last executing test programs: 11m21.485760566s ago: executing program 32 (id=1568): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) close(0x4) 11m0.984131349s ago: executing program 33 (id=1685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) writev(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000240)}], 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 10m54.998574513s ago: executing program 34 (id=1734): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 10m35.030670569s ago: executing program 35 (id=1945): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 10m33.633476872s ago: executing program 36 (id=1960): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x8, &(0x7f0000000000), 0x4) 10m29.604432753s ago: executing program 37 (id=1978): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 6m52.503956654s ago: executing program 6 (id=4253): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001780)=[{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}], 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 6m49.547203739s ago: executing program 6 (id=4272): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000001600010000000000000000000018c8d0cd886eb941dc37d4f6cd6e76fabfbfaa26dbd7586c66"], 0x78}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x1, 0xbd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = memfd_create(0x0, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(r5, &(0x7f0000000940)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x66, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x2405, 0xff, 0x0, 0x4, 0x21cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000aa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) writev(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000180)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@init_itable}, {@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@user_xattr}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x9, r6, 0xb) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34c"], &(0x7f0000000100)='GPL\x00'}, 0x94) openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0xc0000, 0x0) 6m47.754431113s ago: executing program 6 (id=4283): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001780)=[{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}], 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 6m46.438041442s ago: executing program 9 (id=4295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10140, &(0x7f0000000280)={0xa, 0x4e21, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 6m44.029799177s ago: executing program 9 (id=4314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10140, &(0x7f0000000280)={0xa, 0x4e21, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 6m43.839909817s ago: executing program 3 (id=4317): prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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"/4195, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x2000000000006) 6m42.978386843s ago: executing program 6 (id=4320): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000000440), 0x3, 0x44b, &(0x7f0000001a40)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x16b142, 0x1e8) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x407c00, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x1000000}]) 6m42.07390077s ago: executing program 6 (id=4323): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 6m41.822629263s ago: executing program 3 (id=4326): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x9faf, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x60, 0x8}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000079100800000000007b0a00ff0000000095007400000000009f7c9177ee43b0f7973ff49cb471b1fa3344ec1d7b00afe5fc906b357720c8bff70a48b41ae137826fc445bba69cddda9242e904"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, 0x0) 6m41.001616016s ago: executing program 9 (id=4328): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@noload}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") open$dir(0x0, 0x300, 0x8) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet6(0xa, 0x80802, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clock_getres(0x7ffffffff000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)}], 0x1}}, {}], 0x3, 0x1c000) 6m40.763294659s ago: executing program 6 (id=4329): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x108}, {&(0x7f0000000fc0)="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", 0x1de}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m40.7261308s ago: executing program 38 (id=4329): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x108}, {&(0x7f0000000fc0)="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", 0x1de}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m40.687235803s ago: executing program 3 (id=4331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r5) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x8, 0xf}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 6m40.319923602s ago: executing program 3 (id=4333): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000000440), 0x3, 0x44b, &(0x7f0000001a40)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x16b142, 0x1e8) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x407c00, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x1000000}]) 6m39.860813616s ago: executing program 9 (id=4334): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000000440), 0x3, 0x44b, &(0x7f0000001a40)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x16b142, 0x1e8) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x407c00, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x1000000}]) 6m39.750765132s ago: executing program 3 (id=4336): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf251500000008000300", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x2000c894}, 0x4010084) 6m39.354494492s ago: executing program 3 (id=4338): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6m39.354321772s ago: executing program 39 (id=4338): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6m39.340266303s ago: executing program 9 (id=4340): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 6m39.02182949s ago: executing program 9 (id=4341): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 6m38.974041343s ago: executing program 40 (id=4341): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 5m25.391471398s ago: executing program 1 (id=4880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5m25.126310261s ago: executing program 1 (id=4883): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x33, 0x0, 0x28) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 5m22.910417717s ago: executing program 1 (id=4896): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x33, 0x0, 0x28) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 5m22.769219715s ago: executing program 1 (id=4898): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 5m22.447790291s ago: executing program 1 (id=4905): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5m19.200280531s ago: executing program 1 (id=4914): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 5m19.167576453s ago: executing program 41 (id=4914): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 1m29.798473368s ago: executing program 5 (id=6463): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) 1m29.710274092s ago: executing program 5 (id=6465): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x40, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf8}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x38}}, 0x10) 1m28.829620539s ago: executing program 5 (id=6481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa377, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 1m28.585298241s ago: executing program 5 (id=6484): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) r0 = syz_clone(0x20000400, 0x0, 0x3b54, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x2, 0x553a0000, 0x3, 0x3, 0x6, 0xadf}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) stat(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200088b, &(0x7f0000000040), 0x0, 0x56b, &(0x7f0000000680)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) (async) syz_clone(0x20000400, 0x0, 0x3b54, 0x0, 0x0, 0x0) (async) syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') (async) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x2, 0x553a0000, 0x3, 0x3, 0x6, 0xadf}) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) stat(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200088b, &(0x7f0000000040), 0x0, 0x56b, &(0x7f0000000680)="$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") (async) 1m27.174295245s ago: executing program 5 (id=6493): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) 1m26.532746979s ago: executing program 5 (id=6500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x8040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200000000000000000000000000000000000000f3ffffff000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES8, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xe, 0x1}, {0x10, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44004) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x400, 0xffffffff, 0x7}, 0x10) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), 0x0, 0xfe37, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYBLOB="b2312681a36235c6a5300fba1618c49fd1fdc65aa0c9bfec14a472147332bf0855f9e10c00ce507b92c885526228566fab2bc1d5cf73cc601f24ee2037fd521859574c01f4b144120b9c890dfe180a56e78371626719953996e96c81b26f90ef93541bdcd99e6e3bb58b6c7d3eef16cf94ef7ab4fd1b08a1da2bde3206b02c17c77dd745"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x9a0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0xb7, 0x0, 0x0, 0xfffffffa, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000080)=0x1000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 1m26.420871385s ago: executing program 42 (id=6500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x8040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200000000000000000000000000000000000000f3ffffff000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES8, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xe, 0x1}, {0x10, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44004) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x400, 0xffffffff, 0x7}, 0x10) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), 0x0, 0xfe37, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYBLOB="b2312681a36235c6a5300fba1618c49fd1fdc65aa0c9bfec14a472147332bf0855f9e10c00ce507b92c885526228566fab2bc1d5cf73cc601f24ee2037fd521859574c01f4b144120b9c890dfe180a56e78371626719953996e96c81b26f90ef93541bdcd99e6e3bb58b6c7d3eef16cf94ef7ab4fd1b08a1da2bde3206b02c17c77dd745"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x9a0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0xb7, 0x0, 0x0, 0xfffffffa, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000080)=0x1000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 4.223639449s ago: executing program 4 (id=7191): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x40}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r2, @ANYBLOB="40002f800c0002000000000000000000080001000000000028"], 0x5c}}, 0x0) (fail_nth: 1) 4.095865896s ago: executing program 2 (id=7192): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) 4.051326168s ago: executing program 4 (id=7194): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) 4.047692689s ago: executing program 4 (id=7195): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x19d01, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.915131186s ago: executing program 2 (id=7197): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) 3.898370236s ago: executing program 2 (id=7198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.388344635s ago: executing program 0 (id=7199): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0xfe, 0x1, @scatter={0x0, 0x5c00, 0x0}, &(0x7f00000004c0)="851666ce20db96ab0c7d83e114e7ef1762249711e34f4ce12c6afeb7e6d77bd3b97644edd8e3a3b71fcd006b6237766e151f344afb2306455034ea7a31b1a48724e372a5a8a9ca040f5831f2eb11842a4b8ec9064fa439440f374355d9af754314ce445ac9bea7fac19c3ac58a131895c378ec497ffdf9a82032d9fa225397b92d2e2193de6fe2f6b6c0bd0f80de3dc72890b6900c5b86752639bf37ab325c16dc2f3d4d01b4c3b71ebbfd6fc9b316f76a07144538506a68ae00df22f2fa9cbb0c9fa73c1dcf3eb2eb4fe3534fcee01e9ca0c66f27b8e05e7545cbc3511b3d086f51d58f9acd52eab032468cc8075451bcd5c081a8db84ff509a2f874daf", 0x0, 0x10, 0x5bb727690d5f0ff6, 0x0, 0x0}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 2.327263799s ago: executing program 0 (id=7200): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x80805, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = dup(r0) r3 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xe4f8, 0x40, 0x801000b, 0xc1, 0x0, r2}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0xc3) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x28000, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 2.278860521s ago: executing program 0 (id=7201): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 1.692395992s ago: executing program 4 (id=7202): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) 1.664898123s ago: executing program 0 (id=7203): perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x5, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f00000000c0)={0xffffffffffffffff, 0x80000000008e59, 0x0, 0x20000003}) close_range(r2, r0, 0x0) 1.661774553s ago: executing program 4 (id=7204): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) (fail_nth: 1) 1.615268476s ago: executing program 7 (id=7205): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x20000) fsetxattr$security_selinux(r1, &(0x7f0000002280), &(0x7f00000022c0)='system_u:object_r:hostname_exec_t:s0\x00', 0x25, 0x2) close(r0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xfb, 0x4, 0x9, 0x9, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x41, 0x8000000000000001, 0x6, 0x1, 0x7, 0xef6, 0x7, 0x0, 0x8, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x99141000) 1.614874776s ago: executing program 0 (id=7206): creat(0x0, 0x18) socketpair(0x1, 0x20000000000001, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x5, 0x38, 0x20f}) perf_event_open(0x0, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0xa) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f0000000c00)="$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") r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x14, 0x6400, 0x0, 0x3) 1.395236157s ago: executing program 2 (id=7207): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) 1.372916748s ago: executing program 7 (id=7208): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) 1.33832369s ago: executing program 7 (id=7209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x10) (fail_nth: 1) 1.33792684s ago: executing program 4 (id=7210): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a400034003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = getpid() fcntl$lock(r9, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x10000000000000, r10}) ioctl$sock_inet_SIOCGIFPFLAGS(r9, 0x8935, &(0x7f0000000200)={'veth0_to_bridge\x00'}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xc1, &(0x7f00000002c0)={0x9a, 0x8, 0x9, 0x7}, 0x8, 0x1ec, 0xb, 0x0, 0x313, 0x3, 0x0}) 1.331208281s ago: executing program 2 (id=7211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) 1.330749181s ago: executing program 8 (id=7212): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x80805, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = dup(r0) r3 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xe4f8, 0x40, 0x801000b, 0xc1, 0x0, r2}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0xc3) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x28000, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 1.107305732s ago: executing program 2 (id=7213): syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030000380"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = memfd_secret(0x80000) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001380)={@in6={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}}, 0x0, 0x0, 0x24, 0x0, "51c0c3a9bf1d002264688a5bae666f474e7c542c396c2caf9b1c74864aa2e1b55ce3e927bad1eb031413462bd67b6e9dde7b592d647fe9d03be16d399bb9e9db3751e35cbce39c1a9e749a082deee177"}, 0xd8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x1e0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000000000000000000000000000010500000010000000000000000000000b02"], 0x0, 0x4e}, 0x20) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x33, 0x1, 0x4, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11feb0, 0x1002, 0x20da, 0xa, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xb) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0xb3c13000) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_read_part_table(0x104d, &(0x7f0000000300)="$eJzszzEOAUEYBeA3LBsaF1E7gws4z8Z1HMkBlFqFxMhgo1KKSL6vmGTezPuTP/zUOvOkzyKT531Ill32r9dL+Vgsp3Zuu6yOY9RGzJJpKf07qOfNtY5aL7XmVofHh93hi6sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN+4BwAA//90WBYL") 1.106732632s ago: executing program 7 (id=7214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) (async) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x90) getdents64(r5, &(0x7f0000000300)=""/238, 0xee) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x2c, 0x28, 0x400, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {0xfff2, 0xfff3}, {0xffff, 0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ff}]}, 0x2c}}, 0xa193e95bd245e784) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r8) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) clock_adjtime(0xffffffd3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5e6f8a6df01f948e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x1a49, 0xf2f3}, 0x42, 0xc8, 0x0, 0x1, 0x65, 0x0, 0x211, 0x0, 0x2, 0x0, 0x3ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) (async) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffff11}, 0x0) write$cgroup_subtree(r12, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) io_uring_setup(0x89a, &(0x7f0000000040)={0x0, 0x3cb1, 0x800, 0x0, 0x10d}) socket$packet(0x11, 0x3, 0x300) 1.106369472s ago: executing program 8 (id=7215): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2c}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x70bd28, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0xc4, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@llc={0x4, {@snap={0xaa, 0xab, "a5", "9162c3", 0x9000, "2b8a388f6f22d2e17b8d9a3121684a9b835e1b8aa336032fce4d82dce39ab413844ab3949f9f08044480c6ed318d9c19daba14299834f633b4df4a3468d9c7ca7f2245ebb09403405dd05b7dce8123e424c982c27a255679353fe55d068c0c3a527bfc8a9f2d58847eecdd2c08ce23334bc2ad8eed71619e705bab560d5ddb996c95cfbec52fb529be7a7299a909ee81acd7407d69446cd4fea79901745e431f5aa9da72e38556d13e94dfb81500"}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000028ffbb846c52f4fcc2be010101ac1414004e220000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0400ca90781000"], 0x0) 1.031557876s ago: executing program 8 (id=7216): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4485df2500"/20, @ANYRES32=0x0, @ANYBLOB="715e0300231a0500240012800b00010062726964676500001400028008000500010000000800010012000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) flistxattr(0xffffffffffffffff, &(0x7f0000000040)=""/178, 0xb2) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4485df2500"/20, @ANYRES32=0x0, @ANYBLOB="715e0300231a0500240012800b00010062726964676500001400028008000500010000000800010012000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) flistxattr(0xffffffffffffffff, &(0x7f0000000040)=""/178, 0xb2) (async) 820.318417ms ago: executing program 8 (id=7217): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) (fail_nth: 1) 819.970457ms ago: executing program 7 (id=7218): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 201.80913ms ago: executing program 8 (id=7219): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) 15.143449ms ago: executing program 0 (id=7220): unshare(0x26020400) (async, rerun: 64) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10e210, 0x10004, 0x20da, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0xdc, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xe}}, [@TCA_RATE={0x0, 0x5, {0xd, 0x81}}]}, 0xdc}}, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xfcf1, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) (async) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe44b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_config_ext={0x0, 0x3fff7ffa}, 0x5400, 0x34, 0x41a1bd76, 0x9, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, 0x0) (rerun: 64) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) (async) r7 = shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x4000) (async) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x7}, 0x0, 0x0, 0x100000, 0x3, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (rerun: 32) socket$nl_audit(0x10, 0x3, 0x9) 4.52445ms ago: executing program 7 (id=7221): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x1, 0x7}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000010000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9a}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xd, &(0x7f0000000180)=""/13, 0x41100, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x8, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000280)=[0x1], &(0x7f00000002c0)=[{0x5, 0x29647637, 0xe, 0xb}, {0x1, 0x2, 0x5, 0x1}, {0x2, 0x4, 0x3, 0xb}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r2, 0xd, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="09000000e1ffffff000007000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000300"/28], 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r5, r3, 0x20, 0x2028, 0x0, @void, @void, @value=r6, @void, r4}, 0x20) 0s ago: executing program 8 (id=7222): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40) kernel console output (not intermixed with test programs): dv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 790.834627][T23784] loop7: detected capacity change from 0 to 512 [ 791.689314][T12731] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 792.704080][T12731] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 793.336440][T12731] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 793.484428][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1061.tmp-b7:7' failed: Read-only file system [ 793.507101][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1061.tmp-b7:7' failed: Read-only file system [ 793.518756][T23211] udevd[23211]: symlink '../../loop8' '/dev/disk/by-diskseq/1059.tmp-b7:8' failed: Read-only file system [ 793.534816][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1061.tmp-b7:7' failed: Read-only file system [ 793.536785][ T28] audit: type=1400 audit(1776703958.630:1373): avc: denied { connect } for pid=23797 comm="syz.2.6717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 793.572590][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1062.tmp-b7:7' failed: Read-only file system [ 793.611014][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1059.tmp-b7:8' failed: Read-only file system [ 793.705215][T23810] syzkaller0: entered promiscuous mode [ 793.719024][T23810] syzkaller0: entered allmulticast mode [ 793.871288][T12731] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 793.909415][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1062.tmp-b7:7' failed: Read-only file system [ 794.399253][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 794.812832][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1062.tmp-b7:7' failed: Read-only file system [ 794.832778][T23823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=23823 comm=syz.7.6730 [ 794.863535][T23823] tmpfs: Bad value for 'mpol' [ 794.928989][T13356] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 795.459005][T13356] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 795.978981][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 796.017538][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1062.tmp-b7:7' failed: Read-only file system [ 796.042480][T23211] udevd[23211]: symlink '../../loop8' '/dev/disk/by-diskseq/1059.tmp-b7:8' failed: Read-only file system [ 796.346966][T23856] loop8: detected capacity change from 0 to 512 [ 796.356027][T23856] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 796.565546][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 796.599373][T23856] EXT4-fs (loop8): 1 truncate cleaned up [ 796.662900][T23856] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 797.367963][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 797.893580][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 798.418978][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 798.625315][T18656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.630188][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1062.tmp-b7:7' failed: Read-only file system [ 798.663520][T23461] udevd[23461]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system [ 798.678898][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1063.tmp-b7:8' failed: Read-only file system [ 798.692550][ T28] audit: type=1400 audit(1776703963.790:1374): avc: denied { ioctl } for pid=23878 comm="syz.8.6749" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=75136 ioctlcmd=0x4b63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 798.748044][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1063.tmp-b7:8' failed: Read-only file system [ 798.782727][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1064.tmp-b7:8' failed: Read-only file system [ 798.799656][T23888] FAULT_INJECTION: forcing a failure. [ 798.799656][T23888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.815512][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1064.tmp-b7:8' failed: Read-only file system [ 798.827347][T23888] CPU: 0 UID: 0 PID: 23888 Comm: syz.4.6754 Not tainted syzkaller #0 PREEMPT(full) [ 798.827380][T23888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 798.827396][T23888] Call Trace: [ 798.827476][T23888] [ 798.827488][T23888] __dump_stack+0x1d/0x30 [ 798.827525][T23888] dump_stack_lvl+0x95/0xd0 [ 798.827553][T23888] dump_stack+0x15/0x1b [ 798.827579][T23888] should_fail_ex+0x263/0x280 [ 798.827683][T23888] should_fail+0xb/0x20 [ 798.827709][T23888] should_fail_usercopy+0x1a/0x20 [ 798.827796][T23888] _copy_from_user+0x1c/0xb0 [ 798.827821][T23888] ___sys_sendmsg+0xc1/0x1e0 [ 798.827874][T23888] __x64_sys_sendmsg+0xd4/0x160 [ 798.827929][T23888] x64_sys_call+0x194c/0x3020 [ 798.827998][T23888] do_syscall_64+0x12c/0x3b0 [ 798.828050][T23888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.828077][T23888] RIP: 0033:0x7f4244efc819 [ 798.828138][T23888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.828155][T23888] RSP: 002b:00007f4243957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.828180][T23888] RAX: ffffffffffffffda RBX: 00007f4245175fa0 RCX: 00007f4244efc819 [ 798.828195][T23888] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 798.828234][T23888] RBP: 00007f4243957090 R08: 0000000000000000 R09: 0000000000000000 [ 798.828247][T23888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.828260][T23888] R13: 00007f4245176038 R14: 00007f4245175fa0 R15: 00007fff7b637cc8 [ 798.828283][T23888] [ 799.002509][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 799.114714][T23902] loop7: detected capacity change from 0 to 512 [ 799.147044][T23903] udevd[23903]: symlink '../../loop7' '/dev/disk/by-diskseq/1065.tmp-b7:7' failed: Read-only file system [ 799.160575][T23902] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 799.173204][T23902] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 799.196512][T23903] udevd[23903]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 799.211349][T23903] udevd[23903]: symlink '../../loop7' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:7' failed: Read-only file system [ 799.244143][T23285] udevd[23285]: symlink '../../loop7' '/dev/disk/by-diskseq/1065.tmp-b7:7' failed: Read-only file system [ 799.572542][T12731] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 799.618378][T23890] syz.8.6756 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 799.632806][T23890] CPU: 1 UID: 0 PID: 23890 Comm: syz.8.6756 Not tainted syzkaller #0 PREEMPT(full) [ 799.632837][T23890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 799.632849][T23890] Call Trace: [ 799.632856][T23890] [ 799.632865][T23890] __dump_stack+0x1d/0x30 [ 799.632963][T23890] dump_stack_lvl+0x95/0xd0 [ 799.633040][T23890] dump_stack+0x15/0x1b [ 799.633070][T23890] dump_header+0x80/0x240 [ 799.633096][T23890] oom_kill_process+0x295/0x350 [ 799.633118][T23890] out_of_memory+0x97d/0xb80 [ 799.633175][T23890] try_charge_memcg+0x62f/0xa10 [ 799.633218][T23890] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 799.633324][T23890] __alloc_frozen_pages_noprof+0x18a/0x350 [ 799.633356][T23890] alloc_pages_mpol+0xb3/0x260 [ 799.633456][T23890] ? mod_lruvec_state+0xe0/0xf0 [ 799.633482][T23890] alloc_pages_noprof+0x8f/0x140 [ 799.633508][T23890] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 799.633560][T23890] __kvmalloc_node_noprof+0x3d4/0x640 [ 799.633642][T23890] ? futex_hash_allocate+0x190/0x9a0 [ 799.633689][T23890] ? futex_hash_allocate+0x190/0x9a0 [ 799.633716][T23890] futex_hash_allocate+0x190/0x9a0 [ 799.633741][T23890] ? cap_task_prctl+0x13f/0x6b0 [ 799.633773][T23890] futex_hash_prctl+0xd8/0xf0 [ 799.633824][T23890] __se_sys_prctl+0x4f4/0x1400 [ 799.633856][T23890] __x64_sys_prctl+0x67/0x80 [ 799.633935][T23890] x64_sys_call+0x2533/0x3020 [ 799.633991][T23890] do_syscall_64+0x12c/0x3b0 [ 799.634016][T23890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.634037][T23890] RIP: 0033:0x7f244f52c819 [ 799.634059][T23890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.634077][T23890] RSP: 002b:00007f244df7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 799.634161][T23890] RAX: ffffffffffffffda RBX: 00007f244f7a5fa0 RCX: 00007f244f52c819 [ 799.634176][T23890] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 799.634193][T23890] RBP: 00007f244f5c2c91 R08: 0000000000000000 R09: 0000000000000000 [ 799.634230][T23890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.634246][T23890] R13: 00007f244f7a6038 R14: 00007f244f7a5fa0 R15: 00007ffee37e5f08 [ 799.634266][T23890] [ 799.636015][T23890] memory: usage 302256kB, limit 307200kB, failcnt 620 [ 799.871480][T23890] memory+swap: usage 134640kB, limit 9007199254740988kB, failcnt 0 [ 799.882153][T23890] kmem: usage 134336kB, limit 9007199254740988kB, failcnt 0 [ 799.899112][T23890] Memory cgroup stats for /syz8: [ 799.899534][T23890] cache 0 [ 799.948217][T23890] rss 110592 [ 799.958328][T23890] shmem 0 [ 799.963269][T23890] mapped_file 0 [ 799.985147][T23890] dirty 0 [ 800.000144][T23890] writeback 0 [ 800.010395][T23890] workingset_refault_anon 130 [ 800.035414][T23890] workingset_refault_file 0 [ 800.067207][T23890] swap 86016 [ 800.090069][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 800.106353][T23890] swapcached 6209536 [ 800.130060][T23890] pgpgin 387606 [ 800.143720][T23890] pgpgout 387574 [ 800.154591][T23890] pgfault 593036 [ 800.166138][T23890] pgmajfault 63 [ 800.176266][T23890] inactive_anon 8192 [ 800.188630][T23890] active_anon 122880 [ 800.204866][T23890] inactive_file 0 [ 800.214985][T23890] active_file 0 [ 800.226633][T23890] unevictable 0 [ 800.236427][T23890] hierarchical_memory_limit 314572800 [ 800.253677][T23890] hierarchical_memsw_limit 9223372036854771712 [ 800.272187][T23890] total_cache 0 [ 800.284606][T23890] total_rss 110592 [ 800.296108][T23890] total_shmem 0 [ 800.309638][T23890] total_mapped_file 0 [ 800.323859][T23890] total_dirty 0 [ 800.333496][T23890] total_writeback 0 [ 800.345933][T23890] total_workingset_refault_anon 130 [ 800.360629][T23890] total_workingset_refault_file 0 [ 800.377477][T23890] total_swap 86016 [ 800.388602][T23890] total_swapcached 6209536 [ 800.402604][T23890] total_pgpgin 387606 [ 800.418277][T23890] total_pgpgout 387574 [ 800.432214][T23890] total_pgfault 593036 [ 800.445410][T23890] total_pgmajfault 63 [ 800.456485][T23890] total_inactive_anon 8192 [ 800.473519][T23890] total_active_anon 122880 [ 800.487034][T23890] total_inactive_file 0 [ 800.500150][T23890] total_active_file 0 [ 800.513696][T23890] total_unevictable 0 [ 800.530066][T23890] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.6756,pid=23889,uid=0 [ 800.576133][T23890] Memory cgroup out of memory: Killed process 23889 (syz.8.6756) total-vm:100580kB, anon-rss:1336kB, file-rss:26536kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 800.649038][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 800.768478][T23033] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 800.902836][T23929] netlink: 'syz.8.6768': attribute type 20 has an invalid length. [ 800.916731][T23932] netlink: 'syz.2.6770': attribute type 20 has an invalid length. [ 800.919097][T23929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 800.925801][T23932] IPv6: NLM_F_CREATE should be specified when creating new route [ 800.944666][T23932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 800.951975][T23932] IPv6: NLM_F_CREATE should be set when creating new route [ 801.044834][ T28] audit: type=1400 audit(1776703966.150:1375): avc: denied { create } for pid=23938 comm="syz.8.6773" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 801.129406][T23948] netlink: 'syz.4.6776': attribute type 20 has an invalid length. [ 801.155096][T23948] IPv6: NLM_F_CREATE should be specified when creating new route [ 801.178605][ T28] audit: type=1400 audit(1776703966.260:1376): avc: denied { unlink } for pid=18656 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 801.200778][T12731] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 801.242656][T23948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 801.249924][T23948] IPv6: NLM_F_CREATE should be set when creating new route [ 801.636245][T23953] loop7: detected capacity change from 0 to 8192 [ 801.739489][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 801.802152][T23033] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 801.826687][T23033] FAT-fs (loop7): Filesystem has been set read-only [ 801.975233][ T28] audit: type=1400 audit(1776703966.830:1377): avc: denied { mounton } for pid=23952 comm="syz.7.6779" path="/43/bus/bus" dev="loop7" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 802.275673][ T28] audit: type=1400 audit(1776703967.380:1378): avc: denied { create } for pid=23970 comm="syz.8.6783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 802.303874][T23973] netlink: 'syz.7.6784': attribute type 20 has an invalid length. [ 802.329042][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 802.344290][T23973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 802.488635][T23986] netlink: 'syz.0.6790': attribute type 20 has an invalid length. [ 802.515724][T23986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 802.573012][T23991] syzkaller0: entered promiscuous mode [ 802.591704][T23989] loop8: detected capacity change from 0 to 8192 [ 802.598305][T23991] syzkaller0: entered allmulticast mode [ 802.637249][T23991] netlink: 'syz.7.6793': attribute type 21 has an invalid length. [ 802.676623][T18656] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 802.717904][T18656] FAT-fs (loop8): Filesystem has been set read-only [ 802.759487][ T28] audit: type=1400 audit(1776703967.860:1379): avc: denied { mount } for pid=23990 comm="syz.7.6793" name="/" dev="hugetlbfs" ino=75430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 802.874202][T24004] loop8: detected capacity change from 0 to 512 [ 802.889056][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 802.903672][T24005] netlink: 'syz.0.6799': attribute type 20 has an invalid length. [ 802.918657][ T28] audit: type=1400 audit(1776703968.020:1380): avc: denied { listen } for pid=24008 comm="syz.2.6801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 802.943623][T24011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6802'. [ 802.953055][T24011] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6802'. [ 802.962032][T24005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 802.970075][ T28] audit: type=1400 audit(1776703968.030:1381): avc: denied { open } for pid=24006 comm="syz.4.6800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 802.989806][ T28] audit: type=1400 audit(1776703968.030:1382): avc: denied { kernel } for pid=24006 comm="syz.4.6800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 803.007863][T24013] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6803'. [ 803.070343][ T28] audit: type=1400 audit(1776703968.180:1383): avc: denied { write } for pid=24016 comm="syz.0.6806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 803.094368][T24021] 9p: Bad value for 'rfdno' [ 803.095067][T24013] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6803'. [ 803.137340][T24013] 9p: Bad value for 'wfdno' [ 803.152512][T24013] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6803'. [ 803.172267][T24025] FAULT_INJECTION: forcing a failure. [ 803.172267][T24025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.197977][T24025] CPU: 0 UID: 0 PID: 24025 Comm: syz.8.6808 Not tainted syzkaller #0 PREEMPT(full) [ 803.198029][T24025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 803.198044][T24025] Call Trace: [ 803.198051][T24025] [ 803.198092][T24025] __dump_stack+0x1d/0x30 [ 803.198120][T24025] dump_stack_lvl+0x95/0xd0 [ 803.198157][T24025] dump_stack+0x15/0x1b [ 803.198184][T24025] should_fail_ex+0x263/0x280 [ 803.198237][T24025] should_fail+0xb/0x20 [ 803.198330][T24025] should_fail_usercopy+0x1a/0x20 [ 803.198455][T24025] _copy_from_iter+0xcf/0xea0 [ 803.198489][T24025] ? __rcu_read_unlock+0x4e/0x70 [ 803.198518][T24025] ? terminate_walk+0x1e6/0x210 [ 803.198547][T24025] ? path_openat+0x1ab2/0x2050 [ 803.198618][T24025] tun_get_user+0x38c/0x27e0 [ 803.198648][T24025] ? ref_tracker_alloc+0x1eb/0x2f0 [ 803.198755][T24025] ? selinux_file_permission+0x1e1/0x320 [ 803.198787][T24025] tun_chr_write_iter+0x15e/0x210 [ 803.198878][T24025] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 803.198911][T24025] vfs_write+0x5a6/0x9f0 [ 803.199013][T24025] ksys_write+0xdc/0x1a0 [ 803.199043][T24025] __x64_sys_write+0x40/0x50 [ 803.199072][T24025] x64_sys_call+0x27e1/0x3020 [ 803.199137][T24025] do_syscall_64+0x12c/0x3b0 [ 803.199168][T24025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.199222][T24025] RIP: 0033:0x7f244f52c819 [ 803.199303][T24025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.199325][T24025] RSP: 002b:00007f244df7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 803.199423][T24025] RAX: ffffffffffffffda RBX: 00007f244f7a5fa0 RCX: 00007f244f52c819 [ 803.199441][T24025] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000007 [ 803.199454][T24025] RBP: 00007f244df7f090 R08: 0000000000000000 R09: 0000000000000000 [ 803.199467][T24025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.199481][T24025] R13: 00007f244f7a6038 R14: 00007f244f7a5fa0 R15: 00007ffee37e5f08 [ 803.199510][T24025] [ 803.466418][T24035] loop7: detected capacity change from 0 to 512 [ 803.472819][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 803.490407][T24035] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 803.555046][T24044] FAULT_INJECTION: forcing a failure. [ 803.555046][T24044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.568225][T24044] CPU: 0 UID: 0 PID: 24044 Comm: syz.2.6816 Not tainted syzkaller #0 PREEMPT(full) [ 803.568305][T24044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 803.568319][T24044] Call Trace: [ 803.568328][T24044] [ 803.568356][T24044] __dump_stack+0x1d/0x30 [ 803.568384][T24044] dump_stack_lvl+0x95/0xd0 [ 803.568412][T24044] dump_stack+0x15/0x1b [ 803.568438][T24044] should_fail_ex+0x263/0x280 [ 803.568512][T24044] should_fail+0xb/0x20 [ 803.568603][T24044] should_fail_usercopy+0x1a/0x20 [ 803.568711][T24044] _copy_from_user+0x1c/0xb0 [ 803.568731][T24044] ___sys_sendmsg+0xc1/0x1e0 [ 803.568779][T24044] __x64_sys_sendmsg+0xd4/0x160 [ 803.568853][T24044] x64_sys_call+0x194c/0x3020 [ 803.568879][T24044] do_syscall_64+0x12c/0x3b0 [ 803.568898][T24044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.568970][T24044] RIP: 0033:0x7efe93c8c819 [ 803.568986][T24044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.569003][T24044] RSP: 002b:00007efe926df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.569023][T24044] RAX: ffffffffffffffda RBX: 00007efe93f05fa0 RCX: 00007efe93c8c819 [ 803.569036][T24044] RDX: 00000000000440e0 RSI: 0000200000000100 RDI: 0000000000000003 [ 803.569049][T24044] RBP: 00007efe926df090 R08: 0000000000000000 R09: 0000000000000000 [ 803.569074][T24044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.569086][T24044] R13: 00007efe93f06038 R14: 00007efe93f05fa0 R15: 00007ffc7f442fc8 [ 803.569102][T24044] [ 803.756906][T24051] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 803.766971][T24051] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 803.809475][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1072.tmp-b7:8' failed: Read-only file system [ 803.830415][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 803.830442][ T28] audit: type=1400 audit(1776703968.940:1388): avc: denied { create } for pid=24055 comm="syz.8.6819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 803.883019][T24060] 9p: Bad value for 'rfdno' [ 803.889522][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1072.tmp-b7:8' failed: Read-only file system [ 803.950099][T24045] syzkaller0: entered promiscuous mode [ 803.955907][T24045] syzkaller0: entered allmulticast mode [ 804.056158][T13195] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 804.385609][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1072.tmp-b7:8' failed: Read-only file system [ 804.556605][T23211] udevd[23211]: symlink '../../loop7' '/dev/disk/by-diskseq/1073.tmp-b7:7' failed: Read-only file system [ 804.681066][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1073.tmp-b7:7' failed: Read-only file system [ 804.701267][T24077] FAULT_INJECTION: forcing a failure. [ 804.701267][T24077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.716883][T24075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6826'. [ 804.742553][T24075] netlink: 580 bytes leftover after parsing attributes in process `syz.4.6826'. [ 804.754775][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 804.774660][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1074.tmp-b7:7' failed: Read-only file system [ 804.787745][T24077] CPU: 0 UID: 0 PID: 24077 Comm: syz.7.6827 Not tainted syzkaller #0 PREEMPT(full) [ 804.787776][T24077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 804.787788][T24077] Call Trace: [ 804.787796][T24077] [ 804.787804][T24077] __dump_stack+0x1d/0x30 [ 804.787831][T24077] dump_stack_lvl+0x95/0xd0 [ 804.787913][T24077] dump_stack+0x15/0x1b [ 804.787939][T24077] should_fail_ex+0x263/0x280 [ 804.787975][T24077] should_fail+0xb/0x20 [ 804.788062][T24077] should_fail_usercopy+0x1a/0x20 [ 804.788096][T24077] _copy_from_user+0x1c/0xb0 [ 804.788186][T24077] ___sys_sendmsg+0xc1/0x1e0 [ 804.788331][T24077] __x64_sys_sendmsg+0xd4/0x160 [ 804.788363][T24077] x64_sys_call+0x194c/0x3020 [ 804.788389][T24077] do_syscall_64+0x12c/0x3b0 [ 804.788411][T24077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.788438][T24077] RIP: 0033:0x7fa1062cc819 [ 804.788516][T24077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.788534][T24077] RSP: 002b:00007fa104d27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.788555][T24077] RAX: ffffffffffffffda RBX: 00007fa106545fa0 RCX: 00007fa1062cc819 [ 804.788576][T24077] RDX: 0000000000000042 RSI: 0000200000000440 RDI: 0000000000000003 [ 804.788592][T24077] RBP: 00007fa104d27090 R08: 0000000000000000 R09: 0000000000000000 [ 804.788608][T24077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.788633][T24077] R13: 00007fa106546038 R14: 00007fa106545fa0 R15: 00007ffe85ffeba8 [ 804.788654][T24077] [ 804.947803][T24075] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6826'. [ 804.958347][T24075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6826'. [ 805.016135][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1074.tmp-b7:7' failed: Read-only file system [ 805.044723][T24069] loop8: detected capacity change from 0 to 8192 [ 805.081169][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1074.tmp-b7:7' failed: Read-only file system [ 805.115140][T18656] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 805.250289][T23211] udevd[23211]: symlink '../../loop8' '/dev/disk/by-diskseq/1075.tmp-b7:8' failed: Read-only file system [ 805.262551][T18656] FAT-fs (loop8): Filesystem has been set read-only [ 805.669017][T24093] loop7: detected capacity change from 0 to 512 [ 805.703872][T13195] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 805.740330][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1076.tmp-b7:7' failed: Read-only file system [ 805.770185][T24093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 805.783136][T24093] ext4 filesystem being mounted at /53/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.074860][T24104] syzkaller0: entered promiscuous mode [ 806.110459][T24104] syzkaller0: entered allmulticast mode [ 806.130077][T24115] netlink: 'syz.8.6836': attribute type 21 has an invalid length. [ 806.359553][T13356] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 808.172167][T13195] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 808.290844][T23033] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 808.320953][ T28] audit: type=1400 audit(1776703973.380:1389): avc: denied { setopt } for pid=24129 comm="syz.8.6845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 808.478624][T24140] netlink: 'syz.2.6849': attribute type 20 has an invalid length. [ 808.489503][T24140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 808.523295][T24146] FAULT_INJECTION: forcing a failure. [ 808.523295][T24146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.541071][T24146] CPU: 0 UID: 0 PID: 24146 Comm: syz.0.6852 Not tainted syzkaller #0 PREEMPT(full) [ 808.541154][T24146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 808.541170][T24146] Call Trace: [ 808.541177][T24146] [ 808.541186][T24146] __dump_stack+0x1d/0x30 [ 808.541218][T24146] dump_stack_lvl+0x95/0xd0 [ 808.541243][T24146] dump_stack+0x15/0x1b [ 808.541309][T24146] should_fail_ex+0x263/0x280 [ 808.541342][T24146] should_fail+0xb/0x20 [ 808.541452][T24146] should_fail_usercopy+0x1a/0x20 [ 808.541513][T24146] _copy_from_user+0x1c/0xb0 [ 808.541595][T24146] ___sys_sendmsg+0xc1/0x1e0 [ 808.541634][T24146] __x64_sys_sendmsg+0xd4/0x160 [ 808.541665][T24146] x64_sys_call+0x194c/0x3020 [ 808.541697][T24146] do_syscall_64+0x12c/0x3b0 [ 808.541739][T24146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.541841][T24146] RIP: 0033:0x7f031f43c819 [ 808.541859][T24146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.541877][T24146] RSP: 002b:00007f031de97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 808.541940][T24146] RAX: ffffffffffffffda RBX: 00007f031f6b5fa0 RCX: 00007f031f43c819 [ 808.541955][T24146] RDX: 00000000000000c0 RSI: 0000200000002240 RDI: 0000000000000004 [ 808.541968][T24146] RBP: 00007f031de97090 R08: 0000000000000000 R09: 0000000000000000 [ 808.541981][T24146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.541993][T24146] R13: 00007f031f6b6038 R14: 00007f031f6b5fa0 R15: 00007ffff977ef28 [ 808.542013][T24146] [ 808.894917][ T28] audit: type=1400 audit(1776703974.000:1390): avc: denied { validate_trans } for pid=24168 comm="syz.7.6863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 808.911976][T24169] netlink: 'syz.7.6863': attribute type 3 has an invalid length. [ 808.915909][T13195] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 808.935501][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1078.tmp-b7:7' failed: Read-only file system [ 809.006213][T24180] FAULT_INJECTION: forcing a failure. [ 809.006213][T24180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.019840][T24180] CPU: 0 UID: 0 PID: 24180 Comm: syz.2.6868 Not tainted syzkaller #0 PREEMPT(full) [ 809.019898][T24180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 809.019915][T24180] Call Trace: [ 809.019923][T24180] [ 809.019932][T24180] __dump_stack+0x1d/0x30 [ 809.019965][T24180] dump_stack_lvl+0x95/0xd0 [ 809.019993][T24180] dump_stack+0x15/0x1b [ 809.020098][T24180] should_fail_ex+0x263/0x280 [ 809.020175][T24180] should_fail+0xb/0x20 [ 809.020283][T24180] should_fail_usercopy+0x1a/0x20 [ 809.020318][T24180] _copy_from_user+0x1c/0xb0 [ 809.020342][T24180] ___sys_sendmsg+0xc1/0x1e0 [ 809.020450][T24180] ? path_openat+0x1b01/0x2050 [ 809.020501][T24180] __sys_sendmmsg+0x185/0x320 [ 809.020535][T24180] __x64_sys_sendmmsg+0x57/0x70 [ 809.020563][T24180] x64_sys_call+0x27aa/0x3020 [ 809.020596][T24180] do_syscall_64+0x12c/0x3b0 [ 809.020619][T24180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.020645][T24180] RIP: 0033:0x7efe93c8c819 [ 809.020739][T24180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.020760][T24180] RSP: 002b:00007efe926df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 809.020784][T24180] RAX: ffffffffffffffda RBX: 00007efe93f05fa0 RCX: 00007efe93c8c819 [ 809.020798][T24180] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 809.020813][T24180] RBP: 00007efe926df090 R08: 0000000000000000 R09: 0000000000000000 [ 809.020826][T24180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.020867][T24180] R13: 00007efe93f06038 R14: 00007efe93f05fa0 R15: 00007ffc7f442fc8 [ 809.020890][T24180] [ 809.196302][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1077.tmp-b7:8' failed: Read-only file system [ 809.240754][T24188] FAULT_INJECTION: forcing a failure. [ 809.240754][T24188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.262733][T24188] CPU: 1 UID: 0 PID: 24188 Comm: syz.0.6873 Not tainted syzkaller #0 PREEMPT(full) [ 809.262766][T24188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 809.262781][T24188] Call Trace: [ 809.262791][T24188] [ 809.262800][T24188] __dump_stack+0x1d/0x30 [ 809.262833][T24188] dump_stack_lvl+0x95/0xd0 [ 809.262877][T24188] dump_stack+0x15/0x1b [ 809.262899][T24188] should_fail_ex+0x263/0x280 [ 809.262940][T24188] should_fail+0xb/0x20 [ 809.263032][T24188] should_fail_usercopy+0x1a/0x20 [ 809.263069][T24188] _copy_to_user+0x20/0xa0 [ 809.263122][T24188] simple_read_from_buffer+0xb5/0x130 [ 809.263152][T24188] proc_fail_nth_read+0x10e/0x150 [ 809.263188][T24188] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 809.263295][T24188] vfs_read+0x1ab/0x7f0 [ 809.263329][T24188] ? __rcu_read_unlock+0x4e/0x70 [ 809.263361][T24188] ? __fget_files+0x184/0x1c0 [ 809.263391][T24188] ? mutex_lock+0x57/0x90 [ 809.263421][T24188] ksys_read+0xdc/0x1a0 [ 809.263458][T24188] __x64_sys_read+0x40/0x50 [ 809.263561][T24188] x64_sys_call+0x2886/0x3020 [ 809.263614][T24188] do_syscall_64+0x12c/0x3b0 [ 809.263639][T24188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.263665][T24188] RIP: 0033:0x7f031f3fd04e [ 809.263682][T24188] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 809.263699][T24188] RSP: 002b:00007f031de96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 809.263791][T24188] RAX: ffffffffffffffda RBX: 00007f031de976c0 RCX: 00007f031f3fd04e [ 809.263807][T24188] RDX: 000000000000000f RSI: 00007f031de970a0 RDI: 0000000000000004 [ 809.263821][T24188] RBP: 00007f031de97090 R08: 0000000000000000 R09: 0000000000000000 [ 809.263833][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1078.tmp-b7:7' failed: Read-only file system [ 809.263882][T24188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.263925][T24188] R13: 00007f031f6b6038 R14: 00007f031f6b5fa0 R15: 00007ffff977ef28 [ 809.263951][T24188] [ 809.389256][T24100] udevd[24100]: symlink '../../loop8' '/dev/disk/by-diskseq/1077.tmp-b7:8' failed: Read-only file system [ 809.448630][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1078.tmp-b7:7' failed: Read-only file system [ 809.491380][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 809.534857][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1078.tmp-b7:7' failed: Read-only file system [ 809.543526][T24207] FAULT_INJECTION: forcing a failure. [ 809.543526][T24207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.567899][T24207] CPU: 1 UID: 0 PID: 24207 Comm: syz.7.6878 Not tainted syzkaller #0 PREEMPT(full) [ 809.567956][T24207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 809.567972][T24207] Call Trace: [ 809.567979][T24207] [ 809.567988][T24207] __dump_stack+0x1d/0x30 [ 809.568019][T24207] dump_stack_lvl+0x95/0xd0 [ 809.568187][T24207] dump_stack+0x15/0x1b [ 809.568276][T24207] should_fail_ex+0x263/0x280 [ 809.568307][T24207] should_fail+0xb/0x20 [ 809.568377][T24207] should_fail_usercopy+0x1a/0x20 [ 809.568410][T24207] _copy_from_user+0x1c/0xb0 [ 809.568510][T24207] ___sys_sendmsg+0xc1/0x1e0 [ 809.568565][T24207] ? path_openat+0x1b01/0x2050 [ 809.568606][T24207] __sys_sendmmsg+0x185/0x320 [ 809.568636][T24207] __x64_sys_sendmmsg+0x57/0x70 [ 809.568734][T24207] x64_sys_call+0x27aa/0x3020 [ 809.568906][T24207] do_syscall_64+0x12c/0x3b0 [ 809.568963][T24207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.568984][T24207] RIP: 0033:0x7fa1062cc819 [ 809.569000][T24207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.569018][T24207] RSP: 002b:00007fa104d27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 809.569107][T24207] RAX: ffffffffffffffda RBX: 00007fa106545fa0 RCX: 00007fa1062cc819 [ 809.569121][T24207] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 809.569134][T24207] RBP: 00007fa104d27090 R08: 0000000000000000 R09: 0000000000000000 [ 809.569211][T24207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.569227][T24207] R13: 00007fa106546038 R14: 00007fa106545fa0 R15: 00007ffe85ffeba8 [ 809.569247][T24207] [ 809.758719][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1078.tmp-b7:7' failed: Read-only file system [ 809.824081][T24215] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 810.020674][T13195] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 810.268510][T24251] syzkaller0: entered promiscuous mode [ 810.274239][T24251] syzkaller0: entered allmulticast mode [ 810.281908][T24251] netlink: 'syz.0.6895': attribute type 21 has an invalid length. [ 810.317142][ T28] audit: type=1400 audit(1776703975.420:1391): avc: denied { associate } for pid=24247 comm="syz.2.6894" name="1482" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 810.371902][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1077.tmp-b7:8' failed: Read-only file system [ 810.400419][T24257] syzkaller0: entered promiscuous mode [ 810.405920][T24257] syzkaller0: entered allmulticast mode [ 810.415180][T24257] netlink: 'syz.0.6897': attribute type 21 has an invalid length. [ 810.441209][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1077.tmp-b7:8' failed: Read-only file system [ 810.500303][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1077.tmp-b7:8' failed: Read-only file system [ 810.503653][T24264] loop8: detected capacity change from 0 to 1024 [ 810.519605][T24266] FAULT_INJECTION: forcing a failure. [ 810.519605][T24266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.521361][T24264] EXT4-fs (loop8): unable to read superblock [ 810.533120][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 810.556068][T24266] CPU: 0 UID: 0 PID: 24266 Comm: syz.0.6900 Not tainted syzkaller #0 PREEMPT(full) [ 810.556159][T24266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 810.556174][T24266] Call Trace: [ 810.556183][T24266] [ 810.556193][T24266] __dump_stack+0x1d/0x30 [ 810.556226][T24266] dump_stack_lvl+0x95/0xd0 [ 810.556324][T24266] dump_stack+0x15/0x1b [ 810.556347][T24266] should_fail_ex+0x263/0x280 [ 810.556385][T24266] should_fail+0xb/0x20 [ 810.556418][T24266] should_fail_usercopy+0x1a/0x20 [ 810.556508][T24266] _copy_from_user+0x1c/0xb0 [ 810.556528][T24266] do_arpt_set_ctl+0x3b6/0xad0 [ 810.556608][T24266] ? _raw_spin_lock_bh+0x56/0xb0 [ 810.556635][T24266] ? _raw_spin_unlock_bh+0x18/0x20 [ 810.556660][T24266] nf_setsockopt+0x199/0x1b0 [ 810.556713][T24266] ip_setsockopt+0x102/0x110 [ 810.556738][T24266] ipv6_setsockopt+0xfb/0x130 [ 810.556772][T24266] tcp_setsockopt+0x98/0xb0 [ 810.556850][T24266] sock_common_setsockopt+0x69/0x80 [ 810.556887][T24266] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 810.556987][T24266] smc_setsockopt+0x183/0x750 [ 810.557023][T24266] ? __pfx_smc_setsockopt+0x10/0x10 [ 810.557041][T24266] __sys_setsockopt+0x184/0x200 [ 810.557063][T24266] __x64_sys_setsockopt+0x64/0x80 [ 810.557085][T24266] x64_sys_call+0x2327/0x3020 [ 810.557151][T24266] do_syscall_64+0x12c/0x3b0 [ 810.557180][T24266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.557202][T24266] RIP: 0033:0x7f031f43c819 [ 810.557218][T24266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.557298][T24266] RSP: 002b:00007f031de97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 810.557324][T24266] RAX: ffffffffffffffda RBX: 00007f031f6b5fa0 RCX: 00007f031f43c819 [ 810.557341][T24266] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 810.557355][T24266] RBP: 00007f031de97090 R08: 0000000000000448 R09: 0000000000000000 [ 810.557372][T24266] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 810.557388][T24266] R13: 00007f031f6b6038 R14: 00007f031f6b5fa0 R15: 00007ffff977ef28 [ 810.557410][T24266] [ 810.835210][T24271] FAULT_INJECTION: forcing a failure. [ 810.835210][T24271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.854112][T24271] CPU: 1 UID: 0 PID: 24271 Comm: syz.0.6903 Not tainted syzkaller #0 PREEMPT(full) [ 810.854167][T24271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 810.854180][T24271] Call Trace: [ 810.854189][T24271] [ 810.854199][T24271] __dump_stack+0x1d/0x30 [ 810.854301][T24271] dump_stack_lvl+0x95/0xd0 [ 810.854409][T24271] dump_stack+0x15/0x1b [ 810.854435][T24271] should_fail_ex+0x263/0x280 [ 810.854471][T24271] should_fail+0xb/0x20 [ 810.854500][T24271] should_fail_usercopy+0x1a/0x20 [ 810.854582][T24271] _copy_from_user+0x1c/0xb0 [ 810.854605][T24271] __sys_bpf+0x183/0x7e0 [ 810.854719][T24271] __x64_sys_bpf+0x41/0x50 [ 810.854749][T24271] x64_sys_call+0x10cb/0x3020 [ 810.854781][T24271] do_syscall_64+0x12c/0x3b0 [ 810.854847][T24271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.854983][T24271] RIP: 0033:0x7f031f43c819 [ 810.855003][T24271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.855023][T24271] RSP: 002b:00007f031de97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 810.855084][T24271] RAX: ffffffffffffffda RBX: 00007f031f6b5fa0 RCX: 00007f031f43c819 [ 810.855168][T24271] RDX: 0000000000000048 RSI: 0000200000000540 RDI: 000000000000000a [ 810.855184][T24271] RBP: 00007f031de97090 R08: 0000000000000000 R09: 0000000000000000 [ 810.855246][T24271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.855261][T24271] R13: 00007f031f6b6038 R14: 00007f031f6b5fa0 R15: 00007ffff977ef28 [ 810.855282][T24271] [ 811.031031][ T28] audit: type=1400 audit(1776703976.140:1392): avc: denied { bind } for pid=24275 comm="syz.7.6906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 811.081305][ T28] audit: type=1400 audit(1776703976.160:1393): avc: denied { connect } for pid=24275 comm="syz.7.6906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 811.110059][ T28] audit: type=1400 audit(1776703976.160:1394): avc: denied { write } for pid=24275 comm="syz.7.6906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 811.144016][T24281] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6907'. [ 811.165287][T24281] sctp: [Deprecated]: syz.2.6907 (pid 24281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 811.165287][T24281] Use struct sctp_sack_info instead [ 811.279136][T13356] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 811.297407][T24300] FAULT_INJECTION: forcing a failure. [ 811.297407][T24300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.311005][T24300] CPU: 1 UID: 0 PID: 24300 Comm: syz.7.6913 Not tainted syzkaller #0 PREEMPT(full) [ 811.311038][T24300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 811.311053][T24300] Call Trace: [ 811.311062][T24300] [ 811.311071][T24300] __dump_stack+0x1d/0x30 [ 811.311102][T24300] dump_stack_lvl+0x95/0xd0 [ 811.311231][T24300] dump_stack+0x15/0x1b [ 811.311259][T24300] should_fail_ex+0x263/0x280 [ 811.311293][T24300] should_fail+0xb/0x20 [ 811.311319][T24300] should_fail_usercopy+0x1a/0x20 [ 811.311449][T24300] _copy_from_user+0x1c/0xb0 [ 811.311473][T24300] ___sys_sendmsg+0xc1/0x1e0 [ 811.311508][T24300] __x64_sys_sendmsg+0xd4/0x160 [ 811.311540][T24300] x64_sys_call+0x194c/0x3020 [ 811.311655][T24300] do_syscall_64+0x12c/0x3b0 [ 811.311677][T24300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.311697][T24300] RIP: 0033:0x7fa1062cc819 [ 811.311716][T24300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.311738][T24300] RSP: 002b:00007fa104d27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.311838][T24300] RAX: ffffffffffffffda RBX: 00007fa106545fa0 RCX: 00007fa1062cc819 [ 811.311852][T24300] RDX: 0000000020000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 811.311866][T24300] RBP: 00007fa104d27090 R08: 0000000000000000 R09: 0000000000000000 [ 811.311878][T24300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.311892][T24300] R13: 00007fa106546038 R14: 00007fa106545fa0 R15: 00007ffe85ffeba8 [ 811.311939][T24300] [ 811.363473][T24302] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 811.436633][T24304] loop7: detected capacity change from 0 to 164 [ 811.506005][T24307] syzkaller0: entered promiscuous mode [ 811.516537][T24307] syzkaller0: entered allmulticast mode [ 811.546114][T24313] FAULT_INJECTION: forcing a failure. [ 811.546114][T24313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.559847][T24307] netlink: 'syz.8.6917': attribute type 21 has an invalid length. [ 811.574778][T24313] CPU: 1 UID: 0 PID: 24313 Comm: syz.2.6919 Not tainted syzkaller #0 PREEMPT(full) [ 811.574808][T24313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 811.574823][T24313] Call Trace: [ 811.574832][T24313] [ 811.574841][T24313] __dump_stack+0x1d/0x30 [ 811.574894][T24313] dump_stack_lvl+0x95/0xd0 [ 811.574941][T24313] dump_stack+0x15/0x1b [ 811.574970][T24313] should_fail_ex+0x263/0x280 [ 811.575026][T24313] should_fail+0xb/0x20 [ 811.575067][T24313] should_fail_usercopy+0x1a/0x20 [ 811.575106][T24313] _copy_from_user+0x1c/0xb0 [ 811.575129][T24313] do_sock_getsockopt+0x122/0x570 [ 811.575233][T24313] __x64_sys_getsockopt+0x11d/0x1a0 [ 811.575268][T24313] x64_sys_call+0x2dcf/0x3020 [ 811.575298][T24313] do_syscall_64+0x12c/0x3b0 [ 811.575405][T24313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.575469][T24313] RIP: 0033:0x7efe93c8c819 [ 811.575490][T24313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.575573][T24313] RSP: 002b:00007efe926df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 811.575600][T24313] RAX: ffffffffffffffda RBX: 00007efe93f05fa0 RCX: 00007efe93c8c819 [ 811.575617][T24313] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003 [ 811.575632][T24313] RBP: 00007efe926df090 R08: 00002000000000c0 R09: 0000000000000000 [ 811.575647][T24313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.575660][T24313] R13: 00007efe93f06038 R14: 00007efe93f05fa0 R15: 00007ffc7f442fc8 [ 811.575730][T24313] [ 811.737001][ T28] audit: type=1400 audit(1776703976.690:1395): avc: denied { bind } for pid=24317 comm="syz.4.6921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 811.779765][ T28] audit: type=1400 audit(1776703976.890:1396): avc: denied { accept } for pid=24303 comm="syz.7.6915" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 811.800638][T13195] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 812.037156][T24339] FAULT_INJECTION: forcing a failure. [ 812.037156][T24339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.061870][T24339] CPU: 1 UID: 0 PID: 24339 Comm: syz.7.6928 Not tainted syzkaller #0 PREEMPT(full) [ 812.061900][T24339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 812.061914][T24339] Call Trace: [ 812.061922][T24339] [ 812.061940][T24339] __dump_stack+0x1d/0x30 [ 812.061973][T24339] dump_stack_lvl+0x95/0xd0 [ 812.061996][T24339] dump_stack+0x15/0x1b [ 812.062100][T24339] should_fail_ex+0x263/0x280 [ 812.062134][T24339] should_fail+0xb/0x20 [ 812.062160][T24339] should_fail_usercopy+0x1a/0x20 [ 812.062329][T24339] _copy_from_user+0x1c/0xb0 [ 812.062351][T24339] ___sys_sendmsg+0xc1/0x1e0 [ 812.062389][T24339] __x64_sys_sendmsg+0xd4/0x160 [ 812.062470][T24339] x64_sys_call+0x194c/0x3020 [ 812.062503][T24339] do_syscall_64+0x12c/0x3b0 [ 812.062526][T24339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.062552][T24339] RIP: 0033:0x7fa1062cc819 [ 812.062652][T24339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.062674][T24339] RSP: 002b:00007fa104d27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.062700][T24339] RAX: ffffffffffffffda RBX: 00007fa106545fa0 RCX: 00007fa1062cc819 [ 812.062717][T24339] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 812.062732][T24339] RBP: 00007fa104d27090 R08: 0000000000000000 R09: 0000000000000000 [ 812.062748][T24339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.062763][T24339] R13: 00007fa106546038 R14: 00007fa106545fa0 R15: 00007ffe85ffeba8 [ 812.062831][T24339] [ 812.240945][T24343] loop7: detected capacity change from 0 to 512 [ 812.252569][T24343] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 812.289365][T24343] EXT4-fs (loop7): 1 truncate cleaned up [ 812.301102][T24343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.319082][T13196] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 812.338845][T24335] loop8: detected capacity change from 0 to 8192 [ 812.358631][T24349] FAULT_INJECTION: forcing a failure. [ 812.358631][T24349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.372287][T24349] CPU: 0 UID: 0 PID: 24349 Comm: syz.2.6933 Not tainted syzkaller #0 PREEMPT(full) [ 812.372390][T24349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 812.372418][T24349] Call Trace: [ 812.372427][T24349] [ 812.372436][T24349] __dump_stack+0x1d/0x30 [ 812.372464][T24349] dump_stack_lvl+0x95/0xd0 [ 812.372487][T24349] dump_stack+0x15/0x1b [ 812.372512][T24349] should_fail_ex+0x263/0x280 [ 812.372546][T24349] should_fail+0xb/0x20 [ 812.372571][T24349] should_fail_usercopy+0x1a/0x20 [ 812.372630][T24349] _copy_from_user+0x1c/0xb0 [ 812.372678][T24349] do_arpt_set_ctl+0x3b6/0xad0 [ 812.372739][T24349] ? _raw_spin_lock_bh+0x56/0xb0 [ 812.372760][T24349] ? _raw_spin_unlock_bh+0x18/0x20 [ 812.372789][T24349] nf_setsockopt+0x199/0x1b0 [ 812.372882][T24349] ip_setsockopt+0x102/0x110 [ 812.372938][T24349] ipv6_setsockopt+0xfb/0x130 [ 812.372968][T24349] tcp_setsockopt+0x98/0xb0 [ 812.372995][T24349] sock_common_setsockopt+0x69/0x80 [ 812.373057][T24349] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 812.373086][T24349] smc_setsockopt+0x183/0x750 [ 812.373106][T24349] ? __pfx_smc_setsockopt+0x10/0x10 [ 812.373126][T24349] __sys_setsockopt+0x184/0x200 [ 812.373175][T24349] __x64_sys_setsockopt+0x64/0x80 [ 812.373196][T24349] x64_sys_call+0x2327/0x3020 [ 812.373243][T24349] do_syscall_64+0x12c/0x3b0 [ 812.373263][T24349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.373289][T24349] RIP: 0033:0x7efe93c8c819 [ 812.373309][T24349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.373327][T24349] RSP: 002b:00007efe926df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 812.373355][T24349] RAX: ffffffffffffffda RBX: 00007efe93f05fa0 RCX: 00007efe93c8c819 [ 812.373401][T24349] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 812.373469][T24349] RBP: 00007efe926df090 R08: 0000000000000448 R09: 0000000000000000 [ 812.373486][T24349] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 812.373502][T24349] R13: 00007efe93f06038 R14: 00007efe93f05fa0 R15: 00007ffc7f442fc8 [ 812.373520][T24349] [ 812.771858][T18656] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 812.780395][T18656] FAT-fs (loop8): Filesystem has been set read-only [ 812.849080][T13195] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 813.823204][T23033] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.016627][T24373] syzkaller0: entered promiscuous mode [ 814.026792][T24373] syzkaller0: entered allmulticast mode [ 814.053549][T24373] netlink: 'syz.8.6939': attribute type 21 has an invalid length. [ 814.289071][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 814.832100][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 814.866589][T23461] udevd[23461]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:7' failed: Read-only file system [ 814.867804][T24100] udevd[24100]: symlink '../../loop8' '/dev/disk/by-diskseq/1085.tmp-b7:8' failed: Read-only file system [ 814.878985][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1083.tmp-b7:7' failed: Read-only file system [ 814.904369][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1083.tmp-b7:7' failed: Read-only file system [ 815.015184][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1085.tmp-b7:8' failed: Read-only file system [ 815.042641][T24100] udevd[24100]: symlink '../../loop7' '/dev/disk/by-diskseq/1086.tmp-b7:7' failed: Read-only file system [ 815.058765][T24394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42042 sclass=netlink_route_socket pid=24394 comm=syz.4.6947 [ 815.075289][T24394] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6947'. [ 815.077720][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1085.tmp-b7:8' failed: Read-only file system [ 815.105037][T24394] geneve2: entered promiscuous mode [ 815.137908][T24396] loop8: detected capacity change from 0 to 8192 [ 815.175275][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1087.tmp-b7:8' failed: Read-only file system [ 815.186781][T24406] loop7: detected capacity change from 0 to 7 [ 815.190629][T18656] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 815.207995][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:8' failed: Read-only file system [ 815.219739][T18656] FAT-fs (loop8): Filesystem has been set read-only [ 815.237002][T24100] udevd[24100]: symlink '../../loop7' '/dev/disk/by-diskseq/1088.tmp-b7:7' failed: Read-only file system [ 815.240958][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 815.258231][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 815.338819][T24417] syzkaller0: entered promiscuous mode [ 815.344463][T24417] syzkaller0: entered allmulticast mode [ 815.352654][T24417] netlink: 'syz.4.6955': attribute type 21 has an invalid length. [ 815.360798][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 815.440979][ T28] audit: type=1400 audit(1776703980.550:1397): avc: denied { write } for pid=24419 comm="syz.8.6956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 815.873105][T24441] FAULT_INJECTION: forcing a failure. [ 815.873105][T24441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.887758][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 815.902855][T24441] CPU: 0 UID: 0 PID: 24441 Comm: syz.7.6965 Not tainted syzkaller #0 PREEMPT(full) [ 815.902933][T24441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 815.902946][T24441] Call Trace: [ 815.902954][T24441] [ 815.902963][T24441] __dump_stack+0x1d/0x30 [ 815.902990][T24441] dump_stack_lvl+0x95/0xd0 [ 815.903025][T24441] dump_stack+0x15/0x1b [ 815.903052][T24441] should_fail_ex+0x263/0x280 [ 815.903124][T24441] should_fail+0xb/0x20 [ 815.903180][T24441] should_fail_usercopy+0x1a/0x20 [ 815.903220][T24441] _copy_from_user+0x1c/0xb0 [ 815.903239][T24441] ___sys_sendmsg+0xc1/0x1e0 [ 815.903261][T24441] ? _raw_spin_unlock+0x9/0x30 [ 815.903313][T24441] __x64_sys_sendmsg+0xd4/0x160 [ 815.903411][T24441] x64_sys_call+0x194c/0x3020 [ 815.903444][T24441] do_syscall_64+0x12c/0x3b0 [ 815.903468][T24441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.903494][T24441] RIP: 0033:0x7fa1062cc819 [ 815.903511][T24441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.903556][T24441] RSP: 002b:00007fa104d27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.903582][T24441] RAX: ffffffffffffffda RBX: 00007fa106545fa0 RCX: 00007fa1062cc819 [ 815.903600][T24441] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 815.903613][T24441] RBP: 00007fa104d27090 R08: 0000000000000000 R09: 0000000000000000 [ 815.903625][T24441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.903638][T24441] R13: 00007fa106546038 R14: 00007fa106545fa0 R15: 00007ffe85ffeba8 [ 815.903660][T24441] [ 816.275617][T24452] syzkaller0: entered promiscuous mode [ 816.281460][T24452] syzkaller0: entered allmulticast mode [ 816.289793][T24452] netlink: 'syz.8.6969': attribute type 21 has an invalid length. [ 816.799894][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 817.169817][T24473] FAULT_INJECTION: forcing a failure. [ 817.169817][T24473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.190031][T24473] CPU: 1 UID: 0 PID: 24473 Comm: syz.4.6973 Not tainted syzkaller #0 PREEMPT(full) [ 817.190065][T24473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 817.190078][T24473] Call Trace: [ 817.190086][T24473] [ 817.190094][T24473] __dump_stack+0x1d/0x30 [ 817.190163][T24473] dump_stack_lvl+0x95/0xd0 [ 817.190193][T24473] dump_stack+0x15/0x1b [ 817.190298][T24473] should_fail_ex+0x263/0x280 [ 817.190333][T24473] should_fail+0xb/0x20 [ 817.190367][T24473] should_fail_usercopy+0x1a/0x20 [ 817.190399][T24473] _copy_from_user+0x1c/0xb0 [ 817.190453][T24473] ___sys_sendmsg+0xc1/0x1e0 [ 817.190480][T24473] ? path_openat+0x1b01/0x2050 [ 817.190529][T24473] __sys_sendmmsg+0x185/0x320 [ 817.190692][T24473] __x64_sys_sendmmsg+0x57/0x70 [ 817.190746][T24473] x64_sys_call+0x27aa/0x3020 [ 817.190855][T24473] do_syscall_64+0x12c/0x3b0 [ 817.190882][T24473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.190909][T24473] RIP: 0033:0x7f4244efc819 [ 817.190928][T24473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.191027][T24473] RSP: 002b:00007f4243957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 817.191053][T24473] RAX: ffffffffffffffda RBX: 00007f4245175fa0 RCX: 00007f4244efc819 [ 817.191069][T24473] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 817.191083][T24473] RBP: 00007f4243957090 R08: 0000000000000000 R09: 0000000000000000 [ 817.191096][T24473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.191108][T24473] R13: 00007f4245176038 R14: 00007f4245175fa0 R15: 00007fff7b637cc8 [ 817.191155][T24473] [ 817.410998][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 818.137520][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 818.221511][T24512] syzkaller0: entered promiscuous mode [ 818.254199][T24512] syzkaller0: entered allmulticast mode [ 818.278266][T24515] loop7: detected capacity change from 0 to 512 [ 818.296068][T24512] netlink: 'syz.4.6988': attribute type 21 has an invalid length. [ 818.332384][T24515] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 818.356542][T24517] loop8: detected capacity change from 0 to 512 [ 818.392957][T24515] EXT4-fs (loop7): 1 truncate cleaned up [ 818.408400][T24517] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 818.419808][T24515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.441957][T24517] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 818.459017][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 818.465544][ C1] EXT4-fs (loop8): initial error at time 1776703983: ext4_mb_generate_buddy:1317 [ 818.473700][T24517] Quota error (device loop8): write_blk: dquota write failed [ 818.474751][ C1] EXT4-fs (loop8): last error at time 1776703983: ext4_mb_generate_buddy:1317 [ 818.497316][T24498] chnl_net:caif_netlink_parms(): no params data found [ 818.516984][T24517] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 818.542946][T24517] Quota error (device loop8): write_blk: dquota write failed [ 818.562856][T24528] FAULT_INJECTION: forcing a failure. [ 818.562856][T24528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.584138][T24517] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 818.605923][T24528] CPU: 1 UID: 0 PID: 24528 Comm: syz.4.6991 Not tainted syzkaller #0 PREEMPT(full) [ 818.605988][T24528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 818.606001][T24528] Call Trace: [ 818.606008][T24528] [ 818.606017][T24528] __dump_stack+0x1d/0x30 [ 818.606049][T24528] dump_stack_lvl+0x95/0xd0 [ 818.606227][T24528] dump_stack+0x15/0x1b [ 818.606256][T24528] should_fail_ex+0x263/0x280 [ 818.606286][T24528] should_fail+0xb/0x20 [ 818.606390][T24528] should_fail_usercopy+0x1a/0x20 [ 818.606427][T24528] _copy_from_user+0x1c/0xb0 [ 818.606446][T24528] ___sys_sendmsg+0xc1/0x1e0 [ 818.606522][T24528] __x64_sys_sendmsg+0xd4/0x160 [ 818.606575][T24528] x64_sys_call+0x194c/0x3020 [ 818.606679][T24528] do_syscall_64+0x12c/0x3b0 [ 818.606703][T24528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.606729][T24528] RIP: 0033:0x7f4244efc819 [ 818.606748][T24528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.606767][T24528] RSP: 002b:00007f4243957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.607007][T24528] RAX: ffffffffffffffda RBX: 00007f4245175fa0 RCX: 00007f4244efc819 [ 818.607024][T24528] RDX: 0000000000000000 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 818.607037][T24528] RBP: 00007f4243957090 R08: 0000000000000000 R09: 0000000000000000 [ 818.607049][T24528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.607070][T24528] R13: 00007f4245176038 R14: 00007f4245175fa0 R15: 00007fff7b637cc8 [ 818.607118][T24528] [ 818.607311][T24517] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.6990: Failed to acquire dquot type 1 [ 818.780389][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 818.946901][T24517] loop8: lost filesystem error report for type 5 error -28 [ 818.947236][T24517] EXT4-fs (loop8): 1 truncate cleaned up [ 818.960981][T24517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.987280][T24517] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 819.100522][T24498] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.129560][T24498] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.195718][T24498] bridge_slave_0: entered allmulticast mode [ 819.216591][T24498] bridge_slave_0: entered promiscuous mode [ 819.229056][T24517] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 819.248773][T24498] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.261232][T24498] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.282663][T24498] bridge_slave_1: entered allmulticast mode [ 819.289573][T24498] bridge_slave_1: entered promiscuous mode [ 819.317157][T18656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.320884][T24498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.336993][T24498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.391393][T24498] team0: Port device team_slave_0 added [ 819.410647][T24498] team0: Port device team_slave_1 added [ 819.448991][T13196] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 819.475376][T24498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.492606][T24498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.542359][T24546] netlink: 'syz.4.6997': attribute type 21 has an invalid length. [ 819.555473][T24498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.577666][T24498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.592722][T24498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.640265][T24498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.696998][T24498] hsr_slave_0: entered promiscuous mode [ 819.721202][T24498] hsr_slave_1: entered promiscuous mode [ 819.734015][T24498] debugfs: 'hsr0' already exists in 'hsr' [ 819.744839][T24498] Cannot create hsr debugfs directory [ 819.754515][T23033] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.926504][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1094.tmp-b7:7' failed: Read-only file system [ 819.981742][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 819.982907][T24498] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.002201][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1094.tmp-b7:7' failed: Read-only file system [ 820.030777][T24498] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.186026][T24560] loop8: detected capacity change from 0 to 512 [ 820.307508][T24560] EXT4-fs (loop8): 1 orphan inode deleted [ 820.332433][T24560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.360343][T24560] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 820.410550][T24560] Cannot find del_set index 29 as target [ 820.423151][T24560] netlink: 'syz.8.7000': attribute type 10 has an invalid length. [ 820.435851][ T310] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 820.481744][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1095.tmp-b7:8' failed: Read-only file system [ 820.506452][ T310] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 820.539666][T24560] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 820.558603][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 820.590771][T24498] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.636335][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 820.862787][T24100] udevd[24100]: symlink '../../loop7' '/dev/disk/by-diskseq/1094.tmp-b7:7' failed: Read-only file system [ 820.894494][T24498] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.942193][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1095.tmp-b7:8' failed: Read-only file system [ 821.006744][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 821.031704][T24498] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.066508][T24100] udevd[24100]: symlink '../../loop7' '/dev/disk/by-diskseq/1094.tmp-b7:7' failed: Read-only file system [ 821.084436][T24498] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.185509][T24580] FAULT_INJECTION: forcing a failure. [ 821.185509][T24580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.226473][T24580] CPU: 0 UID: 0 PID: 24580 Comm: syz.7.7009 Not tainted syzkaller #0 PREEMPT(full) [ 821.226580][T24580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 821.226628][T24580] Call Trace: [ 821.226637][T24580] [ 821.226647][T24580] __dump_stack+0x1d/0x30 [ 821.226680][T24580] dump_stack_lvl+0x95/0xd0 [ 821.226714][T24580] dump_stack+0x15/0x1b [ 821.226794][T24580] should_fail_ex+0x263/0x280 [ 821.226831][T24580] should_fail+0xb/0x20 [ 821.226864][T24580] should_fail_usercopy+0x1a/0x20 [ 821.226895][T24580] _copy_from_user+0x1c/0xb0 [ 821.226932][T24580] ___sys_recvmsg+0xaa/0x3b0 [ 821.226970][T24580] do_recvmmsg+0x1ef/0x560 [ 821.226999][T24580] ? fput+0x8f/0xc0 [ 821.227034][T24580] __x64_sys_recvmmsg+0xe5/0x170 [ 821.227062][T24580] x64_sys_call+0x80f/0x3020 [ 821.227106][T24580] do_syscall_64+0x12c/0x3b0 [ 821.227132][T24580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.227158][T24580] RIP: 0033:0x7fa1062cc819 [ 821.227200][T24580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.227218][T24580] RSP: 002b:00007fa104d06028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 821.227243][T24580] RAX: ffffffffffffffda RBX: 00007fa106546090 RCX: 00007fa1062cc819 [ 821.227275][T24580] RDX: 040000000000018c RSI: 00002000000050c0 RDI: 0000000000000004 [ 821.227291][T24580] RBP: 00007fa104d06090 R08: 0000000000000000 R09: 0000000000000000 [ 821.227308][T24580] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 821.227323][T24580] R13: 00007fa106546128 R14: 00007fa106546090 R15: 00007ffe85ffeba8 [ 821.227343][T24580] [ 821.470097][T12731] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 821.503859][T24498] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.528460][T24498] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.547232][T24582] program syz.4.7010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 821.710877][T24498] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 821.744943][T24498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 821.781872][T24498] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 821.803755][T24498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 821.831981][T24498] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 821.853071][T24498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 821.879087][T24498] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 821.889904][T18656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.921666][T23461] udevd[23461]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 821.953670][T24498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 821.962356][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1095.tmp-b7:8' failed: Read-only file system [ 821.989218][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 822.086710][T24603] loop8: detected capacity change from 0 to 512 [ 822.101669][T24498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.122113][T24603] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 822.141045][T24603] EXT4-fs (loop8): 1 truncate cleaned up [ 822.148330][T24498] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.158008][T24603] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.158488][T12761] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.177137][T12761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.245899][T12761] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.253044][T12761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.547722][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 822.894314][T24616] netlink: 'syz.7.7017': attribute type 20 has an invalid length. [ 822.902775][T24616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 822.969118][T24614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7026'. [ 822.969349][T18656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.998305][T24498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.079759][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 823.598973][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 823.822077][T24498] veth0_vlan: entered promiscuous mode [ 824.095841][T24498] veth1_vlan: entered promiscuous mode [ 824.184486][T24498] veth0_macvtap: entered promiscuous mode [ 824.209170][T13195] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 824.234676][T24498] veth1_macvtap: entered promiscuous mode [ 824.288384][T24498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.335634][T24498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.388706][T13195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.427334][T13195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.456152][T24645] loop7: detected capacity change from 0 to 512 [ 824.478812][T13195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.534242][T13195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.597582][T24645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.714289][T23033] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.759098][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 824.883186][T24657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7028'. [ 824.982828][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1098.tmp-b7:8' failed: Read-only file system [ 825.014634][T24100] udevd[24100]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 825.031786][T24100] udevd[24100]: symlink '../../loop7' '/dev/disk/by-diskseq/1099.tmp-b7:7' failed: Read-only file system [ 825.054819][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1099.tmp-b7:7' failed: Read-only file system [ 825.079479][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1101.tmp-b7:7' failed: Read-only file system [ 825.108539][ T28] audit: type=1400 audit(1776703990.210:1398): avc: denied { append } for pid=24667 comm="syz.7.7032" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 825.126186][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1098.tmp-b7:8' failed: Read-only file system [ 825.199208][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1098.tmp-b7:8' failed: Read-only file system [ 825.288982][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 826.094425][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 826.301528][T23461] udevd[23461]: symlink '../../loop2' '/dev/disk/by-diskseq/1100.tmp-b7:2' failed: Read-only file system [ 826.384279][T23461] udevd[23461]: symlink '../../loop2' '/dev/disk/by-diskseq/1100.tmp-b7:2' failed: Read-only file system [ 826.494259][T23461] udevd[23461]: symlink '../../loop2' '/dev/disk/by-diskseq/1100.tmp-b7:2' failed: Read-only file system [ 826.865761][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 827.485194][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 827.611535][ T3052] veth0_macvtap: left promiscuous mode [ 827.643714][T24730] loop8: detected capacity change from 0 to 512 [ 827.663934][T24730] EXT4-fs: Ignoring removed nobh option [ 827.710478][T24730] ext4: Unknown parameter 'fsname' [ 827.797749][T24740] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.808953][T24740] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.823554][T24746] netlink: 'syz.8.7047': attribute type 21 has an invalid length. [ 827.831206][T24740] bridge0: entered allmulticast mode [ 828.109963][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 830.302169][T24803] FAULT_INJECTION: forcing a failure. [ 830.302169][T24803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.333525][ T28] audit: type=1400 audit(1776703995.430:1399): avc: denied { connect } for pid=24799 comm="syz.4.7068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 830.389448][T24803] CPU: 0 UID: 0 PID: 24803 Comm: syz.8.7069 Not tainted syzkaller #0 PREEMPT(full) [ 830.389489][T24803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 830.389523][T24803] Call Trace: [ 830.389531][T24803] [ 830.389540][T24803] __dump_stack+0x1d/0x30 [ 830.389571][T24803] dump_stack_lvl+0x95/0xd0 [ 830.389601][T24803] dump_stack+0x15/0x1b [ 830.389659][T24803] should_fail_ex+0x263/0x280 [ 830.389757][T24803] should_fail+0xb/0x20 [ 830.389786][T24803] should_fail_usercopy+0x1a/0x20 [ 830.389881][T24803] _copy_from_user+0x1c/0xb0 [ 830.389901][T24803] ___sys_sendmsg+0xc1/0x1e0 [ 830.389989][T24803] ? path_openat+0x1b01/0x2050 [ 830.390036][T24803] __sys_sendmmsg+0x185/0x320 [ 830.390066][T24803] __x64_sys_sendmmsg+0x57/0x70 [ 830.390088][T24803] x64_sys_call+0x27aa/0x3020 [ 830.390145][T24803] do_syscall_64+0x12c/0x3b0 [ 830.390232][T24803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.390313][T24803] RIP: 0033:0x7f244f52c819 [ 830.390333][T24803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.390359][T24803] RSP: 002b:00007f244df7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 830.390385][T24803] RAX: ffffffffffffffda RBX: 00007f244f7a5fa0 RCX: 00007f244f52c819 [ 830.390399][T24803] RDX: 0000000000000001 RSI: 0000200000001840 RDI: 0000000000000003 [ 830.390412][T24803] RBP: 00007f244df7f090 R08: 0000000000000000 R09: 0000000000000000 [ 830.390428][T24803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.390444][T24803] R13: 00007f244f7a6038 R14: 00007f244f7a5fa0 R15: 00007ffee37e5f08 [ 830.390484][T24803] [ 830.391335][T24100] udevd[24100]: symlink '../../loop7' '/dev/disk/by-diskseq/1101.tmp-b7:7' failed: Read-only file system [ 830.581904][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1103.tmp-b7:8' failed: Read-only file system [ 830.858555][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 830.882999][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1103.tmp-b7:8' failed: Read-only file system [ 831.025196][T24813] tipc: Enabling of bearer rejected, failed to enable media [ 831.048325][T24813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.059072][T24813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.070077][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1103.tmp-b7:8' failed: Read-only file system [ 831.127627][ T28] audit: type=1400 audit(1776703996.230:1400): avc: denied { watch_reads } for pid=24812 comm="syz.4.7073" path="/563/file1" dev="tmpfs" ino=2931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 831.175805][T24100] udevd[24100]: symlink '../../loop7' '/dev/disk/by-diskseq/1101.tmp-b7:7' failed: Read-only file system [ 831.210755][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1103.tmp-b7:8' failed: Read-only file system [ 831.292615][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1101.tmp-b7:7' failed: Read-only file system [ 831.418586][T23461] udevd[23461]: symlink '../../loop2' '/dev/disk/by-diskseq/1100.tmp-b7:2' failed: Read-only file system [ 831.426345][T13196] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 831.489664][T23461] udevd[23461]: symlink '../../loop2' '/dev/disk/by-diskseq/1100.tmp-b7:2' failed: Read-only file system [ 831.519421][T24831] loop2: detected capacity change from 0 to 1024 [ 831.555051][T24831] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 831.569141][T24831] System zones: 0-1, 3-36 [ 831.783300][T23461] udevd[23461]: symlink '../../loop2' '/dev/disk/by-diskseq/1104.tmp-b7:2' failed: Read-only file system [ 831.822667][T24831] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.7081: bad orphan inode 134217728 [ 831.875279][T24838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7082'. [ 831.895542][T24831] loop2: lost filesystem error report for type 5 error -117 [ 831.896722][T24831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.969120][T13196] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 832.441744][T24847] 9p: Unknown access argument c: -22 [ 832.587683][T24498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.596941][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 832.856579][T24857] syzkaller0: entered promiscuous mode [ 832.868232][T24857] syzkaller0: entered allmulticast mode [ 833.316441][T24861] netlink: 'syz.0.7089': attribute type 21 has an invalid length. [ 833.381042][T24857] netlink: 'syz.4.7090': attribute type 21 has an invalid length. [ 834.114693][T12731] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 834.132918][T24872] syzkaller0: entered promiscuous mode [ 834.997835][T24870] netlink: 'syz.7.7093': attribute type 21 has an invalid length. [ 835.012066][T24872] syzkaller0: entered allmulticast mode [ 835.069100][T24865] netlink: 'syz.2.7092': attribute type 21 has an invalid length. [ 835.418449][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1103.tmp-b7:8' failed: Read-only file system [ 835.513474][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1103.tmp-b7:8' failed: Read-only file system [ 835.541554][T24100] udevd[24100]: symlink '../../loop2' '/dev/disk/by-diskseq/1105.tmp-b7:2' failed: Read-only file system [ 835.595390][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1103.tmp-b7:8' failed: Read-only file system [ 835.640285][T24898] loop8: detected capacity change from 0 to 1024 [ 835.649152][T24899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7109'. [ 835.679087][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1106.tmp-b7:8' failed: Read-only file system [ 835.698629][T24898] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 835.726042][T24898] System zones: 0-1, 3-36 [ 835.737815][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 835.760602][T24100] udevd[24100]: symlink '../../loop2' '/dev/disk/by-diskseq/1105.tmp-b7:2' failed: Read-only file system [ 835.774358][T24898] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.7099: bad orphan inode 134217728 [ 835.800943][T24898] loop8: lost filesystem error report for type 5 error -117 [ 835.801564][T24898] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.885573][T24906] 9p: Unknown access argument c: -22 [ 835.919339][ T12] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 836.083069][T23461] udevd[23461]: symlink '../../loop2' '/dev/disk/by-diskseq/1105.tmp-b7:2' failed: Read-only file system [ 836.222491][T18656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.257334][T23461] udevd[23461]: symlink '../../loop2' '/dev/disk/by-diskseq/1105.tmp-b7:2' failed: Read-only file system [ 836.385892][ T28] audit: type=1400 audit(1776704256.489:1401): avc: denied { create } for pid=24915 comm="syz.7.7106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 836.391837][T24100] udevd[24100]: symlink '../../loop7' '/dev/disk/by-diskseq/1101.tmp-b7:7' failed: Read-only file system [ 836.483654][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 836.505732][T24927] syzkaller0: entered promiscuous mode [ 836.520213][T24927] syzkaller0: entered allmulticast mode [ 836.550987][T24927] netlink: 'syz.2.7108': attribute type 21 has an invalid length. [ 837.028982][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 837.548796][ T12] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 837.653907][T24944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7113'. [ 837.656706][T24942] syzkaller0: entered promiscuous mode [ 837.669377][T24942] syzkaller0: entered allmulticast mode [ 837.698676][T24942] netlink: 'syz.4.7112': attribute type 21 has an invalid length. [ 837.733992][T24954] FAULT_INJECTION: forcing a failure. [ 837.733992][T24954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.752393][T24954] CPU: 1 UID: 0 PID: 24954 Comm: syz.0.7116 Not tainted syzkaller #0 PREEMPT(full) [ 837.752422][T24954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 837.752476][T24954] Call Trace: [ 837.752483][T24954] [ 837.752492][T24954] __dump_stack+0x1d/0x30 [ 837.752524][T24954] dump_stack_lvl+0x95/0xd0 [ 837.752626][T24954] dump_stack+0x15/0x1b [ 837.752697][T24954] should_fail_ex+0x263/0x280 [ 837.752727][T24954] should_fail+0xb/0x20 [ 837.752755][T24954] should_fail_usercopy+0x1a/0x20 [ 837.752807][T24954] _copy_from_user+0x1c/0xb0 [ 837.752828][T24954] ___sys_sendmsg+0xc1/0x1e0 [ 837.752948][T24954] __x64_sys_sendmsg+0xd4/0x160 [ 837.752974][T24954] x64_sys_call+0x194c/0x3020 [ 837.753067][T24954] do_syscall_64+0x12c/0x3b0 [ 837.753088][T24954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.753120][T24954] RIP: 0033:0x7f031f43c819 [ 837.753140][T24954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.753238][T24954] RSP: 002b:00007f031de97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.753263][T24954] RAX: ffffffffffffffda RBX: 00007f031f6b5fa0 RCX: 00007f031f43c819 [ 837.753281][T24954] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 837.753361][T24954] RBP: 00007f031de97090 R08: 0000000000000000 R09: 0000000000000000 [ 837.753431][T24954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.753443][T24954] R13: 00007f031f6b6038 R14: 00007f031f6b5fa0 R15: 00007ffff977ef28 [ 837.753461][T24954] [ 837.925130][T24959] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7119'. [ 837.948897][T24959] bond1: entered promiscuous mode [ 837.958472][T24959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 837.997240][T24970] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7124'. [ 838.031423][T24967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7122'. [ 838.068705][T13196] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 838.093699][ T28] audit: type=1400 audit(1776704258.119:1402): avc: denied { mounton } for pid=24971 comm="syz.4.7123" path="/syzcgroup/unified/syz4" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 838.176630][T24980] FAULT_INJECTION: forcing a failure. [ 838.176630][T24980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.190158][T24980] CPU: 0 UID: 0 PID: 24980 Comm: syz.4.7127 Not tainted syzkaller #0 PREEMPT(full) [ 838.190252][T24980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 838.190268][T24980] Call Trace: [ 838.190278][T24980] [ 838.190348][T24980] __dump_stack+0x1d/0x30 [ 838.190392][T24980] dump_stack_lvl+0x95/0xd0 [ 838.190415][T24980] dump_stack+0x15/0x1b [ 838.190437][T24980] should_fail_ex+0x263/0x280 [ 838.190473][T24980] should_fail+0xb/0x20 [ 838.190516][T24980] should_fail_usercopy+0x1a/0x20 [ 838.190606][T24980] _copy_from_user+0x1c/0xb0 [ 838.190628][T24980] __sys_bpf+0x183/0x7e0 [ 838.190698][T24980] __x64_sys_bpf+0x41/0x50 [ 838.190722][T24980] x64_sys_call+0x10cb/0x3020 [ 838.190754][T24980] do_syscall_64+0x12c/0x3b0 [ 838.190842][T24980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.190876][T24980] RIP: 0033:0x7f4244efc819 [ 838.190894][T24980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.190914][T24980] RSP: 002b:00007f4243957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 838.191016][T24980] RAX: ffffffffffffffda RBX: 00007f4245175fa0 RCX: 00007f4244efc819 [ 838.191033][T24980] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 838.191049][T24980] RBP: 00007f4243957090 R08: 0000000000000000 R09: 0000000000000000 [ 838.191065][T24980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.191077][T24980] R13: 00007f4245176038 R14: 00007f4245175fa0 R15: 00007fff7b637cc8 [ 838.191096][T24980] [ 838.360667][T24983] SET target dimension over the limit! [ 838.404278][ T28] audit: type=1400 audit(1776704258.509:1403): avc: denied { setopt } for pid=24987 comm="syz.4.7129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 838.422071][T24983] netlink: 14 bytes leftover after parsing attributes in process `syz.8.7124'. [ 838.441838][T24970] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 838.588687][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 838.976885][T24983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.988369][T24983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.000546][T24983] bond0 (unregistering): Released all slaves [ 839.026558][ T3595] syz1: Port: 1 Link DOWN [ 839.091529][ T28] audit: type=1400 audit(1776704259.200:1404): avc: denied { sqpoll } for pid=25001 comm="syz.0.7132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 839.113560][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 839.209875][T25018] FAULT_INJECTION: forcing a failure. [ 839.209875][T25018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.235103][ T28] audit: type=1400 audit(1776704259.340:1405): avc: denied { relabelfrom } for pid=25012 comm="syz.7.7134" name="NETLINK" dev="sockfs" ino=79986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 839.261326][T25018] CPU: 1 UID: 0 PID: 25018 Comm: syz.0.7136 Not tainted syzkaller #0 PREEMPT(full) [ 839.261359][T25018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 839.261409][T25018] Call Trace: [ 839.261419][T25018] [ 839.261429][T25018] __dump_stack+0x1d/0x30 [ 839.261518][T25018] dump_stack_lvl+0x95/0xd0 [ 839.261591][T25018] dump_stack+0x15/0x1b [ 839.261621][T25018] should_fail_ex+0x263/0x280 [ 839.261671][T25018] should_fail+0xb/0x20 [ 839.261703][T25018] should_fail_usercopy+0x1a/0x20 [ 839.261798][T25018] _copy_from_user+0x1c/0xb0 [ 839.261853][T25018] ___sys_sendmsg+0xc1/0x1e0 [ 839.261889][T25018] __x64_sys_sendmsg+0xd4/0x160 [ 839.261919][T25018] x64_sys_call+0x194c/0x3020 [ 839.261951][T25018] do_syscall_64+0x12c/0x3b0 [ 839.262000][T25018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.262025][T25018] RIP: 0033:0x7f031f43c819 [ 839.262045][T25018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.262096][T25018] RSP: 002b:00007f031de97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.262122][T25018] RAX: ffffffffffffffda RBX: 00007f031f6b5fa0 RCX: 00007f031f43c819 [ 839.262207][T25018] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 839.262224][T25018] RBP: 00007f031de97090 R08: 0000000000000000 R09: 0000000000000000 [ 839.262248][T25018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.262312][T25018] R13: 00007f031f6b6038 R14: 00007f031f6b5fa0 R15: 00007ffff977ef28 [ 839.262398][T25018] [ 839.426736][ T28] audit: type=1400 audit(1776704259.340:1406): avc: denied { relabelto } for pid=25012 comm="syz.7.7134" name="NETLINK" dev="sockfs" ino=79986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 839.603344][T25042] syzkaller0: entered promiscuous mode [ 839.637684][T25048] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7146'. [ 839.646919][T25048] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7146'. [ 839.655984][T25042] syzkaller0: entered allmulticast mode [ 839.669909][T25049] netlink: 'syz.0.7144': attribute type 21 has an invalid length. [ 839.678362][T25048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7146'. [ 839.679921][T13196] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 839.705068][T25048] netlink: 'syz.4.7146': attribute type 49 has an invalid length. [ 839.867448][T25062] usb usb8: usbfs: process 25062 (syz.4.7149) did not claim interface 0 before use [ 839.881770][T25062] FAULT_INJECTION: forcing a failure. [ 839.881770][T25062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.895376][T25062] CPU: 0 UID: 0 PID: 25062 Comm: syz.4.7149 Not tainted syzkaller #0 PREEMPT(full) [ 839.895434][T25062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 839.895448][T25062] Call Trace: [ 839.895457][T25062] [ 839.895465][T25062] __dump_stack+0x1d/0x30 [ 839.895497][T25062] dump_stack_lvl+0x95/0xd0 [ 839.895572][T25062] dump_stack+0x15/0x1b [ 839.895633][T25062] should_fail_ex+0x263/0x280 [ 839.895669][T25062] should_fail+0xb/0x20 [ 839.895701][T25062] should_fail_usercopy+0x1a/0x20 [ 839.895796][T25062] _copy_to_user+0x20/0xa0 [ 839.895883][T25062] simple_read_from_buffer+0xb5/0x130 [ 839.895919][T25062] proc_fail_nth_read+0x10e/0x150 [ 839.895953][T25062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 839.896028][T25062] vfs_read+0x1ab/0x7f0 [ 839.896063][T25062] ? proc_bulk_compat+0x10d/0x140 [ 839.896139][T25062] ? __rcu_read_unlock+0x4e/0x70 [ 839.896165][T25062] ? __fget_files+0x184/0x1c0 [ 839.896305][T25062] ? mutex_lock+0x57/0x90 [ 839.896332][T25062] ksys_read+0xdc/0x1a0 [ 839.896364][T25062] __x64_sys_read+0x40/0x50 [ 839.896401][T25062] x64_sys_call+0x2886/0x3020 [ 839.896481][T25062] do_syscall_64+0x12c/0x3b0 [ 839.896505][T25062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.896530][T25062] RIP: 0033:0x7f4244ebd04e [ 839.896549][T25062] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 839.896569][T25062] RSP: 002b:00007f4243956fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 839.896632][T25062] RAX: ffffffffffffffda RBX: 00007f42439576c0 RCX: 00007f4244ebd04e [ 839.896650][T25062] RDX: 000000000000000f RSI: 00007f42439570a0 RDI: 0000000000000004 [ 839.896663][T25062] RBP: 00007f4243957090 R08: 0000000000000000 R09: 0000000000000000 [ 839.896721][T25062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.896754][T25062] R13: 00007f4245176038 R14: 00007f4245175fa0 R15: 00007fff7b637cc8 [ 839.896774][T25062] [ 840.098848][T25072] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7150'. [ 840.144493][T25076] loop2: detected capacity change from 0 to 512 [ 840.165211][T25076] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 840.178294][T25076] EXT4-fs (loop2): 1 truncate cleaned up [ 840.189299][T25076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 840.208770][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 840.484955][T25085] FAULT_INJECTION: forcing a failure. [ 840.484955][T25085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.499062][T25085] CPU: 1 UID: 0 PID: 25085 Comm: syz.0.7154 Not tainted syzkaller #0 PREEMPT(full) [ 840.499153][T25085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 840.499168][T25085] Call Trace: [ 840.499174][T25085] [ 840.499183][T25085] __dump_stack+0x1d/0x30 [ 840.499217][T25085] dump_stack_lvl+0x95/0xd0 [ 840.499339][T25085] dump_stack+0x15/0x1b [ 840.499368][T25085] should_fail_ex+0x263/0x280 [ 840.499399][T25085] should_fail+0xb/0x20 [ 840.499432][T25085] should_fail_usercopy+0x1a/0x20 [ 840.499500][T25085] _copy_from_user+0x1c/0xb0 [ 840.499519][T25085] __sys_connect+0xd0/0x2a0 [ 840.499563][T25085] __x64_sys_connect+0x3f/0x50 [ 840.499586][T25085] x64_sys_call+0x2df0/0x3020 [ 840.499620][T25085] do_syscall_64+0x12c/0x3b0 [ 840.499644][T25085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.499795][T25085] RIP: 0033:0x7f031f43c819 [ 840.499815][T25085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.499837][T25085] RSP: 002b:00007f031de76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 840.499860][T25085] RAX: ffffffffffffffda RBX: 00007f031f6b6090 RCX: 00007f031f43c819 [ 840.499925][T25085] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000007 [ 840.499939][T25085] RBP: 00007f031de76090 R08: 0000000000000000 R09: 0000000000000000 [ 840.499953][T25085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.499965][T25085] R13: 00007f031f6b6128 R14: 00007f031f6b6090 R15: 00007ffff977ef28 [ 840.499984][T25085] [ 840.820455][T12731] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 840.831961][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1101.tmp-b7:7' failed: Read-only file system [ 840.883265][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1101.tmp-b7:7' failed: Read-only file system [ 840.953559][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1101.tmp-b7:7' failed: Read-only file system [ 840.968003][T25094] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7158'. [ 841.037618][T24498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.055105][T24100] udevd[24100]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:2' failed: Read-only file system [ 841.071080][T24100] udevd[24100]: symlink '../../loop2' '/dev/disk/by-diskseq/1108.tmp-b7:2' failed: Read-only file system [ 841.087453][T23461] udevd[23461]: symlink '../../loop5' '/dev/disk/by-diskseq/1040.tmp-b7:5' failed: Read-only file system [ 841.090116][T23211] udevd[23211]: symlink '../../loop7' '/dev/disk/by-diskseq/1101.tmp-b7:7' failed: Read-only file system [ 841.112916][T24100] udevd[24100]: symlink '../../loop2' '/dev/disk/by-diskseq/1108.tmp-b7:2' failed: Read-only file system [ 841.131956][T23461] udevd[23461]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 841.285314][T25106] netlink: 'syz.4.7160': attribute type 13 has an invalid length. [ 841.341379][ T28] audit: type=1326 audit(1776704261.450:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25101 comm="syz.7.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1062cc819 code=0x7ffc0000 [ 841.368194][ T28] audit: type=1326 audit(1776704261.450:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25101 comm="syz.7.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1062cc819 code=0x7ffc0000 [ 841.392114][ T28] audit: type=1326 audit(1776704261.480:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25101 comm="syz.7.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1062cc819 code=0x7ffc0000 [ 841.415889][ T28] audit: type=1326 audit(1776704261.480:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25101 comm="syz.7.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1062cc819 code=0x7ffc0000 [ 841.418011][T23461] udevd[23461]: symlink '../../loop2' '/dev/disk/by-diskseq/1109.tmp-b7:2' failed: Read-only file system [ 841.455772][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 841.500393][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 841.500414][ T28] audit: type=1326 audit(1776704261.610:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25101 comm="syz.7.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1062cc819 code=0x7ffc0000 [ 841.528726][T25108] batman_adv: batadv0: Adding interface: dummy0 [ 841.530288][ T28] audit: type=1326 audit(1776704261.610:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25101 comm="syz.7.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1062cc819 code=0x7ffc0000 [ 841.536405][T25108] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.586715][T25108] batman_adv: batadv0: Interface activated: dummy0 [ 841.603442][ T28] audit: type=1326 audit(1776704261.680:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25101 comm="syz.7.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1062cc819 code=0x7ffc0000 [ 841.630239][ T28] audit: type=1326 audit(1776704261.720:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25101 comm="syz.7.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1062cc819 code=0x7ffc0000 [ 841.653887][ T28] audit: type=1326 audit(1776704261.730:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25101 comm="syz.7.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1062cc819 code=0x7ffc0000 [ 841.700025][ T28] audit: type=1326 audit(1776704261.730:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25101 comm="syz.7.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1062cc819 code=0x7ffc0000 [ 841.724509][ T28] audit: type=1326 audit(1776704261.730:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25119 comm="syz.2.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4f82c819 code=0x7ffc0000 [ 841.748750][ T28] audit: type=1326 audit(1776704261.730:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25119 comm="syz.2.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4f82c819 code=0x7ffc0000 [ 841.773051][ T28] audit: type=1326 audit(1776704261.730:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25119 comm="syz.2.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e4f82c819 code=0x7ffc0000 [ 841.782347][T25102] batadv0: mtu less than device minimum [ 841.797211][ T28] audit: type=1326 audit(1776704261.730:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25119 comm="syz.2.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4f82c819 code=0x7ffc0000 [ 841.835457][T25102] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 841.851286][T25102] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 841.911645][T25123] batman_adv: batadv0: Adding interface: dummy0 [ 841.934280][T25123] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.999759][T25123] batman_adv: batadv0: Interface activated: dummy0 [ 842.028389][T25143] loop7: detected capacity change from 0 to 512 [ 842.061548][T25143] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 842.099099][T25143] EXT4-fs (loop7): 1 truncate cleaned up [ 842.110491][T25143] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 842.183944][T25149] lo speed is unknown, defaulting to 1000 [ 842.220675][T25149] lo speed is unknown, defaulting to 1000 [ 842.226941][T25149] lo speed is unknown, defaulting to 1000 [ 842.233601][T25149] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 842.245547][T25149] lo speed is unknown, defaulting to 1000 [ 842.253545][T25149] lo speed is unknown, defaulting to 1000 [ 842.266445][T25149] lo speed is unknown, defaulting to 1000 [ 842.284526][T25149] lo speed is unknown, defaulting to 1000 [ 842.313563][T25149] lo speed is unknown, defaulting to 1000 [ 842.326651][T25149] lo speed is unknown, defaulting to 1000 [ 842.340098][T25149] lo speed is unknown, defaulting to 1000 [ 842.367283][T25149] lo speed is unknown, defaulting to 1000 [ 842.440737][T25149] lo speed is unknown, defaulting to 1000 [ 842.478072][T25149] lo speed is unknown, defaulting to 1000 [ 842.518858][T25149] lo speed is unknown, defaulting to 1000 [ 842.527962][T25149] lo speed is unknown, defaulting to 1000 [ 842.961248][T25155] loop8: detected capacity change from 0 to 4096 [ 842.987414][T25155] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.508083][T12721] net_ratelimit: 40 callbacks suppressed [ 843.508152][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 843.585890][T23033] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.648223][T25166] __nla_validate_parse: 3 callbacks suppressed [ 843.648240][T25166] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7176'. [ 843.681253][T18656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.732811][T25175] netlink: 'syz.4.7181': attribute type 21 has an invalid length. [ 843.786822][T25182] syzkaller0: entered promiscuous mode [ 843.792728][T25182] syzkaller0: entered allmulticast mode [ 843.810962][T25182] netlink: 'syz.4.7184': attribute type 21 has an invalid length. [ 843.926360][T25188] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7186'. [ 844.010647][T25201] FAULT_INJECTION: forcing a failure. [ 844.010647][T25201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.028170][T25204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7190'. [ 844.029081][T25201] CPU: 0 UID: 0 PID: 25201 Comm: syz.4.7191 Not tainted syzkaller #0 PREEMPT(full) [ 844.029182][T25201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 844.029216][T25201] Call Trace: [ 844.029223][T25201] [ 844.029231][T25201] __dump_stack+0x1d/0x30 [ 844.029266][T25201] dump_stack_lvl+0x95/0xd0 [ 844.029296][T25201] dump_stack+0x15/0x1b [ 844.029320][T25201] should_fail_ex+0x263/0x280 [ 844.029351][T25201] should_fail+0xb/0x20 [ 844.029445][T25201] should_fail_usercopy+0x1a/0x20 [ 844.029558][T25201] _copy_from_user+0x1c/0xb0 [ 844.029578][T25201] ___sys_sendmsg+0xc1/0x1e0 [ 844.029620][T25201] __x64_sys_sendmsg+0xd4/0x160 [ 844.029646][T25201] x64_sys_call+0x194c/0x3020 [ 844.029705][T25201] do_syscall_64+0x12c/0x3b0 [ 844.029726][T25201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.029794][T25201] RIP: 0033:0x7f4244efc819 [ 844.029812][T25201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.029905][T25201] RSP: 002b:00007f4243957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.029928][T25201] RAX: ffffffffffffffda RBX: 00007f4245175fa0 RCX: 00007f4244efc819 [ 844.029943][T25201] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 844.029957][T25201] RBP: 00007f4243957090 R08: 0000000000000000 R09: 0000000000000000 [ 844.029970][T25201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.029984][T25201] R13: 00007f4245176038 R14: 00007f4245175fa0 R15: 00007fff7b637cc8 [ 844.030060][T25201] [ 844.048737][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 844.334997][T25222] syzkaller0: entered promiscuous mode [ 844.342234][T25222] syzkaller0: entered allmulticast mode [ 844.350000][T25222] netlink: 'syz.2.7198': attribute type 21 has an invalid length. [ 844.440182][T25224] netlink: 'syz.0.7196': attribute type 21 has an invalid length. [ 844.451897][T25224] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 844.459349][T25224] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 844.466798][T25224] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 844.727951][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 845.247820][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 845.767767][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 846.287693][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 846.573158][T23461] udevd[23461]: symlink '../../loop7' '/dev/disk/by-diskseq/1112.tmp-b7:7' failed: Read-only file system [ 846.582965][T25246] FAULT_INJECTION: forcing a failure. [ 846.582965][T25246] name failslab, interval 1, probability 0, space 0, times 0 [ 846.597884][T25246] CPU: 1 UID: 0 PID: 25246 Comm: syz.4.7204 Not tainted syzkaller #0 PREEMPT(full) [ 846.597914][T25246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 846.597926][T25246] Call Trace: [ 846.597933][T25246] [ 846.597942][T25246] __dump_stack+0x1d/0x30 [ 846.598032][T25246] dump_stack_lvl+0x95/0xd0 [ 846.598062][T25246] dump_stack+0x15/0x1b [ 846.598087][T25246] should_fail_ex+0x263/0x280 [ 846.598198][T25246] should_failslab+0x8c/0xb0 [ 846.598221][T25246] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 846.598246][T25246] ? __alloc_skb+0x2d6/0x690 [ 846.598321][T25246] ? locks_remove_file+0x67/0x970 [ 846.598354][T25246] __alloc_skb+0x2d6/0x690 [ 846.598373][T25246] ? 0xffffffff81000000 [ 846.598465][T25246] ? __alloc_skb+0x200/0x690 [ 846.598487][T25246] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 846.598523][T25246] nfc_genl_device_removed+0x39/0x1d0 [ 846.598672][T25246] nfc_unregister_rfkill+0x1b/0xc0 [ 846.598705][T25246] nci_unregister_device+0x27/0x170 [ 846.598800][T25246] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 846.598830][T25246] virtual_ncidev_close+0x2a/0x50 [ 846.598910][T25246] __fput+0x29b/0x630 [ 846.598982][T25246] fput_close_sync+0xad/0x190 [ 846.599012][T25246] __x64_sys_close+0x55/0xf0 [ 846.599041][T25246] x64_sys_call+0x275d/0x3020 [ 846.599136][T25246] do_syscall_64+0x12c/0x3b0 [ 846.599158][T25246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.599180][T25246] RIP: 0033:0x7f4244efc819 [ 846.599196][T25246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.599307][T25246] RSP: 002b:00007f4243957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 846.599330][T25246] RAX: ffffffffffffffda RBX: 00007f4245175fa0 RCX: 00007f4244efc819 [ 846.599344][T25246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 846.599364][T25246] RBP: 00007f4243957090 R08: 0000000000000000 R09: 0000000000000000 [ 846.599377][T25246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.599391][T25246] R13: 00007f4245176038 R14: 00007f4245175fa0 R15: 00007fff7b637cc8 [ 846.599473][T25246] [ 846.824876][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 846.878540][T25255] FAULT_INJECTION: forcing a failure. [ 846.878540][T25255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.926381][T25255] CPU: 0 UID: 0 PID: 25255 Comm: syz.7.7209 Not tainted syzkaller #0 PREEMPT(full) [ 846.926476][T25255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 846.926492][T25255] Call Trace: [ 846.926501][T25255] [ 846.926509][T25255] __dump_stack+0x1d/0x30 [ 846.926619][T25255] dump_stack_lvl+0x95/0xd0 [ 846.926643][T25255] dump_stack+0x15/0x1b [ 846.926664][T25255] should_fail_ex+0x263/0x280 [ 846.926734][T25255] should_fail+0xb/0x20 [ 846.926769][T25255] should_fail_usercopy+0x1a/0x20 [ 846.926850][T25255] _copy_from_user+0x1c/0xb0 [ 846.926882][T25255] ___sys_sendmsg+0xc1/0x1e0 [ 846.926917][T25255] __x64_sys_sendmsg+0xd4/0x160 [ 846.926941][T25255] x64_sys_call+0x194c/0x3020 [ 846.926969][T25255] do_syscall_64+0x12c/0x3b0 [ 846.927033][T25255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.927059][T25255] RIP: 0033:0x7fa1062cc819 [ 846.927079][T25255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.927103][T25255] RSP: 002b:00007fa104d27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.927129][T25255] RAX: ffffffffffffffda RBX: 00007fa106545fa0 RCX: 00007fa1062cc819 [ 846.927213][T25255] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000003 [ 846.927231][T25255] RBP: 00007fa104d27090 R08: 0000000000000000 R09: 0000000000000000 [ 846.927247][T25255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.927263][T25255] R13: 00007fa106546038 R14: 00007fa106545fa0 R15: 00007ffe85ffeba8 [ 846.927283][T25255] [ 847.004474][T23285] udevd[23285]: symlink '../../loop8' '/dev/disk/by-diskseq/1113.tmp-b7:8' failed: Read-only file system [ 847.049636][T23211] udevd[23211]: symlink '../../loop7' '/dev/disk/by-diskseq/1112.tmp-b7:7' failed: Read-only file system [ 847.085821][T24100] udevd[24100]: symlink '../../loop2' '/dev/disk/by-diskseq/1109.tmp-b7:2' failed: Read-only file system [ 847.100151][T25263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7213'. [ 847.146273][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1113.tmp-b7:8' failed: Read-only file system [ 847.161588][T23461] udevd[23461]: symlink '../../loop8' '/dev/disk/by-diskseq/1113.tmp-b7:8' failed: Read-only file system [ 847.163504][T24100] udevd[24100]: symlink '../../loop2' '/dev/disk/by-diskseq/1109.tmp-b7:2' failed: Read-only file system [ 847.209121][T25278] Cannot find add_set index 0 as target [ 847.240362][T25279] netlink: 'syz.4.7210': attribute type 21 has an invalid length. [ 847.253305][T25279] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 847.260757][T25279] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 847.268155][T25279] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 847.302047][T25278] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 847.361793][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 847.381077][T23461] udevd[23461]: symlink '../../loop2' '/dev/disk/by-diskseq/1109.tmp-b7:2' failed: Read-only file system [ 847.447782][T23903] udevd[23903]: symlink '../../loop7' '/dev/disk/by-diskseq/1112.tmp-b7:7' failed: Read-only file system [ 847.480434][T25283] loop7: detected capacity change from 0 to 512 [ 847.491268][T25284] loop8: detected capacity change from 0 to 512 [ 847.500676][T25280] udevd[25280]: symlink '../../loop8' '/dev/disk/by-diskseq/1113.tmp-b7:8' failed: Read-only file system [ 847.539756][T25283] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 847.561195][T25284] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 847.630633][T25283] EXT4-fs (loop7): 1 truncate cleaned up [ 847.644642][T25284] EXT4-fs (loop8): 1 truncate cleaned up [ 847.662549][T25283] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.679742][T25284] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.773915][T25284] FAULT_INJECTION: forcing a failure. [ 847.773915][T25284] name failslab, interval 1, probability 0, space 0, times 0 [ 847.788350][T25278] loop2: detected capacity change from 0 to 8192 [ 847.795580][T25284] CPU: 1 UID: 0 PID: 25284 Comm: syz.8.7217 Not tainted syzkaller #0 PREEMPT(full) [ 847.795638][T25284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 847.795654][T25284] Call Trace: [ 847.795663][T25284] [ 847.795674][T25284] __dump_stack+0x1d/0x30 [ 847.795703][T25284] dump_stack_lvl+0x95/0xd0 [ 847.795730][T25284] dump_stack+0x15/0x1b [ 847.795780][T25284] should_fail_ex+0x263/0x280 [ 847.795852][T25284] ? __se_sys_mount+0xef/0x2e0 [ 847.795875][T25284] should_failslab+0x8c/0xb0 [ 847.795907][T25284] __kmalloc_cache_noprof+0x5f/0x400 [ 847.795935][T25284] ? __fget_files+0x184/0x1c0 [ 847.795961][T25284] __se_sys_mount+0xef/0x2e0 [ 847.796025][T25284] ? fput+0x8f/0xc0 [ 847.796072][T25284] ? ksys_write+0x194/0x1a0 [ 847.796110][T25284] __x64_sys_mount+0x67/0x80 [ 847.796187][T25284] x64_sys_call+0x2d61/0x3020 [ 847.796221][T25284] do_syscall_64+0x12c/0x3b0 [ 847.796244][T25284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.796270][T25284] RIP: 0033:0x7f244f52c819 [ 847.796351][T25284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.796369][T25284] RSP: 002b:00007f244df7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 847.796423][T25284] RAX: ffffffffffffffda RBX: 00007f244f7a5fa0 RCX: 00007f244f52c819 [ 847.796482][T25284] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 847.796497][T25284] RBP: 00007f244df7f090 R08: 0000200000000000 R09: 0000000000000000 [ 847.796513][T25284] R10: 0000000002200020 R11: 0000000000000246 R12: 0000000000000001 [ 847.796530][T25284] R13: 00007f244f7a6038 R14: 00007f244f7a5fa0 R15: 00007ffee37e5f08 [ 847.796551][T25284] [ 847.972546][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 848.134275][T25283] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 848.144943][T18656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.200642][T25293] ================================================================== [ 848.208789][T25293] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 848.216901][T25293] [ 848.219253][T25293] write to 0xffff88812c7d5c08 of 8 bytes by task 25288 on cpu 1: [ 848.226998][T25293] mas_wr_store_entry+0x3405/0x5ad0 [ 848.232236][T25293] mas_store_prealloc+0x43e/0x690 [ 848.237302][T25293] commit_merge+0x6a1/0x720 [ 848.241841][T25293] vma_expand+0x301/0x460 [ 848.246199][T25293] vma_merge_new_range+0x29c/0x320 [ 848.251344][T25293] mmap_region+0x10a5/0x20d0 [ 848.255971][T25293] do_mmap+0x9b2/0xbd0 [ 848.260075][T25293] vm_mmap_pgoff+0x183/0x2d0 [ 848.264679][T25293] ksys_mmap_pgoff+0xc1/0x310 [ 848.269370][T25293] x64_sys_call+0x14df/0x3020 [ 848.274063][T25293] do_syscall_64+0x12c/0x3b0 [ 848.278667][T25293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.284574][T25293] [ 848.286908][T25293] read to 0xffff88812c7d5c08 of 8 bytes by task 25293 on cpu 0: [ 848.294544][T25293] mtree_range_walk+0x1a6/0x490 [ 848.299411][T25293] mas_walk+0x1cc/0x370 [ 848.303586][T25293] lock_vma_under_rcu+0xc9/0x210 [ 848.308531][T25293] do_user_addr_fault+0x232/0x1050 [ 848.313669][T25293] exc_page_fault+0x62/0xa0 [ 848.318220][T25293] asm_exc_page_fault+0x26/0x30 [ 848.323089][T25293] [ 848.325414][T25293] value changed: 0x00007f031de34fff -> 0x00007f031de13fff [ 848.332525][T25293] [ 848.334854][T25293] Reported by Kernel Concurrency Sanitizer on: [ 848.341033][T25293] CPU: 0 UID: 0 PID: 25293 Comm: syz.0.7220 Not tainted syzkaller #0 PREEMPT(full) [ 848.350425][T25293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 848.360498][T25293] ================================================================== [ 848.408493][T23033] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.500642][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 848.859082][T25304] loop7: detected capacity change from 0 to 512 [ 848.869805][T25304] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 848.881457][T25304] EXT4-fs (loop7): 1 truncate cleaned up [ 848.887969][T25304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 848.903565][T25304] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 848.923517][T23033] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.017595][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 849.547448][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 850.077364][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 850.597645][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 851.127135][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 851.647422][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 852.167022][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 852.686951][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 853.207191][T12761] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 853.726864][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 854.246802][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 854.766694][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 855.286697][T12721] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 855.806614][ T310] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 856.326554][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 856.846628][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 857.366640][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 857.886327][T12725] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01