last executing test programs: 1m56.777673745s ago: executing program 2 (id=273): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1208002, &(0x7f0000000780), 0x1, 0x5de, &(0x7f0000001840)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000400)={[{@lazytime}, {@resuid}]}, 0xee, 0x2aa, &(0x7f0000001580)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x284ba, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x20d, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x0, 0x3a5f, 0x8}) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x6, 0x27, 0x3ff, 0xffff, 0x7}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000140)=0x8) syz_open_pts(r4, 0x0) 1m55.827799501s ago: executing program 2 (id=283): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0xffff7000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0x0, 0xffdfffbc) 1m55.297191712s ago: executing program 2 (id=288): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) utime(&(0x7f0000000000)='.\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r2, &(0x7f0000000000)="51f5f7", 0x3, 0x51f1f5461e6493fc, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2d, 0x0, 0x1f, 0x80000}, 0x4, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20004811}, 0x41) sendto(r1, &(0x7f0000000100)="6d5e0826b4333f73c991996f29cc6578f74de782a33e360d767dd6a7c94f918ea8541c03e9c160cb3d062db8382537ff981d5b340af87fa4f6683f85050739a5fcaa83d6ef6e1fec44e3d8c3b6ee5cbe2fbd1706f0eb384c30e61a1008070ee389638b0aba6cb2ad058afa0b38e1e1f68ad17aecc5a564e467eccd4252ab121be742eeb2cbdac16b7ec5f297e417c25cbe24f326cb06f0c31be1ec39d66a2beb0061e57260b11046b8491b3d15c5e4f31856d8120020446fa9be9ac91ae24a5c219c61b4fb89d9ad8fe9c4d112a295d8ef4d3ac0dfccf4520cf5fd71dc6b135ceda40d9ceee73324b75818df33414e", 0xef, 0x140400d9, &(0x7f0000000200)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x80) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x7ffffffe) 1m55.189646358s ago: executing program 2 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@usrjquota}, {@barrier}]}, 0x1, 0x45e, &(0x7f0000000600)="$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") 1m54.965442451s ago: executing program 2 (id=295): socket$netlink(0x10, 0x3, 0x10) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m54.719672995s ago: executing program 2 (id=300): r0 = io_uring_setup(0x3c93, &(0x7f00000000c0)={0x0, 0x74e0, 0x80, 0x1, 0x60}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x204010, &(0x7f0000000040)={[{@debug}, {@discard}, {@errors_remount}, {@discard}, {@minixdf}, {}, {@journal_dev={'journal_dev', 0x3d, 0xa}}]}, 0xfe, 0x46e, &(0x7f00000007c0)="$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") recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1}, 0x8}], 0x1, 0x23, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x7, 0x0, 0x0, 0x0, "f01881a1deb9fbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=@newqdisc={0x44, 0x10, 0x1, 0x2, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xffe0, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x38000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfa, 0x5, 0x0, 0x0, 0x0, 0x6, 0x20510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x9}, 0x90, 0x7, 0xfffffffe, 0x3, 0x363c, 0x0, 0x9, 0x0, 0x80000000}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) clock_adjtime(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4c001}, 0x900) socket$inet6(0xa, 0x80000, 0xe0af) 1m54.675750478s ago: executing program 32 (id=300): r0 = io_uring_setup(0x3c93, &(0x7f00000000c0)={0x0, 0x74e0, 0x80, 0x1, 0x60}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x204010, &(0x7f0000000040)={[{@debug}, {@discard}, {@errors_remount}, {@discard}, {@minixdf}, {}, {@journal_dev={'journal_dev', 0x3d, 0xa}}]}, 0xfe, 0x46e, &(0x7f00000007c0)="$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") recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1}, 0x8}], 0x1, 0x23, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x7, 0x0, 0x0, 0x0, "f01881a1deb9fbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=@newqdisc={0x44, 0x10, 0x1, 0x2, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xffe0, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x38000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfa, 0x5, 0x0, 0x0, 0x0, 0x6, 0x20510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x9}, 0x90, 0x7, 0xfffffffe, 0x3, 0x363c, 0x0, 0x9, 0x0, 0x80000000}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) clock_adjtime(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4c001}, 0x900) socket$inet6(0xa, 0x80000, 0xe0af) 41.599201422s ago: executing program 3 (id=1458): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200088c1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x2b}, {@in=@loopback, 0x0, 0x32}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x80, "b38e4d000000000000004600000000000000009fd797d6e037989f"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 41.535323166s ago: executing program 3 (id=1459): ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f00000002c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xd07, 0x3d}, 0x100b28, 0x8, 0x0, 0x1, 0x8, 0x20006, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FIBMAP(r5, 0x1, 0x0) r6 = fsmount(r2, 0x1, 0x5) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='-\'/\xac:]\xbd]!]\\!\x00', 0x0, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) getsockname$packet(r6, &(0x7f0000001e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001e80)=0x14) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r13, r11, 0x25, 0x0, @void}, 0xf) r14 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r15, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x1, 0x6, 0x9, 0x8, 0x9, 0xa, 0x9, 0x5, 0x2, 0x2, 0x4, 0x8, 0xe, 0x2, 0xf], 0x0, [0x0, 0x3, 0xd, 0x6, 0x5, 0xf, 0x7, 0x1ff, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x337, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) sendmmsg$inet(r8, &(0x7f0000002140)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002340)=ANY=[@ANYRESDEC=r15, @ANYRES16=r0], 0x70}}, {{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000800)=[{&(0x7f00000001c0)="323e211abcdf19083075655c39fd36632f9cf7bfad8f79e26ded355f5835829dd8a3fc720f98e1d975313af6707e7862487eac85b5c70c899479f4f7c39b58a14439a132b4a641fd26943f6271e138e4e46bc1bf4274efe8356445fa3789c591c4372642c97277e196777115bdaf40f7e537e2df8a9c7a455c1fc98fc99f226343e0007126c473b24417b752bac030b73d801d46f7c0610d580a707ff2e8a2bad8e7ec843e16d905b0c66c9ef8b49301b8592ddf3db133fbec75881c895f4f0e58016c61ee9a5e4bdc535c97b18dee884edeaefa3d5ee70d31f1f3f3cab2bf9927e2", 0xe2}, {&(0x7f0000000300)="d5b0a4004f1d6b8c3a5af207deb1afa4ede05142dc79a3f2bf5806ed867fc26be14dfceced24e9af191536d56ee1f5552e79326598da2a351f309dba6b745b9d896832c003ee210a09004e1b9983e769f8481754f1520a23ef5bdad148faf3c7e08d08e1c30dfcca8be12ea7907ca14c50b22a023599ee401170042d10ee74aa5a9c65612987823fb07516e42cf0403665b935dd380c3a1fb628e9860a1310094c47fac29cfaf0b10288a76ad38cc0b86223a487fad25a3cb8f40d3309b4a975dd76f276a37456ce302b4763dce32dd9baf7e0", 0xd3}, {&(0x7f0000000100)="79358b02da1427b4c68bf81b54685248b7e80f787b80cb37f53ed775f8dd0f1c82355959005685d47ec96d245d97e0c77ed3ca5c6848b1e6a457d2a4603e89", 0x3f}, {&(0x7f0000000400)="a9ced966d770ea587241124ad8ab683cb02bef06746fcd255c6f", 0x1a}, {&(0x7f0000000440)="7715de5946b1ab0150c5e37e91d0b1", 0xf}, {&(0x7f0000000540)="4ca8326c92815b6af7ab339caab538622fd1b9cec5ba681c0f425cc0cdc1e60f67c626e150e0001591fd9090f10cfde1ce436e146cc9ab38816658e39f6791d3eb7674a0a024d09b04233d09539689e0b8c14e4ebae19e00d8173f2f66182e7db997197168328fc9d715d6dc74b793be8b09a3cce10b054066fa604a38c65d433c759dd979f5c8f71e64c5ac56bb9eacdf", 0x91}, {&(0x7f0000000600)="7e8a1eaca0509c8e5732b1fd297683e811f6073f63053e787331e111560b72bc5c813d5db9b28ab9109561d7426511978173cccc3f2b7b7d68075fb96776853450343524bb30d85527ab2798baadaa873293b6ae9c8b6d2d87d3f434c88bbf84f073d55d6884a74c52fba629a3cde1948f5afc8d24ca8cc3c1a55084430c425a4ecefc2e3fa75034ebc720c59c89c3c1ac766a0d09ef949e9c4664d9cec0cc1367cfa26bf7dff97c7e16f5acfbe47944834dbf0067fa98be7b7a92c6f21c142f0b157f6e256c56fd0c42b894e9b91069e73dc807f8202e9321b822526d1472eab9622556aa651db79f81b45e4a6d37", 0xef}, {&(0x7f0000000d40)="ac52911925637fd2b59d54ac79caea67697252bac927d6de3edd5d55aba71c6fca54125a8579c6646dd0b3525f09f22506108cab0001146e229214deb2dc90e842f5c0dd5712b3e2ef9e8f377345a0361d41a9b51df121dd5d2eea92bde81033620fdfb21198f067245d23bc87bfafe65a41a6b7e0d580d08adc444007404f27681435dd7c855b6f7ddc82fcce381a64d8c5fb492823a38923244f9f758a0c34735400e4078fbd8bcd3b6e6b622a981c60c37f4b02de7648afa089faafd387d79cc8c866de988bf52bd40541952446d312a27ff9cb4a1b350bdf6f2588a6b066807619590900b245a4e765a387d524505ad84a54e0fb5407c8891893f5c2cbb977b7543af60fc39d6282a1b882a31408962db9e9fcc4cb10a5a113c94c1aeeba036e958fc41dbe5fbff69faba36588ba6fa26b5189ec91f4e22667ccc3c73c81efde26628774b8a72dae9cb8aa94e79629a8f0202790d911262c142d11ec3a682d3ba56e6274adbf893dc3ac823c722fe002607b4068caa1644dd3a7a599b6b626be47e42f530761e1e0e8b6fd63c28c8522c7c0978c1bbd47bf4293934fabe63018f076c6902b03428b9bd5d4c6be42592e85d8392f3ae42387e819f394be4ecafd4eed798ab16b7d772c497ea0465d34044c70b33193321fcfa1e7d6257e4261376d0bbc8def6cba4febb17fd775ad95bf1e6a8df4c7d30b41712964334c8f5d63c7dff27d42b8e09649e5a65d916e256e964db67425b9495d671bfc05f1d308fe2851a7773f5dd798be28f858306e2829dbeb8dd16077f3a9afaf158ba351c267c39ae4aaa5b4474f3ad9b77d2a61d89a44431a27f66d05771bd30408f294e8bac11583a7628fae7ad88df7fb54a4da80f66f963852eb9de6936f549eab3d83f25de5f506cc3872189f32b097bfbdc7b26947e543c229f4f6be9a938d4b048245001ed34b6f0b5bd7f7b5d83386c927dacd0e68e86d89322c1d59bde4f9205138e1967129965e41474470d9a27b189071b42ec2f95a3c48c1b83389cec8ae726ae2c8f60fa1110ea1cb701ff08957085d80952f5f16139109ef613b8c0be80296a326f94a80940e7aacd453fd50ad52ddafc9bd69c5f1596a91f9b82e342e36eed575e6426a518d4f9ffc3f43d9047687f7f39cc3ac4a3d47bd47cea9bfb0e54282e4ec3f16045e584d37853adbfd290dbba49539b26d3d60e3309b8337a2192cd43a52dec458f0a7309e77181088c2a1a4beda4eb80831c24425a8e6b65712700fba8c549712e23c9236d5dc591adfef44e7d186fbae5ed9e463faec19af9ced15f0bc9eebefd790af692f7b2375ac736528aeac5c95376f0408a2129bb404cc492f8215a8f7c7f5d9a0953013da23b1b421ff3ccbfaac14eee90a8f59a2d6d756e482ca5a3c1c3077b5964b5a4dd1392a795511cce8d151355ebfcbd7ba6ff8d447265a63589e2cdec327face6517876fdc55332fa41cf7939f69114b1baaa0ca28536fd4436986b30f99fe8c6933825e89a77a7589202f377521be853b3be393b3818b2f669929f83d1e4356547003ad0fd9b4132145d082b26ad1c93861f0ecae21d8f2920387458a8d2df15d11af7a8bae78980eb657c22da468ec1986eaf34b3519ac8fa0efea3d7dd854df80ee5c9c8beccb8abb92eba8c1782d1c82a3892991773a43fe99b39ce1244ef149e0302f18b30bf067f363b371210f0c306e88e9cf113c0a100ffdfb04f6b67634fb3bdf68d40145de5a642d3f406d97cd8097a928cc743e124c479f81c94c2054401f3b2745f34f32dbcb0b43e24fdd93d257fdc5c41c28bfc8070e924694ff943d073c3094e39585bc859ca8211a1f9ef81ee006ec9170eb60686d41e52adb8c5ecf8d21adab1c0421ba3cdd61adfed3154b5598488b832beb9f5666ab168d98bc79c213979fc170888a34c92a2c59ea1429a6595949229bf2a4d6afbb7e1b1511baaa17e7ca4bfc9481feb8c25b284be62561ce19c9255e555302707d6d63a17ede8f0fe264e9d75e36b9e63d893a2202d248dca2f12ae308ca71e29d7657293e471f6243e478a3e1c94e1f18c6671e1e1a830edc0cfc989791dbcc82aad1aed52c633887196dcd5534a6e1ba4ec9e643b5c833ffe7e4817091390a985b4d8711676930247bd317f7af428c9a79e80d6a31dcda1335cadfe145fa866758fc50f9fa06aa215a5398c3d0a9202efa99cbdd6d8951d88caa8a5f5c1bcdbcfb3dd1521a1d1dd2e73e85da4a72fc9b8701b3e24352577ceac84d7cd6508838af7f37fe8fa06665315cd5604a5f213d6585866c03a01c76f03eee4f4bb12e988f44e059f17fd988fe651a2f910ee7fbd629bce0390d19ec2a33d2afa41afc442b8fabaa70ccdb43a2ea5595ca75c1f5b8a84634315f1b3e49fd12cf9c55fd3d91f93ecf12acfcefc337fa66ba3442acd5d84716ec69f854d6e700e86b577c1175d71799aac8fca6ebc2535bc43543b89b31bca121627de417ba5cb892b27e3699cfb743df41b5ff8aa2766d1853b238b5def0113af9e06a67796ccb949066db8cc2c93e99498fe6049cbe4395b61c9573896bd9e2c917e62c6a6396bfd4a0d7a42e9407bdd55e531d6a05ef8c9b5c3b53c9be68fb43e99110f98acd7acb3c49bbdc41d21e6b984acb1ca318871933d81643518ffc5464828df024dc6edda5b53cfac28da83334000c76fa74ebf4d349b72d3dfe3af76b6bf9e9c5829cd3f312d762878c6d5bbbc5092e548cec827caa43ffa4f6ff081566c7ced6f5ec3120d7835165c0f745f7bb00b9869d04667f2a967c0d67756b0645125f299f3c6aefc1c7ebe901c00450c2a0d27c81e7241ad73ac1be3dfa78e2c6cc4918a75d34b3b11c3caf9b313044e1cdee19937178ef0870bbd18a8bbce3a6296eab40dffbf0298fdf1c38319d3dc4e30b5b361ab4a92d43aae1e3c2a8259be29c34501e6139c667225e983d1a513153fabf983ca18feea18b7149d0f1d445379fda96299634b888dbda26d22b68646428f13a0f0665b532c94672aff87ecd15abfee8130d818cd4673c4b95a776bed626b4f5858f0b9f4f08d82f16fa0cc0ab96d5568fb9b0cf868980571b57ca52aa7fc40ff5996e7a138a45cadfc4d7a58d56ab2add74ba2c297afe3497666d46c29c2e21540d6e865d09bd686014bbe7f9ee08d24f32fe0f6e77d6fee74ff404aa2c8fbbad2465c6ea84cb230fdaf07bf57282219ce4684566e56c2e0ad5bc84b021dee31c1f2a6c596271e1fb4d6f8edfe0beb5e96fb68102ae8ae33788aba7dd24d4667521a7c601d6f509a129f213ace3f4c78d96c51f055a448bacbf4e115e35f7f985621ad4f724c37ffabaff69ebb0b2514abbd728bd58ce518a85f05fe8ae0df3e9dccee99679ec151fb296d0ded1f485cb76e1f178fb08e0bb3ede826ad3ee939f2fa3f4163f401f15ac8da32939bc74ca2667afcee3109505744e2a2bb08661f2ebf4039845f27c9b05e9db4c344c3edb31e32a57545d6435770fa3c2316f3244104dd16f7b0afb89fce9fb37e7789dfefac3ab802097669c9514c75df362f4c6227bb63dab7510f652bbeeee70ae2c8ea1363c297210397ecba0f9a94afe6ea3198eac450bdc6c371f3c83528716ca143cf6aebdbf236826f2086f47657dc31b68994dfd0f16004f3dcebe0606c410d065e36fb1ebd8b60df2ec93e52965dbeba76e00e1c4983e048e851b5a76dc552e39133611a7bff5b03f9ccc57054424ca3ac348e48fe25a0d6d2b1acd93efecefda055dc8b2b21db35c7779db39070e3974a3259c59deca88e1dac11e9f240df5d8f60a1674d87e3a67dee19de9d2f8155914083b402ce086d9ba85c90647b0f826a47dde736bc4a703694e043d6e5b4540e615f39dc70c5cb445244fc119823fc59d2238acc79fa200bbbf22ecddfe2d099912b45950ae61a956c05e324af2ad76f1023fbd039168c1a5656db380a3c5fd1b49c76e3df0fd56712d505574dbe35e45b826444074d2a566fe2081a86bd883c354b87b27847ce2da025e5037ccf5197707c4d30efd4f444279ea96c27235352ccef37d0fe890fd6de205684a01bf54edd5e54df2a213c012353c3959f97458a56d998288bb431fcd7bad16ba2d9381bcc5f76e731ae3b915093fa2f9650e97a00734bebc5347a670235dcf0095a4ff94a980e0e48b89d7f239f61698a9700fadee2edaf4d23839d0c9924f3a1db3ed82d2600a92b7657739a234d7fa318cc7103af6cb898a763ed4481ff8c33ad127315e11fb7d834b3b36b0f83e55b8b2e2bab36279cbdd4c30a3e4f9de60a72494b968f5c4ee5523b0d38170e5943cdea27a894831399f96519cf199b9f25bd5a828729e24d373670dfa345ebf87b9ec302fb533313fca70bba19de6981fa6659c2e43744fe2c41991aa38f5c145fdee71d0b5b339e405500a3231ea99c251136b72554104b68eb430f7172c04d6ee1a4e0033e1c2ba2ac24f4465bd53046e356b06622cbcebafae4b8f15e02ad9d6962ccebad50e6fc358b1771c1003b3cacbf20652f30d74c9453439564dc3abec3c13ff756d181fe9190ff24db0d36cc6e28345be96eed0a411d50628ced7730557763566624364a0259191063623c4e90b9125d9eda8e93ce7eeb8af822707fdaf754cceb7efc6066526fc554f1c4b4a91a9edd1283af706442a1240cdcbd77601399cf4a822a4752fdd359d87b8958c63821f59fdb3f5e1a300a0a12f0815379cbbbe1c1066312f27ad3249f57842c77f8a526861fbd1e1ca2b7bc38ac3974cafffaee29cc4fd446d7052096a40b3f374e0740f72b7cb4cc6f56fa0e46b3d884e2fb439c47ff4b4e4255e476ca1e0b94c6006277721368ccf284e64e765bfdcf1f8c0bede54406891884ded6518f7cff00e34928de40bbe089a2b62b2d275e800f7c0facf02f504c7b2163fbe97c46a402ae8e5c360ba32a92c452f8609cce01f88f1de401eaa13c4df50b33e89050687143c2cd5d65d48593a9bd0a83089d280ab995997a9fc31e25811167f83bcabfc431eccaf9c7a50dd585ff36be8c6bb593e971cab1c0c303f15f4a49008e88a63840bfdfe3ada0aec68806a7481e9225474bc1524863e6c207748bf9af342e75fce19cf188de97c6b5e5d2b874b31f4aa393eb4e12dd81d116d1075a1ea6bbbe16867a4a78b1a21f440f1c3eeff7d9295ee6abc40ac56619e63e7095ad6c6123177a1535e97f25cc1df5abd07f35acdea7c153a58b6eba74870c635fc060b2478203c340ec0195af93cc043aeab16e541c0c3e8cc72e95cc93bcb15fb75238953724c02fe8690a935beca42439486dfb8415dc9a87e8a7d82ed9202838a77024c25ea1e9a2bce585f53f431de18609b3355ce113a4499b5fad156abd45bfa54c487fd8c660c7242651cae5fd92a6ff8befcb98ce5ce85945fd0a50fc7d7afa93f9efc2d0b7bc11e05463dc37c030e400198eb6e4163daff9c7e6eb68d386bf4b3794daabe0ec2265ad826cbe7a1f0f25cac9cd1bfde944fa368b3ad48d395c29e970a66eed9331d4823aede4178606cf47d5c0fc74b0149fe2add797b848ce014b4476770368ef9623e041612700e63cdef93b2b98fc71a09f3284f3549bad9583de576352998b6d3c43350f89353ba242702d9f90c0487ca4c452b83629e8ac6b5cf369f97beaf5238dbb08038fd72b808ac1081f33a75cf930636e3244ed23fbf68d4ebdf0a5aa5d1517967426769fb0de4c873db9360e1ad405949d5e750a968e85cf64603a1502534087d4a43fa4b8581cd8e5c", 0x1000}, {&(0x7f0000002200)="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", 0x12e}], 0x9, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x70}}], 0x18}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000c80)=[{&(0x7f00000008c0)="0546f8bfbd9f027c7d4ef180708afb771d841d52a783b6919705f41c501768", 0x1f}, {&(0x7f0000000900)="d9f187d994ad1c3eeb23500005de54a60690e22373e16bd0739dd939f1c6fda4c12dcbc8d1be9c0be9f0075e19f4ce8f414d1224f745b8cf8dfd63bf3245190fba6f004442f66a045cdb6fbcbe24a1f26c2035228a66585a59a27b897ab0d5fe879776e53ffa47b319cdb97e89d4f2af9b2d1566843029dcfc1efde0a0d72b8fced2c37b4e9cd044b2809b93f5665d2c22a6358ab9b6e108e8c097e24771ef5b9b185054a695aa181e7c0c159a6f8e58f07d798658e4184a7634cb2fea238d5a18febcffe2d32d8b088c113bff8d14ffd9e2cd7451a3eb82dee1a3f04c8c8ff505b8ccbb687b138ba01aa808738e", 0xee}, {&(0x7f0000000a00)="fff6a1c3504fbd0d59555c6906d1c2556fcb0ec51efa9312d9e5c3f2fc7bef9b1a4bd0af7cfec6a6d37f46470980a5cb3a99606db7dcb655f46a68950300f31f1c9ac266666ebfb3cb6df4fe1a248e3441792cb8b013ea000a3bb075c1cb1765b4ec4ec64d8cbf42219cb35b6a59db2abb381c399652f8a72c88cf44b956536b763ec5888ce77d2f921927b8b94599b2f74cab75131f2b12b0d580dcab4b5dcd9611aaa55160c1442ddbe6354c540fabb7f830ee609736dab22d8491ea20600699b65aaafd02db00dd274cb7a6a207c00e2d14ed96492be069fc", 0xda}, {&(0x7f0000000b00)="cdb13e52d4f86332075017d436774f2c86dcbce817f77546d664b250f286e645e9a22f47ee5302b3aafce5fb24507cc28a", 0x31}, {&(0x7f0000000b40)="0e20dfb58a9f12071ae032f05a9c2e5cbd4b812dfe83cb54cc6e50288917918c0950316ba51033f7884d", 0x2a}, {&(0x7f0000000b80)="5dc206691701404e494edd74be879b49f9b2dcbb9c3fe4b4603f2455696b1b9e41e1dbc430bd50b608065122a4cb84afa408ed8e81fce38b77e29222a292b0105f6c0ddeabfda466c59581657a95425d1881373f0f832598d16d36f0321c864987e6c41b44f02ee2ac29767007c5f5bb05cdcedb53a11056bc9db4ea9a0ad63ec030e1d9839746baf0d9553ba73566e9a7f87c7ef655f1b11ca9b95bb120aa553d34d575b2451673464add4a9d4769c19c8301cd22943476bad0b3682cddad59a982f172d0ae564fbe25493339f7d5a185ba7f9c94", 0xd5}, {&(0x7f0000001d40)="c878f210bec00b1b7b6677b16604f70001d4de360404c04a729beb5ca01faeb90610dd90cbfc642863fa5e005bf31ced83f1d7e7d5dab4e0db168fc1d29315ccee64f6e6e84c1c7024f9a87d7fed8fa2c2b99580bf703ddef4b0adea8a4eb8e3c8e1eb1415a046734bbe54bd3dfdfaa9324b62d969ac1256dc99056d4b62d95abcba00e9fa7d96357c351cf9a576f2e44c9ddb2aef4d40157dc960f1d4f40418e3b76426e5c9910d21baba1ca2a02dd099de3a67460463b1687b68fd1219ea3e621c612480618bba541e36", 0xcb}], 0x7, &(0x7f0000001ec0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xf9}}, @ip_retopts={{0x134, 0x0, 0x7, {[@generic={0x7, 0xf, "4286f61f5e264893c68e3294ac"}, @timestamp={0x44, 0x4, 0x48, 0x0, 0x2}, @noop, @timestamp={0x44, 0x24, 0xbb, 0x0, 0x1, [0x7, 0x5, 0x7fffffff, 0x2, 0x6, 0x8, 0x59bd30d0, 0x5]}, @rr={0x7, 0x2b, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @loopback, @local, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x16}]}, @timestamp_prespec={0x44, 0x2c, 0x48, 0x3, 0x9, [{@loopback, 0x4}, {@multicast2, 0xf07}, {@multicast1}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd7d}]}, @ssrr={0x89, 0xb, 0xdd, [@remote, @rand_addr=0x64010102]}, @cipso={0x86, 0x6d, 0xffffffffffffffff, [{0x2, 0xb, "945c0ee84d83cbb193"}, {0x2, 0xd, "ece63afebaa7eb36667fac"}, {0x1, 0xf, "9d682f384308328501515f72bb"}, {0x5, 0xe, "71946dbeb46d96ddf76ef48a"}, {0x2, 0x8, "844372328d51"}, {0x5, 0xd, "f089a5e9081d54a3bc4911"}, {0x2, 0xb, "8aa4fb47086ec6526b"}, {0x5, 0x6, "0393ffd8"}, {0x0, 0xc, "0e181970534c8dad7956"}]}, @timestamp_prespec={0x44, 0x1c, 0x2a, 0x3, 0x5, [{@broadcast, 0x5}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x6}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfd3}}, @ip_retopts={{0x60, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0x7d, 0x1, 0x8, [{@empty, 0xc}, {@loopback, 0x8000}, {@remote}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0x5d6}, {@private=0xa010100, 0x3}, {@loopback, 0x8000}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x258}}], 0x3, 0x2000c044) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 40.376900604s ago: executing program 3 (id=1483): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 40.333034726s ago: executing program 3 (id=1484): r0 = syz_open_procfs(0x0, &(0x7f0000001240)='net/igmp6\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") (async, rerun: 64) r3 = open(&(0x7f0000000000)='./bus\x00', 0x14d27e, 0x0) (rerun: 64) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000401, 0x0, 0x0) (async) preadv(r0, &(0x7f0000001180), 0x0, 0x163, 0x0) (async, rerun: 32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x4212, r5, &(0x7f0000000140), 0x200000000001) (async, rerun: 64) perf_event_open(0x0, r5, 0xe, r0, 0x2) (async, rerun: 64) r6 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r7, r7) (async, rerun: 32) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@expire={0x170, 0x18, 0x10, 0x70bd2b, 0x25dfdbfd, {{{@in=@private=0xa010101, @in=@private=0xa010100, 0x4e21, 0xff, 0x4e22, 0x3, 0x2, 0x80, 0x20, 0x89, 0x0, r7}, {@in=@remote, 0x4d2, 0x6c}, @in6=@rand_addr=' \x01\x00', {0xfffffffffffffff9, 0x800, 0x7fffffff, 0x4a8, 0x6048, 0x100000000, 0x4, 0xce3}, {0x4, 0x0, 0x80, 0x4}, {0x8100, 0x1, 0xfff}, 0x70bd27, 0x3515, 0x2, 0x2, 0x1, 0xa}, 0x3}, [@lastused={0xc, 0xf, 0x5}, @algo_auth_trunc={0x52, 0x14, {{'sha256\x00'}, 0x30, 0x230, "b8db22389b01"}}, @lastused={0xc, 0xf, 0x2}, @policy_type={0xa, 0x10, {0x1}}]}, 0x170}}, 0x4050) (rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000040)={'lo\x00', 0x400}) (async, rerun: 64) sendmsg$NFT_BATCH(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000020000090903010073797a300000000058000000140a010100000000000000000500000a08000340000000040c0006400000000000000005090008001d2624ab5c0000000900020073797a31000000000c0006400000000000732b9595acc60bfb220000040900010073797a3000000000140000001100010000000000000000000300000a"], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (rerun: 64) 40.228970612s ago: executing program 3 (id=1486): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_read_part_table(0x5e4, &(0x7f0000000600)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x3, 0x0, 0x404042bbe) syz_open_procfs(0x0, 0x0) r2 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r2, 0x0, 0x40000000, 0x0) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x12001, 0x1aa) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5416, 0x0) r6 = dup(r0) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r7 = socket$inet6(0xa, 0xa, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x4e20, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x20}, {0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0xf, 0x0, 0x8}, 0x1, 0x6e6bb0, 0x0, 0x0, 0x5, 0x1}, {{@in=@private=0xa030100, 0x4, 0x33}, 0xa, @in6=@mcast1, 0x3505, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r7, 0x0, 0x0) 40.040554883s ago: executing program 3 (id=1489): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x84) 40.040305974s ago: executing program 33 (id=1489): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x84) 29.032120436s ago: executing program 5 (id=1634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a000000000000fe800000000000000000690d7d520d25ca"], 0x0) 28.940773311s ago: executing program 5 (id=1637): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x1fffe, 0x0}) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) (async, rerun: 32) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioprio_get$pid(0x1, r2) (async) r4 = openat$autofs(0xffffff9c, &(0x7f00000001c0), 0xc0002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x60, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7d02624f00}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf251b8000000600210062ff"], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x20048040) (async) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x1f4, r8, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xcc0, 0x1}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x42}, @NL80211_ATTR_IE={0x109, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xe0, 0x7, @device_b, 0x3, @value=@device_b, 0x6, 0x8, @device_b, 0x3}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ht={0x2d, 0x1a, {0x4000, 0x0, 0x0, 0x0, {0x3, 0x1, 0x0, 0xb}, 0x8, 0xa829, 0x9}}, @random={0x9, 0xb2, "6fcc2c182140c1e9c09a54fe658b6454f28c8daaeec3dd4c133ea55fbbd199d12bc76b5c781c111885498b10a5ac5f82103e4fe811a11b511ae78f23dc2bb0b6127d3777deb114551806a1fa47b5c79859dc7382db510d3cf103000e5b5519ca8b4abe492eaad17b45eb645c407e3affadcc7ccfba114b3e40bb25e0b4322d90c24b2fcad436916dac892aeb5e3f468037b76837221470331ec1aea3b88c20f469a887968a144adf75fed2edee9da047e1a3"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0xb3}}]}, @NL80211_ATTR_IE={0x78, 0x2a, [@preq={0x82, 0x72, {{0x1, 0x1}, 0x4, 0x0, 0x0, @broadcast, 0x7, @void, 0x5, 0x1, 0x8, [{{0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x3453}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x1ff}, {{0x0, 0x0, 0x1}, @broadcast, 0xffff}, {{0x1}, @device_a, 0x2}, {{0x1}, @broadcast, 0x1}]}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x54}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x50}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0c0) (async) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) (async) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="98", 0x1}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x41, 0x5}}], 0x20, 0x4048800}, 0x810) 28.940388591s ago: executing program 5 (id=1638): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000000740)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f737eea59d4fa640cf2b684c8dd293961047", 0xab}, {&(0x7f00000015c0)="6b75b597d05d969a1910", 0xa}, {&(0x7f0000000e00)="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", 0x2f6}], 0x4, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4, 0xf5, 0x1, 0x4}]}}}], 0x40}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, 0xffffffffffffffff, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r1) 28.861990355s ago: executing program 5 (id=1641): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a06000000050005fa6e000000"], 0x24}, 0x1, 0x0, 0x0, 0x200428b4}, 0x4082) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffffe7, 0x65, 0x2, 0x4, 0x0, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x9, 0x7, 0xffffffffffffffff, 0x80000001, 0xbc, 0x0, 0xffffffff, 0x0, 0xc0}, r0, 0x8, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="8401000010000100feffffbf00210000fe880000000000000000000000000001ac1414aa000000000000000000000000000107944e2300050a00000067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000008000009200000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff09000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffffffffffff0000000000000000000000004c0012"], 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f000000a440)=ANY=[], 0x90f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=ANY=[@ANYBLOB="c4000000cbad434f23aa91d66970a07f1762729aef5810cea5b8051ad776592fc7173e901b6d281d27c79dabc0b1c8d1c1fea950cc91110d12c767021205aabaf2b0c1c84ebe8002d9aa81ccd742e0754e8df35e0e6ac64632222cdf8edb09b872b1a42c8d88f565f10f445a47eca9168f37de7059ff28aca9f47f59e1e212de98c3e4883cb15d08df253341ccb9716029a050d32d7b7769f8f39c3c742baa2aeb4107f3e30273e31141c3f3c6f3db1eeec186b750d30d753705c95f3f2e7158ff", @ANYRES16=r6, @ANYBLOB="796127bd7000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000500190107000000080022011f00000008005700040000000500180125000000050019010a0000000800a10004000000050019010e00000008009f000300000008002700e6d533fc050019010c00000008005700480900000800a100000800000800a1008d00000008002201c90100000800a000a9f8c11b080026008f0900000500180137000000080027000200000008009f00040000000800570001000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4044094}, 0x4000054) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@abort}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000001480)={0xd, 0x80000000000f5, 0x5, 0x2}) 27.985421117s ago: executing program 5 (id=1648): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000001c0)=0x6e) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x20000000, {0x7, 0x0, 0x0, r2, 0x40, 0xa6}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x15, r2, 0x1, 0x81, 0x6, @broadcast}, 0x14) readlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=""/4096, 0x1000) 27.878827083s ago: executing program 5 (id=1649): bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC, @ANYBLOB="43da5f2e"], 0x48) r0 = gettid() r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) acct(0x0) r3 = socket(0x3, 0x6, 0xb) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@ipv4_newroute={0x42c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x408, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x404, 0x1, {{0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfdfc}}, [@dev={0xfe, 0x80, '\x00', 0x41}, @dev={0xfe, 0x80, '\x00', 0xa}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @local, @private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private0, @mcast1, @empty, @dev={0xfe, 0x80, '\x00', 0x29}, @local, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @empty, @private0, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @remote, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private1, @private2, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @mcast1, @private0, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}]}}}]}, 0x42c}}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6}, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r6, 0x0, 0x0) timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x3c, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="2ddd70fcee40c4925b7052dc85bd5a27"}]}]}, 0x38}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000fdffffff07000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32=r12, @ANYBLOB="010101007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r13 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0x3b}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r13, 0xee01, 0xee00) 12.822781491s ago: executing program 34 (id=1649): bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC, @ANYBLOB="43da5f2e"], 0x48) r0 = gettid() r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) acct(0x0) r3 = socket(0x3, 0x6, 0xb) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@ipv4_newroute={0x42c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x408, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x404, 0x1, {{0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfdfc}}, [@dev={0xfe, 0x80, '\x00', 0x41}, @dev={0xfe, 0x80, '\x00', 0xa}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @local, @private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private0, @mcast1, @empty, @dev={0xfe, 0x80, '\x00', 0x29}, @local, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @empty, @private0, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @remote, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private1, @private2, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @mcast1, @private0, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}]}}}]}, 0x42c}}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6}, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r6, 0x0, 0x0) timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x3c, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="2ddd70fcee40c4925b7052dc85bd5a27"}]}]}, 0x38}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000fdffffff07000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32=r12, @ANYBLOB="010101007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r13 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0x3b}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r13, 0xee01, 0xee00) 2.490726465s ago: executing program 7 (id=1948): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1208002, &(0x7f0000000780), 0x1, 0x5de, &(0x7f0000001840)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000400)={[{@lazytime}, {@resuid}]}, 0xee, 0x2aa, &(0x7f0000001580)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x284ba, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x20d, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x0, 0x3a5f, 0x8}) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x27, 0x3ff, 0xffff, 0x7}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000140)=0x8) syz_open_pts(r5, 0x0) 1.776669336s ago: executing program 0 (id=1956): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)}, 0x4) 1.559651408s ago: executing program 7 (id=1961): r0 = gettid() syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x7, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x10043}, 0x0, 0x32, 0x43a1bd7c, 0x3, 0x9, 0x6, 0x2, 0x0, 0x4, 0x0, 0x2009}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@data_writeback}, {@norecovery}, {@dioread_lock}, {@resgid}, {@noinit_itable}, {@block_validity}, {@user_xattr}, {@jqfmt_vfsv0}]}, 0x21, 0x5fb, &(0x7f0000001440)="$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") fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) rt_tgsigqueueinfo(r0, r0, 0x19, 0x0) 1.390796909s ago: executing program 0 (id=1963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000058004f0f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x3000)=nil) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0xb, @mcast1, 0x0, 0x4}, 0x20) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x4000)=nil) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00005fe8d63934a538f657339ddef36b0db9213345b9d28699dbc368fad01a3f4f6411f2dc7ba6329a640179910fe2c6b6c02fc9e842c4e8efce560938c5174f2e489892f1", @ANYRES16=r3, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800730000000000"], 0x3c}, 0x1, 0x2, 0x0, 0x1bb581880d1753e}, 0xc890) 1.294635564s ago: executing program 0 (id=1966): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000800)={0xa, 0x4e24, 0xb0, @empty, 0x100}, 0x1c) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) preadv(r2, &(0x7f0000000780)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/39, 0x27}, {&(0x7f0000000580)=""/49, 0x31}, {&(0x7f00000005c0)=""/148, 0x94}, {&(0x7f0000000680)=""/245, 0xf5}], 0x5, 0x9, 0x80000000) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r6 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r6}}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) r8 = socket$netlink(0x10, 0x3, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x40}, 0x20008024) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x4000080) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}}}}, 0x108) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000000)={r8, r7}) 1.208348849s ago: executing program 4 (id=1969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.19952023s ago: executing program 4 (id=1970): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200088c1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0x800000c1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0xfffffffc, 0x100, 0x8000, 0xfc, "7a58beca3900000000000000000000000200"}) 1.090968456s ago: executing program 7 (id=1975): futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x800}, 0x808, 0x0, 0x2, 0x48000000, 0x0, 0x0, 0x0}) 1.078858907s ago: executing program 1 (id=1976): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 1.077934897s ago: executing program 6 (id=1977): r0 = msgget$private(0x0, 0x80) msgrcv(r0, 0x0, 0x0, 0x3, 0x1000) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) r2 = epoll_create1(0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x0) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8000000000000, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x2001}) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x80) (async) msgrcv(r0, 0x0, 0x0, 0x3, 0x1000) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) close(r1) (async) epoll_create1(0x0) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) shutdown(r4, 0x0) (async) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8000000000000, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x2001}) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) msgctl$IPC_RMID(r0, 0x0) (async) 1.048099469s ago: executing program 1 (id=1978): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@empty, @in=@broadcast, 0x4e24, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x1000000, 0x0, 0x1, 0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffffc, 0x0, 0x100000000000, 0x200000}, 0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x3502, 0x7, 0x3, 0xb7, 0xffffffff}}, 0xe8) 992.717572ms ago: executing program 7 (id=1979): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0x3f33, 0x40000000000001, 0x0, 0xb, 0x101, 0x905}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x3f00) r2 = open(&(0x7f00009e1000)='./file1\x00', 0x28040, 0x0) unshare(0x6020400) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x99, "d3233ac55c5684efd96c7648cafcdc1b30da3b864bdbcd08a77d487069a8835f3a74fb235148c48268844d0c33600aac81ed3e417532dae928cc91f041c44357bdf0f7c7462e3bc060d6f61b2253ec4558897875571daf9122df85757e2961ef606e93a4697c4a8663ec5afbc1774d62461f33733cfaf905fcbcc4215c3d1e14345236a0ace5f9d227a763aaf7b6cdc8591bc8b371537a17ab"}, &(0x7f0000000180)=0xa1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r3, 0x9}, 0xc) 992.267042ms ago: executing program 0 (id=1980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 991.677502ms ago: executing program 0 (id=1981): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a06000000050005fa6e000000"], 0x24}, 0x1, 0x0, 0x0, 0x200428b4}, 0x4082) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffffe7, 0x65, 0x2, 0x4, 0x0, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x9, 0x7, 0xffffffffffffffff, 0x80000001, 0xbc, 0x0, 0xffffffff, 0x0, 0xc0}, r0, 0x8, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f000000a440)=ANY=[], 0x90f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=ANY=[@ANYBLOB="c4000000cbad434f23aa91d66970a07f1762729aef5810cea5b8051ad776592fc7173e901b6d281d27c79dabc0b1c8d1c1fea950cc91110d12c767021205aabaf2b0c1c84ebe8002d9aa81ccd742e0754e8df35e0e6ac64632222cdf8edb09b872b1a42c8d88f565f10f445a47eca9168f37de7059ff28aca9f47f59e1e212de98c3e4883cb15d08df253341ccb9716029a050d32d7b7769f8f39c3c742baa2aeb4107f3e30273e31141c3f3c6f3db1eeec186b750d30d753705c95f3f2e7158ff", @ANYRES16=r6, @ANYBLOB="796127bd7000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000500190107000000080022011f00000008005700040000000500180125000000050019010a0000000800a10004000000050019010e00000008009f000300000008002700e6d533fc050019010c00000008005700480900000800a100000800000800a1008d00000008002201c90100000800a000a9f8c11b080026008f0900000500180137000000080027000200000008009f00040000000800570001000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4044094}, 0x4000054) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@abort}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000001480)={0xd, 0x80000000000f5, 0x5, 0x2}) 970.556033ms ago: executing program 1 (id=1982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f00)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x14) 833.510671ms ago: executing program 1 (id=1983): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x6404c845) mknod$loop(0x0, 0x0, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x9800, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00005da000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4f3e, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000d, 0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x36c5, 0x771d, 0x12, 0x0, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) connect$tipc(0xffffffffffffffff, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x4}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 832.905551ms ago: executing program 6 (id=1984): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r1, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0x3ff}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8081) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2b}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @loopback, 0x0}, &(0x7f0000000200)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x80, 0x8, 0x7, 0x2, {{0x15, 0x4, 0x0, 0x1, 0x54, 0x65, 0x0, 0x40, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x40, 0x3, [{0x0, 0x11, "8d0a232262853a0d08d17468f4fa42"}, {0x5, 0x9, "9f639e71e37497"}, {0x2, 0x7, "b0aaade34c"}, {0x6, 0x11, "952cda09f4abcddbb226be76135399"}, {0x1, 0x8, "b13387b372ba"}]}]}}}}}) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r8, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000340)={@initdev, 0x0}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0xe8, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 830.108491ms ago: executing program 4 (id=1985): socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000040)=""/192, &(0x7f0000000100)=0xc0) 697.058269ms ago: executing program 4 (id=1986): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f00000004c0)={[{@inode_readahead_blks}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@data_ordered}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0xffa1) 696.195489ms ago: executing program 6 (id=1987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e23, 0x1, @mcast1, 0x6}, 0x1c) close(r0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)) write$tun(r0, &(0x7f00000001c0)={@void, @void, @eth={@broadcast, @multicast, @val, {@ipv4={0x800, @udp={{0x1a, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x39, 0xffffffffffffffff, [{0x0, 0xfffffffffffffe82, "b2c71524d6"}, {0x6, 0xa, "c753e10405f8363e"}, {0x6, 0x9, "6d26bd6bdf9e39"}, {0x5, 0x8, "ecd5047dbfea"}, {0x0, 0xa, "8982587711f009f1"}, {0x6, 0x7, "38b8b702a8"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x73}]}}, {0x0, 0x17c1, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "f78597f14aeafc9529712a9bb84de804b45276f42cebfab53949192593c1b14f", "808d776bd15684533c8dc06be1efd6eb", {"e3a7680c689f194e40a36e6c2886b20e", "a3ab73c5648e791686ba9f6517d926eb"}}}}}}}}, 0xe2) 322.562911ms ago: executing program 1 (id=1988): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 283.897063ms ago: executing program 1 (id=1989): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x2e) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x600) shutdown(r2, 0x1) 204.978918ms ago: executing program 6 (id=1990): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) r3 = add_key$keyring(&(0x7f0000001940), &(0x7f0000001980)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r7, 0x111, 0x1, 0x0, &(0x7f0000000080)) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000540)="0000000000000004ff6943b80000000898e10028bd9f5f1b6154649a05b0f2000000008607000000ebb01f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d005c2e00009c238532dd4c6ee9eddd58a599", 0x58, r8) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x8000042, 0xb}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x8000002}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) add_key(&(0x7f00000008c0)='keyring\x00', 0x0, &(0x7f0000000940)="ef", 0x1, r3) 185.750029ms ago: executing program 4 (id=1991): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x120, 0x30, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{0x4}, {0x108, 0x1, [@m_simple={0x104, 0x2, 0x0, 0x0, {{0xb}, {0xd8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa4, 0x3, '\xbb\xbb\x9b\xbb\xbb\xbbk\xf4\x92\x87#2S\x80\xc3\xf7\x8c\x1e\xba9\xaf}i\x9a\x01\x9f\x19\xe3\xbcw\x94\xb4\xef\x15\xc4\xd7b\xad N\xfe\xae\x01n\x98P\xb8\x12\x1d$\xb2\rF\xccW\x15\xf3\xcc\xb4\x15\a\xf1u\x88\xbc\xbb\xae\xfb\v A\x8aT\xdaD\x80\xddC\xedm4\xcb1\xde\x14\f\x15\xe6\x93\xb5v_\xcb\xf8\xf8a\xaa8\x8ba\xab\x94e\a\xa4\xc5\xdev#\x03e\xd1\xf2\x02\x82\xde~=\x87\x80g\x9c(\xf7\xf4\xe6\xd2\xdf\xd3%\xec\x8c\b6&\xa3\xad\x83\xae\x92\x14\xabh\xef\xdf\xd8gF\xd6\xc1-\xfbt\x13\x028\xda\xfb\\\xbc'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x0, 0x2, 0x1, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x7, 0x9, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e23, @local}}}, 0x108) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 137.057162ms ago: executing program 7 (id=1992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, 0x0}) socket$inet(0x2, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 116.234403ms ago: executing program 0 (id=1993): r0 = io_uring_setup(0x3c93, &(0x7f00000000c0)={0x0, 0x74e0, 0x80, 0x1, 0x60}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x204010, &(0x7f0000000040)={[{@debug}, {@discard}, {@errors_remount}, {@discard}, {@minixdf}, {}, {@journal_dev={'journal_dev', 0x3d, 0xa}}]}, 0xfe, 0x46e, &(0x7f00000007c0)="$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") recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1}, 0x8}], 0x1, 0x23, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x7, 0x0, 0x0, 0x0, "f01881a1deb9fbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=@newqdisc={0x44, 0x10, 0x1, 0x2, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xffe0, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x38000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfa, 0x5, 0x0, 0x0, 0x0, 0x6, 0x20510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x9}, 0x90, 0x7, 0xfffffffe, 0x3, 0x363c, 0x0, 0x9, 0x0, 0x80000000}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) clock_adjtime(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4c001}, 0x900) socket$inet6(0xa, 0x80000, 0xe0af) 37.225038ms ago: executing program 4 (id=1994): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x68201, 0x0) writev(r0, &(0x7f0000001340)=[{&(0x7f0000000040)="18ed6f711ce90bd74b2aa917568e7900", 0x10}], 0x1) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000001040)) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) mlockall(0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0xf00, 0x0, 0x0, 0xfffffff9, 0x0}) 36.594657ms ago: executing program 6 (id=1995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f00)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x14) 19.212189ms ago: executing program 7 (id=1996): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ebf6ffff0000000008000000911191000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r5 = syz_open_pts(r4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) dup3(r5, r4, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x24, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r10, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r12], 0x20}}, 0x0) write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc) splice(r6, 0x0, r9, 0x0, 0x714f, 0x0) 0s ago: executing program 6 (id=1997): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0x1de) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) setregid(0xee00, 0xee00) setreuid(0xffffffffffffffff, 0xee01) r2 = gettid() rt_sigqueueinfo(r2, 0x12, &(0x7f0000001340)={0x21, 0x0, 0x7}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='./file2/../file0\x00', &(0x7f0000000180), 0x40000, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d7a646d612c706f72743d3078303030303030303030303030346532312c72713d3078303030303030303030303030303030312c72713d3078303030303030303030303030383030312c72713d3078303030303030303030303030303030622c736d61636b66737472616e736d7507000000ec2d29292b2d7d212c00"]) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000001000300"/20, @ANYRES32=0x0, @ANYBLOB="34050200060c00001400128009000100766c616e000000000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="f9e12d0743c0cfe0ea39563ac8900b6197f3c2772e80906757c958924d8f"], 0x44}}, 0x8000) bind$xdp(r3, &(0x7f0000000080)={0x2c, 0x4, r6, 0xf, r0}, 0x10) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) fchmod(r0, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed2, 0x84, 0x0, 0xfffffffffffffff6) kernel console output (not intermixed with test programs): 126.160227][ T7959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.191832][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.230153][ T7966] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.280561][ T7966] EXT4-fs (loop4): 1 truncate cleaned up [ 126.286665][ T7966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.437294][ T7983] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.887194][ T7983] EXT4-fs (loop3): 1 truncate cleaned up [ 126.893989][ T7983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.091708][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.486597][ T8018] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 127.509190][ T8018] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.523140][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.531966][ T8018] block device autoloading is deprecated and will be removed. [ 127.545555][ T8018] EXT4-fs (loop5): couldn't read superblock of external journal [ 127.648445][ T8024] syzkaller0: entered promiscuous mode [ 127.654039][ T8024] syzkaller0: entered allmulticast mode [ 127.705300][ T8030] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 127.717739][ T8028] syzkaller0: entered promiscuous mode [ 127.723348][ T8028] syzkaller0: entered allmulticast mode [ 127.734314][ T8030] EXT4-fs (loop0): 1 truncate cleaned up [ 127.760372][ T8030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.784492][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.801905][ T8037] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 127.826828][ T8037] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1454: iget: bad extra_isize 90 (inode size 256) [ 127.844986][ T8037] EXT4-fs (loop3): Remounting filesystem read-only [ 127.854314][ T8037] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 127.864655][ T8037] EXT4-fs (loop3): 1 orphan inode deleted [ 127.871017][ T8037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.884696][ T8037] __nla_validate_parse: 17 callbacks suppressed [ 127.884732][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1454'. [ 127.912909][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.921820][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.942672][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.953406][ T8048] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 127.972930][ T8048] EXT4-fs (loop5): mount failed [ 128.129257][ T8062] FAULT_INJECTION: forcing a failure. [ 128.129257][ T8062] name failslab, interval 1, probability 0, space 0, times 0 [ 128.141977][ T8062] CPU: 0 UID: 0 PID: 8062 Comm: syz.5.1462 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 128.142080][ T8062] Tainted: [W]=WARN [ 128.142085][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.142093][ T8062] Call Trace: [ 128.142097][ T8062] [ 128.142102][ T8062] __dump_stack+0x1d/0x30 [ 128.142186][ T8062] dump_stack_lvl+0x95/0xd0 [ 128.142198][ T8062] dump_stack+0x15/0x1b [ 128.142219][ T8062] should_fail_ex+0x263/0x280 [ 128.142237][ T8062] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 128.142304][ T8062] should_failslab+0x8c/0xb0 [ 128.142318][ T8062] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 128.142333][ T8062] ? shmem_alloc_inode+0x34/0x50 [ 128.142403][ T8062] ? kstrtouint_from_user+0xa8/0xf0 [ 128.142496][ T8062] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 128.142513][ T8062] shmem_alloc_inode+0x34/0x50 [ 128.142532][ T8062] alloc_inode+0x40/0x170 [ 128.142563][ T8062] new_inode+0x1d/0xe0 [ 128.142575][ T8062] shmem_get_inode+0x246/0x750 [ 128.142594][ T8062] __shmem_file_setup+0x112/0x210 [ 128.142610][ T8062] shmem_file_setup+0x3b/0x50 [ 128.142697][ T8062] __se_sys_memfd_create+0x2f6/0x6c0 [ 128.142717][ T8062] __x64_sys_memfd_create+0x31/0x40 [ 128.142736][ T8062] x64_sys_call+0x28cb/0x3000 [ 128.142781][ T8062] do_syscall_64+0xc0/0x2a0 [ 128.142799][ T8062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.142812][ T8062] RIP: 0033:0x7fdd1bcbaeb9 [ 128.142822][ T8062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.142873][ T8062] RSP: 002b:00007fdd1a716e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 128.142894][ T8062] RAX: ffffffffffffffda RBX: 0000000000000531 RCX: 00007fdd1bcbaeb9 [ 128.142907][ T8062] RDX: 00007fdd1a716ee0 RSI: 0000000000000000 RDI: 00007fdd1bd27333 [ 128.142919][ T8062] RBP: 0000200000000640 R08: 00000000ffffffff R09: 0000000000000000 [ 128.142974][ T8062] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 128.142982][ T8062] R13: 00007fdd1a716ee0 R14: 00007fdd1a716ea0 R15: 00002000000001c0 [ 128.142994][ T8062] [ 128.541910][ T8075] set_capacity_and_notify: 7 callbacks suppressed [ 128.541927][ T8075] loop5: detected capacity change from 0 to 1024 [ 128.575766][ T8075] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 128.586787][ T8075] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 128.608089][ T8075] EXT4-fs (loop5): invalid journal inode [ 128.615917][ T8075] EXT4-fs (loop5): can't get journal size [ 128.626182][ T8075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.664423][ T8088] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1472'. [ 128.674361][ T8091] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 128.756878][ T8103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1476'. [ 128.766916][ T8106] program syz.5.1468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.789357][ T8103] loop1: detected capacity change from 0 to 512 [ 128.796188][ T8103] msdos: Unknown parameter '' [ 128.880035][ T8111] loop4: detected capacity change from 0 to 164 [ 128.886810][ T8111] iso9660: Unknown parameter 'sbsectpr' [ 128.919185][ T8116] FAULT_INJECTION: forcing a failure. [ 128.919185][ T8116] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 128.932531][ T8116] CPU: 0 UID: 0 PID: 8116 Comm: syz.4.1481 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 128.932560][ T8116] Tainted: [W]=WARN [ 128.932564][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.932620][ T8116] Call Trace: [ 128.932624][ T8116] [ 128.932630][ T8116] __dump_stack+0x1d/0x30 [ 128.932646][ T8116] dump_stack_lvl+0x95/0xd0 [ 128.932737][ T8116] dump_stack+0x15/0x1b [ 128.932748][ T8116] should_fail_ex+0x263/0x280 [ 128.932795][ T8116] should_fail_alloc_page+0xf2/0x100 [ 128.932810][ T8116] __alloc_frozen_pages_noprof+0x108/0x350 [ 128.932829][ T8116] alloc_pages_bulk_noprof+0x4a1/0x520 [ 128.932979][ T8116] ? __kmalloc_noprof+0x2a3/0x580 [ 128.932993][ T8116] ? copy_splice_read+0xc2/0x6c0 [ 128.933013][ T8116] copy_splice_read+0xf3/0x6c0 [ 128.933034][ T8116] ? __pfx_copy_splice_read+0x10/0x10 [ 128.933088][ T8116] splice_direct_to_actor+0x26e/0x670 [ 128.933100][ T8116] ? __pfx_direct_splice_actor+0x10/0x10 [ 128.933114][ T8116] do_splice_direct+0x119/0x1a0 [ 128.933125][ T8116] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 128.933197][ T8116] do_sendfile+0x382/0x650 [ 128.933214][ T8116] __x64_sys_sendfile64+0xb8/0x150 [ 128.933229][ T8116] x64_sys_call+0x2db1/0x3000 [ 128.933349][ T8116] do_syscall_64+0xc0/0x2a0 [ 128.933367][ T8116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.933441][ T8116] RIP: 0033:0x7fec6ad5aeb9 [ 128.933458][ T8116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.933477][ T8116] RSP: 002b:00007fec697b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 128.933498][ T8116] RAX: ffffffffffffffda RBX: 00007fec6afd5fa0 RCX: 00007fec6ad5aeb9 [ 128.933511][ T8116] RDX: 0000200000000480 RSI: 0000000000000003 RDI: 0000000000000004 [ 128.933524][ T8116] RBP: 00007fec697b7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.933584][ T8116] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 128.933592][ T8116] R13: 00007fec6afd6038 R14: 00007fec6afd5fa0 R15: 00007ffd85c6c938 [ 128.933603][ T8116] [ 129.222637][ T8124] loop3: detected capacity change from 0 to 512 [ 129.233643][ T8124] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1484: inode has both inline data and extents flags [ 129.247400][ T8124] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1484: couldn't read orphan inode 15 (err -117) [ 129.261471][ T8124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.382756][ T4515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.444114][ T8128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.471798][ T8136] netlink: 'syz.0.1488': attribute type 4 has an invalid length. [ 129.479835][ T8136] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1488'. [ 129.606696][ T8153] loop5: detected capacity change from 0 to 1024 [ 129.623810][ T8153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.647319][ T8155] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 129.745136][ T8143] chnl_net:caif_netlink_parms(): no params data found [ 129.763468][ T41] bridge_slave_1: left allmulticast mode [ 129.769130][ T41] bridge_slave_1: left promiscuous mode [ 129.769359][ T8166] loop1: detected capacity change from 0 to 512 [ 129.774951][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.799030][ T8166] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.822612][ T41] bridge_slave_0: left allmulticast mode [ 129.828290][ T41] bridge_slave_0: left promiscuous mode [ 129.834040][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.856045][ T8166] EXT4-fs (loop1): 1 truncate cleaned up [ 129.873490][ T8166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.011551][ T41] bond0 (unregistering): left promiscuous mode [ 130.018118][ T41] bond_slave_0: left promiscuous mode [ 130.029722][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.041124][ T41] bond0 (unregistering): Released all slaves [ 130.048749][ T41] bond1 (unregistering): left allmulticast mode [ 130.106308][ T8183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1496'. [ 130.175619][ T4515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.309102][ T8191] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1498'. [ 130.318119][ T8191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1498'. [ 130.327076][ T8191] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1498'. [ 130.336852][ T8191] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1498'. [ 130.372159][ T41] bond1 (unregistering): Released all slaves [ 130.429398][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.436666][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.445850][ T8143] bridge_slave_0: entered allmulticast mode [ 130.452613][ T8143] bridge_slave_0: entered promiscuous mode [ 130.464724][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.471913][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.479310][ T8143] bridge_slave_1: entered allmulticast mode [ 130.485918][ T8143] bridge_slave_1: entered promiscuous mode [ 130.493553][ T41] batadv0: left promiscuous mode [ 130.501440][ T41] hsr_slave_0: left promiscuous mode [ 130.509147][ T41] hsr_slave_1: left promiscuous mode [ 130.514946][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.516664][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 130.516679][ T29] audit: type=1400 audit(1769484304.310:8454): avc: denied { setopt } for pid=8196 comm="syz.0.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.548787][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.577738][ T8198] loop5: detected capacity change from 0 to 512 [ 130.585457][ T29] audit: type=1400 audit(1769484304.370:8455): avc: denied { read } for pid=8199 comm="syz.0.1501" path="socket:[20610]" dev="sockfs" ino=20610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 130.652269][ T41] team0 (unregistering): Port device team_slave_1 removed [ 130.661155][ T8198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.662613][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.674793][ T8198] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.693486][ T41] team0 (unregistering): Port device team_slave_0 removed [ 130.725839][ T29] audit: type=1400 audit(1769484304.520:8456): avc: denied { mounton } for pid=8205 comm="syz.1.1502" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 130.757650][ T8200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1501'. [ 130.780847][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.794023][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.834398][ T8143] team0: Port device team_slave_0 added [ 130.844760][ T8212] syzkaller0: entered promiscuous mode [ 130.850258][ T8212] syzkaller0: entered allmulticast mode [ 130.858446][ T8143] team0: Port device team_slave_1 added [ 130.886770][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.893856][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.919912][ T8143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.934007][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.941074][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.967068][ T8143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.972893][ T4515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.050323][ T8143] hsr_slave_0: entered promiscuous mode [ 131.068761][ T8143] hsr_slave_1: entered promiscuous mode [ 131.074912][ T8143] debugfs: 'hsr0' already exists in 'hsr' [ 131.080644][ T8143] Cannot create hsr debugfs directory [ 131.092269][ T41] IPVS: stop unused estimator thread 0... [ 131.100983][ T8235] loop1: detected capacity change from 0 to 512 [ 131.157700][ T8235] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 131.175739][ T8247] loop4: detected capacity change from 0 to 512 [ 131.187020][ T8235] EXT4-fs (loop1): couldn't read superblock of external journal [ 131.211529][ T8247] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.219218][ T8143] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 131.238857][ T8143] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 131.245834][ T8247] EXT4-fs (loop4): 1 truncate cleaned up [ 131.254075][ T8143] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 131.261185][ T8247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.276639][ T8143] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 131.294835][ T8256] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 131.346577][ T8256] loop1: detected capacity change from 0 to 512 [ 131.392967][ T8256] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1512: iget: bad extra_isize 90 (inode size 256) [ 131.415875][ T8256] EXT4-fs (loop1): Remounting filesystem read-only [ 131.421733][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.434020][ T8143] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.473103][ T8256] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 131.492450][ T5055] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.499526][ T5055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.544927][ T8256] EXT4-fs (loop1): 1 orphan inode deleted [ 131.553449][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.560572][ T5055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.611222][ T8256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.627068][ T8275] Cannot find add_set index 0 as target [ 131.749995][ T8143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.763713][ T8275] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1513: iget: bad extra_isize 90 (inode size 256) [ 131.802047][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.829348][ T8275] EXT4-fs (loop0): Remounting filesystem read-only [ 131.836305][ T8275] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 131.846830][ T8275] EXT4-fs (loop0): 1 orphan inode deleted [ 131.853201][ T8275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.927425][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.066187][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.076044][ T29] audit: type=1400 audit(1769484305.860:8457): avc: denied { create } for pid=8314 comm="syz.5.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.095783][ T29] audit: type=1400 audit(1769484305.860:8458): avc: denied { bind } for pid=8314 comm="syz.5.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.124781][ T8286] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.151195][ T8286] ext4 filesystem being mounted at /311/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.175951][ T8321] syzkaller0: entered promiscuous mode [ 132.189903][ T8321] syzkaller0: entered allmulticast mode [ 132.259250][ T8143] veth0_vlan: entered promiscuous mode [ 132.262122][ T29] audit: type=1400 audit(1769484305.950:8459): avc: denied { write } for pid=8314 comm="syz.5.1518" path="socket:[21731]" dev="sockfs" ino=21731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.270565][ T8143] veth1_vlan: entered promiscuous mode [ 132.288081][ T29] audit: type=1326 audit(1769484306.020:8460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.0.1520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce6592aeb9 code=0x0 [ 132.324328][ T29] audit: type=1400 audit(1769484306.120:8461): avc: denied { read } for pid=8314 comm="syz.5.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.368264][ T8143] veth0_macvtap: entered promiscuous mode [ 132.395582][ T8143] veth1_macvtap: entered promiscuous mode [ 132.471849][ T8143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.505079][ T8143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.519560][ T5055] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.540704][ T8322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.560263][ T29] audit: type=1400 audit(1769484306.350:8462): avc: denied { mounton } for pid=8143 comm="syz-executor" path="/root/syzkaller.lnnKhA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 132.561410][ T5055] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.589829][ T8339] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 132.598236][ T5055] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.616463][ T5055] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.636865][ T29] audit: type=1400 audit(1769484306.410:8463): avc: denied { mount } for pid=8143 comm="syz-executor" name="/" dev="gadgetfs" ino=3901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 132.728724][ T8315] SELinux: failed to load policy [ 132.784357][ T8358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c028, mo2=0002] [ 132.792610][ T8358] System zones: 1-12 [ 132.797348][ T8358] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1526: bg 0: block 288: padding at end of block bitmap is not set [ 132.812370][ T8358] EXT4-fs (loop6): Remounting filesystem read-only [ 132.819463][ T8358] EXT4-fs (loop6): 1 truncate cleaned up [ 132.834346][ T8358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.848369][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.875739][ T8362] netlink: 'syz.4.1525': attribute type 12 has an invalid length. [ 132.916358][ T4515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.059527][ T8363] __nla_validate_parse: 34 callbacks suppressed [ 133.059547][ T8363] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1526'. [ 133.136171][ T8370] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.195094][ T8370] EXT4-fs (loop0): 1 truncate cleaned up [ 133.220509][ T8370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.566131][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.582134][ T8143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.637339][ T8386] set_capacity_and_notify: 5 callbacks suppressed [ 133.637357][ T8386] loop5: detected capacity change from 0 to 764 [ 133.660715][ T8392] loop6: detected capacity change from 0 to 512 [ 133.669720][ T8390] loop0: detected capacity change from 0 to 512 [ 133.693168][ T8388] syzkaller0: entered promiscuous mode [ 133.698745][ T8388] syzkaller0: entered allmulticast mode [ 133.729334][ T8392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.761350][ T8390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.791599][ T8390] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.802278][ T8392] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.857353][ T8386] iso9660: Unknown parameter 'overridéžCœÌÛAm' [ 133.887390][ T8406] syzkaller0: entered promiscuous mode [ 133.893185][ T8406] syzkaller0: entered allmulticast mode [ 133.947023][ T8410] loop1: detected capacity change from 0 to 512 [ 133.960941][ T8410] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 133.983539][ T8143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.997329][ T8410] EXT4-fs (loop1): couldn't read superblock of external journal [ 134.096529][ T8423] loop1: detected capacity change from 0 to 1024 [ 134.122130][ T8428] loop4: detected capacity change from 0 to 512 [ 134.122740][ T8423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.129505][ T8428] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.179541][ T8428] EXT4-fs (loop4): 1 truncate cleaned up [ 134.218026][ T8432] syzkaller0: entered promiscuous mode [ 134.223692][ T8432] syzkaller0: entered allmulticast mode [ 134.234277][ T8428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.304036][ T8421] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 134.328284][ T8421] loop6: detected capacity change from 0 to 1024 [ 134.347150][ T8421] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 134.373924][ T8421] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 134.395211][ T8438] loop5: detected capacity change from 0 to 2048 [ 134.398762][ T8421] jbd2_journal_init_inode: Cannot locate journal superblock [ 134.408976][ T8421] EXT4-fs (loop6): Could not load journal inode [ 134.641367][ T8442] FAULT_INJECTION: forcing a failure. [ 134.641367][ T8442] name failslab, interval 1, probability 0, space 0, times 0 [ 134.655565][ T8442] CPU: 0 UID: 0 PID: 8442 Comm: syz.5.1551 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.655687][ T8442] Tainted: [W]=WARN [ 134.655694][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.655705][ T8442] Call Trace: [ 134.655713][ T8442] [ 134.655721][ T8442] __dump_stack+0x1d/0x30 [ 134.655744][ T8442] dump_stack_lvl+0x95/0xd0 [ 134.655768][ T8442] dump_stack+0x15/0x1b [ 134.655842][ T8442] should_fail_ex+0x263/0x280 [ 134.655876][ T8442] should_failslab+0x8c/0xb0 [ 134.655957][ T8442] __kmalloc_cache_noprof+0x64/0x4a0 [ 134.656050][ T8442] ? audit_log_d_path+0x8d/0x150 [ 134.656102][ T8442] audit_log_d_path+0x8d/0x150 [ 134.656128][ T8442] audit_log_d_path_exe+0x42/0x70 [ 134.656170][ T8442] audit_log_task+0x1e8/0x250 [ 134.656195][ T8442] audit_seccomp+0x60/0x100 [ 134.656285][ T8442] ? __seccomp_filter+0x8db/0x1350 [ 134.656364][ T8442] __seccomp_filter+0x8ec/0x1350 [ 134.656387][ T8442] ? trace_reschedule_exit+0xd/0xb0 [ 134.656417][ T8442] __secure_computing+0x81/0x150 [ 134.656436][ T8442] syscall_trace_enter+0xce/0x1e0 [ 134.656472][ T8442] do_syscall_64+0x9a/0x2a0 [ 134.656632][ T8442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.656658][ T8442] RIP: 0033:0x7fdd1bcbaeb9 [ 134.656676][ T8442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.656694][ T8442] RSP: 002b:00007fdd1a6f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 134.656740][ T8442] RAX: ffffffffffffffda RBX: 00007fdd1bf36090 RCX: 00007fdd1bcbaeb9 [ 134.656755][ T8442] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 134.656766][ T8442] RBP: 00007fdd1a6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 134.656880][ T8442] R10: 0000000404042bbe R11: 0000000000000246 R12: 0000000000000001 [ 134.656893][ T8442] R13: 00007fdd1bf36128 R14: 00007fdd1bf36090 R15: 00007fff435e9e98 [ 134.656915][ T8442] [ 134.870919][ T8438] loop5: p1 < > p3 p4 < > [ 134.876415][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.890809][ T8438] loop5: p3 start 4284289 is beyond EOD, truncated [ 134.929277][ T8438] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=58274 sclass=netlink_xfrm_socket pid=8438 comm=syz.5.1551 [ 134.943293][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.000278][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1554'. [ 135.014848][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.041472][ T8449] loop0: detected capacity change from 0 to 512 [ 135.072080][ T8453] loop1: detected capacity change from 0 to 512 [ 135.085932][ T8449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.101941][ T8449] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.120356][ T8453] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.144742][ T8453] EXT4-fs (loop1): 1 truncate cleaned up [ 135.150775][ T8453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.175616][ T5484] udevd[5484]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 135.196586][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 135.215905][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.231456][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.251658][ T8464] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 135.260402][ T8464] EXT4-fs (loop5): couldn't read superblock of external journal [ 135.262977][ T8466] syzkaller0: entered promiscuous mode [ 135.273927][ T8466] syzkaller0: entered allmulticast mode [ 135.443007][ T8479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.470197][ T8489] bridge0: port 3(vlan2) entered blocking state [ 135.476519][ T8489] bridge0: port 3(vlan2) entered disabled state [ 135.501684][ T8479] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.550012][ T8489] vlan2: entered allmulticast mode [ 135.555327][ T8489] bridge0: entered allmulticast mode [ 135.589573][ T8489] vlan2: left allmulticast mode [ 135.594549][ T8489] bridge0: left allmulticast mode [ 135.700049][ T8500] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.711068][ T8502] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 135.739166][ T8502] EXT4-fs (loop1): couldn't read superblock of external journal [ 135.754305][ T8500] EXT4-fs (loop4): 1 truncate cleaned up [ 135.770876][ T8500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.102849][ T8506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.392013][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.421271][ T4515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.499830][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 136.499896][ T29] audit: type=1400 audit(1769484310.290:8605): avc: denied { bind } for pid=8520 comm="syz.5.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.625626][ T8535] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 136.648746][ T8537] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 136.685303][ T8537] EXT4-fs (loop5): 1 truncate cleaned up [ 136.702426][ T29] audit: type=1400 audit(1769484310.500:8606): avc: denied { create } for pid=8540 comm="syz.4.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 136.722619][ T8537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.873270][ T29] audit: type=1400 audit(1769484310.540:8607): avc: denied { append } for pid=8540 comm="syz.4.1588" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 136.907042][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.937346][ T8547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.141937][ T8547] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.393687][ T8559] netlink: 'syz.1.1591': attribute type 12 has an invalid length. [ 137.446786][ T29] audit: type=1400 audit(1769484311.230:8608): avc: denied { write } for pid=8558 comm="syz.6.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.517561][ T8563] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 137.529782][ T4515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.623130][ T8567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65040 sclass=netlink_route_socket pid=8567 comm=syz.0.1595 [ 137.918701][ T8587] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 137.956188][ T8591] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.966173][ T8587] EXT4-fs (loop5): couldn't read superblock of external journal [ 137.995837][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.175025][ T8591] EXT4-fs (loop0): 1 truncate cleaned up [ 138.189320][ T8591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.206338][ T29] audit: type=1400 audit(1769484311.980:8609): avc: denied { bind } for pid=8593 comm="syz.5.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.206431][ T8597] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 138.235943][ T8597] EXT4-fs (loop5): required journal recovery suppressed and not mounted read-only [ 138.362850][ T8599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.518438][ T29] audit: type=1400 audit(1769484312.300:8610): avc: denied { getopt } for pid=8606 comm="syz.1.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 138.620270][ T8614] syzkaller0: entered promiscuous mode [ 138.625890][ T8614] syzkaller0: entered allmulticast mode [ 138.843310][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.942874][ T8622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8622 comm=syz.1.1615 [ 139.052746][ T29] audit: type=1400 audit(1769484312.850:8611): avc: denied { read append } for pid=8631 comm="syz.5.1619" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 139.076375][ T29] audit: type=1400 audit(1769484312.850:8612): avc: denied { open } for pid=8631 comm="syz.5.1619" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 139.102499][ T8635] set_capacity_and_notify: 13 callbacks suppressed [ 139.102510][ T8635] loop1: detected capacity change from 0 to 512 [ 139.127472][ T8143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.153060][ T8635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.190528][ T8635] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.209136][ T8649] loop5: detected capacity change from 0 to 2048 [ 139.213092][ T8651] FAULT_INJECTION: forcing a failure. [ 139.213092][ T8651] name failslab, interval 1, probability 0, space 0, times 0 [ 139.228215][ T8651] CPU: 1 UID: 0 PID: 8651 Comm: syz.6.1623 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 139.228260][ T8651] Tainted: [W]=WARN [ 139.228267][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.228281][ T8651] Call Trace: [ 139.228289][ T8651] [ 139.228298][ T8651] __dump_stack+0x1d/0x30 [ 139.228385][ T8651] dump_stack_lvl+0x95/0xd0 [ 139.228409][ T8651] dump_stack+0x15/0x1b [ 139.228432][ T8651] should_fail_ex+0x263/0x280 [ 139.228466][ T8651] should_failslab+0x8c/0xb0 [ 139.228509][ T8651] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 139.228538][ T8651] ? __alloc_skb+0x2f0/0x4b0 [ 139.228570][ T8651] __alloc_skb+0x2f0/0x4b0 [ 139.228600][ T8651] ? __alloc_skb+0x219/0x4b0 [ 139.228716][ T8651] netlink_alloc_large_skb+0xbf/0xf0 [ 139.228750][ T8651] netlink_sendmsg+0x40c/0x6f0 [ 139.228774][ T8651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.228864][ T8651] ____sys_sendmsg+0x5af/0x600 [ 139.228888][ T8651] ___sys_sendmsg+0x195/0x1e0 [ 139.228921][ T8651] __x64_sys_sendmsg+0xd4/0x160 [ 139.228947][ T8651] x64_sys_call+0x17ba/0x3000 [ 139.228975][ T8651] do_syscall_64+0xc0/0x2a0 [ 139.229092][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.229117][ T8651] RIP: 0033:0x7fe6ee4eaeb9 [ 139.229135][ T8651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.229156][ T8651] RSP: 002b:00007fe6ecf47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.229183][ T8651] RAX: ffffffffffffffda RBX: 00007fe6ee765fa0 RCX: 00007fe6ee4eaeb9 [ 139.229259][ T8651] RDX: 0000000000000894 RSI: 0000200000000000 RDI: 0000000000000003 [ 139.229276][ T8651] RBP: 00007fe6ecf47090 R08: 0000000000000000 R09: 0000000000000000 [ 139.229291][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.229306][ T8651] R13: 00007fe6ee766038 R14: 00007fe6ee765fa0 R15: 00007ffc13d68a58 [ 139.229327][ T8651] [ 139.448091][ T29] audit: type=1400 audit(1769484313.240:8613): avc: denied { getopt } for pid=8647 comm="syz.5.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.468316][ T3306] loop5: p1 < > p4 [ 139.473155][ T3306] loop5: p4 size 8388608 extends beyond EOD, truncated [ 139.482879][ T8654] loop6: detected capacity change from 0 to 512 [ 139.494694][ T8654] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 139.507888][ T8649] loop5: p1 < > p4 [ 139.512285][ T8649] loop5: p4 size 8388608 extends beyond EOD, truncated [ 139.540147][ T8654] EXT4-fs (loop6): 1 truncate cleaned up [ 139.556074][ T8654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.593320][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 139.625642][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 139.738768][ T8667] loop5: detected capacity change from 0 to 512 [ 139.873405][ T8670] loop0: detected capacity change from 0 to 512 [ 139.901915][ T8670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8670 comm=syz.0.1628 [ 139.918818][ T8667] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.5.1627: corrupted xattr block 95: invalid header [ 139.969464][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.052025][ T8675] loop0: detected capacity change from 0 to 1024 [ 140.058960][ T8667] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1627: bg 0: block 7: invalid block bitmap [ 140.085687][ T8675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.119005][ T8667] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 140.145282][ T8667] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.1627: corrupted xattr block 95: invalid header [ 140.191658][ T8667] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 140.211685][ T8667] EXT4-fs (loop5): 1 orphan inode deleted [ 140.343545][ T29] audit: type=1400 audit(1769484314.140:8614): avc: denied { bind } for pid=8677 comm="syz.1.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.377475][ T8683] loop6: detected capacity change from 0 to 1024 [ 140.454860][ T8686] loop5: detected capacity change from 0 to 128 [ 140.471842][ T8686] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 140.500738][ T8691] loop1: detected capacity change from 0 to 512 [ 140.569296][ T8705] loop1: detected capacity change from 0 to 256 [ 140.576250][ T8705] vfat: Deprecated parameter 'posix' [ 140.581629][ T8705] FAT-fs: "posix" option is obsolete, not supported now [ 140.636038][ T8709] syzkaller0: entered promiscuous mode [ 140.648588][ T8709] syzkaller0: entered allmulticast mode [ 140.654587][ T8713] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 140.671086][ T8711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c028, mo2=0002] [ 140.672000][ T8713] EXT4-fs (loop5): 1 truncate cleaned up [ 140.684042][ T8711] System zones: 1-12 [ 140.694402][ T8711] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1640: bg 0: block 288: padding at end of block bitmap is not set [ 140.724648][ T8711] EXT4-fs (loop4): Remounting filesystem read-only [ 140.735654][ T8711] EXT4-fs (loop4): 1 truncate cleaned up [ 140.966558][ T8711] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1640'. [ 141.404718][ T8731] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.442035][ T8731] EXT4-fs (loop0): 1 truncate cleaned up [ 141.594113][ T8739] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 141.627936][ T8742] netlink: 'syz.6.1647': attribute type 12 has an invalid length. [ 141.662838][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 141.662852][ T29] audit: type=1400 audit(1769484315.460:8623): avc: denied { unmount } for pid=4515 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 142.305593][ T8750] syzkaller0: entered promiscuous mode [ 142.311098][ T8750] syzkaller0: entered allmulticast mode [ 142.561710][ T29] audit: type=1326 audit(1769484316.350:8624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7bdbaeb9 code=0x7ffc0000 [ 142.585391][ T29] audit: type=1326 audit(1769484316.350:8625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7bdbaeb9 code=0x7ffc0000 [ 142.609204][ T29] audit: type=1326 audit(1769484316.350:8626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7bdbaeb9 code=0x7ffc0000 [ 142.632842][ T29] audit: type=1326 audit(1769484316.350:8627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7bdbaeb9 code=0x7ffc0000 [ 142.657681][ T29] audit: type=1326 audit(1769484316.350:8628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f8a7bdbaeb9 code=0x7ffc0000 [ 142.681515][ T29] audit: type=1326 audit(1769484316.350:8629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7bdbaeb9 code=0x7ffc0000 [ 142.705188][ T29] audit: type=1326 audit(1769484316.350:8630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7bdbaeb9 code=0x7ffc0000 [ 142.728660][ T29] audit: type=1326 audit(1769484316.350:8631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7bdbaeb9 code=0x7ffc0000 [ 142.752856][ T29] audit: type=1326 audit(1769484316.350:8632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7bdbaeb9 code=0x7ffc0000 [ 142.774395][ T8776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1662'. [ 142.867386][ T8786] FAULT_INJECTION: forcing a failure. [ 142.867386][ T8786] name failslab, interval 1, probability 0, space 0, times 0 [ 142.880139][ T8786] CPU: 0 UID: 0 PID: 8786 Comm: syz.1.1663 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 142.880171][ T8786] Tainted: [W]=WARN [ 142.880178][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.880189][ T8786] Call Trace: [ 142.880196][ T8786] [ 142.880204][ T8786] __dump_stack+0x1d/0x30 [ 142.880228][ T8786] dump_stack_lvl+0x95/0xd0 [ 142.880397][ T8786] dump_stack+0x15/0x1b [ 142.880421][ T8786] should_fail_ex+0x263/0x280 [ 142.880467][ T8786] should_failslab+0x8c/0xb0 [ 142.880516][ T8786] __kmalloc_cache_noprof+0x64/0x4a0 [ 142.880540][ T8786] ? audit_log_d_path+0x8d/0x150 [ 142.880647][ T8786] audit_log_d_path+0x8d/0x150 [ 142.880680][ T8786] audit_log_d_path_exe+0x42/0x70 [ 142.880786][ T8786] audit_log_task+0x1e8/0x250 [ 142.880815][ T8786] ? kstrtouint+0x76/0xc0 [ 142.880843][ T8786] audit_seccomp+0x60/0x100 [ 142.880952][ T8786] ? __seccomp_filter+0x8db/0x1350 [ 142.880976][ T8786] __seccomp_filter+0x8ec/0x1350 [ 142.880998][ T8786] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 142.881077][ T8786] ? vfs_write+0x86e/0x9f0 [ 142.881094][ T8786] ? __rcu_read_unlock+0x4e/0x70 [ 142.881183][ T8786] ? __fget_files+0x184/0x1c0 [ 142.881210][ T8786] __secure_computing+0x81/0x150 [ 142.881231][ T8786] syscall_trace_enter+0xce/0x1e0 [ 142.881352][ T8786] do_syscall_64+0x9a/0x2a0 [ 142.881385][ T8786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.881429][ T8786] RIP: 0033:0x7f8a7bdbaeb9 [ 142.881447][ T8786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.881476][ T8786] RSP: 002b:00007f8a7a817028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 142.881495][ T8786] RAX: ffffffffffffffda RBX: 00007f8a7c035fa0 RCX: 00007f8a7bdbaeb9 [ 142.881509][ T8786] RDX: 0000000000000001 RSI: 0000200000005680 RDI: 0000000000000006 [ 142.881520][ T8786] RBP: 00007f8a7a817090 R08: 0000000000000000 R09: 0000000000000000 [ 142.881533][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.881546][ T8786] R13: 00007f8a7c036038 R14: 00007f8a7c035fa0 R15: 00007ffdecf12358 [ 142.881564][ T8786] [ 143.097829][ T8768] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 143.120157][ T8768] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 143.149515][ T8768] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 143.187580][ T8768] jbd2_journal_init_inode: Cannot locate journal superblock [ 143.194944][ T8768] EXT4-fs (loop0): Could not load journal inode [ 143.246265][ T8797] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.435290][ T8783] SELinux: failed to load policy [ 143.649363][ T8835] syzkaller0: entered promiscuous mode [ 143.655067][ T8835] syzkaller0: entered allmulticast mode [ 143.674150][ T8838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8838 comm=syz.6.1668 [ 143.718096][ T8844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8844 comm=syz.6.1668 [ 143.944569][ T8856] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.966189][ T9001] set_capacity_and_notify: 8 callbacks suppressed [ 144.966206][ T9001] loop1: detected capacity change from 0 to 512 [ 145.005698][ T9001] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 145.046528][ T9001] EXT4-fs (loop1): 1 truncate cleaned up [ 145.334789][ T9017] loop0: detected capacity change from 0 to 1024 [ 145.745207][ T9026] loop6: detected capacity change from 0 to 2048 [ 145.828008][ T3306] loop6: p1 < > p4 [ 145.841112][ T3306] loop6: p4 size 8388608 extends beyond EOD, truncated [ 145.883580][ T9026] loop6: p1 < > p4 [ 145.889612][ T9026] loop6: p4 size 8388608 extends beyond EOD, truncated [ 145.945062][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 145.963698][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 145.993426][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 146.006282][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 146.073571][ T9035] rtc_cmos 00:00: Alarms can be up to one day in the future [ 146.497955][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 146.505544][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 146.513081][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 146.520700][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 146.528061][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 146.691597][ T9047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1699'. [ 146.700632][ T9047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1699'. [ 146.727102][ T9047] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 146.784885][ T9057] loop6: detected capacity change from 0 to 1024 [ 146.826921][ T9059] syzkaller0: entered promiscuous mode [ 146.832511][ T9059] syzkaller0: entered allmulticast mode [ 147.229879][ T9072] loop1: detected capacity change from 0 to 512 [ 147.242618][ T9072] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c028, mo2=0002] [ 147.262894][ T9072] System zones: 1-12 [ 147.267537][ T9072] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1710: bg 0: block 288: padding at end of block bitmap is not set [ 147.282557][ T9072] EXT4-fs (loop1): Remounting filesystem read-only [ 147.289509][ T9072] EXT4-fs (loop1): 1 truncate cleaned up [ 147.443149][ T9072] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1710'. [ 147.702886][ T9082] loop0: detected capacity change from 0 to 128 [ 147.732015][ T9085] loop6: detected capacity change from 0 to 512 [ 147.739019][ T9085] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 147.751111][ T9085] EXT4-fs (loop6): 1 truncate cleaned up [ 147.845611][ T9088] loop0: detected capacity change from 0 to 1024 [ 147.864162][ T29] kauditd_printk_skb: 630 callbacks suppressed [ 147.864179][ T29] audit: type=1400 audit(1769484321.660:9263): avc: denied { read } for pid=9089 comm="syz.4.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 148.242395][ T9098] loop0: detected capacity change from 0 to 512 [ 148.295917][ T9098] ext4: Unknown parameter '.' [ 148.370126][ T9096] loop4: detected capacity change from 0 to 1024 [ 148.384820][ T9096] EXT4-fs: Ignoring removed orlov option [ 148.392012][ T9096] EXT4-fs: inline encryption not supported [ 148.544964][ T9111] syzkaller0: entered promiscuous mode [ 148.550512][ T9111] syzkaller0: entered allmulticast mode [ 148.683675][ T9118] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 148.706791][ T9118] EXT4-fs (loop4): 1 truncate cleaned up [ 148.735773][ T9127] FAULT_INJECTION: forcing a failure. [ 148.735773][ T9127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.748938][ T9127] CPU: 1 UID: 0 PID: 9127 Comm: syz.6.1729 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.748971][ T9127] Tainted: [W]=WARN [ 148.748977][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.748989][ T9127] Call Trace: [ 148.749050][ T9127] [ 148.749063][ T9127] __dump_stack+0x1d/0x30 [ 148.749088][ T9127] dump_stack_lvl+0x95/0xd0 [ 148.749108][ T9127] dump_stack+0x15/0x1b [ 148.749181][ T9127] should_fail_ex+0x263/0x280 [ 148.749211][ T9127] should_fail+0xb/0x20 [ 148.749237][ T9127] should_fail_usercopy+0x1a/0x20 [ 148.749265][ T9127] _copy_from_user+0x1c/0xb0 [ 148.749295][ T9127] ___sys_sendmsg+0xc1/0x1e0 [ 148.749418][ T9127] __x64_sys_sendmsg+0xd4/0x160 [ 148.749440][ T9127] x64_sys_call+0x17ba/0x3000 [ 148.749521][ T9127] do_syscall_64+0xc0/0x2a0 [ 148.749553][ T9127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.749624][ T9127] RIP: 0033:0x7fe6ee4eaeb9 [ 148.749639][ T9127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.749658][ T9127] RSP: 002b:00007fe6ecf47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.749677][ T9127] RAX: ffffffffffffffda RBX: 00007fe6ee765fa0 RCX: 00007fe6ee4eaeb9 [ 148.749767][ T9127] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 148.749782][ T9127] RBP: 00007fe6ecf47090 R08: 0000000000000000 R09: 0000000000000000 [ 148.749797][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.749812][ T9127] R13: 00007fe6ee766038 R14: 00007fe6ee765fa0 R15: 00007ffc13d68a58 [ 148.749831][ T9127] [ 148.933061][ T29] audit: type=1326 audit(1769484322.730:9264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9128 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7bdbaeb9 code=0x7ffc0000 [ 148.956601][ T29] audit: type=1326 audit(1769484322.730:9265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9128 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7bdbaeb9 code=0x7ffc0000 [ 148.985215][ T29] audit: type=1326 audit(1769484322.770:9266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9128 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8a7bdbaeb9 code=0x7ffc0000 [ 149.035550][ T9134] FAULT_INJECTION: forcing a failure. [ 149.035550][ T9134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.048641][ T9134] CPU: 0 UID: 0 PID: 9134 Comm: syz.6.1731 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 149.048710][ T9134] Tainted: [W]=WARN [ 149.048717][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.048730][ T9134] Call Trace: [ 149.048738][ T9134] [ 149.048813][ T9134] __dump_stack+0x1d/0x30 [ 149.048836][ T9134] dump_stack_lvl+0x95/0xd0 [ 149.048928][ T9134] dump_stack+0x15/0x1b [ 149.048948][ T9134] should_fail_ex+0x263/0x280 [ 149.049060][ T9134] should_fail+0xb/0x20 [ 149.049091][ T9134] should_fail_usercopy+0x1a/0x20 [ 149.049151][ T9134] _copy_from_user+0x1c/0xb0 [ 149.049245][ T9134] kstrtouint_from_user+0x69/0xf0 [ 149.049274][ T9134] proc_fail_nth_write+0x50/0x160 [ 149.049307][ T9134] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 149.049388][ T9134] vfs_write+0x269/0x9f0 [ 149.049406][ T9134] ? __rcu_read_unlock+0x4e/0x70 [ 149.049456][ T9134] ? __fget_files+0x184/0x1c0 [ 149.049483][ T9134] ? mutex_lock+0x57/0x90 [ 149.049509][ T9134] ksys_write+0xdc/0x1a0 [ 149.049533][ T9134] __x64_sys_write+0x40/0x50 [ 149.049622][ T9134] x64_sys_call+0x2847/0x3000 [ 149.049651][ T9134] do_syscall_64+0xc0/0x2a0 [ 149.049679][ T9134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.049700][ T9134] RIP: 0033:0x7fe6ee4ab78e [ 149.049784][ T9134] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.049805][ T9134] RSP: 002b:00007fe6ecf25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.049824][ T9134] RAX: ffffffffffffffda RBX: 00007fe6ecf266c0 RCX: 00007fe6ee4ab78e [ 149.049839][ T9134] RDX: 0000000000000001 RSI: 00007fe6ecf260a0 RDI: 0000000000000003 [ 149.049851][ T9134] RBP: 00007fe6ecf26090 R08: 0000000000000000 R09: 0000000000000000 [ 149.049865][ T9134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.049928][ T9134] R13: 00007fe6ee766128 R14: 00007fe6ee766090 R15: 00007ffc13d68a58 [ 149.049947][ T9134] [ 149.337442][ T29] audit: type=1326 audit(1769484323.100:9267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9128 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7bdbaeb9 code=0x7ffc0000 [ 149.359011][ T9140] random: crng reseeded on system resumption [ 149.361113][ T29] audit: type=1326 audit(1769484323.100:9268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9128 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7bdbaeb9 code=0x7ffc0000 [ 149.373506][ T9142] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 149.428654][ T9142] EXT4-fs (loop6): 1 truncate cleaned up [ 149.435567][ T9145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1735'. [ 149.444561][ T9145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1735'. [ 149.569257][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1735'. [ 149.578366][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1735'. [ 149.620494][ T9150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.629405][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1735'. [ 149.638392][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1735'. [ 149.717941][ T9145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1735'. [ 149.758099][ T9150] syzkaller0: entered promiscuous mode [ 149.763608][ T9150] syzkaller0: entered allmulticast mode [ 149.783190][ T9155] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19481 sclass=netlink_xfrm_socket pid=9155 comm=syz.1.1737 [ 150.261912][ T9170] FAULT_INJECTION: forcing a failure. [ 150.261912][ T9170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.275068][ T9170] CPU: 1 UID: 0 PID: 9170 Comm: syz.6.1742 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.275104][ T9170] Tainted: [W]=WARN [ 150.275111][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.275125][ T9170] Call Trace: [ 150.275133][ T9170] [ 150.275214][ T9170] __dump_stack+0x1d/0x30 [ 150.275243][ T9170] dump_stack_lvl+0x95/0xd0 [ 150.275267][ T9170] dump_stack+0x15/0x1b [ 150.275285][ T9170] should_fail_ex+0x263/0x280 [ 150.275445][ T9170] should_fail+0xb/0x20 [ 150.275472][ T9170] should_fail_usercopy+0x1a/0x20 [ 150.275503][ T9170] _copy_from_user+0x1c/0xb0 [ 150.275583][ T9170] __copy_msghdr+0x244/0x300 [ 150.275617][ T9170] ___sys_sendmsg+0x10c/0x1e0 [ 150.275648][ T9170] __sys_sendmmsg+0x185/0x320 [ 150.275678][ T9170] __x64_sys_sendmmsg+0x57/0x70 [ 150.275729][ T9170] x64_sys_call+0x1e28/0x3000 [ 150.275753][ T9170] do_syscall_64+0xc0/0x2a0 [ 150.275855][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.275880][ T9170] RIP: 0033:0x7fe6ee4eaeb9 [ 150.275898][ T9170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.275918][ T9170] RSP: 002b:00007fe6ecf47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 150.275938][ T9170] RAX: ffffffffffffffda RBX: 00007fe6ee765fa0 RCX: 00007fe6ee4eaeb9 [ 150.275952][ T9170] RDX: 0000000000000002 RSI: 0000200000000f40 RDI: 0000000000000004 [ 150.276042][ T9170] RBP: 00007fe6ecf47090 R08: 0000000000000000 R09: 0000000000000000 [ 150.276054][ T9170] R10: 000000002400c0c6 R11: 0000000000000246 R12: 0000000000000001 [ 150.276066][ T9170] R13: 00007fe6ee766038 R14: 00007fe6ee765fa0 R15: 00007ffc13d68a58 [ 150.276152][ T9170] [ 150.493717][ T9162] set_capacity_and_notify: 2 callbacks suppressed [ 150.493735][ T9162] loop0: detected capacity change from 0 to 1024 [ 150.582126][ T9175] FAULT_INJECTION: forcing a failure. [ 150.582126][ T9175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.595291][ T9175] CPU: 1 UID: 0 PID: 9175 Comm: syz.4.1744 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.595429][ T9175] Tainted: [W]=WARN [ 150.595437][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.595450][ T9175] Call Trace: [ 150.595458][ T9175] [ 150.595466][ T9175] __dump_stack+0x1d/0x30 [ 150.595491][ T9175] dump_stack_lvl+0x95/0xd0 [ 150.595511][ T9175] dump_stack+0x15/0x1b [ 150.595577][ T9175] should_fail_ex+0x263/0x280 [ 150.595610][ T9175] should_fail+0xb/0x20 [ 150.595634][ T9175] should_fail_usercopy+0x1a/0x20 [ 150.595715][ T9175] _copy_to_user+0x20/0xa0 [ 150.595734][ T9175] simple_read_from_buffer+0xb5/0x130 [ 150.595767][ T9175] proc_fail_nth_read+0x10e/0x150 [ 150.595794][ T9175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.595831][ T9175] vfs_read+0x1ab/0x7f0 [ 150.595850][ T9175] ? fdget+0x104/0x110 [ 150.595874][ T9175] ? __rcu_read_unlock+0x4e/0x70 [ 150.595903][ T9175] ? __fget_files+0x184/0x1c0 [ 150.596003][ T9175] ? mutex_lock+0x57/0x90 [ 150.596029][ T9175] ksys_read+0xdc/0x1a0 [ 150.596084][ T9175] __x64_sys_read+0x40/0x50 [ 150.596101][ T9175] x64_sys_call+0x2889/0x3000 [ 150.596132][ T9175] do_syscall_64+0xc0/0x2a0 [ 150.596206][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.596231][ T9175] RIP: 0033:0x7fec6ad1b78e [ 150.596264][ T9175] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.596284][ T9175] RSP: 002b:00007fec697b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.596307][ T9175] RAX: ffffffffffffffda RBX: 00007fec697b76c0 RCX: 00007fec6ad1b78e [ 150.596323][ T9175] RDX: 000000000000000f RSI: 00007fec697b70a0 RDI: 0000000000000009 [ 150.596337][ T9175] RBP: 00007fec697b7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.596352][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.596403][ T9175] R13: 00007fec6afd6038 R14: 00007fec6afd5fa0 R15: 00007ffd85c6c938 [ 150.596425][ T9175] [ 150.841438][ T9183] syzkaller0: entered promiscuous mode [ 150.846963][ T9183] syzkaller0: entered allmulticast mode [ 150.880729][ T9184] loop4: detected capacity change from 0 to 512 [ 150.927568][ T9184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c028, mo2=0002] [ 150.967747][ T9184] System zones: 1-12 [ 150.990886][ T9184] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1746: bg 0: block 288: padding at end of block bitmap is not set [ 151.016414][ T9184] EXT4-fs (loop4): Remounting filesystem read-only [ 151.040611][ T9184] EXT4-fs (loop4): 1 truncate cleaned up [ 151.055345][ T9198] ip6gre1: entered promiscuous mode [ 151.100663][ T9205] FAULT_INJECTION: forcing a failure. [ 151.100663][ T9205] name failslab, interval 1, probability 0, space 0, times 0 [ 151.113440][ T9205] CPU: 0 UID: 0 PID: 9205 Comm: syz.0.1755 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 151.113524][ T9205] Tainted: [W]=WARN [ 151.113531][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.113632][ T9205] Call Trace: [ 151.113639][ T9205] [ 151.113646][ T9205] __dump_stack+0x1d/0x30 [ 151.113686][ T9205] dump_stack_lvl+0x95/0xd0 [ 151.113709][ T9205] dump_stack+0x15/0x1b [ 151.113808][ T9205] should_fail_ex+0x263/0x280 [ 151.113842][ T9205] should_failslab+0x8c/0xb0 [ 151.113867][ T9205] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 151.113972][ T9205] ? __get_vm_area_node+0x106/0x1d0 [ 151.114001][ T9205] __get_vm_area_node+0x106/0x1d0 [ 151.114030][ T9205] __vmalloc_node_range_noprof+0x291/0x12b0 [ 151.114062][ T9205] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 151.114243][ T9205] ? __rcu_read_unlock+0x4e/0x70 [ 151.114271][ T9205] ? avc_has_perm_noaudit+0xab/0x130 [ 151.114305][ T9205] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 151.114331][ T9205] __vmalloc_noprof+0xa4/0xf0 [ 151.114429][ T9205] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 151.114457][ T9205] bpf_prog_alloc_no_stats+0x47/0x380 [ 151.114498][ T9205] ? bpf_prog_alloc+0x2a/0x150 [ 151.114520][ T9205] bpf_prog_alloc+0x3c/0x150 [ 151.114545][ T9205] bpf_prog_load+0x506/0x1140 [ 151.114577][ T9205] ? security_bpf+0x2b/0x90 [ 151.114629][ T9205] __sys_bpf+0x469/0x7b0 [ 151.114707][ T9205] __x64_sys_bpf+0x41/0x50 [ 151.114760][ T9205] x64_sys_call+0x28e1/0x3000 [ 151.114786][ T9205] do_syscall_64+0xc0/0x2a0 [ 151.114858][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.114879][ T9205] RIP: 0033:0x7fce6592aeb9 [ 151.114917][ T9205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.114935][ T9205] RSP: 002b:00007fce64387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.114955][ T9205] RAX: ffffffffffffffda RBX: 00007fce65ba5fa0 RCX: 00007fce6592aeb9 [ 151.115009][ T9205] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 151.115092][ T9205] RBP: 00007fce64387090 R08: 0000000000000000 R09: 0000000000000000 [ 151.115107][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.115122][ T9205] R13: 00007fce65ba6038 R14: 00007fce65ba5fa0 R15: 00007fff9a93e718 [ 151.115141][ T9205] [ 151.115172][ T9205] syz.0.1755: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 151.304321][ T9211] loop1: detected capacity change from 0 to 512 [ 151.312074][ T9205] ,cpuset=/,mems_allowed=0 [ 151.312125][ T9205] CPU: 0 UID: 0 PID: 9205 Comm: syz.0.1755 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 151.312156][ T9205] Tainted: [W]=WARN [ 151.312163][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.312176][ T9205] Call Trace: [ 151.312184][ T9205] [ 151.312193][ T9205] __dump_stack+0x1d/0x30 [ 151.312220][ T9205] dump_stack_lvl+0x95/0xd0 [ 151.312322][ T9205] dump_stack+0x15/0x1b [ 151.312343][ T9205] warn_alloc+0x145/0x1c0 [ 151.312374][ T9205] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 151.312407][ T9205] ? __rcu_read_unlock+0x4e/0x70 [ 151.312514][ T9205] ? avc_has_perm_noaudit+0xab/0x130 [ 151.312550][ T9205] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 151.312578][ T9205] __vmalloc_noprof+0xa4/0xf0 [ 151.312664][ T9205] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 151.312692][ T9205] bpf_prog_alloc_no_stats+0x47/0x380 [ 151.312743][ T9205] ? bpf_prog_alloc+0x2a/0x150 [ 151.312769][ T9205] bpf_prog_alloc+0x3c/0x150 [ 151.312794][ T9205] bpf_prog_load+0x506/0x1140 [ 151.312867][ T9205] ? security_bpf+0x2b/0x90 [ 151.312890][ T9205] __sys_bpf+0x469/0x7b0 [ 151.312922][ T9205] __x64_sys_bpf+0x41/0x50 [ 151.312947][ T9205] x64_sys_call+0x28e1/0x3000 [ 151.313041][ T9205] do_syscall_64+0xc0/0x2a0 [ 151.313129][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.313152][ T9205] RIP: 0033:0x7fce6592aeb9 [ 151.313169][ T9205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.313188][ T9205] RSP: 002b:00007fce64387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.313209][ T9205] RAX: ffffffffffffffda RBX: 00007fce65ba5fa0 RCX: 00007fce6592aeb9 [ 151.313302][ T9205] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 151.313316][ T9205] RBP: 00007fce64387090 R08: 0000000000000000 R09: 0000000000000000 [ 151.313330][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.313404][ T9205] R13: 00007fce65ba6038 R14: 00007fce65ba5fa0 R15: 00007fff9a93e718 [ 151.313497][ T9205] [ 151.313505][ T9205] Mem-Info: [ 151.325230][ T9211] EXT4-fs: Invalid want_extra_isize 1 [ 151.328090][ T9205] active_anon:42652 inactive_anon:0 isolated_anon:0 [ 151.328090][ T9205] active_file:26906 inactive_file:2572 isolated_file:0 [ 151.328090][ T9205] unevictable:0 dirty:46 writeback:6 [ 151.328090][ T9205] slab_reclaimable:3520 slab_unreclaimable:16986 [ 151.328090][ T9205] mapped:29442 shmem:33873 pagetables:1432 [ 151.328090][ T9205] sec_pagetables:0 bounce:0 [ 151.328090][ T9205] kernel_misc_reclaimable:0 [ 151.328090][ T9205] free:1838480 free_pcp:9236 free_cma:0 [ 151.391564][ T29] audit: type=1400 audit(1769484325.070:9269): avc: denied { mount } for pid=9209 comm="syz.1.1756" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 151.397095][ T9205] Node 0 active_anon:170144kB inactive_anon:0kB active_file:107624kB inactive_file:10288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117768kB dirty:184kB writeback:24kB shmem:135028kB kernel_stack:3936kB pagetables:5728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 151.680546][ T9205] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.710923][ T9205] lowmem_reserve[]: 0 2879 7858 7858 [ 151.716321][ T9205] Node 0 DMA32 free:2944752kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948384kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 151.747944][ T9205] lowmem_reserve[]: 0 0 4978 4978 [ 151.753030][ T9205] Node 0 Normal free:4393808kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:170144kB inactive_anon:0kB active_file:107624kB inactive_file:10288kB unevictable:0kB writepending:208kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:33780kB local_pcp:18432kB free_cma:0kB [ 151.786699][ T9205] lowmem_reserve[]: 0 0 0 0 [ 151.791231][ T9205] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 151.804027][ T9205] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944752kB [ 151.820443][ T9205] Node 0 Normal: 892*4kB (UME) 838*8kB (UME) 153*16kB (UME) 183*32kB (UME) 137*64kB (UME) 107*128kB (UME) 85*256kB (UM) 61*512kB (UM) 39*1024kB (UME) 20*2048kB (UM) 1030*4096kB (UM) = 4393808kB [ 151.840074][ T9205] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 151.849464][ T9205] 63222 total pagecache pages [ 151.854342][ T9205] 0 pages in swap cache [ 151.858546][ T9205] Free swap = 124996kB [ 151.862735][ T9205] Total swap = 124996kB [ 151.866884][ T9205] 2097051 pages RAM [ 151.870879][ T9205] 0 pages HighMem/MovableOnly [ 151.875714][ T9205] 81555 pages reserved [ 151.964403][ T9217] syzkaller0: entered promiscuous mode [ 151.970198][ T9217] syzkaller0: entered allmulticast mode [ 151.995187][ T9220] syzkaller0: entered promiscuous mode [ 152.000805][ T9220] syzkaller0: entered allmulticast mode [ 152.086986][ T9224] loop6: detected capacity change from 0 to 1024 [ 152.108069][ T9224] EXT4-fs: inline encryption not supported [ 152.123864][ T9226] loop1: detected capacity change from 0 to 512 [ 152.138710][ T9226] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.164398][ T9226] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1762: invalid indirect mapped block 4294967295 (level 0) [ 152.201687][ T9226] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1762: invalid indirect mapped block 4294967295 (level 1) [ 152.252248][ T9226] EXT4-fs (loop1): 1 orphan inode deleted [ 152.258190][ T9226] EXT4-fs (loop1): 1 truncate cleaned up [ 152.272031][ T9233] FAULT_INJECTION: forcing a failure. [ 152.272031][ T9233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.285145][ T9233] CPU: 1 UID: 0 PID: 9233 Comm: syz.0.1764 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 152.285185][ T9233] Tainted: [W]=WARN [ 152.285192][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.285207][ T9233] Call Trace: [ 152.285216][ T9233] [ 152.285225][ T9233] __dump_stack+0x1d/0x30 [ 152.285320][ T9233] dump_stack_lvl+0x95/0xd0 [ 152.285341][ T9233] dump_stack+0x15/0x1b [ 152.285390][ T9233] should_fail_ex+0x263/0x280 [ 152.285422][ T9233] ? __pfx_ucma_reject+0x10/0x10 [ 152.285474][ T9233] should_fail+0xb/0x20 [ 152.285499][ T9233] should_fail_usercopy+0x1a/0x20 [ 152.285528][ T9233] _copy_from_user+0x1c/0xb0 [ 152.285604][ T9233] ucma_reject+0x54/0x400 [ 152.285637][ T9233] ? __pfx_ucma_reject+0x10/0x10 [ 152.285728][ T9233] ucma_write+0x1c9/0x260 [ 152.285759][ T9233] vfs_writev+0x42b/0x900 [ 152.285783][ T9233] ? __pfx_ucma_write+0x10/0x10 [ 152.285815][ T9233] do_writev+0xe9/0x210 [ 152.285845][ T9233] __x64_sys_writev+0x45/0x50 [ 152.285868][ T9233] x64_sys_call+0x1ba5/0x3000 [ 152.285900][ T9233] do_syscall_64+0xc0/0x2a0 [ 152.285994][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.286019][ T9233] RIP: 0033:0x7fce6592aeb9 [ 152.286075][ T9233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.286091][ T9233] RSP: 002b:00007fce64387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 152.286111][ T9233] RAX: ffffffffffffffda RBX: 00007fce65ba5fa0 RCX: 00007fce6592aeb9 [ 152.286203][ T9233] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 152.286218][ T9233] RBP: 00007fce64387090 R08: 0000000000000000 R09: 0000000000000000 [ 152.286232][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.286278][ T9233] R13: 00007fce65ba6038 R14: 00007fce65ba5fa0 R15: 00007fff9a93e718 [ 152.286300][ T9233] [ 152.286412][ T9226] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 152.534061][ T9238] syzkaller0: entered promiscuous mode [ 152.539658][ T9238] syzkaller0: entered allmulticast mode [ 152.638076][ T9242] __nla_validate_parse: 5 callbacks suppressed [ 152.638095][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1767'. [ 152.653302][ T9242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1767'. [ 152.662377][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1767'. [ 152.680698][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1767'. [ 152.691886][ T9244] loop6: detected capacity change from 0 to 1024 [ 152.744298][ T29] audit: type=1400 audit(1769484326.540:9270): avc: denied { setopt } for pid=9248 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.766533][ T9249] loop1: detected capacity change from 0 to 512 [ 153.336318][ T9269] syzkaller0: entered promiscuous mode [ 153.341899][ T9269] syzkaller0: entered allmulticast mode [ 153.352814][ T9271] loop4: detected capacity change from 0 to 512 [ 153.365407][ T9271] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 153.394701][ T9271] EXT4-fs (loop4): 1 truncate cleaned up [ 153.528769][ T9282] syzkaller0: entered promiscuous mode [ 153.534295][ T9282] syzkaller0: entered allmulticast mode [ 153.800700][ T9285] loop1: detected capacity change from 0 to 512 [ 153.906343][ T9285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c028, mo2=0002] [ 153.939389][ T9285] System zones: 1-12 [ 153.969192][ T9285] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1781: bg 0: block 288: padding at end of block bitmap is not set [ 153.987893][ T9289] netlink: 'syz.6.1780': attribute type 12 has an invalid length. [ 154.006461][ T9285] EXT4-fs (loop1): Remounting filesystem read-only [ 154.025221][ T9285] EXT4-fs (loop1): 1 truncate cleaned up [ 154.215046][ T9290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1781'. [ 154.555677][ T29] audit: type=1400 audit(1769484328.350:9271): avc: denied { mount } for pid=9304 comm="syz.1.1785" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 154.652365][ T29] audit: type=1400 audit(1769484328.450:9272): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 154.716322][ T9314] syzkaller0: entered promiscuous mode [ 154.721842][ T9314] syzkaller0: entered allmulticast mode [ 154.848612][ T9317] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1790'. [ 154.855921][ T9318] loop0: detected capacity change from 0 to 1024 [ 154.969399][ T9322] syzkaller0: entered promiscuous mode [ 154.975131][ T9322] syzkaller0: entered allmulticast mode [ 155.157292][ T9334] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 155.230079][ T9342] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 155.299011][ T9345] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 155.311291][ T9346] netlink: 'syz.1.1798': attribute type 12 has an invalid length. [ 155.320146][ T9345] FAULT_INJECTION: forcing a failure. [ 155.320146][ T9345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.333819][ T9345] CPU: 0 UID: 0 PID: 9345 Comm: syz.6.1801 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 155.333936][ T9345] Tainted: [W]=WARN [ 155.333942][ T9345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.333956][ T9345] Call Trace: [ 155.333963][ T9345] [ 155.333972][ T9345] __dump_stack+0x1d/0x30 [ 155.334000][ T9345] dump_stack_lvl+0x95/0xd0 [ 155.334021][ T9345] dump_stack+0x15/0x1b [ 155.334103][ T9345] should_fail_ex+0x263/0x280 [ 155.334164][ T9345] should_fail+0xb/0x20 [ 155.334221][ T9345] should_fail_usercopy+0x1a/0x20 [ 155.334349][ T9345] _copy_from_user+0x1c/0xb0 [ 155.334369][ T9345] ___sys_sendmsg+0xc1/0x1e0 [ 155.334396][ T9345] __x64_sys_sendmsg+0xd4/0x160 [ 155.334422][ T9345] x64_sys_call+0x17ba/0x3000 [ 155.334504][ T9345] do_syscall_64+0xc0/0x2a0 [ 155.334537][ T9345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.334563][ T9345] RIP: 0033:0x7fe6ee4eaeb9 [ 155.334577][ T9345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.334596][ T9345] RSP: 002b:00007fe6ecf47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.334615][ T9345] RAX: ffffffffffffffda RBX: 00007fe6ee765fa0 RCX: 00007fe6ee4eaeb9 [ 155.334629][ T9345] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 155.334643][ T9345] RBP: 00007fe6ecf47090 R08: 0000000000000000 R09: 0000000000000000 [ 155.334722][ T9345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.334734][ T9345] R13: 00007fe6ee766038 R14: 00007fe6ee765fa0 R15: 00007ffc13d68a58 [ 155.334756][ T9345] [ 155.543670][ T9348] syzkaller0: entered promiscuous mode [ 155.549174][ T9348] syzkaller0: entered allmulticast mode [ 156.036006][ T29] audit: type=1400 audit(1769484585.824:9273): avc: denied { getopt } for pid=9364 comm="syz.4.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.101535][ T9369] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 156.106135][ T9368] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 156.133002][ T9369] set_capacity_and_notify: 3 callbacks suppressed [ 156.133071][ T9369] loop4: detected capacity change from 0 to 512 [ 156.163273][ T9369] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.1809: iget: bad extra_isize 90 (inode size 256) [ 156.181745][ T9369] EXT4-fs (loop4): Remounting filesystem read-only [ 156.198751][ T9369] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 156.209261][ T9369] EXT4-fs (loop4): 1 orphan inode deleted [ 156.215877][ T9369] EXT4-fs mount: 52 callbacks suppressed [ 156.215890][ T9369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.275196][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.330246][ T9376] loop1: detected capacity change from 0 to 1024 [ 156.343408][ T9378] loop4: detected capacity change from 0 to 512 [ 156.353042][ T9378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c028, mo2=0002] [ 156.373449][ T9378] System zones: 1-12 [ 156.392170][ T9378] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1813: bg 0: block 288: padding at end of block bitmap is not set [ 156.430622][ T9376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.449774][ T9378] EXT4-fs (loop4): Remounting filesystem read-only [ 156.464257][ T9378] EXT4-fs (loop4): 1 truncate cleaned up [ 156.479906][ T9378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.642326][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1815'. [ 156.673360][ T9383] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1813'. [ 156.768723][ T9391] loop0: detected capacity change from 0 to 2048 [ 156.818392][ T3306] loop0: p1 < > p4 [ 156.827722][ T3306] loop0: p4 size 8388608 extends beyond EOD, truncated [ 156.846673][ T8986] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.859180][ T9391] loop0: p1 < > p4 [ 156.868307][ T9391] loop0: p4 size 8388608 extends beyond EOD, truncated [ 156.899234][ T8986] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.924518][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 156.938203][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 156.975668][ T9404] FAULT_INJECTION: forcing a failure. [ 156.975668][ T9404] name failslab, interval 1, probability 0, space 0, times 0 [ 156.980484][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 156.988368][ T9404] CPU: 1 UID: 0 PID: 9404 Comm: syz.0.1820 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.988449][ T9404] Tainted: [W]=WARN [ 156.988457][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.988471][ T9404] Call Trace: [ 156.988479][ T9404] [ 156.988488][ T9404] __dump_stack+0x1d/0x30 [ 156.988575][ T9404] dump_stack_lvl+0x95/0xd0 [ 156.988598][ T9404] dump_stack+0x15/0x1b [ 156.988619][ T9404] should_fail_ex+0x263/0x280 [ 156.988677][ T9404] should_failslab+0x8c/0xb0 [ 156.988703][ T9404] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 156.988733][ T9404] ? __get_vm_area_node+0x106/0x1d0 [ 156.988792][ T9404] __get_vm_area_node+0x106/0x1d0 [ 156.988875][ T9404] __vmalloc_node_range_noprof+0x291/0x12b0 [ 156.988906][ T9404] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 156.988936][ T9404] ? __rcu_read_unlock+0x4e/0x70 [ 156.989035][ T9404] ? avc_has_perm_noaudit+0xab/0x130 [ 156.989072][ T9404] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 156.989099][ T9404] __vmalloc_noprof+0xa4/0xf0 [ 156.989177][ T9404] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 156.989315][ T9404] bpf_prog_alloc_no_stats+0x47/0x380 [ 156.989343][ T9404] ? bpf_prog_alloc+0x2a/0x150 [ 156.989370][ T9404] bpf_prog_alloc+0x3c/0x150 [ 156.989396][ T9404] bpf_prog_load+0x506/0x1140 [ 156.989507][ T9404] ? security_bpf+0x2b/0x90 [ 156.989606][ T9404] __sys_bpf+0x469/0x7b0 [ 156.989640][ T9404] __x64_sys_bpf+0x41/0x50 [ 156.989665][ T9404] x64_sys_call+0x28e1/0x3000 [ 156.989699][ T9404] do_syscall_64+0xc0/0x2a0 [ 156.989731][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.989761][ T9404] RIP: 0033:0x7fce6592aeb9 [ 156.989779][ T9404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.989805][ T9404] RSP: 002b:00007fce64387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.989827][ T9404] RAX: ffffffffffffffda RBX: 00007fce65ba5fa0 RCX: 00007fce6592aeb9 [ 156.989843][ T9404] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 156.989858][ T9404] RBP: 00007fce64387090 R08: 0000000000000000 R09: 0000000000000000 [ 156.989873][ T9404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.989886][ T9404] R13: 00007fce65ba6038 R14: 00007fce65ba5fa0 R15: 00007fff9a93e718 [ 156.989959][ T9404] [ 157.039306][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 157.056662][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.252396][ T29] audit: type=1400 audit(1769484587.032:9274): avc: denied { ioctl } for pid=9405 comm="syz.0.1822" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=24432 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 157.298498][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.309502][ T8986] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.344185][ T9414] ªªªªªª: renamed from vlan0 (while UP) [ 157.369665][ T8986] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.436646][ T9418] syzkaller0: entered promiscuous mode [ 157.442257][ T9418] syzkaller0: entered allmulticast mode [ 157.603458][ T9392] chnl_net:caif_netlink_parms(): no params data found [ 157.704288][ T9431] loop1: detected capacity change from 0 to 512 [ 157.737172][ T9392] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.744668][ T9392] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.769118][ T9431] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.811589][ T9431] EXT4-fs (loop1): 1 truncate cleaned up [ 157.817904][ T9431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.830735][ T9392] bridge_slave_0: entered allmulticast mode [ 157.849018][ T9392] bridge_slave_0: entered promiscuous mode [ 157.855860][ T8986] bridge_slave_1: left promiscuous mode [ 157.861622][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.954457][ T8986] bridge_slave_0: left allmulticast mode [ 157.960228][ T8986] bridge_slave_0: left promiscuous mode [ 157.965998][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.158960][ T9392] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.166190][ T9392] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.187791][ T9392] bridge_slave_1: entered allmulticast mode [ 158.315454][ T9392] bridge_slave_1: entered promiscuous mode [ 158.367517][ T8986] tipc: Left network mode [ 158.376811][ T8986] hsr_slave_0: left promiscuous mode [ 158.397769][ T9446] loop0: detected capacity change from 0 to 2048 [ 158.409483][ T8986] hsr_slave_1: left promiscuous mode [ 158.444397][ T8986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.451794][ T8986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.466776][ T9451] loop4: detected capacity change from 0 to 512 [ 158.491957][ T9451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c028, mo2=0002] [ 158.502325][ T3306] loop0: p1 < > p4 [ 158.518595][ T3306] loop0: p4 size 8388608 extends beyond EOD, truncated [ 158.545416][ T8986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.552948][ T8986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.562969][ T9451] System zones: 1-12 [ 158.571416][ T9446] loop0: p1 < > p4 [ 158.577057][ T9451] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1830: bg 0: block 288: padding at end of block bitmap is not set [ 158.594696][ T9446] loop0: p4 size 8388608 extends beyond EOD, truncated [ 158.602360][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.617958][ T9451] EXT4-fs (loop4): Remounting filesystem read-only [ 158.624101][ T3002] loop0: p1 < > p4 [ 158.624687][ T8986] veth1_macvtap: left promiscuous mode [ 158.632021][ T3002] loop0: p4 size 8388608 extends beyond EOD, truncated [ 158.634029][ T8986] veth0_macvtap: left promiscuous mode [ 158.646432][ T8986] veth1_vlan: left promiscuous mode [ 158.652001][ T8986] veth0_vlan: left promiscuous mode [ 158.661814][ T9459] loop1: detected capacity change from 0 to 512 [ 158.664412][ T9451] EXT4-fs (loop4): 1 truncate cleaned up [ 158.682941][ T9451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.717037][ T9463] loop0: detected capacity change from 0 to 1024 [ 158.723961][ T9459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.741115][ T9459] ext4 filesystem being mounted at /397/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.746956][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 158.770081][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 158.793655][ T9463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.801632][ T29] audit: type=1400 audit(1769484588.593:9275): avc: denied { write } for pid=9458 comm="syz.1.1831" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 158.836623][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.877605][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 158.884083][ T5484] udevd[5484]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 158.911020][ T8986] team0 (unregistering): Port device team_slave_1 removed [ 158.925620][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 158.935589][ T8986] team0 (unregistering): Port device team_slave_0 removed [ 158.941620][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 159.075112][ T9392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.117262][ T9478] loop6: detected capacity change from 0 to 512 [ 159.132391][ T9478] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 159.150885][ T9392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.175574][ T9478] EXT4-fs (loop6): 1 truncate cleaned up [ 159.184709][ T9478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.202274][ T9392] team0: Port device team_slave_0 added [ 159.306293][ T9392] team0: Port device team_slave_1 added [ 159.330569][ T8986] IPVS: stop unused estimator thread 0... [ 159.348524][ T9392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.355571][ T9392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.381874][ T9392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.399894][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.415043][ T9392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.422450][ T9392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.448511][ T9392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.511108][ T9392] hsr_slave_0: entered promiscuous mode [ 159.517830][ T9392] hsr_slave_1: entered promiscuous mode [ 159.537455][ T9392] debugfs: 'hsr0' already exists in 'hsr' [ 159.543326][ T9392] Cannot create hsr debugfs directory [ 159.701180][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.809147][ T29] audit: type=1326 audit(1769484589.621:9276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.4.1839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec6ad5aeb9 code=0x0 [ 159.830187][ T9392] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 159.849617][ T9392] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 159.858893][ T9392] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 159.871713][ T9392] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 159.884512][ T9515] syzkaller0: entered promiscuous mode [ 159.890149][ T9515] syzkaller0: entered allmulticast mode [ 159.993326][ T9392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.004741][ T8143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.019155][ T9392] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.030570][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.037651][ T8986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.055244][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.062404][ T8986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.117646][ T9544] syzkaller0: entered promiscuous mode [ 160.123202][ T9544] syzkaller0: entered allmulticast mode [ 160.214726][ T9553] Cannot find add_set index 0 as target [ 160.237487][ T9553] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1845: iget: bad extra_isize 90 (inode size 256) [ 160.262504][ T9553] EXT4-fs (loop0): Remounting filesystem read-only [ 160.280150][ T9553] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 160.292792][ T9392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.306763][ T9553] EXT4-fs (loop0): 1 orphan inode deleted [ 160.313136][ T9553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.346983][ T9564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.401094][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.483881][ T9580] syz_tun: entered allmulticast mode [ 160.502658][ T9580] syz_tun: left allmulticast mode [ 160.536695][ T9589] netlink: 'syz.0.1850': attribute type 13 has an invalid length. [ 160.540200][ T9392] veth0_vlan: entered promiscuous mode [ 160.555357][ T9589] gretap0: refused to change device tx_queue_len [ 160.562582][ T9589] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 160.585154][ T9392] veth1_vlan: entered promiscuous mode [ 160.613643][ T9392] veth0_macvtap: entered promiscuous mode [ 160.623144][ T9392] veth1_macvtap: entered promiscuous mode [ 160.660642][ T9392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.674841][ T9392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.686983][ T51] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.697581][ T51] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.711148][ T51] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.726489][ T51] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.743675][ T8143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.814196][ T9607] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1855'. [ 160.825106][ T9607] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1855'. [ 160.834962][ T9607] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1855'. [ 160.845210][ T9607] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1855'. [ 160.877901][ T9610] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=104 sclass=netlink_audit_socket pid=9610 comm=syz.6.1856 [ 160.894818][ T9610] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 160.904593][ T9610] EXT4-fs error (device loop6): ext4_get_journal_inode:5849: inode #3: comm syz.6.1856: iget: special inode unallocated [ 160.917726][ T9610] EXT4-fs (loop6): no journal found [ 160.923194][ T9610] EXT4-fs (loop6): can't get journal size [ 160.930338][ T9610] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 160.940216][ T9610] EXT4-fs error (device loop6): ext4_protect_reserved_inode:160: inode #3: comm syz.6.1856: iget: special inode unallocated [ 160.953626][ T9610] EXT4-fs (loop6): failed to initialize system zone (-117) [ 160.961417][ T9610] EXT4-fs (loop6): mount failed [ 160.963359][ T9615] netlink: 'syz.7.1817': attribute type 12 has an invalid length. [ 161.032800][ T9617] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 161.085670][ T9617] EXT4-fs (loop6): 1 truncate cleaned up [ 161.091897][ T9617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.121023][ T9624] set_capacity_and_notify: 4 callbacks suppressed [ 161.121040][ T9624] loop1: detected capacity change from 0 to 256 [ 161.606786][ T29] audit: type=1326 audit(1769484591.394:9277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9631 comm="syz.4.1862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec6ad5aeb9 code=0x0 [ 161.703017][ T9634] loop0: detected capacity change from 0 to 1024 [ 161.723942][ T9634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.900554][ T8143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.948685][ T29] audit: type=1326 audit(1769484591.787:9278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.1.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7bdbaeb9 code=0x7fc00000 [ 162.037302][ T9663] loop1: detected capacity change from 0 to 2048 [ 162.052066][ T9657] loop6: detected capacity change from 0 to 1024 [ 162.063634][ T9657] EXT4-fs: Ignoring removed orlov option [ 162.070315][ T9663] loop1: p1 < > p4 [ 162.071288][ T9657] EXT4-fs: inline encryption not supported [ 162.075079][ T9663] loop1: p4 size 8388608 extends beyond EOD, truncated [ 162.131271][ T9657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.203696][ T9657] netlink: 'syz.6.1871': attribute type 26 has an invalid length. [ 162.250937][ T8143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.410429][ T9685] loop4: detected capacity change from 0 to 512 [ 162.420049][ T9685] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.435815][ T9685] EXT4-fs (loop4): 1 truncate cleaned up [ 162.445570][ T9685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.474193][ T29] audit: type=1400 audit(1769484592.311:9279): avc: denied { read } for pid=9687 comm="syz.6.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 162.549825][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.639478][ T9693] loop0: detected capacity change from 0 to 2048 [ 162.695510][ T4536] loop0: p1 < > p4 [ 162.737462][ T4536] loop0: p4 size 8388608 extends beyond EOD, truncated [ 162.803570][ T9699] FAULT_INJECTION: forcing a failure. [ 162.803570][ T9699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.816862][ T9699] CPU: 1 UID: 0 PID: 9699 Comm: syz.7.1885 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.816900][ T9699] Tainted: [W]=WARN [ 162.816908][ T9699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.816953][ T9699] Call Trace: [ 162.816959][ T9699] [ 162.816967][ T9699] __dump_stack+0x1d/0x30 [ 162.817009][ T9699] dump_stack_lvl+0x95/0xd0 [ 162.817034][ T9699] dump_stack+0x15/0x1b [ 162.817058][ T9699] should_fail_ex+0x263/0x280 [ 162.817087][ T9699] should_fail+0xb/0x20 [ 162.817111][ T9699] should_fail_usercopy+0x1a/0x20 [ 162.817201][ T9699] _copy_from_user+0x1c/0xb0 [ 162.817232][ T9699] copy_from_bpfptr+0x5c/0x90 [ 162.817289][ T9699] bpf_prog_load+0x73a/0x1140 [ 162.817320][ T9699] ? security_bpf+0x2b/0x90 [ 162.817342][ T9699] __sys_bpf+0x469/0x7b0 [ 162.817373][ T9699] __x64_sys_bpf+0x41/0x50 [ 162.817433][ T9699] x64_sys_call+0x28e1/0x3000 [ 162.817456][ T9699] do_syscall_64+0xc0/0x2a0 [ 162.817491][ T9699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.817566][ T9699] RIP: 0033:0x7f8635e7aeb9 [ 162.817584][ T9699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.817603][ T9699] RSP: 002b:00007f86348d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.817627][ T9699] RAX: ffffffffffffffda RBX: 00007f86360f5fa0 RCX: 00007f8635e7aeb9 [ 162.817643][ T9699] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 162.817659][ T9699] RBP: 00007f86348d7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.817706][ T9699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.817721][ T9699] R13: 00007f86360f6038 R14: 00007f86360f5fa0 R15: 00007ffe33edaca8 [ 162.817744][ T9699] [ 163.112319][ T9693] loop0: p1 < > p4 [ 163.140133][ T9693] loop0: p4 size 8388608 extends beyond EOD, truncated [ 163.204218][ T9715] loop7: detected capacity change from 0 to 512 [ 163.211707][ T9715] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 163.228350][ T9715] EXT4-fs (loop7): 1 truncate cleaned up [ 163.232741][ T9718] loop1: detected capacity change from 0 to 512 [ 163.234741][ T9715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.273846][ T9718] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.283100][ T9718] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 163.309766][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 163.340494][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.350113][ T9718] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 163.359697][ T9718] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 163.367755][ T9718] System zones: 0-2, 18-18, 34-35 [ 163.373477][ T9718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.393890][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 163.441450][ T29] audit: type=1400 audit(1769484593.287:9280): avc: denied { rename } for pid=9717 comm="syz.1.1893" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.463913][ T29] audit: type=1400 audit(1769484593.287:9281): avc: denied { unlink } for pid=9717 comm="syz.1.1893" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.520464][ T9718] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.538006][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1892'. [ 163.945217][ T29] audit: type=1400 audit(1769484593.791:9282): avc: denied { getopt } for pid=9726 comm="syz.6.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.985955][ T9742] syzkaller0: entered promiscuous mode [ 163.991548][ T9742] syzkaller0: entered allmulticast mode [ 164.015615][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1903'. [ 164.093800][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.114434][ T9392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.147528][ T9746] geneve2: entered promiscuous mode [ 164.155500][ T9753] Cannot find add_set index 0 as target [ 164.177937][ T9753] loop7: detected capacity change from 0 to 512 [ 164.199107][ T9755] can0: slcan on ttyS3. [ 164.205464][ T9753] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1905: iget: bad extra_isize 90 (inode size 256) [ 164.226870][ T9753] EXT4-fs (loop7): Remounting filesystem read-only [ 164.234522][ T9753] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 164.245296][ T9753] EXT4-fs (loop7): 1 orphan inode deleted [ 164.251647][ T9753] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.327403][ T9765] loop6: detected capacity change from 0 to 512 [ 164.334946][ T9755] can0 (unregistered): slcan off ttyS3. [ 164.343637][ T9766] netlink: 'syz.1.1904': attribute type 12 has an invalid length. [ 164.371592][ T9765] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c028, mo2=0002] [ 164.388008][ T9392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.403293][ T9765] System zones: 1-12 [ 164.409232][ T9765] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1910: bg 0: block 288: padding at end of block bitmap is not set [ 164.427400][ T9765] EXT4-fs (loop6): Remounting filesystem read-only [ 164.429591][ T29] audit: type=1400 audit(1769484594.274:9283): avc: denied { setopt } for pid=9768 comm="syz.4.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.465934][ T9769] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.476224][ T9769] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.523055][ T9765] EXT4-fs (loop6): 1 truncate cleaned up [ 164.529296][ T9765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.621376][ T9769] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.631897][ T9769] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.703583][ T9769] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.714073][ T9769] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.719537][ T9781] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1914'. [ 164.741526][ T9781] sctp: [Deprecated]: syz.0.1914 (pid 9781) Use of int in maxseg socket option. [ 164.741526][ T9781] Use struct sctp_assoc_value instead [ 164.789199][ T9769] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.799659][ T9769] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.841801][ T9783] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1910'. [ 164.876425][ T9790] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.898430][ T31] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.906732][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.927860][ T9790] EXT4-fs (loop0): 1 truncate cleaned up [ 164.935761][ T31] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.944003][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.963622][ T9790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.999568][ T31] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.007852][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.016386][ T31] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.024708][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.242143][ T9805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1917'. [ 165.251213][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 165.260293][ T29] audit: type=1400 audit(1769484595.070:9284): avc: denied { setopt } for pid=9802 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 165.289725][ T8143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.401952][ T29] audit: type=1400 audit(1769484595.251:9285): avc: denied { map } for pid=9806 comm="syz.1.1922" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 165.475063][ T9810] syzkaller0: entered promiscuous mode [ 165.480565][ T9810] syzkaller0: entered allmulticast mode [ 165.555561][ T9808] netlink: 'syz.1.1922': attribute type 1 has an invalid length. [ 165.683916][ T9827] FAULT_INJECTION: forcing a failure. [ 165.683916][ T9827] name failslab, interval 1, probability 0, space 0, times 0 [ 165.696821][ T9827] CPU: 1 UID: 0 PID: 9827 Comm: syz.1.1929 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.696851][ T9827] Tainted: [W]=WARN [ 165.696857][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.696869][ T9827] Call Trace: [ 165.696875][ T9827] [ 165.696887][ T9827] __dump_stack+0x1d/0x30 [ 165.696957][ T9827] dump_stack_lvl+0x95/0xd0 [ 165.696980][ T9827] dump_stack+0x15/0x1b [ 165.696998][ T9827] should_fail_ex+0x263/0x280 [ 165.697057][ T9827] should_failslab+0x8c/0xb0 [ 165.697081][ T9827] kmem_cache_alloc_noprof+0x68/0x490 [ 165.697106][ T9827] ? radix_tree_node_alloc+0x8a/0x1f0 [ 165.697135][ T9827] radix_tree_node_alloc+0x8a/0x1f0 [ 165.697170][ T9827] idr_get_free+0x1fa/0x550 [ 165.697197][ T9827] idr_alloc_u32+0xf2/0x1a0 [ 165.697226][ T9827] tcf_idr_check_alloc+0x1ff/0x2e0 [ 165.697253][ T9827] tcf_pedit_init+0x1e8/0x9d0 [ 165.697425][ T9827] ? should_fail_ex+0xd9/0x280 [ 165.697454][ T9827] ? __pfx_tcf_pedit_init+0x10/0x10 [ 165.697557][ T9827] tcf_action_init_1+0x395/0x4d0 [ 165.697584][ T9827] tcf_action_init+0x29c/0x700 [ 165.697627][ T9827] tc_ctl_action+0x29b/0x830 [ 165.697743][ T9827] ? __pfx_tc_ctl_action+0x10/0x10 [ 165.697768][ T9827] rtnetlink_rcv_msg+0x6a7/0x720 [ 165.697792][ T9827] netlink_rcv_skb+0x123/0x220 [ 165.697821][ T9827] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 165.697919][ T9827] rtnetlink_rcv+0x1c/0x30 [ 165.697940][ T9827] netlink_unicast+0x5c0/0x690 [ 165.697969][ T9827] netlink_sendmsg+0x5c8/0x6f0 [ 165.698094][ T9827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.698121][ T9827] ____sys_sendmsg+0x5af/0x600 [ 165.698142][ T9827] ___sys_sendmsg+0x195/0x1e0 [ 165.698171][ T9827] __x64_sys_sendmsg+0xd4/0x160 [ 165.698196][ T9827] x64_sys_call+0x17ba/0x3000 [ 165.698248][ T9827] do_syscall_64+0xc0/0x2a0 [ 165.698277][ T9827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.698364][ T9827] RIP: 0033:0x7f8a7bdbaeb9 [ 165.698453][ T9827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.698472][ T9827] RSP: 002b:00007f8a7a817028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.698495][ T9827] RAX: ffffffffffffffda RBX: 00007f8a7c035fa0 RCX: 00007f8a7bdbaeb9 [ 165.698511][ T9827] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 165.698540][ T9827] RBP: 00007f8a7a817090 R08: 0000000000000000 R09: 0000000000000000 [ 165.698556][ T9827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.698570][ T9827] R13: 00007f8a7c036038 R14: 00007f8a7c035fa0 R15: 00007ffdecf12358 [ 165.698626][ T9827] [ 165.712249][ T9831] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 165.932261][ T9837] netlink: 'syz.4.1930': attribute type 12 has an invalid length. [ 166.031630][ T9831] EXT4-fs (loop6): 1 truncate cleaned up [ 166.037883][ T9831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.051742][ T9833] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1932: iget: bad extra_isize 90 (inode size 256) [ 166.066178][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.087898][ T9833] EXT4-fs (loop7): Remounting filesystem read-only [ 166.094801][ T9831] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 166.100496][ T9833] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 166.141166][ T9833] EXT4-fs (loop7): 1 orphan inode deleted [ 166.159978][ T9847] set_capacity_and_notify: 3 callbacks suppressed [ 166.159998][ T9847] loop0: detected capacity change from 0 to 1024 [ 166.176444][ T9849] __nla_validate_parse: 1 callbacks suppressed [ 166.176464][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1935'. [ 166.191760][ T9849] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1935'. [ 166.226803][ T9849] loop1: detected capacity change from 0 to 512 [ 166.239039][ T9833] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.268906][ T8143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.287738][ T9847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.302483][ T9849] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 12 [ 166.343437][ T9392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.519009][ T29] audit: type=1400 audit(1769484596.388:9286): avc: denied { append } for pid=9853 comm="syz.6.1936" name="pfkey" dev="proc" ino=4026533180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 166.687895][ T9871] loop7: detected capacity change from 0 to 1024 [ 166.700345][ T9871] EXT4-fs: Ignoring removed bh option [ 166.715718][ T9866] syzkaller0: entered promiscuous mode [ 166.721201][ T9866] syzkaller0: entered allmulticast mode [ 166.748918][ T9871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.806726][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.825369][ T9871] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.1944: Allocating blocks 497-513 which overlap fs metadata [ 166.849103][ T9871] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.1944: Allocating blocks 497-513 which overlap fs metadata [ 166.884304][ T9878] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.1944: Allocating blocks 497-513 which overlap fs metadata [ 166.931403][ T9870] EXT4-fs (loop7): pa ffff88810795dbd0: logic 48, phys. 177, len 21 [ 166.940209][ T9870] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 166.962802][ T9392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.999260][ T29] audit: type=1326 audit(1769484596.862:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8635e7aeb9 code=0x7ffc0000 [ 167.022808][ T29] audit: type=1326 audit(1769484596.862:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8635e7aeb9 code=0x7ffc0000 [ 167.046580][ T29] audit: type=1326 audit(1769484596.862:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8635e7aeb9 code=0x7ffc0000 [ 167.070284][ T29] audit: type=1326 audit(1769484596.862:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8635e7aeb9 code=0x7ffc0000 [ 167.094019][ T29] audit: type=1326 audit(1769484596.862:9291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8635e7aeb9 code=0x7ffc0000 [ 167.109711][ T9890] loop7: detected capacity change from 0 to 1024 [ 167.117687][ T29] audit: type=1326 audit(1769484596.862:9292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f8635e7aeb9 code=0x7ffc0000 [ 167.117719][ T29] audit: type=1326 audit(1769484596.862:9293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8635e7aeb9 code=0x7ffc0000 [ 167.179263][ T9890] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.190708][ T9883] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1946'. [ 167.214896][ T9883] bond1: option arp_interval: invalid value (18446744073709551615) [ 167.222885][ T9883] bond1: option arp_interval: allowed values 0 - 2147483647 [ 167.231673][ T9883] bond1 (unregistering): Released all slaves [ 167.335927][ T9898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1950'. [ 167.520277][ T9903] netlink: 'syz.1.1951': attribute type 12 has an invalid length. [ 167.638689][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1953'. [ 167.647792][ T9906] openvswitch: netlink: Flow actions attr not present in new flow. [ 167.719647][ T9912] loop4: detected capacity change from 0 to 1024 [ 167.726560][ T9912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.749378][ T9912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.769075][ T9912] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.856697][ T9919] syzkaller0: entered promiscuous mode [ 167.862317][ T9919] syzkaller0: entered allmulticast mode [ 167.897044][ T9924] loop4: detected capacity change from 0 to 512 [ 167.978834][ T9392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.995043][ T9924] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.015074][ T9924] EXT4-fs (loop4): 1 truncate cleaned up [ 168.052627][ T9927] loop6: detected capacity change from 0 to 512 [ 168.053086][ T9924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.063288][ T9927] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 168.096660][ T9930] loop7: detected capacity change from 0 to 1024 [ 168.105723][ T9930] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 168.115731][ T9930] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 168.122659][ T9927] EXT4-fs (loop6): failed to open journal device unknown-block(11,127) -6 [ 168.126726][ T9930] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 168.149709][ T9930] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 168.150095][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.161410][ T9930] EXT4-fs (loop7): invalid journal inode [ 168.182201][ T9930] EXT4-fs (loop7): can't get journal size [ 168.188245][ T9930] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 168.196333][ T9930] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #3: comm syz.7.1961: blocks 2-2 from inode overlap system zone [ 168.244954][ T9930] EXT4-fs (loop7): failed to initialize system zone (-117) [ 168.255604][ T9930] EXT4-fs (loop7): mount failed [ 168.471501][ T9965] netlink: 'syz.1.1976': attribute type 12 has an invalid length. [ 168.540984][ T9975] loop0: detected capacity change from 0 to 512 [ 168.548488][ T9975] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 168.574698][ T9975] EXT4-fs (loop0): 1 truncate cleaned up [ 168.581316][ T9975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.738040][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1983'. [ 168.769803][ T9988] loop7: detected capacity change from 0 to 128 [ 168.949870][ T9991] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.029667][ T9988] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.074418][ T9991] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 169.131048][ T9991] System zones: 0-1, 3-36 [ 169.137621][ T9988] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.154066][ T9991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.184514][ T9991] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 169.236132][T10004] netlink: 'syz.1.1988': attribute type 12 has an invalid length. [ 169.244597][ T9991] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 169.297529][ T9991] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 169.336170][T10009] EXT4-fs: Ignoring removed orlov option [ 169.341986][T10009] EXT4-fs: inline encryption not supported [ 169.354241][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.363584][T10009] EXT4-fs (loop6): bad geometry: block count 3585 exceeds size of device (512 blocks) [ 169.402188][ T9392] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.426670][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.480589][T10014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c028, mo2=0002] [ 169.507953][T10014] System zones: 1-12 [ 169.545795][ T3002] ================================================================== [ 169.553906][ T3002] BUG: KCSAN: data-race in set_nlink / set_nlink [ 169.560413][ T3002] [ 169.562998][ T3002] read to 0xffff8881078ffac0 of 4 bytes by task 4536 on cpu 1: [ 169.570930][ T3002] set_nlink+0x29/0xb0 [ 169.575072][ T3002] kernfs_iop_permission+0x1e2/0x220 [ 169.580528][ T3002] inode_permission+0x2de/0x3c0 [ 169.585547][ T3002] link_path_walk+0x779/0xe30 [ 169.590305][ T3002] path_openat+0x1bf/0x23c0 [ 169.594812][ T3002] do_filp_open+0x15d/0x280 [ 169.599328][ T3002] do_sys_openat2+0xa6/0x150 [ 169.604092][ T3002] __x64_sys_openat+0xf2/0x120 [ 169.609123][ T3002] x64_sys_call+0x2b07/0x3000 [ 169.613965][ T3002] do_syscall_64+0xc0/0x2a0 [ 169.618462][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.624347][ T3002] [ 169.626654][ T3002] write to 0xffff8881078ffac0 of 4 bytes by task 3002 on cpu 0: [ 169.634267][ T3002] set_nlink+0x99/0xb0 [ 169.638350][ T3002] kernfs_iop_permission+0x1e2/0x220 [ 169.643626][ T3002] inode_permission+0x2de/0x3c0 [ 169.648472][ T3002] link_path_walk+0x779/0xe30 [ 169.653136][ T3002] path_lookupat+0x8c/0x500 [ 169.657632][ T3002] filename_lookup+0x190/0x390 [ 169.662387][ T3002] vfs_statx+0x96/0x170 [ 169.666531][ T3002] vfs_fstatat+0x115/0x170 [ 169.670939][ T3002] __se_sys_newfstatat+0x55/0x3e0 [ 169.675958][ T3002] __x64_sys_newfstatat+0x55/0x70 [ 169.680974][ T3002] x64_sys_call+0x111f/0x3000 [ 169.685743][ T3002] do_syscall_64+0xc0/0x2a0 [ 169.690266][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.696246][ T3002] [ 169.698568][ T3002] value changed: 0x00000008 -> 0x00000009 [ 169.704358][ T3002] [ 169.706663][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 169.712798][ T3002] CPU: 0 UID: 0 PID: 3002 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 169.723662][ T3002] Tainted: [W]=WARN [ 169.727448][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.737497][ T3002] ================================================================== [ 169.755940][T10014] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1993: bg 0: block 288: padding at end of block bitmap is not set [ 169.776122][T10014] EXT4-fs (loop0): Remounting filesystem read-only [ 169.794710][T10014] EXT4-fs (loop0): 1 truncate cleaned up [ 169.808069][T10014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.962694][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1993'. [ 170.112344][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.