last executing test programs: 4m41.915380686s ago: executing program 32 (id=286): arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x0, @perf_config_ext={0x8001, 0xf}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6d23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 4m8.797457947s ago: executing program 1 (id=1091): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x8100, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) 4m8.705069873s ago: executing program 1 (id=1095): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x11}, 0x68) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x8, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m8.639820977s ago: executing program 1 (id=1097): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = dup2(r0, r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0x1c, &(0x7f0000000440)={&(0x7f00000020c0)=ANY=[@ANYBLOB="80"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20004844) 4m8.639228817s ago: executing program 1 (id=1099): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x5c, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}}, @redirect={0x5, 0x2, 0x0, @remote, {0x10, 0x4, 0x3, 0x5, 0x501, 0x68, 0x7f2, 0x48, 0x1, 0xf, @local, @remote, {[@rr={0x7, 0x23, 0x27, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x82, 0x6, "29b8824f"}]}}}}}}}, 0x0) 4m8.611710628s ago: executing program 1 (id=1101): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 4m8.571570601s ago: executing program 1 (id=1102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffa}}}}}, 0x28}}, 0x0) 3m53.359968107s ago: executing program 33 (id=1102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffa}}}}}, 0x28}}, 0x0) 3m39.944757328s ago: executing program 4 (id=1805): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, r0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x44840) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x5) 3m39.91898962s ago: executing program 4 (id=1806): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x5495, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0x1d}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r4, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48c4}}], 0x1, 0x1d3) 3m39.778306348s ago: executing program 4 (id=1807): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) futex(0x0, 0xb, 0x4, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 3m39.534819742s ago: executing program 4 (id=1813): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet(0x2, 0x2, 0x1) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="3c1b5ce3a608ac0f", 0x8}], 0x1}, 0x10) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) 3m39.382265721s ago: executing program 4 (id=1817): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba06", 0x1b}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794", 0xbd}], 0x3}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m38.965966566s ago: executing program 4 (id=1825): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e21, 0x3, 'sed\x00', 0x1, 0x80005, 0x6f}, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m38.965796675s ago: executing program 34 (id=1825): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e21, 0x3, 'sed\x00', 0x1, 0x80005, 0x6f}, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m13.310452867s ago: executing program 3 (id=2411): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 3m13.190900304s ago: executing program 3 (id=2417): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 3m13.119049589s ago: executing program 3 (id=2422): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) creat(&(0x7f0000000240)='./file0\x00', 0x14) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r3, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3m13.029799054s ago: executing program 3 (id=2431): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) fsopen(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x32, 0x9e98, 0x7, 0x200003, 0x7, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0xa0001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext={0x200, 0x3}, 0x880, 0x34, 0x9, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xd0}}, 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 3m12.774825389s ago: executing program 3 (id=2447): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m12.711151893s ago: executing program 3 (id=2440): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) 2m59.659196342s ago: executing program 6 (id=2712): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300), 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0xd1bc2b5}, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)='\x00R', 0x2}], 0x1, 0x0, 0x0, 0x80fe}, 0x0) 2m58.763087845s ago: executing program 6 (id=2727): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendmmsg$inet6(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="83", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)='8', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000001b00)="b4f7", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x84) 2m57.952589502s ago: executing program 6 (id=2741): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x3000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 2m57.916654405s ago: executing program 6 (id=2744): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x100000, 0xe898d2275f586979) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 2m57.718780976s ago: executing program 6 (id=2748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 2m57.688055378s ago: executing program 35 (id=2440): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) 2m56.426974632s ago: executing program 6 (id=2763): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r2, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r2, &(0x7f00000000c0)={0x9, 0x9, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) r3 = getpid() ptrace$getenv(0x4201, r3, 0x6, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd692c0b5800283afffe88fcffffffffffffff000000000101fe8000000000000000000000000000aa"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x1005, 0x8, 0x80000403, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x7}, 0x9c) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r4) r5 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x4000, 0x10000, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, &(0x7f0000000180), 0xfe) r6 = socket$packet(0x11, 0x2, 0x300) sendto(r6, &(0x7f0000000780)="0f7762", 0x10004, 0x4008, &(0x7f0000000880)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x4}}, 0x80) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x25}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x2c}}, 0x20004010) 2m56.383307465s ago: executing program 36 (id=2763): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r2, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r2, &(0x7f00000000c0)={0x9, 0x9, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) r3 = getpid() ptrace$getenv(0x4201, r3, 0x6, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd692c0b5800283afffe88fcffffffffffffff000000000101fe8000000000000000000000000000aa"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x1005, 0x8, 0x80000403, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x7}, 0x9c) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r4) r5 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x4000, 0x10000, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, &(0x7f0000000180), 0xfe) r6 = socket$packet(0x11, 0x2, 0x300) sendto(r6, &(0x7f0000000780)="0f7762", 0x10004, 0x4008, &(0x7f0000000880)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x4}}, 0x80) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x25}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x2c}}, 0x20004010) 39.449136144s ago: executing program 8 (id=4728): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41, 0x8fff}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) 39.392082458s ago: executing program 8 (id=4729): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x8930, &(0x7f0000000000)="133ff126d0638832dc2afa9036") 39.19489733s ago: executing program 8 (id=4733): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x1, 0x0, 0x100000000004, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x20000000, 0x0, 0xc, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "53c272d8b763f690b35605dff8a4a8d2", "44000100", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) close(r1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5218) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x20082, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 39.1945215s ago: executing program 8 (id=4734): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 39.085961796s ago: executing program 8 (id=4735): r0 = eventfd(0xf39) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x104) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x85, 0x0, &(0x7f0000002640)) link(&(0x7f00000003c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001000)=@newtaction={0xe1c, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xc0, 0x1, [@m_simple={0xbc, 0x18, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '$)--\x00'}, @TCA_DEF_DATA={0x59, 0x3, '*+\x00\x95\xf79\xe2\x0f\xd9\x86\xf0&\xcb\x96h\x06\r\xb1\x9d\x89]\xbd\x94\x99\xeda\xafX%\x99\xdd\xea\xc30\x96i+\rnV\xf5\xde\xeaj2>\xd5]\x85\xf2\xcc\x9a\xe7 \x85\x85{\x95\xe3\x188\xe7\x15Q\x15\xe1A2\x19\xb5<\x10Z\xb2\xd4c\xae\x00\x00\x00\x00\x00\x00\x00\x00'}, @TCA_DEF_DATA={0x7, 0x3, '\'%\x00'}]}, {0x1d, 0x6, "c92acebef543cf5eac95ff99fd6f0f8ca3945cf1e27303fef4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x134, 0x1, [@m_simple={0x104, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'fnow\x05'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x40000000, 0x0, 0x9}}]}, {0xb4, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58402dd443e92602f7994c557e40094500a136bb53cc323abe8e9a032feb3b1811b3f9149f6f05ff436ae121782b9f13ed2deb3fee8a17863c1d88b38005a4604a93ebbc213530b8e07f71d1175d1580cb57e68478f9edf7f8e766c01a7ba01dde9f5efc04e3eb55e8d86d594f207de74400f37d97ac2edd9679a28a6d5d37c8f9ba5b04948e6430ab3a406dc245121481beaaa9593cd5449ffcce2ab15c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x2c, 0x17, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0xa8c, 0x1, [@m_bpf={0xa8, 0x1c, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x7, 0x2d, 0xc, 0x3}, {0x8, 0x7, 0x6, 0xf42f}, {0xfc01, 0x3, 0xff, 0x1}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x50, 0x6, "964dcdf248e65655e5100f9a52d95b66aa245b31a88570c858f025bc5c0935f8d66627023600a03a8a0033e056db76d73b740a39f06aa41632821116695fdf7b3e94ff3d8b44442bef2fc507"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x9e0, 0x1b, 0x0, 0x0, {{0xb}, {0x8bc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x4, 0x7, 0x5, 0xfffffff7, 0x9, 0xd, 0xffff, 0x7, 0x90, 0x78, 0x6, 0x3, 0x8, 0x1, 0x8000, 0xf0, 0x8001, 0x7, 0x7fffffff, 0xdb88, 0x4, 0x2, 0xc2, 0x10, 0xf, 0x5, 0x38000, 0xf, 0x3ff, 0xf, 0x8, 0x1, 0x6, 0x7f, 0x2, 0x5, 0x0, 0xfff, 0xd, 0x0, 0x1, 0x3, 0x3, 0x3, 0x401, 0xffffffc0, 0x7ba8, 0xee75, 0xfc000000, 0x1, 0xf34, 0x4, 0x9, 0x9, 0x7, 0x8, 0x5, 0x80000000, 0x2, 0x5, 0x9, 0x8, 0x8, 0x80, 0xfffffff7, 0x18000000, 0x1000, 0x6, 0x9, 0x8000, 0x8, 0x7, 0x7, 0x8001, 0x100, 0x3, 0xfffffff8, 0x6, 0xa0, 0x80000001, 0x4, 0x5de1, 0x4, 0x1, 0x9, 0xc54, 0xfffffffe, 0xf55, 0x1, 0x6, 0x8, 0x3, 0x7, 0x2, 0x5, 0x7, 0x0, 0x56, 0x2, 0x6, 0x0, 0x80000001, 0x0, 0x4, 0x800, 0x7f, 0x0, 0xfffffffe, 0x180000, 0x5, 0x2, 0x7f, 0xd4c8, 0x0, 0x3, 0x1000, 0x8, 0x0, 0x3f9, 0x9, 0x3, 0x80000001, 0x4, 0x6f, 0xfffffffc, 0x4, 0x545, 0xfffffffe, 0x1f59, 0x8, 0x2, 0x6, 0x4, 0xa5, 0x8001, 0x81, 0x40000000, 0xfffffe00, 0x6, 0x6, 0x7, 0x4, 0x800, 0x5, 0x800, 0x7, 0x401, 0x0, 0x6aa6, 0x8, 0x4, 0x4533, 0xc, 0x1cdd, 0x2, 0x4, 0x1, 0x9, 0x3, 0x5, 0x80000000, 0x7, 0xffffea79, 0xfffffffe, 0x400, 0xf, 0x9, 0x9f7, 0x1, 0x4, 0xd62, 0x3, 0x75c, 0xc78, 0x5, 0x0, 0x2, 0x10000, 0x6, 0x3, 0x200, 0x31, 0x6, 0x168800, 0x0, 0x6, 0x40, 0x9, 0x2, 0x80000000, 0x2000000, 0x7, 0x101, 0x3, 0x9, 0x10001, 0xf, 0x6, 0x712, 0x5, 0x2, 0xa, 0x7, 0x5, 0x1, 0x5, 0x7, 0x3, 0x3, 0xc7f2, 0x7d5d, 0x1, 0x81, 0xc65, 0xc67, 0x101, 0x538, 0xf, 0x5262, 0x8, 0x3, 0x2, 0x5, 0x6, 0xb, 0x200, 0x8001, 0x2, 0x4, 0x20006a, 0x81, 0x101, 0xa510, 0x7ff, 0x8, 0x5, 0x5, 0x0, 0x101, 0x9, 0x7f, 0x0, 0x4e, 0xc31d9de, 0x0, 0xfff, 0x80, 0x2, 0xfffffff8, 0x1, 0xffffffff, 0x0, 0x1, 0x0, 0xa]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa, 0xc924, 0xfffffffc, 0xa, 0x7, 0x1, 0x1, 0x3, 0x5, 0x96a1, 0x3ff, 0xfffffffb, 0x81, 0x88, 0x3, 0x7, 0x7, 0x23, 0x0, 0x6334, 0x3, 0xd, 0x1, 0x8a88, 0x3, 0x3, 0x5, 0x6, 0xfffffffc, 0x2, 0x9, 0x8001, 0x8, 0xd3, 0x1788, 0x10001, 0x0, 0x6, 0x5, 0x6, 0x4, 0x0, 0x8, 0xfffff000, 0x6, 0x4, 0x311, 0x8, 0xd9350415, 0x0, 0x2, 0x5, 0x8, 0x7, 0xa61, 0x1015, 0x586, 0x5, 0x2, 0x401, 0x8a0, 0x8, 0x5, 0x8, 0x34fc, 0x0, 0x9, 0x7fff, 0xeee, 0xfffffe62, 0x0, 0x8, 0x7f, 0x0, 0x5, 0x5, 0x8, 0xc5, 0x401, 0xfffffc00, 0x7f, 0x6, 0x4919, 0x1, 0x5, 0x10001, 0x7, 0x10000, 0x8001, 0x4, 0x3, 0x4, 0x1, 0x9, 0x8, 0x3, 0x7, 0xbe7, 0xb2, 0x4, 0x0, 0x80000001, 0x3, 0xc, 0x7, 0x4, 0xd, 0x6, 0x2, 0x4, 0x3ff, 0xffff, 0x1, 0x7, 0xfffffffc, 0x101, 0x3, 0x6, 0x0, 0x8, 0x9, 0x3, 0xffff0001, 0xfffffff6, 0x0, 0x20, 0x17e, 0x80000000, 0x9, 0x10, 0x1000, 0x5, 0x1000000, 0xabe, 0xfd5, 0x7fffffff, 0x2, 0x3, 0x4, 0x100, 0x2, 0x1, 0x89, 0x1, 0xd, 0x4, 0x95, 0x0, 0x200, 0x0, 0x5, 0x3, 0x1, 0xd63, 0x1, 0x7ff, 0x1, 0xfffffffe, 0x1ff, 0x2, 0x1000, 0x4, 0x8, 0x42d, 0x7, 0x0, 0x2000001, 0x5, 0xfffffff3, 0x0, 0x0, 0x7, 0x3, 0xccc, 0x4, 0x1, 0x10, 0x8000, 0x40, 0x7ff, 0x9, 0x9, 0x3, 0x81, 0xd, 0x9, 0x0, 0xa5c0, 0x75cc1040, 0x6, 0xed, 0x10001, 0xc4, 0x4, 0x3, 0x9b0, 0x5, 0x9, 0x1, 0x4, 0xa, 0x5, 0x0, 0x9, 0x1, 0x7, 0x10000, 0x800, 0x6, 0x9, 0xdf, 0x400, 0x0, 0x8, 0x340, 0x7, 0x1, 0x1, 0x1d0000, 0xfffffffe, 0x9, 0x4, 0x8, 0x8, 0x2, 0x6, 0x40, 0xfa3, 0x9, 0x0, 0x60002, 0x1, 0x1, 0x5, 0x6, 0xf, 0x302, 0x2ef5, 0x9, 0x6, 0x6, 0x8, 0xa513, 0x80000001, 0x0, 0x40, 0x6, 0x1, 0x4, 0x9, 0x7, 0x6, 0x2, 0x2, 0x6, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x53, 0x10000000, 0x3, 0xa6f, 0x10001, {0x4, 0x2, 0xd7c, 0x8, 0x3, 0x4}, {0x5, 0x0, 0x3, 0x1, 0x8, 0x9}, 0x6, 0x849f, 0x1000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xea2, 0x3, 0x80f, 0x9, 0x0, {0xe3, 0x1, 0xd, 0xfffc, 0x8001, 0x4}, {0x8, 0x1, 0x9, 0x6, 0x1, 0xffff}, 0x4, 0x3ff, 0x100}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]]}, {0xfc, 0x6, "1b6201ac02f74f24a9a8c73e55bc38358d4fbf5499a04fde6f9b3e16ff18e8362f6531d0ec887e91a5fbccd2c3f7090339a236959abcfb78bec13eeb0c7b2c9b68da8291b0c7645c8ac28bbdbb5b8c56185217b5f08fd6f049c09c321864c6a7421ac71249f4c8d0e8f2709f27cabb1ba0f39cf9e9cc012a54118d3b4ff5091c81d15d76a770418f08b0e6d57a1f06fe10d950a184db11c0a5e9dead486110372fc65b06280daec01b4ead4dccc8219b8c707016bcfbe09b5292bb8ea5f2fe4b0ebad6e2b90cc069bf0621eac18b6e2934cc62699c1ff7e4a6ab721b7cf19b477098e2f85080730fbfc00ed26427c88a3df1094679845630"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x188, 0x1, [@m_csum={0x184, 0x9, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x2, 0xa, 0x4}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2d467560, 0x5d, 0x7, 0x6, 0x7f}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x1000, 0x2, 0x2, 0x6}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x9, 0x10000000, 0x4, 0x3}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x2, 0x3, 0x86, 0xd1}, 0x64}}]}, {0xcb, 0x6, "e899e38bea89b52eea282ee92595a9d0843d2ccaa15a55cd906e8cc02470e2dd5de92c40a98f2985312352a7f93d0e1f0d99f380495a4d2bf3faff2ff371d04940fc8c16c9f4c2732e82bb716e3c0574c2c8f5cb0918aeaf480bbb72cf1b40cb1cb6845011f80ebdca95ee98d8eede14fc3ee54fecaab54fa9c46d1951d61712783bd5a8f15ffee98fc734f5817486c1b3c6688672a222c295c73ac579403e24cd3794f05cfcb781977acdb03818a1f7bf7eed1ffe79d8d4b71b6d747f9f7d6445ba033a551498"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xe1c}, 0x1, 0x0, 0x0, 0x8854}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="50000000490011012abd7000fedbdf250a006000", @ANYRES32=0x0, @ANYBLOB="02000000080002000700000008000200070000000800020000000000140001"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 38.127523163s ago: executing program 8 (id=4752): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r1, 0x125d, 0x0) 38.091793005s ago: executing program 37 (id=4752): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r1, 0x125d, 0x0) 3.266571487s ago: executing program 9 (id=5509): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0xfffffffd, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0x6, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0xfffffff9, 0x3, 0x3, 0x2000, 0x4d, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xd, 0x1000d, 0xe, 0x2b12, 0x100, 0x81, 0x1c00, 0xd, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x211000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x80, 0x6, 0xa, 0x9, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4009, 0xfd, 0x9, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x3, 0x4, 0x7, 0x4009, 0xe, 0x0, 0x100003, 0x8, 0x80000752, 0x0, 0x3, 0x0, 0x10001, 0x3, 0xffffffff, 0x6, 0x6, 0x9, 0x8, 0xfdffffff, 0x2, 0x40, 0x1084, 0x2, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0xffff, 0x2, 0xb, 0x100002, 0xd9a, 0xd, 0x2e2, 0xffffdffc, 0x3, 0x2, 0x5, 0x8, 0x0, 0x101, 0x2, 0x40, 0x8, 0x9, 0x4, 0x401, 0x66d1, 0x8, 0x7, 0xfffffffe, 0x7, 0xc5c, 0xffffffff]}}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0xfffffffd, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0x6, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0xfffffff9, 0x3, 0x3, 0x2000, 0x4d, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xd, 0x1000d, 0xe, 0x2b12, 0x100, 0x81, 0x1c00, 0xd, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x211000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x80, 0x6, 0xa, 0x9, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4009, 0xfd, 0x9, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x3, 0x4, 0x7, 0x4009, 0xe, 0x0, 0x100003, 0x8, 0x80000752, 0x0, 0x3, 0x0, 0x10001, 0x3, 0xffffffff, 0x6, 0x6, 0x9, 0x8, 0xfdffffff, 0x2, 0x40, 0x1084, 0x2, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0xffff, 0x2, 0xb, 0x100002, 0xd9a, 0xd, 0x2e2, 0xffffdffc, 0x3, 0x2, 0x5, 0x8, 0x0, 0x101, 0x2, 0x40, 0x8, 0x9, 0x4, 0x401, 0x66d1, 0x8, 0x7, 0xfffffffe, 0x7, 0xc5c, 0xffffffff]}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,r&dno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xe8, 0x1d8, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "cc75", 0x1}}, @common=@ttl={{0x28}, {0x2, 0x6}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "a555"}}, @common=@ah={{0x30}, {[0x6, 0x4c], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xffffffff, 0xffff00, '\x00', 'pim6reg0\x00', {}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x2, 0x0, 0x3ec1d2c4df46b24, 0x4, 0x4], 0x4, 0x7}, {0x0, [0x4, 0x1, 0x4, 0x0, 0x0, 0x2], 0x4, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="495300000000001a00006700000008000300", @ANYRES32=0x0, @ANYBLOB="100027c1"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r9, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r8) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r10, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000200020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200000000050007"], 0x78}}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000200020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200000000050007"], 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r10, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10850}, 0x8040) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r10, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10850}, 0x8040) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x88, r7, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x44890}, 0x80) (async) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x88, r7, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x44890}, 0x80) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="c7797f8926f5"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x0, 0x0, 0x0, {0x8, 0x2, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x7}}, @NL80211_ATTR_FILS_KEK={0x5, 0xf2, '\v'}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x3, 0x4, 0x0, {0x101, 0xd51, 0x0, 0xb, 0x0, 0x1, 0x1, 0x3}, 0x400, 0x9, 0xff}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x0, 0x1000, 0x9, 0x6, 0xf, 0x6, 0xe8, 0x5, 0xffff, 0xc39a, 0x0, 0xc, 0x2, 0x6, 0x4]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10c}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x40, {0x27, 0x1, 0x80, 0x400}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x3, 0x6, 0x0, {0x45, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0xff, 0x2}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x9}]]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x84) (async) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="c7797f8926f5"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x0, 0x0, 0x0, {0x8, 0x2, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x7}}, @NL80211_ATTR_FILS_KEK={0x5, 0xf2, '\v'}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x3, 0x4, 0x0, {0x101, 0xd51, 0x0, 0xb, 0x0, 0x1, 0x1, 0x3}, 0x400, 0x9, 0xff}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x0, 0x1000, 0x9, 0x6, 0xf, 0x6, 0xe8, 0x5, 0xffff, 0xc39a, 0x0, 0xc, 0x2, 0x6, 0x4]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10c}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x40, {0x27, 0x1, 0x80, 0x400}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x3, 0x6, 0x0, {0x45, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0xff, 0x2}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x9}]]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x138, 0x11, 0x148, 0x0, 0x0, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010001, 0xff000000, 0xff000000, 'veth1_to_hsr\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x1, 0x2, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfa3, 0xc64, 0x4, '\x00', 'syz1\x00'}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x41, [0x6, 0x5, 0x0, 0x4, 0x2, 0x4], 0x5, 0x4}, {0x2, [0x7, 0x2, 0x6, 0x4, 0x6, 0x1], 0x3, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x138, 0x11, 0x148, 0x0, 0x0, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010001, 0xff000000, 0xff000000, 'veth1_to_hsr\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x1, 0x2, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfa3, 0xc64, 0x4, '\x00', 'syz1\x00'}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x41, [0x6, 0x5, 0x0, 0x4, 0x2, 0x4], 0x5, 0x4}, {0x2, [0x7, 0x2, 0x6, 0x4, 0x6, 0x1], 0x3, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 2.971078495s ago: executing program 9 (id=5517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) (async) io_setup(0x560, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x4, r1, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2}]) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001000000070021"], 0x24}}, 0x40004) 2.838945022s ago: executing program 9 (id=5524): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.970384023s ago: executing program 5 (id=5541): connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'tunl0\x00'}}, 0x1e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000040000008500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32], 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000027c0)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x20) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0xffffffffffffff7f, 0x0) listen(0xffffffffffffffff, 0x200204) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf0500050012", 0x2d}], 0x1}, 0x48000) 1.887187448s ago: executing program 9 (id=5543): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfff0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.835417442s ago: executing program 0 (id=5545): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x80) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/20, &(0x7f0000000600), &(0x7f0000000380), 0x3, r1}, 0x38) r2 = dup2(r0, r0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000001c0), 0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000140)=0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2800004, &(0x7f00000002c0)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@mode={'mode', 0x3d, 0x7}}, {@uid={'uid', 0x3d, r3}}, {@gid={'gid', 0x3d, 0xee00}}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\''}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000002c0)='./file0\x00', 0x4002, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x37d, &(0x7f0000000c00)="$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") mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) unshare(0x2c020400) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 1.781828214s ago: executing program 9 (id=5547): io_uring_setup(0x4e60, 0x0) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x210}, &(0x7f0000ff0000), &(0x7f00000013c0)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r1 = msgget$private(0x0, 0x7ac) msgrcv(r1, 0x0, 0x0, 0x3, 0x2000) msgrcv(r1, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) msgsnd(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="c883d87afd02cb7a"], 0x8, 0x8fa2496c381b7ad5) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x300) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x221}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x74, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) readv(r3, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='sched\x00') syz_io_uring_setup(0x57f9, &(0x7f0000000400)={0x0, 0xf801, 0x2, 0x1, 0xbd7f7fff}, &(0x7f0000000480), &(0x7f0000000200)) 1.776419985s ago: executing program 0 (id=5549): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000002, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x4008800) 1.573671067s ago: executing program 5 (id=5552): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000a00)="e4cfa3f5de", 0x5}], 0x1, 0x4, 0x0) (async) r3 = fsmount(r1, 0x1, 0x0) fchdir(r3) (async) bind$unix(r0, &(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e) 1.544067159s ago: executing program 5 (id=5553): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r0, r1, 0x2f, 0x10, 0x4, @void, @value=r0}, 0x20) 1.454976054s ago: executing program 5 (id=5554): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 854.905819ms ago: executing program 0 (id=5559): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x891e, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private0, @private=0xa010100, 0x19, 0x18}}) 770.903404ms ago: executing program 0 (id=5560): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$eJzs3M1vFOUfAPDvzLaFH2/tD/EFRG1CDI0vLS2oHLxoNPGA0UQPeKzbQggLNbQmQohUY/BiYoh6Nh5N/Ce8GPVk4lXvhoQoF9BTzczOwHbZLSxddiv7+SQDz7PzdJ/n22eemWfm2W0AA2s8+yeJ2BYRv0XEaD27usB4/b/rV89X/756vprEyspbfyZ5uWtXz1fLouXPbS0yE2lE+klSVLLa4tlzJ2drtfkzRX5q6dR7U4tnzz174tTs8fnj86dnDh8+dHD6hednnutKnFlc1/Z8uLB392vvXHq9evTSuz99l7V3W7G/MY5uGc8C/2sl17zvyW5X1mfbG9LJUB8bQkcqEZF113A+/kejEjc7bzRe/bivjQPuqezatKn97uUV4D6WRL9bAPRHeaHP7n/LrUdTjw3hykv1G6As7uvFVt8zFGlRZrjp/rabxiPi6PI/X2db3KPnEAAAjT6rfnUknmk1/0vjoYZyO4o1lLGI+H9E7IyIByJiV0Q8GJGXfTgiHumw/ualoVvnP+nluwrsDmXzvxeLta3V879y9hdjlSK3PY9/ODl2ojZ/oPidTMTwpiw/vUYd37/y6+ft9jXO/7Itq7+cCxbtuDzU9IBubnZpNp+UdsGVjyL2DLWKP7mxEpBExO6I2NPZW+8oEyee+nZvu0K3j38NXVhnWvkmYn+9/5ejKf5Ssvb65NTmqM0fmCqPilv9/MvFN9vVv674uyDr/y2rj//mImNJ43rtYud1XPz907b3NHd7/I8kb+fno7KjPphdWjozHTGSHMlfHCnK5q/P3PzZMl+Wz+Kf2Nd6/O+MmxU8GhHZQfxYRDweEU8UbS+Pkn1rxP/jy+33bYT+n2t5/rtx/Df1f+eJyskfYnOb+u+s/w/lqYnilfz8dxt32sB1/fIAAADgPyLNPwOfpJM30mk6OVn/DP+u2JLWFhaXnj628P7pufpn5cdiOC2fdI02PA+dTpaLd6znZ4pnxeX+g8Vz4y8r/8vzk9WF2lyfY4dBt7XN+M/8Uel364B7rtU62sxIHxoC9Fzz+E9XZy+80cvGAD3l+9owuG4z/tNetQPoPdd/GFytxv+Fpry1ALg/uf7D4DL+YXAZ/zC4jH8YSOv5Xv8gJco/krpR2tP/RKQbohmdJcor3UZpT/cT+7+oR7juN+znWQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB7/g0AAP//0TLrKA==") r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd30, 0x35dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0xbe, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) write$P9_RWRITE(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x20, 0x700, 0x1ff, 0x0, {{0xd, 0x4, 0x2, 0x1b, 0x34, 0x65, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, {[@ssrr={0x89, 0x1b, 0x6d, [@loopback, @multicast2, @remote, @private=0xa010101, @empty, @loopback]}, @ra={0x94, 0x4}]}}}}}) 719.217807ms ago: executing program 0 (id=5561): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x14ee, &(0x7f0000001380)="$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") mmap(&(0x7f00000fa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x64ce4000) keyctl$reject(0x14, 0x0, 0xfffeffffffffff18, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r2, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r4, 0xbdd94000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000380)={{0x2, 0x4e24, @empty}, {0x6, @broadcast}, 0xc, {0x2, 0x4e21, @rand_addr=0x64010102}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_open_dev$usbmon(&(0x7f0000000140), 0x3, 0x80) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000240)=""/21, 0x15}) 688.283079ms ago: executing program 2 (id=5562): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0xffffffff, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x100, 0x10003, 0x0, 0x0, r2}, &(0x7f0000000140), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 626.957713ms ago: executing program 7 (id=5563): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 626.548263ms ago: executing program 2 (id=5564): r0 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0721, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffa, 0x83}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x62136, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a30, 0x0, @perf_bp={0x0, 0x4}, 0x288, 0x0, 0x1000, 0x1, 0x7, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 602.821804ms ago: executing program 2 (id=5565): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x80000, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a"], 0xfc}}, 0x0) 575.445465ms ago: executing program 2 (id=5566): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002000180c200000c00000c00"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) 524.805428ms ago: executing program 2 (id=5567): r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x4005, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x40046629, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setuid(0xee01) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x3, [0x9, 0x4], 0x6}, 0x10) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000580)={0x96, "c889829a86760f2e65a402d2e75e081f08476b01b1f1edd2fb8b377961cd008e311f142c62007836b36878f0a621064bb8de7ee266214e0bff69d0a2ae16feaa4b700af2ba8b6fdd484cb7ae127e314743aa5fb024758e2eb0a1ac8c7d8734c25955cb72ad1bddc12cd4622e192bd863ca20455239d3bc5bc607ad889efc9880a728f9fef69d699eecc747cdac664fa98e5fd3e98f32"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001600156f00000000fddbdf", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}}, 0x24080) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6117, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 489.67935ms ago: executing program 7 (id=5568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x560a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file2\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x101, 0x1452, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x400000, 0x2000001, {0x0, 0x0, 0x0, r3, {0x2}, {0xd, 0xfff2}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xa055}, 0x20008014) bind$xdp(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x8, r3, 0x28}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x2a8, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0x0, 0xff000000, 0xff000000], [0xffffff00, 0xffffff00, 0xff, 0xffffffff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {}, {}, 0x2b, 0x5, 0x7, 0x10}, 0x0, 0x120, 0x188, 0x0, {}, [@common=@dst={{0x48}, {0x80000001, 0x6, 0x0, [0x200, 0x8, 0x9, 0x1, 0x401, 0x9, 0x5, 0x7, 0xc, 0x1, 0x5b87, 0x3, 0x5a1, 0xe253, 0x5, 0x800], 0x2}}, @common=@inet=@udplite={{0x30}, {[0x4620, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xfffd, 0x8, 0x5, 'snmp_trap\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x25, 0x2}, {0x3, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x12, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa3}, [@map_fd={0x18, 0xa}, @jmp={0x5, 0x1, 0x6, 0xa, 0x8, 0x100, 0x8}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x3}, @generic={0x1, 0x9, 0x6, 0x4, 0x9}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x15, &(0x7f0000000500)=""/21, 0x41000, 0x24, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000580)=[0x1], &(0x7f00000005c0)=[{0x1, 0x2, 0x10, 0x7}, {0x0, 0x3, 0x3, 0x6}], 0x10, 0xb8b}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x82040, 0x0) fcntl$setlease(r7, 0x400, 0x0) 334.70342ms ago: executing program 2 (id=5569): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac14"], 0xfdef) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c}}]}, 0x181}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x20008004) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042bbd7000ffdbdf251600000020000180080003000100000014000200736974300000000000000000000000002829bf3d1cceef32754347ced9791f06eacc72a280168686838fe74ba9989681144e2d79fe55a9b1e314a1c24754ecd4400a647b"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e657665310000000000000000000800"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7010fbdbdf251e00000010002f809c35140dc8e2a5200900000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000084) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x20, r7, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x4044080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, r12, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000084) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000014}, 0x8080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "d80b8d", 0x8, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@fragment={0x33, 0x0, 0xff, 0x1, 0x0, 0x0, 0x67}]}}}}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 175.092199ms ago: executing program 9 (id=5570): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000002, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x4008800) 134.869392ms ago: executing program 7 (id=5571): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x8) fchdir(r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89101) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) (async, rerun: 32) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000000c0)=0x2c) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (rerun: 32) 114.136502ms ago: executing program 0 (id=5572): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x20, 0x700, 0x1ff, 0x0, {{0xd, 0x4, 0x2, 0x1b, 0x34, 0x65, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, {[@ssrr={0x89, 0x1b, 0x6d, [@loopback, @multicast2, @remote, @private=0xa010101, @empty, @loopback]}, @ra={0x94, 0x4}]}}}}}) 112.729143ms ago: executing program 5 (id=5573): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x300, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 10.984959ms ago: executing program 7 (id=5574): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x40000400) 10.439238ms ago: executing program 5 (id=5575): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0xffd, 0x3a, 0x2b77bf77, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x1) readahead(r3, 0x5, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000002c0)) syz_emit_ethernet(0x9d, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @multicast, @void, {@mpls_mc={0x8848, {[{0xff623, 0x0, 0x1}, {0x1}], @generic="3a2daf71ca97d202ea60d7eb887bb07cef0735e20de0d8cf8333e8493582c0fd2074b379d2e67f51411b05b0b0db40330234a4fe8a459aeabd42b84ff6746fbe4899f86579719fd84514143b73835ba7d167bd702f1b46653c55948d8f97dcf20dcb63b6ea74ca441784f2e811d6393a87fba9af4ab298df2eaeceb14b740228f5fdc6512e8f8f"}}}}, &(0x7f00000003c0)={0x0, 0x3, [0x1f0, 0x8e3, 0x55b, 0x808]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x1000, 0x1000}], 0x1, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000001d80f030000000000003404000001ed0a0014040000170000803c400000000000007b0a00fe000000004e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c000000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 8.569729ms ago: executing program 7 (id=5576): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x800, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2, 0x5}, 0x0) 0s ago: executing program 7 (id=5577): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002000180c200000c00000c00"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) kernel console output (not intermixed with test programs): 432][T15674] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 286.185652][T15683] loop8: detected capacity change from 0 to 128 [ 286.268947][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4092'. [ 286.281790][T15699] loop9: detected capacity change from 0 to 512 [ 286.292376][T15699] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.4093: iget: bad i_size value: 38620345925642 [ 286.315711][T15699] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.4093: couldn't read orphan inode 15 (err -117) [ 286.329812][T15699] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.386957][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.437841][T15713] bond4: entered promiscuous mode [ 286.443138][T15713] 8021q: adding VLAN 0 to HW filter on device bond4 [ 286.459169][T15713] bond4: (slave bridge3): making interface the new active one [ 286.466972][T15713] bridge3: entered promiscuous mode [ 286.473735][T15713] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 286.560843][T15723] FAULT_INJECTION: forcing a failure. [ 286.560843][T15723] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 286.574015][T15723] CPU: 1 UID: 0 PID: 15723 Comm: syz.9.4102 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 286.574129][T15723] Tainted: [W]=WARN [ 286.574138][T15723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.574162][T15723] Call Trace: [ 286.574175][T15723] [ 286.574184][T15723] __dump_stack+0x1d/0x30 [ 286.574241][T15723] dump_stack_lvl+0x95/0xd0 [ 286.574268][T15723] dump_stack+0x15/0x1b [ 286.574340][T15723] should_fail_ex+0x263/0x280 [ 286.574378][T15723] should_fail+0xb/0x20 [ 286.574422][T15723] should_fail_usercopy+0x1a/0x20 [ 286.574484][T15723] _copy_from_user+0x1c/0xb0 [ 286.574562][T15723] ___sys_sendmsg+0xc1/0x1e0 [ 286.574594][T15723] __x64_sys_sendmsg+0xd4/0x160 [ 286.574616][T15723] x64_sys_call+0x17ba/0x3000 [ 286.574651][T15723] do_syscall_64+0xc0/0x2a0 [ 286.574724][T15723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.574796][T15723] RIP: 0033:0x7f78178caeb9 [ 286.574815][T15723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.574833][T15723] RSP: 002b:00007f7816327028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.574931][T15723] RAX: ffffffffffffffda RBX: 00007f7817b45fa0 RCX: 00007f78178caeb9 [ 286.574951][T15723] RDX: 0000000000044010 RSI: 0000200000000140 RDI: 0000000000000004 [ 286.574969][T15723] RBP: 00007f7816327090 R08: 0000000000000000 R09: 0000000000000000 [ 286.574986][T15723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.575002][T15723] R13: 00007f7817b46038 R14: 00007f7817b45fa0 R15: 00007ffd65e17a38 [ 286.575023][T15723] [ 286.743765][T15724] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4100'. [ 286.752919][T15724] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4100'. [ 286.761955][T15724] validate_nla: 2 callbacks suppressed [ 286.761968][T15724] netlink: 'syz.7.4100': attribute type 6 has an invalid length. [ 286.844524][T15728] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4104'. [ 286.968810][T15737] netlink: 'syz.0.4108': attribute type 1 has an invalid length. [ 287.058859][T15747] netlink: 'syz.9.4113': attribute type 1 has an invalid length. [ 287.073540][T15747] bond5: entered promiscuous mode [ 287.079164][T15747] 8021q: adding VLAN 0 to HW filter on device bond5 [ 287.119217][T15753] netlink: 'syz.9.4115': attribute type 1 has an invalid length. [ 287.140103][T15753] bond6: entered promiscuous mode [ 287.145602][T15753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.169165][T15753] bond6: (slave bridge4): making interface the new active one [ 287.176745][T15753] bridge4: entered promiscuous mode [ 287.186281][T15753] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 287.217339][T15763] netlink: 'syz.5.4120': attribute type 1 has an invalid length. [ 287.354135][T15781] netlink: 'syz.8.4126': attribute type 1 has an invalid length. [ 287.368613][T15781] bond6: entered promiscuous mode [ 287.373909][T15781] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.377588][T15769] atomic_op ffff888104527928 conn xmit_atomic 0000000000000000 [ 287.389005][T15769] x_tables: duplicate entry at hook 2 [ 287.434893][T15784] loop8: detected capacity change from 0 to 128 [ 287.464837][T15791] loop9: detected capacity change from 0 to 512 [ 287.471503][T15791] EXT4-fs: Ignoring removed oldalloc option [ 287.521669][T15791] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 287.545405][T15791] EXT4-fs (loop9): 1 truncate cleaned up [ 287.551660][T15791] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.596510][T15791] netlink: 'syz.9.4131': attribute type 13 has an invalid length. [ 287.631266][T15811] loop8: detected capacity change from 0 to 512 [ 287.680622][T15811] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.709050][T15820] netlink: 'syz.5.4138': attribute type 1 has an invalid length. [ 287.726714][T15811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.751194][T15811] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.754685][T15791] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.768848][T15791] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.779776][T15791] bond_slave_0: left promiscuous mode [ 287.785412][T15791] bond_slave_1: left promiscuous mode [ 287.900139][T15820] bond12: entered promiscuous mode [ 287.905699][T15820] 8021q: adding VLAN 0 to HW filter on device bond12 [ 287.919122][ T31] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.928096][T11189] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.937475][ T31] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.946752][ T31] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.957989][ T31] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.981962][T15840] loop8: detected capacity change from 0 to 128 [ 287.994419][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.023890][T15840] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 288.061812][T15853] FAULT_INJECTION: forcing a failure. [ 288.061812][T15853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.075079][T15853] CPU: 0 UID: 0 PID: 15853 Comm: syz.9.4142 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 288.075176][T15853] Tainted: [W]=WARN [ 288.075186][T15853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.075203][T15853] Call Trace: [ 288.075211][T15853] [ 288.075221][T15853] __dump_stack+0x1d/0x30 [ 288.075254][T15853] dump_stack_lvl+0x95/0xd0 [ 288.075295][T15853] dump_stack+0x15/0x1b [ 288.075324][T15853] should_fail_ex+0x263/0x280 [ 288.075368][T15853] should_fail+0xb/0x20 [ 288.075454][T15853] should_fail_usercopy+0x1a/0x20 [ 288.075497][T15853] _copy_from_user+0x1c/0xb0 [ 288.075596][T15853] ___sys_sendmsg+0xc1/0x1e0 [ 288.075636][T15853] __x64_sys_sendmsg+0xd4/0x160 [ 288.075665][T15853] x64_sys_call+0x17ba/0x3000 [ 288.075697][T15853] do_syscall_64+0xc0/0x2a0 [ 288.075813][T15853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.075841][T15853] RIP: 0033:0x7f78178caeb9 [ 288.075860][T15853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.075884][T15853] RSP: 002b:00007f7816327028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.075909][T15853] RAX: ffffffffffffffda RBX: 00007f7817b45fa0 RCX: 00007f78178caeb9 [ 288.075946][T15853] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 288.076022][T15853] RBP: 00007f7816327090 R08: 0000000000000000 R09: 0000000000000000 [ 288.076038][T15853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.076053][T15853] R13: 00007f7817b46038 R14: 00007f7817b45fa0 R15: 00007ffd65e17a38 [ 288.076076][T15853] [ 288.248020][T15840] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.428051][T15882] netlink: 'syz.9.4152': attribute type 1 has an invalid length. [ 288.587738][T15882] bond7: entered promiscuous mode [ 288.593214][T15882] 8021q: adding VLAN 0 to HW filter on device bond7 [ 288.757098][T15897] __nla_validate_parse: 2 callbacks suppressed [ 288.757117][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4157'. [ 288.899696][T15899] loop9: detected capacity change from 0 to 512 [ 288.922954][T15903] SET target dimension over the limit! [ 288.967703][T11189] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.979363][T15897] netlink: 'syz.0.4157': attribute type 4 has an invalid length. [ 288.987297][T15897] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4157'. [ 289.027317][T15897] .`: renamed from bond0 (while UP) [ 289.070106][T15911] FAULT_INJECTION: forcing a failure. [ 289.070106][T15911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.083380][T15911] CPU: 0 UID: 0 PID: 15911 Comm: syz.8.4164 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.083423][T15911] Tainted: [W]=WARN [ 289.083433][T15911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.083451][T15911] Call Trace: [ 289.083459][T15911] [ 289.083467][T15911] __dump_stack+0x1d/0x30 [ 289.083493][T15911] dump_stack_lvl+0x95/0xd0 [ 289.083525][T15911] dump_stack+0x15/0x1b [ 289.083547][T15911] should_fail_ex+0x263/0x280 [ 289.083590][T15911] should_fail+0xb/0x20 [ 289.083652][T15911] should_fail_usercopy+0x1a/0x20 [ 289.083711][T15911] _copy_from_user+0x1c/0xb0 [ 289.083734][T15911] ___sys_sendmsg+0xc1/0x1e0 [ 289.083782][T15911] __x64_sys_sendmsg+0xd4/0x160 [ 289.083814][T15911] x64_sys_call+0x17ba/0x3000 [ 289.083914][T15911] do_syscall_64+0xc0/0x2a0 [ 289.083947][T15911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.084118][T15911] RIP: 0033:0x7f9f1a88aeb9 [ 289.084140][T15911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.084160][T15911] RSP: 002b:00007f9f192e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.084187][T15911] RAX: ffffffffffffffda RBX: 00007f9f1ab05fa0 RCX: 00007f9f1a88aeb9 [ 289.084211][T15911] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 289.084235][T15911] RBP: 00007f9f192e7090 R08: 0000000000000000 R09: 0000000000000000 [ 289.084327][T15911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.084344][T15911] R13: 00007f9f1ab06038 R14: 00007f9f1ab05fa0 R15: 00007ffd2ac1f1b8 [ 289.084372][T15911] [ 289.362670][T15921] FAULT_INJECTION: forcing a failure. [ 289.362670][T15921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.375835][T15921] CPU: 1 UID: 0 PID: 15921 Comm: syz.9.4168 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.375942][T15921] Tainted: [W]=WARN [ 289.375948][T15921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.375960][T15921] Call Trace: [ 289.375965][T15921] [ 289.375972][T15921] __dump_stack+0x1d/0x30 [ 289.375996][T15921] dump_stack_lvl+0x95/0xd0 [ 289.376058][T15921] dump_stack+0x15/0x1b [ 289.376085][T15921] should_fail_ex+0x263/0x280 [ 289.376120][T15921] should_fail+0xb/0x20 [ 289.376152][T15921] should_fail_usercopy+0x1a/0x20 [ 289.376214][T15921] _copy_to_user+0x20/0xa0 [ 289.376240][T15921] simple_read_from_buffer+0xb5/0x130 [ 289.376283][T15921] proc_fail_nth_read+0x10e/0x150 [ 289.376333][T15921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.376358][T15921] vfs_read+0x1ab/0x7f0 [ 289.376374][T15921] ? __rcu_read_unlock+0x4e/0x70 [ 289.376464][T15921] ? __fget_files+0x184/0x1c0 [ 289.376491][T15921] ? mutex_lock+0x57/0x90 [ 289.376516][T15921] ksys_read+0xdc/0x1a0 [ 289.376534][T15921] __x64_sys_read+0x40/0x50 [ 289.376587][T15921] x64_sys_call+0x2889/0x3000 [ 289.376690][T15921] do_syscall_64+0xc0/0x2a0 [ 289.376724][T15921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.376746][T15921] RIP: 0033:0x7f781788b78e [ 289.376760][T15921] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 289.376777][T15921] RSP: 002b:00007f7816326fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.376822][T15921] RAX: ffffffffffffffda RBX: 00007f78163276c0 RCX: 00007f781788b78e [ 289.376839][T15921] RDX: 000000000000000f RSI: 00007f78163270a0 RDI: 0000000000000004 [ 289.376854][T15921] RBP: 00007f7816327090 R08: 0000000000000000 R09: 0000000000000000 [ 289.376929][T15921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.376940][T15921] R13: 00007f7817b46038 R14: 00007f7817b45fa0 R15: 00007ffd65e17a38 [ 289.376994][T15921] [ 289.586531][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4170'. [ 289.595655][T15923] netlink: 240 bytes leftover after parsing attributes in process `syz.8.4170'. [ 289.604723][T15923] netlink: 424 bytes leftover after parsing attributes in process `syz.8.4170'. [ 289.621532][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4170'. [ 289.662760][T15932] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4173'. [ 289.708183][T15937] bond8: entered promiscuous mode [ 289.713552][T15937] 8021q: adding VLAN 0 to HW filter on device bond8 [ 289.731768][T15937] bond8: (slave bridge5): making interface the new active one [ 289.739406][T15937] bridge5: entered promiscuous mode [ 289.751973][T15937] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 289.835907][T15957] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4180'. [ 289.845401][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 289.845415][ T29] audit: type=1400 audit(1770330880.424:3572): avc: denied { nlmsg_read } for pid=15948 comm="syz.0.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.872614][T15949] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4180'. [ 289.918417][T15962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15962 comm=syz.5.4185 [ 289.918818][T15953] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4184'. [ 289.960500][ T29] audit: type=1400 audit(1770330880.544:3573): avc: denied { ioctl } for pid=15952 comm="syz.7.4184" path="socket:[51434]" dev="sockfs" ino=51434 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 290.054225][ T29] audit: type=1400 audit(1770330880.634:3574): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 290.088247][ T29] audit: type=1400 audit(1770330880.664:3575): avc: denied { search } for pid=3038 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.109815][ T29] audit: type=1400 audit(1770330880.664:3576): avc: denied { search } for pid=3038 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.131504][ T29] audit: type=1400 audit(1770330880.664:3577): avc: denied { search } for pid=3038 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.153380][ T29] audit: type=1400 audit(1770330880.664:3578): avc: denied { read } for pid=3038 comm="dhcpcd" name="n47" dev="tmpfs" ino=12885 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.175183][ T29] audit: type=1400 audit(1770330880.664:3579): avc: denied { open } for pid=3038 comm="dhcpcd" path="/run/udev/data/n47" dev="tmpfs" ino=12885 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.198286][ T29] audit: type=1400 audit(1770330880.664:3580): avc: denied { getattr } for pid=3038 comm="dhcpcd" path="/run/udev/data/n47" dev="tmpfs" ino=12885 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.246562][ T29] audit: type=1400 audit(1770330880.814:3581): avc: denied { read open } for pid=15977 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.346417][T15992] bond6: entered promiscuous mode [ 290.354926][T15992] 8021q: adding VLAN 0 to HW filter on device bond6 [ 290.380653][T15992] bond6: (slave bridge4): making interface the new active one [ 290.388255][T15992] bridge4: entered promiscuous mode [ 290.441303][T15992] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 290.552613][T16028] loop8: detected capacity change from 0 to 512 [ 290.903114][T16064] 8021q: adding VLAN 0 to HW filter on device bond7 [ 290.920499][T16064] bond0: (slave dummy0): Releasing backup interface [ 290.931230][T16064] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 290.946943][T16064] bond7: entered allmulticast mode [ 290.952118][T16064] dummy0: entered allmulticast mode [ 291.400806][T16121] loop9: detected capacity change from 0 to 128 [ 291.408973][T16117] bond8: entered promiscuous mode [ 291.426421][T16117] 8021q: adding VLAN 0 to HW filter on device bond8 [ 291.470525][T16125] Cannot find add_set index 0 as target [ 291.526260][T16125] .`: renamed from bond0 [ 291.543425][T16126] bond8: (slave bridge5): making interface the new active one [ 291.551055][T16126] bridge5: entered promiscuous mode [ 291.588395][T16126] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 291.779571][T16151] macsec1: entered allmulticast mode [ 291.785149][T16151] macvlan0: entered allmulticast mode [ 291.803190][T16153] validate_nla: 7 callbacks suppressed [ 291.803210][T16153] netlink: 'syz.0.4238': attribute type 1 has an invalid length. [ 291.854883][T16151] macvlan0: left allmulticast mode [ 291.880676][T16153] bond0: entered promiscuous mode [ 291.901223][T16153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.020637][T16169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.202628][T16209] loop9: detected capacity change from 0 to 512 [ 292.209440][T16209] EXT4-fs: Ignoring removed i_version option [ 292.233760][T16209] EXT4-fs (loop9): orphan cleanup on readonly fs [ 292.241151][T16209] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.4252: EA inode hash validation failed [ 292.253723][T16214] netlink: 'syz.7.4254': attribute type 1 has an invalid length. [ 292.261942][T16209] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 292.275288][T16209] EXT4-fs error (device loop9): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.9.4252: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 292.288701][T16214] bond7: entered promiscuous mode [ 292.291268][T16209] EXT4-fs (loop9): Remounting filesystem read-only [ 292.302087][T16209] EXT4-fs warning (device loop9): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.9.4252: ea_inode dec ref err=-117 [ 292.303782][T16214] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.337719][T16209] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30) [ 292.346972][T16209] EXT4-fs (loop9): 1 orphan inode deleted [ 292.353188][T16209] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 292.372901][T16218] 8021q: adding VLAN 0 to HW filter on device bond13 [ 292.420713][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.469622][T16229] loop9: detected capacity change from 0 to 512 [ 292.490656][T16229] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #12: comm syz.9.4260: corrupted in-inode xattr: bad e_name length [ 292.510247][T16229] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.4260: couldn't read orphan inode 12 (err -117) [ 292.523032][T16229] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.572792][T16229] EXT4-fs error (device loop9): ext4_add_entry:2415: inode #2: comm syz.9.4260: Directory hole found for htree leaf block 0 [ 292.664094][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.679716][T16247] netlink: 'syz.7.4265': attribute type 12 has an invalid length. [ 292.687713][T16247] netlink: 'syz.7.4265': attribute type 29 has an invalid length. [ 292.692879][T16251] FAULT_INJECTION: forcing a failure. [ 292.692879][T16251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.709344][T16251] CPU: 0 UID: 0 PID: 16251 Comm: syz.8.4266 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 292.709374][T16251] Tainted: [W]=WARN [ 292.709381][T16251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.709466][T16251] Call Trace: [ 292.709473][T16251] [ 292.709479][T16251] __dump_stack+0x1d/0x30 [ 292.709573][T16251] dump_stack_lvl+0x95/0xd0 [ 292.709643][T16251] dump_stack+0x15/0x1b [ 292.709667][T16251] should_fail_ex+0x263/0x280 [ 292.709706][T16251] should_fail+0xb/0x20 [ 292.709737][T16251] should_fail_usercopy+0x1a/0x20 [ 292.709799][T16251] _copy_from_iter+0xcf/0xea0 [ 292.709818][T16251] ? should_fail_ex+0xd9/0x280 [ 292.709871][T16251] ? should_failslab+0x8c/0xb0 [ 292.709897][T16251] ? __kmalloc_noprof+0x2a3/0x580 [ 292.710005][T16251] ? kernfs_fop_write_iter+0xe2/0x300 [ 292.710096][T16251] kernfs_fop_write_iter+0x125/0x300 [ 292.710151][T16251] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 292.710199][T16251] vfs_write+0x5a6/0x9f0 [ 292.710228][T16251] ksys_write+0xdc/0x1a0 [ 292.710248][T16251] __x64_sys_write+0x40/0x50 [ 292.710334][T16251] x64_sys_call+0x2847/0x3000 [ 292.710431][T16251] do_syscall_64+0xc0/0x2a0 [ 292.710463][T16251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.710548][T16251] RIP: 0033:0x7f9f1a88aeb9 [ 292.710562][T16251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.710580][T16251] RSP: 002b:00007f9f192e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.710639][T16251] RAX: ffffffffffffffda RBX: 00007f9f1ab05fa0 RCX: 00007f9f1a88aeb9 [ 292.710663][T16251] RDX: 0000000000000012 RSI: 00002000000000c0 RDI: 0000000000000003 [ 292.710675][T16251] RBP: 00007f9f192e7090 R08: 0000000000000000 R09: 0000000000000000 [ 292.710687][T16251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.710698][T16251] R13: 00007f9f1ab06038 R14: 00007f9f1ab05fa0 R15: 00007ffd2ac1f1b8 [ 292.710716][T16251] [ 293.039741][T16261] netlink: 'syz.9.4267': attribute type 1 has an invalid length. [ 293.086509][T16261] bond9: entered promiscuous mode [ 293.126287][T16261] 8021q: adding VLAN 0 to HW filter on device bond9 [ 293.173511][T16269] FAULT_INJECTION: forcing a failure. [ 293.173511][T16269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.186772][T16269] CPU: 1 UID: 0 PID: 16269 Comm: syz.8.4273 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 293.186871][T16269] Tainted: [W]=WARN [ 293.186879][T16269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.186904][T16269] Call Trace: [ 293.186912][T16269] [ 293.186921][T16269] __dump_stack+0x1d/0x30 [ 293.186949][T16269] dump_stack_lvl+0x95/0xd0 [ 293.186974][T16269] dump_stack+0x15/0x1b [ 293.187037][T16269] should_fail_ex+0x263/0x280 [ 293.187110][T16269] should_fail+0xb/0x20 [ 293.187145][T16269] should_fail_usercopy+0x1a/0x20 [ 293.187181][T16269] strncpy_from_user+0x27/0x250 [ 293.187209][T16269] ? __rcu_read_unlock+0x4e/0x70 [ 293.187294][T16269] path_removexattrat+0x82/0x590 [ 293.187338][T16269] __x64_sys_fremovexattr+0x35/0x40 [ 293.187414][T16269] x64_sys_call+0x4da/0x3000 [ 293.187442][T16269] do_syscall_64+0xc0/0x2a0 [ 293.187477][T16269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.187502][T16269] RIP: 0033:0x7f9f1a88aeb9 [ 293.187533][T16269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.187566][T16269] RSP: 002b:00007f9f192e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 293.187590][T16269] RAX: ffffffffffffffda RBX: 00007f9f1ab05fa0 RCX: 00007f9f1a88aeb9 [ 293.187606][T16269] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 293.187621][T16269] RBP: 00007f9f192e7090 R08: 0000000000000000 R09: 0000000000000000 [ 293.187648][T16269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.187661][T16269] R13: 00007f9f1ab06038 R14: 00007f9f1ab05fa0 R15: 00007ffd2ac1f1b8 [ 293.187682][T16269] [ 293.481804][T16291] tc_dump_action: action bad kind [ 293.575357][T16298] loop9: detected capacity change from 0 to 512 [ 293.592453][T16298] ext4: Unknown parameter 'nouser_xattr' [ 293.608794][T16303] netlink: 'syz.7.4286': attribute type 1 has an invalid length. [ 293.841130][T16330] netlink: 'syz.9.4298': attribute type 1 has an invalid length. [ 293.862100][T16335] __nla_validate_parse: 19 callbacks suppressed [ 293.862117][T16335] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4301'. [ 293.930024][T16345] netlink: 'syz.5.4304': attribute type 1 has an invalid length. [ 293.944389][T16345] bond14: entered promiscuous mode [ 293.950298][T16345] 8021q: adding VLAN 0 to HW filter on device bond14 [ 293.967015][T16345] bond14: (slave bridge11): making interface the new active one [ 293.974787][T16345] bridge11: entered promiscuous mode [ 293.989742][T16349] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4302'. [ 293.995531][T16345] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 294.103962][T16356] bond10: entered allmulticast mode [ 294.129937][T16356] 8021q: adding VLAN 0 to HW filter on device bond10 [ 294.277542][T16374] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4315'. [ 294.321446][T16381] netlink: 'syz.5.4318': attribute type 1 has an invalid length. [ 294.329821][T16378] loop9: detected capacity change from 0 to 512 [ 294.337343][T16378] ext4: Unknown parameter 'noacl' [ 294.392028][T16381] bond15: entered promiscuous mode [ 294.409591][T16381] 8021q: adding VLAN 0 to HW filter on device bond15 [ 294.430413][T16381] bond15: (slave bridge12): making interface the new active one [ 294.438251][T16381] bridge12: entered promiscuous mode [ 294.445269][T16381] bond15: (slave bridge12): Enslaving as an active interface with an up link [ 294.476451][T16389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4320'. [ 294.492404][T16392] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4321'. [ 294.524070][T16399] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4322'. [ 294.533208][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4322'. [ 294.582648][T16405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4325'. [ 294.609275][T16409] loop9: detected capacity change from 0 to 512 [ 294.622608][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'. [ 294.661817][T16409] EXT4-fs: Ignoring removed oldalloc option [ 294.681842][T16409] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 294.714283][T16409] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 294.734906][T16409] EXT4-fs (loop9): 1 truncate cleaned up [ 294.769262][T16409] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.799281][T16418] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4329'. [ 294.809648][T16420] netlink: 'syz.5.4331': attribute type 1 has an invalid length. [ 294.848034][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.869760][T16420] bond16: entered promiscuous mode [ 294.887787][T16420] 8021q: adding VLAN 0 to HW filter on device bond16 [ 294.959829][T16427] bond16: (slave bridge13): making interface the new active one [ 294.967619][T16427] bridge13: entered promiscuous mode [ 294.983687][T16427] bond16: (slave bridge13): Enslaving as an active interface with an up link [ 295.073236][T16437] FAULT_INJECTION: forcing a failure. [ 295.073236][T16437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.086629][T16437] CPU: 0 UID: 0 PID: 16437 Comm: syz.8.4335 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 295.086747][T16437] Tainted: [W]=WARN [ 295.086756][T16437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 295.086771][T16437] Call Trace: [ 295.086779][T16437] [ 295.086788][T16437] __dump_stack+0x1d/0x30 [ 295.086812][T16437] dump_stack_lvl+0x95/0xd0 [ 295.086859][T16437] dump_stack+0x15/0x1b [ 295.086884][T16437] should_fail_ex+0x263/0x280 [ 295.086939][T16437] should_fail+0xb/0x20 [ 295.087027][T16437] should_fail_usercopy+0x1a/0x20 [ 295.087093][T16437] _copy_from_user+0x1c/0xb0 [ 295.087121][T16437] ___sys_sendmsg+0xc1/0x1e0 [ 295.087155][T16437] __x64_sys_sendmsg+0xd4/0x160 [ 295.087183][T16437] x64_sys_call+0x17ba/0x3000 [ 295.087216][T16437] do_syscall_64+0xc0/0x2a0 [ 295.087330][T16437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.087356][T16437] RIP: 0033:0x7f9f1a88aeb9 [ 295.087436][T16437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.087458][T16437] RSP: 002b:00007f9f192e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.087592][T16437] RAX: ffffffffffffffda RBX: 00007f9f1ab05fa0 RCX: 00007f9f1a88aeb9 [ 295.087610][T16437] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 295.087703][T16437] RBP: 00007f9f192e7090 R08: 0000000000000000 R09: 0000000000000000 [ 295.087721][T16437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.087737][T16437] R13: 00007f9f1ab06038 R14: 00007f9f1ab05fa0 R15: 00007ffd2ac1f1b8 [ 295.087763][T16437] [ 295.502470][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 295.502519][ T29] audit: type=1400 audit(1770330886.084:3750): avc: denied { connect } for pid=16457 comm="syz.9.4345" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.711966][T16466] syzkaller0: entered promiscuous mode [ 295.717574][T16466] syzkaller0: entered allmulticast mode [ 295.802813][T16466] loop9: detected capacity change from 0 to 512 [ 295.815679][T16466] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 295.840081][T16466] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.4348: inode has both inline data and extents flags [ 295.925125][T16466] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.4348: couldn't read orphan inode 13 (err -117) [ 295.981095][T16490] 8021q: adding VLAN 0 to HW filter on device bond17 [ 295.988315][T16466] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.033934][ T29] audit: type=1326 audit(1770330886.614:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16465 comm="syz.9.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 296.057720][ T29] audit: type=1326 audit(1770330886.614:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16465 comm="syz.9.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 296.081290][ T29] audit: type=1326 audit(1770330886.614:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16465 comm="syz.9.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 296.105112][ T29] audit: type=1326 audit(1770330886.614:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16465 comm="syz.9.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 296.234742][ T29] audit: type=1400 audit(1770330886.804:3755): avc: denied { create } for pid=16498 comm="syz.0.4351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 296.255524][ T29] audit: type=1400 audit(1770330886.814:3756): avc: denied { bind } for pid=16498 comm="syz.0.4351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 296.276255][ T29] audit: type=1400 audit(1770330886.814:3757): avc: denied { execute_no_trans } for pid=16498 comm="syz.0.4351" path="/967/file1" dev="tmpfs" ino=5034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 296.385939][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.788099][ T29] audit: type=1400 audit(1770330887.374:3758): avc: denied { append } for pid=16530 comm="syz.9.4360" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 297.063062][T16556] validate_nla: 2 callbacks suppressed [ 297.063078][T16556] netlink: 'syz.5.4366': attribute type 1 has an invalid length. [ 297.123149][T16556] bond17: entered promiscuous mode [ 297.159594][T16556] 8021q: adding VLAN 0 to HW filter on device bond17 [ 297.229167][T16568] 8021q: adding VLAN 0 to HW filter on device bond11 [ 297.268076][T16556] bond17: (slave bridge14): making interface the new active one [ 297.275829][T16556] bridge14: entered promiscuous mode [ 297.282819][T16556] bond17: (slave bridge14): Enslaving as an active interface with an up link [ 297.352579][T16573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.403905][ T29] audit: type=1400 audit(1770330887.984:3759): avc: denied { write } for pid=16590 comm="syz.9.4374" path="socket:[52705]" dev="sockfs" ino=52705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.433388][T16597] syzkaller0: entered allmulticast mode [ 297.472091][T16596] syzkaller0 (unregistering): left allmulticast mode [ 297.768306][T16631] 8021q: adding VLAN 0 to HW filter on device bond8 [ 297.789499][T16608] loop8: detected capacity change from 0 to 32768 [ 297.961791][T16644] syzkaller0: entered promiscuous mode [ 297.967466][T16644] syzkaller0: entered allmulticast mode [ 297.995552][T16649] netlink: 'syz.0.4389': attribute type 46 has an invalid length. [ 298.015216][T16651] macsec1: entered allmulticast mode [ 298.020578][T16651] bond0: entered allmulticast mode [ 298.035971][T16651] bond0: left allmulticast mode [ 298.062787][T16644] loop8: detected capacity change from 0 to 512 [ 298.074004][T16644] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 298.119995][T16644] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #13: comm syz.8.4387: inode has both inline data and extents flags [ 298.155086][T16644] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4387: couldn't read orphan inode 13 (err -117) [ 298.168660][T16644] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.328763][T11189] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.296856][T16705] 9p: Bad value for 'wfdno' [ 299.791246][T16733] __nla_validate_parse: 15 callbacks suppressed [ 299.791263][T16733] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4419'. [ 299.824578][T16733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4419'. [ 299.843811][T16733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4419'. [ 299.852879][T16733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4419'. [ 300.125990][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4421'. [ 300.142416][T16737] 8021q: adding VLAN 0 to HW filter on device bond9 [ 300.191750][T16743] netlink: 'syz.7.4423': attribute type 1 has an invalid length. [ 300.210708][T16743] bond10: entered promiscuous mode [ 300.216107][T16743] 8021q: adding VLAN 0 to HW filter on device bond10 [ 300.258525][T16749] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4424'. [ 300.307969][T16753] netlink: 'syz.7.4426': attribute type 1 has an invalid length. [ 300.621235][T16775] netlink: 'syz.5.4434': attribute type 1 has an invalid length. [ 300.642221][T16775] bond18: entered promiscuous mode [ 300.643713][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 300.643750][ T29] audit: type=1400 audit(1770330891.224:3767): avc: denied { bind } for pid=16774 comm="syz.0.4435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 300.656846][T16775] 8021q: adding VLAN 0 to HW filter on device bond18 [ 300.680506][T16779] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4436'. [ 300.720481][ T29] audit: type=1400 audit(1770330891.274:3768): avc: denied { read } for pid=16774 comm="syz.0.4435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 300.745302][T16786] netlink: 'syz.7.4438': attribute type 1 has an invalid length. [ 300.761103][ T29] audit: type=1326 audit(1770330891.344:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.5.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 300.784650][ T29] audit: type=1326 audit(1770330891.344:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.5.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 300.808378][ T29] audit: type=1326 audit(1770330891.344:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.5.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 300.832220][ T29] audit: type=1326 audit(1770330891.344:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.5.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 300.855982][ T29] audit: type=1326 audit(1770330891.344:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.5.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 300.879741][ T29] audit: type=1326 audit(1770330891.344:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.5.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 300.903247][ T29] audit: type=1326 audit(1770330891.344:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.5.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 300.926850][ T29] audit: type=1326 audit(1770330891.344:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.5.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 301.023276][T16789] netlink: 'syz.9.4440': attribute type 10 has an invalid length. [ 301.037858][T16789] netlink: 'syz.9.4440': attribute type 10 has an invalid length. [ 301.332246][T16809] netlink: 'syz.8.4447': attribute type 1 has an invalid length. [ 301.348463][T16809] bond9: entered promiscuous mode [ 301.353839][T16809] 8021q: adding VLAN 0 to HW filter on device bond9 [ 301.398171][T16812] loop8: detected capacity change from 0 to 512 [ 301.405278][T16812] EXT4-fs: inline encryption not supported [ 301.575842][T16824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4452'. [ 301.663957][T16830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4454'. [ 301.675428][T16812] EXT4-fs (loop8): 1 orphan inode deleted [ 301.681807][T16812] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.699901][T16812] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.161126][T16847] syzkaller0: entered promiscuous mode [ 302.166816][T16847] syzkaller0: entered allmulticast mode [ 302.230306][T12530] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 1 [ 302.265769][T16847] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4460'. [ 302.287986][T16847] loop9: detected capacity change from 0 to 512 [ 302.295350][T11189] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.323367][T16847] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 302.361054][T16847] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.4460: inode has both inline data and extents flags [ 302.394369][T16847] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.4460: couldn't read orphan inode 13 (err -117) [ 302.437596][T16847] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.605532][T16879] netlink: 'syz.0.4468': attribute type 10 has an invalid length. [ 302.613771][T16879] netlink: 'syz.0.4468': attribute type 10 has an invalid length. [ 302.628483][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.672623][T16881] loop9: detected capacity change from 0 to 128 [ 302.683727][T16881] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 302.705169][T16881] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.178968][T16901] netlink: 'syz.7.4477': attribute type 1 has an invalid length. [ 303.555158][T11255] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.583190][T16914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=16914 comm=syz.8.4483 [ 303.711830][T16920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56083 sclass=netlink_route_socket pid=16920 comm=syz.8.4483 [ 303.904977][T16926] netlink: 'syz.5.4488': attribute type 1 has an invalid length. [ 304.323097][T16942] sctp: [Deprecated]: syz.5.4494 (pid 16942) Use of int in maxseg socket option. [ 304.323097][T16942] Use struct sctp_assoc_value instead [ 304.440796][T16962] netlink: 'syz.9.4499': attribute type 1 has an invalid length. [ 304.465937][T16964] netlink: 'syz.0.4501': attribute type 1 has an invalid length. [ 304.916473][T17003] netlink: 'syz.0.4517': attribute type 1 has an invalid length. [ 305.148335][T17014] __nla_validate_parse: 4 callbacks suppressed [ 305.148354][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4521'. [ 305.343116][T17048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4532'. [ 305.377509][T17052] loop9: detected capacity change from 0 to 2048 [ 305.491668][T17063] Cannot find del_set index 0 as target [ 305.534878][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4540'. [ 305.578544][T17073] FAULT_INJECTION: forcing a failure. [ 305.578544][T17073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.591748][T17073] CPU: 0 UID: 0 PID: 17073 Comm: syz.8.4544 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 305.591789][T17073] Tainted: [W]=WARN [ 305.591798][T17073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 305.591814][T17073] Call Trace: [ 305.591883][T17073] [ 305.591892][T17073] __dump_stack+0x1d/0x30 [ 305.591924][T17073] dump_stack_lvl+0x95/0xd0 [ 305.591953][T17073] dump_stack+0x15/0x1b [ 305.592014][T17073] should_fail_ex+0x263/0x280 [ 305.592055][T17073] should_fail+0xb/0x20 [ 305.592093][T17073] should_fail_usercopy+0x1a/0x20 [ 305.592174][T17073] _copy_from_user+0x1c/0xb0 [ 305.592216][T17073] __se_sys_io_uring_setup+0x11f/0x1e0 [ 305.592262][T17073] __x64_sys_io_uring_setup+0x31/0x40 [ 305.592294][T17073] x64_sys_call+0x244c/0x3000 [ 305.592327][T17073] do_syscall_64+0xc0/0x2a0 [ 305.592388][T17073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.592476][T17073] RIP: 0033:0x7f9f1a88aeb9 [ 305.592496][T17073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.592519][T17073] RSP: 002b:00007f9f192e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 305.592605][T17073] RAX: ffffffffffffffda RBX: 00007f9f1ab05fa0 RCX: 00007f9f1a88aeb9 [ 305.592625][T17073] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00000000000056ab [ 305.592645][T17073] RBP: 00007f9f192e7090 R08: 0000000000000000 R09: 0000000000000000 [ 305.592662][T17073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.592679][T17073] R13: 00007f9f1ab06038 R14: 00007f9f1ab05fa0 R15: 00007ffd2ac1f1b8 [ 305.592705][T17073] [ 305.844068][T17082] bond10: ARP target 9.0.0.0 is already present [ 305.850493][T17082] bond10: option arp_ip_target: invalid value (9) [ 305.868447][T17087] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4549'. [ 306.011249][T17082] bond10 (unregistering): Released all slaves [ 306.059296][T17101] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4552'. [ 306.097758][T17107] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4554'. [ 306.248426][T17121] syzkaller0: entered promiscuous mode [ 306.254220][T17121] syzkaller0: entered allmulticast mode [ 306.288933][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4560'. [ 306.300922][T17121] loop8: detected capacity change from 0 to 512 [ 306.312903][T17121] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 306.321330][T17121] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #13: comm syz.8.4560: inode has both inline data and extents flags [ 306.356026][T17121] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4560: couldn't read orphan inode 13 (err -117) [ 306.369024][T17121] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.383390][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 306.383405][ T29] audit: type=1326 audit(1770330896.974:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.8.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1a88aeb9 code=0x7ffc0000 [ 306.413111][ T29] audit: type=1326 audit(1770330896.974:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.8.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1a88aeb9 code=0x7ffc0000 [ 306.462499][ T29] audit: type=1400 audit(1770330897.024:3840): avc: denied { mount } for pid=17110 comm="syz.0.4556" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 306.755497][ T29] audit: type=1400 audit(1770330897.344:3841): avc: denied { read } for pid=17138 comm="syz.9.4564" path="socket:[53228]" dev="sockfs" ino=53228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 306.794579][T17139] x_tables: duplicate entry at hook 2 [ 306.820388][T17141] loop9: detected capacity change from 0 to 128 [ 306.827593][T17141] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 306.867684][T11189] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.881244][T17141] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4565'. [ 306.891621][ T29] audit: type=1400 audit(1770330897.484:3842): avc: denied { write } for pid=17140 comm="syz.9.4565" name="fib_triestat" dev="proc" ino=4026532428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 306.961610][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4567'. [ 306.993810][T17143] 8021q: adding VLAN 0 to HW filter on device bond11 [ 307.003659][T17143] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4567'. [ 307.197438][T17155] netlink: 'syz.9.4572': attribute type 1 has an invalid length. [ 307.219117][ T29] audit: type=1400 audit(1770330897.804:3843): avc: denied { listen } for pid=17151 comm="syz.7.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 307.310447][ T29] audit: type=1400 audit(1770330897.824:3844): avc: denied { accept } for pid=17151 comm="syz.7.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 307.330506][T17157] bond19: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 307.385459][T17157] bond19 (unregistering): Released all slaves [ 307.419993][T17166] pimreg: entered allmulticast mode [ 307.704966][T17185] loop8: detected capacity change from 0 to 512 [ 307.707086][ T29] audit: type=1400 audit(1770330898.284:3845): avc: denied { shutdown } for pid=17183 comm="syz.8.4566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 307.729581][T17185] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 307.745756][T17185] EXT4-fs (loop8): 1 truncate cleaned up [ 307.756498][T17185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.771707][ T29] audit: type=1400 audit(1770330898.354:3846): avc: denied { setattr } for pid=17183 comm="syz.8.4566" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 307.809975][T11189] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.828866][T17192] netlink: 'syz.8.4584': attribute type 1 has an invalid length. [ 307.895569][ T29] audit: type=1400 audit(1770330898.484:3847): avc: denied { read } for pid=17198 comm="syz.8.4587" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 308.091500][T17209] dns_resolver: Unsupported server list version (0) [ 308.147259][T17200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.156542][T17200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.732154][T17224] netlink: 'syz.9.4596': attribute type 1 has an invalid length. [ 308.767538][T17226] IPv6: A: Disabled Multicast RS [ 309.101797][T17235] pim6reg: entered allmulticast mode [ 309.107316][T17236] pim6reg: left allmulticast mode [ 309.169874][T17222] loop8: detected capacity change from 0 to 32768 [ 309.353640][T17243] loop9: detected capacity change from 0 to 512 [ 309.393871][T17243] EXT4-fs: Ignoring removed oldalloc option [ 309.561120][T17243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.974744][T17261] netlink: 'syz.8.4610': attribute type 1 has an invalid length. [ 310.032473][T17261] bond10: entered promiscuous mode [ 310.052801][T17261] 8021q: adding VLAN 0 to HW filter on device bond10 [ 310.076172][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.184748][T17272] loop8: detected capacity change from 0 to 128 [ 310.205246][T17272] vfat: Unknown parameter 'uni_xlat0BqHDUe' [ 310.256510][T17272] loop8: detected capacity change from 0 to 512 [ 310.282931][T17274] __nla_validate_parse: 7 callbacks suppressed [ 310.282976][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4616'. [ 310.303348][T17276] can: request_module (can-proto-0) failed. [ 310.337105][T17272] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.365306][T17274] netlink: 'syz.0.4616': attribute type 12 has an invalid length. [ 310.373181][T17274] netlink: 'syz.0.4616': attribute type 29 has an invalid length. [ 310.381150][T17274] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4616'. [ 310.390249][T17274] netlink: 59 bytes leftover after parsing attributes in process `syz.0.4616'. [ 310.409898][T17272] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.645146][T11189] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.858598][T17316] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4630'. [ 311.420325][T17337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17337 comm=syz.7.4634 [ 311.470463][T17334] syzkaller0: entered promiscuous mode [ 311.476049][T17334] syzkaller0: entered allmulticast mode [ 311.613030][T17347] netlink: 'syz.0.4638': attribute type 1 has an invalid length. [ 311.621690][T17334] netlink: 'syz.9.4635': attribute type 12 has an invalid length. [ 311.629544][T17334] netlink: 'syz.9.4635': attribute type 29 has an invalid length. [ 311.637408][T17334] netlink: 148 bytes leftover after parsing attributes in process `syz.9.4635'. [ 311.646638][T17334] netlink: 59 bytes leftover after parsing attributes in process `syz.9.4635'. [ 311.719436][T17347] bond18: entered promiscuous mode [ 311.742770][T17347] 8021q: adding VLAN 0 to HW filter on device bond18 [ 311.791005][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 311.791018][ T29] audit: type=1326 audit(1770330902.374:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17333 comm="syz.9.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 311.878207][ T29] audit: type=1326 audit(1770330902.414:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17333 comm="syz.9.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 311.993383][T17367] IPVS: Error connecting to the multicast addr [ 312.129976][T17377] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4648'. [ 312.395753][T17408] bridge_slave_0: left allmulticast mode [ 312.401465][T17408] bridge_slave_0: left promiscuous mode [ 312.407319][T17408] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.415842][T17408] bridge_slave_1: left allmulticast mode [ 312.421518][T17408] bridge_slave_1: left promiscuous mode [ 312.427272][T17408] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.436643][T17408] .`: (slave bond_slave_0): Releasing backup interface [ 312.447894][T17408] .`: (slave bond_slave_1): Releasing backup interface [ 312.462103][T17408] team0: Port device team_slave_0 removed [ 312.469982][T17408] team0: Port device team_slave_1 removed [ 312.476318][T17408] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 312.492628][T17410] FAULT_INJECTION: forcing a failure. [ 312.492628][T17410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.505758][T17410] CPU: 1 UID: 0 PID: 17410 Comm: syz.9.4664 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 312.505798][T17410] Tainted: [W]=WARN [ 312.505807][T17410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.505823][T17410] Call Trace: [ 312.505831][T17410] [ 312.505838][T17410] __dump_stack+0x1d/0x30 [ 312.505996][T17410] dump_stack_lvl+0x95/0xd0 [ 312.506099][T17410] dump_stack+0x15/0x1b [ 312.506117][T17410] should_fail_ex+0x263/0x280 [ 312.506152][T17410] should_fail+0xb/0x20 [ 312.506234][T17410] should_fail_usercopy+0x1a/0x20 [ 312.506423][T17410] _copy_to_user+0x20/0xa0 [ 312.506447][T17410] simple_read_from_buffer+0xb5/0x130 [ 312.506482][T17410] proc_fail_nth_read+0x10e/0x150 [ 312.506531][T17410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.506638][T17410] vfs_read+0x1ab/0x7f0 [ 312.506656][T17410] ? __rcu_read_unlock+0x4e/0x70 [ 312.506690][T17410] ? __fget_files+0x184/0x1c0 [ 312.506717][T17410] ? mutex_lock+0x57/0x90 [ 312.506744][T17410] ksys_read+0xdc/0x1a0 [ 312.506784][T17410] __x64_sys_read+0x40/0x50 [ 312.506806][T17410] x64_sys_call+0x2889/0x3000 [ 312.506933][T17410] do_syscall_64+0xc0/0x2a0 [ 312.506966][T17410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.506988][T17410] RIP: 0033:0x7f781788b78e [ 312.507010][T17410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.507079][T17410] RSP: 002b:00007f7816326fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.507102][T17410] RAX: ffffffffffffffda RBX: 00007f78163276c0 RCX: 00007f781788b78e [ 312.507119][T17410] RDX: 000000000000000f RSI: 00007f78163270a0 RDI: 0000000000000004 [ 312.507156][T17410] RBP: 00007f7816327090 R08: 0000000000000000 R09: 0000000000000000 [ 312.507168][T17410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.507179][T17410] R13: 00007f7817b46038 R14: 00007f7817b45fa0 R15: 00007ffd65e17a38 [ 312.507197][T17410] [ 312.814174][T17422] netlink: 'syz.0.4671': attribute type 1 has an invalid length. [ 312.840870][T17422] bond19: entered promiscuous mode [ 312.854024][T17422] 8021q: adding VLAN 0 to HW filter on device bond19 [ 313.026321][T17450] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4682'. [ 313.109257][T17458] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4687'. [ 313.118486][T17458] x_tables: duplicate entry at hook 2 [ 313.205223][T17472] syzkaller0: entered promiscuous mode [ 313.210713][T17472] syzkaller0: entered allmulticast mode [ 313.233039][T17472] netlink: 'syz.9.4691': attribute type 12 has an invalid length. [ 313.241132][T17472] netlink: 'syz.9.4691': attribute type 29 has an invalid length. [ 313.249082][T17472] netlink: 148 bytes leftover after parsing attributes in process `syz.9.4691'. [ 313.264731][ T29] audit: type=1326 audit(1770330903.844:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17470 comm="syz.9.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 313.288327][ T29] audit: type=1326 audit(1770330903.844:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17470 comm="syz.9.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 313.321904][T17479] 9p: Could not find request transport: fTd [ 313.332611][T17479] loop8: detected capacity change from 0 to 512 [ 313.339626][T17479] EXT4-fs: Ignoring removed oldalloc option [ 313.346984][T17479] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 313.371830][T17479] EXT4-fs (loop8): 1 truncate cleaned up [ 313.379145][T17479] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.728195][T17517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.746180][T17517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.994105][T17531] veth0: entered promiscuous mode [ 314.009923][T17530] veth0: left promiscuous mode [ 314.051820][T11189] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.110807][T17538] netlink: 'syz.0.4720': attribute type 1 has an invalid length. [ 314.192889][T17540] netlink: 'syz.0.4721': attribute type 12 has an invalid length. [ 314.200772][T17540] netlink: 'syz.0.4721': attribute type 29 has an invalid length. [ 314.244765][ T29] audit: type=1326 audit(1770330904.814:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.0.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59654faeb9 code=0x7ffc0000 [ 314.268362][ T29] audit: type=1326 audit(1770330904.814:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.0.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59654faeb9 code=0x7ffc0000 [ 314.534455][T17569] netlink: 'syz.7.4731': attribute type 1 has an invalid length. [ 314.543326][T17568] cgroup: Unexpected value for 'nofavordynmods' [ 314.698808][T17579] loop8: detected capacity change from 0 to 128 [ 314.718323][T17579] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 314.746437][T17579] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.780780][T11189] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 314.796445][T11189] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path /324/file1/lost+found: directory fails checksum at offset 0 [ 314.824741][T11189] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path /324/file1/lost+found: directory fails checksum at offset 1024 [ 314.842301][T11189] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path /324/file1/lost+found: directory fails checksum at offset 8192 [ 314.885131][T11189] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path /324/file1/lost+found: directory fails checksum at offset 11264 [ 314.914040][T11189] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 314.914033][ T29] audit: type=1400 audit(1770330905.494:3864): avc: denied { rmdir } for pid=11189 comm="syz-executor" name="lost+found" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.952776][T11189] EXT4-fs error (device loop8): ext4_empty_dir:3078: inode #11: comm syz-executor: Directory block failed checksum [ 314.968185][T11189] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 314.973027][T17591] tipc: Can't bind to reserved service type 1 [ 314.983832][T11189] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path /324/file1/lost+found: directory fails checksum at offset 0 [ 314.984318][T11189] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path /324/file1/lost+found: directory fails checksum at offset 1024 [ 315.020511][T11189] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path /324/file1/lost+found: directory fails checksum at offset 8192 [ 315.035785][T11189] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path /324/file1/lost+found: directory fails checksum at offset 11264 [ 315.053457][T11189] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 315.069050][T11189] EXT4-fs error (device loop8): ext4_empty_dir:3078: inode #11: comm syz-executor: Directory block failed checksum [ 315.083699][T11189] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 315.100141][T11189] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 315.116115][T11189] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 315.132622][T11189] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 315.148492][T11189] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 315.165306][T11189] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 315.347979][T17602] netlink: 'syz.9.4743': attribute type 1 has an invalid length. [ 315.396657][T17605] netlink: 'syz.5.4744': attribute type 3 has an invalid length. [ 315.454998][ T29] audit: type=1326 audit(1770330906.034:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17607 comm="syz.9.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 315.478657][ T29] audit: type=1326 audit(1770330906.034:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17607 comm="syz.9.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 315.502169][ T29] audit: type=1326 audit(1770330906.044:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17607 comm="syz.9.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 315.539700][T14560] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.725069][T17621] __nla_validate_parse: 12 callbacks suppressed [ 315.725131][T17621] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4750'. [ 315.736926][T17623] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4751'. [ 315.741563][T17621] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4750'. [ 315.825001][T17630] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4756'. [ 316.095828][T17637] chnl_net:caif_netlink_parms(): no params data found [ 316.187115][T17644] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 316.253387][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4765'. [ 316.419270][T17681] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4769'. [ 316.746516][T17668] netlink: 'syz.0.4763': attribute type 12 has an invalid length. [ 316.754493][T17668] netlink: 'syz.0.4763': attribute type 29 has an invalid length. [ 316.762361][T17668] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4763'. [ 316.771471][T17668] netlink: 59 bytes leftover after parsing attributes in process `syz.0.4763'. [ 316.818795][T17637] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.825971][T17637] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.840382][T17637] bridge_slave_0: entered allmulticast mode [ 316.879555][T17637] bridge_slave_0: entered promiscuous mode [ 316.925200][T17637] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.932324][T17637] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.967838][T17637] bridge_slave_1: entered allmulticast mode [ 316.992836][T17637] bridge_slave_1: entered promiscuous mode [ 317.030632][T17637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.048675][T17637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.090862][T17693] loop9: detected capacity change from 0 to 1024 [ 317.102928][T17637] team0: Port device team_slave_0 added [ 317.112991][T17637] team0: Port device team_slave_1 added [ 317.138659][T17693] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 317.154957][T17698] cgroup: Unexpected value for 'nofavordynmods' [ 317.158945][T17637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.168240][T17637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.194197][T17637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.206379][T17637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.213373][T17637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.238889][T17693] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.239552][T17637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.291023][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 317.291040][ T29] audit: type=1400 audit(1770330907.874:3887): avc: denied { map } for pid=17692 comm="syz.9.4775" path="/391/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 317.331392][ T29] audit: type=1400 audit(1770330907.904:3888): avc: denied { ioctl } for pid=17692 comm="syz.9.4775" path="/391/file1/file1" dev="loop9" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 317.341731][T17637] hsr_slave_0: entered promiscuous mode [ 317.368112][T17637] hsr_slave_1: entered promiscuous mode [ 317.374136][T17637] debugfs: 'hsr0' already exists in 'hsr' [ 317.376333][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 317.380046][T17637] Cannot create hsr debugfs directory [ 317.429901][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4781'. [ 317.466652][ T29] audit: type=1400 audit(1770330908.044:3889): avc: denied { name_bind } for pid=17715 comm="syz.0.4782" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 317.533664][ T29] audit: type=1400 audit(1770330908.114:3890): avc: denied { accept } for pid=17720 comm="syz.0.4783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 317.899616][T17637] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 317.920730][T17637] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 317.938569][T17637] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 317.965938][T17637] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 318.014700][ T29] audit: type=1326 audit(1770330908.594:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.9.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 318.071428][ T29] audit: type=1326 audit(1770330908.604:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.9.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 318.095028][ T29] audit: type=1326 audit(1770330908.604:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.9.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 318.118573][ T29] audit: type=1326 audit(1770330908.604:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.9.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 318.141991][ T29] audit: type=1326 audit(1770330908.604:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.9.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 318.165612][ T29] audit: type=1326 audit(1770330908.604:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.9.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 318.259478][T17637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.279832][T17637] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.294731][T12530] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.301848][T12530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.339524][T17814] loop9: detected capacity change from 0 to 512 [ 318.359041][T17637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.369643][T17637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.394462][T17819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4811'. [ 318.402113][T12530] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.410762][T12530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.438821][T17814] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.501006][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.587195][T17637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.696774][T17863] loop9: detected capacity change from 0 to 128 [ 318.720269][T17863] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 318.757528][T17637] veth0_vlan: entered promiscuous mode [ 318.792225][T17863] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.797139][T17637] veth1_vlan: entered promiscuous mode [ 318.830002][T17637] veth0_macvtap: entered promiscuous mode [ 318.845274][T17637] veth1_macvtap: entered promiscuous mode [ 318.859283][T17637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.868082][T17637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.946724][T10063] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.988662][T10063] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.025151][T10063] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.075054][T10063] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.154843][T17910] 9p: Bad value for 'rfdno' [ 320.281603][T18003] validate_nla: 1 callbacks suppressed [ 320.281627][T18003] netlink: 'syz.0.4848': attribute type 2 has an invalid length. [ 320.328436][T18003] ipvlan0: entered promiscuous mode [ 320.784284][T11255] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.962231][T18057] syzkaller0: entered promiscuous mode [ 320.967890][T18057] syzkaller0: entered allmulticast mode [ 320.999983][T18057] netlink: 'syz.9.4858': attribute type 12 has an invalid length. [ 321.007934][T18057] netlink: 'syz.9.4858': attribute type 29 has an invalid length. [ 321.015791][T18057] __nla_validate_parse: 4 callbacks suppressed [ 321.015862][T18057] netlink: 148 bytes leftover after parsing attributes in process `syz.9.4858'. [ 321.031154][T18057] netlink: 59 bytes leftover after parsing attributes in process `syz.9.4858'. [ 321.297537][T18090] macsec1: entered allmulticast mode [ 321.302933][T18090] macvlan0: entered allmulticast mode [ 321.367708][T18090] macvlan0: left allmulticast mode [ 321.455298][T18106] netlink: 'syz.9.4863': attribute type 1 has an invalid length. [ 321.478753][T18106] 8021q: adding VLAN 0 to HW filter on device bond12 [ 321.503491][T18106] 8021q: adding VLAN 0 to HW filter on device bond12 [ 321.512030][T18106] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 321.523565][T18106] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 321.587745][T18106] macvlan3: entered promiscuous mode [ 321.593135][T18106] macvlan3: entered allmulticast mode [ 321.601779][T18106] bond12: entered promiscuous mode [ 321.636826][T18118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4866'. [ 321.654977][T18106] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 321.671404][T18106] bond12: left promiscuous mode [ 321.707943][T18123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4868'. [ 321.759430][T18131] x_tables: duplicate entry at hook 2 [ 321.773479][T18133] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4872'. [ 321.871911][T18141] loop9: detected capacity change from 0 to 1024 [ 321.935258][T18141] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.123999][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.164849][T18135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4871'. [ 322.182015][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4879'. [ 322.190998][T18157] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4879'. [ 322.200051][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4879'. [ 322.210368][T18159] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4878'. [ 322.229674][ T3321] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.241469][ T3321] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.258560][ T3321] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.284702][ T3321] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.399143][T18171] x_tables: duplicate entry at hook 2 [ 322.780187][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 322.780217][ T29] audit: type=1400 audit(1770330913.364:3929): avc: denied { write } for pid=9242 comm="kworker/0:9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=56908 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 322.804929][T18189] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 322.833717][ T29] audit: type=1400 audit(1770330913.414:3930): avc: denied { create } for pid=18187 comm="syz.7.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 322.853392][ T29] audit: type=1400 audit(1770330913.414:3931): avc: denied { write } for pid=18187 comm="syz.7.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 322.909224][ T29] audit: type=1326 audit(1770330913.494:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 322.967183][ T29] audit: type=1326 audit(1770330913.494:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 322.991114][ T29] audit: type=1326 audit(1770330913.494:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 323.014852][ T29] audit: type=1326 audit(1770330913.494:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 323.038429][ T29] audit: type=1326 audit(1770330913.494:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 323.062058][ T29] audit: type=1326 audit(1770330913.494:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 323.085754][ T29] audit: type=1326 audit(1770330913.494:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 323.148414][T18195] syzkaller0: entered promiscuous mode [ 323.151126][T18203] blktrace: Concurrent blktraces are not allowed on loop10 [ 323.153982][T18195] syzkaller0: entered allmulticast mode [ 323.175764][T18195] netlink: 'syz.2.4893': attribute type 12 has an invalid length. [ 323.184004][T18195] netlink: 'syz.2.4893': attribute type 29 has an invalid length. [ 323.205444][T10063] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.216712][T10063] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.225102][T10063] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.233446][T10063] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.710086][T18253] blktrace: Concurrent blktraces are not allowed on loop18 [ 324.175248][T18280] cgroup: Unexpected value for 'nofavordynmods' [ 324.325897][T18286] loop9: detected capacity change from 0 to 2048 [ 324.332791][T18286] ext4: Unknown parameter 'dont_measure' [ 324.682878][T18316] netlink: 'syz.7.4938': attribute type 3 has an invalid length. [ 325.852262][T18381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.867692][T18381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.877091][T18380] tipc: Started in network mode [ 325.882102][T18380] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 325.889447][T18380] tipc: Enabled bearer , priority 10 [ 325.944308][T18384] loop9: detected capacity change from 0 to 2048 [ 326.499854][T18392] __nla_validate_parse: 23 callbacks suppressed [ 326.499872][T18392] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4964'. [ 326.680839][T18404] netlink: 'syz.5.4968': attribute type 5 has an invalid length. [ 326.688746][T18404] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4968'. [ 327.004731][ T9242] tipc: Node number set to 8432298 [ 327.241350][T18422] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4975'. [ 327.455424][T18431] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4979'. [ 327.709493][T18448] loop9: detected capacity change from 0 to 128 [ 327.785342][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 327.785360][ T29] audit: type=1326 audit(1770330918.374:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.7.4985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 327.818587][T18448] FAT-fs (loop9): error, clusters badly computed (2 != 0) [ 327.825848][T18448] FAT-fs (loop9): Filesystem has been set read-only [ 327.864695][ T29] audit: type=1326 audit(1770330918.404:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.7.4985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 327.875534][T18456] netlink: 'syz.0.4984': attribute type 3 has an invalid length. [ 327.888245][ T29] audit: type=1326 audit(1770330918.404:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.7.4985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2d63fcb78e code=0x7ffc0000 [ 327.919358][ T29] audit: type=1326 audit(1770330918.404:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.7.4985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 327.942963][ T29] audit: type=1326 audit(1770330918.404:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.7.4985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 327.966741][ T29] audit: type=1326 audit(1770330918.404:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.7.4985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 327.990197][ T29] audit: type=1326 audit(1770330918.424:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.7.4985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 328.013784][ T29] audit: type=1326 audit(1770330918.424:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.7.4985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 328.037313][ T29] audit: type=1326 audit(1770330918.424:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18455 comm="syz.7.4985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d63fcb78e code=0x7ffc0000 [ 328.163453][ T29] audit: type=1326 audit(1770330918.454:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18450 comm="syz.7.4985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 328.335420][T18476] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4994'. [ 328.425020][T18478] syzkaller0: entered promiscuous mode [ 328.430558][T18478] syzkaller0: entered allmulticast mode [ 328.494661][T18486] netlink: 'syz.2.4993': attribute type 12 has an invalid length. [ 328.502543][T18486] netlink: 'syz.2.4993': attribute type 29 has an invalid length. [ 328.510457][T18486] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4993'. [ 328.519657][T18486] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4993'. [ 328.626821][T18491] macsec1: entered allmulticast mode [ 328.632176][T18491] macvlan0: entered allmulticast mode [ 328.641176][T18491] macvlan0: left allmulticast mode [ 328.735836][T18503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5001'. [ 329.283884][T18561] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5013'. [ 329.344176][T18555] syzkaller0: entered promiscuous mode [ 329.349824][T18555] syzkaller0: entered allmulticast mode [ 329.394956][T18555] netlink: 'syz.2.5011': attribute type 12 has an invalid length. [ 329.402870][T18555] netlink: 'syz.2.5011': attribute type 29 has an invalid length. [ 329.410771][T18555] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5011'. [ 329.839705][T18605] Cannot find add_set index 0 as target [ 330.875975][T18654] tipc: Enabling of bearer rejected, failed to enable media [ 331.026974][T18658] loop9: detected capacity change from 0 to 8192 [ 331.327665][T18689] loop9: detected capacity change from 0 to 128 [ 331.352895][T18689] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 331.374826][T18689] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.726002][T18698] netlink: 'syz.5.5057': attribute type 13 has an invalid length. [ 331.887419][ T3473] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 38551 - 0 [ 331.896160][ T3473] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 331.966390][ T3473] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 38551 - 0 [ 331.975499][ T3473] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 331.984781][ T3473] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 38551 - 0 [ 331.993255][ T3473] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 332.002035][ T3473] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 38551 - 0 [ 332.010542][ T3473] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 332.063339][T18719] __nla_validate_parse: 9 callbacks suppressed [ 332.063358][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5062'. [ 332.143687][T18726] program syz.2.5067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.155613][T18726] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 332.169422][T18729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5068'. [ 332.178422][T18729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5068'. [ 332.187676][T18731] futex_wake_op: syz.5.5069 tries to shift op by 35; fix this program [ 332.251594][T18739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5072'. [ 332.279015][T18737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5071'. [ 332.353451][T11255] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.442648][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5077'. [ 332.510261][T18754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5078'. [ 332.571258][T18754] 8021q: adding VLAN 0 to HW filter on device bond20 [ 332.738733][T18785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5090'. [ 332.895069][T18791] netlink: 'syz.0.5093': attribute type 1 has an invalid length. [ 332.923686][T18795] loop9: detected capacity change from 0 to 512 [ 332.950949][T18795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.981735][T18799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5095'. [ 333.000550][T18795] ext4 filesystem being mounted at /463/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.159504][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5100'. [ 333.257294][T18809] netlink: 'syz.2.5100': attribute type 1 has an invalid length. [ 333.265145][T18809] netlink: 'syz.2.5100': attribute type 2 has an invalid length. [ 333.273559][T18821] netlink: 'syz.5.5105': attribute type 7 has an invalid length. [ 333.293350][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 333.293365][ T29] audit: type=1400 audit(1770330923.874:4074): avc: denied { ioctl } for pid=18808 comm="syz.2.5100" path="socket:[59881]" dev="sockfs" ino=59881 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 333.446076][T18834] bond1: entered promiscuous mode [ 333.452941][T18834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.469534][T18834] bridge1: entered promiscuous mode [ 333.496146][T18834] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 333.581416][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.751032][ T29] audit: type=1326 audit(1770330924.334:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18861 comm="syz.7.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 333.817251][ T29] audit: type=1326 audit(1770330924.364:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18861 comm="syz.7.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 333.840771][ T29] audit: type=1326 audit(1770330924.364:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18861 comm="syz.7.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 333.864382][ T29] audit: type=1326 audit(1770330924.374:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18861 comm="syz.7.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 333.887913][ T29] audit: type=1326 audit(1770330924.374:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18861 comm="syz.7.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 334.615496][ T29] audit: type=1400 audit(1770330925.174:4080): avc: denied { recv } for pid=18859 comm="syz.2.5122" saddr=10.128.0.163 src=48144 daddr=10.128.0.84 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 334.927129][T18890] 9p: Bad value for 'rfdno' [ 335.516278][ T29] audit: type=1326 audit(1770330926.104:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18910 comm="syz.0.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59654faeb9 code=0x7ffc0000 [ 335.539876][ T29] audit: type=1326 audit(1770330926.104:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18910 comm="syz.0.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59654faeb9 code=0x7ffc0000 [ 335.563489][ T29] audit: type=1326 audit(1770330926.104:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18910 comm="syz.0.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59654faeb9 code=0x7ffc0000 [ 335.679080][T18915] netlink: 'syz.0.5141': attribute type 1 has an invalid length. [ 335.686965][T18915] netlink: 'syz.0.5141': attribute type 2 has an invalid length. [ 335.850379][T18930] netlink: 'syz.0.5146': attribute type 12 has an invalid length. [ 335.858313][T18930] netlink: 'syz.0.5146': attribute type 29 has an invalid length. [ 336.298043][T18956] bond13: entered promiscuous mode [ 336.303319][T18956] 8021q: adding VLAN 0 to HW filter on device bond13 [ 336.396619][T18956] bridge8: entered promiscuous mode [ 336.402695][T18956] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 336.522893][T18966] loop9: detected capacity change from 0 to 7 [ 336.536254][T18966] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.544161][T18966] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.552064][T18966] loop9: unable to read partition table [ 336.557894][T18966] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 336.557894][T18966] ) failed (rc=-5) [ 336.567082][ T3500] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.604820][T18967] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.612802][T18967] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.620732][T18967] loop9: unable to read partition table [ 336.628610][ T3500] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.650522][ T3500] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.671181][ T3500] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.698904][ T3500] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.043802][T18988] loop9: detected capacity change from 0 to 2048 [ 337.242825][T18999] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 337.274749][T18999] vhci_hcd vhci_hcd.2: invalid port number 96 [ 337.280908][T18999] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 337.347677][T19013] __nla_validate_parse: 14 callbacks suppressed [ 337.347699][T19013] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5179'. [ 337.416292][T19019] 9p: Bad value for 'wfdno' [ 337.578138][T19037] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5189'. [ 337.589800][T19039] x_tables: duplicate entry at hook 2 [ 337.592250][T19025] xfrm0 speed is unknown, defaulting to 1000 [ 337.653446][T19025] xfrm0 speed is unknown, defaulting to 1000 [ 337.738476][T19025] xfrm0 speed is unknown, defaulting to 1000 [ 338.070342][T19049] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5192'. [ 338.087578][T19048] 9p: Bad value for 'wfdno' [ 338.216344][T19055] loop9: detected capacity change from 0 to 1024 [ 338.223079][T19055] ext4: Unknown parameter 'obj_type' [ 338.334051][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 338.334071][ T29] audit: type=1400 audit(1770330928.914:4143): avc: denied { ioctl } for pid=19060 comm="syz.9.5199" path="socket:[60221]" dev="sockfs" ino=60221 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 338.429278][T19071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5202'. [ 338.443504][T19025] infiniband syz1: set active [ 338.448294][T19025] infiniband syz1: added xfrm0 [ 338.459550][ T1035] xfrm0 speed is unknown, defaulting to 1000 [ 338.475215][T19025] RDS/IB: syz1: added [ 338.494344][T19025] smc: adding ib device syz1 with port count 1 [ 338.501454][T19076] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5203'. [ 338.524666][T19025] smc: ib device syz1 port 1 has no pnetid [ 338.530813][ T4453] xfrm0 speed is unknown, defaulting to 1000 [ 338.547346][T19025] xfrm0 speed is unknown, defaulting to 1000 [ 338.607581][T19079] loop9: detected capacity change from 0 to 512 [ 338.624501][T19081] netlink: 'syz.0.5205': attribute type 1 has an invalid length. [ 338.656406][T19081] bond21: entered promiscuous mode [ 338.661777][T19079] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 338.668668][T19081] 8021q: adding VLAN 0 to HW filter on device bond21 [ 338.703870][T19081] bridge20: entered promiscuous mode [ 338.710842][T19081] bond21: (slave bridge20): Enslaving as an active interface with an up link [ 338.719731][T19025] xfrm0 speed is unknown, defaulting to 1000 [ 338.743357][T19079] EXT4-fs (loop9): 1 truncate cleaned up [ 338.762129][T19079] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.811795][T19079] ALSA: seq fatal error: cannot create timer (-19) [ 338.819015][T19025] xfrm0 speed is unknown, defaulting to 1000 [ 338.872787][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.959267][T19025] xfrm0 speed is unknown, defaulting to 1000 [ 339.040517][T19097] macsec1: entered allmulticast mode [ 339.045890][T19097] macvlan0: entered allmulticast mode [ 339.571363][T19097] macvlan0: left allmulticast mode [ 339.617722][T19025] xfrm0 speed is unknown, defaulting to 1000 [ 339.782896][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5216'. [ 339.853299][T19025] xfrm0 speed is unknown, defaulting to 1000 [ 339.954841][T19121] xt_hashlimit: size too large, truncated to 1048576 [ 340.150368][T19134] netlink: 'syz.2.5226': attribute type 1 has an invalid length. [ 340.272592][T19121] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5220'. [ 340.296725][T19134] bond2: entered promiscuous mode [ 340.317049][T19134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 340.354283][T19132] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5224'. [ 340.385801][T19147] bridge2: entered promiscuous mode [ 340.391761][T19147] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 340.431552][T19128] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5220'. [ 340.486591][T19153] netlink: 'syz.9.5231': attribute type 12 has an invalid length. [ 340.494548][T19153] netlink: 'syz.9.5231': attribute type 29 has an invalid length. [ 340.502478][T19153] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5231'. [ 340.529355][ T29] audit: type=1326 audit(1770330931.114:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.9.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 340.570163][T19160] bridge8: entered promiscuous mode [ 340.576901][T19163] netlink: 'syz.2.5236': attribute type 83 has an invalid length. [ 340.598966][T19160] 9p: Bad value for 'rfdno' [ 340.603720][ T29] audit: type=1326 audit(1770330931.124:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19151 comm="syz.9.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 340.627393][ T29] audit: type=1400 audit(1770330931.154:4146): avc: denied { create } for pid=19162 comm="syz.2.5236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 340.647583][ T29] audit: type=1400 audit(1770330931.154:4147): avc: denied { bind } for pid=19162 comm="syz.2.5236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 340.667559][ T29] audit: type=1400 audit(1770330931.164:4148): avc: denied { execmod } for pid=19162 comm="syz.2.5236" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=60333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 340.693903][ T29] audit: type=1400 audit(1770330931.164:4149): avc: denied { execute } for pid=19162 comm="syz.2.5236" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=60333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 340.810085][T19185] netlink: 'syz.9.5247': attribute type 1 has an invalid length. [ 340.838526][T19185] bond14: entered promiscuous mode [ 340.844013][T19185] 8021q: adding VLAN 0 to HW filter on device bond14 [ 340.873608][T19185] bridge9: entered promiscuous mode [ 340.893954][T19185] bond14: (slave bridge9): Enslaving as an active interface with an up link [ 340.917717][T19192] bond19: entered promiscuous mode [ 340.932434][T19192] 8021q: adding VLAN 0 to HW filter on device bond19 [ 341.076106][T19215] xfrm0 speed is unknown, defaulting to 1000 [ 341.153096][T19230] netlink: 'syz.9.5265': attribute type 1 has an invalid length. [ 341.174599][ T29] audit: type=1400 audit(1770330931.754:4150): avc: denied { listen } for pid=19227 comm="syz.0.5264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 341.201551][T19230] bond15: entered promiscuous mode [ 341.207198][T19230] 8021q: adding VLAN 0 to HW filter on device bond15 [ 341.228275][ T29] audit: type=1400 audit(1770330931.784:4151): avc: denied { write } for pid=19227 comm="syz.0.5264" lport=33086 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 341.260522][T19230] bridge10: entered promiscuous mode [ 341.266631][T19230] bond15: (slave bridge10): Enslaving as an active interface with an up link [ 341.327617][T19240] bond22: entered promiscuous mode [ 341.333120][T19240] 8021q: adding VLAN 0 to HW filter on device bond22 [ 341.932505][T19266] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1 sclass=netlink_xfrm_socket pid=19266 comm=syz.9.5278 [ 341.974112][ T29] audit: type=1400 audit(1770330932.544:4152): avc: denied { getattr } for pid=19268 comm="syz.5.5279" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=60917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 341.991684][T19266] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=19266 comm=syz.9.5278 [ 342.038992][T19276] netlink: 'syz.2.5281': attribute type 1 has an invalid length. [ 342.050230][T19272] bond20: entered promiscuous mode [ 342.067090][T19272] 8021q: adding VLAN 0 to HW filter on device bond20 [ 342.188145][T19276] bond3: entered promiscuous mode [ 342.255688][T19276] 8021q: adding VLAN 0 to HW filter on device bond3 [ 342.300177][T19301] loop9: detected capacity change from 0 to 1024 [ 342.318312][T19301] EXT4-fs: Ignoring removed orlov option [ 342.319367][T19297] bridge3: entered promiscuous mode [ 342.342904][T19301] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.397188][T19297] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 342.421871][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.595870][T19318] syzkaller0: entered promiscuous mode [ 342.601567][T19318] syzkaller0: entered allmulticast mode [ 342.617967][T19331] __nla_validate_parse: 9 callbacks suppressed [ 342.617988][T19331] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5304'. [ 342.652188][T19332] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5305'. [ 342.661415][T19332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5305'. [ 342.674637][T19334] veth0: entered promiscuous mode [ 342.679998][T19334] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5306'. [ 342.696186][T19334] veth0 (unregistering): left promiscuous mode [ 342.745137][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5305'. [ 342.754112][T19332] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5305'. [ 342.763165][T19332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5305'. [ 342.772894][ T3473] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.790822][ T3338] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.803385][T19318] xfrm0 speed is unknown, defaulting to 1000 [ 342.811317][ T3338] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.856298][ T3338] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.880474][T19349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5310'. [ 343.076557][T19364] FAULT_INJECTION: forcing a failure. [ 343.076557][T19364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.089786][T19364] CPU: 1 UID: 0 PID: 19364 Comm: syz.9.5315 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 343.089823][T19364] Tainted: [W]=WARN [ 343.089830][T19364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.089846][T19364] Call Trace: [ 343.089854][T19364] [ 343.089864][T19364] __dump_stack+0x1d/0x30 [ 343.089932][T19364] dump_stack_lvl+0x95/0xd0 [ 343.089952][T19364] dump_stack+0x15/0x1b [ 343.090003][T19364] should_fail_ex+0x263/0x280 [ 343.090037][T19364] should_fail+0xb/0x20 [ 343.090090][T19364] should_fail_usercopy+0x1a/0x20 [ 343.090122][T19364] _copy_from_user+0x1c/0xb0 [ 343.090153][T19364] sock_do_ioctl+0xe5/0x230 [ 343.090182][T19364] sock_ioctl+0x41b/0x610 [ 343.090206][T19364] ? mutex_lock+0x57/0x90 [ 343.090227][T19364] ? __pfx_sock_ioctl+0x10/0x10 [ 343.090270][T19364] __se_sys_ioctl+0xce/0x140 [ 343.090306][T19364] __x64_sys_ioctl+0x43/0x50 [ 343.090342][T19364] x64_sys_call+0x14b0/0x3000 [ 343.090395][T19364] do_syscall_64+0xc0/0x2a0 [ 343.090426][T19364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.090445][T19364] RIP: 0033:0x7f78178caeb9 [ 343.090463][T19364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.090484][T19364] RSP: 002b:00007f7816327028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.090551][T19364] RAX: ffffffffffffffda RBX: 00007f7817b45fa0 RCX: 00007f78178caeb9 [ 343.090564][T19364] RDX: 0000200000001b00 RSI: 0000000000008946 RDI: 0000000000000003 [ 343.090575][T19364] RBP: 00007f7816327090 R08: 0000000000000000 R09: 0000000000000000 [ 343.090587][T19364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.090601][T19364] R13: 00007f7817b46038 R14: 00007f7817b45fa0 R15: 00007ffd65e17a38 [ 343.090623][T19364] [ 343.307722][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5318'. [ 343.350806][T19370] netlink: 'syz.7.5319': attribute type 16 has an invalid length. [ 343.358779][T19370] netlink: 'syz.7.5319': attribute type 3 has an invalid length. [ 343.366570][T19370] netlink: 64066 bytes leftover after parsing attributes in process `syz.7.5319'. [ 343.394399][T19372] loop9: detected capacity change from 0 to 256 [ 343.525243][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 343.525340][ T29] audit: type=1326 audit(1770330934.104:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19376 comm="syz.7.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 343.555035][ T29] audit: type=1326 audit(1770330934.104:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19376 comm="syz.7.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6400aeb9 code=0x7ffc0000 [ 343.743176][T19397] loop9: detected capacity change from 0 to 164 [ 343.794166][T19403] xt_hashlimit: size too large, truncated to 1048576 [ 343.902900][ T29] audit: type=1400 audit(1770330934.454:4161): avc: denied { watch watch_reads } for pid=19388 comm="syz.9.5327" path="/515/file0" dev="loop9" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 344.027909][T19417] netlink: 'syz.2.5336': attribute type 12 has an invalid length. [ 344.036008][T19417] netlink: 'syz.2.5336': attribute type 29 has an invalid length. [ 344.044894][ T29] audit: type=1326 audit(1770330934.634:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.2.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d6e9aeb9 code=0x7ffc0000 [ 344.101177][ T29] audit: type=1326 audit(1770330934.634:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.2.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d6e9aeb9 code=0x7ffc0000 [ 344.137576][T19428] netlink: 'syz.0.5341': attribute type 3 has an invalid length. [ 344.180992][T19434] loop9: detected capacity change from 0 to 256 [ 344.195222][T19434] FAT-fs (loop9): Directory bread(block 64) failed [ 344.201877][T19434] FAT-fs (loop9): Directory bread(block 65) failed [ 344.208553][T19434] FAT-fs (loop9): Directory bread(block 66) failed [ 344.215335][T19434] FAT-fs (loop9): Directory bread(block 67) failed [ 344.221910][T19434] FAT-fs (loop9): Directory bread(block 68) failed [ 344.228674][T19434] FAT-fs (loop9): Directory bread(block 69) failed [ 344.235310][T19434] FAT-fs (loop9): Directory bread(block 70) failed [ 344.241862][T19434] FAT-fs (loop9): Directory bread(block 71) failed [ 344.254721][T19434] FAT-fs (loop9): Directory bread(block 72) failed [ 344.261274][T19434] FAT-fs (loop9): Directory bread(block 73) failed [ 344.405772][T19453] ALSA: seq fatal error: cannot create timer (-19) [ 344.496902][T19468] netlink: 'syz.9.5357': attribute type 12 has an invalid length. [ 344.504816][T19468] netlink: 'syz.9.5357': attribute type 29 has an invalid length. [ 344.535325][ T29] audit: type=1326 audit(1770330935.094:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.9.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 344.558928][ T29] audit: type=1326 audit(1770330935.094:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.9.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78178caeb9 code=0x7ffc0000 [ 344.582610][ T29] audit: type=1400 audit(1770330935.104:4166): avc: denied { read } for pid=19447 comm="syz.0.5352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 344.799163][T19497] loop9: detected capacity change from 0 to 512 [ 344.816523][ T29] audit: type=1326 audit(1770330935.404:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19495 comm="syz.5.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 344.844835][T19497] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 344.889161][ T29] audit: type=1326 audit(1770330935.404:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19495 comm="syz.5.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fd0a1b0aeb9 code=0x7ffc0000 [ 344.923874][T19497] EXT4-fs (loop9): 1 truncate cleaned up [ 344.930275][T19497] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.958445][T19497] ALSA: seq fatal error: cannot create timer (-19) [ 344.976873][T11255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.211957][T19549] netlink: 'syz.9.5387': attribute type 12 has an invalid length. [ 346.219971][T19549] netlink: 'syz.9.5387': attribute type 29 has an invalid length. [ 346.381472][T19556] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19556 comm=syz.5.5389 [ 346.638018][T19562] FAULT_INJECTION: forcing a failure. [ 346.638018][T19562] name failslab, interval 1, probability 0, space 0, times 0 [ 346.650860][T19562] CPU: 1 UID: 0 PID: 19562 Comm: syz.2.5392 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 346.650893][T19562] Tainted: [W]=WARN [ 346.650899][T19562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.650940][T19562] Call Trace: [ 346.650949][T19562] [ 346.650957][T19562] __dump_stack+0x1d/0x30 [ 346.650982][T19562] dump_stack_lvl+0x95/0xd0 [ 346.651004][T19562] dump_stack+0x15/0x1b [ 346.651029][T19562] should_fail_ex+0x263/0x280 [ 346.651081][T19562] should_failslab+0x8c/0xb0 [ 346.651104][T19562] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 346.651154][T19562] ? __alloc_skb+0x2f0/0x4b0 [ 346.651190][T19562] __alloc_skb+0x2f0/0x4b0 [ 346.651218][T19562] ? __alloc_skb+0x219/0x4b0 [ 346.651250][T19562] netlink_alloc_large_skb+0xbf/0xf0 [ 346.651352][T19562] netlink_sendmsg+0x40c/0x6f0 [ 346.651378][T19562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.651402][T19562] sock_write_iter+0x32a/0x360 [ 346.651432][T19562] ? __pfx_sock_write_iter+0x10/0x10 [ 346.651520][T19562] vfs_write+0x5a6/0x9f0 [ 346.651550][T19562] ksys_write+0xdc/0x1a0 [ 346.651575][T19562] __x64_sys_write+0x40/0x50 [ 346.651600][T19562] x64_sys_call+0x2847/0x3000 [ 346.651627][T19562] do_syscall_64+0xc0/0x2a0 [ 346.651718][T19562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.651739][T19562] RIP: 0033:0x7f75d6e9aeb9 [ 346.651755][T19562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.651774][T19562] RSP: 002b:00007f75d58f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.651810][T19562] RAX: ffffffffffffffda RBX: 00007f75d7115fa0 RCX: 00007f75d6e9aeb9 [ 346.651828][T19562] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 346.651845][T19562] RBP: 00007f75d58f7090 R08: 0000000000000000 R09: 0000000000000000 [ 346.651861][T19562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.651877][T19562] R13: 00007f75d7116038 R14: 00007f75d7115fa0 R15: 00007ffc70c4f708 [ 346.651926][T19562] [ 347.053195][T19576] xt_hashlimit: size too large, truncated to 1048576 [ 347.106740][T19581] bridge_slave_0 (unregistering): left allmulticast mode [ 347.113805][T19581] bridge_slave_0 (unregistering): left promiscuous mode [ 347.120824][T19581] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.222401][T19591] xt_hashlimit: size too large, truncated to 1048576 [ 347.586944][T19625] netlink: 'syz.9.5420': attribute type 1 has an invalid length. [ 347.594792][T19625] netlink: 'syz.9.5420': attribute type 3 has an invalid length. [ 347.646645][T19634] __nla_validate_parse: 31 callbacks suppressed [ 347.646665][T19634] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5423'. [ 347.680176][T19639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5426'. [ 347.934468][T19663] x_tables: duplicate underflow at hook 2 [ 348.009547][T19667] xfrm0 speed is unknown, defaulting to 1000 [ 348.101678][T19671] netlink: 'syz.7.5436': attribute type 3 has an invalid length. [ 348.196150][T19679] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5440'. [ 348.640389][T19689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5444'. [ 348.661823][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 348.661913][ T29] audit: type=1400 audit(1770330939.244:4197): avc: denied { bind } for pid=19691 comm="syz.5.5446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 348.687992][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5445'. [ 348.697025][T19697] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5445'. [ 348.708299][T19696] xfrm0 speed is unknown, defaulting to 1000 [ 348.719563][T19697] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 348.739073][T19701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5450'. [ 348.767533][T19702] [syz.5.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 348.790132][T19702] veth1_to_batadv: left promiscuous mode [ 348.795891][T19702] veth1_to_batadv: left allmulticast mode [ 348.801807][T19702] batadv_slave_1: left promiscuous mode [ 348.808211][T19702] : left promiscuous mode [ 348.813938][T19702] bond1: left promiscuous mode [ 348.818784][T19702] bridge0: left promiscuous mode [ 348.823813][T19702] bond1: left allmulticast mode [ 348.828709][T19702] bridge0: left allmulticast mode [ 348.833901][T19702] bond2: left promiscuous mode [ 348.838735][T19702] bridge1: left promiscuous mode [ 348.843791][T19702] bond2: left allmulticast mode [ 348.848813][T19702] bridge1: left allmulticast mode [ 348.854144][T19702] bond3: left promiscuous mode [ 348.859008][T19702] bridge2: left promiscuous mode [ 348.864271][T19702] bond4: left promiscuous mode [ 348.869153][T19702] bridge3: left promiscuous mode [ 348.874348][T19702] bond5: left promiscuous mode [ 348.879187][T19702] bridge4: left promiscuous mode [ 348.884288][T19702] bond6: left promiscuous mode [ 348.889169][T19702] bridge5: left promiscuous mode [ 348.894276][T19702] bond8: left promiscuous mode [ 348.899105][T19702] bridge7: left promiscuous mode [ 348.904297][T19702] geneve2: left promiscuous mode [ 348.909386][T19702] bond10: left promiscuous mode [ 348.914252][T19702] bridge8: left promiscuous mode [ 348.924890][T19702] bond11: left promiscuous mode [ 348.929846][T19702] bridge10: left promiscuous mode [ 348.935300][T19702] bond12: left promiscuous mode [ 348.940370][T19702] bond14: left promiscuous mode [ 348.945585][T19702] bridge11: left promiscuous mode [ 348.950862][T19702] bond15: left promiscuous mode [ 348.955798][T19702] bridge12: left promiscuous mode [ 348.961167][T19702] bond16: left promiscuous mode [ 348.966086][T19702] bridge13: left promiscuous mode [ 348.971332][T19702] bond17: left promiscuous mode [ 348.976289][T19702] bridge14: left promiscuous mode [ 348.981593][T19702] bond18: left promiscuous mode [ 348.996961][T19702] bond19: left promiscuous mode [ 349.012810][T19702] bond20: left promiscuous mode [ 349.098734][T19690] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 349.108256][T19690] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 349.130941][T19721] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5456'. [ 349.176792][ T29] audit: type=1400 audit(1770330939.764:4198): avc: denied { ioctl } for pid=19722 comm="syz.9.5457" path="socket:[62170]" dev="sockfs" ino=62170 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 349.401151][T19750] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5470'. [ 349.580020][ T29] audit: type=1400 audit(1770330940.154:4199): avc: denied { getopt } for pid=19758 comm="syz.5.5472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 349.754761][ T29] audit: type=1400 audit(1770330940.344:4200): avc: denied { setopt } for pid=19772 comm="syz.0.5477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 349.800896][T19775] macsec1: entered allmulticast mode [ 349.806535][T19775] macvlan0: entered allmulticast mode [ 349.813975][T19781] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5481'. [ 349.833466][T19775] macvlan0: left allmulticast mode [ 349.933745][T19802] tmpfs: Unknown parameter '\+.5' [ 349.935537][ T29] audit: type=1326 audit(1770330940.514:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19788 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d6e9aeb9 code=0x7ffc0000 [ 349.963051][ T29] audit: type=1326 audit(1770330940.514:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19788 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d6e9aeb9 code=0x7ffc0000 [ 349.986767][ T29] audit: type=1326 audit(1770330940.514:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19788 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75d6e9aeb9 code=0x7ffc0000 [ 350.010474][ T29] audit: type=1326 audit(1770330940.514:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19788 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d6e9aeb9 code=0x7ffc0000 [ 350.034077][ T29] audit: type=1326 audit(1770330940.514:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19788 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f75d6e9aeb9 code=0x7ffc0000 [ 350.057617][ T29] audit: type=1326 audit(1770330940.514:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19788 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d6e9aeb9 code=0x7ffc0000 [ 350.407409][T19842] xfrm0 speed is unknown, defaulting to 1000 [ 350.638376][T19855] 9pnet_fd: Insufficient options for proto=fd [ 350.648151][T19857] xt_hashlimit: size too large, truncated to 1048576 [ 350.955521][T19889] xfrm0 speed is unknown, defaulting to 1000 [ 351.203601][T19922] bond21: entered promiscuous mode [ 351.231634][T19922] 8021q: adding VLAN 0 to HW filter on device bond21 [ 351.252493][T19931] xt_hashlimit: size too large, truncated to 1048576 [ 351.483419][T19937] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.696499][T19937] bridge_slave_0 (unregistering): left allmulticast mode [ 351.703606][T19937] bridge_slave_0 (unregistering): left promiscuous mode [ 351.710680][T19937] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.853713][T19939] bond22: entered promiscuous mode [ 351.875058][T19939] 8021q: adding VLAN 0 to HW filter on device bond22 [ 351.904477][T19952] bond12: entered promiscuous mode [ 351.953186][T19952] 8021q: adding VLAN 0 to HW filter on device bond12 [ 351.989846][T19960] xfrm0 speed is unknown, defaulting to 1000 [ 352.087725][T19968] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 352.174668][T19982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.195660][T19982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.504134][T20000] xt_hashlimit: size too large, truncated to 1048576 [ 352.724828][T20000] __nla_validate_parse: 21 callbacks suppressed [ 352.724848][T20000] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5556'. [ 353.115768][T20017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5560'. [ 353.233795][T20024] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5563'. [ 353.302607][T20029] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5565'. [ 353.414630][T20035] xt_hashlimit: size too large, truncated to 1048576 [ 353.554216][T20036] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5568'. [ 353.579641][T20042] netlink: 280 bytes leftover after parsing attributes in process `syz.2.5569'. [ 353.592480][T20042] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5569'. [ 353.794131][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 353.794148][ T29] audit: type=1400 audit(1770330944.374:4271): avc: denied { mounton } for pid=20058 comm="syz.7.5571" path="/file0" dev="ramfs" ino=63649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 353.908945][T20079] ================================================================== [ 353.917070][T20079] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 353.926721][T20079] [ 353.929056][T20079] write to 0xffff888120122f90 of 8 bytes by task 20072 on cpu 1: [ 353.936778][T20079] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 353.942710][T20079] page_pool_alloc_pages+0xd0/0x130 [ 353.947919][T20079] bpf_test_run_xdp_live+0x66c/0x1360 [ 353.953338][T20079] bpf_prog_test_run_xdp+0x57b/0xa10 [ 353.958634][T20079] bpf_prog_test_run+0x204/0x340 [ 353.963600][T20079] __sys_bpf+0x4c0/0x7b0 [ 353.967855][T20079] __x64_sys_bpf+0x41/0x50 [ 353.972293][T20079] x64_sys_call+0x28e1/0x3000 [ 353.976984][T20079] do_syscall_64+0xc0/0x2a0 [ 353.981520][T20079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.987416][T20079] [ 353.989743][T20079] read to 0xffff888120122f90 of 8 bytes by task 20079 on cpu 0: [ 353.997385][T20079] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 354.003329][T20079] napi_pp_put_page+0xe9/0x200 [ 354.008107][T20079] skb_release_data+0x451/0x490 [ 354.012972][T20079] __kfree_skb+0x44/0x150 [ 354.017311][T20079] sk_skb_reason_drop+0xbd/0x260 [ 354.022277][T20079] skb_vlan_untag+0x52a/0x690 [ 354.026967][T20079] __netif_receive_skb_core+0x24a/0x1950 [ 354.032614][T20079] __netif_receive_skb_list_core+0x113/0x500 [ 354.038598][T20079] netif_receive_skb_list_internal+0x47d/0x5f0 [ 354.044795][T20079] gro_receive_skb+0x374/0x560 [ 354.049577][T20079] cpu_map_kthread_run+0x1135/0x1650 [ 354.054884][T20079] kthread+0x488/0x510 [ 354.058979][T20079] ret_from_fork+0x148/0x280 [ 354.063587][T20079] ret_from_fork_asm+0x1a/0x30 [ 354.068368][T20079] [ 354.070702][T20079] value changed: 0xffffea00054218c0 -> 0x0000000000000000 [ 354.077830][T20079] [ 354.080172][T20079] Reported by Kernel Concurrency Sanitizer on: [ 354.086350][T20079] CPU: 0 UID: 0 PID: 20079 Comm: cpumap/0/map:54 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 354.098183][T20079] Tainted: [W]=WARN [ 354.102000][T20079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.112057][T20079] ==================================================================