last executing test programs: 2.468194581s ago: executing program 2 (id=1220): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x5ee, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaa7f08aa0008004500001cfffe00000002"], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0580c20000000180c2000000080045000058000000002f907800000000000000002480"], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x8) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x1, 0x0, 0x0, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x4, 0x0, 0x1, 0x7, 0x6, @random="3b6dfa1c7bf8"}, 0x14) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0801000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000400000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000fcca0d0bb2da43bf0000000000000000000000000000000000000000000000b86b6e00000002000000000044000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000000000000000007000000a8000000000000000c0008"], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x1a}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.708795572s ago: executing program 4 (id=1237): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 1.678466673s ago: executing program 4 (id=1239): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000480)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000000005f2e"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="48854bbbd8", 0x5}], 0x1, 0x0, 0x0, 0x40}, 0x0) listen(r1, 0x80) creat(&(0x7f0000000300)='./file0/file0\x00', 0xc2) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xd, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00') getdents64(r4, 0xffffffffffffffff, 0x43) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8400, &(0x7f0000000300)=ANY=[], 0x0, 0x252, &(0x7f0000000080)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\\\\&.\x00c6\x0fR\xfc\xbb `\r$\x88oCi\xad\x13\xeb\xea0n\xea,\xc2\xeb\x9e\xa2\xd5\x94\xed\x9e\xd5cHX\xa2@\xdf\x99R\x16\xa1\x8f\xfd\v\xe1m,\xa7W\xfb2d\xe9C\x02B\"\xce\xfcE5e\x01=\xbbK\xe0kLA\xd2\b#{m[\x16\x83u,\xcdo0\x90v\x9a\xc9\xad$z\x8e\xcc\x9cO\xdb\xb2\xf9\x06#\xd9\xf02\xd5&\xd0\x90\xdb\xbb\xa3\xa2\xac\x1a9\xf7Y\xd12\xec\xc0\x84E\xc1\xebM\xe6sN$]\x9a\x8cv~W^X\v\xa4\xdd\x05]\x8d%#\xf7S\x83\xf1\xf0\xd0\x9f\x88\x1a\xdc\xff\n\xce>\xca%\xb9a\xc1\xd1\x95\x01h\x8d\x81Q\x8a\x04n\xba\xc3\xb2O\xd5\xeb\x03\x1dS\xd6\x9ebR\xfd\xb9\xf3\xf4w\xf1Q\x89a\xa7g#\xe3P9\xd5z\x1d\xb5G\x17\x8dC\x88Q@\xbd\xed&a~\x00\xec\xc0\xf2\x04\x19\xb5\x03\xb5\xb1-\xe8\xb6U\xb3\xaef\xdc\x17\xa8kr\x0eJ\r\xd1\x7f\xcaE-\xc2\x92\xa3\x05\x0eVP\x98\xb5VA\by\xadd\x15\xf3\x1e\xa4\xb1*h=:\x1d\x8b\x81.\xa3h\xa0v\xd5n\xf7\xa7D\xf8\x86\x00+\xf8~\x8d\xab\xfb R\xd7\xadh\xbaa\x94\xb9\x01_I\x01\x14\tS\xd3\xaf\xfc\n\xcf\x90\xbc\xf6\x80\x04\xc5\a\xdbV\xb2\x98\x04\xf4\x14\x0e\f\xd4|\xa1\xd0E\x7f\x00\x00\x00\x00\x00\x00\x87\x12\xd5=\xa2<\xc7\x9d\xfb\xd2\x86\xd0\x89\xbfa\x84\x98\xba\x1a\x1d\'\x99w\x14\x1e\'81\x17\x03\xbc\xc1J\x8b\x94\xad\a\xe4\x1f\xe7\xda\xccT\x11\xa9)\xb2\\\xb9v%e\x15A&\xf8Ij\xd1\x85#Wu\xce\xbc\xe2\xbc\xc0\xa9\xc2j\t\xb8\xcbI\xa7\xac\x176\x0e\xda\xc6\xad?\xaaW\x11\x18\xe2HW\x10\\:\xe5Q\xd6\xb5\x8e\x06\"\\\x06\xe4\x00>\xfc\xcb\xf4 \xa6 \x94Q?\x9a\x95\xf5\xa5\x0f\x14M!\xa1S\xfb+<\x1e\xad\xe4\xa5\xc0*\xb1\xc2\xd7\v\xca\x98\xf4\x06\xe1\x0eH+\xe3\xca\xfdXwft`\x1f\xc5G\xe0_\xc4SR\xaf\xeao\f\xffE\x12\xfe\x9a\x19i9)\xe8\xae\"H\x9fS\xf3\x97\x9d\x93\x80+@\x86\xd9\xff*\xa1\x9f\xd7\xc7w\xbd\xa5s\x99\xa9\x8b<\xcb\xd7\x85(j\xb3\xc8\xa4\x06\xf0\xae>\xf5h\xbe\x19\xc6M\x15\xc2L\n\x90\xf6\x81W\xd7\xc2\x91Z\xb6I2m\x01\x12\xab_\x8d\xc8\xd8\xed0l_\xd7-\x90im\xb4E', 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000400)="dcef93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4015e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c000000000000", 0x98}) 1.609751865s ago: executing program 0 (id=1241): perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x5}, 0x10004, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) 1.582051506s ago: executing program 2 (id=1242): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000f40)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe43H\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\xfc\xaa\x93\xed\x8d\x86\xb3\x98\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde\xcb\xcd\xca\xb0CA\x16o}9\xd9\xca_\xeb\x94A\xc8\x97\x88\x1dS\x82\xa7\\\x14\\\xb3\x8d/\x86d3:)S\xef[[|\xd2\xfe\xa9WS]bQ\xd2\x11\xe2\x9ao\xcc\xd4\x9e\xc3\xf0\xd67/\r\xdd*:\xe6w\xdaj\x11z\xe0\x15', &(0x7f00000001c0)='(\x18\x02', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000014c0)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x0, 0x10, 0x1, 0x0, 0x5, 0x10500, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x6, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x0, 0x1, 0x7, 0x2, 0x7fff, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0xfffffffffffffcb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c22, 0x0, @perf_bp={&(0x7f0000000200)}, 0x10208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r0, 0x1, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) sendmsg$key(r3, &(0x7f00000006c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="00e81b9ad47f68fa7fcc1a22b5b18007"], 0xffffffffffffff0a}, 0x1, 0x7}, 0x4050) socket$kcm(0x10, 0x7, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)="0faa32f4c5004e74508e781f16c964fb09272833ad1e79752629c46ca010d7646fade575ca2f00030bc900005878900462a9340b22f764934bc7875fe3e1f54418d98cb0a74c30f84277bca25acffc2a1e95df8bdb3ac421ca131b522317674211b763cc235288b1279b131d7574cbe859331a8092c23f4ac615443ce57b21cf6ae16c53687229abe2d1f71692dcdaca6b0a1fec3b910f10038fd31f55384556000000000000000000", 0x0, 0xffffffff, r4}, 0x38) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xe, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000001d80), &(0x7f0000001d40)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000080), 0x0}, 0x20) 1.532550007s ago: executing program 2 (id=1246): r0 = getpid() r1 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x865, 0x2000000005}, 0x444, 0x32, 0x200, 0x5, 0x9, 0x2, 0x0, 0x0, 0x1, 0x0, 0x200f}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = signalfd(r1, &(0x7f0000001d00)={[0xb]}, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104f9ffffff6100000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000002c00128009000100626f6e64000000001c00028005000100040000000500160000000000050015"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_mr_cache\x00') pread64(r7, &(0x7f0000000180)=""/60, 0x3c, 0x67) r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001ec0)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) lstat(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000020000100000000000000000002000000000000022f86f0a9080006000500004008000400fb17ffff08", @ANYRESHEX=r6], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x14, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r13, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000180100002020662500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000160000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) r17 = dup2(r14, r15) sendmmsg$unix(r3, &(0x7f0000002300)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000340)="a68ad8838b3f041df8867f354b2d35e6a63626ed371f44bf32ca73159a339efdcd6269f93a7772063776986bd2abe2825973eeefebcf3dfc07f9dd1afa1a7d43c2f94b104b58f8d8c8c36d5ce8bef1a9fccadc86e63cd28f09c9d9ed4df8492c77b618bccdbd239f547f0572f39f011fb477360e160451915e3fe6b1bf614ef2178ef80b177ec8532e5eb32d04b64714c4f4ac6b4c5411abc4c6bc3f4bc4c9bf68ec599dedd43cb6e425a42b64e15bb176ecf646ddcf713064d822cd7e81753985cdba6f867dd41b18284d16e88951e72f9540f53b3855", 0xd7}, {&(0x7f0000000680)="ae10130d2cd3fa124b4530f9fb3dde7f9ba9c40f67cebaed78c8a2f1c8c75ed06205cce1c08125bbdc827c14a51168fc9663312e8b07d8087308ab2d1f359fbc7548910459d1ba6a57c819968494b3560b6a6a5d949e1197b9083cedb86e237ceb725a8e86e1ab414e7f861f4bf1485f0e9ac09ef98cfd5fd0433b37854e03d2b915eb0e2b9c9aa62ad5cd00062046916b42ccb3c434f9166d23b71b661ca92dbec362847016123ad2a6a0edaa473097fd66bb8ea1067448ea2a94852257e124ca4f59df9d20ee9555b276113e0159330b5e0e0914218f8bad55072867447cc9f1a379e559416308010064297500"/252, 0xfc}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="6a48a8aaa2bdba069041fb64f0b153e74dd7786f9b073865a9aaf4e3343d59adf51b06cf29f372c30b46bfcf8eea34a68f63beb0b4debd003deec4b4a819924e46253dca303bc58779ff09fbfb260ae4152b04d82c0eaefd1df9f56d4a38586a624f83d75a5b300932742397fe0b79a9f06c7aecbdb604ad584880d22e9d15e52f248ca75fd38608faf3d954dcad82c96b443fa9d2187f78e7c3f8749cd61398c89fe31dc51eb5dd466ef8dd21a845735ee697b4b8b7288f1dcc8de6e9b638b3e5851ad1941a85b07d7b66fc9d5425de", 0xd0}, {&(0x7f0000001b40)="0b50c934efa23f23c6283fa74e71df8c0521b8a79fa1f0e5c554578f68a2ce824674c7f148839c13f06f7a6808d3f84fddd80dca7bee5b9e430ada113f244f1c84099a09aafbc3e673507530910d869d37a639c2d3b9d175c968cc4f2518294e242b6cf2a94993a5db3185aca6b0220de0f21a195ea424ad6bbf69eb48e9a0c8be6759dbf3cf110a708f51913465054882d77d8a3ef0b8b6cce20de09358a0367aa7a48c8c5cf2180968a48889bcf528562a562fb6e50c43c9dd89af0383e4d1445a09d487c7cb57", 0xc8}, {&(0x7f0000001c40)="4a2a4c69c4ec1cc9a86534524dafaf1ca448551c80b06c67b14364d68e9a8912c36786e3d84cc9d0d5d007ae", 0x2c}], 0x6, &(0x7f0000002140)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRESHEX=r17, @ANYRES16=r9, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYBLOB="359a2d76fc24fc703f91d4d8c567acb67e576d9556d5eeffd7288f82e9d50374e71011d0338d4cb45239555cba4bfef9bd2badd320137d0ef359f4a42691f3add921", @ANYRES32=r11, @ANYRES8=r10, @ANYRES32=r0, @ANYRES32=r12, @ANYRES32=r16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r8, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x148, 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="2d002351e280ffff27bd7000000000000a009046db5dc60b00ca00001bfbf61282aa249252dff242912264de0dadd11318c670196cb668aa542edb15b872ee0b1cc9795c549d88885e9bcfbbf2a23332f54cbbef9aa72033772c7c811cca98851cbc36fc85ead403fc401fe39474873a74e03d77600dec1d170279c272f64fbd056482159a8e141ed99206a49370c8"], 0x1c}, 0x1, 0x0, 0x0, 0x2048800}, 0x4) r18 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r18, 0x84, 0x78, &(0x7f0000000080), 0x4) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) 1.453050399s ago: executing program 4 (id=1247): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_getparam(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000001980)={[0x8000000000000001]}, 0x0, 0xffffffffffffffff, 0x8) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000240)=0xf, 0x4) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3a}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000001b00), &(0x7f0000000000)=0x4) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="73656375726974792e73797af6a33e4e7057b96b5c7ceb7c0100000000000000ac810be16a7db7077d68d63b078569a471b77180eb586b964731dc526489aed05bcff3b3d52ad69684f40e1f482f4d07cd13275a987ef7e5a080614747d49d8fce0c6440476c6a3687"], &(0x7f0000000280)=""/198, 0xc6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100)={[{@barrier}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2796}}, {@barrier}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x1, 0x5a2, &(0x7f00000003c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) fallocate(r5, 0x0, 0x9, 0x10001) 1.285102914s ago: executing program 3 (id=1253): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) read(r1, &(0x7f0000000000)=""/269, 0xfffffdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) getpeername$packet(r0, &(0x7f00000001c0), &(0x7f0000000300)=0x14) close(r3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="3000000000000000290000000400000084020000000700000502000304"], 0x30}, 0x0) syz_open_procfs(r4, &(0x7f0000000200)='totmaps\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x9) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4", 0x8}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000500)="ce03be", 0x3}, {&(0x7f0000000100)="f244f837c3c9df25a3", 0x9}], 0x4) 1.06173838s ago: executing program 3 (id=1254): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb28ea900, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2901, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000200)={0x6d, 0x3fffffffc00, 0x5, 0x7f, 0x20}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000280)=0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0xdf, 0x10, &(0x7f0000000140)="365f9693bbf1f675da64cd35c5851541d93cbc4a46214a8425fe21a89ae997630e94ac1f5362a441fb7095d607e21a948b8604becfd545b30070fc28a1c229e488f2d48d1d388a41fbf1c478296a01b09c6b6f725077115f9bc427c8ad851594f50487f4a6fa9547c256af23baef8717766901561361b2a516a4518fdbd3216d1aca77331f076ef564bf84881bb5258449cc80e5767c35a3bee81092d36ca4b37b43300623175a2d1895f399e776983f8edfb2a2739cbfa0e031c46ac19d36e300e135cb1bb4822705b5460771db629dd9264d77e9bc7ecd45765aebcd0619", &(0x7f0000000240)=""/16, 0x6, 0x0, 0x91, 0x0, &(0x7f0000000280)="42735a51d418b341f68cb1e311b92dcddcce3571b8891fd65dd24fa718b3fba2f5c7aac24e64997c68f4e37f92e341dc95a5400f3ffa05ff81797384c272a9ad1b2f466f6dfc8fcc6931e6b59b7277fa33cfbf2dad54c19696f83005bf2f8c2315e129e8b54470f7cb2c4b72fd0413258a2eac377798d82820201ae85c0cf2f80d254ac3bf752e96fa7cdb01c12d5aa7fa", &(0x7f0000000340), 0x0, 0x0, 0x7ff}, 0x50) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) setns(r3, 0x24020000) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, 0x0) 953.013093ms ago: executing program 3 (id=1255): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x10, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x2, @perf_bp={0x0, 0x8}, 0x106600, 0x10003, 0x20da, 0x9, 0xffffffffffffffff, 0x20209, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}, {0x0}], 0x2, 0x0, 0x0, 0x4c880}, 0x48800) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r3 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x4, 0x4}, @window={0x3, 0x6}, @mss={0x2, 0x2}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x8) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x5}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040005}, 0x8800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, 0x0, 0x0) pwrite64(r1, &(0x7f00000003c0)="d8a5c9cfd579e162e0fdc30c0bb0361dd538141ccf4a8d5d4338caee91af209c3e09c221864510876c80d9be2f46a5440fcbcf1e2436f6fcfe6f61313ed959c20128157043c076b62f864a74a0d16a2dd2e253fba8454604d7be3743acc4da56bf641c9080950d8f6b8d0cbb3980a86e1cd434c67aa1ed6429ba47ce6e96a7fd735026fb3da4514b23c32493645a525d8c5ce607646f1ce364aca2c097107f5e546bd1fb507fa8b38fa5cfeed297d467ee5cf099b45971dda07e3a41c03c313c651f3c2155646128f6ed0fa1c2fff823e47340", 0xd3, 0x3) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f8, 0x0, 0xe8, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x1000}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}, 0x4}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x4, {0x101}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) io_uring_enter(r6, 0x2219, 0x8926, 0x16, 0x0, 0x0) 895.032735ms ago: executing program 4 (id=1256): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000f40)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe43H\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\xfc\xaa\x93\xed\x8d\x86\xb3\x98\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde\xcb\xcd\xca\xb0CA\x16o}9\xd9\xca_\xeb\x94A\xc8\x97\x88\x1dS\x82\xa7\\\x14\\\xb3\x8d/\x86d3:)S\xef[[|\xd2\xfe\xa9WS]bQ\xd2\x11\xe2\x9ao\xcc\xd4\x9e\xc3\xf0\xd67/\r\xdd*:\xe6w\xdaj\x11z\xe0\x15', &(0x7f00000001c0)='(\x18\x02', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000014c0)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x721, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) vmsplice(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000300)="a45bff4f4a4485", 0x7}], 0x1, 0xa) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[], 0xff, 0x7cd, &(0x7f0000000540)="$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") fcntl$notify(r5, 0x402, 0x10) sendto$inet6(r0, &(0x7f0000000480)="3ee4", 0x2, 0x3b00, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan1\x00'}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x8, 0x8000, 0x8, 0x0, {{0xb, 0x4, 0x0, 0x4, 0x2c, 0x67, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1, {[@lsrr={0x83, 0x17, 0x66, [@local, @dev={0xac, 0x14, 0x14, 0x27}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020027bd7000fbdbdf2507000000050005000000000008000300010000002c00018008000300ffffffff060005004e220000060005004e210000050002000e00000008000700", @ANYRES32=r7, @ANYBLOB="0000000000010001"], 0x58}}, 0x20000841) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='fdinfo/3\x00') 788.189038ms ago: executing program 3 (id=1259): r0 = syz_io_uring_setup(0x4f2a, &(0x7f0000000000)={0x0, 0x57cb, 0x800, 0x0, 0x205}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000140)) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "a3bfaf52a34a4390", "74b8c5a6377d6ece069b86ca4f2bb77e", "67bb3f5d", "59702042ab0dbfde"}, 0x28) (async) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0xffffffffffffff81, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x80}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28000000}, 0x4000000) syz_clone(0x4e8b0800, &(0x7f0000000340)="e240374c6668ce6bd50d5443c0a21b3b19e664677eb7217568df4ee61bda10e71508babee7d346a7a6a32a210abb44", 0x2f, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="d118b3356ae13492dd88265bc07b4aa67e45f96803f2da4e60c483c3a87573f35508ca4a3f0afcc3a9") (async) r3 = syz_usbip_server_init(0x4) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000440)={0xfffffffffffffffd, r3, 0x8, {0x6, 0xd7f6}, 0xf7}, 0x1) (async) quotactl_fd$Q_SYNC(r1, 0xffffffff80000102, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xfb}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xc5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x48040) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000640)={0x5c4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x290, 0x11d, 0x0, 0x1, [{0x198, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x19}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x9, 0x800, 0x6, 0x9, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0x31, 0xc, 0x30, 0x9, 0x48]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa20f, 0x6, 0x1000, 0x1, 0xff, 0x5, 0x0, 0x108]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x2, 0xa, 0x9b3, 0xfffd, 0xffff, 0x4]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x400, 0x6, 0x7, 0xff, 0x4, 0x8, 0x31]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x4, 0x16, 0x1a, 0x44, 0x1, 0x6c, 0x1d3b1f4142c7eb1a, 0x3]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa847, 0x4, 0x4, 0xfff7, 0x8, 0x4, 0x4, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2}, {0x3, 0x7}, {0x4, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x8}, {}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x6}, {0x0, 0xa}, {0x4}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x7}, {0x7, 0x6}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd28a, 0x4, 0x3, 0x1, 0x5, 0x5, 0x6a, 0x4]}}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xe, 0x81, 0xe0, 0xf, 0x1ff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x1b, 0x60, 0x5, 0xc, 0x6c, 0x18, 0x12, 0x9, 0x36, 0x6c, 0x16, 0x6c, 0x1, 0x48, 0x24, 0xc, 0x0, 0x59]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x7e, 0x16, 0x12, 0x6c, 0x1b, 0x30, 0xc, 0xc, 0x5, 0x6c, 0x2, 0xbe578f4d13527a3b, 0x9, 0x1, 0x60, 0x1b, 0x30, 0x30, 0x48, 0x60, 0x9, 0x1, 0x9, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x92c, 0x400, 0x0, 0xfff, 0x84, 0x3, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x11}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfa}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x86}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6a}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2c}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x68}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x67}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xde}]}]}, @NL80211_ATTR_TID_CONFIG={0x320, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x400}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x47c8, 0x6, 0x9, 0x736, 0x2, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x2}, {0x2, 0x6}, {0x1}, {0x4, 0x3}, {0x2, 0x7}, {0x5}, {0x0, 0x4}, {0x7, 0x8}, {0x5, 0x6}, {0x3, 0x8}, {0x1, 0x4}, {0x5, 0x9}, {}, {0x3, 0x5}, {}, {0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x6, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0xa}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0x6}, {0x5, 0x7}, {0x0, 0x6}, {0x2, 0x6}, {0x7, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbc}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x355e, 0x9, 0x1, 0x1, 0x9, 0x1000, 0x8, 0xd]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x1b, 0x12, 0x1, 0x0, 0x18, 0x36, 0x2, 0x4, 0xb, 0x60, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x2, 0x4}, {0x3, 0x3}, {0x1, 0xa}, {0x3, 0x6}, {0x0, 0x6}, {0x6, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {0x1, 0x4}, {}, {0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0x8}, {0x7, 0x5}, {0x1, 0x1}, {0x2}, {0x7, 0x6}, {0x2, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x5, 0x5}, {0x0, 0x4}, {0x7, 0x5}, {0x3}, {0x0, 0x7}, {0x7, 0x3}, {0x3, 0x3}, {0x5, 0xa}, {0x3, 0x2}, {0x3, 0x1}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x8}, {0x7, 0xa}, {0x3, 0x9}, {0x3, 0x7}, {0x6, 0x7}, {0x1, 0x7}, {0x7, 0x1}, {0x5, 0x3}, {0x6, 0x5}, {0x7, 0x9}, {0x3}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0x6}, {0x3, 0x8}, {0x5, 0xa}, {0x6, 0x8}, {0x7, 0x8}, {0x7, 0xa}, {0x6, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x4, 0x6}, {0x7, 0xa}, {0x1}, {0x3, 0x3}, {0x7, 0x1}, {0x2, 0x4}, {0x2}, {0x4, 0x3}, {0x2, 0x6}, {0x2, 0x5}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xc5, 0xc, 0x100, 0x9e19, 0x9, 0x9, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x3, 0xfb4, 0x8001, 0x68c, 0xfffa, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x6771, 0x4, 0x4, 0x8, 0x1, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x9, 0xa, 0xc016, 0x31, 0xa1, 0x3]}}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd6, 0x7, 0x6020, 0x5, 0x6, 0x81, 0x7d74, 0x9]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x2}, {0x7, 0xa}, {0x0, 0x4}, {0x0, 0x1}, {0x2}, {0x7, 0xa}, {0x5, 0x1}, {0x2}, {0x6, 0x5}, {0x3, 0x8}, {0x4, 0x1}, {0x6, 0x9}, {0x2}, {0x2, 0x8}, {0x4, 0xa}, {0x5, 0x8}, {0x3, 0x2}, {0x0, 0x9}, {0x4}, {0x0, 0x9}, {0x4, 0x5}, {0x6, 0x1}, {0x3, 0x6}, {0x6}, {0x4, 0x7}, {0x0, 0x6}, {0x6, 0x4}, {0x5, 0xa}, {0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x5}, {0x2, 0x4}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xfff7, 0x5, 0xae, 0x20, 0x8, 0x7ff, 0xe0]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x8}, {0x0, 0x2}, {0x0, 0xa}, {0x3}, {0x2, 0x2}, {0x6, 0x1}, {0x4, 0x2}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0xa}, {0x0, 0x4}, {0x3, 0xa}, {0x1, 0x1}, {0x1, 0x5}, {0x1, 0x3}, {0x4, 0x3}, {0x7, 0x7}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x5}, {0x1}, {0x0, 0x8}, {0x3, 0xa}, {0x2, 0xa}, {0x7, 0x5}, {0x5, 0x2}, {0x3}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x4}, {0x2, 0x1}, {0x7, 0x6}, {0x4, 0x7}, {0x3}, {0x6, 0x1d}, {0x6, 0x2}, {0x4}, {0x3, 0x5}, {0x5, 0x9}, {0x0, 0x8}, {0x3, 0x4}, {0x7, 0x1}, {0x7, 0x8}, {0x7, 0x7}, {0x1, 0x6}, {0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x5, 0x1}, {0x2, 0x8}, {0x7, 0xa}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x2}, {0x3, 0x3}, {0x6, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0x8}, {0x4, 0x4}, {0x3, 0x7}, {}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffff22}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x5c4}}, 0x10) (async) r6 = accept4(r1, 0x0, &(0x7f0000000cc0), 0xe73396d9e7ba9451) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000d00), 0x10) (async) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000d40)={0xbc, 0x4, 0xed75}) sendmsg$nl_generic(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, 0x19, 0x4, 0x70bd27, 0x25dfdbfe, {0x1a}, [@typed={0x14, 0x2c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x21}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xcfb823c9d5ed79f3) sendmmsg$inet(r1, &(0x7f0000001080)=[{{&(0x7f0000000e80)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)="85be2a31c009ed76a6d9e161b6e8da488f626050212a34325d322299fe3f78123cbbe596792c275d8e0a208cb4a6e41cc10cde5dad35851a509b1d664ff35201c401a0449d0c8f54894cbb97041598ee4a4427690f0e931c58cadcaaa7007236806433cf9b6dc914538532c419329ed3a0d61d9bec4282b20cd6cdfc6d0f105fb3b190db1737fe63f6abbd5cce964549a241106f3fd86ad57235e3073e36badb0378d883fe4a13bec80bf8948ab89703c1a38f1304ed831cd8a95e53610fafc51d", 0xc1}], 0x1, &(0x7f0000001000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x78}}], 0x1, 0x8000) (async) syz_open_dev$usbfs(&(0x7f00000010c0), 0x8, 0x2040) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000001100)="e25173c764bb851b38aef608606e2e498278964c924858a7f365bb3c27233c9209978072938eb33a85cc42246854e5d63655f9306bc500c71aeedf624db76e8554d0daf74b6e43ae7bb45727bef22d4c") (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002240)={'vxcan0\x00', 0x0}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002300)={0x1b, 0x0, 0x0, 0x5, 0x0, r2, 0xffff, '\x00', 0x0, r2, 0x1, 0x4, 0x5}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002380)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x8001, '\x00', 0x0, r2, 0x3, 0x0, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002440)={0x6, 0xd, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x8}, @alu={0x0, 0x0, 0x3, 0x2, 0x1, 0xfffffffffffffff8, 0x8}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x3, 0x7, 0xe, 0x74, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000001200)='syzkaller\x00', 0x2b21, 0x1000, &(0x7f0000001240)=""/4096, 0x41000, 0x58, '\x00', r8, 0x25, r2, 0x8, &(0x7f0000002280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000022c0)={0x2, 0x10, 0x6, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002400)=[r9, r2, r10, r2, r2], 0x0, 0x10, 0x1}, 0x94) (async) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x50, r4, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000400) write$P9_RFLUSH(r9, &(0x7f0000002640)={0x7, 0x6d, 0x1}, 0x7) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x3a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) name_to_handle_at(0xffffffffffffffff, &(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)=@FILEID_INO32_GEN={0x8, 0x1, {0x5, 0x6}}, &(0x7f0000002840), 0x400) 716.63234ms ago: executing program 3 (id=1260): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e68, @multicast1}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/cgroup\x00') syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/mnt\x00') r2 = socket(0x10, 0x803, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000002c0), &(0x7f0000000040)=0x46) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004800010000000000000000000aff80ffffff00000000000014000180200100005827af5aa534d6815c2e93f10c00"], 0x3c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28c7c66c023f940003000000007fff7f03000000", @ANYRES32=r7, @ANYBLOB="680000008008000008000300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000240)={r7, 0x1, 0x6, @random="4d218d5081ce"}, 0x10) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000580)=0xfc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socket$rxrpc(0x21, 0x2, 0xa) 652.933781ms ago: executing program 2 (id=1261): clock_adjtime(0xfffffff3, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x20, 0x4, 0x2, 0x2000000, 0x201, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x20002}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11070000006641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e2400000000008133455d000040cb31a5fc97fc294891f7c08b96fcd151fba110c3", 0x25}], 0x2) 577.137324ms ago: executing program 2 (id=1262): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 576.424433ms ago: executing program 0 (id=1263): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10010, 0x0, 0x0, 0x7, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) setresuid(0xee01, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newtaction={0xf04, 0x30, 0xb, 0x0, 0x0, {}, [{0xef0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xea4, 0x2, 0x0, 0x0, {{0xa}, {0xe78, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffc, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8005, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x87c, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x6, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x7}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x8, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x1ff, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8081, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x54, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf04}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6(0xa, 0x3, 0x7) io_uring_setup(0x1b78, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r4 = socket$inet(0x2, 0x80001, 0x84) fchdir(r3) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) listen(0xffffffffffffffff, 0x7d4165cc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) listen(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000a00)={{r2, &(0x7f0000000200)='\x00', 0x70f200, &(0x7f0000000240)={@align=0x4, {0x1000, 0xf4f, 0x2, 0xb8}}, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4}, 0x6, &(0x7f0000000940)=[{0x3, 0x3, &(0x7f0000000300)='\x00', &(0x7f0000000340)="078d4421dad45f340c98e76f2e5dc3c0f613b6d86cfb96d6d8aa0a716247fc2cac67dff0e6299cf2c90875a0bda26e4635318afccbddfcccca1795d6806726eb73c4f8ae033975a20466", 0x4a, 0x10}, {0x2, 0x8, &(0x7f00000003c0)='#//@\x00', &(0x7f0000000400)="a3b0e538b94686fa3f4ab3997a2bbafb4f8a255f11c5be8d4786853a329c2f5bad2c7991cbf126e334e0962f5db056fb2feffa339624aab9cf73d4dd050ae8c8fa292b09b7c708cc1214ab24d8f48f6b1ee9a876fed5634a9ac3074bb9cce462ed9fea9368bf44f162be161a1373765a1a7ab948faeec13d609911820079f6", 0x7f}, {0x3, 0x2, &(0x7f0000000500)='\x00', &(0x7f0000000540)="3d03f5d9e0a8f0caca389081b818d9427c6b2075002d9c50fd7adcc1a222d2430c6d48cbbf00ab3901d8d9c4f28ee915f0e9b5d5e2af44177c9dcdb9ae3ac1f5d948541a5f0560dfe23d7a9771e93e3060233882b5ec3c56b9cdbef5128a8cb9dba8018125817deeee95e68427bf5f9f56f69b755bfbfca422d5a3a5a4504ca682d05c2538486a5299daf2ec108870526db585850eabdf38c68169dc6ff1b0a8eb8c16b80454db5d6a090eed376b7c1f4e335b445bc9a365c5188e34cf462487e311e8a76725f222340f2d1c59b810939afe7cea56389713c1d49927b21fd9b3db", 0xe1, 0x20}, {0x1, 0x5, &(0x7f0000000640)='\x00', &(0x7f0000000680)="db65bd9a7c759270364d6d83437f5cb820526c2e8456f1e78ae56a6c9777515a5bdd5d25928f8f1242ade64e6d9d7e29f44e9ad53243547f1f09d06873fcdeb7037e4b1d259120", 0x47, 0x20}, {0x3, 0xffffff01, &(0x7f0000000700)='\x00', &(0x7f0000000740)="51954575e24f0d913ab98be86336c34d0a487d522ee5cdde7c0f2019886814f6b33ee3a1312d2e1fa080a2701b643c5850c34b23bc2e4a48dd2c62b38dd7bc41ef03b6d1b059268b03a1034989aac9fd94bfce7cf8677c337416b89d58f63f68d626c4eda156a32ca906b46dc6c738c84aa1eded20326de8a8a84713b45f1dc05d8eb015c6df99470eccc4e27b86e055ef4735fc30da16edbda9fdcb6f7aafd14388cab67bfcb4f6a82d51c32db8c3a77e49383f197f97efa335adb0be8b182dcdefbcee2f05309ec30b263f404ac47d", 0xd0, 0x10}, {0x2, 0x6, &(0x7f0000000840)='(\x00', &(0x7f0000000880)="03d9b117a120ed34689a9178a3f2897ed626b484d067d1e87342384552c2e2c5dfcae953dddc5d2c6fa30b19c949298c30bda7a36f9e0a2f7851cacc96ed27b9adcbfcd94ebb6466f4ac9073b0c8ab039e6cc5e04f16a0e4eefbf5c3a5f0f2286a27e580152c90036552ca7fba404b6ae6fd62b89bd5183caeeddbdd3222c091c32b46d14d560113489794ed82ea573fba0c", 0x92, 0xa}]}) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r8 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000d40)={0x24, &(0x7f0000000ac0)={0x0, 0x9, 0xda, {0xda, 0x10, "e0e54e4a16f10071644f6bd0e8b271823abcd5810224017708ba485113fc4bda9f8d593f0a97068d340f4c3ee77a24c2a604faae2d9c0e1c016780e00dc862332b3aa45a351b12e5a19181b41b11dabf88613dbe381acf1773eebb744a6323f9dbe05da626dc5170b63c34a8a7dea026ec3fc8dfeaa0cf89ef776ded07632288b8e6d4f5e0d847282cac685e083a13ed37c771d104cf817d5b30ab58181957ae4afc8d12e66d1f942da5730cce007d5a9627d2fd5196be5715157aa51bab429ea8ab591c25ff29260e62126990fe074a8882375f73d8dc83"}}, &(0x7f0000000bc0)={0x0, 0x3, 0xc7, @string={0xc7, 0x3, "77f43ea2054401ad5272e2eb36d33792eb20b21d4921514e02318d68079291f236616b9c3b3715ad9f4420c44afbffaa2f2e04fc47cb22ec60bdd97c9996c8177613e1fbf5b6699e1aca8f74d9d6c1e8d69f34ab4b656966630c309a01d365d25d0806178fad37a37254612a236468180004daf60937e4496242c97c099069a286fdacc13e9d462052897eafe0a63604d78a1b842337e39477b2758127fd4068b289bf243f5ecda850d05fa6dfe5898ff08ecb49e653128eca736a5151b0dcd7bee4f88e56"}}, &(0x7f0000000cc0)={0x0, 0x22, 0x10, {[@global=@item_012={0x0, 0x1, 0xf}, @local=@item_4={0x3, 0x2, 0x9, "97793835"}, @local=@item_4={0x3, 0x2, 0x6, "1b734c58"}, @local=@item_4={0x3, 0x2, 0x4, "bc8a254a"}]}}, &(0x7f0000000d00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x7f, 0x1, {0x22, 0xc80}}}}, &(0x7f0000001040)={0x2c, &(0x7f0000000d80)={0x20, 0x16, 0xee, "fb57e2f4a959378e7ff9d7d5de4790edcfc62acb7767dacaa80c7996c514e816ff38fdd75bb45d048ff0e5a17d9d95985dd0e1406ea995adc5e3e15248d73705b7bc0b9b5601abc98a1de4c044534ed549d4a719e7da781b1308386997c0a06a21ca9138f731ba324fb12aa8de63417b9a05e785ce66e5ba8c742fc31eed8c6ab66cd1c626c0f252f123ba05ee41892ea1b014fcd206ccedb27d6d59cb15bad629b39d4154c7f2c1d92e8427971a3951944ef02e9206223169ac9cd741181fbc2c780d0d677ee8ef17cf2b4c38bb81b584ee436ea25d6f5686398f9508deec68d505298a192bff4d6abc96a303ce"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000f00)={0x20, 0x1, 0xd3, "11ec094c509675145a3f76556dfbb676322266450712e93696ca825a0d3dba68c953405aaafd3751bfe6ae7fdbc6c23b88e22333aa93474925420e2ec2ceec98caea38e9d2ff9bcc0e31801d8a5e84d64ad880569656acdbf78e1a2b8b6640ae92235041afaff1ef2ff5042e1f015eba35b03e6b0fb91a91d2845d750e47c9a587cb9fe858333843c2938cbe715590febe1897f42b8ed8f256cc1ac33dd28aec716b2d1e8c3ca852eb5e3fabf712350c5fa7627de88acbca4bf4b2a85e7baeb0040ad0182cd26fd4ba28d0db360fc0708d8b1e"}, &(0x7f0000001000)={0x20, 0x3, 0x1, 0x40}}) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}, {&(0x7f0000000040)="90076725e935273b6d33c33e5a5cb8ae0c5570fad30c654d2326e04034250cd6d1466b43bce25cc4290e30be44df9e39f46e7982e96eb0c88e5bbcceae7a000c93b453d030905266df43ade0701ed967764a09c7bbbcb69338687c7b5bb8307c124b22653e13d8cc08022cac40ff8f24cc9e9aa839770d45987165fb60af9a1979383ae25735bf147990dfe93e7389e93787d42d56070eccc953046c4a28327fbb0b491b5ff1411a9f1a17bf7c5d6e2b1a68fc197034df1b032fe09242df3ac2af7739d62067650dcf7871dc5842e4e6f1642b8d365a61d749", 0xd9}], 0x2) syz_init_net_socket$nfc_raw(0x27, 0x814223719c569901, 0x0) 576.118524ms ago: executing program 2 (id=1264): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000400000085000000820000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x80000001) ptrace$pokeuser(0x6, 0x0, 0x388, 0x6) socket$kcm(0x29, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) poll(0x0, 0x0, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x6) 356.12417ms ago: executing program 1 (id=1268): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000f40)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe43H\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\xfc\xaa\x93\xed\x8d\x86\xb3\x98\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde\xcb\xcd\xca\xb0CA\x16o}9\xd9\xca_\xeb\x94A\xc8\x97\x88\x1dS\x82\xa7\\\x14\\\xb3\x8d/\x86d3:)S\xef[[|\xd2\xfe\xa9WS]bQ\xd2\x11\xe2\x9ao\xcc\xd4\x9e\xc3\xf0\xd67/\r\xdd*:\xe6w\xdaj\x11z\xe0\x15', &(0x7f00000001c0)='(\x18\x02', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000014c0)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000005c0)={0x8, 0x120, 0xfa00, {0x3, {0x7fffffff, 0x8000, "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", 0x9a, 0x8, 0x9, 0x6, 0x6, 0x81, 0x80, 0x1}, r1}}, 0x128) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fc00000000002, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000113000/0x1000)=nil, 0x1000, 0x2000008, 0x10010, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r5 = socket(0x21, 0x3, 0x92d9) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r4, 0xef, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYBLOB="060007000600020001010700ff7f080000"], 0x16) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x7, 0x2}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 290.617812ms ago: executing program 1 (id=1270): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xea}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 288.869262ms ago: executing program 1 (id=1271): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x51c, 0xd, 0x6, 0x5}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x9, 0x0, 0x0, 0x7}, r3, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x60000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f00000000c0)={0x0, 0x7a120, 0x8000, {0x1, 0x80000000}, 0xf, 0xffffc}) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) socket(0x2, 0x80805, 0x0) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x51c, 0xd, 0x6, 0x5}, 0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES32], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x9, 0x0, 0x0, 0x7}, r3, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x60000) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f00000000c0)={0x0, 0x7a120, 0x8000, {0x1, 0x80000000}, 0xf, 0xffffc}) (async) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) (async) 229.626903ms ago: executing program 1 (id=1272): fchdir(0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8841}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r10, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x44) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000540)='./file0\x00', 0x2000050, &(0x7f0000000280)=ANY=[@ANYBLOB='check=relaxed,map,hide,map=normal,cruft,hide,check=relaxed,session=0x0000000000000054,c,\x00\x00\x00\x00\x00'], 0x1, 0x557, &(0x7f0000000580)="$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") r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r12, r11}, 0xc) ptrace$setsig(0x4203, r3, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x6, 0x40}}, './file0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r13, @ANYBLOB="08000500", @ANYRES32=r13, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_extract_tcp_res(&(0x7f0000000300)={0x41424344}, 0x800, 0x80000001) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @remote}, {{0x0, 0x0, 0x41424344, r14, 0x0, 0x6, 0x40000000000000e7}}}}}}, 0x0) 133.057916ms ago: executing program 1 (id=1273): socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xa, &(0x7f0000000000)={0x0, 0x400}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x0, 0x10, 0x1, 0x0, 0x5, 0x10500, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x6, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x0, 0x1, 0x7, 0x2, 0x7fff, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0xfffffffffffffcb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c22, 0x0, @perf_bp={&(0x7f0000000200)}, 0x10208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r0, 0x1, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) sendmsg$key(r3, &(0x7f00000006c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="00e81b9ad47f68fa7fcc1a22b5b18007"], 0xffffffffffffff0a}, 0x1, 0x7}, 0x4050) socket$kcm(0x10, 0x7, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)="0faa32f4c5004e74508e781f16c964fb09272833ad1e79752629c46ca010d7646fade575ca2f00030bc900005878900462a9340b22f764934bc7875fe3e1f54418d98cb0a74c30f84277bca25acffc2a1e95df8bdb3ac421ca131b522317674211b763cc235288b1279b131d7574cbe859331a8092c23f4ac615443ce57b21cf6ae16c53687229abe2d1f71692dcdaca6b0a1fec3b910f10038fd31f55384556000000000000000000", 0x0, 0xffffffff, r4}, 0x38) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xe, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000001d80), &(0x7f0000001d40)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000080), 0x0}, 0x20) 49.347958ms ago: executing program 0 (id=1274): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 0s ago: executing program 0 (id=1275): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x16) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket$kcm(0xa, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) socket$kcm(0x11, 0x2, 0x300) (async, rerun: 64) socket$kcm(0x2, 0x922000000001, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x6, 0x2}, 0xc6e9dfbe8b5b572a, 0x8, 0xfffffffd, 0x0, 0x10000, 0x7ffffd, 0x0, 0x0, 0x250e}, 0x0, 0xfffffffffeffffff, 0xffffffffffffffff, 0xb) (async) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x8000000, &(0x7f0000000140), 0x111, 0x3}}, 0x20) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): s (loop3): last error at time 2000000004: ext4_xattr_inode_iget:441: inode 11 [ 82.390946][ T4684] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 82.496251][ T4684] EXT4-fs (loop3): 1 orphan inode deleted [ 82.520633][ T4694] ip6gre1: entered promiscuous mode [ 82.548718][ T4694] ip6gre1: entered allmulticast mode [ 82.559528][ T4684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.674159][ T28] audit: type=1400 audit(2000000004.950:9080): avc: denied { write } for pid=4683 comm="syz.3.278" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.068392][ T4709] mmap: syz.0.283 (4709) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.299176][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.914819][ T4720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.621507][ T4718] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 85.515051][ T4724] netlink: 40 bytes leftover after parsing attributes in process `syz.3.289'. [ 85.976780][ T4720] loop4: detected capacity change from 0 to 512 [ 86.003718][ T4720] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 86.017769][ T28] audit: type=1400 audit(2000000008.290:9081): avc: denied { map } for pid=4731 comm="syz.3.290" path="socket:[8936]" dev="sockfs" ino=8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.124185][ T4736] loop2: detected capacity change from 0 to 512 [ 86.153770][ T4736] EXT4-fs: Ignoring removed nobh option [ 86.169456][ T4736] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 86.190512][ T28] audit: type=1400 audit(2000000008.460:9082): avc: denied { write } for pid=4714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.214777][ T4736] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #13: comm syz.2.291: inode has both inline data and extents flags [ 86.269077][ T4736] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 86.270508][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 86.286151][ C1] EXT4-fs (loop2): initial error at time 2000000008: ext4_orphan_get:1397: inode 13 [ 86.295630][ C1] EXT4-fs (loop2): last error at time 2000000008: ext4_orphan_get:1397: inode 13 [ 86.305437][ T4736] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.291: couldn't read orphan inode 13 (err -117) [ 86.317328][ T4736] loop2: lost filesystem error report for type 5 error -117 [ 86.318362][ T4736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.355061][ T28] audit: type=1400 audit(2000000008.630:9083): avc: denied { write } for pid=4745 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.425146][ T4736] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 86.430563][ T28] audit: type=1400 audit(2000000008.680:9084): avc: denied { write } for pid=4735 comm="syz.2.291" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.455039][ T4736] EXT4-fs warning (device loop2): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 86.491837][ T4753] loop3: detected capacity change from 0 to 128 [ 86.515839][ T4753] vfat: Unknown parameter '' [ 86.527801][ T28] audit: type=1400 audit(2000000008.680:9085): avc: denied { create } for pid=4735 comm="syz.2.291" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.586874][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.600893][ T28] audit: type=1326 audit(2000000008.800:9086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2857ce59 code=0x7ffc0000 [ 86.626486][ T28] audit: type=1326 audit(2000000008.800:9087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2857ce59 code=0x7ffc0000 [ 86.652053][ T28] audit: type=1326 audit(2000000008.800:9088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2857ce59 code=0x7ffc0000 [ 86.693078][ T28] audit: type=1326 audit(2000000008.800:9089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2857ce59 code=0x7ffc0000 [ 86.783206][ T4751] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.957744][ T4774] loop2: detected capacity change from 0 to 8192 [ 87.136596][ T4774] loop2: detected capacity change from 0 to 512 [ 87.206692][ T4774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.233974][ T4774] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.409518][ T4815] ªªªªªª: renamed from vlan0 (while UP) [ 87.506967][ T4815] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 87.601315][ T4833] netlink: 256 bytes leftover after parsing attributes in process `syz.3.301'. [ 87.774905][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.851544][ T4855] loop2: detected capacity change from 0 to 128 [ 87.900010][ T4855] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 87.946316][ T4855] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.052436][ T4869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 88.214425][ T4904] loop4: detected capacity change from 0 to 512 [ 88.225342][ T4904] EXT4-fs (loop4): fragment/cluster size (4096) != block size (1024) [ 88.291164][ T4907] netlink: 'syz.0.307': attribute type 5 has an invalid length. [ 88.320002][ T4911] 9pnet_virtio: no channels available for device 127.0.0.1 [ 88.377009][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.460439][ T4924] loop4: detected capacity change from 0 to 256 [ 88.496515][ T4924] FAT-fs (loop4): Directory bread(block 64) failed [ 88.518362][ T4924] FAT-fs (loop4): Directory bread(block 65) failed [ 88.527177][ T4924] FAT-fs (loop4): Directory bread(block 66) failed [ 88.534088][ T4924] FAT-fs (loop4): Directory bread(block 67) failed [ 88.540998][ T4924] FAT-fs (loop4): Directory bread(block 68) failed [ 88.547615][ T4924] FAT-fs (loop4): Directory bread(block 69) failed [ 88.555854][ T4924] FAT-fs (loop4): Directory bread(block 70) failed [ 88.562685][ T4924] FAT-fs (loop4): Directory bread(block 71) failed [ 88.569356][ T4924] FAT-fs (loop4): Directory bread(block 72) failed [ 88.576696][ T4924] FAT-fs (loop4): Directory bread(block 73) failed [ 88.894246][ T4940] loop3: detected capacity change from 0 to 1764 [ 88.904118][ T4940] ISOFS: Unable to identify CD-ROM format. [ 89.059958][ T4949] loop4: detected capacity change from 0 to 512 [ 89.086010][ T4949] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 89.113805][ T4949] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 89.138788][ T4949] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.323: Corrupt directory, running e2fsck is recommended [ 89.175180][ T4949] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 89.296252][ T4949] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.323: corrupted in-inode xattr: e_name out of bounds [ 89.358712][ T4949] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.359296][ T4949] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.323: couldn't read orphan inode 15 (err -117) [ 89.368543][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 89.368564][ C1] EXT4-fs (loop4): initial error at time 2000000011: ext4_iget_extra_inode:5128: inode 15 [ 89.368622][ C1] EXT4-fs (loop4): last error at time 2000000011: ext4_iget_extra_inode:5128: inode 15 [ 89.519792][ T4949] loop4: lost filesystem error report for type 5 error -117 [ 89.523304][ T4949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.717341][ T4949] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 89.807307][ T4949] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 89.817497][ T4949] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.323: Corrupt directory, running e2fsck is recommended [ 89.842889][ T4949] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 89.867424][ T4949] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 89.877793][ T4949] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.323: Corrupt directory, running e2fsck is recommended [ 89.892153][ T4949] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 89.903901][ T4949] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 89.914228][ T4949] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.323: Corrupt directory, running e2fsck is recommended [ 89.928418][ T4949] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.138899][ T4973] EXT4-fs: Ignoring removed bh option [ 90.145236][ T4973] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.152349][ T4973] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 90.183738][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.193926][ T4973] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 90.205189][ T4973] EXT4-fs (loop3): orphan cleanup on readonly fs [ 90.221506][ T4973] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 90.255619][ T4973] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 90.263985][ T4973] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.330: Invalid block bitmap block 0 in block_group 0 [ 90.285402][ T4973] loop3: lost filesystem error report for type 5 error -117 [ 90.287023][ T4973] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 90.294504][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 90.294528][ C1] EXT4-fs (loop3): last error at time 2000000012: ext4_read_block_bitmap_nowait:483 [ 90.319345][ T4973] loop3: lost filesystem error report for type 5 error -117 [ 90.319728][ T4973] EXT4-fs (loop3): 1 orphan inode deleted [ 90.337517][ T4973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.366222][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.546857][ T4988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.576307][ T4983] uprobe: syz.2.335:4983 failed to unregister, leaking uprobe [ 90.612125][ T4981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.628721][ T4981] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.641488][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.663529][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.753760][ T5001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.781470][ T5001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.891390][ T5001] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 90.924846][ T5001] EXT4-fs (loop2): 1 truncate cleaned up [ 90.977131][ T5001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.085849][ T5028] set_capacity_and_notify: 5 callbacks suppressed [ 91.085969][ T5028] loop4: detected capacity change from 0 to 512 [ 91.119032][ T5028] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 91.127848][ T5028] EXT4-fs (loop4): inodes count not valid: 32 vs 15 [ 91.624575][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.961865][ T5034] loop3: detected capacity change from 0 to 1024 [ 92.337649][ T5028] loop4: detected capacity change from 0 to 256 [ 92.743464][ T5034] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 92.785543][ T5034] System zones: 0-1, 3-8 [ 92.819400][ T5034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 92.865343][ T5034] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.953669][ T28] kauditd_printk_skb: 396 callbacks suppressed [ 92.953684][ T28] audit: type=1400 audit(2000000015.230:9484): avc: denied { write } for pid=5033 comm="syz.3.348" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.996883][ T5034] net_ratelimit: 19 callbacks suppressed [ 92.996903][ T5034] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 93.014697][ T5048] loop2: detected capacity change from 0 to 128 [ 93.055758][ T28] audit: type=1400 audit(2000000015.330:9485): avc: denied { create } for pid=5045 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 93.119469][ T28] audit: type=1326 audit(2000000015.370:9486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5045 comm="syz.4.350" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f078d48ce59 code=0x80000000 [ 93.150544][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 93.202001][ T28] audit: type=1400 audit(2000000015.460:9487): avc: denied { read } for pid=5033 comm="syz.3.348" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.231843][ T5052] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.348: Freeing blocks not in datazone - block = 0, count = 16 [ 93.309380][ T28] audit: type=1326 audit(2000000015.580:9488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.1.351" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875acfce59 code=0x7ffc0000 [ 93.360290][ T28] audit: type=1326 audit(2000000015.580:9489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.1.351" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875acfce59 code=0x7ffc0000 [ 93.410519][ T28] audit: type=1326 audit(2000000015.580:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.1.351" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875acfce59 code=0x7ffc0000 [ 93.466136][ T5064] loop2: detected capacity change from 0 to 512 [ 93.470880][ T28] audit: type=1326 audit(2000000015.580:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.1.351" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f875acfce59 code=0x7ffc0000 [ 93.503550][ T28] audit: type=1326 audit(2000000015.580:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.1.351" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875acfce59 code=0x7ffc0000 [ 93.530056][ T1693] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 112: padding at end of block bitmap is not set [ 93.545290][ T5064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.557110][ T1693] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 93.570418][ T28] audit: type=1326 audit(2000000015.580:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.1.351" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875acfce59 code=0x7ffc0000 [ 93.596411][ T1693] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.596411][ T1693] [ 93.606562][ T1693] EXT4-fs (loop3): Total free blocks count 0 [ 93.622571][ T5064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.631015][ T1693] EXT4-fs (loop3): Free/Dirty block details [ 93.641424][ T1693] EXT4-fs (loop3): free_blocks=16 [ 93.646953][ T1693] EXT4-fs (loop3): dirty_blocks=16 [ 93.652208][ T1693] EXT4-fs (loop3): Block reservation details [ 93.653307][ T5064] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.658222][ T1693] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 93.676461][ T3299] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 93.701088][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 93.808983][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.064824][ T5083] loop2: detected capacity change from 0 to 1024 [ 94.202810][ T5081] loop3: detected capacity change from 0 to 4096 [ 94.228212][ T5083] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 94.240187][ T5081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.261848][ T5083] System zones: 0-1, 3-36 [ 94.331332][ T5083] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.359: bad orphan inode 134217728 [ 94.370659][ T5083] loop2: lost filesystem error report for type 5 error -117 [ 94.388300][ T5083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.452075][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.737490][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.789012][ T5094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5094 comm=syz.2.363 [ 94.869055][ T5096] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 95.673557][ T5102] FAULT_INJECTION: forcing a failure. [ 95.673557][ T5102] name failslab, interval 1, probability 0, space 0, times 0 [ 95.780921][ T5102] CPU: 0 UID: 0 PID: 5102 Comm: syz.3.366 Tainted: G W syzkaller #0 PREEMPT(full) [ 95.780960][ T5102] Tainted: [W]=WARN [ 95.780968][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.781062][ T5102] Call Trace: [ 95.781070][ T5102] [ 95.781078][ T5102] __dump_stack+0x1d/0x30 [ 95.781105][ T5102] dump_stack_lvl+0x95/0xd0 [ 95.781166][ T5102] dump_stack+0x15/0x1b [ 95.781193][ T5102] should_fail_ex+0x263/0x280 [ 95.781229][ T5102] should_failslab+0x8c/0xb0 [ 95.781263][ T5102] kmem_cache_alloc_noprof+0x66/0x3f0 [ 95.781376][ T5102] ? ep_insert+0x2ba/0xd10 [ 95.781406][ T5102] ep_insert+0x2ba/0xd10 [ 95.781496][ T5102] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 95.781534][ T5102] do_epoll_ctl+0x686/0x8a0 [ 95.781577][ T5102] __x64_sys_epoll_ctl+0xcb/0x100 [ 95.781654][ T5102] x64_sys_call+0x2a8b/0x3020 [ 95.781681][ T5102] do_syscall_64+0x12c/0x3b0 [ 95.781723][ T5102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.781828][ T5102] RIP: 0033:0x7fa7b425ce59 [ 95.781848][ T5102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.781868][ T5102] RSP: 002b:00007fa7b2caf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 95.781963][ T5102] RAX: ffffffffffffffda RBX: 00007fa7b44d5fa0 RCX: 00007fa7b425ce59 [ 95.781984][ T5102] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 95.781999][ T5102] RBP: 00007fa7b2caf090 R08: 0000000000000000 R09: 0000000000000000 [ 95.782013][ T5102] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 95.782029][ T5102] R13: 00007fa7b44d6038 R14: 00007fa7b44d5fa0 R15: 00007ffe3b8a4108 [ 95.782067][ T5102] [ 96.438020][ T5120] netlink: 68 bytes leftover after parsing attributes in process `syz.4.373'. [ 96.668963][ T5129] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 96.690718][ T5129] bond1: left promiscuous mode [ 96.701702][ T5129] bridge2: left promiscuous mode [ 96.797894][ T5135] loop2: detected capacity change from 0 to 2048 [ 96.909709][ T5137] loop3: detected capacity change from 0 to 512 [ 96.912317][ T5135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=5135 comm=syz.2.378 [ 96.953362][ T5137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.982354][ T5137] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.018032][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.032694][ T5141] loop2: detected capacity change from 0 to 512 [ 97.039620][ T5141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.049219][ T5141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.061512][ T5141] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.092147][ T5143] loop3: detected capacity change from 0 to 1024 [ 97.103735][ T5141] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.380: Allocating blocks 41-42 which overlap fs metadata [ 97.122333][ T5143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 97.140768][ T5141] loop2: lost filesystem error report for type 5 error -117 [ 97.144009][ T5141] EXT4-fs (loop2): Remounting filesystem read-only [ 97.151426][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 97.151452][ C0] EXT4-fs (loop2): initial error at time 2000000019: ext4_mb_mark_diskspace_used:4222 [ 97.151476][ C0] EXT4-fs (loop2): last error at time 2000000019: ext4_mb_mark_diskspace_used:4222 [ 97.200274][ T5141] EXT4-fs (loop2): 1 truncate cleaned up [ 97.208371][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.229362][ T5141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.248326][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.277364][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 97.317186][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.332425][ T5151] fido_id[5151]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.660616][ T5169] loop3: detected capacity change from 0 to 512 [ 98.224412][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 98.224433][ T28] audit: type=1400 audit(2000000020.500:9549): avc: denied { lock } for pid=5178 comm="syz.1.390" path="socket:[9519]" dev="sockfs" ino=9519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.308270][ T5181] loop2: detected capacity change from 0 to 128 [ 98.325965][ T5181] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 98.379262][ T28] audit: type=1400 audit(2000000020.650:9550): avc: denied { kexec_image_load } for pid=5180 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 98.472654][ T5183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.495446][ T5183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.519707][ T5187] Dead loop on virtual device ip6_vti0 (net 37), fix it urgently! [ 98.546946][ T5188] loop3: detected capacity change from 0 to 128 [ 98.628750][ T5188] vfat: Bad value for 'shortname' [ 99.690102][ T5205] loop4: detected capacity change from 0 to 512 [ 99.707253][ T5205] EXT4-fs: Ignoring removed bh option [ 99.720040][ T5205] ext2: Unknown parameter 'euid>00000000000000000000' [ 100.816321][ T5199] loop4: detected capacity change from 0 to 4096 [ 101.903477][ T28] audit: type=1400 audit(2000000024.180:9551): avc: denied { read } for pid=5207 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.473496][ T28] audit: type=1400 audit(2000000024.750:9552): avc: denied { create } for pid=5213 comm="syz.0.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.171837][ T5240] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 103.224884][ T5249] loop3: detected capacity change from 0 to 512 [ 103.232475][ T5249] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.252202][ T5249] EXT4-fs (loop3): 1 truncate cleaned up [ 103.262246][ T5249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.323907][ T28] audit: type=1326 audit(2000000025.600:9553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.0.411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2857ce59 code=0x7ffc0000 [ 103.409447][ T28] audit: type=1326 audit(2000000025.600:9554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.0.411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2857ce59 code=0x7ffc0000 [ 103.444269][ T28] audit: type=1326 audit(2000000025.600:9555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.0.411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2857ce59 code=0x7ffc0000 [ 103.469958][ T28] audit: type=1326 audit(2000000025.600:9556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.0.411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f7e2857ce59 code=0x7ffc0000 [ 103.495702][ T28] audit: type=1326 audit(2000000025.620:9557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.0.411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2857ce59 code=0x7ffc0000 [ 103.508092][ T5262] FAULT_INJECTION: forcing a failure. [ 103.508092][ T5262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.523899][ T28] audit: type=1326 audit(2000000025.620:9558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.0.411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2857ce59 code=0x7ffc0000 [ 103.536173][ T5262] CPU: 0 UID: 0 PID: 5262 Comm: syz.4.415 Tainted: G W syzkaller #0 PREEMPT(full) [ 103.536204][ T5262] Tainted: [W]=WARN [ 103.536211][ T5262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.536272][ T5262] Call Trace: [ 103.536300][ T5262] [ 103.536309][ T5262] __dump_stack+0x1d/0x30 [ 103.536401][ T5262] dump_stack_lvl+0x95/0xd0 [ 103.536471][ T5262] dump_stack+0x15/0x1b [ 103.536513][ T5262] should_fail_ex+0x263/0x280 [ 103.536606][ T5262] should_fail+0xb/0x20 [ 103.536689][ T5262] should_fail_usercopy+0x1a/0x20 [ 103.536832][ T5262] _copy_from_user+0x1c/0xb0 [ 103.536935][ T5262] inet6_ioctl+0xf1/0x190 [ 103.537048][ T5262] sock_do_ioctl+0x73/0x230 [ 103.537153][ T5262] sock_ioctl+0x41b/0x610 [ 103.537270][ T5262] ? mutex_lock+0x57/0x90 [ 103.537370][ T5262] ? __pfx_sock_ioctl+0x10/0x10 [ 103.537507][ T5262] __se_sys_ioctl+0xce/0x140 [ 103.537617][ T5262] __x64_sys_ioctl+0x43/0x50 [ 103.537709][ T5262] x64_sys_call+0x1563/0x3020 [ 103.537790][ T5262] do_syscall_64+0x12c/0x3b0 [ 103.537944][ T5262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.538016][ T5262] RIP: 0033:0x7f078d48ce59 [ 103.538068][ T5262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.538129][ T5262] RSP: 002b:00007f078bedf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.538197][ T5262] RAX: ffffffffffffffda RBX: 00007f078d705fa0 RCX: 00007f078d48ce59 [ 103.538316][ T5262] RDX: 0000200000000240 RSI: 000000000000890b RDI: 0000000000000005 [ 103.538359][ T5262] RBP: 00007f078bedf090 R08: 0000000000000000 R09: 0000000000000000 [ 103.538409][ T5262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.538450][ T5262] R13: 00007f078d706038 R14: 00007f078d705fa0 R15: 00007ffd3bed1498 [ 103.538520][ T5262] [ 103.745733][ T28] audit: type=1326 audit(2000000025.620:9559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.0.411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2857ce59 code=0x7ffc0000 [ 103.746106][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.780622][ T28] audit: type=1326 audit(2000000025.620:9560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.0.411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7e2857ce59 code=0x7ffc0000 [ 103.809182][ T28] audit: type=1326 audit(2000000025.680:9561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.0.411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2857ce59 code=0x7ffc0000 [ 103.839080][ T28] audit: type=1326 audit(2000000025.680:9562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.0.411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7e2857cbc2 code=0x7ffc0000 [ 103.871502][ T5268] FAULT_INJECTION: forcing a failure. [ 103.871502][ T5268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.902801][ T5268] CPU: 0 UID: 0 PID: 5268 Comm: syz.1.419 Tainted: G W syzkaller #0 PREEMPT(full) [ 103.902842][ T5268] Tainted: [W]=WARN [ 103.902879][ T5268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.902899][ T5268] Call Trace: [ 103.902907][ T5268] [ 103.902916][ T5268] __dump_stack+0x1d/0x30 [ 103.902983][ T5268] dump_stack_lvl+0x95/0xd0 [ 103.903011][ T5268] dump_stack+0x15/0x1b [ 103.903060][ T5268] should_fail_ex+0x263/0x280 [ 103.903099][ T5268] should_fail+0xb/0x20 [ 103.903131][ T5268] should_fail_usercopy+0x1a/0x20 [ 103.903170][ T5268] _copy_from_user+0x1c/0xb0 [ 103.903263][ T5268] __sys_bpf+0x183/0x7e0 [ 103.903298][ T5268] __x64_sys_bpf+0x41/0x50 [ 103.903325][ T5268] x64_sys_call+0x10cb/0x3020 [ 103.903357][ T5268] do_syscall_64+0x12c/0x3b0 [ 103.903390][ T5268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.903549][ T5268] RIP: 0033:0x7f875acfce59 [ 103.903570][ T5268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.903674][ T5268] RSP: 002b:00007f875974f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.903725][ T5268] RAX: ffffffffffffffda RBX: 00007f875af75fa0 RCX: 00007f875acfce59 [ 103.903743][ T5268] RDX: 0000000000000020 RSI: 0000200000001740 RDI: 0000000000000001 [ 103.903756][ T5268] RBP: 00007f875974f090 R08: 0000000000000000 R09: 0000000000000000 [ 103.903828][ T5268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.903843][ T5268] R13: 00007f875af76038 R14: 00007f875af75fa0 R15: 00007ffc03dbd698 [ 103.903935][ T5268] [ 103.912166][ T5273] loop3: detected capacity change from 0 to 512 [ 104.086147][ T5279] FAULT_INJECTION: forcing a failure. [ 104.086147][ T5279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.101901][ T5273] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.133136][ T5280] FAULT_INJECTION: forcing a failure. [ 104.133136][ T5280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.146922][ T5280] CPU: 1 UID: 0 PID: 5280 Comm: syz.2.423 Tainted: G W syzkaller #0 PREEMPT(full) [ 104.146966][ T5280] Tainted: [W]=WARN [ 104.146976][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.146993][ T5280] Call Trace: [ 104.147001][ T5280] [ 104.147011][ T5280] __dump_stack+0x1d/0x30 [ 104.147044][ T5280] dump_stack_lvl+0x95/0xd0 [ 104.147146][ T5280] dump_stack+0x15/0x1b [ 104.147172][ T5280] should_fail_ex+0x263/0x280 [ 104.147211][ T5280] should_fail+0xb/0x20 [ 104.147290][ T5280] should_fail_usercopy+0x1a/0x20 [ 104.147324][ T5280] _copy_from_user+0x1c/0xb0 [ 104.147383][ T5280] memdup_user+0x5e/0xd0 [ 104.147416][ T5280] strndup_user+0x68/0xb0 [ 104.147541][ T5280] bpf_uprobe_multi_link_attach+0x20a/0x990 [ 104.147571][ T5280] ? __rcu_read_unlock+0x4e/0x70 [ 104.147594][ T5280] ? __fget_files+0x184/0x1c0 [ 104.147704][ T5280] link_create+0x639/0x690 [ 104.147744][ T5280] __sys_bpf+0x35d/0x7e0 [ 104.147802][ T5280] __x64_sys_bpf+0x41/0x50 [ 104.147832][ T5280] x64_sys_call+0x10cb/0x3020 [ 104.147865][ T5280] do_syscall_64+0x12c/0x3b0 [ 104.147947][ T5280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.147979][ T5280] RIP: 0033:0x7fee1961ce59 [ 104.148062][ T5280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.148086][ T5280] RSP: 002b:00007fee1806f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.148109][ T5280] RAX: ffffffffffffffda RBX: 00007fee19895fa0 RCX: 00007fee1961ce59 [ 104.148136][ T5280] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 104.148153][ T5280] RBP: 00007fee1806f090 R08: 0000000000000000 R09: 0000000000000000 [ 104.148171][ T5280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.148187][ T5280] R13: 00007fee19896038 R14: 00007fee19895fa0 R15: 00007fffd06a90a8 [ 104.148218][ T5280] [ 104.149629][ T5273] EXT4-fs (loop3): 1 truncate cleaned up [ 104.234389][ T5279] CPU: 1 UID: 0 PID: 5279 Comm: syz.1.422 Tainted: G W syzkaller #0 PREEMPT(full) [ 104.234496][ T5279] Tainted: [W]=WARN [ 104.234519][ T5279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.234550][ T5279] Call Trace: [ 104.234557][ T5279] [ 104.234565][ T5279] __dump_stack+0x1d/0x30 [ 104.234698][ T5279] dump_stack_lvl+0x95/0xd0 [ 104.234757][ T5279] dump_stack+0x15/0x1b [ 104.234855][ T5279] should_fail_ex+0x263/0x280 [ 104.235007][ T5279] should_fail+0xb/0x20 [ 104.235092][ T5279] should_fail_usercopy+0x1a/0x20 [ 104.235226][ T5279] _copy_from_user+0x1c/0xb0 [ 104.235381][ T5279] kstrtouint_from_user+0x69/0xf0 [ 104.235463][ T5279] ? 0xffffffff81000000 [ 104.235543][ T5279] ? selinux_file_permission+0x1e1/0x320 [ 104.235680][ T5279] proc_fail_nth_write+0x50/0x160 [ 104.235797][ T5279] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.235882][ T5279] vfs_write+0x269/0x9f0 [ 104.235992][ T5279] ? __rcu_read_unlock+0x4e/0x70 [ 104.236057][ T5279] ? __fget_files+0x184/0x1c0 [ 104.236123][ T5279] ? mutex_lock+0x57/0x90 [ 104.236196][ T5279] ksys_write+0xdc/0x1a0 [ 104.236319][ T5279] __x64_sys_write+0x40/0x50 [ 104.236500][ T5279] x64_sys_call+0x27e1/0x3020 [ 104.236592][ T5279] do_syscall_64+0x12c/0x3b0 [ 104.236802][ T5279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.236881][ T5279] RIP: 0033:0x7f875acbd68e [ 104.237033][ T5279] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.237112][ T5279] RSP: 002b:00007f875974efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.237133][ T5279] RAX: ffffffffffffffda RBX: 00007f875974f6c0 RCX: 00007f875acbd68e [ 104.237147][ T5279] RDX: 0000000000000001 RSI: 00007f875974f0a0 RDI: 0000000000000003 [ 104.237191][ T5279] RBP: 00007f875974f090 R08: 0000000000000000 R09: 0000000000000000 [ 104.237289][ T5279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.237332][ T5279] R13: 00007f875af76038 R14: 00007f875af75fa0 R15: 00007ffc03dbd698 [ 104.237395][ T5279] [ 104.319617][ T5270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.421'. [ 104.365361][ T5273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.470458][ T5287] loop4: detected capacity change from 0 to 128 [ 104.636993][ T5293] loop2: detected capacity change from 0 to 128 [ 104.655682][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 104.667739][ T5295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5295 comm=syz.0.428 [ 104.738070][ T5302] netlink: 'syz.0.431': attribute type 2 has an invalid length. [ 104.760684][ T5304] syz.2.429: attempt to access beyond end of device [ 104.760684][ T5304] loop2: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 104.783942][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.841350][ T5308] FAULT_INJECTION: forcing a failure. [ 104.841350][ T5308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.885650][ T5308] CPU: 1 UID: 0 PID: 5308 Comm: syz.3.433 Tainted: G W syzkaller #0 PREEMPT(full) [ 104.885694][ T5308] Tainted: [W]=WARN [ 104.885732][ T5308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.885744][ T5308] Call Trace: [ 104.885750][ T5308] [ 104.885758][ T5308] __dump_stack+0x1d/0x30 [ 104.885785][ T5308] dump_stack_lvl+0x95/0xd0 [ 104.885811][ T5308] dump_stack+0x15/0x1b [ 104.885837][ T5308] should_fail_ex+0x263/0x280 [ 104.885884][ T5308] should_fail+0xb/0x20 [ 104.885917][ T5308] should_fail_usercopy+0x1a/0x20 [ 104.886005][ T5308] _copy_from_user+0x1c/0xb0 [ 104.886048][ T5308] ___sys_sendmsg+0xc1/0x1e0 [ 104.886147][ T5308] __x64_sys_sendmsg+0xd4/0x160 [ 104.886185][ T5308] x64_sys_call+0x194c/0x3020 [ 104.886234][ T5308] do_syscall_64+0x12c/0x3b0 [ 104.886269][ T5308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.886291][ T5308] RIP: 0033:0x7fa7b425ce59 [ 104.886307][ T5308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.886397][ T5308] RSP: 002b:00007fa7b2caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.886424][ T5308] RAX: ffffffffffffffda RBX: 00007fa7b44d5fa0 RCX: 00007fa7b425ce59 [ 104.886443][ T5308] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 104.886461][ T5308] RBP: 00007fa7b2caf090 R08: 0000000000000000 R09: 0000000000000000 [ 104.886478][ T5308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.886496][ T5308] R13: 00007fa7b44d6038 R14: 00007fa7b44d5fa0 R15: 00007ffe3b8a4108 [ 104.886535][ T5308] [ 105.093318][ T5314] loop3: detected capacity change from 0 to 1024 [ 105.100401][ T5314] EXT4-fs: inline encryption not supported [ 105.110240][ T5314] EXT4-fs: Ignoring removed bh option [ 105.156816][ T5314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 105.163568][ T5310] netlink: 'syz.1.434': attribute type 4 has an invalid length. [ 105.187259][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 105.190307][ T5317] netlink: 'syz.0.435': attribute type 21 has an invalid length. [ 105.212158][ T5310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.434'. [ 105.247032][ T5310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'. [ 105.268880][ T5310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 105.548677][ T5335] netlink: 35 bytes leftover after parsing attributes in process `syz.4.442'. [ 105.591519][ T5335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.442'. [ 105.618881][ T5339] loop2: detected capacity change from 0 to 1024 [ 105.640063][ T5339] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.668456][ T5339] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.692146][ T5339] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.444: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 105.730350][ T5339] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.730483][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 105.746142][ C0] EXT4-fs (loop2): initial error at time 2000000028: ext4_ext_check_inode:521: inode 11 [ 105.755951][ C0] EXT4-fs (loop2): last error at time 2000000028: ext4_ext_check_inode:521: inode 11 [ 105.777160][ T5339] EXT4-fs (loop2): Remounting filesystem read-only [ 105.789182][ T5339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.919936][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.049936][ T5353] FAULT_INJECTION: forcing a failure. [ 106.049936][ T5353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.063047][ T5353] CPU: 1 UID: 0 PID: 5353 Comm: syz.2.446 Tainted: G W syzkaller #0 PREEMPT(full) [ 106.063133][ T5353] Tainted: [W]=WARN [ 106.063142][ T5353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.063159][ T5353] Call Trace: [ 106.063170][ T5353] [ 106.063180][ T5353] __dump_stack+0x1d/0x30 [ 106.063211][ T5353] dump_stack_lvl+0x95/0xd0 [ 106.063233][ T5353] dump_stack+0x15/0x1b [ 106.063252][ T5353] should_fail_ex+0x263/0x280 [ 106.063299][ T5353] should_fail+0xb/0x20 [ 106.063331][ T5353] should_fail_usercopy+0x1a/0x20 [ 106.063436][ T5353] _copy_to_user+0x20/0xa0 [ 106.063544][ T5353] simple_read_from_buffer+0xb5/0x130 [ 106.063586][ T5353] proc_fail_nth_read+0x10e/0x150 [ 106.063674][ T5353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.063708][ T5353] vfs_read+0x1ab/0x7f0 [ 106.063743][ T5353] ? __rcu_read_unlock+0x4e/0x70 [ 106.063773][ T5353] ? __fget_files+0x184/0x1c0 [ 106.063793][ T5353] ? mutex_lock+0x57/0x90 [ 106.063859][ T5353] ksys_read+0xdc/0x1a0 [ 106.063897][ T5353] __x64_sys_read+0x40/0x50 [ 106.063970][ T5353] x64_sys_call+0x2886/0x3020 [ 106.064003][ T5353] do_syscall_64+0x12c/0x3b0 [ 106.064094][ T5353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.064123][ T5353] RIP: 0033:0x7fee195dd68e [ 106.064144][ T5353] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.064195][ T5353] RSP: 002b:00007fee1806efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.064218][ T5353] RAX: ffffffffffffffda RBX: 00007fee1806f6c0 RCX: 00007fee195dd68e [ 106.064314][ T5353] RDX: 000000000000000f RSI: 00007fee1806f0a0 RDI: 0000000000000005 [ 106.064327][ T5353] RBP: 00007fee1806f090 R08: 0000000000000000 R09: 0000000000000000 [ 106.064343][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.064360][ T5353] R13: 00007fee19896038 R14: 00007fee19895fa0 R15: 00007fffd06a90a8 [ 106.064385][ T5353] [ 106.429040][ T5355] netlink: 830 bytes leftover after parsing attributes in process `syz.2.447'. [ 107.625805][ T5366] loop3: detected capacity change from 0 to 1024 [ 107.734793][ T5366] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 107.774248][ T5366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.098193][ T5378] loop2: detected capacity change from 0 to 1764 [ 109.877141][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.716317][ T5392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 111.871304][ T5388] loop3: detected capacity change from 0 to 1764 [ 111.899765][ T5388] iso9660: Bad value for 'uid' [ 111.959410][ T5388] iso9660: Bad value for 'uid' [ 112.163586][ T5393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5393 comm=syz.3.454 [ 112.832555][ T5399] loop3: detected capacity change from 0 to 1024 [ 112.875327][ T5399] EXT4-fs: Ignoring removed bh option [ 112.926578][ T5399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.020681][ T28] kauditd_printk_skb: 176 callbacks suppressed [ 113.020702][ T28] audit: type=1400 audit(2000000035.270:9739): avc: denied { write } for pid=5398 comm="syz.3.458" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.158341][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.506451][ T5406] loop4: detected capacity change from 0 to 1024 [ 113.524227][ T5406] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.585598][ T5406] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 113.624928][ T5406] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.460: lblock 2 mapped to illegal pblock 2 (length 1) [ 113.679586][ T28] audit: type=1400 audit(2000000035.950:9740): avc: denied { create } for pid=5412 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 113.710948][ T5406] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 113.714002][ T5406] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 113.723109][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 113.723132][ C0] EXT4-fs (loop4): initial error at time 2000000035: ext4_map_blocks:791: inode 3: block 2 [ 113.723188][ C0] EXT4-fs (loop4): last error at time 2000000035: ext4_map_blocks:791: inode 3: block 2 [ 113.770807][ T28] audit: type=1400 audit(2000000035.980:9741): avc: denied { ioctl } for pid=5412 comm="syz.3.462" path="socket:[9878]" dev="sockfs" ino=9878 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 113.811858][ T5406] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.460: lblock 0 mapped to illegal pblock 48 (length 1) [ 113.827487][ T5406] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 113.827692][ T5406] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 113.860673][ T5406] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.460: Failed to acquire dquot type 0 [ 113.890497][ T5406] loop4: lost filesystem error report for type 5 error -117 [ 113.897986][ T5406] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 113.911997][ T5406] loop4: lost filesystem error report for type 5 error -117 [ 113.912191][ T5406] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.460: mark_inode_dirty error [ 113.950560][ T5406] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 113.950688][ T5406] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 113.990536][ T5406] EXT4-fs (loop4): 1 orphan inode deleted [ 114.000880][ T5406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.020593][ T3732] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 114.044361][ T28] audit: type=1400 audit(2000000036.320:9742): avc: denied { write } for pid=5405 comm="syz.4.460" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.071172][ T3732] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 114.090508][ T3732] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:25: Failed to release dquot type 0 [ 114.102658][ T28] audit: type=1400 audit(2000000036.380:9743): avc: denied { write } for pid=5405 comm="syz.4.460" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.317098][ T28] audit: type=1400 audit(2000000036.560:9744): avc: denied { setopt } for pid=5405 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.441216][ T28] audit: type=1400 audit(2000000036.720:9745): avc: denied { read } for pid=5420 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.686850][ T5422] loop3: detected capacity change from 0 to 128 [ 114.704051][ T5422] FAT-fs (loop3): Directory bread(block 162) failed [ 114.712334][ T5422] FAT-fs (loop3): Directory bread(block 163) failed [ 114.720223][ T5422] FAT-fs (loop3): Directory bread(block 164) failed [ 114.728167][ T5422] FAT-fs (loop3): Directory bread(block 165) failed [ 114.736313][ T5422] FAT-fs (loop3): Directory bread(block 166) failed [ 114.743893][ T5422] FAT-fs (loop3): Directory bread(block 167) failed [ 114.751124][ T5422] FAT-fs (loop3): Directory bread(block 168) failed [ 114.758593][ T5422] FAT-fs (loop3): Directory bread(block 169) failed [ 114.766473][ T5422] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.743310][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.755629][ T5432] netlink: 'syz.1.468': attribute type 2 has an invalid length. [ 115.762981][ T3732] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.798828][ T3732] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 115.798952][ T3732] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:25: Failed to release dquot type 0 [ 115.849022][ T3732] loop4: lost filesystem error report for type 5 error -117 [ 115.849804][ T3303] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 115.892582][ T3303] loop4: lost filesystem error report for type 5 error -117 [ 115.893872][ T3303] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 115.931930][ T3303] loop4: lost filesystem error report for type 5 error -117 [ 115.932124][ T3303] EXT4-fs error (device loop4): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 115.970530][ T3303] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 116.049568][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 116.094082][ T5434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.176807][ T5443] syzkaller0: entered promiscuous mode [ 116.182504][ T5443] syzkaller0: entered allmulticast mode [ 116.247989][ T5449] netlink: 'syz.1.474': attribute type 16 has an invalid length. [ 116.301789][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 116.322341][ T5450] netlink: 'syz.1.474': attribute type 5 has an invalid length. [ 116.343203][ T5450] netlink: 48 bytes leftover after parsing attributes in process `syz.1.474'. [ 116.558052][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.565515][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.288748][ T5450] geneve2: entered promiscuous mode [ 117.314823][ T5450] geneve2: entered allmulticast mode [ 117.332463][ T1693] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.350540][ T1693] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 54539 - 0 [ 117.378330][ T1693] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.408630][ T1693] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 54539 - 0 [ 117.437796][ T1693] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.457536][ T1693] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 54539 - 0 [ 117.471875][ T5465] loop4: detected capacity change from 0 to 764 [ 117.493381][ T5465] iso9660: Unknown parameter '¤[ÿOJD…ÿ÷' [ 117.494635][ T1693] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.530788][ T1693] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 54539 - 0 [ 118.547198][ T5480] loop4: detected capacity change from 0 to 512 [ 118.578677][ T5480] EXT4-fs: Ignoring removed oldalloc option [ 118.623303][ T5480] EXT4-fs: Ignoring removed nobh option [ 118.684362][ T5480] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.484: iget: bad extra_isize 90 (inode size 256) [ 118.726847][ T5485] FAULT_INJECTION: forcing a failure. [ 118.726847][ T5485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.740556][ T5480] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 118.750494][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 118.766132][ C0] EXT4-fs (loop4): initial error at time 2000000041: ext4_xattr_inode_iget:441: inode 11 [ 118.776051][ C0] EXT4-fs (loop4): last error at time 2000000041: ext4_xattr_inode_iget:441: inode 11 [ 118.786035][ T5480] EXT4-fs (loop4): Remounting filesystem read-only [ 118.800753][ T5480] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 118.812273][ T5485] CPU: 0 UID: 0 PID: 5485 Comm: syz.0.486 Tainted: G W syzkaller #0 PREEMPT(full) [ 118.812320][ T5485] Tainted: [W]=WARN [ 118.812346][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.812360][ T5485] Call Trace: [ 118.812369][ T5485] [ 118.812377][ T5485] __dump_stack+0x1d/0x30 [ 118.812482][ T5485] dump_stack_lvl+0x95/0xd0 [ 118.812504][ T5485] dump_stack+0x15/0x1b [ 118.812597][ T5485] should_fail_ex+0x263/0x280 [ 118.812634][ T5485] should_fail+0xb/0x20 [ 118.812663][ T5485] should_fail_usercopy+0x1a/0x20 [ 118.812775][ T5485] _copy_to_user+0x20/0xa0 [ 118.812817][ T5485] simple_read_from_buffer+0xb5/0x130 [ 118.812856][ T5485] proc_fail_nth_read+0x10e/0x150 [ 118.812911][ T5485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.812951][ T5485] vfs_read+0x1ab/0x7f0 [ 118.812987][ T5485] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 118.813096][ T5485] ksys_read+0xdc/0x1a0 [ 118.813196][ T5485] __x64_sys_read+0x40/0x50 [ 118.813227][ T5485] x64_sys_call+0x2886/0x3020 [ 118.813311][ T5485] do_syscall_64+0x12c/0x3b0 [ 118.813344][ T5485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.813452][ T5485] RIP: 0033:0x7f7e2853d68e [ 118.813476][ T5485] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.813557][ T5485] RSP: 002b:00007f7e26fd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.813578][ T5485] RAX: ffffffffffffffda RBX: 00007f7e26fd76c0 RCX: 00007f7e2853d68e [ 118.813592][ T5485] RDX: 000000000000000f RSI: 00007f7e26fd70a0 RDI: 0000000000000007 [ 118.813606][ T5485] RBP: 00007f7e26fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.813619][ T5485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.813649][ T5485] R13: 00007f7e287f6038 R14: 00007f7e287f5fa0 R15: 00007ffcef765a58 [ 118.813671][ T5485] [ 119.009714][ T5480] EXT4-fs (loop4): 1 orphan inode deleted [ 119.031215][ T5480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.108954][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 119.108971][ T28] audit: type=1400 audit(2000000041.380:9749): avc: denied { create } for pid=5490 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.179274][ T28] audit: type=1400 audit(2000000041.450:9750): avc: denied { write } for pid=5479 comm="syz.4.484" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.337141][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.573820][ T28] audit: type=1400 audit(2000000041.850:9751): avc: denied { name_bind } for pid=5496 comm="syz.4.490" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 119.815669][ T28] audit: type=1400 audit(2000000042.090:9752): avc: denied { read } for pid=5523 comm="syz.4.496" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.845178][ T5524] loop4: detected capacity change from 0 to 164 [ 119.870883][ T5524] Symlink component flag not implemented [ 119.876640][ T5524] Symlink component flag not implemented (7) [ 119.886978][ T28] audit: type=1400 audit(2000000042.090:9753): avc: denied { open } for pid=5523 comm="syz.4.496" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.956884][ T28] audit: type=1400 audit(2000000042.120:9754): avc: denied { ioctl } for pid=5523 comm="syz.4.496" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.999598][ T28] audit: type=1326 audit(2000000042.230:9755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078d48ce59 code=0x7ffc0000 [ 120.029699][ T28] audit: type=1326 audit(2000000042.230:9756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078d48ce59 code=0x7ffc0000 [ 120.060800][ T28] audit: type=1326 audit(2000000042.230:9757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078d48ce59 code=0x7ffc0000 [ 120.091513][ T28] audit: type=1326 audit(2000000042.230:9758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f078d48ce59 code=0x7ffc0000 [ 120.296314][ T5558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'. [ 120.390027][ T5570] loop2: detected capacity change from 0 to 512 [ 120.430194][ T5570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.450734][ T5570] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.452279][ T5545] pim6reg: entered allmulticast mode [ 120.470405][ T5575] netlink: 27 bytes leftover after parsing attributes in process `syz.4.503'. [ 120.481446][ T5562] FAULT_INJECTION: forcing a failure. [ 120.481446][ T5562] name failslab, interval 1, probability 0, space 0, times 0 [ 120.494081][ T5562] CPU: 1 UID: 0 PID: 5562 Comm: syz.1.501 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.494120][ T5562] Tainted: [W]=WARN [ 120.494181][ T5562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.494197][ T5562] Call Trace: [ 120.494204][ T5562] [ 120.494212][ T5562] __dump_stack+0x1d/0x30 [ 120.494236][ T5562] dump_stack_lvl+0x95/0xd0 [ 120.494262][ T5562] dump_stack+0x15/0x1b [ 120.494308][ T5562] should_fail_ex+0x263/0x280 [ 120.494345][ T5562] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 120.494380][ T5562] should_failslab+0x8c/0xb0 [ 120.494468][ T5562] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 120.494513][ T5562] ? debugfs_alloc_inode+0x34/0x40 [ 120.494624][ T5562] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 120.494664][ T5562] debugfs_alloc_inode+0x34/0x40 [ 120.494715][ T5562] alloc_inode+0x40/0x170 [ 120.494799][ T5562] new_inode+0x1d/0xe0 [ 120.494824][ T5562] __debugfs_create_file+0x97/0x2b0 [ 120.494861][ T5562] debugfs_create_file_full+0x3f/0x60 [ 120.494903][ T5562] ? __pfx_veth_setup+0x10/0x10 [ 120.494986][ T5562] ref_tracker_dir_debugfs+0x10e/0x220 [ 120.495026][ T5562] alloc_netdev_mqs+0x1a7/0xa70 [ 120.495128][ T5562] rtnl_create_link+0x239/0x720 [ 120.495161][ T5562] veth_newlink+0x1fc/0x780 [ 120.495309][ T5562] ? __pfx_veth_newlink+0x10/0x10 [ 120.495344][ T5562] rtnl_newlink_create+0x1e4/0x650 [ 120.495473][ T5562] rtnl_newlink+0x1185/0x1400 [ 120.495535][ T5562] ? __pfx_rtnl_newlink+0x10/0x10 [ 120.495572][ T5562] rtnetlink_rcv_msg+0x64b/0x720 [ 120.495611][ T5562] ? avc_has_perm_noaudit+0xab/0x130 [ 120.495714][ T5562] netlink_rcv_skb+0x123/0x220 [ 120.495743][ T5562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.495786][ T5562] rtnetlink_rcv+0x1c/0x30 [ 120.495822][ T5562] netlink_unicast+0x5a8/0x680 [ 120.495926][ T5562] netlink_sendmsg+0x5c8/0x6f0 [ 120.495968][ T5562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.496008][ T5562] ____sys_sendmsg+0x563/0x5b0 [ 120.496079][ T5562] ___sys_sendmsg+0x195/0x1e0 [ 120.496116][ T5562] __x64_sys_sendmsg+0xd4/0x160 [ 120.496192][ T5562] x64_sys_call+0x194c/0x3020 [ 120.496224][ T5562] do_syscall_64+0x12c/0x3b0 [ 120.496264][ T5562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.496364][ T5562] RIP: 0033:0x7f875acfce59 [ 120.496380][ T5562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.496404][ T5562] RSP: 002b:00007f875974f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.496429][ T5562] RAX: ffffffffffffffda RBX: 00007f875af75fa0 RCX: 00007f875acfce59 [ 120.496448][ T5562] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 120.496465][ T5562] RBP: 00007f875974f090 R08: 0000000000000000 R09: 0000000000000000 [ 120.496515][ T5562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.496532][ T5562] R13: 00007f875af76038 R14: 00007f875af75fa0 R15: 00007ffc03dbd698 [ 120.496557][ T5562] [ 120.496566][ T5562] debugfs: out of free dentries, can not create file 'netdev@ffff88811af85598' [ 120.775581][ T5579] loop4: detected capacity change from 0 to 512 [ 120.796027][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 120.822421][ T5569] pim6reg: entered allmulticast mode [ 120.834965][ T5581] pim6reg: left allmulticast mode [ 120.852816][ T5579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.870935][ T5579] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.894385][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.914482][ T5586] ªªªªªª: renamed from vlan0 [ 120.965387][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.009093][ T5593] loop2: detected capacity change from 0 to 512 [ 121.062588][ T5593] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.508: invalid indirect mapped block 256 (level 2) [ 121.075924][ T5593] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.076538][ T5593] EXT4-fs (loop2): 2 truncates cleaned up [ 121.113502][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 121.120001][ C1] EXT4-fs (loop2): initial error at time 2000000299: ext4_free_branches:1023: inode 11 [ 121.129744][ C1] EXT4-fs (loop2): last error at time 2000000299: ext4_free_branches:1023: inode 11 [ 121.143260][ T5593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.178219][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.379618][ T5624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=5624 comm=syz.1.518 [ 121.418626][ T5630] netlink: 'syz.1.521': attribute type 13 has an invalid length. [ 121.426936][ T5630] netlink: 'syz.1.521': attribute type 17 has an invalid length. [ 121.444677][ T5632] netlink: 'syz.4.522': attribute type 39 has an invalid length. [ 121.470257][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.479647][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.527800][ T5630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.538645][ T5630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.552688][ T5630] veth1_vlan: left promiscuous mode [ 121.559096][ T5630] veth0_vlan: left promiscuous mode [ 121.565391][ T5630] veth0_vlan: entered promiscuous mode [ 121.574649][ T5630] veth1_vlan: entered promiscuous mode [ 121.584263][ T5630] veth1_macvtap: left promiscuous mode [ 121.591051][ T5630] veth0_macvtap: left promiscuous mode [ 121.597386][ T5630] veth0_macvtap: entered promiscuous mode [ 121.604341][ T5630] veth1_macvtap: entered promiscuous mode [ 121.614760][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.628170][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.639915][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.651764][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.666598][ T5630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.697938][ T5630] geneve2: left promiscuous mode [ 121.703007][ T5630] geneve2: left allmulticast mode [ 121.721339][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.728470][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.751858][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.759012][ T3728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.794784][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.811296][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.837027][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.864753][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.910416][ T5659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.532'. [ 122.140731][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 122.496852][ T5718] geneve2: entered promiscuous mode [ 122.685305][ T5727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5727 comm=syz.2.559 [ 122.928193][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 123.356714][ T5744] netlink: 8752 bytes leftover after parsing attributes in process `syz.0.565'. [ 123.366566][ T5744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5744 comm=syz.0.565 [ 123.470781][ T5758] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 123.657767][ T5776] netlink: 'syz.1.576': attribute type 1 has an invalid length. [ 123.723321][ T5776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.732581][ T5776] bond2: (slave bond3): making interface the new active one [ 123.741541][ T5776] bond2: (slave bond3): Enslaving as an active interface with an up link [ 123.767490][ T5776] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 123.848873][ T5782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5782 comm=syz.1.576 [ 123.876451][ T5782] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.977267][ T5797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.583'. [ 124.006360][ T5799] vlan2: entered promiscuous mode [ 124.011620][ T5799] bridge0: entered promiscuous mode [ 124.041785][ T5807] FAULT_INJECTION: forcing a failure. [ 124.041785][ T5807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.053646][ T5804] Process accounting resumed [ 124.055618][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: syz.1.588 Tainted: G W syzkaller #0 PREEMPT(full) [ 124.055760][ T5807] Tainted: [W]=WARN [ 124.055780][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.055821][ T5807] Call Trace: [ 124.055843][ T5807] [ 124.055872][ T5807] __dump_stack+0x1d/0x30 [ 124.055957][ T5807] dump_stack_lvl+0x95/0xd0 [ 124.056022][ T5807] dump_stack+0x15/0x1b [ 124.056142][ T5807] should_fail_ex+0x263/0x280 [ 124.056251][ T5807] should_fail+0xb/0x20 [ 124.056332][ T5807] should_fail_usercopy+0x1a/0x20 [ 124.056454][ T5807] _copy_from_user+0x1c/0xb0 [ 124.056577][ T5807] memdup_user+0x5e/0xd0 [ 124.056663][ T5807] strndup_user+0x68/0xb0 [ 124.056839][ T5807] __se_sys_mount+0x8e/0x2e0 [ 124.056943][ T5807] ? fput+0x8f/0xc0 [ 124.057028][ T5807] ? ksys_write+0x194/0x1a0 [ 124.057135][ T5807] __x64_sys_mount+0x67/0x80 [ 124.057228][ T5807] x64_sys_call+0x2d61/0x3020 [ 124.057311][ T5807] do_syscall_64+0x12c/0x3b0 [ 124.057420][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.057504][ T5807] RIP: 0033:0x7f875acfce59 [ 124.057557][ T5807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.057661][ T5807] RSP: 002b:00007f875974f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.057749][ T5807] RAX: ffffffffffffffda RBX: 00007f875af75fa0 RCX: 00007f875acfce59 [ 124.057793][ T5807] RDX: 0000200000001200 RSI: 00002000000000c0 RDI: 00002000000001c0 [ 124.057858][ T5807] RBP: 00007f875974f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.057916][ T5807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.057952][ T5807] R13: 00007f875af76038 R14: 00007f875af75fa0 R15: 00007ffc03dbd698 [ 124.058029][ T5807] [ 124.131883][ T28] kauditd_printk_skb: 447 callbacks suppressed [ 124.131920][ T28] audit: type=1400 audit(2000000302.416:10206): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 124.275928][ T28] audit: type=1400 audit(2000000302.436:10207): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 124.276013][ T28] audit: type=1400 audit(2000000302.466:10208): avc: denied { create } for pid=5809 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 124.276088][ T28] audit: type=1400 audit(2000000302.466:10209): avc: denied { create } for pid=5809 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 124.276119][ T28] audit: type=1400 audit(2000000302.466:10210): avc: denied { prog_load } for pid=5809 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 124.276150][ T28] audit: type=1400 audit(2000000302.476:10211): avc: denied { open } for pid=5814 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 124.276179][ T28] audit: type=1400 audit(2000000302.476:10212): avc: denied { prog_load } for pid=5814 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 124.276240][ T28] audit: type=1400 audit(2000000302.476:10213): avc: denied { allowed } for pid=5814 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 124.276266][ T28] audit: type=1400 audit(2000000302.506:10214): avc: denied { create } for pid=5812 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 124.276303][ T28] audit: type=1400 audit(2000000302.506:10215): avc: denied { map_create } for pid=5812 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 124.784311][ T5845] Process accounting resumed [ 124.830298][ T5849] netlink: 156 bytes leftover after parsing attributes in process `syz.0.605'. [ 125.134323][ T5871] Process accounting resumed [ 125.682658][ T5902] Process accounting resumed [ 125.803178][ T5906] FAULT_INJECTION: forcing a failure. [ 125.803178][ T5906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.816457][ T5906] CPU: 1 UID: 0 PID: 5906 Comm: syz.2.628 Tainted: G W syzkaller #0 PREEMPT(full) [ 125.816524][ T5906] Tainted: [W]=WARN [ 125.816534][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.816552][ T5906] Call Trace: [ 125.816561][ T5906] [ 125.816571][ T5906] __dump_stack+0x1d/0x30 [ 125.816669][ T5906] dump_stack_lvl+0x95/0xd0 [ 125.816697][ T5906] dump_stack+0x15/0x1b [ 125.816722][ T5906] should_fail_ex+0x263/0x280 [ 125.816759][ T5906] should_fail+0xb/0x20 [ 125.816900][ T5906] should_fail_usercopy+0x1a/0x20 [ 125.816939][ T5906] _copy_to_user+0x20/0xa0 [ 125.817000][ T5906] simple_read_from_buffer+0xb5/0x130 [ 125.817055][ T5906] proc_fail_nth_read+0x10e/0x150 [ 125.817163][ T5906] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.817202][ T5906] vfs_read+0x1ab/0x7f0 [ 125.817239][ T5906] ? __rcu_read_unlock+0x4e/0x70 [ 125.817267][ T5906] ? __fget_files+0x184/0x1c0 [ 125.817293][ T5906] ? mutex_lock+0x57/0x90 [ 125.817361][ T5906] ksys_read+0xdc/0x1a0 [ 125.817394][ T5906] __x64_sys_read+0x40/0x50 [ 125.817426][ T5906] x64_sys_call+0x2886/0x3020 [ 125.817459][ T5906] do_syscall_64+0x12c/0x3b0 [ 125.817633][ T5906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.817658][ T5906] RIP: 0033:0x7fee195dd68e [ 125.817704][ T5906] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 125.817772][ T5906] RSP: 002b:00007fee1806efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.817795][ T5906] RAX: ffffffffffffffda RBX: 00007fee1806f6c0 RCX: 00007fee195dd68e [ 125.817878][ T5906] RDX: 000000000000000f RSI: 00007fee1806f0a0 RDI: 0000000000000007 [ 125.817895][ T5906] RBP: 00007fee1806f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.817913][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.817969][ T5906] R13: 00007fee19896038 R14: 00007fee19895fa0 R15: 00007fffd06a90a8 [ 125.817995][ T5906] [ 126.094004][ T5916] netlink: 59 bytes leftover after parsing attributes in process `syz.0.633'. [ 126.110551][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 126.942363][ T5928] Process accounting resumed [ 126.996610][ T5934] bond1: peer notification delay (2048) is not a multiple of miimon (100), value rounded to 2000 ms [ 127.055120][ T5934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.092967][ T5936] netlink: 'syz.2.639': attribute type 32 has an invalid length. [ 127.125179][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 127.145346][ T5934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56103 sclass=netlink_route_socket pid=5934 comm=syz.2.639 [ 127.162244][ T5936] bond2: option coupled_control: invalid value (3) [ 127.169168][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.639'. [ 127.181856][ T5936] bond2 (unregistering): Released all slaves [ 127.196026][ T5934] bond0: (slave bond_slave_0): Releasing backup interface [ 127.281145][ T5934] bond_slave_0: entered promiscuous mode [ 127.300105][ T5934] bond_slave_0: entered allmulticast mode [ 127.493342][ T5963] Process accounting resumed [ 127.521070][ T5970] netlink: 'syz.0.654': attribute type 1 has an invalid length. [ 127.563926][ T5970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.594586][ T5971] macvlan3: entered promiscuous mode [ 127.608233][ T5971] macvlan3: entered allmulticast mode [ 127.864360][ T5989] FAULT_INJECTION: forcing a failure. [ 127.864360][ T5989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.879227][ T5989] CPU: 1 UID: 0 PID: 5989 Comm: syz.0.659 Tainted: G W syzkaller #0 PREEMPT(full) [ 127.879340][ T5989] Tainted: [W]=WARN [ 127.879347][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.879362][ T5989] Call Trace: [ 127.879370][ T5989] [ 127.879379][ T5989] __dump_stack+0x1d/0x30 [ 127.879410][ T5989] dump_stack_lvl+0x95/0xd0 [ 127.879476][ T5989] dump_stack+0x15/0x1b [ 127.879500][ T5989] should_fail_ex+0x263/0x280 [ 127.879535][ T5989] should_fail+0xb/0x20 [ 127.879560][ T5989] should_fail_usercopy+0x1a/0x20 [ 127.879635][ T5989] _copy_to_user+0x20/0xa0 [ 127.879675][ T5989] simple_read_from_buffer+0xb5/0x130 [ 127.879743][ T5989] proc_fail_nth_read+0x10e/0x150 [ 127.879782][ T5989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.879880][ T5989] vfs_read+0x1ab/0x7f0 [ 127.879916][ T5989] ? __rcu_read_unlock+0x4e/0x70 [ 127.879944][ T5989] ? __fget_files+0x184/0x1c0 [ 127.880003][ T5989] ? mutex_lock+0x57/0x90 [ 127.880128][ T5989] ksys_read+0xdc/0x1a0 [ 127.880261][ T5989] __x64_sys_read+0x40/0x50 [ 127.880298][ T5989] x64_sys_call+0x2886/0x3020 [ 127.880332][ T5989] do_syscall_64+0x12c/0x3b0 [ 127.880368][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.880608][ T5989] RIP: 0033:0x7f7e2853d68e [ 127.880630][ T5989] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 127.880657][ T5989] RSP: 002b:00007f7e26fd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.880684][ T5989] RAX: ffffffffffffffda RBX: 00007f7e26fd76c0 RCX: 00007f7e2853d68e [ 127.880774][ T5989] RDX: 000000000000000f RSI: 00007f7e26fd70a0 RDI: 0000000000000004 [ 127.880787][ T5989] RBP: 00007f7e26fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.880800][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.880816][ T5989] R13: 00007f7e287f6038 R14: 00007f7e287f5fa0 R15: 00007ffcef765a58 [ 127.880843][ T5989] [ 128.394971][ T6007] Process accounting resumed [ 129.140657][ T28] kauditd_printk_skb: 8001 callbacks suppressed [ 129.140677][ T28] audit: type=1400 audit(2000000307.416:18217): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.173089][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 129.186060][ T3022] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 129.210295][ T3022] audit: backlog limit exceeded [ 129.222682][ T3307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 129.224690][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 129.241742][ T28] audit: type=1400 audit(2000000307.416:18218): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.256099][ T3022] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 129.264793][ T3307] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 129.300711][ T28] audit: type=1400 audit(2000000307.416:18219): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.392715][ T6055] Process accounting resumed [ 131.647157][ T6086] Process accounting resumed [ 131.745475][ T6093] netlink: 'syz.4.695': attribute type 1 has an invalid length. [ 132.567962][ T6123] netlink: 'syz.3.706': attribute type 4 has an invalid length. [ 132.763465][ T6134] netlink: 'syz.3.711': attribute type 11 has an invalid length. [ 132.781550][ T6134] netlink: 'syz.3.711': attribute type 30 has an invalid length. [ 133.695233][ T6170] netlink: 76 bytes leftover after parsing attributes in process `syz.3.724'. [ 133.760003][ T6184] Process accounting resumed [ 133.872827][ T6191] netlink: 'syz.2.733': attribute type 1 has an invalid length. [ 133.892425][ T6191] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.940420][ T6191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.733'. [ 134.110747][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 134.127263][ T6203] gretap0: entered promiscuous mode [ 134.148624][ T6203] vlan0: entered promiscuous mode [ 134.153824][ T28] kauditd_printk_skb: 20049 callbacks suppressed [ 134.153841][ T28] audit: type=1400 audit(2000000312.416:37526): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 134.185050][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.193618][ T6199] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.206617][ T6199] audit: audit_lost=252 audit_rate_limit=0 audit_backlog_limit=64 [ 134.207390][ T3022] audit: audit_lost=253 audit_rate_limit=0 audit_backlog_limit=64 [ 134.222443][ T28] audit: type=1400 audit(2000000312.416:37527): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 134.244039][ T6199] audit: backlog limit exceeded [ 134.255546][ T3022] audit: backlog limit exceeded [ 134.255994][ T28] audit: type=1400 audit(2000000312.416:37528): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 134.275930][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.342071][ T6204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.541212][ T6213] Process accounting resumed [ 135.457230][ T6241] Process accounting resumed [ 135.783972][ T6262] netlink: 60 bytes leftover after parsing attributes in process `syz.3.760'. [ 135.791019][ T6260] FAULT_INJECTION: forcing a failure. [ 135.791019][ T6260] name failslab, interval 1, probability 0, space 0, times 0 [ 135.898727][ T6260] CPU: 1 UID: 0 PID: 6260 Comm: syz.4.759 Tainted: G W syzkaller #0 PREEMPT(full) [ 135.898801][ T6260] Tainted: [W]=WARN [ 135.898808][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.898821][ T6260] Call Trace: [ 135.898848][ T6260] [ 135.898856][ T6260] __dump_stack+0x1d/0x30 [ 135.898903][ T6260] dump_stack_lvl+0x95/0xd0 [ 135.898927][ T6260] dump_stack+0x15/0x1b [ 135.898952][ T6260] should_fail_ex+0x263/0x280 [ 135.898990][ T6260] should_failslab+0x8c/0xb0 [ 135.899061][ T6260] kmem_cache_alloc_noprof+0x66/0x3f0 [ 135.899139][ T6260] ? do_getname+0x2e/0x1c0 [ 135.899159][ T6260] ? should_fail_ex+0xd9/0x280 [ 135.899232][ T6260] do_getname+0x2e/0x1c0 [ 135.899257][ T6260] user_path_at+0x28/0x100 [ 135.899290][ T6260] __se_sys_mount+0x25b/0x2e0 [ 135.899330][ T6260] ? fput+0x8f/0xc0 [ 135.899439][ T6260] __x64_sys_mount+0x67/0x80 [ 135.899508][ T6260] x64_sys_call+0x2d61/0x3020 [ 135.899532][ T6260] do_syscall_64+0x12c/0x3b0 [ 135.899574][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.899603][ T6260] RIP: 0033:0x7f078d48ce59 [ 135.899676][ T6260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.899697][ T6260] RSP: 002b:00007f078bedf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 135.899720][ T6260] RAX: ffffffffffffffda RBX: 00007f078d705fa0 RCX: 00007f078d48ce59 [ 135.899738][ T6260] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 135.899774][ T6260] RBP: 00007f078bedf090 R08: 0000000000000000 R09: 0000000000000000 [ 135.899790][ T6260] R10: 0000000000202021 R11: 0000000000000246 R12: 0000000000000001 [ 135.899806][ T6260] R13: 00007f078d706038 R14: 00007f078d705fa0 R15: 00007ffd3bed1498 [ 135.899832][ T6260] [ 136.186337][ T6275] netlink: 'syz.1.767': attribute type 10 has an invalid length. [ 136.219019][ T6275] team0: Port device veth0_to_hsr added [ 136.295754][ T6280] Process accounting resumed [ 136.334656][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 136.366494][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.413927][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.524859][ T6299] netlink: 830 bytes leftover after parsing attributes in process `syz.2.775'. [ 136.567211][ T6299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.775'. [ 136.695908][ T6312] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 136.695908][ T6312] The task syz.3.777 (6312) triggered the difference, watch for misbehavior. [ 136.759984][ T6311] Process accounting resumed [ 137.211849][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 137.440680][ T6340] netlink: 60 bytes leftover after parsing attributes in process `syz.1.791'. [ 137.465800][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'. [ 137.589421][ T6347] netlink: 'syz.3.793': attribute type 13 has an invalid length. [ 137.613396][ T6347] netlink: 'syz.3.793': attribute type 17 has an invalid length. [ 137.633005][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.640320][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.738431][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.826235][ T6346] wireguard0: entered promiscuous mode [ 137.850676][ T6346] wireguard0: entered allmulticast mode [ 138.015168][ T6347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.030146][ T6347] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.053261][ T6347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.133684][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.163852][ T6347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.185235][ T6347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.217846][ T6347] veth1_macvtap: left promiscuous mode [ 138.231977][ T6347] veth0_macvtap: left promiscuous mode [ 138.246472][ T6347] veth0_macvtap: entered promiscuous mode [ 138.261943][ T6347] veth1_macvtap: entered promiscuous mode [ 138.271712][ T6358] netlink: 52 bytes leftover after parsing attributes in process `syz.1.799'. [ 138.297617][ T6347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.325930][ T6347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.349146][ T6347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.391831][ T6347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 138.426991][ T6347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.461327][ T6354] FAULT_INJECTION: forcing a failure. [ 138.461327][ T6354] name failslab, interval 1, probability 0, space 0, times 0 [ 138.476829][ T3738] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.483964][ T3738] bridge0: port 1(bridge_slave_0) entered listening state [ 138.499541][ T6354] CPU: 1 UID: 0 PID: 6354 Comm: syz.4.797 Tainted: G W syzkaller #0 PREEMPT(full) [ 138.499575][ T6354] Tainted: [W]=WARN [ 138.499581][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.499596][ T6354] Call Trace: [ 138.499670][ T6354] [ 138.499680][ T6354] __dump_stack+0x1d/0x30 [ 138.499768][ T6354] dump_stack_lvl+0x95/0xd0 [ 138.499908][ T6354] dump_stack+0x15/0x1b [ 138.499933][ T6354] should_fail_ex+0x263/0x280 [ 138.499965][ T6354] should_failslab+0x8c/0xb0 [ 138.500063][ T6354] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 138.500165][ T6354] ? __alloc_skb+0x2d6/0x690 [ 138.500247][ T6354] __alloc_skb+0x2d6/0x690 [ 138.500280][ T6354] ? __alloc_skb+0x200/0x690 [ 138.500306][ T6354] netlink_alloc_large_skb+0xbf/0xf0 [ 138.500416][ T6354] netlink_sendmsg+0x40c/0x6f0 [ 138.500456][ T6354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.500515][ T6354] ____sys_sendmsg+0x563/0x5b0 [ 138.500551][ T6354] ___sys_sendmsg+0x195/0x1e0 [ 138.500583][ T6354] ? path_openat+0x1b01/0x2050 [ 138.500624][ T6354] __sys_sendmmsg+0x185/0x320 [ 138.500743][ T6354] __x64_sys_sendmmsg+0x57/0x70 [ 138.500849][ T6354] x64_sys_call+0x27aa/0x3020 [ 138.500937][ T6354] do_syscall_64+0x12c/0x3b0 [ 138.500982][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.501012][ T6354] RIP: 0033:0x7f078d48ce59 [ 138.501033][ T6354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.501058][ T6354] RSP: 002b:00007f078bedf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 138.501142][ T6354] RAX: ffffffffffffffda RBX: 00007f078d705fa0 RCX: 00007f078d48ce59 [ 138.501157][ T6354] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 138.501175][ T6354] RBP: 00007f078bedf090 R08: 0000000000000000 R09: 0000000000000000 [ 138.501193][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.501211][ T6354] R13: 00007f078d706038 R14: 00007f078d705fa0 R15: 00007ffd3bed1498 [ 138.501238][ T6354] [ 138.705479][ T3738] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.712685][ T3738] bridge0: port 2(bridge_slave_1) entered listening state [ 138.796358][ T6373] netlink: 60 bytes leftover after parsing attributes in process `syz.0.804'. [ 138.809784][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'. [ 138.868393][ T6379] veth1_to_batadv: entered promiscuous mode [ 138.889369][ T6379] macvlan3: entered promiscuous mode [ 139.161519][ T28] kauditd_printk_skb: 16346 callbacks suppressed [ 139.161538][ T28] audit: type=1400 audit(2000000317.426:53871): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 139.192249][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.205727][ T3022] audit: audit_lost=256 audit_rate_limit=0 audit_backlog_limit=64 [ 139.218893][ T6409] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.225716][ T6409] audit: audit_lost=257 audit_rate_limit=0 audit_backlog_limit=64 [ 139.239146][ T6411] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.243823][ T6409] audit: backlog limit exceeded [ 139.255213][ T3022] audit: backlog limit exceeded [ 139.255992][ T28] audit: type=1400 audit(2000000317.426:53872): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 139.269280][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.289671][ T6409] FAULT_INJECTION: forcing a failure. [ 139.289671][ T6409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.330963][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz.0.816 Tainted: G W syzkaller #0 PREEMPT(full) [ 139.331001][ T6409] Tainted: [W]=WARN [ 139.331010][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.331095][ T6409] Call Trace: [ 139.331102][ T6409] [ 139.331112][ T6409] __dump_stack+0x1d/0x30 [ 139.331144][ T6409] dump_stack_lvl+0x95/0xd0 [ 139.331200][ T6409] dump_stack+0x15/0x1b [ 139.331230][ T6409] should_fail_ex+0x263/0x280 [ 139.331259][ T6409] should_fail+0xb/0x20 [ 139.331325][ T6409] should_fail_usercopy+0x1a/0x20 [ 139.331365][ T6409] _copy_from_user+0x1c/0xb0 [ 139.331405][ T6409] __sys_bpf+0x183/0x7e0 [ 139.331447][ T6409] __x64_sys_bpf+0x41/0x50 [ 139.331518][ T6409] x64_sys_call+0x10cb/0x3020 [ 139.331563][ T6409] do_syscall_64+0x12c/0x3b0 [ 139.331600][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.331687][ T6409] RIP: 0033:0x7f7e2857ce59 [ 139.331709][ T6409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.331734][ T6409] RSP: 002b:00007f7e26fd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.331755][ T6409] RAX: ffffffffffffffda RBX: 00007f7e287f5fa0 RCX: 00007f7e2857ce59 [ 139.331769][ T6409] RDX: 0000000000000090 RSI: 0000200000000080 RDI: 0000000000000005 [ 139.331781][ T6409] RBP: 00007f7e26fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.331830][ T6409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.331847][ T6409] R13: 00007f7e287f6038 R14: 00007f7e287f5fa0 R15: 00007ffcef765a58 [ 139.331873][ T6409] [ 140.730146][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 140.765408][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.793553][ T6446] bridge_slave_1 (unregistering): left allmulticast mode [ 140.811921][ T6446] bridge_slave_1 (unregistering): left promiscuous mode [ 140.831514][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.467807][ T6455] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=51 sclass=netlink_audit_socket pid=6455 comm=syz.1.832 [ 142.055016][ T6472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=6472 comm=syz.2.838 [ 142.166001][ T6481] FAULT_INJECTION: forcing a failure. [ 142.166001][ T6481] name failslab, interval 1, probability 0, space 0, times 0 [ 142.193865][ T6481] CPU: 1 UID: 0 PID: 6481 Comm: syz.2.841 Tainted: G W syzkaller #0 PREEMPT(full) [ 142.193911][ T6481] Tainted: [W]=WARN [ 142.193921][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.193939][ T6481] Call Trace: [ 142.193948][ T6481] [ 142.194011][ T6481] __dump_stack+0x1d/0x30 [ 142.194036][ T6481] dump_stack_lvl+0x95/0xd0 [ 142.194061][ T6481] dump_stack+0x15/0x1b [ 142.194086][ T6481] should_fail_ex+0x263/0x280 [ 142.194118][ T6481] ? simple_xattrs_lazy_alloc+0x62/0x120 [ 142.194199][ T6481] should_failslab+0x8c/0xb0 [ 142.194231][ T6481] __kmalloc_cache_noprof+0x5f/0x400 [ 142.194359][ T6481] simple_xattrs_lazy_alloc+0x62/0x120 [ 142.194396][ T6481] shmem_xattr_handler_set+0x63/0x260 [ 142.194434][ T6481] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 142.194600][ T6481] __vfs_setxattr+0x2e6/0x310 [ 142.194641][ T6481] __vfs_setxattr_noperm+0xe8/0x410 [ 142.194691][ T6481] __vfs_setxattr_locked+0x105/0x220 [ 142.194815][ T6481] vfs_setxattr+0x12c/0x2a0 [ 142.194901][ T6481] file_setxattr+0x138/0x1b0 [ 142.194928][ T6481] path_setxattrat+0x281/0x310 [ 142.194973][ T6481] __x64_sys_fsetxattr+0x6b/0x80 [ 142.194995][ T6481] x64_sys_call+0x2f0e/0x3020 [ 142.195073][ T6481] do_syscall_64+0x12c/0x3b0 [ 142.195144][ T6481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.195173][ T6481] RIP: 0033:0x7fee1961ce59 [ 142.195194][ T6481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.195218][ T6481] RSP: 002b:00007fee1806f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 142.195285][ T6481] RAX: ffffffffffffffda RBX: 00007fee19895fa0 RCX: 00007fee1961ce59 [ 142.195304][ T6481] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000003 [ 142.195322][ T6481] RBP: 00007fee1806f090 R08: 0000000000000000 R09: 0000000000000000 [ 142.195338][ T6481] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 142.195399][ T6481] R13: 00007fee19896038 R14: 00007fee19895fa0 R15: 00007fffd06a90a8 [ 142.195420][ T6481] [ 142.224044][ T6479] Process accounting resumed [ 143.125612][ T6511] Process accounting resumed [ 143.314212][ T6520] netlink: 'syz.4.859': attribute type 4 has an invalid length. [ 143.334205][ T6520] netlink: 'syz.4.859': attribute type 4 has an invalid length. [ 143.587298][ T6545] Process accounting resumed [ 143.741923][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'. [ 143.854886][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 143.878315][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'. [ 143.897987][ T6556] netlink: 'syz.3.873': attribute type 12 has an invalid length. [ 143.923191][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.940980][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.961898][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.986960][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.998876][ T6565] netlink: 192 bytes leftover after parsing attributes in process `syz.3.873'. [ 144.028495][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 144.172840][ T28] kauditd_printk_skb: 19198 callbacks suppressed [ 144.172909][ T28] audit: type=1400 audit(2000000322.444:73053): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.199426][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.210981][ T3303] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.217672][ T3303] audit: audit_lost=265 audit_rate_limit=0 audit_backlog_limit=64 [ 144.220662][ T3022] audit: audit_lost=266 audit_rate_limit=0 audit_backlog_limit=64 [ 144.226924][ T3303] audit: backlog limit exceeded [ 144.238371][ T28] audit: type=1400 audit(2000000322.454:73054): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.254019][ T3022] audit: backlog limit exceeded [ 144.269486][ T28] audit: type=1400 audit(2000000322.454:73055): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.284444][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.788445][ T6585] Process accounting resumed [ 144.861777][ T6587] FAULT_INJECTION: forcing a failure. [ 144.861777][ T6587] name failslab, interval 1, probability 0, space 0, times 0 [ 144.896346][ T6587] CPU: 1 UID: 0 PID: 6587 Comm: syz.3.882 Tainted: G W syzkaller #0 PREEMPT(full) [ 144.896426][ T6587] Tainted: [W]=WARN [ 144.896436][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.896450][ T6587] Call Trace: [ 144.896457][ T6587] [ 144.896465][ T6587] __dump_stack+0x1d/0x30 [ 144.896491][ T6587] dump_stack_lvl+0x95/0xd0 [ 144.896576][ T6587] dump_stack+0x15/0x1b [ 144.896610][ T6587] should_fail_ex+0x263/0x280 [ 144.896639][ T6587] should_failslab+0x8c/0xb0 [ 144.896734][ T6587] kmem_cache_alloc_noprof+0x66/0x3f0 [ 144.896799][ T6587] ? security_inode_alloc+0x37/0x100 [ 144.896878][ T6587] security_inode_alloc+0x37/0x100 [ 144.896993][ T6587] inode_init_always_gfp+0x4a0/0x4e0 [ 144.897106][ T6587] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 144.897140][ T6587] alloc_inode+0x58/0x170 [ 144.897242][ T6587] new_inode+0x1d/0xe0 [ 144.897343][ T6587] shmem_get_inode+0x25a/0x790 [ 144.897369][ T6587] __shmem_file_setup+0x14f/0x260 [ 144.897390][ T6587] shmem_file_setup+0x3b/0x50 [ 144.897412][ T6587] memfd_alloc_file+0x4e/0x300 [ 144.897522][ T6587] __se_sys_memfd_create+0x2e1/0x3b0 [ 144.897561][ T6587] __x64_sys_memfd_create+0x31/0x40 [ 144.897605][ T6587] x64_sys_call+0x1f22/0x3020 [ 144.897636][ T6587] do_syscall_64+0x12c/0x3b0 [ 144.897673][ T6587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.897696][ T6587] RIP: 0033:0x7fa7b425ce59 [ 144.897730][ T6587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.897797][ T6587] RSP: 002b:00007fa7b2caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 144.897830][ T6587] RAX: ffffffffffffffda RBX: 00007fa7b44d5fa0 RCX: 00007fa7b425ce59 [ 144.897844][ T6587] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000d00 [ 144.897861][ T6587] RBP: 00007fa7b2caf090 R08: 0000000000000000 R09: 0000000000000000 [ 144.897878][ T6587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.897909][ T6587] R13: 00007fa7b44d6038 R14: 00007fa7b44d5fa0 R15: 00007ffe3b8a4108 [ 144.897934][ T6587] [ 145.229116][ T6594] Process accounting resumed [ 145.476024][ T6611] Process accounting resumed [ 146.105260][ T6624] syzkaller0: entered promiscuous mode [ 146.126546][ T6624] syzkaller0: entered allmulticast mode [ 146.158410][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 146.493557][ T6636] Process accounting resumed [ 146.728446][ T6656] Process accounting resumed [ 147.771122][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 147.807109][ T6690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.922'. [ 149.180676][ T28] kauditd_printk_skb: 19487 callbacks suppressed [ 149.180695][ T28] audit: type=1400 audit(2000000327.464:92541): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.224725][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.228071][ T6731] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.241445][ T3022] audit: audit_lost=268 audit_rate_limit=0 audit_backlog_limit=64 [ 149.257406][ T3022] audit: backlog limit exceeded [ 149.265133][ T6731] audit: audit_lost=269 audit_rate_limit=0 audit_backlog_limit=64 [ 149.265422][ T28] audit: type=1400 audit(2000000327.464:92542): avc: denied { create } for pid=6728 comm="syz.0.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 149.276969][ T6730] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.295394][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.310279][ T6734] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.372430][ T6733] Process accounting resumed [ 149.381896][ T6736] IPVS: length: 4096 != 24 [ 149.729456][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 149.976649][ T6750] Process accounting resumed [ 150.110779][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.303958][ T3732] Bluetooth: hci0: Frame reassembly failed (-84) [ 150.823529][ T6777] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 151.339399][ T6790] Process accounting resumed [ 152.350497][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 153.410738][ T6825] Process accounting resumed [ 153.465683][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 153.645838][ T6844] netlink: 76 bytes leftover after parsing attributes in process `syz.4.979'. [ 153.664710][ T6844] syzkaller0: entered promiscuous mode [ 153.675077][ T6844] syzkaller0: entered allmulticast mode [ 153.950550][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 153.957709][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 154.058864][ T6855] Process accounting resumed [ 154.190466][ T28] kauditd_printk_skb: 19413 callbacks suppressed [ 154.190482][ T28] audit: type=1400 audit(2000000332.464:110947): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.230401][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.243355][ T3022] audit: audit_lost=607 audit_rate_limit=0 audit_backlog_limit=64 [ 154.259518][ T3022] audit: backlog limit exceeded [ 154.268980][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.270743][ T28] audit: type=1400 audit(2000000332.494:110948): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.282244][ T6864] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.303387][ T3022] audit: audit_lost=608 audit_rate_limit=0 audit_backlog_limit=64 [ 154.320544][ T3022] audit: backlog limit exceeded [ 154.325596][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.294485][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 156.680165][ T6942] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 156.716065][ T6942] Cannot find add_set index 0 as target [ 157.059990][ T3728] Bluetooth: hci0: Frame reassembly failed (-84) [ 159.080559][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 159.086653][ T6763] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 159.202799][ T28] kauditd_printk_skb: 21095 callbacks suppressed [ 159.202819][ T28] audit: type=1400 audit(2000000337.474:132038): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.249078][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.258048][ T7000] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.264686][ T3022] audit: audit_lost=612 audit_rate_limit=0 audit_backlog_limit=64 [ 159.272915][ T7000] audit: audit_lost=613 audit_rate_limit=0 audit_backlog_limit=64 [ 159.282483][ T3022] audit: backlog limit exceeded [ 159.287546][ T7000] audit: backlog limit exceeded [ 159.289895][ T6998] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.292577][ T28] audit: type=1400 audit(2000000337.484:132039): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.320694][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.776854][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 160.288913][ T23] IPVS: starting estimator thread 0... [ 160.296948][ T7043] Process accounting resumed [ 160.410528][ T7047] IPVS: using max 1920 ests per chain, 96000 per kthread [ 160.459470][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1060'. [ 160.476568][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1060'. [ 161.237677][ T7076] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 161.250268][ T7078] FAULT_INJECTION: forcing a failure. [ 161.250268][ T7078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.280514][ T7078] CPU: 1 UID: 0 PID: 7078 Comm: syz.3.1070 Tainted: G W syzkaller #0 PREEMPT(full) [ 161.280698][ T7078] Tainted: [W]=WARN [ 161.280705][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.280771][ T7078] Call Trace: [ 161.280779][ T7078] [ 161.280787][ T7078] __dump_stack+0x1d/0x30 [ 161.280812][ T7078] dump_stack_lvl+0x95/0xd0 [ 161.280879][ T7078] dump_stack+0x15/0x1b [ 161.280901][ T7078] should_fail_ex+0x263/0x280 [ 161.281012][ T7078] should_fail+0xb/0x20 [ 161.281038][ T7078] should_fail_usercopy+0x1a/0x20 [ 161.281199][ T7078] copy_folio_from_iter_atomic+0x24d/0x10b0 [ 161.281243][ T7078] ? shmem_write_begin+0xfc/0x1f0 [ 161.281322][ T7078] ? shmem_write_begin+0x135/0x1f0 [ 161.281345][ T7078] generic_perform_write+0x2c1/0x490 [ 161.281371][ T7078] shmem_file_write_iter+0xc5/0xf0 [ 161.281402][ T7078] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 161.281554][ T7078] vfs_write+0x5a6/0x9f0 [ 161.281598][ T7078] ksys_write+0xdc/0x1a0 [ 161.281633][ T7078] __x64_sys_write+0x40/0x50 [ 161.281695][ T7078] x64_sys_call+0x27e1/0x3020 [ 161.281760][ T7078] do_syscall_64+0x12c/0x3b0 [ 161.281796][ T7078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.281844][ T7078] RIP: 0033:0x7fa7b421d68e [ 161.281865][ T7078] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.281890][ T7078] RSP: 002b:00007fa7b2caeda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.281911][ T7078] RAX: ffffffffffffffda RBX: 00007fa7b2caf6c0 RCX: 00007fa7b421d68e [ 161.281930][ T7078] RDX: 0000000000040000 RSI: 00007fa7aa88f000 RDI: 0000000000000004 [ 161.281947][ T7078] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.281976][ T7078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 161.281993][ T7078] R13: 00007fa7b2caeee0 R14: 00007fa7b2caeea0 R15: 00007fa7aa88f000 [ 161.282019][ T7078] [ 161.605507][ T7085] syzkaller0: entered promiscuous mode [ 161.611495][ T7091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7091 comm=syz.4.1076 [ 161.615698][ T7085] syzkaller0: entered allmulticast mode [ 161.813240][ T3738] Bluetooth: hci0: Frame reassembly failed (-84) [ 162.872473][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 162.909486][ T7142] team0: Port device team_slave_0 removed [ 163.246964][ T7154] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1099'. [ 163.884492][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 163.890618][ T6763] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 164.105554][ T7163] Process accounting resumed [ 164.210755][ T28] kauditd_printk_skb: 26071 callbacks suppressed [ 164.210775][ T28] audit: type=1400 audit(2000000342.494:157741): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.228500][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.245458][ T3022] audit: audit_lost=738 audit_rate_limit=0 audit_backlog_limit=64 [ 164.253783][ T3022] audit: backlog limit exceeded [ 164.258761][ T7174] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.267655][ T7176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.276041][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.283964][ T7178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.284676][ T7174] audit: audit_lost=739 audit_rate_limit=0 audit_backlog_limit=64 [ 164.298614][ T7176] audit: audit_lost=740 audit_rate_limit=0 audit_backlog_limit=64 [ 164.327155][ T7180] netlink: 'syz.3.1109': attribute type 9 has an invalid length. [ 164.352596][ T7176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=7176 comm=syz.3.1109 [ 164.379124][ T7180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7180 comm=syz.3.1109 [ 164.410618][ T7176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7176 comm=syz.3.1109 [ 164.464046][ T7187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1110'. [ 164.606860][ T7194] FAULT_INJECTION: forcing a failure. [ 164.606860][ T7194] name failslab, interval 1, probability 0, space 0, times 0 [ 164.662506][ T7194] CPU: 0 UID: 0 PID: 7194 Comm: syz.3.1114 Tainted: G W syzkaller #0 PREEMPT(full) [ 164.662549][ T7194] Tainted: [W]=WARN [ 164.662559][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.662577][ T7194] Call Trace: [ 164.662657][ T7194] [ 164.662665][ T7194] __dump_stack+0x1d/0x30 [ 164.662696][ T7194] dump_stack_lvl+0x95/0xd0 [ 164.662749][ T7194] dump_stack+0x15/0x1b [ 164.662775][ T7194] should_fail_ex+0x263/0x280 [ 164.662816][ T7194] should_failslab+0x8c/0xb0 [ 164.662920][ T7194] kmem_cache_alloc_noprof+0x66/0x3f0 [ 164.662964][ T7194] ? audit_log_start+0x34c/0x730 [ 164.663007][ T7194] audit_log_start+0x34c/0x730 [ 164.663037][ T7194] selinux_inode_setxattr+0x611/0x6d0 [ 164.663120][ T7194] security_inode_setxattr+0x12e/0x1a0 [ 164.663168][ T7194] __vfs_setxattr_locked+0x8b/0x220 [ 164.663230][ T7194] vfs_setxattr+0x12c/0x2a0 [ 164.663279][ T7194] filename_setxattr+0x1c4/0x410 [ 164.663372][ T7194] path_setxattrat+0x2be/0x310 [ 164.663467][ T7194] __x64_sys_lsetxattr+0x71/0x90 [ 164.663501][ T7194] x64_sys_call+0x1300/0x3020 [ 164.663534][ T7194] do_syscall_64+0x12c/0x3b0 [ 164.663623][ T7194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.663662][ T7194] RIP: 0033:0x7fa7b425ce59 [ 164.663682][ T7194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.663707][ T7194] RSP: 002b:00007fa7b2caf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 164.663733][ T7194] RAX: ffffffffffffffda RBX: 00007fa7b44d5fa0 RCX: 00007fa7b425ce59 [ 164.663751][ T7194] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 00002000000001c0 [ 164.663848][ T7194] RBP: 00007fa7b2caf090 R08: 0000000000000002 R09: 0000000000000000 [ 164.663865][ T7194] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000002 [ 164.663957][ T7194] R13: 00007fa7b44d6038 R14: 00007fa7b44d5fa0 R15: 00007ffe3b8a4108 [ 164.664118][ T7194] [ 165.189099][ T7207] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1117'. [ 167.124108][ T7241] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1132'. [ 167.167574][ T7241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1132'. [ 167.699218][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 167.785687][ T7268] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1143'. [ 167.814657][ T7268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1143'. [ 168.950796][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 168.978661][ T7297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.021964][ T7297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.220846][ T28] kauditd_printk_skb: 20581 callbacks suppressed [ 169.220864][ T28] audit: type=1400 audit(2000000347.494:175271): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.264709][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.275850][ T7303] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.292026][ T3022] audit: audit_lost=1759 audit_rate_limit=0 audit_backlog_limit=64 [ 169.299989][ T28] audit: type=1400 audit(2000000347.504:175272): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.309900][ T7303] audit: audit_lost=1760 audit_rate_limit=0 audit_backlog_limit=64 [ 169.321316][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.321334][ C1] bridge0: topology change detected, propagating [ 169.321415][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.321433][ C1] bridge0: topology change detected, propagating [ 169.326911][ T7304] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.335702][ T3022] audit: backlog limit exceeded [ 169.357152][ T7304] audit: audit_lost=1761 audit_rate_limit=0 audit_backlog_limit=64 [ 169.380860][ T28] audit: type=1400 audit(2000000347.504:175273): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.706136][ T7339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1170'. [ 170.763465][ T7339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1170'. [ 172.401119][ T7378] FAULT_INJECTION: forcing a failure. [ 172.401119][ T7378] name failslab, interval 1, probability 0, space 0, times 0 [ 172.440505][ T7378] CPU: 0 UID: 0 PID: 7378 Comm: syz.4.1186 Tainted: G W syzkaller #0 PREEMPT(full) [ 172.440559][ T7378] Tainted: [W]=WARN [ 172.440568][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 172.440582][ T7378] Call Trace: [ 172.440618][ T7378] [ 172.440628][ T7378] __dump_stack+0x1d/0x30 [ 172.440660][ T7378] dump_stack_lvl+0x95/0xd0 [ 172.440710][ T7378] dump_stack+0x15/0x1b [ 172.440730][ T7378] should_fail_ex+0x263/0x280 [ 172.440765][ T7378] should_failslab+0x8c/0xb0 [ 172.440855][ T7378] __kmalloc_noprof+0xb8/0x4d0 [ 172.440913][ T7378] ? fib6_info_alloc+0x2e/0x90 [ 172.441032][ T7378] fib6_info_alloc+0x2e/0x90 [ 172.441116][ T7378] ip6_route_info_create+0xe9/0x4f0 [ 172.441158][ T7378] ip6_route_add+0x49/0x170 [ 172.441196][ T7378] ipv6_route_ioctl+0x2de/0x310 [ 172.441245][ T7378] inet6_ioctl+0x152/0x190 [ 172.441288][ T7378] sock_do_ioctl+0x73/0x230 [ 172.441395][ T7378] sock_ioctl+0x41b/0x610 [ 172.441422][ T7378] ? mutex_lock+0x57/0x90 [ 172.441518][ T7378] ? __pfx_sock_ioctl+0x10/0x10 [ 172.441571][ T7378] __se_sys_ioctl+0xce/0x140 [ 172.441602][ T7378] __x64_sys_ioctl+0x43/0x50 [ 172.441655][ T7378] x64_sys_call+0x1563/0x3020 [ 172.441690][ T7378] do_syscall_64+0x12c/0x3b0 [ 172.441728][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.441757][ T7378] RIP: 0033:0x7f078d48ce59 [ 172.441778][ T7378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.441883][ T7378] RSP: 002b:00007f078bedf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.441910][ T7378] RAX: ffffffffffffffda RBX: 00007f078d705fa0 RCX: 00007f078d48ce59 [ 172.441926][ T7378] RDX: 0000200000000240 RSI: 000000000000890b RDI: 0000000000000005 [ 172.441939][ T7378] RBP: 00007f078bedf090 R08: 0000000000000000 R09: 0000000000000000 [ 172.441952][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.442015][ T7378] R13: 00007f078d706038 R14: 00007f078d705fa0 R15: 00007ffd3bed1498 [ 172.442117][ T7378] [ 173.682758][ T7420] ALSA: seq fatal error: cannot create timer (-19) [ 173.719261][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 173.740899][ T7420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1202'. [ 174.230591][ T28] kauditd_printk_skb: 20870 callbacks suppressed [ 174.230607][ T28] audit: type=1400 audit(2000000352.504:195272): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.248857][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.265794][ T3022] audit: audit_lost=2052 audit_rate_limit=0 audit_backlog_limit=64 [ 174.277600][ T3022] audit: backlog limit exceeded [ 174.283822][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.299837][ T3022] audit: audit_lost=2053 audit_rate_limit=0 audit_backlog_limit=64 [ 174.308231][ T3022] audit: backlog limit exceeded [ 174.313447][ T3299] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.323053][ T28] audit: type=1400 audit(2000000352.514:195273): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.334071][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.700091][ T7446] FAULT_INJECTION: forcing a failure. [ 174.700091][ T7446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.730048][ T7446] CPU: 0 UID: 0 PID: 7446 Comm: syz.4.1211 Tainted: G W syzkaller #0 PREEMPT(full) [ 174.730089][ T7446] Tainted: [W]=WARN [ 174.730096][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.730126][ T7446] Call Trace: [ 174.730134][ T7446] [ 174.730157][ T7446] __dump_stack+0x1d/0x30 [ 174.730188][ T7446] dump_stack_lvl+0x95/0xd0 [ 174.730218][ T7446] dump_stack+0x15/0x1b [ 174.730274][ T7446] should_fail_ex+0x263/0x280 [ 174.730316][ T7446] should_fail+0xb/0x20 [ 174.730369][ T7446] should_fail_usercopy+0x1a/0x20 [ 174.730428][ T7446] _copy_from_user+0x1c/0xb0 [ 174.730469][ T7446] memdup_user+0x5e/0xd0 [ 174.730508][ T7446] strndup_user+0x68/0xb0 [ 174.730546][ T7446] __se_sys_add_key+0x132/0x360 [ 174.730598][ T7446] __x64_sys_add_key+0x67/0x80 [ 174.730662][ T7446] x64_sys_call+0xb39/0x3020 [ 174.730721][ T7446] do_syscall_64+0x12c/0x3b0 [ 174.730768][ T7446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.730792][ T7446] RIP: 0033:0x7f078d48ce59 [ 174.730893][ T7446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.730929][ T7446] RSP: 002b:00007f078bedf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 174.730951][ T7446] RAX: ffffffffffffffda RBX: 00007f078d705fa0 RCX: 00007f078d48ce59 [ 174.731008][ T7446] RDX: 0000200000000200 RSI: 0000200000000180 RDI: 0000200000000300 [ 174.731049][ T7446] RBP: 00007f078bedf090 R08: fffffffffffffffe R09: 0000000000000000 [ 174.731063][ T7446] R10: 000000000000fe07 R11: 0000000000000246 R12: 0000000000000001 [ 174.731149][ T7446] R13: 00007f078d706038 R14: 00007f078d705fa0 R15: 00007ffd3bed1498 [ 174.731220][ T7446] [ 175.149027][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 175.180674][ T7456] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 175.205236][ T7456] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 175.540580][ T7478] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1225'. [ 175.683964][ T7490] : renamed from bond_slave_0 (while UP) [ 176.348094][ T7527] bond3: entered promiscuous mode [ 176.354913][ T7527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.367281][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 176.647121][ T7547] syzkaller0: entered promiscuous mode [ 176.658546][ T7547] syzkaller0: entered allmulticast mode [ 176.793157][ T7551] netlink: 'syz.3.1254': attribute type 21 has an invalid length. [ 176.801271][ T7551] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1254'. [ 176.810964][ T7551] netlink: 'syz.3.1254': attribute type 4 has an invalid length. [ 176.818858][ T7551] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1254'. [ 176.856357][ T7553] netlink: 'syz.3.1255': attribute type 13 has an invalid length. [ 176.864667][ T7553] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1255'. [ 177.042524][ T7561] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 177.049101][ T7561] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.085264][ T7561] vhci_hcd vhci_hcd.0: Device attached [ 177.121589][ T7563] vhci_hcd: connection closed [ 177.121774][ T3732] vhci_hcd vhci_hcd.3: stop threads [ 177.136722][ T3732] vhci_hcd vhci_hcd.3: release socket [ 177.151573][ T3732] vhci_hcd vhci_hcd.3: disconnect device [ 177.166647][ T3736] Bluetooth: hci0: Frame reassembly failed (-84) [ 177.184112][ T3736] Bluetooth: hci0: Frame reassembly failed (-90) [ 177.638202][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1272'. [ 177.866159][ T7607] ================================================================== [ 177.874340][ T7607] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 177.882103][ T7607] [ 177.884444][ T7607] write to 0xffff888104410708 of 8 bytes by task 7605 on cpu 1: [ 177.892094][ T7607] mas_wr_store_entry+0x3405/0x5ad0 [ 177.897327][ T7607] mas_store_prealloc+0x43e/0x690 [ 177.902379][ T7607] commit_merge+0x6a1/0x720 [ 177.906953][ T7607] vma_expand+0x301/0x460 [ 177.911321][ T7607] vma_merge_new_range+0x29c/0x320 [ 177.916483][ T7607] mmap_region+0x10a5/0x20d0 [ 177.921106][ T7607] do_mmap+0x9b2/0xbd0 [ 177.925200][ T7607] vm_mmap_pgoff+0x183/0x2d0 [ 177.929820][ T7607] ksys_mmap_pgoff+0xc1/0x310 [ 177.934517][ T7607] x64_sys_call+0x14df/0x3020 [ 177.939224][ T7607] do_syscall_64+0x12c/0x3b0 [ 177.943842][ T7607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.949762][ T7607] [ 177.952106][ T7607] read to 0xffff888104410708 of 8 bytes by task 7607 on cpu 0: [ 177.959671][ T7607] mtree_range_walk+0x1a6/0x490 [ 177.964560][ T7607] mas_walk+0x1cc/0x370 [ 177.968749][ T7607] lock_vma_under_rcu+0xc9/0x210 [ 177.973771][ T7607] do_user_addr_fault+0x232/0x1050 [ 177.978929][ T7607] exc_page_fault+0x62/0xa0 [ 177.983472][ T7607] asm_exc_page_fault+0x26/0x30 [ 177.988345][ T7607] [ 177.990690][ T7607] value changed: 0x00007f7e26f95fff -> 0x00007f7e26f74fff [ 177.997820][ T7607] [ 178.000169][ T7607] Reported by Kernel Concurrency Sanitizer on: [ 178.006347][ T7607] CPU: 0 UID: 0 PID: 7607 Comm: syz.0.1275 Tainted: G W syzkaller #0 PREEMPT(full) [ 178.017224][ T7607] Tainted: [W]=WARN [ 178.021044][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.031128][ T7607] ================================================================== [ 179.240489][ T6763] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 179.246657][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 179.252839][ T28] kauditd_printk_skb: 30392 callbacks suppressed [ 179.252856][ T28] audit: type=1400 audit(2000000357.514:223955): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.260341][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.287269][ T28] audit: type=1400 audit(2000000357.514:223956): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.308735][ T28] audit: type=1400 audit(2000000357.524:223957): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.330122][ T28] audit: type=1400 audit(2000000357.524:223958): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.333628][ T3022] audit: audit_lost=2625 audit_rate_limit=0 audit_backlog_limit=64 [ 179.351667][ T28] audit: type=1400 audit(2000000357.524:223959): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.359944][ T3022] audit: backlog limit exceeded [ 179.380627][ T28] audit: type=1400 audit(2000000357.524:223960): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.380665][ T28] audit: type=1400 audit(2000000357.524:223961): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 182.750594][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 184.260514][ T28] kauditd_printk_skb: 45217 callbacks suppressed [ 184.260539][ T28] audit: type=1400 audit(2000000362.534:268282): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.284141][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.293465][ T28] audit: type=1400 audit(2000000362.544:268283): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.295058][ T3022] audit: audit_lost=2925 audit_rate_limit=0 audit_backlog_limit=64 [ 184.316950][ T28] audit: type=1400 audit(2000000362.544:268284): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.324243][ T3022] audit: backlog limit exceeded [ 184.345414][ T28] audit: type=1400 audit(2000000362.544:268285): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.351543][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.372619][ T28] audit: type=1400 audit(2000000362.544:268286): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.378224][ T3022] audit: audit_lost=2926 audit_rate_limit=0 audit_backlog_limit=64