last executing test programs: 6m47.530698385s ago: executing program 32 (id=490): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80141, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x0, 0x5, 0x10}, 0x0, &(0x7f0000000240)={0x6, 0xc, 0x5, 0x7ffffffffffffffe, 0x3, 0x80000000000000, 0x800, 0x20020}, 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x508, 0x98, 0x3a0, 0x138, 0x138, 0x98, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010101, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'batadv0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x4, 0x400, 0xf8c, {0x7}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) 6m39.150723313s ago: executing program 33 (id=382): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000140)) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000001c0)={'erspan0\x00', &(0x7f00000002c0)={'tunl0\x00', r6, 0x860e, 0x40, 0x4, 0x800, {{0x33, 0x4, 0x1, 0x2, 0xcc, 0x64, 0x0, 0xa, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0xa1, 0x3, 0x0, [{@broadcast, 0x15}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@local, 0xfffffffc}, {@rand_addr=0x64010102, 0x7f}, {@loopback, 0xfffffff7}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xba, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x4}, {@multicast1, 0x38}, {@private=0xa010101, 0x101}, {@private=0xa010102, 0x9}, {@remote, 0x6}]}, @end, @timestamp={0x44, 0x8, 0xc4, 0x0, 0x0, [0x3ff]}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@remote, 0x80000000}, {@multicast2, 0x3}, {@local}, {@private=0xa010100, 0x8}, {@empty, 0x4}, {@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xffffff7f}, {@loopback, 0x7fff}]}, @end]}}}}}) (async) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000280), 0x4) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@mpls_getnetconf={0x64, 0x52, 0x400, 0x70bd2d, 0x5dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r7}, @NETCONFA_IFINDEX={0x8, 0x1, r7}, @NETCONFA_IFINDEX={0x8, 0x1, r6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @NETCONFA_IFINDEX={0x8, 0x1, r6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffff3}, @NETCONFA_IFINDEX={0x8, 0x1, r6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x400}]}, 0x64}}, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000400)={0x0, 0xfffffffffffffffa, 0x1, [0x4, 0x80000001, 0xc00000000, 0x3, 0x9bb], [0x8, 0x5, 0x400, 0x3, 0x4, 0x8, 0x1, 0x5, 0x8, 0x1, 0x8, 0x0, 0x1000, 0xc, 0x6, 0x400, 0x4d0, 0x7f, 0x4, 0x401, 0x8, 0x8, 0x0, 0x6f41812b, 0x5, 0x3, 0x6, 0x7, 0x9, 0xffffffff, 0x3, 0x1880, 0x8001, 0xe59b, 0x918b, 0x10, 0x6, 0x9, 0x10001, 0x1, 0x8554, 0xffffffffffff0001, 0xff, 0x7, 0x8001, 0x8, 0x8000000000000000, 0xf8f, 0x40, 0x7fffffff, 0x6, 0x10001, 0xfffffffffffff687, 0x7, 0x25, 0x10001, 0x3, 0x5, 0x1956, 0x1, 0x101, 0x2, 0xfffffffffffffffd, 0x2, 0x3, 0x3, 0x4080000000, 0x3013, 0x6, 0x80000001, 0x800, 0x2, 0x7, 0x8a4, 0x3, 0x6e4, 0x1, 0x0, 0x90e, 0xfffffffffffffff8, 0x6, 0xfffffffffffffffe, 0x3ff, 0x7, 0x3, 0x8, 0x2, 0x4, 0x85d, 0x6, 0x748f, 0x3, 0x4, 0x3, 0xd, 0x9, 0x7, 0x7fffffff, 0x2, 0x5, 0x3, 0x9, 0x7cc800, 0x8, 0x5, 0xc339, 0xe1, 0x7, 0x7, 0x2, 0x4, 0x3, 0x100000000, 0x2, 0x6000000000, 0x5, 0x7, 0x7, 0xfffffffffffffffa, 0xe6, 0x27]}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000c40)={0x0, 0x2, {0x0, @struct={0x9, 0x6}, r8, 0x9, 0x800, 0x8000000000000000, 0x5, 0x2, 0x414, @struct={0x4, 0xa3}, 0x3, 0x1, [0xaf85, 0x3, 0x3, 0xb, 0x100000000]}, {0xc62, @struct={0xa, 0x5}, r9, 0x9, 0x80, 0x1, 0x8, 0x100, 0x4, @usage=0x5, 0x3, 0x100, [0x9, 0x2, 0xfffffffffffffff9, 0x8, 0x50, 0x5]}, {0x8000000000000001, @struct={0x8, 0x2}, 0x0, 0xffffffffffffff7f, 0x80, 0x6, 0x30cb, 0x7, 0x480, @struct={0x3ff, 0xd003}, 0x800, 0x8, [0x5, 0x0, 0xb, 0x4, 0x2, 0x3]}, {0x3, 0x15d, 0x2}}) (async) write$P9_RVERSION(r1, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x65, 0x8, '9P2000.L'}, 0x15) 6m17.380587371s ago: executing program 34 (id=1042): sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @short}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, 0xffffffffffffffff, 0x20}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2046) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@delchain={0x11c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xe8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc8, 0x1, [@m_simple={0xc4, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0x7d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5m47.915960067s ago: executing program 35 (id=1614): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20008814) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x428, 0x2e0, 0x2e0, 0x428, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x338, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffffff, 0xff, 0xff000000, 0xff000000], 0x4e21, 0x4e22, 0x4e20, 0x4e24, 0xfffffffd, 0x3, 0x4, 0x948, 0xfffffffb}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200025bd7000fbdbdf2520000000080003000473abb9539d5c8b7fe36515a5b64612022b62aee2d914df0fa75c37e700cfdd1ffc5591f275337acc18d6d00abb74fccbc7e44648b274da5588629262bbe7150d38c3ecde7fb86783d959be91a0eb9aaaccf9ebb6b2910cb22421b6c991120079f837cfbf4ca0fc48da6bfb2867df7f9430bf16bcb81cd3c9714932d191b4ef3172417c3822e8e2e3f30a64048f406cdd054f2aa8127466c879dbf62e32acc20657e855e78d8f414bad2ae4978cee8628832c815bea000c44c4a020800471c36a112555a2a9e638c1405de43dc06a3bbdc54b0957f86054b6b5eedaba1fb7", @ANYRES32=r7, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x0, 0x40, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000280), 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r12) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r13, 0x30a9f29ecc337b1d, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r13, @ANYRES16=r11, @ANYRESOCT=r11, @ANYRES32, @ANYBLOB="4a000e001c"], 0xa0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x28, r11, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x70}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r14, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r15, 0x0) setsockopt$inet6_opts(r15, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x98) 5m41.065187416s ago: executing program 36 (id=1726): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x3f00000000000000) 5m3.459505435s ago: executing program 37 (id=2524): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async, rerun: 32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) (async, rerun: 64) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) (async, rerun: 64) r2 = pidfd_getfd(r1, r1, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 4m57.896098978s ago: executing program 38 (id=2573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210b000000000000000067000000080003", @ANYRES32=0x0, @ANYBLOB="0c002b01"], 0x28}}, 0x0) 4m57.355938569s ago: executing program 39 (id=2575): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a000018228f0000000500", @ANYRESDEC=r2], 0x50}, 0x1, 0xba01}, 0x20004000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0xa) bind$bt_sco(r4, &(0x7f0000000400)={0x1f, @none}, 0x8) listen(r4, 0xc) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 4m37.970842584s ago: executing program 40 (id=2836): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000100)={'bond0\x00'}) setsockopt$inet_opts(r0, 0x0, 0x1b, &(0x7f0000000140)="441f08035d57117218a25da3134bbbaa9cca83ef2876edfa4f9b40aaa5fd73decbaffdaa51a358f0fee2d7a9b009d0eccf8af3722109d1592f1cb40a407d128cca88344bec2f956e1070e0a1c9d635bf3a971213597185b1a2b72cb7e87beb4c55f91db608ee435798ace25476f1f314b1469972a6c0cac4be493cfa9f1479725824080077b2e423ecc2a82ee32d81b1052f394e", 0x94) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) 4m30.646008308s ago: executing program 41 (id=2926): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004045}, 0x41084) io_setup(0x4082, &(0x7f0000000380)) syz_io_uring_setup(0x100293e, &(0x7f00000000c0)={0x0, 0x7fba, 0x10, 0x0, 0x3b3}, &(0x7f0000000080), &(0x7f00000014c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10004, 0x10101, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe459d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e22, @loopback}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) ptrace$getregset(0x4205, r7, 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x18) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x40000000, 0xfffbfffd, 0xa, 0x4f, "0c4192efcc000700000000fcffffff00", 0x1, 0xfffffff7}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000080)=0xa) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000d0429bd0a000000000076000000", @ANYRES32=0x0, @ANYBLOB="00000000195000002c0012800c0001006d6163766c616e001c000280080003000000040006000200010000000800010004"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) 4m26.405905634s ago: executing program 42 (id=2798): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x7) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 3m56.733016686s ago: executing program 43 (id=3575): mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000880)={{}, "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"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x1, 0x0, 0xb9ff, 0xa, '\x00\x00\x00\x00\x00c\t\x00'}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) ppoll(&(0x7f0000000380)=[{r0, 0x5102}], 0x1, 0x0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 3m37.0090379s ago: executing program 44 (id=3953): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000056c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000bb080001400000000a08000240000040010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="e61b15e39525e179541c75e326fa5ab556d28989402aec6d93ba67fcaef57b6df20fda62888bf1913c55b2b95ca9ab64e54767b24abfac02e8ea87f393ddea3adfd1db2a4ab360bd002dd995523f9baa4c1057180bb8690f979850224a5c682731e8a1d9dd6f7325416c93d9ec2f19af882b34c5e4c6a421998181749f697f452a9af545a79ec7c8a2d5e052c71e4607c415e4f14469ea1ab8889a5e76998f3630dcbd42a2a63e65917374993f8e87912379784039668185dc067f6d22d62a1632c30cb7f8feac9c7e16db6be98fb213f8a3b19ddd26a26f4c414b534b78ffc6289abea45448103e6d7cb76f2490f5dbc8", @ANYRES64=0x0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000000)='9', 0x1}], 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) sync() 3m29.710821674s ago: executing program 45 (id=4053): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xc0000001, 0x3) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4e04, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") shmget(0x1, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x4d) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0x2) 2m33.459115827s ago: executing program 46 (id=4898): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="48004b606a5d505830e3056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="48004b606a5d505830e3056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) close(r1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) 2m17.401334679s ago: executing program 6 (id=5477): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000840) r0 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) r1 = syz_clone(0xc020500, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) tkill(r1, 0x12) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a03000000004e2200000100ffff00"/56, @ANYRES32=0x0, @ANYBLOB="050000000300000008000000000000001931a04911000000"], 0x54}}, 0x20004010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x40, "207d3d00000055c51b08700c1e0adb4f000000001200070000000900"}) 2m17.399677569s ago: executing program 6 (id=5478): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1], 0x21c}, 0x1, 0x0, 0x0, 0x44001}, 0x8000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x2000, 0x0, 0x6398b, 0x3424f}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d848}, 0x8080) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x48, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x841) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@ipv6_newroute={0x44, 0x18, 0xa01, 0x70bd2c, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xc8, 0x0, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x8, 0x8}}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x100}]}, 0x44}, 0x1, 0x2}, 0x10) fchmod(r0, 0x106) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x80c402, &(0x7f0000000180)={[{@noblock_validity}, {@inlinecrypt}, {@init_itable}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@oldalloc}, {@jqfmt_vfsv0}, {@noload}, {@errors_continue}, {@noload}], [], 0x2c}, 0x81, 0x475, &(0x7f0000000900)="$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") chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) 2m16.967670644s ago: executing program 6 (id=5487): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x8}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) socket(0x40000000015, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x8) io_uring_setup(0x2f04, &(0x7f0000000b80)={0x0, 0xa868, 0x40, 0x20001, 0x2d6}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 2m16.785436584s ago: executing program 6 (id=5491): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) setresuid(0x0, r1, r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000040)={r5, 0xb5e, 0x5}, &(0x7f0000000140)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x4, 0x6, 0xb}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071113200000000008510"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)=@caif=@dgm, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000000080)=""/32, 0x20}], 0x3, &(0x7f0000000380)=""/4096, 0x1000}, 0x10045) setuid(r1) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) 2m16.720273179s ago: executing program 6 (id=5494): bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) socket$netlink(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000"], 0x0, 0x56}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2d, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 2m15.881161897s ago: executing program 6 (id=5511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "7df0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$packet(0x11, 0x2, 0x300) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=@md5={0x1, "2c37228ee50adbc860a5036167f9b2dd"}, 0x11, 0x1) (async) prlimit64(0x0, 0x7, &(0x7f0000000140)={0xb, 0x8000000000000001}, 0x0) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x2000) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x2d, 0x9, 0x0, 0x7f11b2d5, 0x8, 0x2, 0xd2d2, 0x1, 0x6, 0x0, 0x91, 0xffffffff, 0xb83, 0x0, 0x0, 0x8000, 0x0, 0x6, 0xd398, 0x0, 0x8, 0xc}}) 2m15.880662707s ago: executing program 47 (id=5511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "7df0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$packet(0x11, 0x2, 0x300) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=@md5={0x1, "2c37228ee50adbc860a5036167f9b2dd"}, 0x11, 0x1) (async) prlimit64(0x0, 0x7, &(0x7f0000000140)={0xb, 0x8000000000000001}, 0x0) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x2000) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x2d, 0x9, 0x0, 0x7f11b2d5, 0x8, 0x2, 0xd2d2, 0x1, 0x6, 0x0, 0x91, 0xffffffff, 0xb83, 0x0, 0x0, 0x8000, 0x0, 0x6, 0xd398, 0x0, 0x8, 0xc}}) 1m3.352674505s ago: executing program 5 (id=6834): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000040)) unshare(0x68041100) 1m3.245330791s ago: executing program 5 (id=6835): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fcntl$setlease(r1, 0x400, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) 1m2.824457506s ago: executing program 5 (id=6839): bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) socket$netlink(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, 0x0, 0x0) socket(0x2d, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff"], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 1m2.169224183s ago: executing program 5 (id=6858): quotactl$Q_QUOTAON(0xffffffff80000101, 0x0, 0x0, 0x0) syz_emit_ethernet(0xd5, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd604dd308009f0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2dd7f37896fafd4a8623daafcbe4338d8cf2dc9ccd87985e77174a64d09d5f677bf9395b1095", @ANYRES32], 0xff, 0x2f2, &(0x7f0000000980)="$eJzs3M9LG2kcx/Gvml9GNDksu+wuy37ZveyyMGj2vhAWZZcGWtSU2kJh1EkbMk0kEywpRe2p19I/ogfxVm9C20OvXnrrqZfePLTQlkp/TclkolETf9BOtOb9As3jPM/X50lmHD4z4GxcuHOtkHOMnFmR3t6w9IosyaZIstYSqda+9YhITOp6JCLNluTPgVdPf5mYungmncmMjquOpSf/Tqnq0K8Prt9c+e1RZeD86tBaVNaTlzdepp6vf7/+48anyat5R/OOFksVNXW69KwSmbYtnc07BUP1nOuajqX54uMpETXD06VSxaz15+zS3FxVzeLsYHyubDmOmsWqFqyqSkikXFXzipkvqmEYOhgXHCS6PD5upr1m7MjFMwEsCF/svz0HfrmcNvtEpH/P2Oxyp1YFAABOjh35P6a787+nx3+tbfnoum5zvZf/39wXOVT+X4u0yf9+vm/kf9uq53/HKu/ob5//KyWt1PJ/iPx/BNnt/I9Tq5b/4/7fr+fWpZVhr0H+BwAAAAAAAAAAAAAAAAAAAADgW7DpugnXdRON18ZX1P+X8MbPx71OBIP9390m1G+oxkTs2/PZ+ayIHa5v3NrvlgxLQj54x4Ov3h77PzM6rJ6kPLQX/frF+WyfV5jOSV5ssWREEpJsXT9Sr9ed9WGJN9enJCHfta5PtayPyB+/N9UbkpAnM1ISW2a943q7fmFE9d+zmV31/d44AAAAAABOA0O3tLx+N4x2/fX6dE7Eu74++P7AruvrkPwUOt73DgAAAABAt3CqNwqmbVvlTjVe+7cHAp+r9u6CmqJx46Jg9u8/eOGvDn+8J6qRaNrSeIh0x5cRap40urXjApnrh7v33n69X/jP6s/vW3W968hHd4iTRziYcxIAAACAYGyH/vZj3BedXBEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN0nuKeI9fkz7PdkAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKC7fA4AAP//GhIltQ==") open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) rename(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xfff}) syz_open_procfs$pagemap(r0, &(0x7f0000000000)) mprotect(&(0x7f000080c000/0x4000)=nil, 0x4000, 0x0) 1m1.865062541s ago: executing program 5 (id=6863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x7, 0x1, '^-\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x44) (fail_nth: 1) 1m1.452713205s ago: executing program 5 (id=6871): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/softnet_stat\x00') preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000001600)=""/239, 0xef}], 0x1, 0x87, 0x101, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_io_uring_setup(0x1e7f, &(0x7f0000000540)={0x0, 0xac24, 0x10000, 0x1, 0xb}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x3516, 0xc2e2, 0x48, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000002400)={0x9a5, 0xd12, 0x0, 0x5e5, 0x5f, 0xfffffff8, 0x6, 0xa909, 0x0}, &(0x7f0000002440)=0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000002480)={0x0, 0x71b}, &(0x7f00000024c0)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000000)=@in6={0xa, 0x4e25, 0x8, @mcast2, 0x7}, 0x1c, &(0x7f0000002380)=[{&(0x7f0000000040)="6be05597ec9efa233c7642e9f47b9c0670a80fb8a0a952de52658aaa48eb2f5e21af78751e3e6df8ca313bb17c4033a97965cde9452af989e321958b434ed9fa8d49e3cedf659695fb134ba4991be7dd96e314e06939b367481f1a86ec978cc0076968fb06", 0x65}, {&(0x7f00000000c0)="d629a130131b88dc3f11080a7f0298119a57347ccc5dd8bf8f7c1db86071a3f50e44ad2091ea29c0d3e13bec2c99fd1cd809a1beae4ff5dcf3d8058abf6a5579", 0x40}, {&(0x7f0000003680)="a9e84edbea8a3bf0229894e67bd1a29ac40abcddec99db194f8bc3385662d70dfb94900070b8dd9e3a480f0cc9d46cdca32fbd6d66d6a8d6449a655da65a4a5970dd768ac8b17564ad6a7479d1b458be514fdc63ccdf5ee5c3863a03f667d2c9a1f778a303be0a147a0057c480b582b4b454e0efa739ac12c3154a91181fa2fd9c85ce5dfc17f93ccfb38341959997d7b2d4cdf54ca3de79567884d3c474fc67adb2448360e067d11410b0144d08beb4c9b30ffea6c8aa8fe7542928d1a840ef5585fcd432e6d72e0e940feab5b227395e8dee9dc28fdd9ddaf93fd50d82be6adb7135ad3bbd88746c29f727e2e84912e75cb08f61a6aaa4a0bf00908c53ddcc86ab887662e75c9b7916b3c96b397ff35cca3f76944b87cf7649a21092f892906618c3f02fdb7cf8c3efdfd513ff95e6dc1cfed874ef97731ce9c29d94a4c54c5e53c8b285252f73fa8b4e310784a4247f2bfd44a05c51cb32f2040803f3a1b8ae7f554e17bf92ea4dde1c70b095a5c71797d99ad2967e4057ca0e602561d1793a80366e4c75bd70f84bfeeb2266c402d949bb316ff8355d40dbbaa1eb374a34af8054624ae62d9dd0853f0190af7d57bf19e3a9ef4035febeb20bd351c34aa7a94450156e4fd7633091a6077a3733eb3841b45af5e15f4c4c4c0108b4e6edd8b69fc19816285dc6e205f3c9b82e174aad294b303a84a15754d2c08d23f633eeab02438e2544bb8a0dda7368d8ac6e63b81d3748c5cc5058a25aa4f49f94dbaf0778531cb5a653914e78e1b4abe92d0f5cc4f1837facf835583592d4e357adb678c746bfab562b84a0b6e7df759e4583faae49a5a55e2bba3264e1c8bb120c4e0cce06e8cedc4c7464c7d87fd9a68e66c26a5d42e7f3d8e175111673d388a2a15ba7984953b035b98866d7d835923e75a8f7ed9c45f44b020b5da8a4466cbf35df50d383e2e55de2c7b5548b5544f59c848be42141a8ccf1230b89356863781e4e37bde668fa55b0fe15768b88d378fffb8a33f74e1b629b787a22be271d34d071069fb172ee1d2effcf8d96a14cbe9fac84950d3cf5a1b33f66d8b73eb596c5fdf2adab10a256b56804e70d95e1aafca1ba00ea56cfd4a2df37034411199cc4e8b4f2692e9cfa5eecb1445aa6c7ce3a3df61515ab92432d8b8e4dee366a54088192712c410821655e505c75bc2d6994122857a76555facb43a0467433526acb2e8225ac8c02f9a4d0e62e4c023a0569184c447e3355abc3bd06d86a786c36f57e865a8c1d63eb9cd154e62972696e7fbe5a7f0c38ea2352a34b046b7cfade9cc870a972c27468468d598faf29ea913f61dd9473df34b18fd5ccbd587ff7fca31bdadafce1d3921acf407b39ca0e2a8fb628d2907de63aac7b0d769ced594cb27f32f8806c0c8c5ae676654525ec1f0e192d370fa9a74b5d09ba7079cdec816e2001e6dff46a9372397e686967bb0c55dfe09c9dec46a0156873d738d1e0895340f1cf6f392d320434853e7e7b4405d4059c0fe84b8de946aaedbaf941949f85d9fe8e2c3e085926337e58061d4db40231ccc2acb1e35f76381fde806bf01b149756b67cec20e007a6b6081f20a2b622e966cbea78dc5b9cfe75dbcee0dde90ce16b68f94287e7f93c9fba8354a57b93b96f09da39169944d16329ca80201fe74704192b62636ec3088a2b7a0ac17ed84b11164fd0ed2f9aab6e224ac136389e0d67c5634f2ca81557ad4b97fe0e5dbe0e781cc1efbab5082be5b44fc26daf86374e712540b3a0c31352e5ab2f2bcef5a96ccf3e74b80e97b88e1babb2e521fe5eecb01af4078a13125e45c6bec38906fa04232888c05bb67dc2b4d1ccdfd95b8d9cc7049741f69f2bdffe5f0c4adf85dd74e91e8b9bc8ab7e5644669bb01577dba54e82d668bce91538845b45ff6d4c096e0cca21e0bc998d0c3696bbb313b2f4df78d34e0798c87a1f2c746216edbdcf98400c4cc1c3c03ea9fb1938bc669ed7dcd0f987723b474e42cf8195ae172703f681148c86b572878a8ef0eda9adfc252b9b4be35b7cf7952ed9e6f8eab5320f9eac7f815c2fb2644eff5ecd748dac5b70bda251ca91ff80d9bb2485c79f51ea5103f9b8faf0661b2f18c3033403db4569053a25db56865d120e26b830ec6ee0b75ba9106405430f18be61a50dc8966553df92b3dcff9cf1473e4496432482dbf25f904fa5965fdfd0b6c5bdba67a4e0d40004fc1bdb2af7f9fc7edff76f8f835f2d44ebd2ed72aca17cecb859fc5eb8d6f4562b17f5af22e49c699746d9e052babe2ea413b4f82922c6c5a385b25248c76e544ef04e0035b452f517f5769d51c809f292907c6419ef1d013b5257fe54eb6a2eae9f087a3a7ec5f8457d27775e3e916c3be6c41b8771b8e535083c10163533f0259123bf1ce6ace8f0df90ab3ea2abdfc9e8d84d2e43d1b41673ae45d614ff4c89c61a99a06264d6696c6e1f0183977613265a357fad678f745ba79b016fd480bc534b4681a0f42c05d6b26d697fc8bd4b4f433f50be1f28ea86459dcbd4770ce26068fdf04d7a71dd8f47d8173472fae2bd0d7e270ece3a92c82323e613a87ba3af7fe277aa0a1392ff7acfe132eaa155afbdf8baee0d2b68b4d31a79751dfd96f0beb223070fab48beec8f7da6def5846df88b9601c4924cab17874ea6cb8715690e39afad3e3d904e4e74b81c1a552ea9ffb436d924e94c7015d1cd68587119d6c1906bd0b8cbc6427c2a23968f5a9514a6108f48e03ab26348337047a297bd9315032a444f89e3c22773b56c1189689a84435acd1db96482104a813d5f315c459fd97f39f426754c5f52549fbf42bb2755c70b4bd343e8105bc4d1cee5c9d2665a6422a2806486a6dc67226f52e320e2a7baf4b5d244dd3d491996d7773e68d8cc36127cb693c79f16167cede8e79a269accb6b457c46cd579fc0a27d21f7a641a3d318b5dcd99603db0d04283661ef57a10e1f884c53817c71920cb84ee9b0eaaae5ed61d26ee6ce9d7f6bedf2337bccb153881191ed201efd9fd5e5d399e94d2fecea51982f4f2b8df1eb4f9aa19c8460dd5a0f57c82279173f6940f7ae67d4e951415a9dbae092a7d76ae3c597615f29dba63c9b44aa53aebbaa7f5bc9f80e794823ce95c266bbd4492281e97eee9ab0bb24c28ebf3367de6a25a80c68192bd4a09fe53cf0bac497e9ed02dad3291f9f1ce972e6ac4c7156844e6303ba6d41672c8469e2b413cfcc5f2806ded430de5205d6820a8dce4e56dd45d5617fea8535f9f2abe0e55f3727d09bb689afd85be781e035b473f0542c1f646d5c034c86a6c81cd28060943ea784993ededb81bc67f139af8cbed9ae4d427e468de9c9ea2e1a056542c613a869b9add1fd0341caf9eda64acd09357ebb194420d2263887bea3e2307f7ad19d9070d705940f6ac13f90c9ce0ac4b17159ff2c6309c5a99aabeb8e0b4877cfcf673a6e036652aa4750883224011908224a4f394abd34935c715a4ca0e12733734b892989c7a2a970b7d9546ce36073df20beb5db03301fc225ab9f08ab93a42aa3502bcafae6f8047f3232ee79f40217d17e6f6424684f42265c28663f4ad40f239fed341c5504de4a5baa880508f89706d0d95182b8159101064acf2036a03589bdae6e7bfb182ecad2dbde42291653df4ba69edc5df9d5e3eb21329d1949e579661b68890e8898f75b7551110166408bb462e5dc0541380e92293ff7e72ca0206447ac788c043589796739a3269ab531d72121b87a80052c11a90f87370a96e689f7c29a849fe55319f95e774cd2715e42edf8fd4a411e945856a6a790c88c8e6e1762c4f91d4aa8bb63ca6ed9f4316163f2bcfd174d452d3dea1482f7d79591b62d2b8e38f144b0096bee9e11362103216efd23b0efc95da23aec9c228c01d10c0e508cafb470af8fbae6d0ce0cbb5a0ca1137952bbd165b09cd0996a96a9ef4c52350b85c7691dcc88b3bad9ae72cace0f490e04637e167e2a405a6bb4cce03952c2c06142c64c35c8d98e53ae8e9faf55aac69516fcdf6ab808df0cedae4dcc4e8172057d98f2cd5e07eed99a9079c7d91f12f65fffb58bb5680524d132afa3bb41ca1cd3933dd51423bdc635737d6649a91c63113a3f8c15482ef25db285dd8dbad190c677971c476d73779b26a65ae743d5e70b36ad6ffc89bf0b8b79f5e771ccd48ef6a90fde07e355814f05defca4954c8ed34b54ae20a68082726deb0f35efb03ee23732c388b71db86692bed5e70f51b6b0aff89239eb596fbed691ea27030c8e722f6a277035a15da3d600fd6f0826263a605c2d9b036e909d63f5c8100776139a1c69a7e4adf9a19ce0f928870f699ed248c35a7d79eaee4cf9fbf457d6eba7752b576aeb0da0de4ae57ba6146602d0237871eb4e646d227e41decb7a4091cea9963f1249320cd114cf2cbd3062f9b15793f51b338d52b2e8be20570be57427c49a4b6013ca60fdcbd80378f54df9dfbde4998894346a6e0bcf312bc4b5943491dc0d0b6a577135563cfe3c6c6a18db66ba52c85ee486cd6d148cc1b370525e70028222b10d9b255c072e68dd5dd215c6f53b290dffda82216f7a16992d2140c45cb4cbd7d3cd2b37b4351c30fe6a30441e48ebc30fee185f5d2ca6a87183e19c13c9f1f0a1382bd10d198fd3244d4dad1677b0ce27d679da2244185033f13360d32bcff809ed62c1fed7e8751d2eb368b75a53cc6795d1372ea7264405486ae382523f491b9b210f501b6af17b87db70d2cd824777302cd01dd85e8feee3a35da00f46dbe2e2ac938b041b7ef23be8b11a75608ddeee66f135b38c3fa009e9e795db1865b06e3625babc01664bc5af3ca5fa1a6252128808ecab6e86d68b5abb216136c51439545ee3a4094cbdde7f86646977b0c03dce115dd6dc55d0d666a24e358e478ac6326c57fbaae9aa977aa5a8f4ca5f5ccbc60005aec5c3bfa580327b03e8ca03f6d62aedcd81c2d7028f30a7eb3a90594677793f05a803ea7e589f283973c67bafbcb395d6f49b5ca7b333f6bce47f9423a9158fa91ee8bdacc2c47ec5814c76888c5fc0bd0e1dc8254c10ea9b7ad30ada200c73e6048e2595cbf91aec249c1a927b49f7a13a426dfe0a09fadb0a4dc7f8c4d402d11950821cc75027bd00933030afcfddd3a07e8755073d6a19b73b79ec843984742c928e6bdacb09edcfee07b9dcb3eb31a7e4068bb16f02fd45f373513c710b365215dc4ea5d2b527e558d6bf45065acb66e8d77859f44160837007110a792e006139afa79fd72a6974bb3e22f0b6df8e3dd83b54fe3b4c99a59211fbb3fe346b64a0279477289a427d6e83b739c1df36ca9a7953ea120e881f4321852c3c67dbf9fe3cefddf5eb0aa38984d013e48dcbc76b844cdcd891ba5c34c406d508cab43fd1f92ecd7a3931e5f27f6eb5ca84f9cfb815eeed97212381691033a3b403f5d93f0c3265902f33874dd2f8f28f59908cad0fb987580ce4ee154d42be5c5711311d66bb3bb720729bd8659e62af0646f9799483502833437d08ad1d9371ceb5bc158bb6086ff4b46d73930fcdcb682b9a60a7c6c6ce4d6c1d08f992daec04069c996f9e572231d07f9d6aa38e1c8cecb048b6e205f6a5bd54b768092922eea94b45cc7ac5f9f3983c6662a3b4857d397f53659868ba4c8ae743a9a514266a5bcddde2253c9416550f560048117eba45c1a065c6d12d22a4b4df811bc0166d4dcda125d40f1b83455d237c75d40fd06118a7dcac76425f62bb73b742f171cb6a11a831faef2b1e2ff1e6fb06733cf475adda796df2781608fa04d1eaf7108afb69eeddff0f3ef73c21847d66340c022ece9a3ad961aca5302613f6cfce2eb321c534f56d4f1e84bcfbdf6a2f777ccb52301578556f47a8420d05e00"/4185, 0x1059}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000002100)="4843cb30c93dedc1c91a9b95c56705f6a473d0f050683a8cca75b6b7dc580f09a75d9ab1a76f36fe35e50dd87b6caec8bd92edf901deacf6af8f5feb10844a70b15abc7bbb8a315a9e7181d163dbb367e6c8eeee1065e646e5f35d61982ecbf15509d602487f07050fa8b89de072fe58fbafe500caaaf9cb3af50df5f365d6ff948a54af2a42f9661c79800935be2b5fec3af9b27894b3de81dd92975cc8c572fa408d988b37e797377585a71ff8005e67469f57f2e02b987f300df6238bedd5f78ce1e5b602fd2c90eb47cf31baeb0749b88a1e", 0xd4}, {&(0x7f0000000300)="1c03bd1f6d2c87831a96eb7c08e75bd2d81987ff09f2f5d12a3479b225fd88c2a2c9c3c7e830f8767d67d6473ad9fe4c29f3620fe94c3db43ba3c958ed2ffed9d7ae3289fe540b3670185a714a1d267d9f98558f0c8ec3dcf92655075c53f1604326dd409904d3", 0x67}, {&(0x7f00000005c0)="8233acb23aa1615533aaa7bfc9ae853389db96d1b0cdaf69776ece87f0ec4d0245d870faccc8460c76576dee46cf502dfbbfb5dcd0665f79f30f3dc73706a8091759aabae34ab20ff6edc6553bc33c2c8afe55c5c009f4136fa72d15258aefb4191e438c82b8ea78db7d18fc61ab6d3723231ca31e760a2f55bba3e3af8b6ca9a572aa8a10b40c3adfdd1934e04cc01659a9c1634a7eddb70b6f78be72a1585a5c7396fb893a2c34cd2fcd892f4cfe61a6ee1169863f6692721a7a40ce8ce1c194ff88cbe459d8e45877e05c698c03dfbcbb0c15a6eb4d193a881d4bbc63afb14fcc90b110874e75f144877cf26ae60000bb7d810f49fc4ea530601540270501abda122ef12c3d4bdb17b2b684c3b2e307da1a5a684fec706247184470907a9af7c5c4486ad0cf2ca54bb520fccd3792d4f0c6d1a200"/323, 0x143}], 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="3000000000000000840a00000100000000000b160e82cc66e39f4900000000000000800000070002000200007d2e93e9b1e1e68139984d67d5ade7a1dd", @ANYRES32=r6], 0x30, 0x11}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = creat(0x0, 0x40) linkat(0xffffffffffffffff, 0x0, r7, 0x0, 0x1200) 1m1.430450256s ago: executing program 48 (id=6871): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/softnet_stat\x00') preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000001600)=""/239, 0xef}], 0x1, 0x87, 0x101, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_io_uring_setup(0x1e7f, &(0x7f0000000540)={0x0, 0xac24, 0x10000, 0x1, 0xb}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x3516, 0xc2e2, 0x48, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000002400)={0x9a5, 0xd12, 0x0, 0x5e5, 0x5f, 0xfffffff8, 0x6, 0xa909, 0x0}, &(0x7f0000002440)=0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000002480)={0x0, 0x71b}, &(0x7f00000024c0)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000000)=@in6={0xa, 0x4e25, 0x8, @mcast2, 0x7}, 0x1c, &(0x7f0000002380)=[{&(0x7f0000000040)="6be05597ec9efa233c7642e9f47b9c0670a80fb8a0a952de52658aaa48eb2f5e21af78751e3e6df8ca313bb17c4033a97965cde9452af989e321958b434ed9fa8d49e3cedf659695fb134ba4991be7dd96e314e06939b367481f1a86ec978cc0076968fb06", 0x65}, {&(0x7f00000000c0)="d629a130131b88dc3f11080a7f0298119a57347ccc5dd8bf8f7c1db86071a3f50e44ad2091ea29c0d3e13bec2c99fd1cd809a1beae4ff5dcf3d8058abf6a5579", 0x40}, {&(0x7f0000003680)="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"/4185, 0x1059}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000002100)="4843cb30c93dedc1c91a9b95c56705f6a473d0f050683a8cca75b6b7dc580f09a75d9ab1a76f36fe35e50dd87b6caec8bd92edf901deacf6af8f5feb10844a70b15abc7bbb8a315a9e7181d163dbb367e6c8eeee1065e646e5f35d61982ecbf15509d602487f07050fa8b89de072fe58fbafe500caaaf9cb3af50df5f365d6ff948a54af2a42f9661c79800935be2b5fec3af9b27894b3de81dd92975cc8c572fa408d988b37e797377585a71ff8005e67469f57f2e02b987f300df6238bedd5f78ce1e5b602fd2c90eb47cf31baeb0749b88a1e", 0xd4}, {&(0x7f0000000300)="1c03bd1f6d2c87831a96eb7c08e75bd2d81987ff09f2f5d12a3479b225fd88c2a2c9c3c7e830f8767d67d6473ad9fe4c29f3620fe94c3db43ba3c958ed2ffed9d7ae3289fe540b3670185a714a1d267d9f98558f0c8ec3dcf92655075c53f1604326dd409904d3", 0x67}, {&(0x7f00000005c0)="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"/323, 0x143}], 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="3000000000000000840a00000100000000000b160e82cc66e39f4900000000000000800000070002000200007d2e93e9b1e1e68139984d67d5ade7a1dd", @ANYRES32=r6], 0x30, 0x11}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = creat(0x0, 0x40) linkat(0xffffffffffffffff, 0x0, r7, 0x0, 0x1200) 51.323185222s ago: executing program 8 (id=7045): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) setns(r1, 0x80) sched_setparam(r0, &(0x7f0000000000)=0x6) syz_clone(0x7002b180, 0x0, 0x0, 0x0, 0x0, 0x0) 51.279912805s ago: executing program 8 (id=7046): r0 = msgget$private(0x0, 0x80) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x1}, 0xec25, 0x80000000, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10011, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x2, 0x7}, 0x100, 0xa88, 0x8406, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x80000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1, 0x0}, 0x200400c0) gettimeofday(0x0, 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, 0x0, 0x4008885) pipe(0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_SET(r0, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4049880) socket$inet(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x20000080) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x57) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) 50.185388369s ago: executing program 8 (id=7057): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="020e0902440000002abd7000fcdbdf2502e713000300000025bd70004be5f600"], 0x20}}, 0x2000e014) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2000) 49.357913176s ago: executing program 8 (id=7073): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x3, 0x43d, &(0x7f0000000580)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x30000000, 0x0, 0x1) 48.9408136s ago: executing program 8 (id=7079): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x78) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a010400000000000000000200000124000480200001800b0001006c6f6f6b75700000100002800900010073797a31000000000900010073797a30000000000900020073797a3200000000140000001100010087250000000000000000000a"], 0x78}}, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000240)={{r0}, 0x5, &(0x7f0000000100)=[0x10000, 0x198, 0x9d, 0x0, 0x6], 0x9, 0x1, 0x1}) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54fd2) 48.578821882s ago: executing program 8 (id=7085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000040)={0x400, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r2 = socket(0xa, 0x3, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') writev(r3, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='0', 0x1}, {0x0, 0x2}], 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xff, 0xff, 0x0, 0x3, 0x3, 0x3e, 0x4, 0x3e, 0x40, 0x48, 0x7ff, 0x4800, 0x38, 0x4, 0x9, 0x486, 0xa983}, [{0x1, 0xf, 0x5, 0xfffffffffffffff1, 0xc, 0x3, 0x7, 0x3}, {0x3, 0x0, 0x4, 0x2, 0x8, 0x9, 0x3, 0xfffffffffffffea3}, {0x2, 0xfffffbbf, 0x7fff, 0x7ff, 0x6, 0x5, 0x3, 0x1}, {0x6474e551, 0x8a, 0x101, 0x44, 0x9, 0x8, 0x9, 0x4}], "bdbd51e9a0dca86d693959b853540ebfcb4da11b1a8fa4de53c8f4f5efbd12efcc32e66bb199f5b3a9d4cd2877c57cf342ec985f1303022ee5595abf348995b0bbf2ccecc07ffc3184eb9b2e4132d58fc0ee61ab6048484cf0a5ec4e4c7dcaacbb74faeaac8958f54f6332630e5d60f48108dbedea9b31528c026ade63dba6065c0c64fa9b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9a5) 48.531777615s ago: executing program 49 (id=7085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000040)={0x400, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r2 = socket(0xa, 0x3, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') writev(r3, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='0', 0x1}, {0x0, 0x2}], 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xff, 0xff, 0x0, 0x3, 0x3, 0x3e, 0x4, 0x3e, 0x40, 0x48, 0x7ff, 0x4800, 0x38, 0x4, 0x9, 0x486, 0xa983}, [{0x1, 0xf, 0x5, 0xfffffffffffffff1, 0xc, 0x3, 0x7, 0x3}, {0x3, 0x0, 0x4, 0x2, 0x8, 0x9, 0x3, 0xfffffffffffffea3}, {0x2, 0xfffffbbf, 0x7fff, 0x7ff, 0x6, 0x5, 0x3, 0x1}, {0x6474e551, 0x8a, 0x101, 0x44, 0x9, 0x8, 0x9, 0x4}], "bdbd51e9a0dca86d693959b853540ebfcb4da11b1a8fa4de53c8f4f5efbd12efcc32e66bb199f5b3a9d4cd2877c57cf342ec985f1303022ee5595abf348995b0bbf2ccecc07ffc3184eb9b2e4132d58fc0ee61ab6048484cf0a5ec4e4c7dcaacbb74faeaac8958f54f6332630e5d60f48108dbedea9b31528c026ade63dba6065c0c64fa9b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9a5) 36.600051387s ago: executing program 4 (id=7271): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x0) sendmmsg$unix(r3, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000340)="18", 0x1}], 0x1, 0x0, 0x0, 0x24004040}}], 0x1, 0x0) 36.505316042s ago: executing program 4 (id=7273): unshare(0x6a040000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bb5, 0x5, {0x6, 0x3c, 0x9, 0x1, 0x0, 0x48, 0x0, @in6=@mcast1, @in=@remote}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x0, 0xfff, {0x6, 0x32, 0x33, 0x79, 0x0, 0xffffffff, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}]}, 0x90}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, 0x0, &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) pread64(r0, &(0x7f0000000080)=""/141, 0x8d, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000553000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x80, &(0x7f0000000140)=0x3, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x4500}, 0x50) mprotect(&(0x7f00003aa000/0x4000)=nil, 0x4000, 0x3000003) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000000)=0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x160, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'gre0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x3c, 0x9, 0x0, 0x50}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "978888d6ee9e7a5e4bc76ccf4228733e737d402fc4a91c346e4f9a692f63"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0x0, 0xfffffefe], [0xffffff00, 0xff, 0xff, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x1, 0x2, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 35.975685883s ago: executing program 4 (id=7286): socket$nl_generic(0x10, 0x3, 0x10) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 35.931367686s ago: executing program 4 (id=7287): syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file1\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x3800000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f00004d7000/0x3000)=nil, 0x3000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x2000000000009237, 0x12) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x8, 0x0, 0xcb9, 0x5, 0x7c290e5a, 0xae8, 0x81, r3}, &(0x7f0000000180)=0x20) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r6, 0x0, 0x0, 0x14, 0x0) write(r4, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x5c3, 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) kcmp(r5, r7, 0x5, r1, r6) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x10120, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x8b00, 0x0) ioctl$KDSETLED(r8, 0x4b32, 0xf) 35.747564366s ago: executing program 4 (id=7291): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x161602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000400)=0xf) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8080) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 35.325357041s ago: executing program 4 (id=7299): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000500000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 35.325131651s ago: executing program 50 (id=7299): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000500000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 29.614371022s ago: executing program 2 (id=7386): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000020000000000000000000850000003600000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r4 = getpgrp(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r6, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000380)={r6, r0, 0x8}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex=r2, 0x9, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0]}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r2, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0xa, 0x0, &(0x7f0000000200)=[0x100000001, 0x48000, 0x7ff, 0xc, 0xc00000000000, 0x0, 0x889d, 0x1, 0x7, 0x8], 0x3}}, 0x30) syz_emit_ethernet(0xfed7, &(0x7f0000000140)=ANY=[], 0x0) 29.525315837s ago: executing program 2 (id=7388): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="610506800101060a01b0"], 0x10a) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20) 29.524973967s ago: executing program 2 (id=7389): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) ustat(0x7, &(0x7f0000000240)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r2, 0x7) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={r7, 0x9}, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x3f, 0x70bd2e, 0x25dfdbfd, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x9, 0x0, 0x1000, 0x3}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x70}}, 0x10) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000100)=[0x7f, 0xfffd], 0x2) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r10 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x1, r10}) 29.285601451s ago: executing program 2 (id=7392): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x64, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x56}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x100c0}, 0x40000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getrusage(0x1, &(0x7f00000011c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0) setreuid(0xee01, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0xf, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000003c0)=0x7f, 0x4) fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x1, 0x2, 0x31, 0x3}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r8, 0x8004745a, &(0x7f0000005280)) fcntl$lock(r5, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x25, 0x401}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) getsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000340), &(0x7f0000000380)=0x4) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280), 0x83, 0x4a7, &(0x7f0000001900)="$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") rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000001140)='./file0/file0\x00') 29.082171863s ago: executing program 2 (id=7395): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 28.089024541s ago: executing program 2 (id=7411): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000001c0)=""/5, 0x214000, 0x0, 0x0, 0x1}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10, 0x7d}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x38}}, 0x40000) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000001240)=""/4137, 0x1029}], 0x2}, 0x40012060) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 28.080469201s ago: executing program 51 (id=7411): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000001c0)=""/5, 0x214000, 0x0, 0x0, 0x1}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10, 0x7d}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x38}}, 0x40000) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000001240)=""/4137, 0x1029}], 0x2}, 0x40012060) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 2.688294014s ago: executing program 3 (id=7921): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200850, &(0x7f0000000000)={[{@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@commit={'commit', 0x3d, 0xbc30}}, {@test_dummy_encryption_v1}]}, 0x1, 0x596, &(0x7f0000000400)="$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") chdir(&(0x7f0000000340)='./file0\x00') pipe(&(0x7f0000000080)) syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) 2.385066032s ago: executing program 1 (id=7924): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) umount2(&(0x7f0000000040)='.\x00', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x4, 0x0, 0x4, {0xa, 0x4e24, 0xfff, @dev={0xfe, 0x80, '\x00', 0x2d}}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getrusage(0x0, &(0x7f00000011c0)) 1.793767436s ago: executing program 3 (id=7934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 1.688863842s ago: executing program 3 (id=7937): execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)={[&(0x7f0000000400)='noinit_itable']}, 0x400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpgrp(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000091137026de0f48000000008271a5b58de3d471e74fd38a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r3}, 0xc) r4 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r4, r0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048081}, 0x10) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r5, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x7000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x61, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r8, 0x6, &(0x7f0000002000)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r8, 0x7, &(0x7f0000000040)={0x0, 0x4, 0x100000000000003, 0x3}) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)={0x17c04, 0xffffffffffffffff, 0x7, 0x100000002, 0x7, 0xfff}) r9 = accept(r7, &(0x7f0000000100)=@ieee802154={0x24, @long}, &(0x7f0000000180)=0x80) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24000855) r10 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x1aca, 0x1f480, 0x0, 0x396}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x88080, &(0x7f00000006c0)={[{@delalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@journal_async_commit}, {@jqfmt_vfsold}, {@user_xattr}, {@nodioread_nolock}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@noinit_itable}, {@nojournal_checksum}]}, 0x1, 0x590, &(0x7f0000000b00)="$eJzs3d9rW2UfAPDvSX9s6/a+62CM9xWRwi6c6NK19ccEwXkpOhzo/QhtLKPpMpp0rHWw7cLdeCNDEHEgXnin4KWXw3/Av2KgwyGj6IU3lZOetNmSrG2WNZn5fOCU5znnJM/zzXmeJ8/pk5AABtZE+icX8f+I+DyJOBwRSXZsOLKDExvnrT24OptuSayvf/hHUjsvzdefq/64g1nmfxHx86cRL+eay62srC4USqXiUpafrC5emqysDMWFxcJ8cb54cXpm5vRrM9NvvvF612J96dxfX31w593Tnx1f+/KHe0duJXEmDmXHGuN4AtcbMxMxkb0mI3HmkROn9nehtD6S9LoCdGQo6+cjkY4Bh2Mo6/XAv9+1iFjv1NsdPxLoC0nn/R94ptXnAfV7+y7dBz8z7r+zcQPUHP/wxv9GYn/t3mhsLXnozii93x3vQvlpGT/9dvtWukX3/g8BsK3rNyLi1PBw8/iXZONf507t4JxHyzD+wd65k85/Xmk1/8ltzn+ixfznYIu+24nt+3/uXheKaSud/73Vcv67uWg1PpTl/lOb840kH18oFdOx7b8RcSJG9qX5qceUcXrt7nq7Y43zv3RLy6/PBbN63BveFw+99nOFauEJw950/0bEcy3nv8nm9U9aXP/09Ti3wzKOFW+/0O7Y9vE/XevfRrzY8vpvrWglW+uTqyeb1ycna+1hst4qmv1589gv7cpvjn809jL+9PqPPT7+8aRxvbay+zK+2f93sd2xh+KP9u2/Udr+R5OPaunRbN+VQrW6NBUxmrzfvH9667H1fHZ+Mnwj4sTxx49/rdr/gRZr2u3cPPr98zuKv7H9/7jz538S6fWf29X1333i7nuffL3r+Del1//VWupEtmcn49929RrruDUDAAAAAABA/8pFxKFIcvnNdC6Xz298vuNojOVK49kXVeei9l3Z8RjJ1Ve6Dzd8HmIq+zxsPT/9SH4mIo5ExBdDB2r5/Gy5NNfr4AEAAAAAAAAAAAAAAAAAAKBPHGzz/f/Ur0O9rh3w1PnJbxhc2/b/bvzSE9CXvP/D4BrtdQWAnvH+D4NL/4fB1dD/9/WyHsDe8/4Pg0v/h8Gl/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBXnTt7Nt3W1x5cnU3zc5dXlhfKl0/OFSsL+cXl2fxseelSfr5cni8V87Plxe2er1QuX5qajuUrk9VipTpZWVk9v1hevlg9f2GxMF88XxzZk6gAAAAAAAAAAAAAAAAAAADg2VJZWV0olErFJQmJjhLD/VGNjUTapBv2XKsnRntdsRaJ37/ri2q0S/R6ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf8EAAD//1oRL9w=") io_uring_enter(r10, 0x3ab, 0x6933, 0x17, 0x0, 0x0) 1.671526773s ago: executing program 9 (id=7938): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) 1.615434087s ago: executing program 9 (id=7939): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x2, 0x1, 0x4, 0x0, 0x1}, 0x20) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 1.571940479s ago: executing program 1 (id=7940): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}}, 0x24004000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, 0x0) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000080)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r5, 0x800, 0x20, 0x6, 0x8ccb}, &(0x7f0000000100)=0x18) 1.521355682s ago: executing program 1 (id=7942): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r1 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000305000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000008000002000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="0467"], 0x40}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.125330944s ago: executing program 9 (id=7945): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200850, &(0x7f0000000000)={[{@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@commit={'commit', 0x3d, 0xbc30}}, {@test_dummy_encryption_v1}]}, 0x1, 0x596, &(0x7f0000000400)="$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") chdir(&(0x7f0000000340)='./file0\x00') pipe(&(0x7f0000000080)) syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) 1.108371726s ago: executing program 1 (id=7947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 977.189194ms ago: executing program 1 (id=7949): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") io_submit(0x0, 0x0, 0x0) syz_clone(0xc0024500, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d80)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4d2, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x40000, 0x2}, {}, {0x0, 0x1}, 0x70bd29, 0x0, 0xa}}}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000013c0)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001fe880000000000000000000000000001fffd00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffff000000000000000032000000fc02000000000000000000000000000100000000000000000000000000000000ffffffffffffffff0000000000f5ffffffffffffff000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000006000000000000000600000000000000000000000a00000072000000000000000000000000000000dba60686d3312064e1b8cb1cdcee"], 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mknod$loop(0x0, 0x0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x101842, 0xee) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v2={0x2000000, [{0xe6f, 0x5}, {0x5, 0x1}]}, 0x14, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(&(0x7f0000000280)='./file1\x00', r4, 0xee00) readv(r3, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000100)={r8, 0x5}, 0x8) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x5) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) write$binfmt_format(r2, &(0x7f0000006240)='-1\x00', 0x3) write$selinux_create(r1, &(0x7f0000000000)=@objname={'system_u:object_r:default_context_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xa80, 0x20, './file1\x00'}, 0x54) pwritev2(r1, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f0ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x1e00}, 0x94) 962.423495ms ago: executing program 0 (id=7951): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x9}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000001480)="fb", 0x1}], 0x1, 0xe) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000002c0)=[{&(0x7f0000002440)='-', 0x1}], 0x1, 0x1) openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x400800, 0x2) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f0000000080)={0x0, 0x7764, 0x1, 'queue0\x00', 0x200}) close(r5) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$tun(r8, &(0x7f0000000380)={@void, @void, @mpls={[{0xff}], @ipv4=@generic={{0x5, 0x4, 0x2, 0x7, 0x17, 0x68, 0x0, 0xeb, 0x33, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, "d38e10"}}}, 0x1b) setsockopt$sock_int(r7, 0x1, 0x49, &(0x7f0000000140)=0xfffffffd, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x1, '\x00', 0x0, r4, 0x1, 0x1, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x10, 0x0) inotify_add_watch(r3, &(0x7f0000000280)='./file0\x00', 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf251d00000024002380050008000a00000006001800eeaa0000060004005a00000016001c000700000008000300", @ANYRES32=r11, @ANYBLOB="433cfec16ee5d7de080001004200c2000008000300", @ANYRES32=r12, @ANYBLOB="080001003a0000001c00238005001d0000000000050005000a00000005000f00030000000800010041000000080001002d0000000c0099000400000080000000"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 729.056028ms ago: executing program 3 (id=7953): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, 0x0) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000080)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r5, 0x800, 0x20, 0x6, 0x8ccb}, &(0x7f0000000100)=0x18) 622.070684ms ago: executing program 3 (id=7954): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000002ac0)="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", 0x7ca}, {0x0}], 0x2, &(0x7f0000000240)}}], 0x1, 0x20008041) 603.315475ms ago: executing program 3 (id=7955): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000016ee2ffca1b1f00a6000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 505.073561ms ago: executing program 0 (id=7956): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1040104}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x138, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x641b2380}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xcd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, {0x14, 0x2, @in={0x2, 0x1, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) mlockall(0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0xf9, 0x0, 0x0, 0xb, 0x2034, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000040)}, 0x100b28, 0x6, 0x1, 0x5, 0x582, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xc, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r3 = open(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20902, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xa9525000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x9, 0x5, 0x3c, 0x1724}, {0x7fff, 0x9, 0x6, 0x2}, {0x9966, 0x80, 0x8, 0x7fff}]}) 380.806388ms ago: executing program 0 (id=7958): r0 = gettid() capset(&(0x7f0000000180)={0x399f1316}, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r2 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = perf_event_open(&(0x7f0000000a00)={0x5, 0x3c, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0xffffffff7fffffff, 0x3fff8000}, 0x100009, 0x32, 0x43a1bd79, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, r3, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) setresgid(0x0, 0xffffffffffffffff, 0xee00) r6 = getpgid(r0) capset(&(0x7f0000000140)={0x20071026, r6}, &(0x7f0000000180)={0xfffffffa, 0xfff, 0x6, 0xd, 0x9, 0x8}) r7 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x0, 0x1}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000080)=0x1000, 0x4) getgroups(0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x200, &(0x7f0000000d80)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@fallback, 0xffffffffffffffff, 0x31, 0x24}, 0x20) fstat(0xffffffffffffffff, 0x0) 338.16548ms ago: executing program 9 (id=7960): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = io_uring_setup(0x1f9d, &(0x7f00000001c0)={0x0, 0x6685, 0x1, 0x2, 0x115}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000009, 0x13, r1, 0x10000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000240)=0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 305.503402ms ago: executing program 9 (id=7961): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) 245.061376ms ago: executing program 9 (id=7962): quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000400)={0xfffffffffffffffc, 0xffff, 0x2, 0x101, 0x3ff, 0x40, 0xfffffffffffffff7, 0x7, 0xcfc6}) select(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x10f, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) 244.508846ms ago: executing program 0 (id=7963): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) pipe(&(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b48, &(0x7f0000000040)) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x9}, 0x6018, 0x0, 0x2, 0x0, 0x3fe, 0x7ffffffc, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 244.264436ms ago: executing program 7 (id=7964): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n', @ANYRES32], 0x40}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 161.885731ms ago: executing program 0 (id=7965): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, 0x0) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000080)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r4, 0x800, 0x20, 0x6, 0x8ccb}, &(0x7f0000000100)=0x18) 137.815052ms ago: executing program 1 (id=7966): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000240)}}], 0x1, 0x20008041) 136.771002ms ago: executing program 7 (id=7967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x5, 0x0, 0x0, 0x29f, 0x0, 0xfffffffffffffffd, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000844) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000b00)={'erspan0\x00', 0x0, 0x20, 0x1, 0xbd3, 0x0, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x68, 0x0, 0xa, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@end]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 73.096956ms ago: executing program 0 (id=7968): socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) setfsgid(0xee00) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r1, 0x6, &(0x7f00000001c0)) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x7, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x7, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0xa, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x9000000, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80004000, 0xf6, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x200004, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x7, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x400, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x80, 0x8, 0x6, 0xe2f3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x4, 0x8, 0x7, 0x8, 0x6, 0x0, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x6b2, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x1, 0x7, 0x6, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r14, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 72.800876ms ago: executing program 7 (id=7969): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x2000, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x24}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) 57.442507ms ago: executing program 7 (id=7970): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000000fe"], 0x190) syz_emit_ethernet(0x66, &(0x7f0000000580)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) 38.904918ms ago: executing program 7 (id=7971): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 7 (id=7972): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) (async) kernel console output (not intermixed with test programs): tlink: 'syz.4.7191': attribute type 83 has an invalid length. [ 433.840750][T28932] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.848087][T28932] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.870934][T28950] loop4: detected capacity change from 0 to 1764 [ 433.894751][T28950] iso9660: Bad value for 'gid' [ 433.899702][T28950] iso9660: Bad value for 'gid' [ 434.006209][T28968] FAULT_INJECTION: forcing a failure. [ 434.006209][T28968] name failslab, interval 1, probability 0, space 0, times 0 [ 434.019074][T28968] CPU: 1 UID: 0 PID: 28968 Comm: syz.7.7198 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 434.019143][T28968] Tainted: [W]=WARN [ 434.019153][T28968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.019171][T28968] Call Trace: [ 434.019181][T28968] [ 434.019192][T28968] __dump_stack+0x1d/0x30 [ 434.019294][T28968] dump_stack_lvl+0x95/0xd0 [ 434.019324][T28968] dump_stack+0x15/0x1b [ 434.019353][T28968] should_fail_ex+0x263/0x280 [ 434.019397][T28968] should_failslab+0x8c/0xb0 [ 434.019485][T28968] __kmalloc_cache_noprof+0x64/0x4a0 [ 434.019523][T28968] ? bpf_uprobe_multi_link_attach+0x324/0x910 [ 434.019574][T28968] bpf_uprobe_multi_link_attach+0x324/0x910 [ 434.019610][T28968] ? kstrtouint+0x76/0xc0 [ 434.019650][T28968] ? __rcu_read_unlock+0x4e/0x70 [ 434.019747][T28968] ? __fget_files+0x184/0x1c0 [ 434.019783][T28968] link_create+0x639/0x690 [ 434.019903][T28968] __sys_bpf+0x628/0x7b0 [ 434.019969][T28968] __x64_sys_bpf+0x41/0x50 [ 434.020001][T28968] x64_sys_call+0x28e1/0x3000 [ 434.020029][T28968] do_syscall_64+0xc0/0x2a0 [ 434.020061][T28968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.020110][T28968] RIP: 0033:0x7ff14009aeb9 [ 434.020131][T28968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.020153][T28968] RSP: 002b:00007ff13eaf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.020174][T28968] RAX: ffffffffffffffda RBX: 00007ff140315fa0 RCX: 00007ff14009aeb9 [ 434.020273][T28968] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 434.020292][T28968] RBP: 00007ff13eaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 434.020365][T28968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.020459][T28968] R13: 00007ff140316038 R14: 00007ff140315fa0 R15: 00007ffedd712858 [ 434.020483][T28968] [ 434.401162][T28995] loop3: detected capacity change from 0 to 512 [ 434.427022][T28995] EXT4-fs: Ignoring removed bh option [ 434.466425][T28995] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 434.507466][T28995] EXT4-fs (loop3): 1 truncate cleaned up [ 434.525560][T28995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.597630][T28372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.687755][T29019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7211'. [ 434.697663][T29021] loop3: detected capacity change from 0 to 164 [ 434.759632][T29023] loop3: detected capacity change from 0 to 512 [ 434.771853][T29012] loop7: detected capacity change from 0 to 32768 [ 434.798257][T29026] netlink: 'syz.9.7210': attribute type 14 has an invalid length. [ 434.806449][T29026] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7210'. [ 434.835217][T29026] netlink: 'syz.9.7210': attribute type 14 has an invalid length. [ 434.843821][T29026] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7210'. [ 434.904313][T29023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.923437][T29023] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 434.956793][T12270] loop7: p1 p3 < p5 p6 > [ 434.966384][T12270] loop7: p5 start 117448704 is beyond EOD, truncated [ 435.004572][T29023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7212'. [ 435.019542][T29012] loop7: p1 p3 < p5 p6 > [ 435.025608][T29012] loop7: p5 start 117448704 is beyond EOD, truncated [ 435.040335][T29023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.048648][T29023] batadv_slave_0: entered promiscuous mode [ 435.163940][T28372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.239896][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 435.255209][T12270] udevd[12270]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 435.267168][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 435.319946][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 435.330625][T12270] udevd[12270]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 435.341305][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 435.497113][T29052] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7216'. [ 435.502138][T29054] loop9: detected capacity change from 0 to 128 [ 435.541236][T29058] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.545136][T29054] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 435.551278][T29058] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.573108][T29054] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 435.625491][T29058] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.636045][T29058] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.671750][ T31] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 435.692675][T29058] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.702630][T29058] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.724318][T29073] loop9: detected capacity change from 0 to 128 [ 435.758434][T29058] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.768334][T29058] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.831607][T29077] loop9: detected capacity change from 0 to 512 [ 435.840913][T29077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 435.868968][T29077] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.889171][T29077] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.978206][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 435.978226][ T29] audit: type=1400 audit(1770159235.705:59381): avc: denied { map } for pid=29085 comm="syz.7.7225" path="socket:[98381]" dev="sockfs" ino=98381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 436.009403][ T29] audit: type=1400 audit(1770159235.705:59382): avc: denied { accept } for pid=29085 comm="syz.7.7225" path="socket:[98381]" dev="sockfs" ino=98381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 436.117622][T29090] EXT4-fs: Ignoring removed nobh option [ 436.129794][T29090] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.7226: invalid indirect mapped block 11 (level 0) [ 436.140989][T29092] EXT4-fs (loop9): shut down requested (0) [ 436.156710][T29090] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.7226: attempt to clear invalid blocks 1024 len 1 [ 436.179541][T29090] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 436.195931][T29090] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.7226: invalid indirect mapped block 1819239214 (level 0) [ 436.212663][T29090] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.7226: invalid indirect mapped block 33554432 (level 2) [ 436.228666][T29090] EXT4-fs (loop7): 1 truncate cleaned up [ 436.235343][T29090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.265068][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7222'. [ 436.290695][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.318274][T26663] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.330880][T29097] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 436.381819][T29100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 436.392842][T29097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.407325][T29097] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.428769][T29100] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.442736][T29100] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.494101][T29107] bridge_slave_0: left allmulticast mode [ 436.499906][T29107] bridge_slave_0: left promiscuous mode [ 436.505564][T29107] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.513073][T29108] netlink: 'syz.3.7231': attribute type 10 has an invalid length. [ 436.521715][T29108] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7231'. [ 436.535798][T29107] bridge_slave_1: left allmulticast mode [ 436.542252][T29107] bridge_slave_1: left promiscuous mode [ 436.548116][T29107] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.560262][T29107] bond0: (slave bond_slave_0): Releasing backup interface [ 436.570640][T29107] bond0: (slave bond_slave_1): Releasing backup interface [ 436.591243][T29107] team0: Port device team_slave_0 removed [ 436.613498][T29107] team0: Port device team_slave_1 removed [ 436.620414][T29107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.630460][T29107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.638035][T29107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.648836][T29107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 436.666743][T29108] team0: entered promiscuous mode [ 436.672506][T29108] bridge0: port 1(team0) entered blocking state [ 436.678827][T29108] bridge0: port 1(team0) entered disabled state [ 436.680270][T29109] EXT4-fs (loop7): shut down requested (0) [ 436.689426][T29108] team0: entered allmulticast mode [ 436.719314][T29108] bridge0: port 1(team0) entered blocking state [ 436.725706][T29108] bridge0: port 1(team0) entered forwarding state [ 436.747462][T26793] bridge0: port 1(team0) entered disabled state [ 436.767846][T29111] EXT4-fs (loop9): shut down requested (0) [ 436.837779][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.855589][T29100] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 436.864700][T29100] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 436.901931][T26663] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.945220][T29124] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7237'. [ 436.989276][T29128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.016829][T29130] netlink: 172 bytes leftover after parsing attributes in process `syz.9.7240'. [ 437.074238][T29136] option changes via remount are deprecated (pid=29135 comm=syz.4.7243) [ 437.075351][ T29] audit: type=1400 audit(1770159492.854:59383): avc: denied { remount } for pid=29135 comm="syz.4.7243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 437.084610][T29136] cgroup: option or name mismatch, new: 0x0 "pim6reg0", old: 0x0 "" [ 437.131130][ T29] audit: type=1400 audit(1770159492.917:59384): avc: denied { unmount } for pid=23135 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 437.238253][T29146] EXT4-fs: Ignoring removed orlov option [ 437.254196][T29146] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 437.268169][T29146] ext4 filesystem being mounted at /28/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.298139][ T29] audit: type=1326 audit(1770159493.085:59385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29145 comm="syz.3.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 437.304456][ T3449] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.325218][ T29] audit: type=1326 audit(1770159493.085:59386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29145 comm="syz.3.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 437.330074][ T3449] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.350665][T29150] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 1057052516 > max in inode 13 [ 437.356864][ T29] audit: type=1326 audit(1770159493.085:59387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29145 comm="syz.3.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 437.396973][ T29] audit: type=1326 audit(1770159493.085:59388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29145 comm="syz.3.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b41cab78e code=0x7ffc0000 [ 437.421409][ T29] audit: type=1326 audit(1770159493.085:59389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29145 comm="syz.3.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3b41cec1d7 code=0x7ffc0000 [ 437.442681][ T3449] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.448310][ T29] audit: type=1326 audit(1770159493.085:59390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29145 comm="syz.3.7247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 437.453325][ T3449] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.477405][ T3449] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.477449][ T3449] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.477574][ T3449] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.477608][ T3449] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.564162][T29152] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7249: bg 0: block 248: padding at end of block bitmap is not set [ 437.584549][T29152] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.7249: Failed to acquire dquot type 1 [ 437.597759][T29152] EXT4-fs (loop4): 1 truncate cleaned up [ 437.603953][T29152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.618028][T29152] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.647951][T29152] can0: slcan on ptm0. [ 437.871993][T29151] can0 (unregistered): slcan off ptm0. [ 437.932350][T23135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.950188][ T1903] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 438.105743][T28372] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 438.277686][T29232] netlink: 'syz.9.7270': attribute type 27 has an invalid length. [ 438.287234][T29227] set_capacity_and_notify: 6 callbacks suppressed [ 438.287253][T29227] loop4: detected capacity change from 0 to 1024 [ 438.306319][T29227] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 438.321917][T29227] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 438.342283][T29227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 438.361715][T29227] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.7269: corrupted in-inode xattr: bad e_name length [ 438.388766][T29227] EXT4-fs (loop4): Remounting filesystem read-only [ 438.414638][T23135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.462115][T29232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.519887][T29244] loop7: detected capacity change from 0 to 512 [ 438.526903][T29244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 438.551738][T29244] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.576393][T29244] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.580051][T29233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.597212][T29233] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.607957][T29233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.635378][ T3449] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.658043][ T3449] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.700347][T29254] __nla_validate_parse: 71 callbacks suppressed [ 438.700367][T29254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7277'. [ 438.717686][ T3449] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.740996][ T3449] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.931427][T29274] syzkaller0: entered promiscuous mode [ 438.937011][T29274] syzkaller0: entered allmulticast mode [ 438.949180][T29255] EXT4-fs (loop7): shut down requested (0) [ 439.023881][T29277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7274'. [ 439.084291][T29280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7285'. [ 439.113236][T29280] loop3: detected capacity change from 0 to 256 [ 439.127803][T29286] loop4: detected capacity change from 0 to 256 [ 439.129866][T29280] vfat: Unknown parameter '' [ 439.193158][T29286] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 439.211412][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.360662][T29300] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7295'. [ 439.480245][T29307] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=29307 comm=syz.7.7296 [ 439.707394][T29314] loop3: detected capacity change from 0 to 2048 [ 439.733086][T29314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.764798][T28372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.967778][T13459] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 440.062877][T26794] bond0 (unregistering): Released all slaves [ 440.075077][T29315] chnl_net:caif_netlink_parms(): no params data found [ 440.091675][T29335] loop3: detected capacity change from 0 to 1024 [ 440.108888][T29335] EXT4-fs: Ignoring removed orlov option [ 440.171788][T29335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.198446][T26794] hsr_slave_0: left promiscuous mode [ 440.199298][T29335] EXT4-fs (loop3): shut down requested (1) [ 440.211096][T26794] hsr_slave_1: left promiscuous mode [ 440.368179][T29315] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.375357][T29315] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.383940][T29315] bridge_slave_0: entered allmulticast mode [ 440.392897][T29315] bridge_slave_0: entered promiscuous mode [ 440.401227][T29315] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.409047][T29315] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.419112][T29315] bridge_slave_1: entered allmulticast mode [ 440.426760][T29315] bridge_slave_1: entered promiscuous mode [ 440.459229][T29315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.470861][T29315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.487158][T28372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.522955][T29315] team0: Port device team_slave_0 added [ 440.530687][T29315] team0: Port device team_slave_1 added [ 440.584500][T29315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.591609][T29315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.617666][T29315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.637312][T29315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.645034][T29315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.672455][T29315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.708330][T29377] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.718256][T29377] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.807416][T29377] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.818017][T29377] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.841432][T26794] IPVS: stop unused estimator thread 0... [ 440.850573][T29315] hsr_slave_0: entered promiscuous mode [ 440.879728][T29399] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7314'. [ 440.883096][T29315] hsr_slave_1: entered promiscuous mode [ 440.898648][T29315] debugfs: 'hsr0' already exists in 'hsr' [ 440.904476][T29315] Cannot create hsr debugfs directory [ 440.920844][T29402] FAULT_INJECTION: forcing a failure. [ 440.920844][T29402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.934039][T29402] CPU: 1 UID: 0 PID: 29402 Comm: syz.7.7315 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 440.934138][T29402] Tainted: [W]=WARN [ 440.934146][T29402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.934160][T29402] Call Trace: [ 440.934167][T29402] [ 440.934175][T29402] __dump_stack+0x1d/0x30 [ 440.934243][T29402] dump_stack_lvl+0x95/0xd0 [ 440.934276][T29402] dump_stack+0x15/0x1b [ 440.934320][T29402] should_fail_ex+0x263/0x280 [ 440.934365][T29402] should_fail+0xb/0x20 [ 440.934403][T29402] should_fail_usercopy+0x1a/0x20 [ 440.934487][T29402] _copy_from_user+0x1c/0xb0 [ 440.934517][T29402] __sys_bpf+0x183/0x7b0 [ 440.934564][T29402] __x64_sys_bpf+0x41/0x50 [ 440.934598][T29402] x64_sys_call+0x28e1/0x3000 [ 440.934710][T29402] do_syscall_64+0xc0/0x2a0 [ 440.934755][T29402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.934787][T29402] RIP: 0033:0x7ff14009aeb9 [ 440.934810][T29402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.934837][T29402] RSP: 002b:00007ff13eaf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.934865][T29402] RAX: ffffffffffffffda RBX: 00007ff140315fa0 RCX: 00007ff14009aeb9 [ 440.934966][T29402] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 440.934983][T29402] RBP: 00007ff13eaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 440.935001][T29402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.935087][T29402] R13: 00007ff140316038 R14: 00007ff140315fa0 R15: 00007ffedd712858 [ 440.935116][T29402] [ 440.942504][T29377] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.122173][T29377] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.170885][T29377] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.178978][T29416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 441.180862][T29377] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.226869][T26794] bridge_slave_1: left allmulticast mode [ 441.232623][T26794] bridge_slave_1: left promiscuous mode [ 441.238462][T26794] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.261926][T26794] bridge_slave_0: left allmulticast mode [ 441.267711][T26794] bridge_slave_0: left promiscuous mode [ 441.273432][T26794] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.294427][T26794] bond_slave_0: left promiscuous mode [ 441.299868][T26794] bond_slave_1: left promiscuous mode [ 441.307498][T29416] loop9: detected capacity change from 0 to 8192 [ 441.496562][T26794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.506816][T26794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.516695][T26794] bond0 (unregistering): Released all slaves [ 441.526032][T26794] bond1 (unregistering): Released all slaves [ 441.535331][T26794] bond2 (unregistering): Released all slaves [ 441.539155][T29411] netlink: 14 bytes leftover after parsing attributes in process `syz.9.7318'. [ 441.550490][T26794] bond3 (unregistering): Released all slaves [ 441.561265][T26794] bond4 (unregistering): (slave veth3): Releasing active interface [ 441.569607][T26794] dummy0: entered promiscuous mode [ 441.576091][T26794] bond4 (unregistering): (slave dummy0): Releasing active interface [ 441.587306][T26794] bond4 (unregistering): Released all slaves [ 441.607769][T29411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.619184][T29411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.630828][T29411] bond0 (unregistering): Released all slaves [ 441.652722][T26794] hsr_slave_0: left promiscuous mode [ 441.658468][T26794] hsr_slave_1: left promiscuous mode [ 441.664490][T26794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.671959][T26794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.679890][T26794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.687435][T26794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.718719][T26794] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 441.725596][T26794] batman_adv: batadv0: Removing interface: ipvlan2 [ 441.735061][T26794] veth1_macvtap: left promiscuous mode [ 441.740995][T26794] veth0_macvtap: left promiscuous mode [ 441.746563][T26794] veth1_vlan: left promiscuous mode [ 441.955525][ T29] kauditd_printk_skb: 2475 callbacks suppressed [ 441.955544][ T29] audit: type=1326 audit(1770160009.976:61863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.7.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14009aeb9 code=0x7ffc0000 [ 441.992659][T29444] loop7: detected capacity change from 0 to 1764 [ 442.009957][ T29] audit: type=1326 audit(1770160009.976:61864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.7.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff14009aeb9 code=0x7ffc0000 [ 442.033749][ T29] audit: type=1326 audit(1770160009.976:61865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.7.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14009aeb9 code=0x7ffc0000 [ 442.057567][ T29] audit: type=1326 audit(1770160009.976:61866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.7.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff14009aeb9 code=0x7ffc0000 [ 442.081429][ T29] audit: type=1326 audit(1770160009.986:61867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.7.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14009aeb9 code=0x7ffc0000 [ 442.105124][ T29] audit: type=1326 audit(1770160009.986:61868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29445 comm="syz.7.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff14005b78e code=0x7ffc0000 [ 442.128857][ T29] audit: type=1326 audit(1770160009.997:61869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.7.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14009aeb9 code=0x7ffc0000 [ 442.128896][ T29] audit: type=1326 audit(1770160009.997:61870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.7.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff14009aeb9 code=0x7ffc0000 [ 442.128998][ T29] audit: type=1326 audit(1770160009.997:61871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.7.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14009aeb9 code=0x7ffc0000 [ 442.129030][ T29] audit: type=1326 audit(1770160009.997:61872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.7.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14009aeb9 code=0x7ffc0000 [ 442.232623][ T52] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.240916][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.259934][T29444] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 442.282990][ T52] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.292048][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.322266][ T52] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.331263][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.366903][ T52] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.375886][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.474873][T29465] netlink: 172 bytes leftover after parsing attributes in process `syz.7.7329'. [ 442.539030][T26794] IPVS: stop unused estimator thread 0... [ 442.560296][T29469] program syz.9.7330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.709813][T29315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 442.728306][T29315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 442.738884][T29315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.767412][T29315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 442.833633][T29315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.853095][T29315] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.873866][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.880983][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.946804][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.953943][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.008826][T29511] loop9: detected capacity change from 0 to 512 [ 443.095281][T29520] 9p: Invalid uid '0x00000000ffffffff' [ 443.146076][T29315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.327420][T29552] loop7: detected capacity change from 0 to 512 [ 443.337824][T29315] veth0_vlan: entered promiscuous mode [ 443.350818][T29552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 443.360416][T29315] veth1_vlan: entered promiscuous mode [ 443.380534][T29552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.393470][T29552] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.413394][T29315] veth0_macvtap: entered promiscuous mode [ 443.427850][T29315] veth1_macvtap: entered promiscuous mode [ 443.446154][T29315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.462197][T29315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.503586][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.529614][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.540124][ T3449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.559478][ T3449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.877993][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.913800][T29594] netlink: 172 bytes leftover after parsing attributes in process `syz.2.7353'. [ 444.225150][T29627] loop7: detected capacity change from 0 to 512 [ 444.297269][T29640] loop3: detected capacity change from 0 to 512 [ 444.306001][T29640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 444.324342][T29640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.341633][T29640] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.573096][T29675] EXT4-fs (loop3): shut down requested (0) [ 444.619419][T29675] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 444.628690][T29675] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 444.771678][T28372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.060441][T29727] loop2: detected capacity change from 0 to 128 [ 445.100981][T29727] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 445.126269][T29727] EXT4-fs: error: could not find journal device path [ 445.561918][T29787] loop2: detected capacity change from 0 to 512 [ 445.578884][T29787] EXT4-fs: Ignoring removed oldalloc option [ 445.607674][T29787] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.7389: Parent and EA inode have the same ino 15 [ 445.626522][T29787] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.7389: Parent and EA inode have the same ino 15 [ 445.644392][T29787] EXT4-fs (loop2): 1 orphan inode deleted [ 445.657784][T29787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.703415][T29315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.784008][T29818] loop2: detected capacity change from 0 to 512 [ 445.797597][T29818] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 445.845599][T29818] EXT4-fs (loop2): 1 truncate cleaned up [ 445.862092][T29818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.883286][T29814] loop7: detected capacity change from 0 to 8192 [ 445.904465][T29315] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 445.947309][T29315] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 445.976474][ T3306] loop7: p2 p3 p4[EZD] [ 445.981402][T29315] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 446.001783][T29315] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 446.009644][ T3306] loop7: p3 start 331781 is beyond EOD, truncated [ 446.028554][ T3306] loop7: p4 size 197376 extends beyond EOD, truncated [ 446.051727][T29315] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 446.054930][T29814] loop7: p2 p3 p4[EZD] [ 446.086268][T29315] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 446.101097][T29315] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 446.102230][T29814] loop7: p3 start 331781 is beyond EOD, truncated [ 446.127704][T29814] loop7: p4 size 197376 extends beyond EOD, truncated [ 446.138678][T29315] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 446.182563][T29315] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 446.230856][T29315] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 446.262897][T29315] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 446.305904][T29315] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 446.334562][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 446.341237][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 446.368526][T29855] netlink: 'syz.1.7403': attribute type 1 has an invalid length. [ 446.376894][T29315] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 446.405049][T29315] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 446.416047][T29856] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29856 comm=syz.1.7403 [ 446.437079][T29315] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 446.446634][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 446.455278][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 446.469831][T29315] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 446.474245][T29855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.498316][T29860] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7402'. [ 446.505737][T29315] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 446.524307][T29315] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 446.536663][T29858] bond3: (slave geneve3): making interface the new active one [ 446.546422][T29315] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 446.546492][T29858] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 446.573326][T29315] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 446.810640][T29890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.834401][T29890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.847213][T29315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.867367][T26794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.943960][T26794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.019073][T29907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7414'. [ 447.032136][T26794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.096010][T26794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.114978][T29921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7416'. [ 447.124095][T29921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7416'. [ 447.232797][T26794] bridge_slave_1: left allmulticast mode [ 447.238538][T26794] bridge_slave_1: left promiscuous mode [ 447.244266][T26794] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.268930][T26794] bridge_slave_0: left allmulticast mode [ 447.274802][T26794] bridge_slave_0: left promiscuous mode [ 447.280534][T26794] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.418511][T26794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.436583][T26794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.464236][T26794] bond0 (unregistering): Released all slaves [ 447.531502][T26794] hsr_slave_0: left promiscuous mode [ 447.547469][T26794] hsr_slave_1: left promiscuous mode [ 447.558843][T26794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.566283][T26794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.574395][T29963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29963 comm=syz.3.7422 [ 447.594255][T29963] netlink: 'syz.3.7422': attribute type 1 has an invalid length. [ 447.604578][T26794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.612864][T26794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.629766][T26794] veth1_macvtap: left promiscuous mode [ 447.635874][T26794] veth0_macvtap: left promiscuous mode [ 447.641437][T26794] veth1_vlan: left promiscuous mode [ 447.648418][T26794] veth0_vlan: left promiscuous mode [ 447.792929][T26794] team0 (unregistering): Port device team_slave_1 removed [ 447.803602][T26794] team0 (unregistering): Port device team_slave_0 removed [ 447.943798][T29986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29986 comm=syz.7.7427 [ 447.947281][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 447.947369][ T29] audit: type=1326 audit(1770161552.263:61969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29985 comm="syz.3.7426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 447.994228][T29986] netlink: 'syz.7.7427': attribute type 1 has an invalid length. [ 448.002060][ T29] audit: type=1326 audit(1770161552.316:61970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29985 comm="syz.3.7426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 448.027245][ T29] audit: type=1326 audit(1770161552.316:61971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29985 comm="syz.3.7426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 448.086949][T29995] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7429'. [ 448.096737][T29914] chnl_net:caif_netlink_parms(): no params data found [ 448.159911][T29914] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.167030][T29914] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.175163][T29914] bridge_slave_0: entered allmulticast mode [ 448.182952][T29914] bridge_slave_0: entered promiscuous mode [ 448.184299][T30004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=30004 comm=syz.1.7428 [ 448.191627][T29914] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.209996][T29914] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.217391][T29914] bridge_slave_1: entered allmulticast mode [ 448.224076][T29914] bridge_slave_1: entered promiscuous mode [ 448.259497][T29914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.271949][T29914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.294030][T29914] team0: Port device team_slave_0 added [ 448.300833][T29914] team0: Port device team_slave_1 added [ 448.318145][T29914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.325179][T29914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.351372][T29914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.418731][T30027] loop9: detected capacity change from 0 to 1024 [ 448.448152][T29914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.455228][T29914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.482696][T29914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.519296][T30027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.547596][T29914] hsr_slave_0: entered promiscuous mode [ 448.554079][T29914] hsr_slave_1: entered promiscuous mode [ 448.560206][T29914] debugfs: 'hsr0' already exists in 'hsr' [ 448.565956][T29914] Cannot create hsr debugfs directory [ 448.655888][T30042] loop7: detected capacity change from 0 to 512 [ 448.691133][T30042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 448.726121][T30042] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.799155][T30042] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.926598][T30063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7439'. [ 448.995024][T30065] bridge0: port 1(team0) entered disabled state [ 449.002545][T30073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7438'. [ 449.053310][T30065] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30065 comm=syz.1.7438 [ 449.133157][T30081] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.144483][T30081] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.161335][T30066] EXT4-fs (loop7): shut down requested (0) [ 449.184121][T29914] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 449.201708][T29914] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 449.226901][T30081] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.237510][T30081] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.253301][T29914] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 449.292161][T30081] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.302824][T30081] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.315565][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.327223][T29914] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 449.353745][T30081] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.363747][T30081] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.444220][ T57] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.452562][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.487601][ T57] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.495947][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.540826][T29914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.548109][T26663] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.551640][ T57] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.565327][ T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.579857][T29914] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.626295][ T57] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.634609][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.647244][T26794] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.654485][T26794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.674289][T26794] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.681393][T26794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.713328][T29914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 449.723897][T29914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.776789][ T29] audit: type=1326 audit(1770161554.185:61972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350f5eaeb9 code=0x7ffc0000 [ 449.801889][ T29] audit: type=1326 audit(1770161554.185:61973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350f5eaeb9 code=0x7ffc0000 [ 449.870066][T30123] netlink: 172 bytes leftover after parsing attributes in process `syz.9.7448'. [ 449.899656][ T29] audit: type=1326 audit(1770161554.248:61974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f350f5eaeb9 code=0x7ffc0000 [ 449.924799][ T29] audit: type=1326 audit(1770161554.248:61975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350f5eaeb9 code=0x7ffc0000 [ 449.949895][ T29] audit: type=1326 audit(1770161554.248:61976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f350f5eaeb9 code=0x7ffc0000 [ 449.973603][ T29] audit: type=1326 audit(1770161554.248:61977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350f5eaeb9 code=0x7ffc0000 [ 449.998704][ T29] audit: type=1326 audit(1770161554.248:61978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f350f5eaeb9 code=0x7ffc0000 [ 450.076456][T30138] loop3: detected capacity change from 0 to 512 [ 450.115600][T30138] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.7451: iget: bad i_size value: 12154757448730 [ 450.145218][T30138] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.7451: couldn't read orphan inode 13 (err -117) [ 450.154121][T29914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.198239][T30138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.222766][T30138] EXT4-fs warning (device loop3): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 450.241941][T30138] EXT4-fs warning (device loop3): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 450.290607][T29914] veth0_vlan: entered promiscuous mode [ 450.296989][T28372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.301374][T29914] veth1_vlan: entered promiscuous mode [ 450.341347][T29914] veth0_macvtap: entered promiscuous mode [ 450.360747][T29914] veth1_macvtap: entered promiscuous mode [ 450.396501][T29914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.419479][T29914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.419947][T30166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7457'. [ 450.450828][T26794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.450883][T26794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.450990][T26794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.451038][T26794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.654487][T30178] loop7: detected capacity change from 0 to 512 [ 450.671669][T30178] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 450.754954][T30178] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.779694][T30178] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.961948][T30204] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.973164][T30204] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.016076][T30207] loop9: detected capacity change from 0 to 512 [ 451.023162][T30208] EXT4-fs (loop7): shut down requested (0) [ 451.037120][T30204] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.047020][T30204] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.104050][T30204] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.114561][T30204] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.129453][T30214] netlink: 172 bytes leftover after parsing attributes in process `syz.9.7471'. [ 451.150319][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.170402][T30204] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.181743][T30204] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.329584][T30234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7479'. [ 451.345183][T30234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.675047][T30245] loop3: detected capacity change from 0 to 512 [ 451.682244][T30245] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 451.705311][T30245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.718408][T30245] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.953487][T30242] Set syz1 is full, maxelem 65536 reached [ 451.969462][T28372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.043923][T30262] loop7: detected capacity change from 0 to 512 [ 452.106766][T30262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.119442][T30262] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.133650][T30274] loop3: detected capacity change from 0 to 512 [ 452.147312][T30274] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 452.162848][T30262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.275352][T30289] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7493'. [ 452.278553][T30289] loop9: detected capacity change from 0 to 256 [ 452.286051][T30293] netlink: 'syz.7.7494': attribute type 10 has an invalid length. [ 452.296460][T30293] team0: Port device dummy0 added [ 452.307207][T30293] netlink: 'syz.7.7494': attribute type 10 has an invalid length. [ 452.310035][T30293] team0: Port device dummy0 removed [ 452.313074][T30293] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 452.412389][T30302] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7498'. [ 452.458525][T30309] FAULT_INJECTION: forcing a failure. [ 452.458525][T30309] name failslab, interval 1, probability 0, space 0, times 0 [ 452.471379][T30309] CPU: 0 UID: 0 PID: 30309 Comm: syz.7.7501 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 452.471417][T30309] Tainted: [W]=WARN [ 452.471427][T30309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 452.471445][T30309] Call Trace: [ 452.471453][T30309] [ 452.471463][T30309] __dump_stack+0x1d/0x30 [ 452.471525][T30309] dump_stack_lvl+0x95/0xd0 [ 452.471620][T30309] dump_stack+0x15/0x1b [ 452.471647][T30309] should_fail_ex+0x263/0x280 [ 452.471689][T30309] should_failslab+0x8c/0xb0 [ 452.471720][T30309] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 452.471794][T30309] ? __alloc_skb+0x2f0/0x4b0 [ 452.471835][T30309] __alloc_skb+0x2f0/0x4b0 [ 452.471873][T30309] ? __alloc_skb+0x219/0x4b0 [ 452.471911][T30309] netlink_alloc_large_skb+0xbf/0xf0 [ 452.471982][T30309] netlink_sendmsg+0x40c/0x6f0 [ 452.472011][T30309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.472056][T30309] ____sys_sendmsg+0x5af/0x600 [ 452.472160][T30309] ___sys_sendmsg+0x195/0x1e0 [ 452.472205][T30309] __x64_sys_sendmsg+0xd4/0x160 [ 452.472252][T30309] x64_sys_call+0x17ba/0x3000 [ 452.472280][T30309] do_syscall_64+0xc0/0x2a0 [ 452.472322][T30309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.472359][T30309] RIP: 0033:0x7ff14009aeb9 [ 452.472377][T30309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.472402][T30309] RSP: 002b:00007ff13eaf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.472429][T30309] RAX: ffffffffffffffda RBX: 00007ff140315fa0 RCX: 00007ff14009aeb9 [ 452.472521][T30309] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000003 [ 452.472624][T30309] RBP: 00007ff13eaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 452.472643][T30309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.472660][T30309] R13: 00007ff140316038 R14: 00007ff140315fa0 R15: 00007ffedd712858 [ 452.472768][T30309] [ 452.579898][T30313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7503'. [ 452.694884][T30318] loop7: detected capacity change from 0 to 164 [ 452.707796][T30318] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 452.711549][T30317] syzkaller0: entered promiscuous mode [ 452.721261][T30317] syzkaller0: entered allmulticast mode [ 452.727826][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 452.727842][ T29] audit: type=1326 audit(1770161813.288:62066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.3.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 452.746704][T30313] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 452.765612][ T29] audit: type=1326 audit(1770161813.288:62067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.3.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 452.791590][ T29] audit: type=1326 audit(1770161813.288:62068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.3.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 452.815951][ T29] audit: type=1326 audit(1770161813.288:62069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.3.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 452.827246][T30321] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7505'. [ 452.842775][ T29] audit: type=1326 audit(1770161813.288:62070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.3.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 452.873568][ T29] audit: type=1326 audit(1770161813.288:62071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.3.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 452.897841][ T29] audit: type=1326 audit(1770161813.288:62072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.3.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 452.922810][ T29] audit: type=1326 audit(1770161813.288:62073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.3.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 452.947105][ T29] audit: type=1326 audit(1770161813.288:62074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.3.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 452.971939][ T29] audit: type=1326 audit(1770161813.288:62075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.3.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b41ceaeb9 code=0x7ffc0000 [ 453.084615][T30323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 453.104224][T30323] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.117900][T30323] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.170747][T30323] EXT4-fs (loop7): shut down requested (0) [ 453.177934][T30323] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 453.186913][T30323] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 453.218494][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.338456][T30339] SELinux: failed to load policy [ 453.366963][T30341] FAULT_INJECTION: forcing a failure. [ 453.366963][T30341] name failslab, interval 1, probability 0, space 0, times 0 [ 453.381156][T30341] CPU: 0 UID: 0 PID: 30341 Comm: syz.0.7512 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 453.381203][T30341] Tainted: [W]=WARN [ 453.381212][T30341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 453.381228][T30341] Call Trace: [ 453.381237][T30341] [ 453.381247][T30341] __dump_stack+0x1d/0x30 [ 453.381348][T30341] dump_stack_lvl+0x95/0xd0 [ 453.381369][T30341] dump_stack+0x15/0x1b [ 453.381437][T30341] should_fail_ex+0x263/0x280 [ 453.381466][T30341] should_failslab+0x8c/0xb0 [ 453.381512][T30341] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 453.381538][T30341] ? __get_vm_area_node+0x106/0x1d0 [ 453.381625][T30341] __get_vm_area_node+0x106/0x1d0 [ 453.381650][T30341] __vmalloc_node_range_noprof+0x291/0x12b0 [ 453.381729][T30341] ? sel_write_load+0x156/0x380 [ 453.381755][T30341] ? kvm_sched_clock_read+0x11/0x20 [ 453.381786][T30341] ? sched_clock+0x3f/0x60 [ 453.381806][T30341] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 453.381876][T30341] ? __rcu_read_unlock+0x4e/0x70 [ 453.381904][T30341] ? avc_has_perm_noaudit+0xab/0x130 [ 453.381987][T30341] ? sel_write_load+0x156/0x380 [ 453.382014][T30341] vmalloc_noprof+0x82/0xb0 [ 453.382039][T30341] ? sel_write_load+0x156/0x380 [ 453.382066][T30341] sel_write_load+0x156/0x380 [ 453.382152][T30341] ? __pfx_sel_write_load+0x10/0x10 [ 453.382179][T30341] vfs_write+0x269/0x9f0 [ 453.382197][T30341] ? __rcu_read_unlock+0x4e/0x70 [ 453.382241][T30341] ? __fget_files+0x184/0x1c0 [ 453.382263][T30341] ? mutex_lock+0x57/0x90 [ 453.382285][T30341] ksys_write+0xdc/0x1a0 [ 453.382309][T30341] __x64_sys_write+0x40/0x50 [ 453.382368][T30341] x64_sys_call+0x2847/0x3000 [ 453.382391][T30341] do_syscall_64+0xc0/0x2a0 [ 453.382433][T30341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.382466][T30341] RIP: 0033:0x7f038d3eaeb9 [ 453.382480][T30341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.382533][T30341] RSP: 002b:00007f038be47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.382552][T30341] RAX: ffffffffffffffda RBX: 00007f038d665fa0 RCX: 00007f038d3eaeb9 [ 453.382606][T30341] RDX: 00000000000190ec RSI: 0000200000000000 RDI: 0000000000000003 [ 453.382618][T30341] RBP: 00007f038be47090 R08: 0000000000000000 R09: 0000000000000000 [ 453.382631][T30341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.382689][T30341] R13: 00007f038d666038 R14: 00007f038d665fa0 R15: 00007fff1d12a1b8 [ 453.382709][T30341] [ 453.382717][T30341] syz.0.7512: vmalloc error: size 102636, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 453.661310][T30341] CPU: 0 UID: 0 PID: 30341 Comm: syz.0.7512 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 453.661393][T30341] Tainted: [W]=WARN [ 453.661401][T30341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 453.661417][T30341] Call Trace: [ 453.661426][T30341] [ 453.661437][T30341] __dump_stack+0x1d/0x30 [ 453.661493][T30341] dump_stack_lvl+0x95/0xd0 [ 453.661524][T30341] dump_stack+0x15/0x1b [ 453.661551][T30341] warn_alloc+0x145/0x1c0 [ 453.661587][T30341] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 453.661627][T30341] ? kvm_sched_clock_read+0x11/0x20 [ 453.661692][T30341] ? sched_clock+0x3f/0x60 [ 453.661724][T30341] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 453.661753][T30341] ? __rcu_read_unlock+0x4e/0x70 [ 453.661784][T30341] ? avc_has_perm_noaudit+0xab/0x130 [ 453.661829][T30341] ? sel_write_load+0x156/0x380 [ 453.661863][T30341] vmalloc_noprof+0x82/0xb0 [ 453.661891][T30341] ? sel_write_load+0x156/0x380 [ 453.661921][T30341] sel_write_load+0x156/0x380 [ 453.661990][T30341] ? __pfx_sel_write_load+0x10/0x10 [ 453.662026][T30341] vfs_write+0x269/0x9f0 [ 453.662078][T30341] ? __rcu_read_unlock+0x4e/0x70 [ 453.662111][T30341] ? __fget_files+0x184/0x1c0 [ 453.662173][T30341] ? mutex_lock+0x57/0x90 [ 453.662207][T30341] ksys_write+0xdc/0x1a0 [ 453.662237][T30341] __x64_sys_write+0x40/0x50 [ 453.662303][T30341] x64_sys_call+0x2847/0x3000 [ 453.662332][T30341] do_syscall_64+0xc0/0x2a0 [ 453.662369][T30341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.662400][T30341] RIP: 0033:0x7f038d3eaeb9 [ 453.662466][T30341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.662491][T30341] RSP: 002b:00007f038be47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.662518][T30341] RAX: ffffffffffffffda RBX: 00007f038d665fa0 RCX: 00007f038d3eaeb9 [ 453.662538][T30341] RDX: 00000000000190ec RSI: 0000200000000000 RDI: 0000000000000003 [ 453.662556][T30341] RBP: 00007f038be47090 R08: 0000000000000000 R09: 0000000000000000 [ 453.662570][T30341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.662603][T30341] R13: 00007f038d666038 R14: 00007f038d665fa0 R15: 00007fff1d12a1b8 [ 453.662632][T30341] [ 453.662641][T30341] Mem-Info: [ 453.900670][T30341] active_anon:47180 inactive_anon:3 isolated_anon:0 [ 453.900670][T30341] active_file:25624 inactive_file:2891 isolated_file:0 [ 453.900670][T30341] unevictable:16406 dirty:651 writeback:0 [ 453.900670][T30341] slab_reclaimable:4245 slab_unreclaimable:62561 [ 453.900670][T30341] mapped:40503 shmem:35138 pagetables:2058 [ 453.900670][T30341] sec_pagetables:0 bounce:0 [ 453.900670][T30341] kernel_misc_reclaimable:0 [ 453.900670][T30341] free:1745444 free_pcp:11683 free_cma:0 [ 453.947377][T30341] Node 0 active_anon:188720kB inactive_anon:12kB active_file:102496kB inactive_file:11564kB unevictable:65624kB isolated(anon):0kB isolated(file):0kB mapped:162012kB dirty:2604kB writeback:0kB shmem:140552kB kernel_stack:5552kB pagetables:8232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 453.976680][T30341] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 454.007752][T30341] lowmem_reserve[]: 0 2879 7858 7858 [ 454.013127][T30341] Node 0 DMA32 free:2944752kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948384kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 454.045772][T30341] lowmem_reserve[]: 0 0 4978 4978 [ 454.050841][T30341] Node 0 Normal free:4021664kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:188720kB inactive_anon:12kB active_file:102496kB inactive_file:11564kB unevictable:65624kB writepending:2572kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:43100kB local_pcp:16488kB free_cma:0kB [ 454.085884][T30341] lowmem_reserve[]: 0 0 0 0 [ 454.090504][T30341] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 454.104073][T30341] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944752kB [ 454.120933][T30341] Node 0 Normal: 2548*4kB (UM) 3624*8kB (UME) 2067*16kB (UME) 759*32kB (UME) 421*64kB (UME) 496*128kB (UME) 461*256kB (UME) 439*512kB (UM) 396*1024kB (UM) 311*2048kB (UME) 598*4096kB (UM) = 4021600kB [ 454.142144][T30341] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 454.151495][T30341] 80031 total pagecache pages [ 454.156191][T30341] 7 pages in swap cache [ 454.161031][T30341] Free swap = 124832kB [ 454.165193][T30341] Total swap = 124996kB [ 454.169938][T30341] 2097051 pages RAM [ 454.173749][T30341] 0 pages HighMem/MovableOnly [ 454.178452][T30341] 81555 pages reserved [ 454.267139][T30355] set_capacity_and_notify: 1 callbacks suppressed [ 454.267155][T30355] loop9: detected capacity change from 0 to 512 [ 454.297115][T30355] EXT4-fs (loop9): too many log groups per flexible block group [ 454.305368][T30355] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 454.313551][T30355] EXT4-fs (loop9): mount failed [ 454.375668][T30366] loop9: detected capacity change from 0 to 512 [ 454.383243][T30366] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 454.402128][T30368] loop3: detected capacity change from 0 to 256 [ 454.404170][T30366] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.421862][T30368] vfat: Unknown parameter 'èýÿÿ' [ 454.426743][T30366] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.563811][T30376] loop3: detected capacity change from 0 to 1024 [ 454.589993][T26663] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.601270][T30376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.636560][T13970] Process accounting resumed [ 454.691434][T30384] loop9: detected capacity change from 0 to 4096 [ 454.698319][T30384] EXT4-fs: Ignoring removed bh option [ 454.705260][T30384] EXT4-fs: Ignoring removed mblk_io_submit option [ 454.717649][T30384] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.746570][T28372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.777149][T26663] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.854345][ T31] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.863382][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.886397][T30396] FAULT_INJECTION: forcing a failure. [ 454.886397][T30396] name failslab, interval 1, probability 0, space 0, times 0 [ 454.892179][ T31] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.902569][T30396] CPU: 1 UID: 0 PID: 30396 Comm: syz.9.7533 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 454.902718][T30396] Tainted: [W]=WARN [ 454.902741][T30396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 454.902788][T30396] Call Trace: [ 454.902810][T30396] [ 454.902841][T30396] __dump_stack+0x1d/0x30 [ 454.902920][T30396] dump_stack_lvl+0x95/0xd0 [ 454.902994][T30396] dump_stack+0x15/0x1b [ 454.903157][T30396] should_fail_ex+0x263/0x280 [ 454.903280][T30396] ? __pfx_sock_alloc_inode+0x10/0x10 [ 454.903389][T30396] should_failslab+0x8c/0xb0 [ 454.903492][T30396] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 454.903614][T30396] ? sock_alloc_inode+0x34/0xa0 [ 454.903694][T30396] ? __pfx_sock_alloc_inode+0x10/0x10 [ 454.903781][T30396] sock_alloc_inode+0x34/0xa0 [ 454.903901][T30396] alloc_inode+0x40/0x170 [ 454.903974][T30396] do_accept+0xa0/0x390 [ 454.904068][T30396] ? _raw_spin_lock+0x52/0xa0 [ 454.904202][T30396] __sys_accept4+0xbe/0x170 [ 454.904363][T30396] __x64_sys_accept4+0x51/0x60 [ 454.904479][T30396] x64_sys_call+0x2b3e/0x3000 [ 454.904556][T30396] do_syscall_64+0xc0/0x2a0 [ 454.904666][T30396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.904748][T30396] RIP: 0033:0x7f45610aaeb9 [ 454.904832][T30396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.904971][T30396] RSP: 002b:00007f455fb07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 454.905077][T30396] RAX: ffffffffffffffda RBX: 00007f4561325fa0 RCX: 00007f45610aaeb9 [ 454.905142][T30396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 454.905188][T30396] RBP: 00007f455fb07090 R08: 0000000000000000 R09: 0000000000000000 [ 454.905234][T30396] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 454.905295][T30396] R13: 00007f4561326038 R14: 00007f4561325fa0 R15: 00007ffd2711aa48 [ 454.905364][T30396] [ 455.115569][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.132890][ T57] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.141364][ T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.161582][ T57] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.170695][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.213134][T30407] loop7: detected capacity change from 0 to 512 [ 455.220996][T30404] loop9: detected capacity change from 0 to 512 [ 455.228931][T30407] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 455.252636][T30404] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 455.290151][T30407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.305026][T30404] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.319609][T30407] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.332446][T30404] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.387095][T30419] loop3: detected capacity change from 0 to 1024 [ 455.479067][T30419] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7540: bg 0: block 392: padding at end of block bitmap is not set [ 455.500374][T30419] EXT4-fs (loop3): Remounting filesystem read-only [ 456.011607][T30445] loop9: detected capacity change from 0 to 1764 [ 456.032109][T30445] iso9660: Bad value for 'gid' [ 456.038488][T30445] iso9660: Bad value for 'gid' [ 456.062824][T30445] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7545'. [ 456.077856][T30448] syzkaller0: entered promiscuous mode [ 456.083416][T30448] syzkaller0: entered allmulticast mode [ 456.282842][T30468] sctp: [Deprecated]: syz.7.7557 (pid 30468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.282842][T30468] Use struct sctp_sack_info instead [ 456.333190][T30471] syzkaller1: entered promiscuous mode [ 456.338707][T30471] syzkaller1: entered allmulticast mode [ 456.499128][T30483] syzkaller0: entered promiscuous mode [ 456.506083][T30483] syzkaller0: entered allmulticast mode [ 456.576509][T30487] loop9: detected capacity change from 0 to 512 [ 456.585353][T30487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 456.628992][T30487] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.646572][T30489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7565'. [ 456.747568][T30487] EXT4-fs (loop9): shut down requested (0) [ 456.765659][T30487] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 456.777062][T30487] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 456.912675][T30521] netlink: 'syz.9.7573': attribute type 4 has an invalid length. [ 456.955446][T30529] syzkaller0: entered promiscuous mode [ 456.961857][T30529] syzkaller0: entered allmulticast mode [ 457.197302][T30540] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.7581: corrupted inode contents [ 457.227787][T13459] IPVS: starting estimator thread 0... [ 457.233333][T30540] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #3: comm syz.3.7581: mark_inode_dirty error [ 457.256958][T30540] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.7581: corrupted inode contents [ 457.278645][T30540] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.7581: mark_inode_dirty error [ 457.307466][T30540] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.7581: Failed to acquire dquot type 0 [ 457.315939][T30559] IPVS: using max 2112 ests per chain, 105600 per kthread [ 457.335135][T30540] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.7581: corrupted inode contents [ 457.368697][T30540] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.7581: mark_inode_dirty error [ 457.392771][T30564] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 457.423821][T30540] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.7581: corrupted inode contents [ 457.447932][T30540] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.7581: mark_inode_dirty error [ 457.503479][T30540] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.7581: corrupted inode contents [ 457.531266][T30540] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 457.561829][T30540] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.7581: corrupted inode contents [ 457.582268][T30580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7594'. [ 457.616354][T30580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7594'. [ 457.646483][T30540] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.7581: mark_inode_dirty error [ 457.668323][T30540] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 457.717583][T30540] EXT4-fs (loop3): 1 truncate cleaned up [ 457.737446][T30540] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.014742][T30629] VFS: Mount too revealing [ 458.068601][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 458.068628][ T29] audit: type=1400 audit(1770161818.894:62191): avc: denied { associate } for pid=30628 comm="syz.1.7607" name="fsv1,errors=remount-ro,nobh,grpquota.." scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 458.260889][T30653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 458.298011][T30653] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.395762][T30653] EXT4-fs (loop3): shut down requested (0) [ 458.420786][T30653] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 458.430554][T30653] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 458.469498][ T29] audit: type=1326 audit(1770161819.314:62192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30663 comm="syz.0.7621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 458.559172][ T29] audit: type=1326 audit(1770161819.345:62193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30663 comm="syz.0.7621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 458.584085][ T29] audit: type=1326 audit(1770161819.345:62194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30663 comm="syz.0.7621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 458.609130][ T29] audit: type=1326 audit(1770161819.345:62195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30663 comm="syz.0.7621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 458.632770][ T29] audit: type=1326 audit(1770161819.345:62196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30665 comm="syz.0.7621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f038d3ab78e code=0x7ffc0000 [ 458.657881][ T29] audit: type=1326 audit(1770161819.345:62197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30663 comm="syz.0.7621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 458.682421][ T29] audit: type=1326 audit(1770161819.345:62198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30663 comm="syz.0.7621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 458.707589][ T29] audit: type=1326 audit(1770161819.345:62199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30663 comm="syz.0.7621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 458.732770][ T29] audit: type=1326 audit(1770161819.345:62200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30663 comm="syz.0.7621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 458.779880][T30669] sctp: [Deprecated]: syz.7.7622 (pid 30669) Use of int in maxseg socket option. [ 458.779880][T30669] Use struct sctp_assoc_value instead [ 458.801814][T30669] EXT4-fs warning (device loop7): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 458.868203][T30679] dvmrp1: entered allmulticast mode [ 459.110315][T30699] set_capacity_and_notify: 3 callbacks suppressed [ 459.110329][T30699] loop9: detected capacity change from 0 to 512 [ 459.136237][T30699] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 459.168998][T30699] EXT4-fs (loop9): external journal device major/minor numbers have changed [ 459.178154][T30699] EXT4-fs (loop9): failed to open journal device unknown-block(8,0) -16 [ 459.188038][T30704] dvmrp1: left allmulticast mode [ 459.209876][T30703] loop7: detected capacity change from 0 to 2048 [ 459.232996][T30703] EXT4-fs mount: 12 callbacks suppressed [ 459.233017][T30703] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.370362][T30703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7633'. [ 459.408798][T30703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.565990][T30771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.609398][T30771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.679008][T30777] loop3: detected capacity change from 0 to 512 [ 459.702458][T30777] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 459.725488][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.762618][T30777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.785193][T30781] loop7: detected capacity change from 0 to 512 [ 459.820399][T30781] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 459.832776][T30777] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.871123][T30781] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.953683][T30781] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.150898][T30781] EXT4-fs (loop7): shut down requested (0) [ 460.163239][T30781] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 460.174131][T30781] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 460.209740][T30799] EXT4-fs (loop3): shut down requested (0) [ 460.282247][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.334638][T30826] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7644'. [ 460.364046][T30826] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7644'. [ 460.419659][T30777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7639'. [ 460.573796][T30853] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7648'. [ 460.586073][T28372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.879382][T30877] loop7: detected capacity change from 0 to 512 [ 460.909763][T30877] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 460.958119][T30877] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.981666][T30877] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.155214][T30877] EXT4-fs (loop7): shut down requested (0) [ 461.181385][T30877] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 461.191934][T30877] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 461.262970][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.492446][T30923] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7662'. [ 461.667660][T30937] loop9: detected capacity change from 0 to 512 [ 461.724978][T30937] EXT4-fs (loop9): orphan cleanup on readonly fs [ 461.731680][T30937] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 461.745918][T30944] loop3: detected capacity change from 0 to 512 [ 461.763019][T30937] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 461.778854][T30944] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 461.813310][T30937] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.7670: attempt to clear invalid blocks 2 len 1 [ 461.829250][T30937] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.7670: invalid indirect mapped block 1819239214 (level 0) [ 461.869462][T30944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.886154][T30944] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.902366][T30937] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.7670: invalid indirect mapped block 1819239214 (level 1) [ 461.928839][T30937] EXT4-fs (loop9): 1 truncate cleaned up [ 461.956574][T30944] EXT4-fs (loop3): shut down requested (0) [ 461.968615][T30937] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 461.984242][T30944] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 461.993250][T30944] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 462.006303][T30962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7676'. [ 462.040168][T30937] EXT4-fs error (device loop9): ext4_lookup:1782: inode #2: comm syz.9.7670: 'file1' linked to parent dir [ 462.060454][T30974] loop7: detected capacity change from 0 to 512 [ 462.083220][T28372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.111180][T30974] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #3: comm syz.7.7675: corrupted inode contents [ 462.149490][T26663] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.173423][T30974] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #3: comm syz.7.7675: mark_inode_dirty error [ 462.191834][T30974] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #3: comm syz.7.7675: corrupted inode contents [ 462.213123][T30974] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.7675: mark_inode_dirty error [ 462.249653][T30989] FAULT_INJECTION: forcing a failure. [ 462.249653][T30989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.263655][T30989] CPU: 0 UID: 0 PID: 30989 Comm: syz.3.7677 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 462.263746][T30989] Tainted: [W]=WARN [ 462.263754][T30989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.263768][T30989] Call Trace: [ 462.263776][T30989] [ 462.263787][T30989] __dump_stack+0x1d/0x30 [ 462.263821][T30989] dump_stack_lvl+0x95/0xd0 [ 462.263899][T30989] dump_stack+0x15/0x1b [ 462.263920][T30989] should_fail_ex+0x263/0x280 [ 462.264003][T30989] should_fail+0xb/0x20 [ 462.264064][T30989] should_fail_usercopy+0x1a/0x20 [ 462.264108][T30989] _copy_from_user+0x1c/0xb0 [ 462.264136][T30989] ___sys_sendmsg+0xc1/0x1e0 [ 462.264180][T30989] __x64_sys_sendmsg+0xd4/0x160 [ 462.264283][T30989] x64_sys_call+0x17ba/0x3000 [ 462.264367][T30989] do_syscall_64+0xc0/0x2a0 [ 462.264475][T30989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.264504][T30989] RIP: 0033:0x7f3b41ceaeb9 [ 462.264529][T30989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.264552][T30989] RSP: 002b:00007f3b40747028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.264573][T30989] RAX: ffffffffffffffda RBX: 00007f3b41f65fa0 RCX: 00007f3b41ceaeb9 [ 462.264587][T30989] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000012 [ 462.264636][T30989] RBP: 00007f3b40747090 R08: 0000000000000000 R09: 0000000000000000 [ 462.264649][T30989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.264664][T30989] R13: 00007f3b41f66038 R14: 00007f3b41f65fa0 R15: 00007ffcbad792d8 [ 462.264692][T30989] [ 462.434268][T30974] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.7675: Failed to acquire dquot type 0 [ 462.459658][T30974] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.7675: corrupted inode contents [ 462.475263][T30974] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #16: comm syz.7.7675: mark_inode_dirty error [ 462.490714][T30974] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.7675: corrupted inode contents [ 462.503967][T30974] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.7675: mark_inode_dirty error [ 462.586165][T30974] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.7675: corrupted inode contents [ 462.645527][T31018] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7686'. [ 462.653614][T30974] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 462.658010][T31018] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7686'. [ 462.703403][T31009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7686'. [ 462.704671][T30974] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.7675: corrupted inode contents [ 462.727011][T30974] EXT4-fs error (device loop7): ext4_truncate:4635: inode #16: comm syz.7.7675: mark_inode_dirty error [ 462.739725][T30974] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 462.749844][T30974] EXT4-fs (loop7): 1 truncate cleaned up [ 462.757152][T30974] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.772012][T30974] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.805315][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.896713][T31034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7694'. [ 463.185522][T31057] netlink: 'syz.0.7704': attribute type 1 has an invalid length. [ 463.222699][T31065] netlink: 'syz.9.7705': attribute type 1 has an invalid length. [ 463.239348][T31057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=31057 comm=syz.0.7704 [ 463.302844][T31071] bond2: (slave geneve2): making interface the new active one [ 463.312699][T31071] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 463.323204][ T37] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 463.345432][ T37] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 463.356446][ T37] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 463.383975][ T37] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 463.576186][T31100] loop7: detected capacity change from 0 to 512 [ 463.583672][T31102] FAULT_INJECTION: forcing a failure. [ 463.583672][T31102] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 463.598544][T31102] CPU: 1 UID: 0 PID: 31102 Comm: syz.3.7720 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 463.598582][T31102] Tainted: [W]=WARN [ 463.598589][T31102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.598652][T31102] Call Trace: [ 463.598661][T31102] [ 463.598666][T31100] EXT4-fs (loop7): orphan cleanup on readonly fs [ 463.598672][T31102] __dump_stack+0x1d/0x30 [ 463.598705][T31102] dump_stack_lvl+0x95/0xd0 [ 463.598820][T31102] dump_stack+0x15/0x1b [ 463.598901][T31102] should_fail_ex+0x263/0x280 [ 463.599052][T31102] should_fail_alloc_page+0xf2/0x100 [ 463.599141][T31102] __alloc_frozen_pages_noprof+0x108/0x350 [ 463.599297][T31102] alloc_pages_mpol+0xb3/0x260 [ 463.599472][T31102] alloc_pages_noprof+0x8f/0x130 [ 463.599587][T31102] get_free_pages_noprof+0xc/0x40 [ 463.599687][T31102] proc_pid_cmdline_read+0x2df/0x6b0 [ 463.599784][T31102] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 463.599869][T31102] vfs_readv+0x432/0x6e0 [ 463.599988][T31102] __x64_sys_preadv+0xfd/0x1c0 [ 463.600070][T31102] x64_sys_call+0x2805/0x3000 [ 463.600258][T31102] do_syscall_64+0xc0/0x2a0 [ 463.600377][T31102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.600452][T31102] RIP: 0033:0x7f3b41ceaeb9 [ 463.600548][T31102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.600743][T31102] RSP: 002b:00007f3b40747028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 463.600897][T31102] RAX: ffffffffffffffda RBX: 00007f3b41f65fa0 RCX: 00007f3b41ceaeb9 [ 463.600952][T31102] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 463.600994][T31102] RBP: 00007f3b40747090 R08: 0000000000000000 R09: 0000000000000000 [ 463.601041][T31102] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 463.601124][T31102] R13: 00007f3b41f66038 R14: 00007f3b41f65fa0 R15: 00007ffcbad792d8 [ 463.601207][T31102] [ 463.615170][T31074] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7711'. [ 463.631092][T31100] EXT4-fs error (device loop7): ext4_quota_enable:7177: comm syz.7.7721: inode #218103808: comm syz.7.7721: iget: illegal inode # [ 463.631288][T31100] EXT4-fs error (device loop7): ext4_quota_enable:7180: comm syz.7.7721: Bad quota inode: 218103808, type: 2 [ 463.631456][T31100] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 463.631853][T31100] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 463.865695][T31100] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 463.887065][T31100] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7721'. [ 463.918095][T31109] loop3: detected capacity change from 0 to 1764 [ 463.934881][T31109] iso9660: Bad value for 'gid' [ 463.938623][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.939688][T31109] iso9660: Bad value for 'gid' [ 463.947017][T31109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7733'. [ 464.033145][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 464.033165][ T29] audit: type=1400 audit(1770161825.140:62282): avc: denied { setopt } for pid=31115 comm="syz.7.7724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 464.110546][T31119] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7726'. [ 464.135798][T31122] syzkaller0: entered promiscuous mode [ 464.141343][T31122] syzkaller0: entered allmulticast mode [ 464.188957][T31129] loop7: detected capacity change from 0 to 128 [ 464.308381][T31145] IPv6: Can't replace route, no match found [ 464.340545][ T29] audit: type=1400 audit(1770161825.476:62283): avc: denied { connect } for pid=31150 comm="syz.1.7741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 464.395578][T31154] loop7: detected capacity change from 0 to 1764 [ 464.412567][T31154] iso9660: Bad value for 'gid' [ 464.417388][T31154] iso9660: Bad value for 'gid' [ 464.567847][T31173] syzkaller0: entered promiscuous mode [ 464.573519][T31173] syzkaller0: entered allmulticast mode [ 464.672075][T31182] x_tables: duplicate underflow at hook 2 [ 464.961497][T31209] loop3: detected capacity change from 0 to 512 [ 464.978783][T31209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 465.003465][T31209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.023325][T31214] loop7: detected capacity change from 0 to 128 [ 465.026750][T31209] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.154234][T31221] xt_CT: You must specify a L4 protocol and not use inversions on it [ 465.157927][T31221] loop7: detected capacity change from 0 to 512 [ 465.192564][T31221] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.222806][T31221] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.263855][T31221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.282378][T31221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.301711][T31219] EXT4-fs (loop3): shut down requested (0) [ 465.595141][T28372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.829765][T31260] loop9: detected capacity change from 0 to 512 [ 465.843781][T31260] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.957915][T31260] program syz.9.7775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.982553][ T29] audit: type=1400 audit(1770161827.198:62284): avc: denied { unlink } for pid=27483 comm="syz-executor" name="file1" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 466.007283][ T29] audit: type=1400 audit(1770161827.208:62285): avc: denied { unmount } for pid=27483 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 466.039129][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.063380][ T29] audit: type=1400 audit(1770161827.229:62286): avc: denied { unlink } for pid=27483 comm="syz-executor" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 466.107956][T31277] loop7: detected capacity change from 0 to 512 [ 466.114767][T31275] loop3: detected capacity change from 0 to 1764 [ 466.115147][T31275] iso9660: Bad value for 'gid' [ 466.115162][T31275] iso9660: Bad value for 'gid' [ 466.137364][T31277] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 466.184888][T31277] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.206267][T31277] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.380135][T31277] EXT4-fs (loop7): shut down requested (0) [ 466.443487][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.549603][ T2964] hid-generic 0008:0001:0005.0027: item fetching failed at offset 0/1 [ 466.556465][T31315] __nla_validate_parse: 3 callbacks suppressed [ 466.556504][T31315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7797'. [ 466.564673][T31320] loop3: detected capacity change from 0 to 128 [ 466.581672][ T2964] hid-generic 0008:0001:0005.0027: probe with driver hid-generic failed with error -22 [ 466.691960][T26663] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.708114][T31336] team0 (unregistering): Port device team_slave_0 removed [ 466.749735][T31336] team0 (unregistering): Port device team_slave_1 removed [ 466.770581][T31344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7806'. [ 466.803444][T31343] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 466.847113][T31343] ext4 filesystem being mounted at /220/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 466.947521][T26663] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.064827][T31372] iso9660: Bad value for 'gid' [ 467.071053][T31372] iso9660: Bad value for 'gid' [ 467.096348][T31379] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 467.103968][T31379] FAT-fs (loop7): Filesystem has been set read-only [ 467.111503][T31372] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7815'. [ 467.182777][T31384] C: renamed from team_slave_0 (while UP) [ 467.190220][T31384] netlink: 'syz.7.7819': attribute type 3 has an invalid length. [ 467.199372][T31384] netlink: 136 bytes leftover after parsing attributes in process `syz.7.7819'. [ 467.213365][T31384] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7819'. [ 467.242432][T31384] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 467.265873][ T29] audit: type=1326 audit(1770161828.541:62287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31388 comm="syz.9.7821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45610aaeb9 code=0x7ffc0000 [ 467.291312][ T29] audit: type=1326 audit(1770161828.541:62288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31388 comm="syz.9.7821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45610aaeb9 code=0x7ffc0000 [ 467.316467][ T29] audit: type=1326 audit(1770161828.541:62289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31388 comm="syz.9.7821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f45610aaeb9 code=0x7ffc0000 [ 467.327883][T31384] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.342288][ T29] audit: type=1326 audit(1770161828.541:62290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31388 comm="syz.9.7821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45610aaeb9 code=0x7ffc0000 [ 467.377614][ T29] audit: type=1326 audit(1770161828.541:62291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31388 comm="syz.9.7821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45610aaeb9 code=0x7ffc0000 [ 467.435435][T27483] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.601935][T31399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31399 comm=syz.9.7825 [ 467.712347][T31423] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.731002][T31423] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.750783][T31423] 9p: Bad value for 'rfdno' [ 467.762112][T31421] team0 (unregistering): Port device team_slave_0 removed [ 467.770645][T31421] team0 (unregistering): Port device team_slave_1 removed [ 467.784187][T31421] team0 (unregistering): Port device dummy0 removed [ 467.965311][T31430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=31430 comm=syz.3.7832 [ 468.068048][T31434] EXT4-fs: Ignoring removed oldalloc option [ 468.074099][T31434] EXT4-fs: Ignoring removed bh option [ 468.104055][T31434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.142974][T28372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.344883][T31448] syzkaller0: entered promiscuous mode [ 468.350551][T31448] syzkaller0: entered allmulticast mode [ 468.389833][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.455186][ T3423] IPVS: starting estimator thread 0... [ 468.509017][T31461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 468.539155][T31461] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.553635][T31459] IPVS: using max 2208 ests per chain, 110400 per kthread [ 468.566047][T31461] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.609144][T26663] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.720227][T31474] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 468.789431][T31481] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7850'. [ 468.858605][T31483] set_capacity_and_notify: 7 callbacks suppressed [ 468.858633][T31483] loop9: detected capacity change from 0 to 1024 [ 468.922673][T31483] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 468.946811][T31491] futex_wake_op: syz.7.7854 tries to shift op by -3; fix this program [ 468.996348][T31483] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #11: comm syz.9.7845: iget: bogus i_mode (1) [ 469.011916][T31483] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.7845: couldn't read orphan inode 11 (err -117) [ 469.110643][T31500] loop7: detected capacity change from 0 to 512 [ 469.122480][T31500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 469.128092][T31499] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 469.159965][T31483] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.180983][T31500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.201590][T31500] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.222814][T31499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7858'. [ 469.255833][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.295856][T31507] netlink: 'syz.7.7859': attribute type 1 has an invalid length. [ 469.312743][T31507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.327579][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 469.327597][ T29] audit: type=1400 audit(1770161830.715:62411): avc: denied { getopt } for pid=31478 comm="syz.9.7845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 469.444232][T31513] bond4: (slave veth3): Enslaving as an active interface with a down link [ 469.468849][T31523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31523 comm=syz.1.7862 [ 469.484313][T31518] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 469.510669][T31526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7865'. [ 469.526797][T31518] bond4: (slave batadv1): making interface the new active one [ 469.540787][T31518] batadv1: entered promiscuous mode [ 469.547568][T31518] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 469.688980][ T29] audit: type=1326 audit(1770161831.082:62412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31534 comm="syz.0.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 469.738604][T26663] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.744777][ T29] audit: type=1326 audit(1770161831.114:62413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31534 comm="syz.0.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 469.772711][ T29] audit: type=1326 audit(1770161831.114:62414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31534 comm="syz.0.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 469.797117][ T29] audit: type=1326 audit(1770161831.124:62415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31534 comm="syz.0.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 469.822259][ T29] audit: type=1326 audit(1770161831.124:62416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31534 comm="syz.0.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 469.846639][ T29] audit: type=1326 audit(1770161831.124:62417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31534 comm="syz.0.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 469.871852][ T29] audit: type=1326 audit(1770161831.124:62418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31534 comm="syz.0.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 469.897144][ T29] audit: type=1326 audit(1770161831.124:62419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31534 comm="syz.0.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 469.921528][ T29] audit: type=1326 audit(1770161831.124:62420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31534 comm="syz.0.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 469.965767][T31539] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7871'. [ 470.005577][T31540] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7875'. [ 470.051837][T31540] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 470.133278][T31560] xt_ecn: cannot match TCP bits for non-tcp packets [ 470.223186][T31556] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 470.235132][T31556] bond5 (unregistering): Released all slaves [ 470.265925][T31570] loop3: detected capacity change from 0 to 512 [ 470.280083][T31570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 470.333209][T31570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.348065][T31570] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.373869][T31588] loop7: detected capacity change from 0 to 512 [ 470.405447][T31588] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 470.450777][T31588] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.7886: invalid indirect mapped block 83886080 (level 1) [ 470.475325][T31588] EXT4-fs (loop7): Remounting filesystem read-only [ 470.496770][T31588] EXT4-fs (loop7): 1 orphan inode deleted [ 470.502599][T31588] EXT4-fs (loop7): 1 truncate cleaned up [ 470.520806][T31588] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.562390][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.626771][T31594] EXT4-fs (loop3): shut down requested (0) [ 470.754776][T31616] FAULT_INJECTION: forcing a failure. [ 470.754776][T31616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.769246][T31616] CPU: 1 UID: 0 PID: 31616 Comm: syz.0.7899 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 470.769415][T31616] Tainted: [W]=WARN [ 470.769422][T31616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 470.769434][T31616] Call Trace: [ 470.769440][T31616] [ 470.769447][T31616] __dump_stack+0x1d/0x30 [ 470.769477][T31616] dump_stack_lvl+0x95/0xd0 [ 470.769522][T31616] dump_stack+0x15/0x1b [ 470.769540][T31616] should_fail_ex+0x263/0x280 [ 470.769601][T31616] should_fail+0xb/0x20 [ 470.769634][T31616] should_fail_usercopy+0x1a/0x20 [ 470.769669][T31616] _copy_from_user+0x1c/0xb0 [ 470.769750][T31616] ___sys_sendmsg+0xc1/0x1e0 [ 470.769784][T31616] __x64_sys_sendmsg+0xd4/0x160 [ 470.769814][T31616] x64_sys_call+0x17ba/0x3000 [ 470.769845][T31616] do_syscall_64+0xc0/0x2a0 [ 470.769992][T31616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.770015][T31616] RIP: 0033:0x7f038d3eaeb9 [ 470.770033][T31616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.770060][T31616] RSP: 002b:00007f038be47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.770109][T31616] RAX: ffffffffffffffda RBX: 00007f038d665fa0 RCX: 00007f038d3eaeb9 [ 470.770124][T31616] RDX: 00000000000000c0 RSI: 00002000000007c0 RDI: 0000000000000004 [ 470.770137][T31616] RBP: 00007f038be47090 R08: 0000000000000000 R09: 0000000000000000 [ 470.770206][T31616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.770231][T31616] R13: 00007f038d666038 R14: 00007f038d665fa0 R15: 00007fff1d12a1b8 [ 470.770258][T31616] [ 470.941500][T28372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.176657][T31629] loop9: detected capacity change from 0 to 256 [ 471.279194][T31629] FAT-fs (loop9): Directory bread(block 64) failed [ 471.285752][T31629] FAT-fs (loop9): Directory bread(block 65) failed [ 471.300433][T31631] loop3: detected capacity change from 0 to 512 [ 471.307728][T31629] FAT-fs (loop9): Directory bread(block 66) failed [ 471.314287][T31629] FAT-fs (loop9): Directory bread(block 67) failed [ 471.334210][T31629] FAT-fs (loop9): Directory bread(block 68) failed [ 471.345632][T31629] FAT-fs (loop9): Directory bread(block 69) failed [ 471.352194][T31629] FAT-fs (loop9): Directory bread(block 70) failed [ 471.378314][T31629] FAT-fs (loop9): Directory bread(block 71) failed [ 471.403380][T31629] FAT-fs (loop9): Directory bread(block 72) failed [ 471.409993][T31629] FAT-fs (loop9): Directory bread(block 73) failed [ 471.467496][T31644] syz.9.7905: attempt to access beyond end of device [ 471.467496][T31644] loop9: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 471.482151][T31631] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.7903: corrupted inode contents [ 471.505759][T31631] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #3: comm syz.3.7903: mark_inode_dirty error [ 471.579391][T31631] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.7903: corrupted inode contents [ 471.615023][T31631] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.7903: mark_inode_dirty error [ 471.665828][T31652] syzkaller0: entered promiscuous mode [ 471.672900][T31652] syzkaller0: entered allmulticast mode [ 471.682596][T31631] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.7903: Failed to acquire dquot type 0 [ 471.718428][T31655] __nla_validate_parse: 6 callbacks suppressed [ 471.718448][T31655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7911'. [ 471.743474][T31631] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.7903: corrupted inode contents [ 471.812594][T31660] block device autoloading is deprecated and will be removed. [ 471.835610][T31663] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 471.853487][T31631] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.7903: mark_inode_dirty error [ 471.866992][T31631] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.7903: corrupted inode contents [ 471.885030][T31631] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.7903: mark_inode_dirty error [ 471.900211][T31631] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.7903: corrupted inode contents [ 471.912845][T31663] loop9: detected capacity change from 0 to 512 [ 471.913254][T31631] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 471.928301][T31631] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.7903: corrupted inode contents [ 471.942119][T31663] EXT4-fs: dax option not supported [ 471.966776][T31631] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.7903: mark_inode_dirty error [ 471.994136][T31631] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 472.037333][T31667] netlink: 'syz.9.7916': attribute type 10 has an invalid length. [ 472.054503][T31631] EXT4-fs (loop3): 1 truncate cleaned up [ 472.066402][T31631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.081310][T31667] veth0_vlan: entered allmulticast mode [ 472.126478][T31631] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.167937][T31675] netlink: 27 bytes leftover after parsing attributes in process `syz.9.7918'. [ 472.295533][T31682] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 472.327478][T28372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.393250][T31682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7920'. [ 472.409086][T31684] loop3: detected capacity change from 0 to 1024 [ 472.441488][T31684] ext4: Bad value for 'resuid' [ 472.446405][T31684] ext4: Bad value for 'resuid' [ 472.781083][T31699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7926'. [ 473.072030][T31710] x_tables: duplicate underflow at hook 2 [ 473.098881][T31712] futex_wake_op: syz.0.7931 tries to shift op by -3; fix this program [ 473.307758][T31717] syzkaller0: entered promiscuous mode [ 473.313280][T31717] syzkaller0: entered allmulticast mode [ 473.875316][T31749] loop9: detected capacity change from 0 to 1024 [ 473.889631][T31749] ext4: Bad value for 'resuid' [ 473.894460][T31749] ext4: Bad value for 'resuid' [ 474.106976][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 474.106995][ T29] audit: type=1326 audit(1770161835.722:62515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31760 comm="syz.0.7951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 474.138169][ T29] audit: type=1326 audit(1770161835.722:62516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31760 comm="syz.0.7951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 474.162607][ T29] audit: type=1326 audit(1770161835.722:62517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31760 comm="syz.0.7951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 474.187478][ T29] audit: type=1326 audit(1770161835.722:62518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31760 comm="syz.0.7951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 474.212625][ T29] audit: type=1326 audit(1770161835.722:62519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31760 comm="syz.0.7951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 474.237026][ T29] audit: type=1326 audit(1770161835.722:62520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31760 comm="syz.0.7951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 474.262044][ T29] audit: type=1326 audit(1770161835.722:62521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31760 comm="syz.0.7951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 474.286364][ T29] audit: type=1326 audit(1770161835.722:62522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31760 comm="syz.0.7951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 474.311274][ T29] audit: type=1326 audit(1770161835.722:62523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31760 comm="syz.0.7951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 474.336384][ T29] audit: type=1326 audit(1770161835.722:62524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31760 comm="syz.0.7951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f038d3eaeb9 code=0x7ffc0000 [ 474.518201][T31769] syzkaller0: entered promiscuous mode [ 474.523749][T31769] syzkaller0: entered allmulticast mode [ 474.807288][T31805] xt_connbytes: Forcing CT accounting to be enabled [ 474.826803][T31805] Cannot find set identified by id 0 to match [ 474.986747][T31811] syzkaller0: entered promiscuous mode [ 474.993670][T31811] syzkaller0: entered allmulticast mode [ 475.041425][T31821] loop7: detected capacity change from 0 to 1024 [ 475.074809][ T3306] ================================================================== [ 475.082941][ T3306] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 475.091298][ T3306] [ 475.093646][ T3306] write to 0xffffea0007007218 of 8 bytes by task 31821 on cpu 1: [ 475.101384][ T3306] delete_from_page_cache_batch+0x32c/0x740 [ 475.107320][ T3306] truncate_inode_pages_range+0x1fe/0x7e0 [ 475.113093][ T3306] truncate_inode_pages+0x24/0x30 [ 475.118169][ T3306] set_blocksize+0x254/0x310 [ 475.122800][ T3306] sb_set_blocksize+0x93/0x170 [ 475.127601][ T3306] sb_min_blocksize+0x53/0x60 [ 475.132319][ T3306] ext4_fill_super+0x3a1/0x3800 [ 475.137204][ T3306] get_tree_bdev_flags+0x291/0x300 [ 475.142364][ T3306] get_tree_bdev+0x1f/0x30 [ 475.146822][ T3306] ext4_get_tree+0x1c/0x30 [ 475.151285][ T3306] vfs_get_tree+0x57/0x1d0 [ 475.155728][ T3306] do_new_mount+0x288/0x700 [ 475.160263][ T3306] path_mount+0x4d0/0xbc0 [ 475.164612][ T3306] __se_sys_mount+0x28c/0x2e0 [ 475.169322][ T3306] __x64_sys_mount+0x67/0x80 [ 475.173950][ T3306] x64_sys_call+0x2cca/0x3000 [ 475.178658][ T3306] do_syscall_64+0xc0/0x2a0 [ 475.183209][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.189124][ T3306] [ 475.191473][ T3306] read to 0xffffea0007007218 of 8 bytes by task 3306 on cpu 0: [ 475.199037][ T3306] folio_mapping+0xa1/0xe0 [ 475.203481][ T3306] lru_add+0x8d/0x480 [ 475.207497][ T3306] folio_batch_move_lru+0x1c5/0x270 [ 475.212723][ T3306] lru_add_drain_cpu+0x66/0x210 [ 475.217610][ T3306] __folio_batch_release+0x44/0xb0 [ 475.222760][ T3306] shmem_undo_range+0x3af/0xb10 [ 475.227645][ T3306] shmem_evict_inode+0x12e/0x510 [ 475.232616][ T3306] evict+0x2af/0x510 [ 475.236554][ T3306] iput+0x4b9/0x650 [ 475.240397][ T3306] dentry_unlink_inode+0x24f/0x260 [ 475.245564][ T3306] __dentry_kill+0x13f/0x460 [ 475.250203][ T3306] finish_dput+0x2b/0x200 [ 475.254562][ T3306] dput+0x52/0x60 [ 475.258238][ T3306] do_renameat2+0x475/0x850 [ 475.262775][ T3306] __x64_sys_rename+0x58/0x70 [ 475.267485][ T3306] x64_sys_call+0x24e/0x3000 [ 475.272112][ T3306] do_syscall_64+0xc0/0x2a0 [ 475.276646][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.282576][ T3306] [ 475.284927][ T3306] value changed: 0xffff888100483720 -> 0x0000000000000000 [ 475.292045][ T3306] [ 475.294386][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 475.300574][ T3306] CPU: 0 UID: 0 PID: 3306 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 475.311466][ T3306] Tainted: [W]=WARN [ 475.315294][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.325386][ T3306] ================================================================== [ 475.356032][T31821] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.371023][T31821] EXT4-fs warning (device loop7): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 475.387937][T31828] EXT4-fs warning (device loop7): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 475.414824][T27483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.756949][ T37] batadv1: left promiscuous mode