last executing test programs: 8.343646481s ago: executing program 1 (id=1480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000180)={0xa, {0x5, 0x38, 0x3}}, 0xa) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8000, 0x700, 0x5, 0xffffffff, {{0xb, 0x4, 0x1, 0x15, 0x2c, 0x65, 0x0, 0x10, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, {[@rr={0x7, 0x13, 0x45, [@multicast1, @dev={0xac, 0x14, 0x14, 0x11}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xc0, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x3}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x101}, @ETHTOOL_A_COALESCE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7f}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x3}, @ETHTOOL_A_COALESCE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r4, 0x4, 0x12, 0x6, 0x8, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x7, 0x200, 0x1}}) pwrite64(r5, &(0x7f0000000500)="cbd6116d74e19a948a3a2338abc34c15682191a6c845fc8884e28101d9ebfe73955b512a0ca9fb78f273361da32d606bbd27f5eebeac26cef821114ceb268e1ac442d1fd1cceb06e6e509ed0e5c7536c36e01d136eafb3a2c203d4dfd939fa73f2e9e5802545603a699f3d02087e51ffec839f675ae6099b73c150780d795d2b67775a10009460c098426d3280bf4c695c83e7d126c1667a6a67cfa345fa7f3c1df8689daa2e61c0f15423005168047aa628293b93b6eccfeb5cba1317386fd794abe38eb4c594c24e8fb32f2b8ceb214c18b34580f765c24286c224d71a3ce8ef0dc6130dce5ff867a9610d", 0xec, 0x9) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd17}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x4008004) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000800), 0x9ac42, 0x0) fsetxattr$security_capability(r9, &(0x7f0000000840), &(0x7f0000000880)=@v1={0x1000000, [{0x80000000, 0xe}]}, 0xc, 0x1) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000008c0)={0x0, 0x846, 0xd2, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000cc0)={0x0, 0x4, 0x0, [0x7fff, 0x2, 0x6, 0x7ff, 0x9], [0x0, 0x6, 0x100, 0x1, 0xfffffffffffffffb, 0x1, 0x7, 0x3, 0x99c, 0x8, 0xb0, 0x8, 0x3, 0x7, 0x749, 0x7fffffffffffffff, 0x5, 0x7, 0x5, 0xb19, 0x100, 0xfff, 0x6, 0x3, 0x6, 0x7, 0x80, 0x7a, 0xc, 0x2, 0x2, 0x7, 0x1, 0x6, 0xcc81, 0x3, 0x5, 0x8, 0x6, 0x9, 0x3, 0x80000000, 0x5, 0x8, 0x3, 0x5, 0x2, 0xff, 0x100000001, 0x0, 0x100, 0x76, 0xbf, 0xffff, 0x5, 0x1, 0x8, 0x8, 0x7fffffffffffffff, 0x8776, 0x8, 0x8, 0x400, 0xfffffffffffffff7, 0x1, 0x2, 0x6, 0x6, 0x0, 0x8, 0x80000000, 0xfffffffffffffffb, 0x100000000, 0x3, 0x80000000, 0x8, 0x8, 0x8, 0x10702d0c, 0x9, 0xf51, 0x4, 0x2, 0x9, 0x2, 0x86, 0x9, 0x4c, 0x5, 0x5, 0xfff, 0x0, 0x1ff, 0x7970, 0xa8e3, 0x8, 0xd, 0x40, 0x8, 0x0, 0x6, 0x7000000000000, 0x2, 0x1, 0x5, 0x8, 0x3, 0x6434e832, 0x8, 0x80000001, 0x5, 0x8, 0xffffffffffffffff, 0x5, 0x81, 0x2, 0x6, 0x270, 0x8, 0xff, 0x3]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000001100)={0x0, 0xc, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001500)={0x4, 0x1, {0x1, @struct={0x1, 0xe4b6}, r10, 0x9, 0xc01, 0x5, 0xa6, 0x401, 0x420, @struct={0x3, 0x5}, 0x40, 0xff, [0x400, 0x3, 0x10000, 0xff, 0x6673, 0x100000001]}, {0x7, @struct={0x8000, 0x10}, r11, 0x2, 0x7fff, 0x3, 0x6, 0x81, 0x80, @usage=0x8, 0x602d, 0x7f, [0x58, 0x8001, 0x7, 0x0, 0x7fffffffffffffff, 0x10]}, {0x3, @usage=0x200, r12, 0x7ff, 0x8, 0x4, 0xbdc4, 0x1c2c00000000, 0x404, @struct={0xf, 0x61}, 0xfffffffa, 0x4, [0x7, 0x97, 0x6, 0x2, 0xe, 0x81]}, {0x5, 0x2, 0x7}}) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000001940), r8) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0x90, r13, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8000000000000000}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xf0}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040040}, 0x841) r14 = socket(0x27, 0x2, 0x101) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r14, 0x89f0, &(0x7f0000001b40)={'gre0\x00', &(0x7f0000001ac0)={'sit0\x00', r6, 0x8, 0x700, 0x9, 0x0, {{0x16, 0x4, 0x2, 0x7, 0x58, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x6e, 0x3, 0x6, [{@rand_addr=0x64010102, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @timestamp={0x44, 0x14, 0x6, 0x0, 0xf, [0xff, 0x6, 0x1, 0x783050e3]}, @ssrr={0x89, 0xb, 0x8d, [@local, @broadcast]}, @rr={0x7, 0xf, 0x8e, [@empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r14, 0xf505, 0x0) r15 = syz_io_uring_setup(0x2172, &(0x7f0000001b80)={0x0, 0xe168, 0x8000, 0x0, 0xad, 0x0, r8}, &(0x7f0000001c00), &(0x7f0000001c40), &(0x7f0000001c80)) io_uring_setup(0x4ac7, &(0x7f0000001cc0)={0x0, 0xcd97, 0x10000, 0x2, 0x1da, 0x0, r15}) r16 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r16, 0x89f0, &(0x7f0000001e00)={'syztnl2\x00', &(0x7f0000001d40)={'erspan0\x00', r4, 0x80, 0x7800, 0x0, 0x1c07, {{0x1b, 0x4, 0x2, 0x1, 0x6c, 0x65, 0x0, 0x9, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101, {[@rr={0x7, 0x7, 0xab, [@dev={0xac, 0x14, 0x14, 0x24}]}, @timestamp={0x44, 0x18, 0x71, 0x0, 0x2, [0x10001, 0x1, 0x9b7, 0xc7, 0x7]}, @ssrr={0x89, 0xb, 0x29, [@multicast1, @loopback]}, @timestamp={0x44, 0x10, 0xd8, 0x0, 0x7, [0x1000, 0x1, 0x200]}, @lsrr={0x83, 0x7, 0x26, [@remote]}, @timestamp={0x44, 0x14, 0x91, 0x0, 0x6, [0x10, 0x7, 0x6, 0x4]}, @end, @end]}}}}}) getpid() 8.181724993s ago: executing program 1 (id=1482): r0 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="7365637572e974792e2e5b5b5b2d254e272e2800f029cd3d56730306565e26d042e0a269e9f7d6652247aff0f11013dedfbdc2bbd28d546f92"], &(0x7f0000000080)=""/40, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001000000800000004bc5d63169b9053cf9cbf177", @ANYRES32=0x0, @ANYBLOB="a528ce82"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x6dd, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffeffe) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x11, 0x3, 0x10001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00"/1284], 0x590) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) ioperm(0x0, 0x7, 0x80006) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") accept4$inet6(r5, &(0x7f0000000700)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000740)=0x1c, 0x80800) 8.114508307s ago: executing program 0 (id=1488): r0 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'security.', '.[[[-%N\'.(\x00'}, &(0x7f0000000080)=""/40, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x248, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001000000800000004bc5d63169b9053cf9cbf177", @ANYRES32=0x0, @ANYBLOB="a528ce82"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x6dd, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x11, 0x3, 0x10001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00"/1284], 0x590) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) ioperm(0x0, 0x7, 0x80006) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") accept4$inet6(r5, &(0x7f0000000700)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000740)=0x1c, 0x80800) 6.045435588s ago: executing program 4 (id=1497): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x4, 0x2}}, 0x26) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000000000b, 0x12014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x110938, 0x0, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r4], 0x38}}, 0x10) (fail_nth: 7) 5.362836055s ago: executing program 4 (id=1500): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000639810afd9f68e7e2d378816ddc963c93e558d5c5285d55158f162781b3bb804a02c1409529deb529f5de6"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xc, 0x8b112, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80001, 0x0) 4.760874415s ago: executing program 1 (id=1501): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r4, 0x0, 0xee01) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 4.726511848s ago: executing program 0 (id=1502): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x842, 0x4}, 0x10) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$netlink(0x10, 0x3, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f00000006c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x80, @remote, 0x1}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000001c0)="e9", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x138}}], 0x2, 0x4000054) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000640)={&(0x7f0000000240)={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="96d2d8c0", 0x4}], 0x1}, 0x4000080) 2.596800703s ago: executing program 4 (id=1504): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xd, @rand_addr=' \x01\x00', 0x4, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0xffffffffffffffec}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 1.545447595s ago: executing program 3 (id=1505): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x11, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 1.440365502s ago: executing program 3 (id=1506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="08000600a75d6e1e213a082e070000000000000032752efe0593f0905dfe503f11c7d502ac8b85c70709d90aa3a25069468d69"], 0x24}}, 0x4000) r3 = epoll_create(0xdb3) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x22000, 0x160) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x10}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendto$packet(r6, &(0x7f00000004c0)="f281db", 0x48, 0x4040881, &(0x7f0000000200)={0x11, 0xd, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r10, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40810}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x440088c4) 1.404700984s ago: executing program 3 (id=1507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r4, 0x5, 0x300}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)="2c8fefb14851c7f16fa7e6413708fbb72d6b292c579d84012c5571a0b127d4d7f484938aff6de992", 0x28}], 0x1}, 0x20008110) 1.227616526s ago: executing program 4 (id=1509): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) sendmsg$can_raw(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0xffffffff, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) setuid(0xee01) fstat(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r8, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="08000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000500", @ANYRES32=r9, @ANYBLOB="100006000000000020"], 0x54, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.222399527s ago: executing program 0 (id=1510): socket(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x7, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd06, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x7739, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x400006, 0x20e}, &(0x7f0000000240), &(0x7f0000000140), &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000002c0), 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000000)={0x1}, 0x1) bind$x25(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa2, 0x1, 0x0, 0x0, 0x0, 0x10, 0x240b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x10}, 0x200, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x33e, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32, @ANYRES8, @ANYRES16, @ANYRESHEX, @ANYRES64], 0x1, 0x2bc, &(0x7f00000015c0)="$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") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000003200)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x1}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 1.120602204s ago: executing program 1 (id=1512): syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") pipe(&(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TIOCMGET(r2, 0x5415, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0x143) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x33fe0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f00000002c0)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r7 = dup(r6) r8 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r6, r8, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001d40)) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000003ac0)={r2, &(0x7f00000039c0)='$Y\\\x00', 0x44000, &(0x7f0000003a00)={@_ha_fsid={[0x6, 0x5]}, {0x8d89, 0x3, 0x100, 0x1}}, 0x3, 0x0, &(0x7f0000003a80)=0x7fe}) socket$isdn(0x22, 0x3, 0x25) r9 = openat$cgroup_ro(r1, &(0x7f0000005040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x8, r10}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000050c0)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x0, 0x0, 0x38, 0x800}, 0x40000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r9, 0xf504, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) epoll_create(0xf) 1.079943717s ago: executing program 3 (id=1513): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11e210, 0x10004, 0x20da, 0x6, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) r2 = signalfd4(r1, &(0x7f0000000140)={[0x5]}, 0x8, 0x80800) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_getrule={0x1c, 0x22, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x10, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x10000484) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c9166646e6f3d", @ANYRESHEX=r3, @ANYBLOB=',\x00']) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 1.079506327s ago: executing program 0 (id=1514): r0 = socket$nl_route(0x10, 0x3, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) ioperm(0x0, 0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = open(&(0x7f0000000140)='./file1\x00', 0x62842, 0x21) ioperm(0x7, 0x401, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000240)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x78, 0x1, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x1a}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_LABELS={0x14, 0x7, "eab5bec820322c10d8a4cbd8637e90e2"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 1.078797167s ago: executing program 2 (id=1515): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a78000000060a0b040000000000000000020000054c"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff00"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000065a000/0x4000)=nil, 0x4000, 0xb635773f06ebbeec, 0x12, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$binfmt_script(r1, &(0x7f0000001440)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000002380)={0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000063060000bca30000000000002403000020fef6ff720af0fff8ffffff71a4f0ff000000001f030000000000002e100200000000002604fdffffff000014010000630000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000093bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98dde20358d1148272abd23da767f8c549ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af94026a402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb46ffffffffffffff7f1569b33d21dae356e5c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d22891202d0f5ad94b081fcd507acc9b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817031ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb9439901fb39f1d78aa60ead1883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10880fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1b9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa2000000000000000906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000fbff00ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554b15dca5f77a08a83431a87881fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f783e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bcb0addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43737a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab7493c6670fdc49c14f34fc4eadd6db8d80eba4300d971cdc124c8a1a95b9772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434600e64a6a274000000000088b3e63a000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e727bf10d6335332f45b8e87383930f1a4724434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc946acfb3d1a56e9ec13ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdce1f7ffffffffffffcf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b338a59c0c0247bc9412e19204caaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33733ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af11210200000000000000484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea170ab651a039d7102923e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b187ab8e0d179e6ad0dc758975e9cf77f703e742b77521149d8fdeae4b92d5edc232ca356fb86784b865adda7c921dc475276837b2619922de4d96850172602fac7d165e32419a622bdef7c91385c87c30b8a144d9b01784a8060670455f76b207517f66cf32fa0772975e0963b7373dba424beadf60d5bd08ea73e2b5620a5754455006934679b10e596821e2bd380d472c9096ca4c55d6106d0b88e38f6c54abc952c81617a06f93465241070fea3d9fc786e2625572ff2068ff84361b3883cc2c8b9a0a2f70119db13b47c924c73216bb12d1e68a03a08aa682ede113691db07"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 992.722982ms ago: executing program 3 (id=1516): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r4, 0x0, 0xee01) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 914.301748ms ago: executing program 4 (id=1517): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f00000000c0)={r0, 0x0, 0x4, 0xffffffffffff8f81, 0xff1, 0x4, [0x1000, 0x8000, 0x3, 0xffffffffffffffff, 0xd]}) ioctl$FIOCLEX(r0, 0x5451) r3 = accept4$phonet_pipe(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x0) fcntl$addseals(r1, 0x409, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000200)={0x5, 0x0, 0xdf3f, 0x101, 0x902}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x4, 0x0, 0xd, 0x3, 0x0, 0xffffffffffffffff, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x10, 0xa9, &(0x7f0000000340)=""/169, 0x41000, 0x51, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000400)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000440)=[{0x3, 0x5, 0x0, 0xb}, {0x4, 0x3, 0x8, 0xb}, {0x5, 0x1, 0x6, 0x3}, {0x1, 0x3, 0xc, 0x6}, {0x3, 0x4, 0x1, 0x9}], 0x10, 0x8000}, 0x94) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000580)={r4, 0x3}) socket$inet6_sctp(0xa, 0x1, 0x84) readv(r0, &(0x7f0000000b80)=[{&(0x7f00000005c0)=""/141, 0x8d}, {&(0x7f0000000680)=""/155, 0x9b}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/151, 0x97}, {&(0x7f00000008c0)=""/143, 0x8f}, {&(0x7f0000000980)=""/71, 0x47}, {&(0x7f0000000a00)=""/209, 0xd1}, {&(0x7f0000000b00)=""/104, 0x68}], 0x8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000c00)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000c40)=0x10) epoll_pwait(r2, &(0x7f0000000c80)=[{}], 0x1, 0x2, &(0x7f0000000cc0)={[0x101]}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000d00)={0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8aa4}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000dc0)={r6, 0x0, r7, 0x2}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x46) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000e00)) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), r7) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xb4, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close(r3) r9 = open$dir(&(0x7f0000001000)='./file0\x00', 0x4800, 0x1) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001040)={0x0, r7}, 0x8) close_range(r9, r10, 0x0) socket(0x6, 0x4, 0xffff1ad3) ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, &(0x7f0000001080)={@remote, @private2={0xfc, 0x2, '\x00', 0x1}}) 913.589468ms ago: executing program 2 (id=1518): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) getdents64(0xffffffffffffffff, 0x0, 0x22) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b15000000"], 0x44}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (fail_nth: 10) 820.035144ms ago: executing program 2 (id=1519): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x4, 0x345, {{0xd, 0x4, 0x1, 0x6, 0x34, 0x67, 0x0, 0x4d, 0x29, 0x0, @multicast2, @multicast2, {[@generic={0x83, 0x2}, @rr={0x7, 0xb, 0xc5, [@multicast1, @dev={0xac, 0x14, 0x14, 0xe}]}, @ssrr={0x89, 0xf, 0x27, [@dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast2]}, @end]}}}}}) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x2a, 0x2, 0x0) msgget$private(0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) lseek(r3, 0x1000000000000014, 0x3) keyctl$link(0x8, 0x0, 0x0) accept$unix(r2, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000b40)=[{&(0x7f0000000f00)=""/46, 0x2e}, {&(0x7f0000000940)=""/175, 0xaf}], 0x2, 0x4, 0x10003ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffff6, 0x4031, 0xffffffffffffffff, 0x7542d000) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) io_destroy(0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000140)) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf6, 0x8, 0x4, 0x100, 0x5, 0x80080, r0}) 736.81559ms ago: executing program 2 (id=1520): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xd, @rand_addr=' \x01\x00', 0x4, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0xffffffffffffffec}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 360.512545ms ago: executing program 0 (id=1521): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000040)="3cf5edb0f82333fb269a1c18", 0xc}, {&(0x7f0000000080)="624b402dab705cbe770afe83d8ea269df653a2c0de1cd78e3b67e430e62ce7a71d40b070f8726fbc9ece4da61523ade3275e6960fd7f7d256884a05cc8763073d665696d0579d0088effba4b9c42cbd5cb2e8440270e92a689ed7173c138903478f900eda2f7ece7f4d99a26f0185373ea009a5a624199b1cfd178e4bc491b7ad1e22fef2fb9c949d4ddf1e25e3c0d1ea023762ca78bc8432f6a178f", 0x9c}, {&(0x7f0000000280)="b15d48b20adbb0d2c68388c0ba8458a8e2074612e9338da7fdda106ba9730de29c0cb9d8ecff863948d9a116e994b8524b8881e4023afab3a88fe23e3752bfc471d8f984c869bf5bb4ce947531f9d3befce7dd5e950b35bd331f06da0139de3636cc3dae171a0bf0a501d175c0e265e2908006c3e4a874242d3bac8befc2f2fdacc4809994fb8d450cb0b997798f94a9541a7b0bd2c7e921edb32411f1839b6a95f6ace76fd6c71aebd38b384f0dd5d619cc6979181e817a24fed0d76b2e1d3f21032c67f46d", 0xc6}, {&(0x7f0000000380)="b92fbb4bad566a9b2799b731abcf4531e2440f450712468df1939eafaf2279028a6bfad1d7f626fcfea5131a59556f66cf146f7decb4d6d3611d871c897262820f90d6c761030cf5a9a33a2ad7b1cb9590440dd6c8282ea6cedc1b7fcb0230e52cbc47d2085d6e464266959182810944c5b3996298eff66d263f4777893172213348fe8bf69b90f728f9f788463d047317197ff789", 0x95}, {&(0x7f0000000680)="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", 0x1000}], 0x5) (async) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000736) (async) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x11, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x12}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb6, &(0x7f000000cf3d)=""/182, 0x41000}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5a1001, 0x10) 348.323276ms ago: executing program 2 (id=1522): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/238, 0xee) 323.710028ms ago: executing program 0 (id=1523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) (fail_nth: 8) 260.341202ms ago: executing program 2 (id=1524): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {0x0, 0x1}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d3, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000340)=0x10, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000ffff0c00078008000800000000890500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f727400000015de434df8294f5f6dc1429347e8c781fcf8f284bd59ed0fd030256d937e7439ec407e427a053238"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x11242}, [@IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x3c, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0327f6", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x2a}, [], "5a74cffa30d41cd96f0319b2"}}}}}}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r8) sendmsg$IEEE802154_SET_MACPARAMS(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x20, r10, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x42010) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 76.630755ms ago: executing program 1 (id=1525): timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000bc0)='./file1\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) r5 = getgid() fstat(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) fstat(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYRES32=r9, @ANYBLOB="08000500", @ANYRES32=r9, @ANYBLOB="100006000000000020"], 0x54, 0x1) stat(&(0x7f0000001800)='./file1\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000018c0)={{}, {0x1, 0x6}, [{0x2, 0x6}], {}, [{0x8, 0x1}, {0x8, 0x1, r2}, {0x8, 0x0, r4}, {0x8, 0xc, r5}, {0x8, 0x4, r6}, {0x8, 0x2, r7}, {0x8, 0x1, 0xee00}, {0x8, 0x4, r9}, {0x8, 0x4, r10}], {0x10, 0x4}, {0x20, 0x6}}, 0x74, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000}, 0x94) syz_emit_ethernet(0xb6, &(0x7f0000000980)={@local, @broadcast, @void, {@llc_tr={0x11, {@snap={0xaa, 0x2, '\t', "6c01cd", 0x8808, "f3f7eb999c5ac56d656fdc8b4e0b9a198145474a3f91bc617a29ac978a770c6d52264fdeb129f153ea78d6bc84c1f587ce33968c06c8e7e361e572ad835e9a14566aeb90182da57ba243a5f4b5810df5955d6e5f2b1c826f965251f0fcca4eb079a419e971748d991d04cbc04cfc1d6da0ae8b8ab86906a7e08fa74761f0f9ff7626961829f4c6ff838e74d33206aa40b1bffbbc6f957263aee57136319d42fc"}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b8, 0x1d8, 0x1d8, 0x0, 0x1d8, 0xe8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff], [0xff0000ff, 0x4de325748c9179dc, 0xffffffff, 0xff000000], 'wlan1\x00', 'wlan0\x00', {}, {0xff}, 0x6, 0x0, 0x2, 0x4}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e21}}}, {{@ipv6={@remote, @local, [0xff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff], 'veth1_macvtap\x00', 'erspan0\x00', {0xff}, {}, 0x87, 0x7f, 0x4, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@mcast1, 0x33, 0x23, 0x8}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff], 'pimreg\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x49, 0x1, 0x54}, 0x0, 0x208, 0x248, 0x0, {}, [@common=@rt={{0x138}, {0x80000000, [0x64b3d7eb, 0x4], 0xd3, 0x21, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @private1, @mcast2, @private1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x10}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xffffffff, 0x7, 0x76be0f9b, 0x7, 0x8, 0x4, 0x733]}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5c, 0xf7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x653afb6a7eb5282b) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000340)={{r12, r13+10000000}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f0000000d00)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@ptr={0xffffffff}, @fwd={0x5}, @func_proto]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x43}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) timer_gettime(r0, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) futex(&(0x7f0000000080)=0x1, 0x3, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)=0x1, 0x2) 16.290299ms ago: executing program 4 (id=1526): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r0, 0x0, 0xfffffffffffffec2, 0x4, 0xd384) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000140)={0x4, 0x16ebe1b47df7b427}) socketpair(0x1, 0x4, 0xa072, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{0x7, 0x82, 0x2, 0x1}, {0x3, 0x2, 0x8, 0x8}, {0x6, 0x2, 0x2, 0x10001}, {0x7, 0xfa, 0x1}, {0x5, 0xe5, 0x7, 0x4}, {0xc, 0x16, 0x80, 0x4}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{0x1000, 0x10, 0x3, 0xc}, {0x7ff, 0xda, 0x5, 0x6}, {0x1000, 0xc, 0x6, 0xb}, {0x192b, 0x7, 0x3, 0x6}, {0x722, 0x1, 0x6}, {0x7ff, 0x0, 0x9, 0x8}, {0x2, 0xb, 0x64, 0x80000000}, {0x4, 0x9, 0x2, 0x7}, {0x7ff, 0x9, 0x3, 0x400}]}, 0x10) 0s ago: executing program 3 (id=1527): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2a}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "2889de8898f8c53afdd9a3b39cb5a71418"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x120}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x4, r3, 0x2d, r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) utime(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x3, 0x9}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x270, 0x270, 0x270, 0x190, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', r6, 0x4, 0x1, 0x10, 0x3, 0x41, @private0, @private2, 0x700, 0x1, 0x2, 0x9}}) kernel console output (not intermixed with test programs): 4 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.608098][ T7295] RSP: 002b:00007f08d4ebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 208.608191][ T7295] RAX: ffffffffffffffda RBX: 00007f08d66e5fa0 RCX: 00007f08d646c819 [ 208.608205][ T7295] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000007 [ 208.608221][ T7295] RBP: 00007f08d4ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 208.608237][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.608253][ T7295] R13: 00007f08d66e6038 R14: 00007f08d66e5fa0 R15: 00007fffde8eed28 [ 208.608275][ T7295] [ 208.811086][ T7297] FAULT_INJECTION: forcing a failure. [ 208.811086][ T7297] name failslab, interval 1, probability 0, space 0, times 0 [ 208.837156][ T7297] CPU: 1 UID: 0 PID: 7297 Comm: syz.1.1002 Tainted: G W syzkaller #0 PREEMPT(full) [ 208.837260][ T7297] Tainted: [W]=WARN [ 208.837269][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 208.837283][ T7297] Call Trace: [ 208.837290][ T7297] [ 208.837299][ T7297] __dump_stack+0x1d/0x30 [ 208.837333][ T7297] dump_stack_lvl+0x95/0xd0 [ 208.837359][ T7297] dump_stack+0x15/0x1b [ 208.837383][ T7297] should_fail_ex+0x263/0x280 [ 208.837473][ T7297] should_failslab+0x8c/0xb0 [ 208.837498][ T7297] __kmalloc_noprof+0xb8/0x4e0 [ 208.837525][ T7297] ? ___neigh_create+0x4c9/0x12a0 [ 208.837550][ T7297] ___neigh_create+0x4c9/0x12a0 [ 208.837638][ T7297] ? netif_rx_internal+0x61/0x240 [ 208.837798][ T7297] ? netif_rx+0x83/0x220 [ 208.837828][ T7297] __neigh_create+0x54/0x70 [ 208.837851][ T7297] ip6_finish_output2+0x456/0xd70 [ 208.837902][ T7297] ? __pfx_dev_loopback_xmit+0x10/0x10 [ 208.837942][ T7297] ? __pfx_ip6_mtu+0x10/0x10 [ 208.837970][ T7297] ip6_finish_output+0x1e1/0x410 [ 208.838003][ T7297] ip6_output+0x10a/0x280 [ 208.838174][ T7297] ? __pfx_ip6_finish_output+0x10/0x10 [ 208.838206][ T7297] ip6_mr_output+0x2a1/0x7f0 [ 208.838233][ T7297] ? __pfx_dst_output+0x10/0x10 [ 208.838262][ T7297] ? __pfx_ip6_mr_output+0x10/0x10 [ 208.838415][ T7297] ip6_local_out+0xc3/0xd0 [ 208.838440][ T7297] ip6_push_pending_frames+0x7f/0x150 [ 208.838569][ T7297] rawv6_push_pending_frames+0x408/0x480 [ 208.838678][ T7297] ? __pfx_raw6_getfrag+0x10/0x10 [ 208.838713][ T7297] rawv6_sendmsg+0x1136/0x1230 [ 208.838751][ T7297] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 208.838795][ T7297] inet_sendmsg+0xc5/0xd0 [ 208.838813][ T7297] ? __pfx_inet_sendmsg+0x10/0x10 [ 208.838833][ T7297] ____sys_sendmsg+0x519/0x5b0 [ 208.838859][ T7297] ___sys_sendmsg+0x195/0x1e0 [ 208.838920][ T7297] ? path_openat+0x1b01/0x2050 [ 208.838966][ T7297] __sys_sendmmsg+0x185/0x320 [ 208.838993][ T7297] __x64_sys_sendmmsg+0x57/0x70 [ 208.839082][ T7297] x64_sys_call+0x27aa/0x3020 [ 208.839115][ T7297] do_syscall_64+0x12c/0x370 [ 208.839145][ T7297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.839221][ T7297] RIP: 0033:0x7f5644eac819 [ 208.839238][ T7297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.839256][ T7297] RSP: 002b:00007f56438ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 208.839279][ T7297] RAX: ffffffffffffffda RBX: 00007f5645125fa0 RCX: 00007f5644eac819 [ 208.839295][ T7297] RDX: 0000000000000002 RSI: 0000200000000640 RDI: 0000000000000003 [ 208.839335][ T7297] RBP: 00007f56438ff090 R08: 0000000000000000 R09: 0000000000000000 [ 208.839350][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.839365][ T7297] R13: 00007f5645126038 R14: 00007f5645125fa0 R15: 00007ffd56cd53a8 [ 208.839397][ T7297] [ 209.146549][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 209.146567][ T28] audit: type=1400 audit(1775479612.913:1170): avc: denied { setopt } for pid=7298 comm="syz.3.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.203038][ T7307] loop0: detected capacity change from 0 to 128 [ 209.278129][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'. [ 209.307367][ T7319] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 209.318447][ T7319] batadv1: entered allmulticast mode [ 209.328037][ T7319] team0: Port device batadv1 added [ 209.334705][ T7322] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 209.343295][ T28] audit: type=1400 audit(1775479613.103:1171): avc: denied { create } for pid=7306 comm="syz.0.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 209.365840][ T7324] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1008'. [ 209.408282][ T7324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.440039][ T7324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.468473][ T7324] bond0 (unregistering): Released all slaves [ 209.506505][ T7322] loop1: detected capacity change from 0 to 8192 [ 209.585493][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 209.828488][ T28] audit: type=1400 audit(1775479613.593:1172): avc: denied { getopt } for pid=7340 comm="syz.4.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.006592][ T28] audit: type=1400 audit(1775479613.773:1173): avc: denied { write } for pid=7346 comm="syz.4.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.136517][ T7359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7359 comm=syz.2.1019 [ 210.177438][ T7359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7359 comm=syz.2.1019 [ 210.208648][ T7363] netlink: 'syz.0.1020': attribute type 3 has an invalid length. [ 210.283823][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 210.467831][ T28] audit: type=1400 audit(1775479615.207:1174): avc: denied { name_bind } for pid=7379 comm="syz.0.1027" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 210.704923][ T7385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1026'. [ 211.011784][ T7390] FAULT_INJECTION: forcing a failure. [ 211.011784][ T7390] name failslab, interval 1, probability 0, space 0, times 0 [ 211.027737][ T7390] CPU: 1 UID: 0 PID: 7390 Comm: syz.4.1029 Tainted: G W syzkaller #0 PREEMPT(full) [ 211.027775][ T7390] Tainted: [W]=WARN [ 211.027844][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 211.027878][ T7390] Call Trace: [ 211.027885][ T7390] [ 211.027894][ T7390] __dump_stack+0x1d/0x30 [ 211.027930][ T7390] dump_stack_lvl+0x95/0xd0 [ 211.027953][ T7390] dump_stack+0x15/0x1b [ 211.027974][ T7390] should_fail_ex+0x263/0x280 [ 211.028079][ T7390] should_failslab+0x8c/0xb0 [ 211.028099][ T7390] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 211.028155][ T7390] ? __alloc_skb+0x2d6/0x690 [ 211.028186][ T7390] __alloc_skb+0x2d6/0x690 [ 211.028210][ T7390] ? __alloc_skb+0x200/0x690 [ 211.028240][ T7390] netlink_alloc_large_skb+0xbf/0xf0 [ 211.028292][ T7390] netlink_sendmsg+0x40c/0x6f0 [ 211.028312][ T7390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.028332][ T7390] ____sys_sendmsg+0x563/0x5b0 [ 211.028385][ T7390] ___sys_sendmsg+0x195/0x1e0 [ 211.028418][ T7390] __x64_sys_sendmsg+0xd4/0x160 [ 211.028441][ T7390] x64_sys_call+0x194c/0x3020 [ 211.028466][ T7390] do_syscall_64+0x12c/0x370 [ 211.028491][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.028516][ T7390] RIP: 0033:0x7f1f35aec819 [ 211.028582][ T7390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.028601][ T7390] RSP: 002b:00007f1f34547028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.028626][ T7390] RAX: ffffffffffffffda RBX: 00007f1f35d65fa0 RCX: 00007f1f35aec819 [ 211.028689][ T7390] RDX: 0000000000008804 RSI: 0000200000000280 RDI: 0000000000000003 [ 211.028705][ T7390] RBP: 00007f1f34547090 R08: 0000000000000000 R09: 0000000000000000 [ 211.028719][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.028733][ T7390] R13: 00007f1f35d66038 R14: 00007f1f35d65fa0 R15: 00007ffedb3304e8 [ 211.028754][ T7390] [ 211.271958][ T28] audit: type=1400 audit(1775479616.037:1175): avc: denied { setattr } for pid=7394 comm="syz.4.1031" path="socket:[16062]" dev="sockfs" ino=16062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.458754][ T7409] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 211.544830][ T7420] SELinux: Context : is not valid (left unmapped). [ 211.557633][ T28] audit: type=1400 audit(1775479616.327:1176): avc: denied { relabelto } for pid=7419 comm="syz.2.1040" name="rdma.current" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 211.589417][ T28] audit: type=1400 audit(1775479616.327:1177): avc: denied { associate } for pid=7419 comm="syz.2.1040" name="rdma.current" dev="tmpfs" ino=1136 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 211.691974][ T7422] hub 8-0:1.0: USB hub found [ 211.696885][ T7422] hub 8-0:1.0: 8 ports detected [ 211.715191][ T7422] netlink: 'syz.4.1038': attribute type 10 has an invalid length. [ 212.025382][ T7425] loop0: detected capacity change from 0 to 128 [ 212.092217][ T7425] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.126922][ T7425] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.240338][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'. [ 213.263056][ T28] audit: type=1400 audit(1775479618.027:1178): avc: denied { unlink } for pid=3313 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 214.320554][ T7444] loop1: detected capacity change from 0 to 128 [ 214.773966][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.854534][ T7449] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 214.946091][ T7451] netlink: 'syz.4.1048': attribute type 1 has an invalid length. [ 214.976772][ T7446] loop0: detected capacity change from 0 to 512 [ 214.988956][ T7451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.011216][ T7446] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 215.287779][ T7446] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1047: bg 0: block 393: padding at end of block bitmap is not set [ 215.304945][ T7457] bond1: (slave gretap1): making interface the new active one [ 215.327017][ T7451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7451 comm=syz.4.1048 [ 215.338382][ T7446] loop0: lost filesystem error report for type 5 error -117 [ 215.340618][ T7457] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 215.348033][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 215.348055][ C0] EXT4-fs (loop0): initial error at time 1775479620: ext4_validate_block_bitmap:441 [ 215.348085][ C0] EXT4-fs (loop0): last error at time 1775479620: ext4_validate_block_bitmap:441 [ 215.352149][ T7446] EXT4-fs (loop0): Remounting filesystem read-only [ 215.390447][ T7446] EXT4-fs (loop0): 2 truncates cleaned up [ 215.396607][ T7446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.444548][ T7464] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 215.509803][ T7472] loop4: detected capacity change from 0 to 512 [ 215.521139][ T7466] loop3: detected capacity change from 0 to 512 [ 215.545925][ T7472] FAULT_INJECTION: forcing a failure. [ 215.545925][ T7472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.545961][ T7472] CPU: 0 UID: 0 PID: 7472 Comm: syz.4.1055 Tainted: G W syzkaller #0 PREEMPT(full) [ 215.546064][ T7472] Tainted: [W]=WARN [ 215.546072][ T7472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 215.546086][ T7472] Call Trace: [ 215.546093][ T7472] [ 215.546101][ T7472] __dump_stack+0x1d/0x30 [ 215.546192][ T7472] dump_stack_lvl+0x95/0xd0 [ 215.546218][ T7472] dump_stack+0x15/0x1b [ 215.546243][ T7472] should_fail_ex+0x263/0x280 [ 215.546274][ T7472] should_fail+0xb/0x20 [ 215.546333][ T7472] should_fail_usercopy+0x1a/0x20 [ 215.546373][ T7472] _copy_to_user+0x20/0xa0 [ 215.546472][ T7472] simple_read_from_buffer+0xb5/0x130 [ 215.546499][ T7472] proc_fail_nth_read+0x10e/0x150 [ 215.546535][ T7472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.546603][ T7472] vfs_read+0x1ab/0x7f0 [ 215.546625][ T7472] ? __rcu_read_unlock+0x4e/0x70 [ 215.546650][ T7472] ? mntput+0x71/0xb0 [ 215.546686][ T7472] ksys_read+0xdc/0x1a0 [ 215.546734][ T7472] __x64_sys_read+0x40/0x50 [ 215.546757][ T7472] x64_sys_call+0x2886/0x3020 [ 215.546789][ T7472] do_syscall_64+0x12c/0x370 [ 215.546820][ T7472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.546845][ T7472] RIP: 0033:0x7f1f35aad04e [ 215.546926][ T7472] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.546947][ T7472] RSP: 002b:00007f1f34546fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.546971][ T7472] RAX: ffffffffffffffda RBX: 00007f1f345476c0 RCX: 00007f1f35aad04e [ 215.546987][ T7472] RDX: 000000000000000f RSI: 00007f1f345470a0 RDI: 0000000000000005 [ 215.547003][ T7472] RBP: 00007f1f34547090 R08: 0000000000000000 R09: 0000000000000000 [ 215.547017][ T7472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.547037][ T7472] R13: 00007f1f35d66038 R14: 00007f1f35d65fa0 R15: 00007ffedb3304e8 [ 215.547117][ T7472] [ 215.618903][ T7466] EXT4-fs (loop3): 1 orphan inode deleted [ 215.619446][ T7466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.634553][ T7466] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.812271][ T7485] hub 8-0:1.0: USB hub found [ 215.812371][ T7485] hub 8-0:1.0: 8 ports detected [ 215.818227][ T7485] netlink: 'syz.4.1056': attribute type 36 has an invalid length. [ 215.823431][ T7485] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 215.823506][ T7485] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 215.825697][ T7485] netlink: 'syz.4.1056': attribute type 10 has an invalid length. [ 215.827797][ T7487] loop3: detected capacity change from 0 to 512 [ 215.969818][ T7495] FAULT_INJECTION: forcing a failure. [ 215.969818][ T7495] name failslab, interval 1, probability 0, space 0, times 0 [ 215.969870][ T7495] CPU: 1 UID: 0 PID: 7495 Comm: syz.3.1061 Tainted: G W syzkaller #0 PREEMPT(full) [ 215.969901][ T7495] Tainted: [W]=WARN [ 215.969909][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 215.969969][ T7495] Call Trace: [ 215.969976][ T7495] [ 215.969984][ T7495] __dump_stack+0x1d/0x30 [ 215.970013][ T7495] dump_stack_lvl+0x95/0xd0 [ 215.970082][ T7495] dump_stack+0x15/0x1b [ 215.970108][ T7495] should_fail_ex+0x263/0x280 [ 215.970141][ T7495] should_failslab+0x8c/0xb0 [ 215.970243][ T7495] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 215.970272][ T7495] ? __alloc_skb+0x2d6/0x690 [ 215.970306][ T7495] __alloc_skb+0x2d6/0x690 [ 215.970358][ T7495] ? __alloc_skb+0x200/0x690 [ 215.970385][ T7495] netlink_alloc_large_skb+0xbf/0xf0 [ 215.970422][ T7495] netlink_sendmsg+0x40c/0x6f0 [ 215.970446][ T7495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.970519][ T7495] ____sys_sendmsg+0x563/0x5b0 [ 215.970541][ T7495] ___sys_sendmsg+0x195/0x1e0 [ 215.970572][ T7495] __x64_sys_sendmsg+0xd4/0x160 [ 215.970619][ T7495] x64_sys_call+0x194c/0x3020 [ 215.970650][ T7495] do_syscall_64+0x12c/0x370 [ 215.970678][ T7495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.970703][ T7495] RIP: 0033:0x7f08d646c819 [ 215.970757][ T7495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.970779][ T7495] RSP: 002b:00007f08d4e9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.970802][ T7495] RAX: ffffffffffffffda RBX: 00007f08d66e6090 RCX: 00007f08d646c819 [ 215.970816][ T7495] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000007 [ 215.970828][ T7495] RBP: 00007f08d4e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 215.970875][ T7495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.970891][ T7495] R13: 00007f08d66e6128 R14: 00007f08d66e6090 R15: 00007fffde8eed28 [ 215.970988][ T7495] [ 216.232123][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.313310][ T7497] loop0: detected capacity change from 0 to 8192 [ 216.590858][ T7497] bio_check_eod: 112 callbacks suppressed [ 216.590877][ T7497] syz.0.1062: attempt to access beyond end of device [ 216.590877][ T7497] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 216.622627][ T7497] Buffer I/O error on dev loop0, logical block 57847, async page read [ 216.631225][ T7497] syz.0.1062: attempt to access beyond end of device [ 216.631225][ T7497] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 216.660567][ T7497] Buffer I/O error on dev loop0, logical block 57847, async page read [ 216.679964][ T7509] FAULT_INJECTION: forcing a failure. [ 216.679964][ T7509] name failslab, interval 1, probability 0, space 0, times 0 [ 216.702862][ T7497] syz.0.1062: attempt to access beyond end of device [ 216.702862][ T7497] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 216.717018][ T7509] CPU: 1 UID: 0 PID: 7509 Comm: syz.3.1064 Tainted: G W syzkaller #0 PREEMPT(full) [ 216.717096][ T7509] Tainted: [W]=WARN [ 216.717104][ T7509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 216.717119][ T7509] Call Trace: [ 216.717127][ T7509] [ 216.717136][ T7509] __dump_stack+0x1d/0x30 [ 216.717169][ T7509] dump_stack_lvl+0x95/0xd0 [ 216.717235][ T7509] dump_stack+0x15/0x1b [ 216.717259][ T7509] should_fail_ex+0x263/0x280 [ 216.717318][ T7509] should_failslab+0x8c/0xb0 [ 216.717340][ T7509] kmem_cache_alloc_noprof+0x66/0x400 [ 216.717362][ T7509] ? xfrm_state_alloc+0x2c/0x190 [ 216.717384][ T7509] xfrm_state_alloc+0x2c/0x190 [ 216.717405][ T7509] xfrm_state_find+0x251f/0x3270 [ 216.717490][ T7509] xfrm_resolve_and_create_bundle+0x592/0x1f50 [ 216.717531][ T7509] ? ip6_pol_route_output+0x40/0x50 [ 216.717592][ T7509] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 216.717625][ T7509] ? xfrm_expand_policies+0x2c7/0x350 [ 216.717657][ T7509] xfrm_lookup_with_ifid+0x443/0x1590 [ 216.717721][ T7509] ? __rcu_read_unlock+0x4e/0x70 [ 216.717748][ T7509] xfrm_lookup_route+0x3a/0x110 [ 216.717780][ T7509] ip6_dst_lookup_flow+0x97/0xc0 [ 216.717823][ T7509] rawv6_sendmsg+0xc37/0x1230 [ 216.717862][ T7509] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 216.717893][ T7509] inet_sendmsg+0xc5/0xd0 [ 216.717940][ T7509] ? __pfx_inet_sendmsg+0x10/0x10 [ 216.717962][ T7509] ____sys_sendmsg+0x519/0x5b0 [ 216.718068][ T7509] ___sys_sendmsg+0x195/0x1e0 [ 216.718088][ T7509] ? path_openat+0x1b01/0x2050 [ 216.718121][ T7509] __sys_sendmmsg+0x185/0x320 [ 216.718152][ T7509] __x64_sys_sendmmsg+0x57/0x70 [ 216.718175][ T7509] x64_sys_call+0x27aa/0x3020 [ 216.718227][ T7509] do_syscall_64+0x12c/0x370 [ 216.718319][ T7509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.718344][ T7509] RIP: 0033:0x7f08d646c819 [ 216.718430][ T7509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.718451][ T7509] RSP: 002b:00007f08d4ebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 216.718475][ T7509] RAX: ffffffffffffffda RBX: 00007f08d66e5fa0 RCX: 00007f08d646c819 [ 216.718523][ T7509] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000004 [ 216.718537][ T7509] RBP: 00007f08d4ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 216.718549][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.718562][ T7509] R13: 00007f08d66e6038 R14: 00007f08d66e5fa0 R15: 00007fffde8eed28 [ 216.718584][ T7509] [ 216.967642][ T7497] Buffer I/O error on dev loop0, logical block 57847, async page read [ 216.977166][ T7497] syz.0.1062: attempt to access beyond end of device [ 216.977166][ T7497] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 216.991528][ T7497] Buffer I/O error on dev loop0, logical block 57847, async page read [ 217.000150][ T7497] syz.0.1062: attempt to access beyond end of device [ 217.000150][ T7497] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 217.014167][ T7497] Buffer I/O error on dev loop0, logical block 57847, async page read [ 217.027720][ T7497] syz.0.1062: attempt to access beyond end of device [ 217.027720][ T7497] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 217.054973][ T7518] loop4: detected capacity change from 0 to 512 [ 217.078849][ T7520] loop1: detected capacity change from 0 to 256 [ 217.096243][ T7497] Buffer I/O error on dev loop0, logical block 57847, async page read [ 217.097227][ T7518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 217.122423][ T7506] syz.0.1062: attempt to access beyond end of device [ 217.122423][ T7506] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 217.154431][ T28] audit: type=1400 audit(1775479621.907:1179): avc: denied { lock } for pid=7516 comm="syz.1.1069" path="socket:[16297]" dev="sockfs" ino=16297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 217.171537][ T7506] Buffer I/O error on dev loop0, logical block 57847, async page read [ 217.187288][ T7518] ext4 filesystem being mounted at /222/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.208772][ T7506] syz.0.1062: attempt to access beyond end of device [ 217.208772][ T7506] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 217.222916][ T7506] Buffer I/O error on dev loop0, logical block 57847, async page read [ 217.231282][ T7497] syz.0.1062: attempt to access beyond end of device [ 217.231282][ T7497] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 217.245383][ T7497] Buffer I/O error on dev loop0, logical block 57847, async page read [ 217.253830][ T7497] syz.0.1062: attempt to access beyond end of device [ 217.253830][ T7497] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 217.268948][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 217.277191][ T7497] Buffer I/O error on dev loop0, logical block 57847, async page read [ 217.300698][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 217.416656][ T7536] loop0: detected capacity change from 0 to 512 [ 217.434657][ T7536] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 217.469988][ T7536] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1074: bg 0: block 104: invalid block bitmap [ 217.495756][ T7536] loop0: lost filesystem error report for type 5 error -117 [ 217.495936][ T7536] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 217.503420][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 217.503443][ C0] EXT4-fs (loop0): initial error at time 1775479622: ext4_validate_block_bitmap:432 [ 217.503502][ C0] EXT4-fs (loop0): last error at time 1775479622: ext4_validate_block_bitmap:432 [ 217.537970][ T7536] loop0: lost filesystem error report for type 5 error -117 [ 217.538288][ T7536] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1074: invalid indirect mapped block 1 (level 1) [ 217.567857][ T7536] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 217.568582][ T7536] EXT4-fs (loop0): 1 truncate cleaned up [ 217.591389][ T7536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.610208][ T7536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1074'. [ 217.611475][ T7543] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.642099][ T7543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.649411][ T7543] IPv6: NLM_F_CREATE should be set when creating new route [ 217.656645][ T7543] IPv6: NLM_F_CREATE should be set when creating new route [ 217.661908][ T7557] FAULT_INJECTION: forcing a failure. [ 217.661908][ T7557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.663873][ T7543] IPv6: NLM_F_CREATE should be set when creating new route [ 217.694830][ T7557] CPU: 0 UID: 0 PID: 7557 Comm: syz.4.1085 Tainted: G W syzkaller #0 PREEMPT(full) [ 217.694869][ T7557] Tainted: [W]=WARN [ 217.694876][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 217.694888][ T7557] Call Trace: [ 217.694895][ T7557] [ 217.694950][ T7557] __dump_stack+0x1d/0x30 [ 217.694978][ T7557] dump_stack_lvl+0x95/0xd0 [ 217.695000][ T7557] dump_stack+0x15/0x1b [ 217.695100][ T7557] should_fail_ex+0x263/0x280 [ 217.695129][ T7557] should_fail+0xb/0x20 [ 217.695158][ T7557] should_fail_usercopy+0x1a/0x20 [ 217.695186][ T7557] _copy_to_user+0x20/0xa0 [ 217.695246][ T7557] simple_read_from_buffer+0xb5/0x130 [ 217.695307][ T7557] proc_fail_nth_read+0x10e/0x150 [ 217.695337][ T7557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.695444][ T7557] vfs_read+0x1ab/0x7f0 [ 217.695465][ T7557] ? __rcu_read_unlock+0x4e/0x70 [ 217.695488][ T7557] ? __fget_files+0x184/0x1c0 [ 217.695511][ T7557] ? mutex_lock+0x57/0x90 [ 217.695534][ T7557] ksys_read+0xdc/0x1a0 [ 217.695592][ T7557] __x64_sys_read+0x40/0x50 [ 217.695610][ T7557] x64_sys_call+0x2886/0x3020 [ 217.695662][ T7557] do_syscall_64+0x12c/0x370 [ 217.695689][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.695710][ T7557] RIP: 0033:0x7f1f35aad04e [ 217.695757][ T7557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 217.695796][ T7557] RSP: 002b:00007f1f34546fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.695817][ T7557] RAX: ffffffffffffffda RBX: 00007f1f345476c0 RCX: 00007f1f35aad04e [ 217.695904][ T7557] RDX: 000000000000000f RSI: 00007f1f345470a0 RDI: 0000000000000006 [ 217.695916][ T7557] RBP: 00007f1f34547090 R08: 0000000000000000 R09: 0000000000000000 [ 217.695929][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.695943][ T7557] R13: 00007f1f35d66038 R14: 00007f1f35d65fa0 R15: 00007ffedb3304e8 [ 217.695963][ T7557] [ 217.927763][ T7553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.936361][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 217.945494][ T7553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.952710][ T7553] IPv6: NLM_F_CREATE should be set when creating new route [ 217.960432][ T28] audit: type=1400 audit(1775479622.697:1180): avc: denied { cpu } for pid=7542 comm="syz.3.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 217.988138][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.017498][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 218.196474][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1093'. [ 218.291644][ T28] audit: type=1326 audit(1775479623.057:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 218.316489][ T28] audit: type=1326 audit(1775479623.057:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 218.340651][ T28] audit: type=1326 audit(1775479623.077:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 218.368917][ T28] audit: type=1326 audit(1775479623.077:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 218.441062][ T7596] hub 8-0:1.0: USB hub found [ 218.445905][ T7596] hub 8-0:1.0: 8 ports detected [ 218.500069][ T28] audit: type=1326 audit(1775479623.077:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 218.523967][ T28] audit: type=1326 audit(1775479623.127:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 218.641846][ T7601] loop4: detected capacity change from 0 to 2048 [ 218.752514][ T4681] loop4: p1 p2 p3 [ 218.800529][ T28] audit: type=1326 audit(1775479623.127:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5644eac582 code=0x7ffc0000 [ 218.874350][ T7604] loop0: p1 p2 p3 [ 218.880455][ T7601] loop4: p1 p2 p3 [ 218.908342][ T2999] loop0: p1 p2 p3 [ 218.909800][ T28] audit: type=1326 audit(1775479623.137:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 219.520578][ T7639] set_capacity_and_notify: 1 callbacks suppressed [ 219.520810][ T7639] loop3: detected capacity change from 0 to 512 [ 219.594992][ T7655] serio: Serial port ttyS3 [ 219.773017][ T7639] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 220.468866][ T7677] loop4: detected capacity change from 0 to 2048 [ 220.489828][ T7675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1126'. [ 220.558754][ T3305] loop4: p1 p2 p3 [ 220.593095][ T7677] loop4: p1 p2 p3 [ 220.642537][ T7679] loop1: detected capacity change from 0 to 1024 [ 220.752807][ T7694] loop0: detected capacity change from 0 to 512 [ 220.780376][ T7691] FAULT_INJECTION: forcing a failure. [ 220.780376][ T7691] name failslab, interval 1, probability 0, space 0, times 0 [ 220.793805][ T7679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.924511][ T7691] CPU: 1 UID: 0 PID: 7691 Comm: syz.3.1130 Tainted: G W syzkaller #0 PREEMPT(full) [ 220.924548][ T7691] Tainted: [W]=WARN [ 220.924555][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 220.924566][ T7691] Call Trace: [ 220.924574][ T7691] [ 220.924605][ T7691] __dump_stack+0x1d/0x30 [ 220.924637][ T7691] dump_stack_lvl+0x95/0xd0 [ 220.924665][ T7691] dump_stack+0x15/0x1b [ 220.924726][ T7691] should_fail_ex+0x263/0x280 [ 220.924752][ T7691] should_failslab+0x8c/0xb0 [ 220.924796][ T7691] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 220.924829][ T7691] ? sidtab_sid2str_get+0xa0/0x130 [ 220.924862][ T7691] kmemdup_noprof+0x2b/0x70 [ 220.924899][ T7691] sidtab_sid2str_get+0xa0/0x130 [ 220.924924][ T7691] security_sid_to_context_core+0x1eb/0x2e0 [ 220.924960][ T7691] security_sid_to_context+0x27/0x40 [ 220.925020][ T7691] selinux_lsmprop_to_secctx+0x67/0xf0 [ 220.925111][ T7691] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 220.925151][ T7691] audit_log_subj_ctx+0xa4/0x3e0 [ 220.925179][ T7691] ? skb_put+0xa9/0xf0 [ 220.925237][ T7691] audit_log_task_context+0x48/0x70 [ 220.925260][ T7691] audit_log_task+0xf3/0x250 [ 220.925300][ T7691] audit_seccomp+0x60/0x100 [ 220.925401][ T7691] ? __seccomp_filter+0x8db/0x1350 [ 220.925458][ T7691] __seccomp_filter+0x8ec/0x1350 [ 220.925491][ T7691] ? __rcu_read_unlock+0x4e/0x70 [ 220.925552][ T7691] ? __fget_files+0x184/0x1c0 [ 220.925602][ T7691] ? mutex_lock+0x57/0x90 [ 220.925624][ T7691] ? mutex_unlock+0x4e/0x90 [ 220.925653][ T7691] __secure_computing+0x81/0x150 [ 220.925682][ T7691] do_syscall_64+0xd3/0x370 [ 220.925788][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.925813][ T7691] RIP: 0033:0x7f08d646c819 [ 220.925833][ T7691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.925855][ T7691] RSP: 002b:00007f08d4ebf028 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 220.925875][ T7691] RAX: ffffffffffffffda RBX: 00007f08d66e5fa0 RCX: 00007f08d646c819 [ 220.925938][ T7691] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffffffffffffffff [ 220.925954][ T7691] RBP: 00007f08d4ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 220.925969][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.925984][ T7691] R13: 00007f08d66e6038 R14: 00007f08d66e5fa0 R15: 00007fffde8eed28 [ 220.926047][ T7691] [ 220.959054][ T7694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.181141][ T7694] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.182532][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.499254][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 221.513229][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 221.526120][ T4681] udevd[4681]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 221.590242][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 221.599696][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 221.627670][ T7730] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1141'. [ 221.764329][ T7742] loop1: detected capacity change from 0 to 2048 [ 221.862094][ T3305] loop1: p1 p2 p3 [ 221.872444][ T7742] loop1: p1 p2 p3 [ 222.248136][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.211838][ T7768] loop4: detected capacity change from 0 to 512 [ 223.258209][ T7768] EXT4-fs: Ignoring removed nobh option [ 223.309246][ T7768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.369679][ T7775] loop0: detected capacity change from 0 to 512 [ 223.376406][ T7768] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.400123][ T7775] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 223.461070][ T7775] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1156: bad orphan inode 131083 [ 223.503855][ T7775] loop0: lost filesystem error report for type 5 error -117 [ 223.504769][ T7775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.537476][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.709597][ T7786] loop4: detected capacity change from 0 to 512 [ 224.738468][ T7787] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 224.738468][ T7787] The task syz.2.1159 (7787) triggered the difference, watch for misbehavior. [ 224.762125][ T7786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.782488][ T7786] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.840641][ T7793] loop3: detected capacity change from 0 to 512 [ 224.935405][ T7793] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.956639][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.973624][ T7793] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1161: bad orphan inode 131083 [ 224.992472][ T7793] loop3: lost filesystem error report for type 5 error -117 [ 224.993073][ T7793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.016266][ T7796] loop1: detected capacity change from 0 to 512 [ 225.016558][ T7796] EXT4-fs: inline encryption not supported [ 225.100526][ T7796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.120506][ T7796] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.248385][ T7808] FAULT_INJECTION: forcing a failure. [ 225.248385][ T7808] name failslab, interval 1, probability 0, space 0, times 0 [ 225.261922][ T7808] CPU: 0 UID: 0 PID: 7808 Comm: syz.3.1161 Tainted: G W syzkaller #0 PREEMPT(full) [ 225.261957][ T7808] Tainted: [W]=WARN [ 225.261964][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 225.261978][ T7808] Call Trace: [ 225.261985][ T7808] [ 225.261994][ T7808] __dump_stack+0x1d/0x30 [ 225.262026][ T7808] dump_stack_lvl+0x95/0xd0 [ 225.262119][ T7808] dump_stack+0x15/0x1b [ 225.262140][ T7808] should_fail_ex+0x263/0x280 [ 225.262166][ T7808] should_failslab+0x8c/0xb0 [ 225.262188][ T7808] kmem_cache_alloc_noprof+0x66/0x400 [ 225.262279][ T7808] ? ext4_mb_new_blocks+0x785/0x1f50 [ 225.262318][ T7808] ext4_mb_new_blocks+0x785/0x1f50 [ 225.262496][ T7808] ext4_ind_map_blocks+0xbd4/0x1620 [ 225.262550][ T7808] ? ext4_map_query_blocks+0x438/0x550 [ 225.262584][ T7808] ext4_map_create_blocks+0x8a/0x3a0 [ 225.262631][ T7808] ext4_map_blocks+0x594/0x970 [ 225.262671][ T7808] ext4_iomap_begin+0x901/0xf10 [ 225.262696][ T7808] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 225.262715][ T7808] iomap_iter+0x3f7/0x830 [ 225.262735][ T7808] ? should_failslab+0x8c/0xb0 [ 225.262783][ T7808] __iomap_dio_rw+0x848/0x14c0 [ 225.262826][ T7808] iomap_dio_rw+0x40/0x90 [ 225.262854][ T7808] ext4_file_write_iter+0xcaa/0xfa0 [ 225.262880][ T7808] do_iter_readv_writev+0x4fd/0x5a0 [ 225.262942][ T7808] vfs_writev+0x2e1/0x900 [ 225.262977][ T7808] __se_sys_pwritev2+0xfc/0x1c0 [ 225.263004][ T7808] __x64_sys_pwritev2+0x67/0x80 [ 225.263074][ T7808] x64_sys_call+0xe07/0x3020 [ 225.263178][ T7808] do_syscall_64+0x12c/0x370 [ 225.263267][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.263291][ T7808] RIP: 0033:0x7f08d646c819 [ 225.263307][ T7808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.263368][ T7808] RSP: 002b:00007f08d4e7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 225.263393][ T7808] RAX: ffffffffffffffda RBX: 00007f08d66e6180 RCX: 00007f08d646c819 [ 225.263408][ T7808] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 225.263445][ T7808] RBP: 00007f08d4e7d090 R08: 0000000000029000 R09: 0000000000000003 [ 225.263460][ T7808] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001 [ 225.263475][ T7808] R13: 00007f08d66e6218 R14: 00007f08d66e6180 R15: 00007fffde8eed28 [ 225.263498][ T7808] [ 225.761768][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.864306][ T7816] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 227.419299][ T7823] netlink: 'syz.2.1168': attribute type 10 has an invalid length. [ 227.472009][ T7824] netlink: 'syz.3.1169': attribute type 36 has an invalid length. [ 227.485065][ T7824] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 227.494977][ T7824] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 227.517740][ T7824] netlink: 'syz.3.1169': attribute type 10 has an invalid length. [ 227.716173][ T7830] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 228.290964][ T7836] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 228.842191][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 228.842209][ T28] audit: type=1326 audit(1775479633.607:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f80c819 code=0x7ffc0000 [ 228.881742][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.897700][ T28] audit: type=1326 audit(1775479633.607:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f80c819 code=0x7ffc0000 [ 228.928376][ T28] audit: type=1326 audit(1775479633.607:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f80c819 code=0x7ffc0000 [ 228.952280][ T28] audit: type=1326 audit(1775479633.607:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9b5f80c819 code=0x7ffc0000 [ 228.975999][ T28] audit: type=1326 audit(1775479633.657:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f80c819 code=0x7ffc0000 [ 229.026834][ T28] audit: type=1326 audit(1775479633.657:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f80c819 code=0x7ffc0000 [ 229.113394][ T28] audit: type=1326 audit(1775479633.657:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b5f80c582 code=0x7ffc0000 [ 229.157216][ T28] audit: type=1326 audit(1775479633.657:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9b5f80c617 code=0x7ffc0000 [ 229.207605][ T28] audit: type=1326 audit(1775479633.657:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9b5f7c9511 code=0x7ffc0000 [ 229.292358][ T7862] netlink: 'syz.0.1181': attribute type 10 has an invalid length. [ 229.634907][ T28] audit: type=1326 audit(1775479633.657:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9b5f80d609 code=0x7ffc0000 [ 229.949789][ T7870] loop0: detected capacity change from 0 to 2048 [ 230.008959][ T3305] loop0: p1 p2 p3 [ 230.013822][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.029331][ T7870] loop0: p1 p2 p3 [ 230.280601][ T7892] hub 8-0:1.0: USB hub found [ 230.285502][ T7892] hub 8-0:1.0: 8 ports detected [ 230.292949][ T7892] netlink: 'syz.4.1191': attribute type 10 has an invalid length. [ 230.867747][ T7922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1201'. [ 232.037108][ T7944] program syz.1.1206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.078031][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 232.089037][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.098637][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.991425][ T7961] 9p: Bad value for 'rfdno' [ 233.030095][ T7961] netlink: 'syz.0.1213': attribute type 4 has an invalid length. [ 233.087075][ T7961] netlink: 'syz.0.1213': attribute type 4 has an invalid length. [ 233.271605][ T7964] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1215'. [ 233.412912][ T7964] bridge3: entered promiscuous mode [ 233.426079][ T7964] bridge3: entered allmulticast mode [ 234.389803][ T8007] loop3: detected capacity change from 0 to 256 [ 234.427105][ T8007] loop3: detected capacity change from 0 to 764 [ 234.469775][ T8007] iso9660: Unknown parameter 'ÿ0xffffffffffffffff' [ 234.770060][ T8000] loop0: detected capacity change from 0 to 512 [ 234.838622][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1229'. [ 234.850066][ T28] kauditd_printk_skb: 165 callbacks suppressed [ 234.850092][ T28] audit: type=1326 audit(1775479639.597:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d646c819 code=0x7ffc0000 [ 234.955136][ T8000] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 235.075083][ T28] audit: type=1326 audit(1775479639.597:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d646c819 code=0x7ffc0000 [ 235.125655][ T28] audit: type=1326 audit(1775479639.597:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d646c819 code=0x7ffc0000 [ 235.190314][ T7994] loop4: detected capacity change from 0 to 512 [ 235.545144][ T28] audit: type=1326 audit(1775479639.597:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d646c819 code=0x7ffc0000 [ 235.553323][ T7994] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 235.584169][ T28] audit: type=1326 audit(1775479639.597:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f08d646c819 code=0x7ffc0000 [ 235.637684][ T28] audit: type=1326 audit(1775479639.597:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d646c819 code=0x7ffc0000 [ 235.717717][ T28] audit: type=1326 audit(1775479639.597:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d646c819 code=0x7ffc0000 [ 235.798222][ T3383] page_pool_release_retry() stalled pool shutdown: id 32, 1 inflight 60 sec [ 235.804777][ T28] audit: type=1326 audit(1775479639.597:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d646c819 code=0x7ffc0000 [ 236.340213][ T28] audit: type=1326 audit(1775479639.597:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d646c819 code=0x7ffc0000 [ 236.364468][ T28] audit: type=1326 audit(1775479639.597:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08d646c819 code=0x7ffc0000 [ 236.627804][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1238'. [ 236.804973][ T8054] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 236.899780][ T8054] bond3 (unregistering): Released all slaves [ 237.158857][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 237.530073][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 238.103984][ T8075] loop3: detected capacity change from 0 to 512 [ 238.668065][ T8092] hub 8-0:1.0: USB hub found [ 238.672985][ T8092] hub 8-0:1.0: 8 ports detected [ 238.713866][ T8092] netlink: 'syz.1.1250': attribute type 10 has an invalid length. [ 239.096911][ T8075] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 240.906719][ T8118] netlink: 'syz.1.1257': attribute type 36 has an invalid length. [ 240.920124][ T8118] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 240.930039][ T8118] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 240.952004][ T8118] netlink: 'syz.1.1257': attribute type 10 has an invalid length. [ 241.036759][ T8117] hub 8-0:1.0: USB hub found [ 241.041801][ T8117] hub 8-0:1.0: 8 ports detected [ 241.424670][ T8124] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1261'. [ 241.546442][ T8127] loop3: detected capacity change from 0 to 2048 [ 241.598969][ T8129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1263'. [ 241.660075][ T8127] loop3: p1 p2 p3 [ 241.681269][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 241.681329][ T28] audit: type=1400 audit(2000000004.400:1499): avc: denied { mounton } for pid=8128 comm="syz.1.1263" path=2F3230312FE91F7189591E9233614B dev="tmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 241.684313][ T8114] loop4: detected capacity change from 0 to 512 [ 241.794452][ T8114] EXT4-fs (loop4): orphan cleanup on readonly fs [ 241.808466][ T8114] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1258: invalid indirect mapped block 256 (level 2) [ 241.823501][ T8114] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 241.827281][ T8114] EXT4-fs (loop4): 2 truncates cleaned up [ 241.837732][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 241.838013][ C1] EXT4-fs (loop4): initial error at time 2000000004: ext4_free_branches:1023: inode 11 [ 241.838112][ C1] EXT4-fs (loop4): last error at time 2000000004: ext4_free_branches:1023: inode 11 [ 241.895713][ T8114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.266046][ T8140] loop0: detected capacity change from 0 to 512 [ 242.294709][ T8140] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 242.437148][ T8146] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1267'. [ 242.478020][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1267'. [ 242.510095][ T8146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1267'. [ 242.546465][ T8151] IPVS: Unknown mcast interface: vcan0 [ 242.684977][ T8155] siw: device registration error -23 [ 242.998118][ T8162] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1273'. [ 243.947927][ T8147] bridge0: port 1(bridge_slave_0) entered learning state [ 243.970658][ T4681] udevd[4681]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 243.979207][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 244.059663][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 244.084062][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.984793][ T8178] FAULT_INJECTION: forcing a failure. [ 244.984793][ T8178] name failslab, interval 1, probability 0, space 0, times 0 [ 245.043139][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 245.069945][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 245.085383][ T4681] udevd[4681]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 245.159813][ T8178] CPU: 1 UID: 0 PID: 8178 Comm: syz.1.1277 Tainted: G W syzkaller #0 PREEMPT(full) [ 245.159860][ T8178] Tainted: [W]=WARN [ 245.159869][ T8178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 245.159883][ T8178] Call Trace: [ 245.159890][ T8178] [ 245.159899][ T8178] __dump_stack+0x1d/0x30 [ 245.159930][ T8178] dump_stack_lvl+0x95/0xd0 [ 245.159994][ T8178] dump_stack+0x15/0x1b [ 245.160053][ T8178] should_fail_ex+0x263/0x280 [ 245.160087][ T8178] should_failslab+0x8c/0xb0 [ 245.160113][ T8178] kmem_cache_alloc_noprof+0x66/0x400 [ 245.160139][ T8178] ? skb_clone+0x151/0x1f0 [ 245.160163][ T8178] skb_clone+0x151/0x1f0 [ 245.160215][ T8178] __netlink_deliver_tap+0x2c9/0x500 [ 245.160236][ T8178] netlink_unicast+0x66b/0x690 [ 245.160272][ T8178] netlink_sendmsg+0x5c8/0x6f0 [ 245.160314][ T8178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.160336][ T8178] ____sys_sendmsg+0x563/0x5b0 [ 245.160361][ T8178] ___sys_sendmsg+0x195/0x1e0 [ 245.160421][ T8178] __x64_sys_sendmsg+0xd4/0x160 [ 245.160442][ T8178] x64_sys_call+0x194c/0x3020 [ 245.160467][ T8178] do_syscall_64+0x12c/0x370 [ 245.160558][ T8178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.160623][ T8178] RIP: 0033:0x7f5644eac819 [ 245.160642][ T8178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.160663][ T8178] RSP: 002b:00007f56438de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.160692][ T8178] RAX: ffffffffffffffda RBX: 00007f5645126090 RCX: 00007f5644eac819 [ 245.160706][ T8178] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 0000000000000004 [ 245.160719][ T8178] RBP: 00007f56438de090 R08: 0000000000000000 R09: 0000000000000000 [ 245.160731][ T8178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.160744][ T8178] R13: 00007f5645126128 R14: 00007f5645126090 R15: 00007ffd56cd53a8 [ 245.160763][ T8178] [ 245.598154][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 245.644794][ T4681] udevd[4681]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 245.658634][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 245.675208][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 245.745201][ T8185] loop3: detected capacity change from 0 to 8192 [ 246.014614][ T8201] netlink: 'syz.1.1284': attribute type 10 has an invalid length. [ 246.471464][ T8198] loop4: detected capacity change from 0 to 4096 [ 247.409242][ T8198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.559465][ T8198] EXT4-fs (loop4): shut down requested (1) [ 247.565897][ T8198] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 247.575749][ T8198] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 248.024089][ T8210] hub 8-0:1.0: USB hub found [ 248.029027][ T8210] hub 8-0:1.0: 8 ports detected [ 248.039285][ T8210] netlink: 'syz.0.1286': attribute type 10 has an invalid length. [ 248.424527][ T8219] hub 8-0:1.0: USB hub found [ 248.429368][ T8219] hub 8-0:1.0: 8 ports detected [ 248.438485][ T8219] netlink: 'syz.3.1287': attribute type 10 has an invalid length. [ 248.896791][ T8224] loop1: detected capacity change from 0 to 1024 [ 249.791118][ T8224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 249.833650][ T8224] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.851687][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.928438][ T8224] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: block 3: comm syz.1.1291: lblock 3 mapped to illegal pblock 3 (length 1) [ 249.942950][ T8224] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 249.955627][ T8224] EXT4-fs (loop1): This should not happen!! Data will be lost [ 249.955627][ T8224] [ 249.965583][ T8224] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.1291: Freeing blocks not in datazone - block = 3, count = 1 [ 250.493564][ T28] audit: type=1400 audit(2000000013.210:1500): avc: denied { mount } for pid=8243 comm="syz.4.1297" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 250.516688][ T8246] @ÿ: renamed from bond_slave_0 [ 250.522523][ T3316] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 250.534593][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 250.543694][ T28] audit: type=1400 audit(2000000013.260:1501): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 250.570919][ T8245] loop0: detected capacity change from 0 to 512 [ 250.589884][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 250.600501][ T8245] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 250.611119][ T8245] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1296: bg 0: block 393: padding at end of block bitmap is not set [ 250.625870][ T8245] loop0: lost filesystem error report for type 5 error -117 [ 250.626103][ T8245] EXT4-fs (loop0): Remounting filesystem read-only [ 250.633279][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1300'. [ 250.633450][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 250.655416][ C0] EXT4-fs (loop0): initial error at time 2000000013: ext4_validate_block_bitmap:441 [ 250.664858][ C0] EXT4-fs (loop0): last error at time 2000000013: ext4_validate_block_bitmap:441 [ 250.674851][ T8245] EXT4-fs (loop0): 2 truncates cleaned up [ 250.682414][ T8245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.786301][ T28] audit: type=1400 audit(2000000013.500:1502): avc: denied { append } for pid=8260 comm="syz.1.1302" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 250.823013][ T28] audit: type=1400 audit(2000000013.540:1503): avc: denied { mount } for pid=8263 comm="syz.2.1303" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 250.865067][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.882398][ T8249] loop4: detected capacity change from 0 to 512 [ 251.072206][ T8262] loop3: detected capacity change from 0 to 512 [ 251.108610][ T8249] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1299: invalid indirect mapped block 256 (level 2) [ 251.178723][ T8249] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 251.187582][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 251.203204][ C0] EXT4-fs (loop4): initial error at time 2000000013: ext4_free_branches:1023: inode 11 [ 251.212887][ C0] EXT4-fs (loop4): last error at time 2000000013: ext4_free_branches:1023: inode 11 [ 251.240806][ T8249] EXT4-fs (loop4): 2 truncates cleaned up [ 251.362642][ T8262] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 251.385936][ T8249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.010924][ T8281] loop1: detected capacity change from 0 to 8192 [ 252.053416][ T8281] bio_check_eod: 125 callbacks suppressed [ 252.053433][ T8281] syz.1.1307: attempt to access beyond end of device [ 252.053433][ T8281] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 252.158630][ T8281] buffer_io_error: 125 callbacks suppressed [ 252.158666][ T8281] Buffer I/O error on dev loop1, logical block 57847, async page read [ 252.238253][ T8281] syz.1.1307: attempt to access beyond end of device [ 252.238253][ T8281] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 252.310132][ T8281] Buffer I/O error on dev loop1, logical block 57847, async page read [ 252.348113][ T8291] syz.1.1307: attempt to access beyond end of device [ 252.348113][ T8291] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 252.406310][ T8291] Buffer I/O error on dev loop1, logical block 57847, async page read [ 252.445148][ T8281] syz.1.1307: attempt to access beyond end of device [ 252.445148][ T8281] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 252.460827][ T8300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1313'. [ 252.507700][ T8281] Buffer I/O error on dev loop1, logical block 57847, async page read [ 252.545389][ T8280] syz.1.1307: attempt to access beyond end of device [ 252.545389][ T8280] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 252.607685][ T8280] Buffer I/O error on dev loop1, logical block 57847, async page read [ 252.631384][ T8281] syz.1.1307: attempt to access beyond end of device [ 252.631384][ T8281] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 252.659085][ T8231] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 252.706285][ T8281] Buffer I/O error on dev loop1, logical block 57847, async page read [ 252.747644][ T8291] syz.1.1307: attempt to access beyond end of device [ 252.747644][ T8291] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 252.828729][ T8291] Buffer I/O error on dev loop1, logical block 57847, async page read [ 252.843048][ T8281] syz.1.1307: attempt to access beyond end of device [ 252.843048][ T8281] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 252.894380][ T8309] netlink: 'syz.2.1315': attribute type 10 has an invalid length. [ 252.944309][ T8281] Buffer I/O error on dev loop1, logical block 57847, async page read [ 253.036064][ T8280] syz.1.1307: attempt to access beyond end of device [ 253.036064][ T8280] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 253.201915][ T8280] Buffer I/O error on dev loop1, logical block 57847, async page read [ 253.251898][ T8315] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1318'. [ 253.277393][ T8281] syz.1.1307: attempt to access beyond end of device [ 253.277393][ T8281] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 253.298738][ T8281] Buffer I/O error on dev loop1, logical block 57847, async page read [ 253.412581][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1320'. [ 253.474815][ T8321] loop0: detected capacity change from 0 to 512 [ 253.525544][ T8321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.556426][ T8323] loop1: detected capacity change from 0 to 2048 [ 253.588009][ T8321] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.634680][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1322'. [ 253.646817][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.647892][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 253.658115][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1324'. [ 253.665197][ T8321] netlink: 'syz.0.1322': attribute type 14 has an invalid length. [ 253.682132][ T8321] netlink: 'syz.0.1322': attribute type 11 has an invalid length. [ 253.730106][ T3305] loop1: p2 p3 p7 [ 253.740319][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.764878][ T8323] loop1: p2 p3 p7 [ 253.769509][ T8333] sctp: [Deprecated]: syz.4.1325 (pid 8333) Use of int in max_burst socket option. [ 253.769509][ T8333] Use struct sctp_assoc_value instead [ 254.139864][ T8346] hub 8-0:1.0: USB hub found [ 254.144724][ T8346] hub 8-0:1.0: 8 ports detected [ 254.163162][ T8346] netlink: 'syz.0.1327': attribute type 10 has an invalid length. [ 254.846262][ T28] audit: type=1326 audit(2000000016.950:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 254.896287][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 255.126711][ T28] audit: type=1326 audit(2000000016.950:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 255.240054][ T4681] udevd[4681]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 255.338137][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 255.348721][ T8350] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 255.356116][ T8350] vhci_hcd vhci_hcd.4: default hub control req: 4018 v0005 i0001 l0 [ 255.358020][ T28] audit: type=1326 audit(2000000016.950:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 255.409798][ T28] audit: type=1326 audit(2000000016.950:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 255.449941][ T28] audit: type=1326 audit(2000000016.950:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 255.570752][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 255.582085][ T4681] udevd[4681]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 255.601443][ T28] audit: type=1326 audit(2000000016.950:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 255.625538][ T28] audit: type=1326 audit(2000000016.950:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 255.669246][ T8362] FAULT_INJECTION: forcing a failure. [ 255.669246][ T8362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.682417][ T8362] CPU: 1 UID: 0 PID: 8362 Comm: syz.0.1333 Tainted: G W syzkaller #0 PREEMPT(full) [ 255.682514][ T8362] Tainted: [W]=WARN [ 255.682523][ T8362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 255.682535][ T8362] Call Trace: [ 255.682543][ T8362] [ 255.682552][ T8362] __dump_stack+0x1d/0x30 [ 255.682579][ T8362] dump_stack_lvl+0x95/0xd0 [ 255.682616][ T8362] dump_stack+0x15/0x1b [ 255.682704][ T8362] should_fail_ex+0x263/0x280 [ 255.682733][ T8362] should_fail+0xb/0x20 [ 255.682777][ T8362] should_fail_usercopy+0x1a/0x20 [ 255.682809][ T8362] strncpy_from_user+0x27/0x250 [ 255.682876][ T8362] ? __kmalloc_cache_noprof+0x18a/0x410 [ 255.682963][ T8362] __se_sys_memfd_create+0x20f/0x3b0 [ 255.683050][ T8362] __x64_sys_memfd_create+0x31/0x40 [ 255.683110][ T8362] x64_sys_call+0x1f22/0x3020 [ 255.683137][ T8362] do_syscall_64+0x12c/0x370 [ 255.683169][ T8362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.683213][ T8362] RIP: 0033:0x7f9a4055c819 [ 255.683229][ T8362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.683323][ T8362] RSP: 002b:00007f9a3ef6ce08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 255.683347][ T8362] RAX: ffffffffffffffda RBX: 00000000000004eb RCX: 00007f9a4055c819 [ 255.683361][ T8362] RDX: 00007f9a3ef6cee0 RSI: 0000000000000000 RDI: 00007f9a405f2e71 [ 255.683374][ T8362] RBP: 0000200000001500 R08: 00000000ffffffff R09: 0000000000000000 [ 255.683387][ T8362] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000008c0 [ 255.683518][ T8362] R13: 00007f9a3ef6cee0 R14: 00007f9a3ef6cea0 R15: 0000200000000a40 [ 255.683537][ T8362] [ 255.914292][ T8363] hub 8-0:1.0: USB hub found [ 255.919396][ T8363] hub 8-0:1.0: 8 ports detected [ 255.933372][ T8363] netlink: 'syz.4.1334': attribute type 10 has an invalid length. [ 256.481275][ T8368] FAULT_INJECTION: forcing a failure. [ 256.481275][ T8368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.531187][ T8368] CPU: 0 UID: 0 PID: 8368 Comm: syz.4.1336 Tainted: G W syzkaller #0 PREEMPT(full) [ 256.531227][ T8368] Tainted: [W]=WARN [ 256.531235][ T8368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.531247][ T8368] Call Trace: [ 256.531254][ T8368] [ 256.531263][ T8368] __dump_stack+0x1d/0x30 [ 256.531308][ T8368] dump_stack_lvl+0x95/0xd0 [ 256.531335][ T8368] dump_stack+0x15/0x1b [ 256.531453][ T8368] should_fail_ex+0x263/0x280 [ 256.531486][ T8368] should_fail+0xb/0x20 [ 256.531521][ T8368] should_fail_usercopy+0x1a/0x20 [ 256.531553][ T8368] _copy_to_user+0x20/0xa0 [ 256.531634][ T8368] simple_read_from_buffer+0xb5/0x130 [ 256.531657][ T8368] proc_fail_nth_read+0x10e/0x150 [ 256.531686][ T8368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.531717][ T8368] vfs_read+0x1ab/0x7f0 [ 256.531738][ T8368] ? __rcu_read_unlock+0x4e/0x70 [ 256.531758][ T8368] ? __fget_files+0x184/0x1c0 [ 256.531787][ T8368] ? mutex_lock+0x57/0x90 [ 256.531852][ T8368] ksys_read+0xdc/0x1a0 [ 256.531935][ T8368] __x64_sys_read+0x40/0x50 [ 256.531957][ T8368] x64_sys_call+0x2886/0x3020 [ 256.532052][ T8368] do_syscall_64+0x12c/0x370 [ 256.532127][ T8368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.532148][ T8368] RIP: 0033:0x7f1f35aad04e [ 256.532214][ T8368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 256.532232][ T8368] RSP: 002b:00007f1f34546fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.532252][ T8368] RAX: ffffffffffffffda RBX: 00007f1f345476c0 RCX: 00007f1f35aad04e [ 256.532307][ T8368] RDX: 000000000000000f RSI: 00007f1f345470a0 RDI: 0000000000000007 [ 256.532322][ T8368] RBP: 00007f1f34547090 R08: 0000000000000000 R09: 0000000000000000 [ 256.532366][ T8368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.532378][ T8368] R13: 00007f1f35d66038 R14: 00007f1f35d65fa0 R15: 00007ffedb3304e8 [ 256.532396][ T8368] [ 256.735772][ T28] audit: type=1326 audit(2000000016.950:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 256.759278][ T28] audit: type=1326 audit(2000000016.950:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 256.782649][ T28] audit: type=1326 audit(2000000016.960:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 256.857780][ T28] audit: type=1326 audit(2000000016.960:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 256.881390][ T28] audit: type=1326 audit(2000000016.960:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 256.929504][ T8374] FAULT_INJECTION: forcing a failure. [ 256.929504][ T8374] name failslab, interval 1, probability 0, space 0, times 0 [ 256.957859][ T8374] CPU: 1 UID: 0 PID: 8374 Comm: syz.0.1339 Tainted: G W syzkaller #0 PREEMPT(full) [ 256.957978][ T8374] Tainted: [W]=WARN [ 256.957984][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.957997][ T8374] Call Trace: [ 256.958005][ T8374] [ 256.958015][ T8374] __dump_stack+0x1d/0x30 [ 256.958060][ T8374] dump_stack_lvl+0x95/0xd0 [ 256.958082][ T8374] dump_stack+0x15/0x1b [ 256.958102][ T8374] should_fail_ex+0x263/0x280 [ 256.958237][ T8374] should_failslab+0x8c/0xb0 [ 256.958258][ T8374] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 256.958327][ T8374] ? __alloc_skb+0x2d6/0x690 [ 256.958357][ T8374] __alloc_skb+0x2d6/0x690 [ 256.958382][ T8374] ? __alloc_skb+0x200/0x690 [ 256.958407][ T8374] netlink_ack+0xfd/0x500 [ 256.958491][ T8374] netlink_rcv_skb+0x192/0x220 [ 256.958558][ T8374] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.958584][ T8374] genl_rcv+0x28/0x40 [ 256.958623][ T8374] netlink_unicast+0x5c0/0x690 [ 256.958651][ T8374] netlink_sendmsg+0x5c8/0x6f0 [ 256.958670][ T8374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.958688][ T8374] ____sys_sendmsg+0x563/0x5b0 [ 256.958756][ T8374] ___sys_sendmsg+0x195/0x1e0 [ 256.958781][ T8374] __x64_sys_sendmsg+0xd4/0x160 [ 256.958816][ T8374] x64_sys_call+0x194c/0x3020 [ 256.958840][ T8374] do_syscall_64+0x12c/0x370 [ 256.958865][ T8374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.958885][ T8374] RIP: 0033:0x7f9a4055c819 [ 256.958901][ T8374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.958979][ T8374] RSP: 002b:00007f9a3efaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.958999][ T8374] RAX: ffffffffffffffda RBX: 00007f9a407d5fa0 RCX: 00007f9a4055c819 [ 256.959071][ T8374] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 0000000000000004 [ 256.959083][ T8374] RBP: 00007f9a3efaf090 R08: 0000000000000000 R09: 0000000000000000 [ 256.959120][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.959132][ T8374] R13: 00007f9a407d6038 R14: 00007f9a407d5fa0 R15: 00007ffe79e89e88 [ 256.959148][ T8374] [ 256.959380][ T28] audit: type=1326 audit(2000000016.960:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 256.982842][ T8375] loop4: detected capacity change from 0 to 2048 [ 257.047585][ T28] audit: type=1326 audit(2000000016.960:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 257.269210][ T28] audit: type=1326 audit(2000000016.960:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 257.301335][ T8375] loop4: p1 p2 p3 [ 257.316725][ T2999] loop4: p1 p2 p3 [ 257.433712][ T8384] bond3: option primary: mode dependency failed, not supported in mode broadcast(3) [ 257.482403][ T8384] bond3 (unregistering): Released all slaves [ 257.518150][ T8386] FAULT_INJECTION: forcing a failure. [ 257.518150][ T8386] name failslab, interval 1, probability 0, space 0, times 0 [ 257.558813][ T8386] CPU: 0 UID: 0 PID: 8386 Comm: syz.0.1342 Tainted: G W syzkaller #0 PREEMPT(full) [ 257.558855][ T8386] Tainted: [W]=WARN [ 257.558862][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 257.558873][ T8386] Call Trace: [ 257.558880][ T8386] [ 257.558888][ T8386] __dump_stack+0x1d/0x30 [ 257.558960][ T8386] dump_stack_lvl+0x95/0xd0 [ 257.559045][ T8386] dump_stack+0x15/0x1b [ 257.559065][ T8386] should_fail_ex+0x263/0x280 [ 257.559101][ T8386] should_failslab+0x8c/0xb0 [ 257.559148][ T8386] __kmalloc_noprof+0xb8/0x4e0 [ 257.559174][ T8386] ? taprio_init+0x1d3/0x5f0 [ 257.559196][ T8386] taprio_init+0x1d3/0x5f0 [ 257.559215][ T8386] ? qdisc_alloc+0x397/0x410 [ 257.559301][ T8386] ? __pfx_taprio_init+0x10/0x10 [ 257.559324][ T8386] qdisc_create+0x582/0x9d0 [ 257.559384][ T8386] tc_modify_qdisc+0xffc/0x14f0 [ 257.559413][ T8386] ? __mutex_lock_slowpath+0xa/0x10 [ 257.559509][ T8386] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 257.559532][ T8386] rtnetlink_rcv_msg+0x6a7/0x720 [ 257.559559][ T8386] ? avc_has_perm_noaudit+0xab/0x130 [ 257.559597][ T8386] netlink_rcv_skb+0x123/0x220 [ 257.559705][ T8386] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 257.559736][ T8386] rtnetlink_rcv+0x1c/0x30 [ 257.559817][ T8386] netlink_unicast+0x5c0/0x690 [ 257.559847][ T8386] netlink_sendmsg+0x5c8/0x6f0 [ 257.559870][ T8386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.559889][ T8386] ____sys_sendmsg+0x563/0x5b0 [ 257.559918][ T8386] ___sys_sendmsg+0x195/0x1e0 [ 257.559946][ T8386] __x64_sys_sendmsg+0xd4/0x160 [ 257.559973][ T8386] x64_sys_call+0x194c/0x3020 [ 257.560002][ T8386] do_syscall_64+0x12c/0x370 [ 257.560181][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.560206][ T8386] RIP: 0033:0x7f9a4055c819 [ 257.560253][ T8386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.560272][ T8386] RSP: 002b:00007f9a3ef8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.560294][ T8386] RAX: ffffffffffffffda RBX: 00007f9a407d6090 RCX: 00007f9a4055c819 [ 257.560311][ T8386] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000008 [ 257.560327][ T8386] RBP: 00007f9a3ef8e090 R08: 0000000000000000 R09: 0000000000000000 [ 257.560343][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.560375][ T8386] R13: 00007f9a407d6128 R14: 00007f9a407d6090 R15: 00007ffe79e89e88 [ 257.560397][ T8386] [ 257.948346][ T8399] loop3: detected capacity change from 0 to 128 [ 258.043737][ T8402] hub 8-0:1.0: USB hub found [ 258.048517][ T8402] hub 8-0:1.0: 8 ports detected [ 258.058512][ T8402] netlink: 'syz.4.1345': attribute type 10 has an invalid length. [ 258.083979][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'. [ 258.111852][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'. [ 258.146809][ T8399] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.232600][ T8399] ext4 filesystem being mounted at /294/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 258.323247][ T8407] sctp: [Deprecated]: syz.2.1348 (pid 8407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.323247][ T8407] Use struct sctp_sack_info instead [ 258.471976][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 258.491116][ T8399] netlink: 'syz.3.1347': attribute type 20 has an invalid length. [ 258.499502][ T8399] netlink: 'syz.3.1347': attribute type 21 has an invalid length. [ 258.528657][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.593582][ T8426] loop0: detected capacity change from 0 to 4096 [ 258.603988][ T8426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.641707][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.704351][ T8430] loop0: detected capacity change from 0 to 512 [ 258.715008][ T8430] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 258.736067][ T8430] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1353: bg 0: block 393: padding at end of block bitmap is not set [ 258.777859][ T8430] loop0: lost filesystem error report for type 5 error -117 [ 258.778077][ T8430] EXT4-fs (loop0): Remounting filesystem read-only [ 258.791996][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 258.792022][ C0] EXT4-fs (loop0): initial error at time 2000000021: ext4_validate_block_bitmap:441 [ 258.792054][ C0] EXT4-fs (loop0): last error at time 2000000021: ext4_validate_block_bitmap:441 [ 258.827216][ T8435] loop4: detected capacity change from 0 to 4096 [ 258.834672][ T8437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1355'. [ 258.835952][ T8430] EXT4-fs (loop0): 2 truncates cleaned up [ 258.853931][ T8430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.877221][ T8435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.922778][ T8435] netlink: 'syz.4.1354': attribute type 6 has an invalid length. [ 258.945483][ T8435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1354'. [ 258.978190][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.069286][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.363451][ T8461] hub 8-0:1.0: USB hub found [ 259.368592][ T8461] hub 8-0:1.0: 8 ports detected [ 259.387600][ T8461] netlink: 'syz.4.1363': attribute type 10 has an invalid length. [ 260.223365][ T8475] hub 8-0:1.0: USB hub found [ 260.228242][ T8475] hub 8-0:1.0: 8 ports detected [ 260.239097][ T8475] netlink: 'syz.1.1365': attribute type 10 has an invalid length. [ 260.801455][ T8489] loop4: detected capacity change from 0 to 128 [ 260.828235][ T8489] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 260.848816][ T8489] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.877767][ T8489] ext2 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.888556][ T8494] loop1: detected capacity change from 0 to 1024 [ 260.900884][ T8489] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.933315][ T8494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 260.945642][ T8494] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.977503][ T8492] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1372: corrupted xattr block 128: bad e_name length [ 260.994189][ T8492] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 261.028375][ T8492] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1372: corrupted xattr block 128: bad e_name length [ 261.028971][ T8498] loop4: detected capacity change from 0 to 512 [ 261.044601][ T8492] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 261.061198][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 261.061215][ T28] audit: type=1400 audit(2000000023.780:1567): avc: denied { read write } for pid=8491 comm="syz.1.1372" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 261.061529][ T8492] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1372: corrupted xattr block 128: bad e_name length [ 261.108918][ T8498] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1373: inode has both inline data and extents flags [ 261.109053][ T8492] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 261.146474][ T28] audit: type=1400 audit(2000000023.850:1568): avc: denied { open } for pid=8491 comm="syz.1.1372" path="/222/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 261.180128][ T8498] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 261.180289][ T8498] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1373: couldn't read orphan inode 15 (err -117) [ 261.189504][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 261.189526][ C1] EXT4-fs (loop4): initial error at time 2000000023: ext4_orphan_get:1397: inode 15 [ 261.189558][ C1] EXT4-fs (loop4): last error at time 2000000023: ext4_orphan_get:1397: inode 15 [ 261.238940][ T8492] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1372: corrupted xattr block 128: bad e_name length [ 261.259440][ T8492] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 261.280564][ T8492] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1372: corrupted xattr block 128: bad e_name length [ 261.297668][ T8498] loop4: lost filesystem error report for type 5 error -117 [ 261.298253][ T8498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.307797][ T8494] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1372: corrupted xattr block 128: bad e_name length [ 261.344796][ T28] audit: type=1400 audit(2000000024.060:1569): avc: denied { execute_no_trans } for pid=8501 comm="syz.3.1375" path="/296/file1" dev="tmpfs" ino=1613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 261.369660][ T8492] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 261.382755][ T8494] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 261.391940][ T8494] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1372: corrupted xattr block 128: bad e_name length [ 261.405975][ T8494] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1372: corrupted xattr block 128: bad e_name length [ 261.421528][ T8492] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1372: corrupted xattr block 128: bad e_name length [ 261.450906][ T8494] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 261.505953][ T8492] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 261.516353][ T28] audit: type=1400 audit(2000000024.200:1570): avc: denied { mount } for pid=8491 comm="syz.1.1372" name="/" dev="gadgetfs" ino=3831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 261.543286][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.571501][ T8492] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1372: corrupted xattr block 128: bad e_name length [ 261.593123][ T8508] loop3: detected capacity change from 0 to 512 [ 261.612542][ T8508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.626037][ T8492] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 261.626228][ T8508] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.678379][ T8514] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1379'. [ 261.689058][ T8514] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1379'. [ 261.703427][ T28] audit: type=1400 audit(2000000024.420:1571): avc: denied { create } for pid=8491 comm="syz.1.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 261.781189][ T8506] loop0: detected capacity change from 0 to 512 [ 261.895750][ T8506] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1374: invalid indirect mapped block 256 (level 2) [ 262.008947][ T8529] loop4: detected capacity change from 0 to 512 [ 262.038093][ T8529] loop4: detected capacity change from 0 to 128 [ 262.045698][ T8506] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 262.047600][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 262.063251][ C0] EXT4-fs (loop0): initial error at time 2000000024: ext4_free_branches:1023: inode 11 [ 262.072935][ C0] EXT4-fs (loop0): last error at time 2000000024: ext4_free_branches:1023: inode 11 [ 262.161882][ T8529] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 262.190693][ T8506] EXT4-fs (loop0): 2 truncates cleaned up [ 262.233617][ T8506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.368697][ T28] audit: type=1400 audit(2000000025.080:1572): avc: denied { read } for pid=8505 comm="syz.0.1374" path="socket:[19012]" dev="sockfs" ino=19012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.411710][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 262.661728][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.717728][ T59] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 262.729564][ T8536] hub 8-0:1.0: USB hub found [ 262.734227][ T8536] hub 8-0:1.0: 8 ports detected [ 262.741637][ T8536] netlink: 'syz.1.1382': attribute type 10 has an invalid length. [ 262.850024][ T8540] loop0: detected capacity change from 0 to 2048 [ 262.909579][ T8540] loop0: p1 p2 p3 [ 263.367310][ T8553] loop4: detected capacity change from 0 to 128 [ 263.400886][ T8553] FAT-fs (loop4): Directory bread(block 32) failed [ 263.417700][ T8553] FAT-fs (loop4): Directory bread(block 33) failed [ 263.430448][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.433074][ T8553] FAT-fs (loop4): Directory bread(block 34) failed [ 263.446472][ T8553] FAT-fs (loop4): Directory bread(block 35) failed [ 263.453177][ T8553] FAT-fs (loop4): Directory bread(block 36) failed [ 263.459950][ T8553] FAT-fs (loop4): Directory bread(block 37) failed [ 263.466609][ T8553] FAT-fs (loop4): Directory bread(block 38) failed [ 263.473304][ T8553] FAT-fs (loop4): Directory bread(block 39) failed [ 263.480042][ T8553] FAT-fs (loop4): Directory bread(block 40) failed [ 263.490679][ T8553] FAT-fs (loop4): Directory bread(block 41) failed [ 263.517187][ T8553] bio_check_eod: 1748 callbacks suppressed [ 263.517208][ T8553] syz.4.1389: attempt to access beyond end of device [ 263.517208][ T8553] loop4: rw=8388608, sector=4108, nr_sectors = 4 limit=128 [ 263.541004][ T8553] FAT-fs (loop4): Filesystem has been set read-only [ 263.548368][ T8553] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 263.570167][ T28] audit: type=1326 audit(2000000026.290:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8554 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d646c819 code=0x7ffc0000 [ 263.617631][ T28] audit: type=1326 audit(2000000026.290:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8554 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f08d646c819 code=0x7ffc0000 [ 263.621077][ T8562] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 263.641275][ T28] audit: type=1326 audit(2000000026.290:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8554 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d646c819 code=0x7ffc0000 [ 263.738249][ T1033] IPVS: starting estimator thread 0... [ 263.770052][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 263.771093][ T8562] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 263.821251][ T8569] loop1: detected capacity change from 0 to 512 [ 263.836240][ T28] audit: type=1326 audit(2000000026.290:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8554 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f08d646c819 code=0x7ffc0000 [ 263.862237][ T8566] IPVS: using max 2448 ests per chain, 122400 per kthread [ 263.875830][ T8569] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 263.887858][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1396'. [ 263.926784][ T8569] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1393: bg 0: block 393: padding at end of block bitmap is not set [ 263.947419][ T8569] loop1: lost filesystem error report for type 5 error -117 [ 263.947576][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 263.954956][ T8569] EXT4-fs (loop1): Remounting filesystem read-only [ 263.961349][ C1] EXT4-fs (loop1): initial error at time 2000000026: ext4_validate_block_bitmap:441 [ 263.961381][ C1] EXT4-fs (loop1): last error at time 2000000026: ext4_validate_block_bitmap:441 [ 263.968310][ T8569] EXT4-fs (loop1): 2 truncates cleaned up [ 263.977276][ C1] [ 263.987202][ T8569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.748640][ T8593] loop4: detected capacity change from 0 to 512 [ 265.756605][ T8593] ext4: Unknown parameter 'noacl' [ 266.489799][ T8555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.551826][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.609209][ T8603] loop1: detected capacity change from 0 to 512 [ 266.619286][ T8607] netlink: 'syz.2.1403': attribute type 10 has an invalid length. [ 266.654667][ T8603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.743737][ T8603] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.871491][ T8617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37392 sclass=netlink_route_socket pid=8617 comm=syz.3.1406 [ 267.396580][ T8624] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1407'. [ 269.502292][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 269.502309][ T28] audit: type=1400 audit(2000000032.220:1594): avc: denied { mounton } for pid=8634 comm="syz.0.1411" path="/file0" dev="ramfs" ino=19941 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 270.769821][ T8630] loop3: detected capacity change from 0 to 4096 [ 270.879231][ T8630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.079381][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.201425][ T8647] loop4: detected capacity change from 0 to 512 [ 271.212789][ T8647] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 271.236050][ T8647] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1414: bad orphan inode 131083 [ 271.268532][ T8647] loop4: lost filesystem error report for type 5 error -117 [ 271.268990][ T8647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.537672][ T28] audit: type=1326 audit(2000000034.250:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.0.1418" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a4055c819 code=0x0 [ 271.659923][ T8668] loop0: detected capacity change from 0 to 512 [ 271.694550][ T8668] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1418: inode has both inline data and extents flags [ 271.718388][ T8665] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 271.729325][ T8668] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 271.732698][ T8668] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1418: couldn't read orphan inode 15 (err -117) [ 271.741894][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 271.741912][ C1] EXT4-fs (loop0): initial error at time 2000000034: ext4_orphan_get:1397: inode 15 [ 271.741938][ C1] EXT4-fs (loop0): last error at time 2000000034: ext4_orphan_get:1397: inode 15 [ 271.828131][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.837253][ T28] audit: type=1400 audit(2000000034.540:1596): avc: denied { relabelto } for pid=8649 comm="syz.2.1415" name="305" dev="tmpfs" ino=1661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 271.860810][ T8668] loop0: lost filesystem error report for type 5 error -117 [ 271.865645][ T8668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.035881][ T28] audit: type=1400 audit(2000000034.540:1597): avc: denied { associate } for pid=8649 comm="syz.2.1415" name="305" dev="tmpfs" ino=1661 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 272.190264][ T8678] loop3: detected capacity change from 0 to 512 [ 272.224491][ T28] audit: type=1400 audit(2000000034.640:1598): avc: denied { mounton } for pid=8663 comm="syz.0.1418" path="/291/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.253460][ T8673] loop1: detected capacity change from 0 to 8192 [ 272.269907][ T8678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.282478][ T8678] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.303855][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.316174][ T8673] loop1: p1 p2 p4[EZD] [ 272.337988][ T28] audit: type=1400 audit(2000000035.050:1599): avc: denied { connect } for pid=8682 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 272.367730][ T8673] loop1: p4 start 201326592 is beyond EOD, truncated [ 272.378089][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.382318][ T28] audit: type=1400 audit(2000000035.090:1600): avc: denied { unlink } for pid=3311 comm="syz-executor" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.428725][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1422'. [ 272.501524][ T8688] loop3: detected capacity change from 0 to 512 [ 272.574649][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 272.611920][ T8701] loop1: detected capacity change from 0 to 512 [ 272.639475][ T8701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.663560][ T8701] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.058080][ T8697] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 273.084612][ T8697] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 273.116941][ T8697] loop3: detected capacity change from 0 to 256 [ 273.143647][ T8697] vfat: Bad value for 'uni_xlate' [ 273.260004][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.298042][ T8710] usb usb5: usbfs: process 8710 (syz.3.1431) did not claim interface 0 before use [ 273.408197][ T8714] loop3: detected capacity change from 0 to 1024 [ 273.475171][ T8714] EXT4-fs: Ignoring removed i_version option [ 273.493045][ T8714] EXT4-fs: Ignoring removed bh option [ 273.518140][ T8714] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 273.541715][ T8714] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 273.587772][ T8714] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 273.607942][ T8714] EXT4-fs (loop3): orphan cleanup on readonly fs [ 273.617823][ T8714] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 273.637673][ T8714] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 273.689875][ T8714] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 273.719015][ T8714] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1432: bad orphan inode 11 [ 273.759517][ T8714] loop3: lost filesystem error report for type 5 error -117 [ 273.767578][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 273.781431][ C1] EXT4-fs (loop3): initial error at time 2000000036: ext4_orphan_get:1423 [ 273.790002][ C1] EXT4-fs (loop3): last error at time 2000000036: ext4_orphan_get:1423 [ 273.798363][ T8714] ext4_test_bit(bit=10, block=1) = 0 [ 273.804376][ T8714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 273.840897][ T8722] bridge11: entered promiscuous mode [ 273.846344][ T8722] bridge11: entered allmulticast mode [ 273.852917][ T8714] EXT4-fs (loop3): shut down requested (0) [ 273.863284][ T8722] team0: Port device bridge11 added [ 273.924281][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.952714][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1435'. [ 274.003922][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 274.064613][ T8730] loop3: detected capacity change from 0 to 128 [ 274.103661][ T8730] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 274.137686][ T8730] ext4 filesystem being mounted at /311/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 274.211663][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.266120][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.281032][ T8737] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 274.346046][ T8741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 274.368493][ T8737] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 274.372788][ T8741] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1439: bg 0: block 393: padding at end of block bitmap is not set [ 274.397354][ T8741] loop1: lost filesystem error report for type 5 error -117 [ 274.397563][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 274.399541][ T8737] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1438: bg 0: block 248: padding at end of block bitmap is not set [ 274.404953][ C0] EXT4-fs (loop1): initial error at time 2000000037: ext4_validate_block_bitmap:441 [ 274.422835][ T8737] loop3: lost filesystem error report for type 5 error -117 [ 274.425685][ C0] [ 274.444700][ C0] EXT4-fs (loop1): last error at time 2000000037: ext4_validate_block_bitmap:441 [ 274.454613][ T8741] EXT4-fs (loop1): Remounting filesystem read-only [ 274.461690][ T8741] EXT4-fs (loop1): 2 truncates cleaned up [ 274.467575][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 274.468258][ T8741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.474055][ C1] EXT4-fs (loop3): last error at time 2000000037: ext4_validate_block_bitmap:441 [ 274.474770][ T8737] Quota error (device loop3): write_blk: dquota write failed [ 274.510600][ T8737] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 274.520895][ T8737] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.1438: Failed to acquire dquot type 1 [ 274.532440][ T8737] loop3: lost filesystem error report for type 5 error -28 [ 274.537843][ T8737] EXT4-fs (loop3): 1 truncate cleaned up [ 274.551366][ T8737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 274.607892][ T8751] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 274.723778][ T8737] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 274.734813][ T8737] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 131074 [ 274.747324][ T8737] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.1438: Failed to acquire dquot type 1 [ 275.186547][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 275.196908][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.235906][ T8755] netlink: 'syz.1.1442': attribute type 17 has an invalid length. [ 275.259442][ T8755] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1442'. [ 275.283546][ T28] audit: type=1400 audit(2000000038.000:1601): avc: denied { mounton } for pid=8757 comm="syz.3.1443" path="/proc/956/cgroup" dev="proc" ino=20138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 275.330512][ T28] audit: type=1400 audit(2000000038.050:1602): avc: denied { mounton } for pid=8757 comm="syz.3.1443" path="/proc/956/cgroup" dev="nsfs" ino=4026532375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 275.448516][ T28] audit: type=1326 audit(2000000038.170:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8764 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 275.485393][ T8768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1447'. [ 275.499950][ T28] audit: type=1326 audit(2000000038.170:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8764 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 275.550721][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1447'. [ 275.570165][ T28] audit: type=1326 audit(2000000038.170:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8764 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 275.594132][ T28] audit: type=1326 audit(2000000038.170:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8764 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 275.648121][ T28] audit: type=1326 audit(2000000038.200:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8764 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5644eac819 code=0x7ffc0000 [ 275.698149][ T8776] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 275.728472][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1446'. [ 275.747688][ T8778] netlink: 'syz.1.1446': attribute type 2 has an invalid length. [ 275.755457][ T8778] netlink: 'syz.1.1446': attribute type 2 has an invalid length. [ 275.772206][ T8778] netlink: 'syz.1.1446': attribute type 1 has an invalid length. [ 275.772553][ T8773] EXT4-fs (loop4): 1 truncate cleaned up [ 275.789583][ T8778] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1446'. [ 275.796707][ T8773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.864524][ T8785] set_capacity_and_notify: 3 callbacks suppressed [ 275.864546][ T8785] loop3: detected capacity change from 0 to 512 [ 275.883316][ T8785] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 275.915651][ T8785] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1452: bg 0: block 393: padding at end of block bitmap is not set [ 275.930171][ T8785] loop3: lost filesystem error report for type 5 error -117 [ 275.930355][ T8785] EXT4-fs (loop3): Remounting filesystem read-only [ 275.937737][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 275.937758][ C1] EXT4-fs (loop3): initial error at time 2000000038: ext4_validate_block_bitmap:441 [ 275.937780][ C1] EXT4-fs (loop3): last error at time 2000000038: ext4_validate_block_bitmap:441 [ 275.972017][ T8785] EXT4-fs (loop3): 2 truncates cleaned up [ 275.978239][ T8785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.016235][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.090098][ T8790] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ [ 276.196216][ T8791] lo speed is unknown, defaulting to 1000 [ 276.202262][ T8791] lo speed is unknown, defaulting to 1000 [ 276.208326][ T8791] lo speed is unknown, defaulting to 1000 [ 276.214832][ T8791] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 276.226720][ T8791] lo speed is unknown, defaulting to 1000 [ 276.232798][ T8791] lo speed is unknown, defaulting to 1000 [ 276.238893][ T8791] lo speed is unknown, defaulting to 1000 [ 276.244875][ T8791] lo speed is unknown, defaulting to 1000 [ 276.251008][ T8791] lo speed is unknown, defaulting to 1000 [ 276.410610][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.577404][ T8803] netlink: 'syz.2.1456': attribute type 36 has an invalid length. [ 276.593314][ T8802] hub 8-0:1.0: USB hub found [ 276.598318][ T8802] hub 8-0:1.0: 8 ports detected [ 276.610362][ T8802] netlink: 'syz.4.1455': attribute type 36 has an invalid length. [ 276.625209][ T8802] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 276.635107][ T8802] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 276.648058][ T8802] netlink: 'syz.4.1455': attribute type 10 has an invalid length. [ 276.674013][ T8804] netlink: 'syz.2.1456': attribute type 10 has an invalid length. [ 276.694630][ T8803] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 276.708116][ T8803] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 276.919544][ T8806] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1457'. [ 277.015056][ T8806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.184788][ T8806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.214328][ T8807] loop0: detected capacity change from 0 to 8192 [ 277.223257][ T8811] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 277.233428][ T8811] IPVS: fo: FWM 3 0x00000003 - no destination available [ 277.240657][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 277.266870][ T8806] bond0 (unregistering): Released all slaves [ 277.307322][ T8814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1460'. [ 277.345136][ T8816] syzkaller0: entered promiscuous mode [ 277.351355][ T8816] syzkaller0: entered allmulticast mode [ 277.680483][ T8822] loop1: detected capacity change from 0 to 512 [ 277.716054][ T8822] EXT4-fs (loop1): Invalid log cluster size: 4294967167 [ 277.737661][ T8824] loop4: detected capacity change from 0 to 512 [ 277.751170][ T8824] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 277.784101][ T8824] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1463: bg 0: block 393: padding at end of block bitmap is not set [ 277.817621][ T8824] loop4: lost filesystem error report for type 5 error -117 [ 277.817855][ T8824] EXT4-fs (loop4): Remounting filesystem read-only [ 277.827731][ T8827] loop1: detected capacity change from 0 to 2048 [ 277.831755][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 277.844523][ C0] EXT4-fs (loop4): initial error at time 2000000040: ext4_validate_block_bitmap:441 [ 277.853953][ C0] EXT4-fs (loop4): last error at time 2000000040: ext4_validate_block_bitmap:441 [ 277.863304][ T8824] EXT4-fs (loop4): 2 truncates cleaned up [ 277.869568][ T8824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.924893][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.087102][ T8832] loop1: detected capacity change from 0 to 512 [ 278.107949][ T8835] __nla_validate_parse: 1 callbacks suppressed [ 278.107967][ T8835] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1466'. [ 278.128058][ T8832] EXT4-fs: Ignoring removed oldalloc option [ 278.173185][ T8832] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.246332][ T8835] tc_dump_action: action bad kind [ 278.375787][ T8832] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1467: iget: bad i_size value: 38620345925642 [ 278.442032][ T8839] loop4: detected capacity change from 0 to 128 [ 278.484631][ T8832] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 278.485904][ T8832] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1467: couldn't read orphan inode 15 (err -117) [ 278.495501][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 278.495523][ C0] EXT4-fs (loop1): initial error at time 2000000041: ext4_orphan_get:1397: inode 15 [ 278.495552][ C0] EXT4-fs (loop1): last error at time 2000000041: ext4_orphan_get:1397: inode 15 [ 278.665224][ T8839] EXT4-fs error (device loop4): __ext4_fill_super:5588: inode #2: comm syz.4.1468: iget: checksum invalid [ 278.730173][ T8839] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 278.730917][ T8839] EXT4-fs (loop4): get root inode failed [ 278.740042][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 278.740063][ C0] EXT4-fs (loop4): initial error at time 2000000041: __ext4_fill_super:5588: inode 2 [ 278.740095][ C0] EXT4-fs (loop4): last error at time 2000000041: __ext4_fill_super:5588: inode 2 [ 279.040800][ T8832] loop1: lost filesystem error report for type 5 error -117 [ 279.041613][ T8832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.077609][ T8839] EXT4-fs (loop4): mount failed [ 279.330744][ T59] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 279.357977][ T59] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 279.397577][ T59] EXT4-fs (loop1): This should not happen!! Data will be lost [ 279.397577][ T59] [ 279.427600][ T59] EXT4-fs (loop1): Total free blocks count 0 [ 279.447638][ T59] EXT4-fs (loop1): Free/Dirty block details [ 279.467621][ T59] EXT4-fs (loop1): free_blocks=0 [ 279.484534][ T59] EXT4-fs (loop1): dirty_blocks=2348 [ 279.494540][ T59] EXT4-fs (loop1): Block reservation details [ 279.514859][ T59] EXT4-fs (loop1): i_reserved_data_blocks=2348 [ 279.533479][ T8853] loop4: detected capacity change from 0 to 512 [ 279.564237][ T3987] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 296 with error 28 [ 279.591270][ T3316] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 279.612905][ T8853] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 279.838307][ T8863] raw_sendmsg: syz.0.1477 forgot to set AF_INET. Fix it! [ 279.873048][ T8865] loop1: detected capacity change from 0 to 1024 [ 279.894160][ T8863] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 279.904553][ T28] kauditd_printk_skb: 479 callbacks suppressed [ 279.904571][ T28] audit: type=1400 audit(2000000042.610:2087): avc: denied { relabelfrom } for pid=8862 comm="syz.0.1477" name="UNIX" dev="sockfs" ino=20370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 279.935599][ T8865] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 279.968801][ T28] audit: type=1400 audit(2000000042.620:2088): avc: denied { relabelto } for pid=8862 comm="syz.0.1477" name="UNIX" dev="sockfs" ino=20370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:ppp_device_t:s0" [ 280.069090][ T3987] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 280.087761][ T3987] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 280.114804][ T3987] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 280.134088][ T3987] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 280.242095][ T28] audit: type=1400 audit(2000000042.960:2089): avc: denied { ioctl } for pid=8871 comm="syz.1.1480" path="/dev/uhid" dev="devtmpfs" ino=253 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 280.327944][ T28] audit: type=1400 audit(2000000043.050:2090): avc: denied { map } for pid=8882 comm="syz.4.1481" path="socket:[20383]" dev="sockfs" ino=20383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 280.355031][ T8881] loop3: detected capacity change from 0 to 256 [ 280.388537][ T8881] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 280.550144][ T8902] syzkaller0: entered promiscuous mode [ 280.568372][ T8902] syzkaller0: entered allmulticast mode [ 281.677619][ T8907] loop0: detected capacity change from 0 to 2048 [ 281.977337][ T8906] loop1: detected capacity change from 0 to 2048 [ 282.235921][ T8906] Alternate GPT is invalid, using primary GPT. [ 282.254655][ T8917] lo: entered allmulticast mode [ 282.259958][ T8917] lo: left allmulticast mode [ 282.265459][ T28] audit: type=1400 audit(2000000044.980:2091): avc: denied { map } for pid=8916 comm="syz.4.1490" path="socket:[20426]" dev="sockfs" ino=20426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 282.291062][ T8906] loop1: p2 p3 p7 [ 282.312231][ T8917] loop4: detected capacity change from 0 to 2048 [ 282.334576][ T28] audit: type=1400 audit(2000000045.050:2092): avc: denied { mounton } for pid=8916 comm="syz.4.1490" path="/307/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 282.363121][ T8907] Alternate GPT is invalid, using primary GPT. [ 282.390003][ T8907] loop0: p2 p3 p7 [ 282.390853][ T8917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.530610][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.531158][ T8940] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1496'. [ 282.552873][ T28] audit: type=1400 audit(2000000045.270:2093): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 282.558778][ T2999] Alternate GPT is invalid, using primary GPT. [ 282.579778][ T2999] loop1: p2 p3 p7 [ 282.586397][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 282.599415][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 282.608607][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 283.048067][ T8949] hub 8-0:1.0: USB hub found [ 283.053263][ T8949] hub 8-0:1.0: 8 ports detected [ 283.079726][ T8949] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 287.001981][ T8964] netlink: 'syz.1.1501': attribute type 10 has an invalid length. [ 287.178720][ T8981] syzkaller0: entered promiscuous mode [ 287.184428][ T8981] syzkaller0: entered allmulticast mode [ 287.399301][ T8987] loop0: detected capacity change from 0 to 256 [ 287.411687][ T8987] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 287.489063][ T8999] 9pnet_fd: Insufficient options for proto=fd [ 287.501251][ T28] audit: type=1400 audit(2000000050.210:2094): avc: denied { setopt } for pid=8998 comm="syz.3.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 287.530773][ T8997] loop1: detected capacity change from 0 to 2048 [ 287.563712][ T4681] loop1: p1 p2 p3 [ 287.572235][ T8997] loop1: p1 p2 p3 [ 287.604835][ T9003] loop0: detected capacity change from 0 to 1024 [ 287.755452][ T9015] hub 8-0:1.0: USB hub found [ 287.760906][ T9015] hub 8-0:1.0: 8 ports detected [ 287.776042][ T9015] netlink: 'syz.3.1516': attribute type 10 has an invalid length. [ 287.849303][ T9003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.949556][ T28] audit: type=1400 audit(2000000050.670:2095): avc: denied { map } for pid=9002 comm="syz.0.1514" path="/305/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 288.175949][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.257083][ T9034] syzkaller0: entered promiscuous mode [ 288.266989][ T9034] syzkaller0: entered allmulticast mode [ 288.273915][ T9034] FAULT_INJECTION: forcing a failure. [ 288.273915][ T9034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.287253][ T9034] CPU: 0 UID: 0 PID: 9034 Comm: syz.0.1523 Tainted: G W syzkaller #0 PREEMPT(full) [ 288.287289][ T9034] Tainted: [W]=WARN [ 288.287298][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 288.287311][ T9034] Call Trace: [ 288.287318][ T9034] [ 288.287327][ T9034] __dump_stack+0x1d/0x30 [ 288.287357][ T9034] dump_stack_lvl+0x95/0xd0 [ 288.287406][ T9034] dump_stack+0x15/0x1b [ 288.287475][ T9034] should_fail_ex+0x263/0x280 [ 288.287505][ T9034] should_fail+0xb/0x20 [ 288.287566][ T9034] should_fail_usercopy+0x1a/0x20 [ 288.287640][ T9034] _copy_from_user+0x1c/0xb0 [ 288.287674][ T9034] kstrtouint_from_user+0x69/0xf0 [ 288.287703][ T9034] proc_fail_nth_write+0x50/0x160 [ 288.287814][ T9034] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 288.287846][ T9034] vfs_write+0x269/0x9f0 [ 288.287865][ T9034] ? __rcu_read_unlock+0x4e/0x70 [ 288.287969][ T9034] ? __fget_files+0x184/0x1c0 [ 288.288062][ T9034] ? mutex_lock+0x57/0x90 [ 288.288083][ T9034] ksys_write+0xdc/0x1a0 [ 288.288104][ T9034] __x64_sys_write+0x40/0x50 [ 288.288123][ T9034] x64_sys_call+0x27e1/0x3020 [ 288.288152][ T9034] do_syscall_64+0x12c/0x370 [ 288.288252][ T9034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.288322][ T9034] RIP: 0033:0x7f9a4051d04e [ 288.288391][ T9034] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 288.288454][ T9034] RSP: 002b:00007f9a3efaefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.288478][ T9034] RAX: ffffffffffffffda RBX: 00007f9a3efaf6c0 RCX: 00007f9a4051d04e [ 288.288494][ T9034] RDX: 0000000000000001 RSI: 00007f9a3efaf0a0 RDI: 0000000000000007 [ 288.288508][ T9034] RBP: 00007f9a3efaf090 R08: 0000000000000000 R09: 0000000000000000 [ 288.288522][ T9034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.288545][ T9034] R13: 00007f9a407d6038 R14: 00007f9a407d5fa0 R15: 00007ffe79e89e88 [ 288.288565][ T9034] [ 288.295283][ T28] audit: type=1400 audit(2000000051.010:2096): avc: denied { setopt } for pid=9035 comm="syz.2.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 288.358703][ T9036] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1524'. [ 288.570217][ T2999] ================================================================== [ 288.578358][ T2999] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 288.585435][ T2999] [ 288.587782][ T2999] read-write to 0xffff88811a4c1480 of 4 bytes by task 4681 on cpu 1: [ 288.595847][ T2999] d_delete+0xbe/0xe0 [ 288.599845][ T2999] d_delete_notify+0x32/0x100 [ 288.604532][ T2999] vfs_unlink+0x289/0x490 [ 288.608867][ T2999] filename_unlinkat+0x1e2/0x410 [ 288.613812][ T2999] __se_sys_unlink+0x2b/0xe0 [ 288.618417][ T2999] __x64_sys_unlink+0x1f/0x30 [ 288.623106][ T2999] x64_sys_call+0x2eb6/0x3020 [ 288.627793][ T2999] do_syscall_64+0x12c/0x370 [ 288.632397][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.638472][ T2999] [ 288.640797][ T2999] read to 0xffff88811a4c1480 of 4 bytes by task 2999 on cpu 0: [ 288.648340][ T2999] step_into_slowpath+0xea/0x4c0 [ 288.653289][ T2999] path_lookupat+0x330/0x500 [ 288.657888][ T2999] filename_lookup+0x190/0x390 [ 288.662666][ T2999] do_readlinkat+0x74/0x2f0 [ 288.667179][ T2999] __x64_sys_readlink+0x47/0x60 [ 288.672043][ T2999] x64_sys_call+0x2b51/0x3020 [ 288.676729][ T2999] do_syscall_64+0x12c/0x370 [ 288.681428][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.687339][ T2999] [ 288.689661][ T2999] value changed: 0x00300180 -> 0x00004080 [ 288.695469][ T2999] [ 288.697791][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 288.703951][ T2999] CPU: 0 UID: 0 PID: 2999 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 288.714466][ T2999] Tainted: [W]=WARN [ 288.718270][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 288.728385][ T2999] ==================================================================