2e458f22ed842f101980dfca0adbfa34df54125ff0cec25443633bff7758abb75b1c033e68035ee35c582c3697d183c862afd723e100ecc951467266ea3318229fc6d5e2670cfef67f159f3f27c12330466d5ca32a90ff348c0af3ac0314affd80bccb137b4de770b13a23693604cb4b039579a7437c33c905e0a45d0c698ddfe20f9df5eb74f6cd95584fef838d105c3c14cdefbdbfef2e8943e65fc5cc71f8d4e58fc5fee478b563ae2bae4890a2ae46aec745ee24a3c9b25c97103c49cc13768ca508d3bba21c864a5acd1aceebe3453dd1742853af72c51d3e6c3a3a27f2d068a3d51d655b90b7f2933b357b99ac1d6f8c3e95653645396255823edb0ff45eb4315d52837904fbfd1b180b6b0c6f8ac00adeccf4013725b7e3704eee76140b60dc596c1b3bb8e98cfc73ecf9dd3805139d7615743d4682d06def9791ef7c301820027ed3f49604d2b2eb2420acb77b65fd0308264975486866b68bfa2d34439a64928332892d755170b14aa80e2915683a5071bdb7030eaa93958cf4180e88cc308a239019313fd06d546a781600a7baed1493864e2b115b7587d9883be9181e03b815c6bbed065fe1e5a91cafdc9c23a315cb25e0bb5cd287d27d566a94007df245f9549d462c9b55e2c62a73d2fd4d6c21664615a439e60326287683cfc4e140e782524e501aaf02fe957175b0adf44e1d4109916cbec3f7c7b285889732029bf2cace04000000bdc0e324e5118e647401666a7aec09ea4fffb03583b7c90aa5f6d2fe", 0x5e5}], 0x1}}], 0x2, 0xc044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) write$binfmt_misc(r0, 0x0, 0x0) 7m26.819055091s ago: executing program 56 (id=8826): mount$bpf(0x0, &(0x7f0000011c00)='./file0\x00', 0x0, 0x28d4080, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x100004, 0x8, 0x1, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1e}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7, 0x4}, 0x80, 0x0}, 0x0) getpid() socket$kcm(0xa, 0x3, 0x73) socket$kcm(0xa, 0x3, 0x73) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 7m25.81607487s ago: executing program 57 (id=8837): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000800)}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 5m1.185639087s ago: executing program 8 (id=12487): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') fcntl$setstatus(r0, 0x4, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m1.157636639s ago: executing program 8 (id=12488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) 5m1.157105539s ago: executing program 8 (id=12489): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 5m1.053185115s ago: executing program 8 (id=12494): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 5m1.025224807s ago: executing program 8 (id=12495): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}], 0x1, 0x24004c41) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 5m0.849016717s ago: executing program 8 (id=12501): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@newtaction={0xd8, 0x30, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{0xc4, 0x1, [@m_simple={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x3d, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58402dd443e92602f7994c557e40094500a136bb53cc323abe8e9a032feb3b1811b3f9149f6f05"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x54, 0x17, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_LABELS={0x14, 0x7, "1fc075f6ec8940afab5885e58057ae3f"}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 5m0.814894679s ago: executing program 58 (id=12501): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@newtaction={0xd8, 0x30, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{0xc4, 0x1, [@m_simple={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x3d, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58402dd443e92602f7994c557e40094500a136bb53cc323abe8e9a032feb3b1811b3f9149f6f05"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x54, 0x17, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_LABELS={0x14, 0x7, "1fc075f6ec8940afab5885e58057ae3f"}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m49.121040862s ago: executing program 7 (id=12851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}], 0x3) 4m49.032406268s ago: executing program 7 (id=12857): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m48.802609731s ago: executing program 7 (id=12862): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x4}]}}}], 0x38}}], 0x1, 0x0) 4m48.701412427s ago: executing program 7 (id=12868): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 4m48.602747413s ago: executing program 7 (id=12871): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8008) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/11, 0xb}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0xdcc4009}], 0x2, 0x0, 0x0) 4m48.467535241s ago: executing program 7 (id=12875): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file2\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ea, &(0x7f0000002440)="$eJzs3U9rY2UUB+DTTDJTO06t/0ZnNr7oRjcXZxauXDjIFMSA4kwUFYQ7NNWQmITcLJJBsODOlZ9DXLoTxC/Qb+FGiiC66apX2tTW1oqNNqbQ59nkhN99k/eQELjhHu7Wq1992l4vsvV8GJWFhaj2a5G2U6SoxKWY2IiXvlj97ct7l/efp7R65/6tV1JKy899/+Fn3zz/w/Dqu98uf3clNlc+2vrl9o+b1zdvbO3c/6RVpFaRur1hytODXm+YP+g001qraGcpvd1p5kUztbpFc3AkX+/0+v1xyrtr15b6g2ZRpLw7Tu3mOA17aTgYp/zjvNVNWZZVgr8qy7L8/JTHNr7eLstyd00tLu+tfCSW4mo8GtdiOR6LlXg8nogn46l4Oq7HM/Fs3Ng7asYtAAAAAAAAAAAAAAAAAAAAwAUz1fx/1fw/AAAAAAAAAAAAAAAAAAAAzMJU8/+13RXm/wEAAAAAAAAAAAAAAAAAAOCsTTX/H+7/DwAAAAAAAAAAAAAAAAAAALNw7/0P3rxTr999J6XFiJ83Ro1RY/I4yVffqN99Oe1ZOVz162jUuHSQ35rk6Wh+JZb289sn5ovx4guTfDd7/a36sfxmrM2+fQAAALgQsnTgxPP7LPu7fFL96f+BY+fv1bhZPekdF2fVCv9CMX7Yzjud5qAY1/4oHs6tWNjf1Zm84Gtzb0cxXXHsC3nOi5/ei5h+VeV8bP6fi/n+LvH/OPzQ570TAAAAAAAAAAAApnGq6wHLcqf8D5cTzrtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/ZgWMBAAAAAGH+1ml0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFUAAAD//wbsk2U=") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x22) 4m48.463142871s ago: executing program 59 (id=12875): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file2\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ea, &(0x7f0000002440)="$eJzs3U9rY2UUB+DTTDJTO06t/0ZnNr7oRjcXZxauXDjIFMSA4kwUFYQ7NNWQmITcLJJBsODOlZ9DXLoTxC/Qb+FGiiC66apX2tTW1oqNNqbQ59nkhN99k/eQELjhHu7Wq1992l4vsvV8GJWFhaj2a5G2U6SoxKWY2IiXvlj97ct7l/efp7R65/6tV1JKy899/+Fn3zz/w/Dqu98uf3clNlc+2vrl9o+b1zdvbO3c/6RVpFaRur1hytODXm+YP+g001qraGcpvd1p5kUztbpFc3AkX+/0+v1xyrtr15b6g2ZRpLw7Tu3mOA17aTgYp/zjvNVNWZZVgr8qy7L8/JTHNr7eLstyd00tLu+tfCSW4mo8GtdiOR6LlXg8nogn46l4Oq7HM/Fs3Ng7asYtAAAAAAAAAAAAAAAAAAAAwAUz1fx/1fw/AAAAAAAAAAAAAAAAAAAAzMJU8/+13RXm/wEAAAAAAAAAAAAAAAAAAOCsTTX/H+7/DwAAAAAAAAAAAAAAAAAAALNw7/0P3rxTr999J6XFiJ83Ro1RY/I4yVffqN99Oe1ZOVz162jUuHSQ35rk6Wh+JZb289sn5ovx4guTfDd7/a36sfxmrM2+fQAAALgQsnTgxPP7LPu7fFL96f+BY+fv1bhZPekdF2fVCv9CMX7Yzjud5qAY1/4oHs6tWNjf1Zm84Gtzb0cxXXHsC3nOi5/ei5h+VeV8bP6fi/n+LvH/OPzQ570TAAAAAAAAAAAApnGq6wHLcqf8D5cTzrtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/ZgWMBAAAAAGH+1ml0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFUAAAD//wbsk2U=") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x22) 3m6.379446493s ago: executing program 2 (id=15515): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") pivot_root(0x0, &(0x7f0000000340)='./file0/file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@errors_continue}, {@quota}, {@delalloc}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {}]}, 0x1, 0x5d2, &(0x7f0000001a40)="$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") r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 3m6.139678798s ago: executing program 2 (id=15520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000002030103000000000000000002000006080004400000003f0800054000000007080001000100000d", @ANYBLOB="29c7204b8e078ea82da195e862c5ff19e872381355cb031361a62256c9006f22a19533e2a76ab674e2bd587b789fe6504d4c533fa9c8fbd7da1b8766ba4ed82794e3891403e1ac1cc0d55504b80f3f607385dcdacd3ac10c63e200742f7b86846c40536336e65e3d81573de6fa3d3dd07b1f74e5695997f45cd21c6a516544720a24b095ecff17c5c71544e5e199fa5d8aaf5cfb8be7f98488fd7d279988c0e9d83c6b5e2db48fd0da66f1e3d014aad6a20a71da4e4ec623f46869bb5490aa03ac666959e3be9a8d177279f97d39bcb0e5ea7e7939fa774a15eeab67666cff7f74163fa399bd12e5"], 0x2c}, 0x1, 0x0, 0x0, 0x6000048}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000002a0000009500000000000000bcbdf45c662e6df62f0b95c9f9e79506280c4ab1240a9e4c9985b20ea63ef82302df99831e9bbf3e821e49c78f879a1bcef2bb3831519724116cc9ad3bc12edfabcf17bc835f118dbcee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r2) recvfrom(r3, 0x0, 0x0, 0x40002062, 0x0, 0x0) 3m6.005074716s ago: executing program 2 (id=15524): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0xd9}, 0x0) 3m5.902475682s ago: executing program 2 (id=15530): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x82, 0x100) io_setup(0x4fe, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r1, &(0x7f00000001c0)="464294ade8dcf6", 0x7, 0x9, 0x0, 0x0, r1}]) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$sock_proto_private(r3, 0x89ed, &(0x7f0000000000)="fd309d3a16327e391249464c442de7ef6e0247961054b5ff4a15332e0f511fe685bafd39d0ab7f0854e22e727e8d6f8ec196e3046d61cbffe8308bd805bad802bd2c40c0082089b1086099481d9624f6c183566f6769e22d9e7323eea5eb7c22636b4903c69b22e80cf63de8d19897078774ebb45dc55a0aec14e0a72b7c0502f48447fc20347151ecd94705c0a3f53f7b3b644d8ea28f4c7af93a9867ba4ebd3239e58f67e0a58a9f") sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="280100001600010025bd70bc1a2a4a2500000000000000000000ffff64010100fe8000000000000000000000000000214e2300004e200103020020103a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d533000000ac1414aa00000000000000000000000001000000000000001000000000000000040000000000000001800000000000000800000000000000f707000000000000f0aa0000000000000200000000000000000050000000000004000000000000000400000000000000020000000000000008c900008a262721080000002bbd7000073500000a0000001000000000000000ff000000020000800c001c"], 0x128}, 0x1, 0x0, 0x0, 0x880}, 0x48000) 3m5.75559883s ago: executing program 2 (id=15535): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f0000001240)=[{&(0x7f0000000a40)}, {&(0x7f0000001740)="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", 0x17b}, {&(0x7f0000000500)="2a6dfe6b588f0649b7c62468b77834dbabbd4b954da4", 0x16}, {&(0x7f0000001640)="acf5964b4d2aba2c68c363b6bc49a8c7becac3bbb7dfcc8b79d6d4f52be12eeb2b79d208ff301d18aa1e5b70729f3b4aa941103981c5f58d8d4971d20b6aa6c7bc3d371b296f014d7bec9aed7f966e46d306d93dabbef889580d6d6e78ba9c72b644dfe391899db31310e59eb3e734ccda545701b2fc7dbb748af3f4f2f22510c8965985c95e73ec6c46ac80a4a74288351133b2890706681f10d66dec0d89e27fdd35fe7ddfe33b4a8d99acecc1586f6d1d257e22e1bf7e390d6d4dbe967e616ccaba4ce0491838ad8469dbfe3c4280330a5c7fc0192c113affde67d5805e2181281f44c32efa30", 0xe8}, {&(0x7f0000000c00)="41c7c229ebe174b727f00ec3f1d02a27c4bab19ef5ff046bb5aaec1fa8b6d8b49c", 0x21}], 0x5) 3m5.75283772s ago: executing program 2 (id=15536): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a0000000d0000000400000002"], 0x50) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40087447, 0x0) socket$nl_route(0x10, 0x3, 0x0) acct(0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 2m50.6904742s ago: executing program 60 (id=15536): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a0000000d0000000400000002"], 0x50) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40087447, 0x0) socket$nl_route(0x10, 0x3, 0x0) acct(0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 36.558950415s ago: executing program 9 (id=17577): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xf9, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x3, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x200) semop(r3, &(0x7f0000000240)=[{0x1, 0x20, 0x800}, {0x0, 0xe65b}], 0x2) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000700)=""/236) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0x9, 0x8, 0x6, 0x9, 0x0, 0x207, 0x701a0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x4}, 0x18047, 0x9, 0x1, 0x8, 0x23, 0x2, 0x1, 0x0, 0x7, 0x0, 0xfffffffffffff999}) r4 = dup(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x3218f72e}, 0x0, 0xf3, 0x0, 0x6, 0x8, 0x20005, 0xc1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r4) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_settime(r6, 0x1, &(0x7f0000000240), &(0x7f0000000280)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) write$9p(r0, &(0x7f0000002740)="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", 0x1004) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r7, 0x0, &(0x7f0000001740)=""/4085}, 0x20) 35.175594606s ago: executing program 9 (id=17584): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$eJzs3c9vG1kdAPDvTOImm3U3XXYPgIAty0JBqzo/uhut4ED3AkKrlRArThy6IXGjKHYdxUlpQg/JkTsSlTjBn8CNA1JPHLhxgxuXckCqoAI1SD0YzXiamCSODU3iJv58pPHMe+P4+57t957nJc4LYGi9ERHbEXEpIj6NiMkiPym2uNnerkbE0yf3F3af3F9IotX65O9Jfj7Li46fybxaPOZ4RPzguxE/Tg7HbW5urczXatW1Ij21Xl+dam5uXV9Oi5zZuZm56Q9uvD97YnV9q/6bx99Z/uiHv/vtFx/9cfsbP82KVf7Z5fxcZz1OUrvqpSh35I1GxEenEWxARov3D+dP1to+ExFv5+1/MkbyV7M/RzRrAOAcaLUmozXZmQYALrrs+r8cSVop5gLKkaaVSnsO782YSGuN5vq7k42NO4uRz2FdiVJ6e7lWnS7mCq9EKcnSM/nxfnr2QPpGRLweET8feyVPVxYatcVBfvABgCH26oHx/19j7fEfALjgxgddAADgzBn/AWD4GP8BYPj8D+N//98OBABeaq7/AWD4GP8BYPj0HP93zqYcAMCZ+P7HH2dba7f4/9eLdzc3vlW+e32x2lyp1DcWKguNtdXKUqOxVKtWFlqtXo9XazRWZ97bSzY3t27VGxt31m8t1+eXqreqpVOuDwDQ2+tvPfxzEhHb33wl36JjLQdjNVxs6aALAAzMyKALAAyM7/PA8OrjGt80AFxwvdby7PonQg8s/grn1bXPmf+HYWX+H4bX/zf//+0TLwdw9sz/w/BqtRJr/gPAkDHHD7zQ7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSJXzLUkr+Vrg29ltWqlEXI6IK1FKbi/XqtMR8VpE/GmsNJalZwZdaADgBaV/S4r1v65NvlM+ePZS8u+xfB8RP/nlJ7+4N7++vjaT5f9jL3/9QZE/e2kQFQAAOt08nNUep4t9x4X80yf3F55vZ1nExx+2FxfN4u4WW/vMaIzm+/EoRcTEP5Mi3ZZ9Xhk5gfjbOxHx2f363+uIUM7nQNornx6Mn8W+fArx95//g/HT/4qf5ueyfSl/Lt44gbLAsHn4YbufLNpe1sSK9pfG1Xx/dPsfz3uoF/e8/9s91P+le/3fyKH4Sd7mr+6ljy/J4/d+/71Dma3J9rmdiM+PHhU/2YufdOl/3+mzjn/5wpfe7nau9auIa3F0/LZ63s1OrddXp5qbW9eX6/NL1aXqndnZuZm56Q9uvD87lc9Rt2//cODhnxXL3L/W9bnZiZjoEn+8R/2/2mf9f/3s0x99+Zj4X//K0a//m8fEz8bEr/UZf37iZtflu7P4i13q3+v1f7fP+I/+urXY510BgDPQ3Nxama/Vqms9DrLPmr3u4+B8HsR2xEtQjF4HafGWfVnKc8EPjuk00jPqnIBTtd/oB10SAAAAAAAAAAAAAACgm+bm1spYnO7XiQZdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6u/wQAAP//XifSEA==") sendmsg$NFT_BATCH(r2, 0x0, 0x0) 34.883670063s ago: executing program 9 (id=17587): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, 0x0, 0x0) 34.837185855s ago: executing program 9 (id=17590): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x100000000004, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) fallocate(r0, 0x0, 0x0, 0x8ffff) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000500)='./file0/file0\x00', 0x400, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) ioctl$EVIOCSMASK(r5, 0x40104593, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000006000000400000000001000017080000", @ANYRES32=r0, @ANYBLOB='\r\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0100000002000000000000000b00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e147e03000000000000000089", 0xd, 0x0, 0x0, 0x0) ptrace(0x10, r7) mlock(&(0x7f0000181000/0x4000)=nil, 0x4000) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r6}, 0x38) 34.537074333s ago: executing program 9 (id=17596): sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x5c061}, 0x4008000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r13, 0x29, 0x16, 0x0, &(0x7f00000000c0)) sendto$packet(r12, &(0x7f00000003c0)="80398fd64139f7058593000000000000000000", 0x13, 0x40054, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xdb, 0x6, @broadcast}, 0x14) 34.298651137s ago: executing program 9 (id=17598): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semop(0x0, &(0x7f0000000240)=[{0x1, 0x20, 0x800}, {0x0, 0xe65b}], 0x2) 34.282312838s ago: executing program 61 (id=17598): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semop(0x0, &(0x7f0000000240)=[{0x1, 0x20, 0x800}, {0x0, 0xe65b}], 0x2) 3.159416326s ago: executing program 1 (id=17998): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x443, 0x0) fchown(r0, 0x0, 0xee01) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="000000001000000008"]) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1, 0x0, 0xfffffffffffffef5}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fremovexattr(r5, &(0x7f0000000140)=@known='user.syz\x00') r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000002340), 0x1}, 0x12008, 0x0, 0x5a, 0x0, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x1, 0x0, 0x400000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000002200)=[{{&(0x7f00000003c0), 0x80, &(0x7f0000000440)=[{&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f0000000700)=""/241, 0xf1}, {&(0x7f0000000340)=""/44, 0x2c}], 0x3}, 0x3}, {{&(0x7f0000000600)=@sco, 0x80, &(0x7f0000000940)=[{&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f0000000800)=""/210, 0xd2}, {&(0x7f0000000680)=""/21, 0x15}, {&(0x7f0000000900)=""/46, 0x2e}], 0x4, &(0x7f0000000980)=""/6, 0x6}, 0x6}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/231, 0xe7}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x2, &(0x7f0000001c00)=""/140, 0x8c}, 0x5c1}, {{&(0x7f0000000b00)=@generic, 0x80, &(0x7f0000002140)=[{&(0x7f0000001cc0)=""/45, 0x2d}, {&(0x7f0000001d00)=""/162, 0xa2}, {&(0x7f0000001dc0)=""/228, 0xe4}, {&(0x7f0000001ec0)=""/73, 0x49}, {&(0x7f0000001f40)=""/232, 0xe8}, {&(0x7f0000002040)=""/223, 0xdf}], 0x6, &(0x7f00000021c0)=""/12, 0xc}, 0xfffffffa}], 0x4, 0x40000000, &(0x7f0000002300)={0x0, 0x3938700}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='\x00') r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xa000, 0x0) ioctl$TIOCSPTLCK(r9, 0x40045431, &(0x7f0000000000)) r10 = ioctl$TIOCGPTPEER(r9, 0x5441, 0x1) write(r10, &(0x7f00000002c0)="7be32c0a3fef93b5a7b0e99e1522b47963703551b482f7e43f2f78b5a24dfe951aa1a51097b76b19b8eaa0ec91cba490414d549340c5e93de8780d", 0x3b) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f0000000200)=0x369, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 2.851343624s ago: executing program 4 (id=18002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x46a500, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x78, 0x11, 0xff, @empty, @mcast2, {[@hopopts={0x87, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x8, {0x2, 0x0, 0x9, 0x4}}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @local}]}], {0x4f19, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "227ccfc45381fb35368cef975fda238c8708d76f70fff2a2", "8c6c108727e82f0eaca878dd231d5a2fd62f9f48d20a37280456e209a29dd3a2"}}}}}}}}, 0xb2) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0x8000000000000001, 0x2b, 0x4cf}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4001, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) connect$inet6(r4, &(0x7f0000004a40)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7}, 0x1c) umount2(&(0x7f0000000180)='./file0\x00', 0xc) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) 2.39597689s ago: executing program 3 (id=18004): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3, 0x25, 0x4, @void}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.366505452s ago: executing program 3 (id=18006): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xc0240, 0x0) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) gettimeofday(&(0x7f0000000a80), 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40002}, 0x20000800) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x20000900) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x48040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, 0x0, 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) write$cgroup_pid(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xd) pread64(r5, &(0x7f0000002840)=""/4089, 0xff9, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000040)=0x3) 2.335373404s ago: executing program 1 (id=18007): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2.278795897s ago: executing program 3 (id=18008): rename(0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x730, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x698, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @mcast2, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x171}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @mcast1, 0x2}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}]}, {0x5c0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x90, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x354, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x30, 0x9, 0x0, 0x1, [{0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0xd}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @local, 0x3459}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xca}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}]}, 0x730}, 0x1, 0x0, 0x0, 0x48048}, 0x24090000) 1.920906468s ago: executing program 4 (id=18014): socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xffff}, 0x4, 0x0, 0x8, 0x6, 0x2, 0x80000001, 0xa5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xf, 0xffffffffffffffff, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000001f140000800000101683c0666ed50adb53ecb30000000063e7f1bc7612", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60b}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) 1.847714143s ago: executing program 4 (id=18016): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x2, 0x0, 0x0, 0x0, 0x6, 0xa0423, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x4, @perf_config_ext={0x8, 0x7f}, 0x2012, 0x3ff, 0x80002, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r2, 0x400454cd, 0x300) r5 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) shutdown(r0, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x206, 0x6, 0x9, 0x1, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000100)={[{@debug}, {@init_itable}]}, 0x1, 0x5a2, &(0x7f0000000180)="$eJzs3U9sG1UaAPBvxnbTP9lNVtqVdlc9VLtIRarqJP0DhVN7RVSq1AMSF4gcN6rixFWcQBNFIr1XiB4QoF7KDQ4cQRw4IC4cuXIBcUaqaARS0wMYOR6naeoUJ8RxiX8/yfF788b+3pvx9+IZzcgB9K1jjT9pxH8i4lISMbShLR9Z47HmeqsrS6UHK0ulJOr1yz8lkUTE/ZWlUmv9JHs+EhHLEfHviPiqEHEiXX/LA61CbWFxarxSKc9m9ZG56WsjtYXFk1enxyfLk+WZ08+/cPbcmbNjp8Y2dvdBfWOtsL2x3vz+1ts3v3npzq2PPzm6XHp3PInzMZi1bRzHbmpuk0Kc37T8TDeC9VDS6w6wI7kszxup9K8YilyW9e3UN04OA3vSPaCL6gMR9XUbikAfSCQ99KnW94DG8W/rsZffP+5eaB6ANOKuriyV3oql4WZLvnluIg6uHZsc/jl55Mikcbw5vJcdZV9avhERo/n845//JPv87dzobnSQrvryQnNHPb7/0/X5J9rMP4Otc6d/Umv+W83mv9U28XNbzH+XOozx66s/fLBl/BsD8d+28ZP1+Emb+GlEvN5h/NuvfH5uq7b6hxHHo338luTJ54dHrlytlEebf9vG+OL40Re3Hn/E4S3iN8/ZHlzryMbxH8j6lHY4/s++/vR/y0+I/+z/n7z/223/QxHxTofx/3H/o5e3art7I7nX+Baw3f2fRCHudBj/ufPHvsuKzhoCAAAAAAAAAMAuSteuZUvS4no5TYvF5j28/4zDaaVamztxpTo/M9G85m04CmnrSquhZj1p1Mey63Fb9VOb6qdzWcDcobV6sVStTPR47AAAAAAAAAAAAAAAAAAAAPC0OLLp/v9fcmv3/2/+uWpgv9r6J7+B/U7+Q/96NP+TnvUD2Hv+/0Pfqst/6F/yH/qX/If+Jf+hf8l/6F/yH/qX/AcAAAAAAAAAAAAAAAAAAAAAAAAAgK64dPFi41F/sLJUatQn8gvzU9U3Tk6Ua1PF6flSsVSdvVacrFYnK+ViqTr9R++XVKvXRmNm/vrIXLk2N1JbWHxtujo/0/pN0XKh6yMCAAAAAAAAAAAAAAAAAACAv57BtUeSFiMKzXqaFosRf4uI4SSSK1cr5dGI+HtEfJsrDDTqY73uNAAAAAAAAAAAAAAAAAAAAOwztYXFqfFKpTzbvUI+C9XFEJ0X8ttZOSKWd7cbjXfc9qsK2Qbs8abbH4Xc0/E5fPoLPZyUAAAAAAAAAAAAAAAAAACgTz286bfTV/zW3Q4BAAAAAAAAAAAAAAAAAABAX0p/TCKi8Tg+9Mzg5tYDyWpu7Tki3rx9+b3r43Nzs2ON5ffWl8+9ny0/tf6y/N6OAehEK0/TiGjkMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBQbWFxarxSKc/usDDQwTq9HiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADATvweAAD//7M9zgI=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 1.816448684s ago: executing program 0 (id=18017): socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x2225, &(0x7f00000006c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, 0x0, 0x0) pipe(&(0x7f0000000300)) socket$inet_sctp(0x2, 0x5, 0x84) epoll_create1(0x80000) open(&(0x7f00000000c0)='./bus\x00', 0x143fc2, 0x1c0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) (fail_nth: 3) 1.499332803s ago: executing program 0 (id=18018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001d0011042bbd7000fbdbdf251c000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="080001"], 0x50}}, 0x54) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r4 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40080000, 0x0, 0x0, 0xce0, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xd1, 0xb1, ""/177}, &(0x7f0000000140)=0xd1, 0x1) getpeername$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3d, r6}) mmap$IORING_OFF_SQES(&(0x7f00001d8000/0x4000)=nil, 0x4000, 0x1000006, 0x80010, r5, 0x10000000) shutdown(r4, 0x1) 1.467887085s ago: executing program 3 (id=18019): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) 1.458715875s ago: executing program 1 (id=18020): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, 0x0, 0x0, 0x3, 0x3b, 0x8, 0x2, 0x66}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000200)={0x42, @loopback, 0x4e2c, 0x2, 'lblc\x00', 0x0, 0x8, 0x18}, 0x2c) epoll_create1(0x80000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000016c0)={0x0, 0x10001, 0xb}) socket$packet(0x11, 0x2, 0x300) close_range(r1, 0xffffffffffffffff, 0x0) 1.409623868s ago: executing program 3 (id=18021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000001020101"], 0x50}}, 0x0) 1.360886631s ago: executing program 3 (id=18022): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0xfffffffa) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.341640392s ago: executing program 0 (id=18023): syz_open_dev$rtc(&(0x7f0000000000), 0x6, 0xa0800) (async) r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x6, 0xa0800) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/75, 0x4b}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f00000004c0)=""/127, 0x7f}, {&(0x7f0000000580)=""/235, 0xeb}], 0x8) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x8, 0x80000000}}, './file0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000700)={0x4, 0xbce, 0x9, 0xbf1d}) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000540)={0x0, 'batadv0\x00', {0x2}, 0x9}) 1.306422164s ago: executing program 0 (id=18026): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1, 0x20}, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xa00c4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x101b00, 0x9, 0x43a1bd76, 0x7, 0xd, 0xa6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) 1.285051615s ago: executing program 1 (id=18027): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.20039756s ago: executing program 5 (id=18028): close(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) 1.147502653s ago: executing program 4 (id=18029): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000009400)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x4d6e28d8, @empty, 0xc}, 0x1c, 0x0}}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 3) 911.237688ms ago: executing program 0 (id=18030): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 893.827918ms ago: executing program 4 (id=18031): rename(0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x730, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x698, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @mcast2, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x171}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @mcast1, 0x2}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}]}, {0x5c0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x90, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x354, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x30, 0x9, 0x0, 0x1, [{0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0xd}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @local, 0x3459}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xca}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}]}, 0x730}, 0x1, 0x0, 0x0, 0x48048}, 0x24090000) 808.932423ms ago: executing program 5 (id=18032): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c) 732.412588ms ago: executing program 5 (id=18033): unshare(0x28020480) (async) socket$xdp(0x2c, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) (async) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) process_madvise(r5, 0x0, 0x0, 0x14, 0x0) (async) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80001) (async) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x1800, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, 0x0) (async) r8 = socket(0x40000000015, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x8, 0x0, &(0x7f0000000040)) 669.040552ms ago: executing program 5 (id=18034): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socket$kcm(0xf, 0x3, 0x2) close(r0) 668.468222ms ago: executing program 5 (id=18035): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 525.55628ms ago: executing program 1 (id=18036): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ffffffff000000000000000000000000000000044e2000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000a00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000900000000000000000102000000000045b327dc5f0191bc272e2fa9dc3639a12b4ae9ccb96db2c99a23a86ba8cb0d8a31911e89fa6ab07b808b7114349bcb2ab70e7cbb6dfd79f9650bb602d2288d1d7a3ab7f028a88fc3425c55ccbb617959bdac66c980ea2e547168de686ce47dcfb7678535112b3e6d57781633b8d8051c15151f0dd026b11220817a43db25f5f6fedf1a86cb9de313ef28636979cb0074e80ed2319a43c6d3ff95c1771442fc00578b44"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "ffffffdd00", '\x00', "4807a1e6"}, 0x28) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0xc}}], 0xc}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newaddr={0x7c, 0x14, 0x10, 0x70bd28, 0x25dfdbfd, {0x2, 0x18, 0x10, 0xfd}, [@IFA_LABEL={0x14, 0x3, 'veth0_to_team\x00'}, @IFA_LABEL={0x14, 0x3, 'netdevsim0\x00'}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_CACHEINFO={0x14, 0x6, {0x2b5e, 0x6, 0x1e3, 0x2}}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8081}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 454.073064ms ago: executing program 1 (id=18037): socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xffff}, 0x4, 0x0, 0x8, 0x6, 0x2, 0x80000001, 0xa5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xf, 0xffffffffffffffff, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000001f140000800000101683c0666ed50adb53ecb30000000063e7f1bc7612", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) 346.70416ms ago: executing program 5 (id=18038): socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000840)='cgroup\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.04221ms ago: executing program 4 (id=18039): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x2, 0x6, @local}, 0x10) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000380)={'veth1_virt_wifi\x00', @ifru_ivalue=0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x308) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101a42, 0xa3) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) pwritev2(r3, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) getsockname$inet6(r3, &(0x7f0000000300), &(0x7f0000000340)=0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 0 (id=18040): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1, 0x20}, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xa00c4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x101b00, 0x9, 0x43a1bd76, 0x7, 0xd, 0xa6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) kernel console output (not intermixed with test programs): 763.312904][T22195] total_swapcached 0 [ 763.325599][T22195] total_pgpgin 620425 [ 763.331303][T22195] total_pgpgout 620123 [ 763.337656][T22195] total_pgfault 668174 [ 763.340955][T22237] EXT4-fs: Ignoring removed mblk_io_submit option [ 763.343199][T22195] total_pgmajfault 81 [ 763.355096][T22237] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 763.358201][T22195] total_inactive_anon 8192 [ 763.370872][T22237] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.17606: attempt to clear invalid blocks 2 len 1 [ 763.374893][T22195] total_active_anon 180224 [ 763.390397][T22237] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, [ 763.395502][T22195] total_inactive_file 0 [ 763.395544][T22195] total_active_file 1048576 [ 763.395554][T22195] total_unevictable 0 [ 763.395564][T22195] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.17595,pid=22194,uid=0 [ 763.395747][T22195] Memory cgroup out of memory: Killed process 22194 (syz.0.17595) total-vm:94012kB, anon-rss:1212kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 763.469970][T22237] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 763.481000][T22237] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.17606: invalid indirect mapped block 1819239214 (level 0) [ 763.498719][T22237] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.17606: invalid indirect mapped block 1819239214 (level 1) [ 763.522331][T22237] EXT4-fs (loop5): 1 truncate cleaned up [ 763.531285][T22237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.598734][T22087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.648250][T24402] bridge_slave_1: left allmulticast mode [ 763.654644][T24402] bridge_slave_1: left promiscuous mode [ 763.660677][T24402] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.693847][T24402] bridge_slave_0: left allmulticast mode [ 763.700399][T24402] bridge_slave_0: left promiscuous mode [ 763.707997][T24402] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.733822][T16726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.018922][T24402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.038857][T24402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.055351][T24402] bond0 (unregistering): (slave team0): Releasing backup interface [ 764.066303][T24402] bond0 (unregistering): Released all slaves [ 764.074300][T24402] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 764.083377][T24402] bond1 (unregistering): Released all slaves [ 764.100393][T22087] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.125750][T24402] tipc: Left network mode [ 764.132167][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.141368][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.161935][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.169909][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.174905][T22280] netlink: 424 bytes leftover after parsing attributes in process `syz.5.17613'. [ 764.208531][T22087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 764.220094][T22087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 764.242775][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 764.242850][ T29] audit: type=1400 audit(1770382494.592:5696): avc: denied { getopt } for pid=22279 comm="syz.5.17613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 764.284464][T24402] hsr_slave_0: left promiscuous mode [ 764.291573][T24402] hsr_slave_1: left promiscuous mode [ 764.367489][T24402] team0 (unregistering): Port device team_slave_1 removed [ 764.379066][T24402] team0 (unregistering): Port device team_slave_0 removed [ 764.472490][T22306] loop5: detected capacity change from 0 to 128 [ 764.487769][T22306] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 764.513351][T22087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.543599][T22306] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 764.627342][T22306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17616'. [ 764.650800][T22306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22306 comm=syz.5.17616 [ 764.744396][T22212] chnl_net:caif_netlink_parms(): no params data found [ 764.772381][T22338] loop4: detected capacity change from 0 to 164 [ 764.779919][T22338] iso9660: Unknown parameter '' [ 764.799031][T22335] netlink: 'syz.5.17616': attribute type 4 has an invalid length. [ 764.884279][T22087] veth0_vlan: entered promiscuous mode [ 764.892784][T22336] xfrm0: entered promiscuous mode [ 764.898168][T22336] xfrm0: entered allmulticast mode [ 764.937932][T22087] veth1_vlan: entered promiscuous mode [ 764.970097][T22212] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.977428][T22212] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.991354][T22212] bridge_slave_0: entered allmulticast mode [ 764.998416][T22212] bridge_slave_0: entered promiscuous mode [ 765.033745][T22212] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.041237][T22212] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.048871][T22212] bridge_slave_1: entered allmulticast mode [ 765.055719][T22212] bridge_slave_1: entered promiscuous mode [ 765.073651][T22087] veth0_macvtap: entered promiscuous mode [ 765.097057][T22087] veth1_macvtap: entered promiscuous mode [ 765.105990][T22212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.122404][T22087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.134796][T22087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.151558][T22212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.170116][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.201814][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.217761][T22212] team0: Port device team_slave_0 added [ 765.227245][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.238330][ T29] audit: type=1400 audit(1770382495.572:5697): avc: denied { mounton } for pid=22087 comm="syz-executor" path="/root/syzkaller.iGlW1h/syz-tmp" dev="sda1" ino=2140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 765.239783][T22212] team0: Port device team_slave_1 added [ 765.263783][ T29] audit: type=1400 audit(1770382495.572:5698): avc: denied { mount } for pid=22087 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 765.263846][ T29] audit: type=1400 audit(1770382495.572:5699): avc: denied { mounton } for pid=22087 comm="syz-executor" path="/root/syzkaller.iGlW1h/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 765.328058][ T29] audit: type=1400 audit(1770382495.572:5700): avc: denied { mounton } for pid=22087 comm="syz-executor" path="/root/syzkaller.iGlW1h/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=183168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 765.368639][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.379506][ T29] audit: type=1400 audit(1770382495.712:5701): avc: denied { mounton } for pid=22087 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 765.403756][ T29] audit: type=1400 audit(1770382495.712:5702): avc: denied { mount } for pid=22087 comm="syz-executor" name="/" dev="gadgetfs" ino=3835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 765.449533][T29258] udevd[29258]: symlink '../../loop0' '/dev/disk/by-diskseq/1921.tmp-b7:0' failed: Read-only file system [ 765.474194][T22212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.482358][T22212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.511863][T22212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.516715][T10212] IPVS: starting estimator thread 0... [ 765.535427][T29002] udevd[29002]: symlink '../../loop3' '/dev/disk/by-diskseq/1919.tmp-b7:3' failed: Read-only file system [ 765.537915][T22212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.548335][T22378] loop0: detected capacity change from 0 to 128 [ 765.556984][T22212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.591976][T22212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.623937][T22380] loop3: detected capacity change from 0 to 1024 [ 765.631684][T22379] IPVS: using max 2208 ests per chain, 110400 per kthread [ 765.643171][T22380] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 765.661373][T29002] udevd[29002]: symlink '../../loop3' '/dev/disk/by-diskseq/1940.tmp-b7:3' failed: Read-only file system [ 765.674690][T22212] hsr_slave_0: entered promiscuous mode [ 765.678699][T29258] udevd[29258]: symlink '../../loop0' '/dev/disk/by-diskseq/1939.tmp-b7:0' failed: Read-only file system [ 765.687753][T22212] hsr_slave_1: entered promiscuous mode [ 765.694395][T22380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.707066][T22212] debugfs: 'hsr0' already exists in 'hsr' [ 765.716792][T29002] udevd[29002]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 765.722682][T22212] Cannot create hsr debugfs directory [ 765.774635][T29258] udevd[29258]: symlink '../../loop0' '/dev/disk/by-diskseq/1939.tmp-b7:0' failed: Read-only file system [ 765.790182][T22380] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.820228][T28971] udevd[28971]: symlink '../../loop5' '/dev/disk/by-diskseq/1938.tmp-b7:5' failed: Read-only file system [ 765.841702][T29002] udevd[29002]: symlink '../../loop3' '/dev/disk/by-diskseq/1940.tmp-b7:3' failed: Read-only file system [ 765.859393][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-diskseq/1940.tmp-b7:3' failed: Read-only file system [ 765.887301][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-diskseq/1940.tmp-b7:3' failed: Read-only file system [ 765.908555][T22388] veth1_to_bond: entered allmulticast mode [ 765.934096][T22390] netlink: 68 bytes leftover after parsing attributes in process `syz.3.17571'. [ 765.956825][T22390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17571'. [ 765.983855][ T29] audit: type=1400 audit(1770382496.332:5703): avc: denied { firmware_load } for pid=22377 comm="syz.3.17571" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 766.368454][T22387] veth1_to_bond: left allmulticast mode [ 766.402726][T22212] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 766.428674][T22212] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 766.458173][T22212] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 766.493371][T22212] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 766.544036][ T29] audit: type=1326 audit(1770382496.892:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22429 comm="syz.5.17627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905985aeb9 code=0x7ffc0000 [ 766.571924][ T29] audit: type=1326 audit(1770382496.922:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22429 comm="syz.5.17627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905985aeb9 code=0x7ffc0000 [ 766.603316][T22430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22430 comm=syz.5.17627 [ 766.635301][T22430] loop5: detected capacity change from 0 to 164 [ 766.736953][T22212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.753514][T22212] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.769169][T26110] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.777204][T26110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.812098][T26110] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.819596][T26110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.950669][T22460] loop5: detected capacity change from 0 to 4096 [ 766.990452][T22460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.020961][T22212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.052449][T22460] program syz.5.17632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 767.054370][T22463] loop4: detected capacity change from 0 to 1024 [ 767.117090][T22463] EXT4-fs: Ignoring removed orlov option [ 767.126816][T22482] program syz.5.17632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 767.180445][T22482] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 767.234856][T22212] veth0_vlan: entered promiscuous mode [ 767.284410][T22495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17634'. [ 767.301297][T22495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17634'. [ 767.322202][T22212] veth1_vlan: entered promiscuous mode [ 767.357008][T22212] veth0_macvtap: entered promiscuous mode [ 767.373296][T22212] veth1_macvtap: entered promiscuous mode [ 767.402455][T22501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17637'. [ 767.416180][T22212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.496697][T22212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.545955][T23622] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.576053][T23622] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.625756][T23622] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.643935][T22526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=22526 comm=syz.0.17641 [ 767.671158][T23622] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.725602][T22531] loop4: detected capacity change from 0 to 1024 [ 767.738321][T16726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.821425][T22531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 767.865078][T22531] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 767.910076][T22531] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 767.941164][T22531] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 767.975930][T22554] loop3: detected capacity change from 0 to 4096 [ 768.004897][T22531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 768.041249][T22554] EXT4-fs: Ignoring removed bh option [ 768.047265][T22554] EXT4-fs: Ignoring removed mblk_io_submit option [ 768.090719][T16445] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.120114][T22554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.308513][T22087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.319269][T22598] loop1: detected capacity change from 0 to 1024 [ 768.325614][T22597] EXT4-fs: Ignoring removed orlov option [ 768.338924][T22597] netlink: 'syz.4.17656': attribute type 39 has an invalid length. [ 768.358918][T22598] EXT4-fs: Ignoring removed orlov option [ 768.391707][T22598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.428569][T22612] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 768.435871][T22597] hsr_slave_1 (unregistering): left promiscuous mode [ 768.455776][T22598] netlink: 'syz.1.17657': attribute type 39 has an invalid length. [ 768.486994][T22598] hsr_slave_1 (unregistering): left promiscuous mode [ 768.518359][T22619] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 768.909843][T22650] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.17669: inode has both inline data and extents flags [ 768.941913][T22650] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.17669: couldn't read orphan inode 15 (err -117) [ 768.963931][T22656] ISOFS: unable to read i-node block [ 768.969614][T22656] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 769.017673][T22675] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 769.031115][T22650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.056255][T22650] netlink: 'syz.0.17669': attribute type 4 has an invalid length. [ 769.065196][T22650] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.17669'. [ 769.143013][T22688] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.150963][T22688] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.160416][T22688] bridge0: entered allmulticast mode [ 769.441991][T22716] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 769.456439][T22716] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 769.497070][T22716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17677'. [ 769.507275][T22716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22716 comm=syz.5.17677 [ 769.550282][T22729] set_capacity_and_notify: 4 callbacks suppressed [ 769.550323][T22729] loop4: detected capacity change from 0 to 1024 [ 769.553738][T22716] netlink: 'syz.5.17677': attribute type 4 has an invalid length. [ 769.594134][T22212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.636837][T22650] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.669716][T22735] loop1: detected capacity change from 0 to 512 [ 769.777504][T22744] loop1: detected capacity change from 0 to 2048 [ 769.792045][T22744] EXT4-fs: Ignoring removed orlov option [ 769.798723][T22744] EXT4-fs: Ignoring removed oldalloc option [ 769.834210][T22744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.848424][T22744] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.17686: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 769.890067][T22212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.938782][T22757] loop4: detected capacity change from 0 to 4096 [ 770.002157][T22759] loop1: detected capacity change from 0 to 8192 [ 770.013093][T22759] FAT-fs (loop1): bogus logical sector size 0 [ 770.019842][T22759] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 770.030124][T22759] FAT-fs (loop1): Can't find a valid FAT filesystem [ 770.077816][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 770.077830][ T29] audit: type=1326 audit(1770382500.422:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.17694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41090aeb9 code=0x7ffc0000 [ 770.142571][ T29] audit: type=1326 audit(1770382500.462:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.17694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41090aeb9 code=0x7ffc0000 [ 770.176164][ T29] audit: type=1326 audit(1770382500.462:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.17694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41090aeb9 code=0x7ffc0000 [ 770.204174][ T29] audit: type=1326 audit(1770382500.462:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.17694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41090aeb9 code=0x7ffc0000 [ 770.236172][ T29] audit: type=1326 audit(1770382500.462:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.17694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe41090aeb9 code=0x7ffc0000 [ 770.262048][ T29] audit: type=1326 audit(1770382500.462:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.17694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41090aeb9 code=0x7ffc0000 [ 770.291822][ T29] audit: type=1326 audit(1770382500.462:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.17694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41090aeb9 code=0x7ffc0000 [ 770.316843][ T29] audit: type=1326 audit(1770382500.462:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.17694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41090aeb9 code=0x7ffc0000 [ 770.345043][ T29] audit: type=1326 audit(1770382500.462:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.17694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe41090aeb9 code=0x7ffc0000 [ 770.371981][ T29] audit: type=1326 audit(1770382500.462:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.17694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41090aeb9 code=0x7ffc0000 [ 770.402559][T22765] loop5: detected capacity change from 0 to 512 [ 770.429683][T22765] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.17695: inode has both inline data and extents flags [ 770.450685][T22765] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.17695: couldn't read orphan inode 15 (err -117) [ 770.468163][T29258] udevd[29258]: symlink '../../loop5' '/dev/disk/by-diskseq/1975.tmp-b7:5' failed: Read-only file system [ 770.481047][T22765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 770.496477][T29258] udevd[29258]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 770.532370][T29258] udevd[29258]: symlink '../../loop1' '/dev/disk/by-diskseq/1974.tmp-b7:1' failed: Read-only file system [ 770.640276][T29258] udevd[29258]: symlink '../../loop1' '/dev/disk/by-diskseq/1974.tmp-b7:1' failed: Read-only file system [ 770.711273][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-diskseq/1960.tmp-b7:3' failed: Read-only file system [ 770.732209][T22787] loop1: detected capacity change from 0 to 136 [ 770.772855][T29258] udevd[29258]: symlink '../../loop1' '/dev/disk/by-diskseq/1976.tmp-b7:1' failed: Read-only file system [ 770.783498][T29002] udevd[29002]: symlink '../../loop3' '/dev/disk/by-diskseq/1960.tmp-b7:3' failed: Read-only file system [ 770.809845][T29258] udevd[29258]: symlink '../../loop1' '/dev/disk/by-label/CDROM.tmp-b7:1' failed: Read-only file system [ 770.841605][T29258] udevd[29258]: symlink '../../loop1' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:1' failed: Read-only file system [ 770.877894][T29258] udevd[29258]: symlink '../../loop1' '/dev/disk/by-diskseq/1976.tmp-b7:1' failed: Read-only file system [ 770.952459][T24402] Bluetooth: hci0: Frame reassembly failed (-84) [ 771.066512][T22804] loop0: detected capacity change from 0 to 1024 [ 771.074600][T22804] EXT4-fs: Ignoring removed orlov option [ 771.092749][T22804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.116924][T22804] netlink: 'syz.0.17707': attribute type 39 has an invalid length. [ 771.121416][T22796] loop1: detected capacity change from 0 to 512 [ 771.136462][T22804] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 771.159371][T22796] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.17704: inode has both inline data and extents flags [ 771.174165][T14297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.185785][T22796] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.17704: couldn't read orphan inode 15 (err -117) [ 771.202151][T22796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.216324][T22765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.255311][T22811] xt_CONNSECMARK: invalid mode: 0 [ 771.268007][T22811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17708'. [ 771.280737][T22811] netlink: 68 bytes leftover after parsing attributes in process `syz.0.17708'. [ 771.300230][T22796] netlink: 'syz.1.17704': attribute type 4 has an invalid length. [ 771.308430][T22796] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.17704'. [ 771.738033][T22834] loop5: detected capacity change from 0 to 4096 [ 771.747075][T22834] EXT4-fs: Ignoring removed bh option [ 771.754069][T22834] EXT4-fs: Ignoring removed mblk_io_submit option [ 771.765633][T22834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.785524][T22834] FAULT_INJECTION: forcing a failure. [ 771.785524][T22834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.801735][T22834] CPU: 1 UID: 0 PID: 22834 Comm: syz.5.17719 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 771.801790][T22834] Tainted: [W]=WARN [ 771.801794][T22834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 771.801803][T22834] Call Trace: [ 771.801808][T22834] [ 771.801815][T22834] __dump_stack+0x1d/0x30 [ 771.801859][T22834] dump_stack_lvl+0x95/0xd0 [ 771.801873][T22834] dump_stack+0x15/0x1b [ 771.801885][T22834] should_fail_ex+0x263/0x280 [ 771.802003][T22834] should_fail+0xb/0x20 [ 771.802019][T22834] should_fail_usercopy+0x1a/0x20 [ 771.802038][T22834] _copy_from_iter+0xcf/0xea0 [ 771.802050][T22834] ? __alloc_skb+0x397/0x4b0 [ 771.802184][T22834] ? __alloc_skb+0x219/0x4b0 [ 771.802276][T22834] netlink_sendmsg+0x4ae/0x6f0 [ 771.802300][T22834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.802312][T22834] ____sys_sendmsg+0x5af/0x600 [ 771.802326][T22834] ___sys_sendmsg+0x195/0x1e0 [ 771.802344][T22834] __x64_sys_sendmsg+0xd4/0x160 [ 771.802410][T22834] x64_sys_call+0x17ba/0x3000 [ 771.802426][T22834] do_syscall_64+0xc0/0x2a0 [ 771.802445][T22834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.802524][T22834] RIP: 0033:0x7f905985aeb9 [ 771.802535][T22834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.802547][T22834] RSP: 002b:00007f90582af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.802561][T22834] RAX: ffffffffffffffda RBX: 00007f9059ad5fa0 RCX: 00007f905985aeb9 [ 771.802601][T22834] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 771.802609][T22834] RBP: 00007f90582af090 R08: 0000000000000000 R09: 0000000000000000 [ 771.802617][T22834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.802625][T22834] R13: 00007f9059ad6038 R14: 00007f9059ad5fa0 R15: 00007fff9d8f2f88 [ 771.802650][T22834] [ 772.045835][T16726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.094312][T22845] FAULT_INJECTION: forcing a failure. [ 772.094312][T22845] name failslab, interval 1, probability 0, space 0, times 0 [ 772.111770][T22845] CPU: 0 UID: 0 PID: 22845 Comm: syz.5.17723 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 772.111857][T22845] Tainted: [W]=WARN [ 772.111864][T22845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 772.111954][T22845] Call Trace: [ 772.111963][T22845] [ 772.111973][T22845] __dump_stack+0x1d/0x30 [ 772.112000][T22845] dump_stack_lvl+0x95/0xd0 [ 772.112022][T22845] dump_stack+0x15/0x1b [ 772.112053][T22845] should_fail_ex+0x263/0x280 [ 772.112133][T22845] should_failslab+0x8c/0xb0 [ 772.112162][T22845] kmem_cache_alloc_noprof+0x68/0x490 [ 772.112187][T22845] ? __inet_hash_connect+0xba2/0x1370 [ 772.112276][T22845] __inet_hash_connect+0xba2/0x1370 [ 772.112310][T22845] inet_hash_connect+0xd1/0xf0 [ 772.112341][T22845] tcp_v4_connect+0x7a6/0xaf0 [ 772.112405][T22845] __inet_stream_connect+0x169/0x7f0 [ 772.112440][T22845] ? _raw_spin_lock_bh+0x56/0xb0 [ 772.112488][T22845] ? _raw_spin_unlock_bh+0x18/0x20 [ 772.112522][T22845] ? lock_sock_nested+0x132/0x160 [ 772.112613][T22845] ? selinux_netlbl_socket_connect+0x114/0x130 [ 772.112643][T22845] inet_stream_connect+0x44/0x70 [ 772.112678][T22845] ? __pfx_inet_stream_connect+0x10/0x10 [ 772.112736][T22845] __sys_connect+0x1f1/0x2a0 [ 772.112769][T22845] __x64_sys_connect+0x3f/0x50 [ 772.112798][T22845] x64_sys_call+0x2e09/0x3000 [ 772.112824][T22845] do_syscall_64+0xc0/0x2a0 [ 772.112933][T22845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.112954][T22845] RIP: 0033:0x7f905985aeb9 [ 772.112978][T22845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.113059][T22845] RSP: 002b:00007f90582af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 772.113082][T22845] RAX: ffffffffffffffda RBX: 00007f9059ad5fa0 RCX: 00007f905985aeb9 [ 772.113119][T22845] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 772.113134][T22845] RBP: 00007f90582af090 R08: 0000000000000000 R09: 0000000000000000 [ 772.113154][T22845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.113168][T22845] R13: 00007f9059ad6038 R14: 00007f9059ad5fa0 R15: 00007fff9d8f2f88 [ 772.113186][T22845] [ 772.447581][T22853] EXT4-fs: Ignoring removed orlov option [ 772.454373][T22853] EXT4-fs: Ignoring removed oldalloc option [ 772.472397][T22853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.487760][T22853] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.17727: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 772.516391][T22796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.533390][T14297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.555694][T22861] FAULT_INJECTION: forcing a failure. [ 772.555694][T22861] name failslab, interval 1, probability 0, space 0, times 0 [ 772.569325][T22861] CPU: 0 UID: 0 PID: 22861 Comm: syz.1.17730 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 772.569358][T22861] Tainted: [W]=WARN [ 772.569365][T22861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 772.569376][T22861] Call Trace: [ 772.569382][T22861] [ 772.569390][T22861] __dump_stack+0x1d/0x30 [ 772.569413][T22861] dump_stack_lvl+0x95/0xd0 [ 772.569433][T22861] dump_stack+0x15/0x1b [ 772.569452][T22861] should_fail_ex+0x263/0x280 [ 772.569478][T22861] should_failslab+0x8c/0xb0 [ 772.569498][T22861] kmem_cache_alloc_noprof+0x68/0x490 [ 772.569521][T22861] ? vm_area_dup+0x33/0x2c0 [ 772.569544][T22861] vm_area_dup+0x33/0x2c0 [ 772.569565][T22861] __split_vma+0xe9/0x660 [ 772.569586][T22861] ? mas_find+0x5d5/0x700 [ 772.569611][T22861] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 772.569645][T22861] do_vmi_align_munmap+0x1e1/0x400 [ 772.569680][T22861] do_vmi_munmap+0x1da/0x220 [ 772.569698][T22861] __vm_munmap+0x1a8/0x290 [ 772.569721][T22861] __x64_sys_munmap+0x36/0x50 [ 772.569750][T22861] x64_sys_call+0xbee/0x3000 [ 772.569775][T22861] do_syscall_64+0xc0/0x2a0 [ 772.569803][T22861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.569826][T22861] RIP: 0033:0x7f1e9a27ace7 [ 772.569843][T22861] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.569859][T22861] RSP: 002b:00007f1e98cd5d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 772.569878][T22861] RAX: ffffffffffffffda RBX: 00007f1e94000000 RCX: 00007f1e9a27ace7 [ 772.569894][T22861] RDX: 0000000000000000 RSI: 0000000003349000 RDI: 00007f1e90cb7000 [ 772.569907][T22861] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 772.569921][T22861] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 772.569935][T22861] R13: 0000000000001000 R14: 00007f1e98000000 R15: 0000000003349000 [ 772.569951][T22861] [ 772.655981][T22864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17729'. [ 772.793056][T22869] netlink: 'syz.1.17731': attribute type 1 has an invalid length. [ 772.811030][T22869] netlink: 'syz.1.17731': attribute type 2 has an invalid length. [ 772.821289][T22864] bridge_slave_0 (unregistering): left allmulticast mode [ 772.829975][T22864] bridge_slave_0 (unregistering): left promiscuous mode [ 772.830404][T22869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17731'. [ 772.837385][T22864] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.875731][T22872] FAULT_INJECTION: forcing a failure. [ 772.875731][T22872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.890724][T22872] CPU: 0 UID: 0 PID: 22872 Comm: syz.5.17732 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 772.890821][T22872] Tainted: [W]=WARN [ 772.890827][T22872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 772.890838][T22872] Call Trace: [ 772.890845][T22872] [ 772.890855][T22872] __dump_stack+0x1d/0x30 [ 772.890878][T22872] dump_stack_lvl+0x95/0xd0 [ 772.890948][T22872] dump_stack+0x15/0x1b [ 772.890967][T22872] should_fail_ex+0x263/0x280 [ 772.891043][T22872] should_fail+0xb/0x20 [ 772.891067][T22872] should_fail_usercopy+0x1a/0x20 [ 772.891158][T22872] _copy_from_user+0x1c/0xb0 [ 772.891177][T22872] do_sock_getsockopt+0xf1/0x210 [ 772.891236][T22872] __x64_sys_getsockopt+0x11d/0x1a0 [ 772.891341][T22872] x64_sys_call+0x2dc7/0x3000 [ 772.891363][T22872] do_syscall_64+0xc0/0x2a0 [ 772.891453][T22872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.891525][T22872] RIP: 0033:0x7f905985aeb9 [ 772.891541][T22872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.891557][T22872] RSP: 002b:00007f90582af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 772.891575][T22872] RAX: ffffffffffffffda RBX: 00007f9059ad5fa0 RCX: 00007f905985aeb9 [ 772.891606][T22872] RDX: 000000000000007d RSI: 0000000000000084 RDI: 0000000000000004 [ 772.891617][T22872] RBP: 00007f90582af090 R08: 0000200000000000 R09: 0000000000000000 [ 772.891629][T22872] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000001 [ 772.891640][T22872] R13: 00007f9059ad6038 R14: 00007f9059ad5fa0 R15: 00007fff9d8f2f88 [ 772.891673][T22872] [ 773.096161][ T4293] Bluetooth: hci0: command 0x1003 tx timeout [ 773.103368][ T1485] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 773.289665][T22882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17736'. [ 773.299372][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17736'. [ 773.310428][T22886] FAULT_INJECTION: forcing a failure. [ 773.310428][T22886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.324903][T22886] CPU: 0 UID: 0 PID: 22886 Comm: syz.3.17737 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 773.325069][T22886] Tainted: [W]=WARN [ 773.325076][T22886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 773.325089][T22886] Call Trace: [ 773.325096][T22886] [ 773.325106][T22886] __dump_stack+0x1d/0x30 [ 773.325130][T22886] dump_stack_lvl+0x95/0xd0 [ 773.325153][T22886] dump_stack+0x15/0x1b [ 773.325247][T22886] should_fail_ex+0x263/0x280 [ 773.325282][T22886] should_fail+0xb/0x20 [ 773.325318][T22886] should_fail_usercopy+0x1a/0x20 [ 773.325354][T22886] _copy_to_user+0x20/0xa0 [ 773.325377][T22886] simple_read_from_buffer+0xb5/0x130 [ 773.325448][T22886] proc_fail_nth_read+0x10e/0x150 [ 773.325474][T22886] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 773.325570][T22886] vfs_read+0x1ab/0x7f0 [ 773.325592][T22886] ? __rcu_read_unlock+0x4e/0x70 [ 773.325623][T22886] ? __fget_files+0x184/0x1c0 [ 773.325649][T22886] ? mutex_lock+0x57/0x90 [ 773.325689][T22886] ksys_read+0xdc/0x1a0 [ 773.325756][T22886] __x64_sys_read+0x40/0x50 [ 773.325778][T22886] x64_sys_call+0x2889/0x3000 [ 773.325806][T22886] do_syscall_64+0xc0/0x2a0 [ 773.325840][T22886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.325942][T22886] RIP: 0033:0x7fbe3c12b78e [ 773.325967][T22886] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 773.325987][T22886] RSP: 002b:00007fbe3aba5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 773.326035][T22886] RAX: ffffffffffffffda RBX: 00007fbe3aba66c0 RCX: 00007fbe3c12b78e [ 773.326050][T22886] RDX: 000000000000000f RSI: 00007fbe3aba60a0 RDI: 0000000000000004 [ 773.326065][T22886] RBP: 00007fbe3aba6090 R08: 0000000000000000 R09: 0000000000000000 [ 773.326081][T22886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.326096][T22886] R13: 00007fbe3c3e6128 R14: 00007fbe3c3e6090 R15: 00007ffdac14c808 [ 773.326172][T22886] [ 773.616551][T22892] veth1_to_bond: entered allmulticast mode [ 773.740824][T22904] 9p: Bad value for 'rfdno' [ 773.930067][T22913] FAULT_INJECTION: forcing a failure. [ 773.930067][T22913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.945764][T22913] CPU: 1 UID: 0 PID: 22913 Comm: syz.1.17749 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 773.945826][T22913] Tainted: [W]=WARN [ 773.945833][T22913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 773.945845][T22913] Call Trace: [ 773.945852][T22913] [ 773.945871][T22913] __dump_stack+0x1d/0x30 [ 773.945896][T22913] dump_stack_lvl+0x95/0xd0 [ 773.945917][T22913] dump_stack+0x15/0x1b [ 773.946009][T22913] should_fail_ex+0x263/0x280 [ 773.946041][T22913] should_fail+0xb/0x20 [ 773.946071][T22913] should_fail_usercopy+0x1a/0x20 [ 773.946107][T22913] _copy_from_iter+0xcf/0xea0 [ 773.946148][T22913] ? alloc_pages_mpol+0x217/0x260 [ 773.946181][T22913] copy_page_from_iter+0x178/0x2a0 [ 773.946207][T22913] tun_get_user+0xbbd/0x27c0 [ 773.946302][T22913] ? ref_tracker_alloc+0x1f2/0x2f0 [ 773.946334][T22913] tun_chr_write_iter+0x15e/0x210 [ 773.946408][T22913] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 773.946428][T22913] vfs_write+0x5a6/0x9f0 [ 773.946454][T22913] ksys_write+0xdc/0x1a0 [ 773.946478][T22913] __x64_sys_write+0x40/0x50 [ 773.946501][T22913] x64_sys_call+0x2847/0x3000 [ 773.946573][T22913] do_syscall_64+0xc0/0x2a0 [ 773.946603][T22913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.946700][T22913] RIP: 0033:0x7f1e9a23b78e [ 773.946724][T22913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 773.946757][T22913] RSP: 002b:00007f1e98cd6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.946779][T22913] RAX: ffffffffffffffda RBX: 00007f1e98cd76c0 RCX: 00007f1e9a23b78e [ 773.946898][T22913] RDX: 000000000000003a RSI: 0000200000001c00 RDI: 00000000000000c8 [ 773.946912][T22913] RBP: 00007f1e98cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 773.946925][T22913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.946938][T22913] R13: 00007f1e9a4f6038 R14: 00007f1e9a4f5fa0 R15: 00007fffb7365f98 [ 773.946962][T22913] [ 774.206994][T22891] veth1_to_bond: left allmulticast mode [ 774.216044][T22902] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.17744: inode has both inline data and extents flags [ 774.233003][T22902] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.17744: couldn't read orphan inode 15 (err -117) [ 774.265925][T22902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.336122][T22926] netlink: 'syz.4.17752': attribute type 1 has an invalid length. [ 774.384747][T22926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.394703][T22926] bond1: (slave batadv0): making interface the new active one [ 774.406760][T22926] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 774.411023][T22936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17752'. [ 774.431673][T22935] EXT4-fs: Ignoring removed mblk_io_submit option [ 774.462531][T22935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 774.479018][T22935] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.566195][T22087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 774.598973][T22947] set_capacity_and_notify: 4 callbacks suppressed [ 774.598988][T22947] loop5: detected capacity change from 0 to 164 [ 774.607377][T22950] loop4: detected capacity change from 0 to 164 [ 774.614535][T22947] iso9660: Unknown parameter '' [ 774.632601][T22950] iso9660: Unknown parameter '' [ 774.894778][T22902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.919321][T22966] loop0: detected capacity change from 0 to 1024 [ 774.961620][T22966] EXT4-fs: Ignoring removed orlov option [ 774.997974][T22966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.066576][T22966] netlink: 'syz.0.17769': attribute type 39 has an invalid length. [ 775.076740][T22966] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 775.148827][T14297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.500740][T22981] loop0: detected capacity change from 0 to 512 [ 775.521816][T29258] udevd[29258]: symlink '../../loop0' '/dev/disk/by-diskseq/1999.tmp-b7:0' failed: Read-only file system [ 775.546912][T29258] udevd[29258]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 775.593165][T22981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.607471][T22981] ext4 filesystem being mounted at /598/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.692503][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-diskseq/1991.tmp-b7:3' failed: Read-only file system [ 775.763743][T22987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17775'. [ 775.905271][T14297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.943358][T22990] loop3: detected capacity change from 0 to 164 [ 775.957614][T22990] iso9660: Unknown parameter '' [ 775.974957][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-diskseq/1991.tmp-b7:3' failed: Read-only file system [ 776.005868][T29002] udevd[29002]: symlink '../../loop0' '/dev/disk/by-diskseq/1999.tmp-b7:0' failed: Read-only file system [ 776.040840][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-label/CDROM.tmp-b7:3' failed: Read-only file system [ 776.042904][T29002] udevd[29002]: symlink '../../loop0' '/dev/disk/by-diskseq/1999.tmp-b7:0' failed: Read-only file system [ 776.081950][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:3' failed: Read-only file system [ 776.119092][T29002] udevd[29002]: symlink '../../loop0' '/dev/disk/by-diskseq/2001.tmp-b7:0' failed: Read-only file system [ 776.130770][T22996] loop1: detected capacity change from 0 to 1024 [ 776.139683][T22996] EXT4-fs: Ignoring removed orlov option [ 776.150247][T28971] udevd[28971]: symlink '../../loop1' '/dev/disk/by-diskseq/1987.tmp-b7:1' failed: Read-only file system [ 776.207949][T22996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.311421][T23002] netlink: 'syz.1.17780': attribute type 39 has an invalid length. [ 776.370263][T22996] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 776.406005][T22212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.457573][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 776.457587][ T29] audit: type=1326 audit(1770382506.802:5984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23007 comm="syz.1.17782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 776.501060][ T29] audit: type=1326 audit(1770382506.842:5985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23007 comm="syz.1.17782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 776.526073][ T29] audit: type=1326 audit(1770382506.842:5986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23007 comm="syz.1.17782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 776.550021][ T29] audit: type=1326 audit(1770382506.842:5987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23007 comm="syz.1.17782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 776.574884][ T29] audit: type=1326 audit(1770382506.842:5988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23007 comm="syz.1.17782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 776.600913][ T29] audit: type=1326 audit(1770382506.842:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23007 comm="syz.1.17782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 776.625585][ T29] audit: type=1326 audit(1770382506.842:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23007 comm="syz.1.17782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 776.649537][ T29] audit: type=1326 audit(1770382506.842:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23007 comm="syz.1.17782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 776.673658][ T29] audit: type=1326 audit(1770382506.842:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23007 comm="syz.1.17782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 776.698646][ T29] audit: type=1326 audit(1770382506.842:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23007 comm="syz.1.17782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 776.935744][T24402] bridge_slave_1: left allmulticast mode [ 776.943239][T24402] bridge_slave_1: left promiscuous mode [ 776.950388][T24402] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.978231][T23034] loop1: detected capacity change from 0 to 512 [ 777.000867][T23034] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 777.033279][T23034] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.17786: bg 0: block 4: invalid block bitmap [ 777.052957][T24402] team0: Port device geneve1 removed [ 777.060182][T23034] EXT4-fs (loop1): 1 truncate cleaned up [ 777.068366][T23034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.115624][T24402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.132576][T22212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.145411][T24402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.161364][T24402] bond0 (unregistering): Released all slaves [ 778.230076][T24402] hsr_slave_0: left promiscuous mode [ 778.238785][T23079] loop5: detected capacity change from 0 to 512 [ 778.255513][T23079] EXT4-fs: Mount option(s) incompatible with ext2 [ 778.476833][T24402] team0 (unregistering): Port device team_slave_1 removed [ 778.521109][T24402] team0 (unregistering): Port device team_slave_0 removed [ 778.537563][T23622] smc: removing ib device syz0 [ 778.673975][T23089] loop1: detected capacity change from 0 to 32768 [ 778.711200][T23089] loop1: p1 p2 p3 < > [ 778.739811][T23089] loop1: p2 size 16775168 extends beyond EOD, truncated [ 778.941502][T23120] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17802'. [ 779.001013][T23124] loop1: detected capacity change from 0 to 2048 [ 779.007884][T23124] EXT4-fs: Ignoring removed orlov option [ 779.014258][T23124] EXT4-fs: Ignoring removed oldalloc option [ 779.056022][T23124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.073290][T22999] chnl_net:caif_netlink_parms(): no params data found [ 779.128167][T23124] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.17801: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 779.187228][T22212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.276574][T22999] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.283787][T22999] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.297893][T22999] bridge_slave_0: entered allmulticast mode [ 779.316528][T22999] bridge_slave_0: entered promiscuous mode [ 779.329836][T22999] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.337538][T22999] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.346509][T22999] bridge_slave_1: entered allmulticast mode [ 779.358534][T22999] bridge_slave_1: entered promiscuous mode [ 779.403214][T23166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17810'. [ 779.472071][T22999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.488239][T22999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.594506][T22999] team0: Port device team_slave_0 added [ 779.615655][T22999] team0: Port device team_slave_1 added [ 779.713334][T22999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.719847][T23178] loop1: detected capacity change from 0 to 2048 [ 779.721571][T22999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.758488][T22999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.760627][T23178] EXT4-fs: Ignoring removed orlov option [ 779.777530][T23178] EXT4-fs: Ignoring removed oldalloc option [ 779.801412][T22999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.809571][T22999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.837593][T22999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.871123][T23178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.883933][T22999] hsr_slave_0: entered promiscuous mode [ 779.891712][T22999] hsr_slave_1: entered promiscuous mode [ 779.898131][T22999] debugfs: 'hsr0' already exists in 'hsr' [ 779.904141][T22999] Cannot create hsr debugfs directory [ 779.911848][T23186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17816'. [ 779.922199][T23186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17816'. [ 779.937238][T23186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17816'. [ 779.952490][T23178] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.17815: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 779.984804][T23186] netlink: 'syz.3.17816': attribute type 1 has an invalid length. [ 780.037041][T22212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.100698][T23202] FAULT_INJECTION: forcing a failure. [ 780.100698][T23202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.114546][T23202] CPU: 0 UID: 0 PID: 23202 Comm: syz.3.17819 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 780.114627][T23202] Tainted: [W]=WARN [ 780.114634][T23202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 780.114646][T23202] Call Trace: [ 780.114654][T23202] [ 780.114691][T23202] __dump_stack+0x1d/0x30 [ 780.114715][T23202] dump_stack_lvl+0x95/0xd0 [ 780.114736][T23202] dump_stack+0x15/0x1b [ 780.114754][T23202] should_fail_ex+0x263/0x280 [ 780.114831][T23202] should_fail+0xb/0x20 [ 780.114859][T23202] should_fail_usercopy+0x1a/0x20 [ 780.114891][T23202] _copy_to_user+0x20/0xa0 [ 780.114940][T23202] simple_read_from_buffer+0xb5/0x130 [ 780.114976][T23202] proc_fail_nth_read+0x10e/0x150 [ 780.115006][T23202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 780.115047][T23202] vfs_read+0x1ab/0x7f0 [ 780.115121][T23202] ? __rcu_read_unlock+0x4e/0x70 [ 780.115177][T23202] ? __fget_files+0x184/0x1c0 [ 780.115198][T23202] ? ldsem_up_read+0x8a/0xd0 [ 780.115296][T23202] ? mutex_lock+0x57/0x90 [ 780.115323][T23202] ksys_read+0xdc/0x1a0 [ 780.115344][T23202] __x64_sys_read+0x40/0x50 [ 780.115362][T23202] x64_sys_call+0x2889/0x3000 [ 780.115424][T23202] do_syscall_64+0xc0/0x2a0 [ 780.115455][T23202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.115475][T23202] RIP: 0033:0x7fbe3c12b78e [ 780.115569][T23202] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 780.115587][T23202] RSP: 002b:00007fbe3abc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 780.115609][T23202] RAX: ffffffffffffffda RBX: 00007fbe3abc76c0 RCX: 00007fbe3c12b78e [ 780.115627][T23202] RDX: 000000000000000f RSI: 00007fbe3abc70a0 RDI: 0000000000000004 [ 780.115643][T23202] RBP: 00007fbe3abc7090 R08: 0000000000000000 R09: 0000000000000000 [ 780.115657][T23202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.115670][T23202] R13: 00007fbe3c3e6038 R14: 00007fbe3c3e5fa0 R15: 00007ffdac14c808 [ 780.115689][T23202] [ 780.364234][T24402] IPVS: stop unused estimator thread 0... [ 780.477425][T23221] FAULT_INJECTION: forcing a failure. [ 780.477425][T23221] name failslab, interval 1, probability 0, space 0, times 0 [ 780.491013][T23221] CPU: 1 UID: 0 PID: 23221 Comm: syz.1.17825 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 780.491122][T23221] Tainted: [W]=WARN [ 780.491131][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 780.491145][T23221] Call Trace: [ 780.491153][T23221] [ 780.491161][T23221] __dump_stack+0x1d/0x30 [ 780.491205][T23221] dump_stack_lvl+0x95/0xd0 [ 780.491229][T23221] dump_stack+0x15/0x1b [ 780.491252][T23221] should_fail_ex+0x263/0x280 [ 780.491367][T23221] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 780.491402][T23221] should_failslab+0x8c/0xb0 [ 780.491435][T23221] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 780.491494][T23221] ? shmem_alloc_inode+0x34/0x50 [ 780.491598][T23221] ? kstrtouint+0x76/0xc0 [ 780.491628][T23221] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 780.491662][T23221] shmem_alloc_inode+0x34/0x50 [ 780.491740][T23221] alloc_inode+0x40/0x170 [ 780.491764][T23221] new_inode+0x1d/0xe0 [ 780.491786][T23221] shmem_get_inode+0x246/0x750 [ 780.491886][T23221] __shmem_file_setup+0x112/0x210 [ 780.492005][T23221] shmem_file_setup+0x3b/0x50 [ 780.492037][T23221] memfd_alloc_file+0x4e/0x300 [ 780.492146][T23221] __se_sys_memfd_create+0x2e1/0x3b0 [ 780.492231][T23221] __x64_sys_memfd_create+0x31/0x40 [ 780.492264][T23221] x64_sys_call+0x28cb/0x3000 [ 780.492363][T23221] do_syscall_64+0xc0/0x2a0 [ 780.492397][T23221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.492467][T23221] RIP: 0033:0x7f1e9a27aeb9 [ 780.492486][T23221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.492555][T23221] RSP: 002b:00007f1e98cd6d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 780.492578][T23221] RAX: ffffffffffffffda RBX: 0000000000004080 RCX: 00007f1e9a27aeb9 [ 780.492595][T23221] RDX: 00007f1e98cd6ddc RSI: 0000000000000000 RDI: 00007f1e9a2e7333 [ 780.492608][T23221] RBP: 0000200000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 780.492623][T23221] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 780.492638][T23221] R13: 00007f1e98cd6ddc R14: 00007f1e98cd6de0 R15: 00007fffb7365f98 [ 780.492661][T23221] [ 780.735209][T23219] loop3: detected capacity change from 0 to 512 [ 780.743863][T23219] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.17826: inode has both inline data and extents flags [ 780.760035][T23219] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.17826: couldn't read orphan inode 15 (err -117) [ 780.775753][T29002] udevd[29002]: symlink '../../loop1' '/dev/disk/by-diskseq/2014.tmp-b7:1' failed: Read-only file system [ 780.782990][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-diskseq/2015.tmp-b7:3' failed: Read-only file system [ 780.801790][T23219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.815548][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 780.852473][T23219] netlink: 'syz.3.17826': attribute type 4 has an invalid length. [ 780.862800][T23219] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.17826'. [ 780.888966][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-diskseq/2015.tmp-b7:3' failed: Read-only file system [ 780.911711][T29002] udevd[29002]: symlink '../../loop1' '/dev/disk/by-diskseq/2014.tmp-b7:1' failed: Read-only file system [ 780.914907][T23232] loop1: detected capacity change from 0 to 2048 [ 780.925101][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 780.968194][T29258] udevd[29258]: symlink '../../loop1' '/dev/disk/by-diskseq/2016.tmp-b7:1' failed: Read-only file system [ 780.982985][T29002] udevd[29002]: symlink '../../loop5' '/dev/disk/by-diskseq/2008.tmp-b7:5' failed: Read-only file system [ 780.999795][T23232] EXT4-fs: Ignoring removed orlov option [ 781.006717][T23232] EXT4-fs: Ignoring removed oldalloc option [ 781.018059][T29258] udevd[29258]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 781.089311][T22999] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 781.104212][T22999] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 781.111736][T23232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.135000][T23232] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.17828: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 781.142885][T22999] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 781.178330][T22999] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 781.197311][T22212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.214629][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 781.305836][T22999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.327030][T23268] loop1: detected capacity change from 0 to 512 [ 781.333339][T22999] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.353110][T23268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.372141][T26110] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.381283][T26110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.395520][T23268] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 781.412119][T26110] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.420956][T26110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.517973][T23268] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.17831: corrupted xattr block 33: invalid header [ 781.534493][T23268] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 781.547833][T23274] veth1_to_bond: entered allmulticast mode [ 781.554633][T23268] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.17831: corrupted xattr block 33: invalid header [ 781.569836][T23268] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 781.581550][T23219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.608391][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 781.608406][ T29] audit: type=1400 audit(1770382511.952:6113): avc: denied { write } for pid=23267 comm="syz.1.17831" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 781.608402][T23268] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.17831: corrupted xattr block 33: invalid header [ 781.664497][T22999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.670780][T23268] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 781.770648][ T29] audit: type=1400 audit(1770382512.062:6114): avc: denied { open } for pid=23267 comm="syz.1.17831" path="/51/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 781.805402][T23273] veth1_to_bond: left allmulticast mode [ 781.816276][ T29] audit: type=1326 audit(1770382512.162:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.3.17835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3c16aeb9 code=0x7ffc0000 [ 781.840778][ T29] audit: type=1326 audit(1770382512.162:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.3.17835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3c16aeb9 code=0x7ffc0000 [ 781.857217][T22999] veth0_vlan: entered promiscuous mode [ 781.864513][ T29] audit: type=1326 audit(1770382512.162:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.3.17835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3c16aeb9 code=0x7ffc0000 [ 781.894667][ T29] audit: type=1326 audit(1770382512.162:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.3.17835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe3c16aeb9 code=0x7ffc0000 [ 781.920324][ T29] audit: type=1326 audit(1770382512.162:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.3.17835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3c16aeb9 code=0x7ffc0000 [ 781.925704][T22999] veth1_vlan: entered promiscuous mode [ 781.945450][ T29] audit: type=1326 audit(1770382512.162:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.3.17835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3c16aeb9 code=0x7ffc0000 [ 781.976501][ T29] audit: type=1326 audit(1770382512.162:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.3.17835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3c16aeb9 code=0x7ffc0000 [ 782.006502][ T29] audit: type=1326 audit(1770382512.162:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23285 comm="syz.3.17835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe3c16aeb9 code=0x7ffc0000 [ 782.035588][T22999] veth0_macvtap: entered promiscuous mode [ 782.049439][T22212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.062346][T22999] veth1_macvtap: entered promiscuous mode [ 782.102307][T22999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.130988][T22999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.148986][ T2712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.187220][ T2712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.212581][T23305] loop1: detected capacity change from 0 to 1024 [ 782.216206][ T2712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.236996][T23310] loop3: detected capacity change from 0 to 2048 [ 782.245990][T23305] EXT4-fs: Ignoring removed nomblk_io_submit option [ 782.251409][ T2712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.272783][T23310] EXT4-fs: Ignoring removed orlov option [ 782.278964][T23310] EXT4-fs: Ignoring removed oldalloc option [ 782.297135][T23305] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 782.311845][T23305] System zones: 0-1, 3-36 [ 782.318034][T23305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.353057][T23310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.401421][T23310] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.17843: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 782.447141][T22212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.454954][T23312] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20000 [ 782.464787][T22087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.483646][T23320] FAULT_INJECTION: forcing a failure. [ 782.483646][T23320] name failslab, interval 1, probability 0, space 0, times 0 [ 782.499696][T23320] CPU: 0 UID: 0 PID: 23320 Comm: syz.1.17846 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 782.499727][T23320] Tainted: [W]=WARN [ 782.499733][T23320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 782.499892][T23320] Call Trace: [ 782.499900][T23320] [ 782.499910][T23320] __dump_stack+0x1d/0x30 [ 782.499935][T23320] dump_stack_lvl+0x95/0xd0 [ 782.499970][T23320] dump_stack+0x15/0x1b [ 782.499989][T23320] should_fail_ex+0x263/0x280 [ 782.500118][T23320] should_failslab+0x8c/0xb0 [ 782.500219][T23320] __kmalloc_cache_noprof+0x64/0x4a0 [ 782.500346][T23320] ? ipv6_flowlabel_opt+0x84f/0x1790 [ 782.500374][T23320] ipv6_flowlabel_opt+0x84f/0x1790 [ 782.500400][T23320] ? lockref_put_return+0xf7/0x130 [ 782.500426][T23320] ? __rcu_read_unlock+0x4e/0x70 [ 782.500543][T23320] ? _raw_spin_unlock_bh+0x18/0x20 [ 782.500571][T23320] ? lock_sock_nested+0x132/0x160 [ 782.500593][T23320] ? path_openat+0x1e8e/0x23c0 [ 782.500632][T23320] ? should_fail_ex+0xd9/0x280 [ 782.500664][T23320] do_ipv6_setsockopt+0xb4e/0x21d0 [ 782.500695][T23320] ? kstrtoull+0x111/0x140 [ 782.500737][T23320] ? __rcu_read_unlock+0x4e/0x70 [ 782.500771][T23320] ? avc_has_perm_noaudit+0xab/0x130 [ 782.500805][T23320] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 782.500874][T23320] ipv6_setsockopt+0x59/0x130 [ 782.500899][T23320] tcp_setsockopt+0x98/0xb0 [ 782.500929][T23320] sock_common_setsockopt+0x69/0x80 [ 782.501093][T23320] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 782.501123][T23320] __sys_setsockopt+0x184/0x200 [ 782.501235][T23320] __x64_sys_setsockopt+0x64/0x80 [ 782.501267][T23320] x64_sys_call+0x21d5/0x3000 [ 782.501346][T23320] do_syscall_64+0xc0/0x2a0 [ 782.501379][T23320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.501406][T23320] RIP: 0033:0x7f1e9a27aeb9 [ 782.501424][T23320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.501441][T23320] RSP: 002b:00007f1e98cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 782.501461][T23320] RAX: ffffffffffffffda RBX: 00007f1e9a4f5fa0 RCX: 00007f1e9a27aeb9 [ 782.501475][T23320] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 782.501529][T23320] RBP: 00007f1e98cd7090 R08: 0000000000000020 R09: 0000000000000000 [ 782.501541][T23320] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 782.501555][T23320] R13: 00007f1e9a4f6038 R14: 00007f1e9a4f5fa0 R15: 00007fffb7365f98 [ 782.501592][T23320] [ 782.550170][T23322] loop5: detected capacity change from 0 to 8192 [ 782.803215][T23328] veth1_to_bond: entered allmulticast mode [ 782.857534][T29002] loop5: p1 p2 p3 p4 [ 782.862543][T29002] loop5: p1 size 262144 extends beyond EOD, truncated [ 782.989641][T29002] loop5: p2 start 2531787010 is beyond EOD, truncated [ 782.997095][T29002] loop5: p3 size 100663552 extends beyond EOD, truncated [ 783.013626][T23327] veth1_to_bond: left allmulticast mode [ 783.026014][T29002] loop5: p4 size 50331648 extends beyond EOD, truncated [ 783.056743][T23322] loop5: p1 p2 p3 p4 [ 783.064947][T23322] loop5: p1 size 262144 extends beyond EOD, truncated [ 783.088514][T23322] loop5: p2 start 2531787010 is beyond EOD, truncated [ 783.095685][T23322] loop5: p3 size 100663552 extends beyond EOD, truncated [ 783.133829][T23344] xt_hashlimit: size too large, truncated to 1048576 [ 783.177021][T23351] loop0: detected capacity change from 0 to 2048 [ 783.215467][T23351] EXT4-fs: Ignoring removed orlov option [ 783.221921][T23351] EXT4-fs: Ignoring removed oldalloc option [ 783.242439][T23322] loop5: p4 size 50331648 extends beyond EOD, truncated [ 783.280170][T23351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.316239][T23351] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.17855: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 783.397207][T22999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.450753][T23366] netlink: 'syz.0.17858': attribute type 1 has an invalid length. [ 783.459508][T23366] netlink: 'syz.0.17858': attribute type 2 has an invalid length. [ 783.471372][T23366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17858'. [ 783.626529][T23373] veth1_to_bond: entered allmulticast mode [ 783.748070][T23376] netlink: 'syz.5.17864': attribute type 10 has an invalid length. [ 783.759589][T23376] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17864'. [ 783.772908][T23378] FAULT_INJECTION: forcing a failure. [ 783.772908][T23378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.787245][T23378] CPU: 0 UID: 0 PID: 23378 Comm: syz.3.17865 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 783.787285][T23378] Tainted: [W]=WARN [ 783.787291][T23378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 783.787304][T23378] Call Trace: [ 783.787310][T23378] [ 783.787319][T23378] __dump_stack+0x1d/0x30 [ 783.787348][T23378] dump_stack_lvl+0x95/0xd0 [ 783.787371][T23378] dump_stack+0x15/0x1b [ 783.787415][T23378] should_fail_ex+0x263/0x280 [ 783.787447][T23378] should_fail+0xb/0x20 [ 783.787539][T23378] should_fail_usercopy+0x1a/0x20 [ 783.787571][T23378] _copy_to_user+0x20/0xa0 [ 783.787593][T23378] simple_read_from_buffer+0xb5/0x130 [ 783.787684][T23378] proc_fail_nth_read+0x10e/0x150 [ 783.787712][T23378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 783.787766][T23378] vfs_read+0x1ab/0x7f0 [ 783.787786][T23378] ? __rcu_read_unlock+0x4e/0x70 [ 783.787835][T23378] ? __fget_files+0x184/0x1c0 [ 783.787859][T23378] ? mutex_lock+0x57/0x90 [ 783.787941][T23378] ksys_read+0xdc/0x1a0 [ 783.787960][T23378] __x64_sys_read+0x40/0x50 [ 783.788011][T23378] x64_sys_call+0x2889/0x3000 [ 783.788072][T23378] do_syscall_64+0xc0/0x2a0 [ 783.788178][T23378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.788201][T23378] RIP: 0033:0x7fbe3c12b78e [ 783.788218][T23378] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 783.788236][T23378] RSP: 002b:00007fbe3abc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 783.788322][T23378] RAX: ffffffffffffffda RBX: 00007fbe3abc76c0 RCX: 00007fbe3c12b78e [ 783.788337][T23378] RDX: 000000000000000f RSI: 00007fbe3abc70a0 RDI: 0000000000000004 [ 783.788422][T23378] RBP: 00007fbe3abc7090 R08: 0000000000000000 R09: 0000000000000000 [ 783.788508][T23378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.788523][T23378] R13: 00007fbe3c3e6038 R14: 00007fbe3c3e5fa0 R15: 00007ffdac14c808 [ 783.788590][T23378] [ 783.790675][T23376] dummy0: entered promiscuous mode [ 784.010996][T23376] dummy0: entered allmulticast mode [ 784.029522][T23376] bridge0: port 3(dummy0) entered blocking state [ 784.036846][T23376] bridge0: port 3(dummy0) entered disabled state [ 784.053740][T23383] FAULT_INJECTION: forcing a failure. [ 784.053740][T23383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.069096][T23383] CPU: 0 UID: 0 PID: 23383 Comm: syz.4.17866 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 784.069131][T23383] Tainted: [W]=WARN [ 784.069139][T23383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 784.069154][T23383] Call Trace: [ 784.069160][T23383] [ 784.069168][T23383] __dump_stack+0x1d/0x30 [ 784.069259][T23383] dump_stack_lvl+0x95/0xd0 [ 784.069280][T23383] dump_stack+0x15/0x1b [ 784.069298][T23383] should_fail_ex+0x263/0x280 [ 784.069326][T23383] should_fail+0xb/0x20 [ 784.069387][T23383] should_fail_usercopy+0x1a/0x20 [ 784.069417][T23383] _copy_from_iter+0xcf/0xea0 [ 784.069439][T23383] ? __alloc_skb+0x397/0x4b0 [ 784.069506][T23383] ? __alloc_skb+0x219/0x4b0 [ 784.069546][T23383] netlink_sendmsg+0x4ae/0x6f0 [ 784.069572][T23383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.069593][T23383] ____sys_sendmsg+0x5af/0x600 [ 784.069618][T23383] ___sys_sendmsg+0x195/0x1e0 [ 784.069649][T23383] __x64_sys_sendmsg+0xd4/0x160 [ 784.069675][T23383] x64_sys_call+0x17ba/0x3000 [ 784.069697][T23383] do_syscall_64+0xc0/0x2a0 [ 784.069728][T23383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.069778][T23383] RIP: 0033:0x7f548e46aeb9 [ 784.069796][T23383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.069817][T23383] RSP: 002b:00007f548cec7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.069886][T23383] RAX: ffffffffffffffda RBX: 00007f548e6e5fa0 RCX: 00007f548e46aeb9 [ 784.069993][T23383] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000008 [ 784.070008][T23383] RBP: 00007f548cec7090 R08: 0000000000000000 R09: 0000000000000000 [ 784.070023][T23383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.070070][T23383] R13: 00007f548e6e6038 R14: 00007f548e6e5fa0 R15: 00007ffcc2dfb2d8 [ 784.070089][T23383] [ 784.307741][T23371] veth1_to_bond: left allmulticast mode [ 784.413374][T23391] xt_hashlimit: size too large, truncated to 1048576 [ 784.547699][T23400] loop1: detected capacity change from 0 to 2048 [ 784.583126][T23400] EXT4-fs: Ignoring removed orlov option [ 784.590028][T23400] EXT4-fs: Ignoring removed oldalloc option [ 784.673940][T23400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.690802][T23400] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.17869: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 784.715911][T23413] loop0: detected capacity change from 0 to 1024 [ 784.729129][T23413] EXT4-fs: Ignoring removed mblk_io_submit option [ 784.759849][T22212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.774168][T23413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 784.788104][T23413] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.820964][T22999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 784.994803][T23434] loop5: detected capacity change from 0 to 512 [ 785.009895][T23434] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 785.031109][T23434] EXT4-fs (loop5): orphan cleanup on readonly fs [ 785.037687][T23434] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.17881: Block bitmap for bg 0 marked uninitialized [ 785.051571][T23420] loop1: detected capacity change from 0 to 512 [ 785.068374][T23434] EXT4-fs (loop5): Remounting filesystem read-only [ 785.078268][T23420] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.17877: inode has both inline data and extents flags [ 785.088495][T23434] EXT4-fs (loop5): 1 orphan inode deleted [ 785.098681][T23434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 785.115930][T23420] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.17877: couldn't read orphan inode 15 (err -117) [ 785.138796][T23439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17886'. [ 785.152849][T23420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.203001][T23445] loop3: detected capacity change from 0 to 2048 [ 785.211425][T23447] loop0: detected capacity change from 0 to 1024 [ 785.231230][T23445] EXT4-fs: Ignoring removed orlov option [ 785.234811][T23447] EXT4-fs: Ignoring removed orlov option [ 785.237025][T23445] EXT4-fs: Ignoring removed oldalloc option [ 785.252111][T23447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.282731][T23447] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 785.292257][T23445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.308374][T23445] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.17888: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 785.340790][T23453] Unsupported ieee802154 address type: 0 [ 785.348760][T22999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.370973][T22087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.733119][T23485] loop0: detected capacity change from 0 to 128 [ 785.741530][T23420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.752982][T23485] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 785.773290][T23485] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 785.785712][T29258] udevd[29258]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 785.800157][T29258] udevd[29258]: symlink '../../loop1' '/dev/disk/by-diskseq/2034.tmp-b7:1' failed: Read-only file system [ 785.817351][T29258] udevd[29258]: symlink '../../loop1' '/dev/disk/by-diskseq/2034.tmp-b7:1' failed: Read-only file system [ 785.839695][T23485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17902'. [ 785.852378][T29258] udevd[29258]: symlink '../../loop1' '/dev/disk/by-diskseq/2040.tmp-b7:1' failed: Read-only file system [ 785.855767][T23485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23485 comm=syz.0.17902 [ 785.878457][T16726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.904936][T29258] udevd[29258]: symlink '../../loop5' '/dev/disk/by-diskseq/2033.tmp-b7:5' failed: Read-only file system [ 785.917707][T23485] batman_adv: batadv0: Adding interface: dummy0 [ 785.924206][T23485] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.950619][T23485] batman_adv: batadv0: Interface activated: dummy0 [ 785.972604][T29258] udevd[29258]: symlink '../../loop5' '/dev/disk/by-diskseq/2033.tmp-b7:5' failed: Read-only file system [ 785.990087][T28971] udevd[28971]: symlink '../../loop1' '/dev/disk/by-diskseq/2040.tmp-b7:1' failed: Read-only file system [ 785.992343][T29258] udevd[29258]: symlink '../../loop5' '/dev/disk/by-diskseq/2033.tmp-b7:5' failed: Read-only file system [ 786.003489][T29002] udevd[29002]: symlink '../../loop3' '/dev/disk/by-diskseq/2042.tmp-b7:3' failed: Read-only file system [ 786.017725][T23485] net_ratelimit: 30 callbacks suppressed [ 786.017768][T23485] batadv0: mtu less than device minimum [ 786.037599][T23485] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 786.048542][T23485] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 786.061478][T23485] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 786.072954][T23485] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 786.084620][T23485] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 786.095766][T23485] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 786.107249][T23485] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 786.118135][T23485] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 786.129086][T23485] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 786.176969][T23485] netlink: 'syz.0.17902': attribute type 4 has an invalid length. [ 786.206775][T29258] udevd[29258]: symlink '../../loop1' '/dev/disk/by-diskseq/2040.tmp-b7:1' failed: Read-only file system [ 786.231680][T23503] loop1: detected capacity change from 0 to 1024 [ 786.247290][T23503] EXT4-fs: Ignoring removed orlov option [ 786.273444][T23503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.300977][T23503] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 786.333613][T22212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.407025][T23515] FAULT_INJECTION: forcing a failure. [ 786.407025][T23515] name failslab, interval 1, probability 0, space 0, times 0 [ 786.420073][T23515] CPU: 0 UID: 0 PID: 23515 Comm: syz.5.17911 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 786.420164][T23515] Tainted: [W]=WARN [ 786.420170][T23515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 786.420182][T23515] Call Trace: [ 786.420190][T23515] [ 786.420198][T23515] __dump_stack+0x1d/0x30 [ 786.420242][T23515] dump_stack_lvl+0x95/0xd0 [ 786.420269][T23515] dump_stack+0x15/0x1b [ 786.420291][T23515] should_fail_ex+0x263/0x280 [ 786.420319][T23515] should_failslab+0x8c/0xb0 [ 786.420354][T23515] kmem_cache_alloc_noprof+0x68/0x490 [ 786.420428][T23515] ? alloc_empty_file+0x76/0x200 [ 786.420454][T23515] alloc_empty_file+0x76/0x200 [ 786.420478][T23515] path_openat+0x62/0x23c0 [ 786.420639][T23515] ? _parse_integer_limit+0x170/0x190 [ 786.420667][T23515] ? _parse_integer+0x27/0x40 [ 786.420728][T23515] ? kstrtoull+0x111/0x140 [ 786.420756][T23515] ? kstrtouint+0x76/0xc0 [ 786.420781][T23515] do_filp_open+0x15d/0x280 [ 786.420841][T23515] do_sys_openat2+0xa6/0x150 [ 786.420869][T23515] __x64_sys_openat+0xf2/0x120 [ 786.420964][T23515] x64_sys_call+0x2b07/0x3000 [ 786.420987][T23515] do_syscall_64+0xc0/0x2a0 [ 786.421016][T23515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.421047][T23515] RIP: 0033:0x7f905985aeb9 [ 786.421066][T23515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.421087][T23515] RSP: 002b:00007f90582af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 786.421111][T23515] RAX: ffffffffffffffda RBX: 00007f9059ad5fa0 RCX: 00007f905985aeb9 [ 786.421208][T23515] RDX: 0000000000082401 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 786.421222][T23515] RBP: 00007f90582af090 R08: 0000000000000000 R09: 0000000000000000 [ 786.421238][T23515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.421275][T23515] R13: 00007f9059ad6038 R14: 00007f9059ad5fa0 R15: 00007fff9d8f2f88 [ 786.421297][T23515] [ 786.647456][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 786.647471][ T29] audit: type=1326 audit(1770382516.992:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.1.17912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 786.679212][ T29] audit: type=1326 audit(1770382516.992:6330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.1.17912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 786.709960][ T29] audit: type=1326 audit(1770382516.992:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.1.17912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 786.735000][ T29] audit: type=1326 audit(1770382516.992:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.1.17912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 786.758850][ T29] audit: type=1326 audit(1770382516.992:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.1.17912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 786.783084][ T29] audit: type=1326 audit(1770382516.992:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.1.17912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 786.806951][ T29] audit: type=1326 audit(1770382516.992:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.1.17912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 786.807055][ T29] audit: type=1326 audit(1770382516.992:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.1.17912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 786.807079][ T29] audit: type=1326 audit(1770382516.992:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.1.17912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 786.807106][ T29] audit: type=1326 audit(1770382516.992:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.1.17912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a27aeb9 code=0x7ffc0000 [ 787.174649][T23530] loop1: detected capacity change from 0 to 4096 [ 787.188974][T23541] loop3: detected capacity change from 0 to 128 [ 787.204395][T23530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.219054][T23540] loop5: detected capacity change from 0 to 764 [ 787.227742][T23541] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 787.244959][T23541] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 787.281643][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17919'. [ 787.297332][T23541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23541 comm=syz.3.17919 [ 787.312376][T23541] batman_adv: batadv0: Adding interface: dummy0 [ 787.318710][T23541] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.345337][T23541] batman_adv: batadv0: Interface activated: dummy0 [ 787.369412][T23540] Symlink component flag not implemented [ 787.375663][T23540] Symlink component flag not implemented [ 787.396174][T23540] Symlink component flag not implemented (128) [ 787.398987][T23541] netlink: 'syz.3.17919': attribute type 4 has an invalid length. [ 787.402429][T23540] Symlink component flag not implemented (122) [ 787.475983][T23546] ip6gre1: entered allmulticast mode [ 787.508399][T23553] loop3: detected capacity change from 0 to 1024 [ 787.521251][ T3395] IPVS: starting estimator thread 0... [ 787.541363][T23553] ext4: Unknown parameter 'smackfsroot' [ 787.611099][T23557] IPVS: using max 2304 ests per chain, 115200 per kthread [ 787.660693][T23563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.745108][T23563] program syz.0.17926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 787.794352][T23568] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 787.812553][T23569] program syz.0.17926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 787.831905][T23569] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 787.894377][T24402] IPVS: stop unused estimator thread 0... [ 787.902156][T23572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.921858][T23572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.932278][T23572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.941787][T22212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.951794][T23572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.961416][T23572] batman_adv: batadv0: Interface deactivated: dummy0 [ 787.968505][T23572] batman_adv: batadv0: Removing interface: dummy0 [ 788.448202][T22999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.654248][T23589] xt_hashlimit: size too large, truncated to 1048576 [ 788.975073][T23603] ext4: Unknown parameter 'smackfshat' [ 789.100217][T23610] EXT4-fs: Ignoring removed orlov option [ 789.122406][T23610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.176775][T23610] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 789.195329][T22087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.238619][T23621] 9p: Could not find request transport: fd00000000000000000010 [ 789.413082][T23626] xfrm0: entered promiscuous mode [ 789.418418][T23626] xfrm0: entered allmulticast mode [ 789.660749][T23629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17946'. [ 789.670362][T23629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17946'. [ 789.684551][T23629] cgroup: subsys name conflicts with all [ 789.944477][T23641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17952'. [ 789.954269][T23641] FAULT_INJECTION: forcing a failure. [ 789.954269][T23641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.967658][T23641] CPU: 0 UID: 0 PID: 23641 Comm: syz.0.17952 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 789.967697][T23641] Tainted: [W]=WARN [ 789.967702][T23641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 789.967715][T23641] Call Trace: [ 789.967721][T23641] [ 789.967726][T23641] __dump_stack+0x1d/0x30 [ 789.967857][T23641] dump_stack_lvl+0x95/0xd0 [ 789.967871][T23641] dump_stack+0x15/0x1b [ 789.967883][T23641] should_fail_ex+0x263/0x280 [ 789.967902][T23641] should_fail+0xb/0x20 [ 789.967956][T23641] should_fail_usercopy+0x1a/0x20 [ 789.967977][T23641] _copy_from_iter+0xcf/0xea0 [ 789.968034][T23641] ? __alloc_skb+0x397/0x4b0 [ 789.968117][T23641] ? __alloc_skb+0x219/0x4b0 [ 789.968199][T23641] netlink_sendmsg+0x4ae/0x6f0 [ 789.968213][T23641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 789.968286][T23641] ____sys_sendmsg+0x5af/0x600 [ 789.968301][T23641] ___sys_sendmsg+0x195/0x1e0 [ 789.968320][T23641] __x64_sys_sendmsg+0xd4/0x160 [ 789.968410][T23641] x64_sys_call+0x17ba/0x3000 [ 789.968424][T23641] do_syscall_64+0xc0/0x2a0 [ 789.968443][T23641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.968456][T23641] RIP: 0033:0x7fa088a0aeb9 [ 789.968493][T23641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.968505][T23641] RSP: 002b:00007fa08745f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.968590][T23641] RAX: ffffffffffffffda RBX: 00007fa088c85fa0 RCX: 00007fa088a0aeb9 [ 789.968599][T23641] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 789.968607][T23641] RBP: 00007fa08745f090 R08: 0000000000000000 R09: 0000000000000000 [ 789.968615][T23641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.968623][T23641] R13: 00007fa088c86038 R14: 00007fa088c85fa0 R15: 00007fff5d0ac038 [ 789.968656][T23641] [ 790.257835][T23646] set_capacity_and_notify: 4 callbacks suppressed [ 790.257853][T23646] loop3: detected capacity change from 0 to 4096 [ 790.291714][T23646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.331004][T23646] program syz.3.17953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 790.383251][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17960'. [ 790.390616][T23659] program syz.3.17953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 790.404851][T23659] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 790.418595][T23661] loop1: detected capacity change from 0 to 164 [ 790.425843][ T2712] Bluetooth: hci0: Frame reassembly failed (-84) [ 790.444580][T23665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.461295][T23664] loop5: detected capacity change from 0 to 128 [ 790.473636][T23665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.481213][T23664] vfat: Unknown parameter 'M5%Z$FRkLHʚ׏(voSB q9gux۱4 [ 790.481213][T23664] (d\tΚ84Wϴ{R-XL.ͼ~c]%^vXB/#+D{9tĆAy?޺m:ֿn- [ 790.481213][T23664] :ڈ~HZn]_ᕈ?1Qkaժ00000000000000000000000' [ 790.522561][T23659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.541184][T23659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.569863][T23659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.588961][T23659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.605375][T23659] batman_adv: batadv0: Interface deactivated: dummy0 [ 790.612343][T23659] batman_adv: batadv0: Removing interface: dummy0 [ 790.838632][T29258] udevd[29258]: symlink '../../loop0' '/dev/disk/by-diskseq/2062.tmp-b7:0' failed: Read-only file system [ 790.860582][ T3395] hid-generic 7FFF:0007:0004.0003: ignoring exceeding usage max [ 790.860718][T23677] sctp: [Deprecated]: syz.0.17966 (pid 23677) Use of int in max_burst socket option deprecated. [ 790.860718][T23677] Use struct sctp_assoc_value instead [ 790.886608][ T3395] hid-generic 7FFF:0007:0004.0003: hidraw0: HID v0.0e Device [syz0] on syz0 [ 790.916189][T23678] fido_id[23678]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 790.922000][T29002] udevd[29002]: symlink '../../loop0' '/dev/disk/by-diskseq/2062.tmp-b7:0' failed: Read-only file system [ 790.962487][T29258] udevd[29258]: symlink '../../loop0' '/dev/disk/by-diskseq/2062.tmp-b7:0' failed: Read-only file system [ 790.992247][T29258] udevd[29258]: symlink '../../loop0' '/dev/disk/by-diskseq/2062.tmp-b7:0' failed: Read-only file system [ 791.034997][T29258] udevd[29258]: symlink '../../loop0' '/dev/disk/by-diskseq/2062.tmp-b7:0' failed: Read-only file system [ 791.058173][T22087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.083705][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-diskseq/2065.tmp-b7:3' failed: Read-only file system [ 791.102021][T29002] udevd[29002]: symlink '../../loop0' '/dev/disk/by-diskseq/2062.tmp-b7:0' failed: Read-only file system [ 791.122908][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-diskseq/2065.tmp-b7:3' failed: Read-only file system [ 791.147559][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-diskseq/2070.tmp-b7:3' failed: Read-only file system [ 791.273710][T23688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.282871][T23688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.292573][T23690] loop0: detected capacity change from 0 to 512 [ 791.308378][T23690] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.17973: inode has both inline data and extents flags [ 791.325079][T29258] udevd[29258]: symlink '../../loop0' '/dev/disk/by-diskseq/2071.tmp-b7:0' failed: Read-only file system [ 791.347180][T23690] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.17973: couldn't read orphan inode 15 (err -117) [ 791.366089][T23690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.922349][T23690] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.954605][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 791.954621][ T29] audit: type=1400 audit(1770382522.302:6516): avc: denied { write } for pid=23708 comm="syz.0.17978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 792.001873][T23696] syz.3.17974 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 792.017931][T23696] CPU: 1 UID: 0 PID: 23696 Comm: syz.3.17974 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 792.017999][T23696] Tainted: [W]=WARN [ 792.018005][T23696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 792.018084][T23696] Call Trace: [ 792.018091][T23696] [ 792.018100][T23696] __dump_stack+0x1d/0x30 [ 792.018124][T23696] dump_stack_lvl+0x95/0xd0 [ 792.018206][T23696] dump_stack+0x15/0x1b [ 792.018224][T23696] dump_header+0x80/0x240 [ 792.018243][T23696] oom_kill_process+0x295/0x350 [ 792.018280][T23696] out_of_memory+0x97d/0xb80 [ 792.018303][T23696] try_charge_memcg+0x62e/0xa10 [ 792.018330][T23696] obj_cgroup_charge_pages+0x23/0xc0 [ 792.018358][T23696] __memcg_kmem_charge_page+0x9e/0x170 [ 792.018403][T23696] __alloc_frozen_pages_noprof+0x18a/0x350 [ 792.018432][T23696] alloc_pages_mpol+0xb3/0x260 [ 792.018461][T23696] alloc_pages_noprof+0x8f/0x130 [ 792.018488][T23696] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 792.018598][T23696] __kvmalloc_node_noprof+0x471/0x680 [ 792.018667][T23696] ? ip_set_alloc+0x24/0x30 [ 792.018693][T23696] ? ip_set_alloc+0x24/0x30 [ 792.018721][T23696] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 792.018783][T23696] ip_set_alloc+0x24/0x30 [ 792.018816][T23696] hash_netiface_create+0x282/0x740 [ 792.018851][T23696] ? __pfx_hash_netiface_create+0x10/0x10 [ 792.018901][T23696] ip_set_create+0x3cf/0x970 [ 792.018986][T23696] ? __nla_parse+0x40/0x60 [ 792.019081][T23696] nfnetlink_rcv_msg+0x509/0x5d0 [ 792.019120][T23696] netlink_rcv_skb+0x123/0x220 [ 792.019157][T23696] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 792.019185][T23696] nfnetlink_rcv+0x167/0x1720 [ 792.019210][T23696] ? __kfree_skb+0x109/0x150 [ 792.019243][T23696] ? nlmon_xmit+0x4f/0x60 [ 792.019294][T23696] ? consume_skb+0x49/0x140 [ 792.019324][T23696] ? nlmon_xmit+0x4f/0x60 [ 792.019417][T23696] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 792.019448][T23696] ? __dev_queue_xmit+0x139a/0x1f20 [ 792.019509][T23696] ? __dev_queue_xmit+0x148/0x1f20 [ 792.019541][T23696] ? ref_tracker_free+0x37d/0x3e0 [ 792.019589][T23696] ? __netlink_deliver_tap+0x4dc/0x500 [ 792.019681][T23696] netlink_unicast+0x5c0/0x690 [ 792.019757][T23696] netlink_sendmsg+0x5c8/0x6f0 [ 792.019778][T23696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.019796][T23696] ____sys_sendmsg+0x5af/0x600 [ 792.019821][T23696] ___sys_sendmsg+0x195/0x1e0 [ 792.019855][T23696] __x64_sys_sendmsg+0xd4/0x160 [ 792.019934][T23696] x64_sys_call+0x17ba/0x3000 [ 792.019962][T23696] do_syscall_64+0xc0/0x2a0 [ 792.019996][T23696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.020067][T23696] RIP: 0033:0x7fbe3c16aeb9 [ 792.020153][T23696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.020174][T23696] RSP: 002b:00007fbe3abc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.020199][T23696] RAX: ffffffffffffffda RBX: 00007fbe3c3e5fa0 RCX: 00007fbe3c16aeb9 [ 792.020217][T23696] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000007 [ 792.020233][T23696] RBP: 00007fbe3c1d8c1f R08: 0000000000000000 R09: 0000000000000000 [ 792.020298][T23696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.020314][T23696] R13: 00007fbe3c3e6038 R14: 00007fbe3c3e5fa0 R15: 00007ffdac14c808 [ 792.020384][T23696] [ 792.020393][T23696] memory: usage 307200kB, limit 307200kB, failcnt 1891 [ 792.094615][T23716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17980'. [ 792.098858][T23696] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 792.098877][T23696] kmem: usage 307004kB, limit 9007199254740988kB, failcnt 0 [ 792.098891][T23696] Memory cgroup stats for /syz3 [ 792.154378][ T29] audit: type=1400 audit(1770382522.502:6517): avc: denied { watch } for pid=23720 comm="syz.4.17982" path="/448/file0" dev="tmpfs" ino=2423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 792.159374][T23696] : [ 792.438842][T23696] cache 4096 [ 792.445456][T23696] rss 180224 [ 792.448771][T23696] shmem 0 [ 792.450706][ T4293] Bluetooth: hci0: command 0x1003 tx timeout [ 792.452559][T23696] mapped_file 4096 [ 792.464106][ T1485] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 792.464266][T23696] dirty 0 [ 792.474167][T23696] writeback 0 [ 792.477656][T23696] workingset_refault_anon 51 [ 792.482831][T23696] workingset_refault_file 63 [ 792.488675][T23696] swap 0 [ 792.491924][T23696] swapcached 0 [ 792.495585][T23696] pgpgin 743290 [ 792.499307][T23696] pgpgout 743241 [ 792.503358][T23696] pgfault 815484 [ 792.503369][T23696] pgmajfault 47 [ 792.503376][T23696] inactive_anon 180224 [ 792.503384][T23696] active_anon 0 [ 792.503391][T23696] inactive_file 0 [ 792.503474][T23696] active_file 20480 [ 792.503481][T23696] unevictable 0 [ 792.503490][T23696] hierarchical_memory_limit 314572800 [ 792.503500][T23696] hierarchical_memsw_limit 9223372036854771712 [ 792.503509][T23696] total_cache 4096 [ 792.503516][T23696] total_rss 180224 [ 792.503523][T23696] total_shmem 0 [ 792.503530][T23696] total_mapped_file 4096 [ 792.503537][T23696] total_dirty 0 [ 792.503599][T23696] total_writeback 0 [ 792.503606][T23696] total_workingset_refault_anon 51 [ 792.503614][T23696] total_workingset_refault_file 63 [ 792.503621][T23696] total_swap 0 [ 792.503628][T23696] total_swapcached 0 [ 792.503636][T23696] total_pgpgin 743290 [ 792.503643][T23696] total_pgpgout 743241 [ 792.503652][T23696] total_pgfault 815493 [ 792.503729][T23696] total_pgmajfault 47 [ 792.503738][T23696] total_inactive_anon 180224 [ 792.503746][T23696] total_active_anon 0 [ 792.503754][T23696] total_inactive_file 0 [ 792.503761][T23696] total_active_file 20480 [ 792.503769][T23696] total_unevictable 0 [ 792.503778][T23696] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.17974,pid=23695,uid=0 [ 792.503919][T23696] Memory cgroup out of memory: Killed process 23695 (syz.3.17974) total-vm:94012kB, anon-rss:1212kB, file-rss:22028kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 792.544142][T23730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17984'. [ 792.572651][T23735] loop0: detected capacity change from 0 to 1024 [ 792.581773][T23735] EXT4-fs: Ignoring removed orlov option [ 792.682977][T23735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.684729][T23735] netlink: 'syz.0.17986': attribute type 39 has an invalid length. [ 792.690155][T23735] hsr_slave_1 (unregistering): left promiscuous mode [ 792.709262][T23742] loop4: detected capacity change from 0 to 2048 [ 792.723782][T23742] EXT4-fs: Ignoring removed orlov option [ 792.723996][T23742] EXT4-fs: Ignoring removed oldalloc option [ 792.732312][T23735] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 792.763282][T22999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.855408][T23746] FAULT_INJECTION: forcing a failure. [ 792.855408][T23746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.925909][T23746] CPU: 0 UID: 0 PID: 23746 Comm: syz.4.17991 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 792.925945][T23746] Tainted: [W]=WARN [ 792.926017][T23746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 792.926028][T23746] Call Trace: [ 792.926035][T23746] [ 792.926044][T23746] __dump_stack+0x1d/0x30 [ 792.926069][T23746] dump_stack_lvl+0x95/0xd0 [ 792.926171][T23746] dump_stack+0x15/0x1b [ 792.926189][T23746] should_fail_ex+0x263/0x280 [ 792.926262][T23746] should_fail+0xb/0x20 [ 792.926312][T23746] should_fail_usercopy+0x1a/0x20 [ 792.926347][T23746] _copy_to_user+0x20/0xa0 [ 792.926372][T23746] simple_read_from_buffer+0xb5/0x130 [ 792.926483][T23746] proc_fail_nth_read+0x10e/0x150 [ 792.926513][T23746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 792.926563][T23746] vfs_read+0x1ab/0x7f0 [ 792.926590][T23746] ? __rcu_read_unlock+0x4e/0x70 [ 792.926623][T23746] ? __fget_files+0x184/0x1c0 [ 792.926733][T23746] ? mutex_lock+0x57/0x90 [ 792.926755][T23746] ksys_read+0xdc/0x1a0 [ 792.926779][T23746] __x64_sys_read+0x40/0x50 [ 792.926801][T23746] x64_sys_call+0x2889/0x3000 [ 792.926827][T23746] do_syscall_64+0xc0/0x2a0 [ 792.927019][T23746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.927041][T23746] RIP: 0033:0x7f548e42b78e [ 792.927057][T23746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 792.927075][T23746] RSP: 002b:00007f548cea5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 792.927098][T23746] RAX: ffffffffffffffda RBX: 00007f548cea66c0 RCX: 00007f548e42b78e [ 792.927194][T23746] RDX: 000000000000000f RSI: 00007f548cea60a0 RDI: 0000000000000003 [ 792.927207][T23746] RBP: 00007f548cea6090 R08: 0000000000000000 R09: 0000000000000000 [ 792.927221][T23746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.927234][T23746] R13: 00007f548e6e6128 R14: 00007f548e6e6090 R15: 00007ffcc2dfb2d8 [ 792.927265][T23746] [ 793.176373][T23749] loop0: detected capacity change from 0 to 512 [ 793.222068][T23749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.236294][T23749] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 793.320111][ T29] audit: type=1400 audit(1770382523.662:6518): avc: denied { read } for pid=23760 comm="syz.5.17995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 793.356888][T23763] sctp: [Deprecated]: syz.4.17996 (pid 23763) Use of int in max_burst socket option deprecated. [ 793.356888][T23763] Use struct sctp_assoc_value instead [ 793.375284][T22999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.422847][T23765] loop1: detected capacity change from 0 to 4096 [ 793.456638][T23765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.478397][T23765] program syz.1.17998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 793.510729][T23775] veth1_to_bond: entered allmulticast mode [ 793.541877][T23776] program syz.1.17998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 793.583610][T23776] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 793.717692][T23779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.726430][T23779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.740653][T23779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.750093][T23779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.837936][T23774] veth1_to_bond: left allmulticast mode [ 793.905981][T23788] FAULT_INJECTION: forcing a failure. [ 793.905981][T23788] name failslab, interval 1, probability 0, space 0, times 0 [ 793.924278][T23788] CPU: 0 UID: 0 PID: 23788 Comm: syz.3.18003 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 793.924300][T23788] Tainted: [W]=WARN [ 793.924317][T23788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 793.924325][T23788] Call Trace: [ 793.924329][T23788] [ 793.924335][T23788] __dump_stack+0x1d/0x30 [ 793.924362][T23788] dump_stack_lvl+0x95/0xd0 [ 793.924416][T23788] dump_stack+0x15/0x1b [ 793.924430][T23788] should_fail_ex+0x263/0x280 [ 793.924492][T23788] should_failslab+0x8c/0xb0 [ 793.924507][T23788] kmem_cache_alloc_noprof+0x68/0x490 [ 793.924521][T23788] ? getname_kernel+0x3c/0x1f0 [ 793.924540][T23788] getname_kernel+0x3c/0x1f0 [ 793.924595][T23788] start_creating_path+0x25/0x130 [ 793.924811][T23788] unix_bind+0x22a/0xb90 [ 793.924829][T23788] __sys_bind+0x1d0/0x290 [ 793.924850][T23788] __x64_sys_bind+0x3f/0x50 [ 793.924897][T23788] x64_sys_call+0x2ceb/0x3000 [ 793.924913][T23788] do_syscall_64+0xc0/0x2a0 [ 793.925597][T23788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.925625][T23788] RIP: 0033:0x7fbe3c16aeb9 [ 793.925643][T23788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.925656][T23788] RSP: 002b:00007fbe3abc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 793.925670][T23788] RAX: ffffffffffffffda RBX: 00007fbe3c3e5fa0 RCX: 00007fbe3c16aeb9 [ 793.925693][T23788] RDX: 000000000000006e RSI: 0000200000000000 RDI: 0000000000000003 [ 793.925705][T23788] RBP: 00007fbe3abc7090 R08: 0000000000000000 R09: 0000000000000000 [ 793.925717][T23788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.925769][T23788] R13: 00007fbe3c3e6038 R14: 00007fbe3c3e5fa0 R15: 00007ffdac14c808 [ 793.925789][T23788] [ 794.223637][T22212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.303348][T23802] 9pnet_fd: Insufficient options for proto=fd [ 794.368928][T23804] loop0: detected capacity change from 0 to 512 [ 794.393485][T23804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.406499][T23804] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 794.494900][T22999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.531608][ T29] audit: type=1400 audit(1770382524.872:6519): avc: denied { map } for pid=23809 comm="syz.0.18011" path="pipe:[188869]" dev="pipefs" ino=188869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 794.672162][T23819] bond1 (unregistering): Released all slaves [ 794.718083][T23821] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18015'. [ 794.753311][T23827] FAULT_INJECTION: forcing a failure. [ 794.753311][T23827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.768557][T23827] CPU: 0 UID: 0 PID: 23827 Comm: syz.0.18017 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 794.768593][T23827] Tainted: [W]=WARN [ 794.768651][T23827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 794.768665][T23827] Call Trace: [ 794.768672][T23827] [ 794.768681][T23827] __dump_stack+0x1d/0x30 [ 794.768745][T23827] dump_stack_lvl+0x95/0xd0 [ 794.768766][T23827] dump_stack+0x15/0x1b [ 794.768788][T23827] should_fail_ex+0x263/0x280 [ 794.768899][T23827] should_fail+0xb/0x20 [ 794.768968][T23827] should_fail_usercopy+0x1a/0x20 [ 794.769002][T23827] _copy_to_user+0x20/0xa0 [ 794.769027][T23827] simple_read_from_buffer+0xb5/0x130 [ 794.769114][T23827] proc_fail_nth_read+0x10e/0x150 [ 794.769146][T23827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 794.769174][T23827] vfs_read+0x1ab/0x7f0 [ 794.769230][T23827] ? __rcu_read_unlock+0x4e/0x70 [ 794.769337][T23827] ? __fget_files+0x184/0x1c0 [ 794.769358][T23827] ? mutex_lock+0x57/0x90 [ 794.769380][T23827] ksys_read+0xdc/0x1a0 [ 794.769399][T23827] __x64_sys_read+0x40/0x50 [ 794.769461][T23827] x64_sys_call+0x2889/0x3000 [ 794.769489][T23827] do_syscall_64+0xc0/0x2a0 [ 794.769519][T23827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.769539][T23827] RIP: 0033:0x7fa0889cb78e [ 794.769596][T23827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 794.769616][T23827] RSP: 002b:00007fa08745efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 794.769641][T23827] RAX: ffffffffffffffda RBX: 00007fa08745f6c0 RCX: 00007fa0889cb78e [ 794.769657][T23827] RDX: 000000000000000f RSI: 00007fa08745f0a0 RDI: 000000000000000f [ 794.769715][T23827] RBP: 00007fa08745f090 R08: 0000000000000000 R09: 0000000000000000 [ 794.769728][T23827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.769742][T23827] R13: 00007fa088c86038 R14: 00007fa088c85fa0 R15: 00007fff5d0ac038 [ 794.769765][T23827] [ 795.060972][T23829] tap0: tun_chr_ioctl cmd 1074025677 [ 795.067130][T23829] tap0: linktype set to 768 [ 795.110321][T23836] loop1: detected capacity change from 0 to 1024 [ 795.119496][T23836] EXT4-fs: Ignoring removed orlov option [ 795.155895][T23836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.174215][T23841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18021'. [ 795.189979][T23836] netlink: 'syz.1.18020': attribute type 39 has an invalid length. [ 795.242617][T23847] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 795.273512][T22212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.389700][T23860] FAULT_INJECTION: forcing a failure. [ 795.389700][T23860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.404275][T23860] CPU: 0 UID: 0 PID: 23860 Comm: syz.4.18029 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 795.404306][T23860] Tainted: [W]=WARN [ 795.404313][T23860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 795.404395][T23860] Call Trace: [ 795.404403][T23860] [ 795.404414][T23860] __dump_stack+0x1d/0x30 [ 795.404441][T23860] dump_stack_lvl+0x95/0xd0 [ 795.404498][T23860] dump_stack+0x15/0x1b [ 795.404569][T23860] should_fail_ex+0x263/0x280 [ 795.404602][T23860] should_fail+0xb/0x20 [ 795.404709][T23860] should_fail_usercopy+0x1a/0x20 [ 795.404820][T23860] _copy_to_user+0x20/0xa0 [ 795.404840][T23860] simple_read_from_buffer+0xb5/0x130 [ 795.404875][T23860] proc_fail_nth_read+0x10e/0x150 [ 795.404975][T23860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 795.405005][T23860] vfs_read+0x1ab/0x7f0 [ 795.405022][T23860] ? __schedule+0x82d/0xc90 [ 795.405082][T23860] ? __rcu_read_unlock+0x4e/0x70 [ 795.405121][T23860] ? __fget_files+0x184/0x1c0 [ 795.405146][T23860] ? mutex_lock+0x57/0x90 [ 795.405168][T23860] ksys_read+0xdc/0x1a0 [ 795.405191][T23860] __x64_sys_read+0x40/0x50 [ 795.405209][T23860] x64_sys_call+0x2889/0x3000 [ 795.405234][T23860] do_syscall_64+0xc0/0x2a0 [ 795.405268][T23860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.405330][T23860] RIP: 0033:0x7f548e42b78e [ 795.405347][T23860] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 795.405383][T23860] RSP: 002b:00007f548cec6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 795.405468][T23860] RAX: ffffffffffffffda RBX: 00007f548cec76c0 RCX: 00007f548e42b78e [ 795.405485][T23860] RDX: 000000000000000f RSI: 00007f548cec70a0 RDI: 0000000000000004 [ 795.405501][T23860] RBP: 00007f548cec7090 R08: 0000000000000000 R09: 0000000000000000 [ 795.405517][T23860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.405532][T23860] R13: 00007f548e6e6038 R14: 00007f548e6e5fa0 R15: 00007ffcc2dfb2d8 [ 795.405551][T23860] [ 795.764459][T23869] 9pnet_fd: Insufficient options for proto=fd [ 795.856166][T29258] udevd[29258]: symlink '../../loop5' '/dev/disk/by-diskseq/2069.tmp-b7:5' failed: Read-only file system [ 795.902222][T29258] udevd[29258]: symlink '../../loop5' '/dev/disk/by-diskseq/2069.tmp-b7:5' failed: Read-only file system [ 795.925560][T23878] set_capacity_and_notify: 1 callbacks suppressed [ 795.925574][T23878] loop5: detected capacity change from 0 to 1024 [ 795.950811][T23878] EXT4-fs: Ignoring removed mblk_io_submit option [ 795.961842][T29258] udevd[29258]: symlink '../../loop5' '/dev/disk/by-diskseq/2091.tmp-b7:5' failed: Read-only file system [ 795.975247][T29258] udevd[29258]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 795.989193][T29258] udevd[29258]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:5' failed: Read-only file system [ 796.038474][T23878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 796.052410][T29258] udevd[29258]: symlink '../../loop1' '/dev/disk/by-diskseq/2090.tmp-b7:1' failed: Read-only file system [ 796.067086][T23878] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.088281][T23849] syz.3.18022 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 796.110837][T23849] CPU: 1 UID: 0 PID: 23849 Comm: syz.3.18022 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 796.110946][T23849] Tainted: [W]=WARN [ 796.110955][T23849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 796.110970][T23849] Call Trace: [ 796.110979][T23849] [ 796.110988][T23849] __dump_stack+0x1d/0x30 [ 796.111045][T23849] dump_stack_lvl+0x95/0xd0 [ 796.111069][T23849] dump_stack+0x15/0x1b [ 796.111093][T23849] dump_header+0x80/0x240 [ 796.111118][T23849] oom_kill_process+0x295/0x350 [ 796.111190][T23849] out_of_memory+0x97d/0xb80 [ 796.111219][T23849] try_charge_memcg+0x62e/0xa10 [ 796.111261][T23849] obj_cgroup_charge_pages+0x23/0xc0 [ 796.111294][T23849] __memcg_kmem_charge_page+0x9e/0x170 [ 796.111381][T23849] __alloc_frozen_pages_noprof+0x18a/0x350 [ 796.111413][T23849] alloc_pages_mpol+0xb3/0x260 [ 796.111469][T23849] alloc_pages_noprof+0x8f/0x130 [ 796.111501][T23849] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 796.111539][T23849] __kvmalloc_node_noprof+0x471/0x680 [ 796.111586][T23849] ? ip_set_alloc+0x24/0x30 [ 796.111687][T23849] ? ip_set_alloc+0x24/0x30 [ 796.111717][T23849] ? __slab_alloc+0x25/0x50 [ 796.111844][T23849] ip_set_alloc+0x24/0x30 [ 796.111874][T23849] hash_netiface_create+0x282/0x740 [ 796.111906][T23849] ? __pfx_hash_netiface_create+0x10/0x10 [ 796.112043][T23849] ip_set_create+0x3cf/0x970 [ 796.112143][T23849] ? __nla_parse+0x40/0x60 [ 796.112279][T23849] nfnetlink_rcv_msg+0x509/0x5d0 [ 796.112393][T23849] netlink_rcv_skb+0x123/0x220 [ 796.112508][T23849] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 796.112541][T23849] nfnetlink_rcv+0x167/0x1720 [ 796.112624][T23849] ? __kfree_skb+0x109/0x150 [ 796.112657][T23849] ? nlmon_xmit+0x4f/0x60 [ 796.112722][T23849] ? consume_skb+0x49/0x140 [ 796.112822][T23849] ? nlmon_xmit+0x4f/0x60 [ 796.112851][T23849] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 796.112884][T23849] ? __dev_queue_xmit+0x139a/0x1f20 [ 796.112955][T23849] ? __dev_queue_xmit+0x148/0x1f20 [ 796.112984][T23849] ? css_rstat_updated+0xbb/0x280 [ 796.113011][T23849] ? ref_tracker_free+0x37d/0x3e0 [ 796.113051][T23849] ? __netlink_deliver_tap+0x4dc/0x500 [ 796.113092][T23849] netlink_unicast+0x5c0/0x690 [ 796.113158][T23849] netlink_sendmsg+0x5c8/0x6f0 [ 796.113183][T23849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.113206][T23849] ____sys_sendmsg+0x5af/0x600 [ 796.113227][T23849] ___sys_sendmsg+0x195/0x1e0 [ 796.113323][T23849] __x64_sys_sendmsg+0xd4/0x160 [ 796.113346][T23849] x64_sys_call+0x17ba/0x3000 [ 796.113451][T23849] do_syscall_64+0xc0/0x2a0 [ 796.113528][T23849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.113554][T23849] RIP: 0033:0x7fbe3c16aeb9 [ 796.113573][T23849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.113633][T23849] RSP: 002b:00007fbe3abc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.113658][T23849] RAX: ffffffffffffffda RBX: 00007fbe3c3e5fa0 RCX: 00007fbe3c16aeb9 [ 796.113681][T23849] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000006 [ 796.113694][T23849] RBP: 00007fbe3c1d8c1f R08: 0000000000000000 R09: 0000000000000000 [ 796.113727][T23849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.113740][T23849] R13: 00007fbe3c3e6038 R14: 00007fbe3c3e5fa0 R15: 00007ffdac14c808 [ 796.113763][T23849] [ 796.113772][T23849] memory: usage 307200kB, limit 307200kB, failcnt 2021 [ 796.517259][T29258] udevd[29258]: symlink '../../loop4' '/dev/disk/by-diskseq/2089.tmp-b7:4' failed: Read-only file system [ 796.521059][T23849] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 796.584130][T29002] udevd[29002]: symlink '../../loop0' '/dev/disk/by-diskseq/2085.tmp-b7:0' failed: Read-only file system [ 796.598207][T23849] kmem: usage 306988kB, limit 9007199254740988kB, failcnt 0 [ 796.598226][T23849] Memory cgroup stats for /syz3: [ 796.598467][T23849] cache 4096 [ 796.611664][T23888] veth1_to_bond: entered allmulticast mode [ 796.621711][T23849] rss 180224 [ 796.654996][T23849] shmem 0 [ 796.659177][T23849] mapped_file 4096 [ 796.665356][T23849] dirty 0 [ 796.669675][T23849] writeback 0 [ 796.674054][T23849] workingset_refault_anon 51 [ 796.680919][T23849] workingset_refault_file 63 [ 796.685955][T23849] swap 0 [ 796.689244][T23849] swapcached 0 [ 796.697654][T23849] pgpgin 750553 [ 796.702087][T23849] pgpgout 750504 [ 796.706994][T23849] pgfault 823214 [ 796.712502][T23849] pgmajfault 47 [ 796.717863][T23849] inactive_anon 32768 [ 796.722339][T23849] active_anon 147456 [ 796.727696][T23849] inactive_file 0 [ 796.732700][T23849] active_file 20480 [ 796.737561][T23849] unevictable 0 [ 796.741828][T23849] hierarchical_memory_limit 314572800 [ 796.749357][T23849] hierarchical_memsw_limit 9223372036854771712 [ 796.758161][T23849] total_cache 4096 [ 796.758280][ T2989] ================================================================== [ 796.763221][T23849] total_rss 180224 [ 796.774601][ T2989] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 796.779497][T23849] total_shmem 0 [ 796.786718][ T2989] [ 796.786731][ T2989] write to 0xffffffff86b06480 of 88 bytes by task 23849 on cpu 1: [ 796.786749][ T2989] prb_reserve+0x6e6/0xae0 [ 796.790598][T23849] total_mapped_file 4096 [ 796.793844][ T2989] vprintk_store+0x54a/0x910 [ 796.803520][T23849] total_dirty 0 [ 796.809055][ T2989] vprintk_emit+0x1a4/0x600 [ 796.813589][T23849] total_writeback 0 [ 796.818908][ T2989] vprintk_default+0x26/0x30 [ 796.823445][T23849] total_workingset_refault_anon 51 [ 796.828653][ T2989] vprintk+0x1d/0x30 [ 796.833538][T23849] total_workingset_refault_file 63 [ 796.838761][ T2989] _printk+0x79/0xa0 [ 796.845649][T23849] total_swap 0 [ 796.853290][ T2989] seq_buf_do_printk+0x113/0x1a0 [ 796.853331][ T2989] mem_cgroup_print_oom_meminfo+0x17d/0x260 [ 796.853357][ T2989] dump_header+0xa2/0x240 [ 796.853376][ T2989] oom_kill_process+0x295/0x350 [ 796.863407][T23849] total_swapcached 0 [ 796.869454][ T2989] out_of_memory+0x97d/0xb80 [ 796.874863][T23849] total_pgpgin 750553 [ 796.881591][ T2989] try_charge_memcg+0x62e/0xa10 [ 796.881621][ T2989] obj_cgroup_charge_pages+0x23/0xc0 [ 796.888861][T23849] total_pgpgout 750504 [ 796.893960][ T2989] __memcg_kmem_charge_page+0x9e/0x170 [ 796.893995][ T2989] __alloc_frozen_pages_noprof+0x18a/0x350 [ 796.900637][T23849] total_pgfault 823223 [ 796.904461][ T2989] alloc_pages_mpol+0xb3/0x260 [ 796.904493][ T2989] alloc_pages_noprof+0x8f/0x130 [ 796.909415][T23849] total_pgmajfault 47 [ 796.913738][ T2989] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 796.913774][ T2989] __kvmalloc_node_noprof+0x471/0x680 [ 796.919161][T23849] total_inactive_anon 32768 [ 796.926174][ T2989] ip_set_alloc+0x24/0x30 [ 796.926217][ T2989] hash_netiface_create+0x282/0x740 [ 796.931688][T23849] total_active_anon 147456 [ 796.939022][ T2989] ip_set_create+0x3cf/0x970 [ 796.945607][T23849] total_inactive_file 0 [ 796.950431][ T2989] nfnetlink_rcv_msg+0x509/0x5d0 [ 796.955408][T23849] total_active_file 20480 [ 796.960621][ T2989] netlink_rcv_skb+0x123/0x220 [ 796.960661][ T2989] nfnetlink_rcv+0x167/0x1720 [ 796.964895][T23849] total_unevictable 0 [ 796.970858][ T2989] netlink_unicast+0x5c0/0x690 [ 796.970895][ T2989] netlink_sendmsg+0x5c8/0x6f0 [ 796.976427][T23849] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 796.981261][ T2989] ____sys_sendmsg+0x5af/0x600 [ 796.981283][ T2989] ___sys_sendmsg+0x195/0x1e0 [ 796.986312][T23849] ,cpuset=/ [ 796.991944][ T2989] __x64_sys_sendmsg+0xd4/0x160 [ 796.996376][T23849] ,mems_allowed=0 [ 797.001030][ T2989] x64_sys_call+0x17ba/0x3000 [ 797.001065][ T2989] do_syscall_64+0xc0/0x2a0 [ 797.001092][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.001113][ T2989] [ 797.006371][T23849] ,oom_memcg=/syz3 [ 797.012354][ T2989] read to 0xffffffff86b06480 of 8 bytes by task 2989 on cpu 0: [ 797.016884][T23849] ,task_memcg= [ 797.022701][ T2989] _prb_read_valid+0x383/0x950 [ 797.028301][T23849] /syz3 [ 797.032766][ T2989] prb_read_valid+0x3c/0x60 [ 797.037647][T23849] ,task=syz.3.18022,pid=23848,uid=0 [ 797.042603][ T2989] syslog_print+0x258/0x560 [ 797.042646][ T2989] do_syslog+0x52b/0x7f0 [ 797.051485][T23849] Memory cgroup out of memory: Killed process 23849 (syz.3.18022) total-vm:94012kB, anon-rss:1320kB, file-rss:21896kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 797.058708][ T2989] __x64_sys_syslog+0x41/0x50 [ 797.167847][ T2989] x64_sys_call+0x27ce/0x3000 [ 797.174279][ T2989] do_syscall_64+0xc0/0x2a0 [ 797.179786][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.186310][ T2989] [ 797.188760][ T2989] value changed: 0x0000000000003404 -> 0x0000000000005404 [ 797.196647][ T2989] [ 797.199045][ T2989] Reported by Kernel Concurrency Sanitizer on: [ 797.205668][ T2989] CPU: 0 UID: 0 PID: 2989 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 797.217245][ T2989] Tainted: [W]=WARN [ 797.221872][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 797.232004][ T2989] ================================================================== [ 797.328472][T23885] veth1_to_bond: left allmulticast mode [ 797.345953][T29258] udevd[29258]: symlink '../../loop3' '/dev/disk/by-diskseq/2086.tmp-b7:3' failed: Read-only file system [ 797.380197][T16726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 797.413323][T29002] udevd[29002]: symlink '../../loop5' '/dev/disk/by-diskseq/2091.tmp-b7:5' failed: Read-only file system [ 797.429950][T23892] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18038'.