last executing test programs: 4m12.459357556s ago: executing program 4 (id=570): r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0x0, 0x0) 4m12.33428899s ago: executing program 4 (id=573): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x1, @empty, 0x7}], 0x1c) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x38, r0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xb000001d}) socket$inet(0x2, 0x4, 0x3) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)={0x14, 0x0, 0x731, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x2}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r6, 0x1, 0x2b, 0x0, &(0x7f0000000000)) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mkdirat(r7, &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b4) r8 = socket(0x840000000002, 0x3, 0xff) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendto$inet(r8, &(0x7f0000000200)="92a41ebee7965e38d7f8b870084d3d636f5b4d6d991a5143bea4d2180b1352b47ae6fbac2ac443fe105e53754a001f178ebc361de9d69d9a1d3e557d7357f7e2ba4b4f518477838e8693eab78fbdf31b3f042bf124ebdfd06d26dc15dd35ee1777e404991c8272fb2c7aa68b0b2fd7235efdfd4952bd2d1d339f64876688672e513aea02e69a88e75bf9935a703facbd19c9633739f5a25c332a58f2a37d7bb960b020c047d57247dce8fab587fabb16fed65393c310", 0xb6, 0x240020c1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0x8, 0x9, 0xe, 0x80000000, 0x9, 0x6}, &(0x7f0000000040)={0x5, 0x8, 0x610c, 0x48000, 0xfffffffffffffff7, 0x9, 0x6c9, 0xffffffffffffffff}, &(0x7f0000000080)={0x7a9, 0xfffffffffffffc6a, 0x1, 0x100000000, 0x1ff, 0x5, 0x6, 0x2}, &(0x7f0000000140)={r9, r10+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) sendmsg$rds(r8, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x48004) 4m12.216185964s ago: executing program 4 (id=575): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m12.192897615s ago: executing program 4 (id=576): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000001900)='./file0\x00', 0x4) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x29, 0x80000, 0x401, &(0x7f0000000080)) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 4m12.176844415s ago: executing program 4 (id=577): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_CAPBSET_DROP(0x18, 0x23) capset(&(0x7f00000020c0)={0x20071026}, &(0x7f0000002100)={0x101, 0x5, 0xffff, 0x101, 0x6, 0x9}) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x10, 0x0, 0x81, 0xffffffff}, {0x8, 0xa8, 0x80, 0x1}, {0x9, 0x1, 0x3, 0x3}, {0x4, 0x1, 0x5a, 0x7}, {0x401, 0x8, 0x5, 0x2}]}) 4m12.114058608s ago: executing program 4 (id=579): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) write$snapshot(r0, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x100}}, {{0xa, 0xfffe, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}, 0x108) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000080)=0x11cc7a54, 0x4) write(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) gettid() sigaltstack(&(0x7f0000000080)={&(0x7f0000002500)=""/4102, 0x0, 0x1006}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4080) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgid(r3) syz_pidfd_open(r4, 0x0) unshare(0x22020400) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) r6 = syz_io_uring_setup(0x186, &(0x7f0000000240)={0x0, 0x73b, 0x10000, 0x2, 0x800024, 0x0, r5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r7, r8, 0x0, &(0x7f0000000000)) io_uring_enter(r6, 0x2def, 0x9566, 0x0, 0x0, 0x0) connect$unix(r5, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f00000017c0)=[{{0x0, 0x14, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x10}}]}}], 0xfffffffffffffdb1, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m12.04481501s ago: executing program 32 (id=579): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) write$snapshot(r0, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x100}}, {{0xa, 0xfffe, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}, 0x108) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000080)=0x11cc7a54, 0x4) write(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) gettid() sigaltstack(&(0x7f0000000080)={&(0x7f0000002500)=""/4102, 0x0, 0x1006}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4080) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgid(r3) syz_pidfd_open(r4, 0x0) unshare(0x22020400) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) r6 = syz_io_uring_setup(0x186, &(0x7f0000000240)={0x0, 0x73b, 0x10000, 0x2, 0x800024, 0x0, r5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r7, r8, 0x0, &(0x7f0000000000)) io_uring_enter(r6, 0x2def, 0x9566, 0x0, 0x0, 0x0) connect$unix(r5, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f00000017c0)=[{{0x0, 0x14, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x10}}]}}], 0xfffffffffffffdb1, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.7038976s ago: executing program 3 (id=2408): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = epoll_create1(0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000001c0)={0x20002011}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x58, &(0x7f0000000180)}) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x28040680) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pwritev(r5, &(0x7f0000001a00)=[{&(0x7f0000000580)="ada121d15c0ab3ffe9c48c355794dde4a96082f2f7ec77c1a0f09dad7091b323ff5cbaffe209846513095b86a0833cc3066b3e9f5c59f8507dcae627d030f86996a7772d3feac44a838031ebc55193002d600341d418edd4aee69dd9868f84990025f897ea70f2d6a618e128c34645b174fac7d41af6f579ba34ab1a946516305a89f8a3cf452d9af6e4731c6ae38a4b773f1c576e4574dced08972c438d148aa16c25e613a0052dfa306b1ff6b8d04537ad817677720af324", 0xb9}, {&(0x7f0000000800)="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", 0x800}, {&(0x7f0000000640)="2156f5047631baf50ac069af7b4bcf8d12642702754742d49a6519f55c74c910f9579a9b9ae68c82b7547a60131761b741", 0x31}, {&(0x7f0000001800)="331057757d01ca2e56bbb904fb9508e11ad36b777f24127253817853c1a4c59626fa266f162603b1cfdabf70c65feeb6f3c5274d382f2a072df5cf873138ca7e8933c7e9d6cb33274b303cd8c8e7441e57b6b1172c46a6e53c812cb5", 0x5c}, {&(0x7f0000001880)="71c9217193333f7277d8993c96fa8756f632a3a95b2eb6a8f09016947dc10301b32152a9c7352f132bebccdfa9935837f3595a76e00d642026900103ae5750abb2c7436ab11bd8459078704b90514c0c37df2b29aab29dcdacb69ce4dc5b13d48257e92144bc4c7e30a3cca3fa10cbd6bf3efce9b46a621a819d1c406fabb3acb47a2801759f0d59923c59ee2a289e3abb48ea9c5426f83e17132e7811fc41", 0x9f}, {&(0x7f0000001940)="30dc1a9b4322fc270910c0be6d2c9452fa7f99665bc0f96a3c9c3b21dd364e294e78d4e34c03acec4c52736aab94a8e7652aceec59c17743969f296a1110995e727316baf05d975c15407a232e99145475d0c490ec3079b23f31787537b35548d4ef0154512390b9d04fe9b32f8cc9e817f9d0307f5941623873ee4e74671ec0da5ef64109268cf5af457b0c9eeaa15c5b422ccb", 0x94}], 0x6, 0x3, 0xfffffbff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8937, &(0x7f0000000000)={'netdevsim0\x00'}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0xffff, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000001b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x4c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) fchdir(r7) rmdir(&(0x7f0000000240)='./file0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000080000007910000000000000d31030e41001000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x5}, 0x94) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_vlan\x00', 0x3ff}) 4.192399997s ago: executing program 2 (id=2410): syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004500003000004e4cc385002c23fe3218fd2078000000019078ac5e0001ac1414aa040090780300000045000000000000"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)={0x2c, 0x10, 0x1, 0x70bd2a, 0x25dfdbf8, "", [@nested={0x4, 0x4b}, @typed={0x8, 0x33, 0x0, 0x0, @fd}, @nested={0x4, 0x125}, @typed={0x8, 0x13, 0x0, 0x0, @uid}, @generic="f7"]}, 0x2c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) close(0x3) socket(0x10, 0x3, 0x0) unshare(0x60000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) close(0x3) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xe8, 0x0, 0x8aa, 0x0, @remote, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x8000, 0x5, 0x6}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000002540)={&(0x7f0000000100), 0xc, &(0x7f0000002500)={&(0x7f0000000c40)={0x170c, 0x0, 0x120, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0x11c4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "51ad4cfc7897754b03709a22b8d6541d49419af11341fff30ff4b6a41fdf3bdd8361189ff4417f202a120b0fe21480e2a90f6da2bcac028e68229bb359510767bd763b41b1f276be068cd1fad2b611758fc8a70a944b71533f865a700e6b9b1ec1a004ff60bbcc7e76f6037cd6b56bb9067a92fdc4ce5c26aea884f216e406354de3964eddc33aa6e981459de123bb37757e905564ca6641856a0fb55e9782db02b2b7b663ca455d5574edd51aca6ff35c9be68894bc9f88e5fe121dc8837eb5b709007a474e259cbb553511c002835fcf39fd6ebe9cb7805e4abe666fa468b1c496e592f6ecb6def845d23eb84c26e54dfdf8d146091a203cadf6b73e0d7e0730678d548ada0d89474b9b35e55544e81e843331d0d226f34b14b6a36466666e534ec3717f94bf7f16b6b77224c4356dd7dbc96c130357c1873c89608d8a204d3be33092741dff59e562b7420fe29fc48608cc27aa897b1c5ae3983bfb6df53c470c3a609053d652313faff409953faf06d967d6a348f1536bf9105c4602e3a0a39e1cb5fb1806b67cc364d10ef6405df9c35d2f7a589d233b88c3683b7d7ef164c254e93ae4702536a085e89b13490a8742c3d35c6bf7268bb7683e21a458e75d5407ab6f60383312f62b9b6ebd9936474d14ec3f47be116fb9eff2ce2076219ba690d4382f9d562b1eb0f0677a718efdc5a702e54543ba8f5c7ad82629422bf0ed6da053af315ff545730e34c6f0f99ee40d75b588ca1a5e54a2dfacafb7fe02f6079b5ea63da6d55ddfa72a85440a10602caea4ed905add70918251b050c6f2d571f67f152cfecefadb602d6474e198a9c5ed30bb20dc2e1e96707d61f4f172d30445bf1fd57e8cf40650114f8b3f7de2fe4ea19047e546e8e4ced34572c2111f785b1722691c657608f270c7e48db01141d861fda66ed91876be23165dfdd334040f22f117a3af0c82951e4df20dba0bcce835ab38afac9110935336310aab8b42238e29ea6d1d8e343ff38d5d5f62f052cc7acc86e7dc96e9417f75f2e619de9bf1af7aeda792b556d1158958eba02cfbf49f9e7023c03bd30f88e9557341b57b0acc2ba2992e7c3195a3961c9ec7d776015cf238175e08623c91b37ca8039f5e55c4da258670936562e1300f8738ff65c63716269cf194c34f4b923609a1f5f2239b5bcc89a0afaf49cf77969dc3eba7b7ff9a3568abc4b2196dac6ba54925fd4fc73d446727c9537cc5c24a1275a604d517e513219342986ab678bdde8e41547ee2610f5d9cfe5a089208b2499ddb8b8c5f6fe4f158efd7967d90141f70e0a3b5f661578cd0905a86a0c2dbe3069f5baf989d0d718747487e0314893a19f56c5d3c0bfd69ef5b85192992e638e31362e66c807c55672deb7a42d72e01fd7ea54ee4808303aa4068f737bfd2eca9760e164a4d9d2830561d924e937bbcadf41636d810c4a7c345236e22d2f4ddb60489d875c4512e5097bb5339fb7e7af3ce82e56194264a0d89a4d1f92ae9c4f6178b9e9d83ec943f5f8534835751aa2dc8d49df5d56d51baa2852acabd2134ce48f8d768df165be51a88d67312a2868a308cfb6730f92bad1ed2e7e05ea50989569bb3d89258a3bcc9a8002c7dc04c097d41637b558ce97e73e9c2f0fb83ce3ebbeff96b72bbedce2d81abb9e2cfa41f0ed10aa28b6db2eb335005fbf172acc936ced470173d85ab6700d7e794b34db60ae41acf6e1c99668d985acd8f54071c18430eed83f04452d329595e9b55f7575c6f7909d69ce2cc70205c422665de123f57064c8bee5c1b21fe8b0e95bda520ae85300761f14c35b3ec3ce040a036c87add4be110c07138d3d977a454dda069f92818015f326ebd84d7afe1965be06b469afcb2e87b02e1f6ca2346ec1103a392093a188b2b7f4a96319bbddb43f1d729bd743c65f82d8c8eb10e14203162e94a52c4030b7844d816b02b6c90b06a5d0032e8ee9f4757340f5a649a5d07a9a9e7ac5f8dfd18c836212c8a303b04f94b6e43797aa1f17d7d42c23555260524c430de8b5438fb5c9d7d7751224f7f9290c7c5d0a4d7f418779e4dbdb16796bbd2c7869612b57e644fffe4c69931a729f4bbdffc00e290afdbfef84fd28a6de2487096266ffde18d43acdcbc6210e5f2d2e3e9cee8edc7f4d2a3079ded5646d6bfb6f44e67a318bfec75a79f4ee979c3457c5d1ecd14d378937e31ef51697aba2b34d71a56df7aafccbeed020a8a8dc1b3cbdf95987eb4999ca8ff19870f98595f10947f7c35eb25434aee02e318d9bb79b1a85487b5b45bd567287f2e3998f1e6ee5f9684010dbc73b0fcd4e009fde7677322c889543ac8dc936ae927eb0ba438e0e6947d14ea55e0d8e1548f8421fdc034864ae27a925728bc56afe281e632c2200c384ee7f3ac1f036d8df3765ad46cbc08466a6a93e1762554ea63c5d60ac31cc22d019d03a1374a852d1c57711f126d7a5f286a583a2ef7ff10435a7eb1a6361e5b518dcb0e22c5c1e84a5558ab9d386a02992beaafbac558959f31b50501a3ed8b5a56a0b32822a8028f5f03100d8d8b6565a429c327ed4c8e34023730ce2a972c8deaae3a062bd8fe7ea57197d26f42c49e4724cd83f6174c9e5f82e51e2344e86b3561810abc04413fecedab98b716e10a6b91064742d5fd98a1bef969ffe2b0b67802ea0ec1a408c0cf6f606bc33941a74472468f4d28a128bdaa66e08f8b2427bbc3f74db3424b8082cb76ebd3dd987cf816cc4cabfb2741a088c48fca6e9ed50df9dced5958138b2573be5b7f94499e4714803ad11181ad24d8441ebf810b52e3af6bf82751c17a1430340af505b1cd49f537b192ae208b23011a07bfcc085c40338f5c5a822f4c4853ca1feaaf99fc420b4851e5fa160f50791cdc7bc3be3a9587882d31167be41ec446cdc77392634e6e185175e05a69251ad5d794249d1be40978c20bb3e6c0dc2c2cebad26980e1d998938fe7baa89ec87b9086895b1c17fd467795fb37a5d845254c807f12dd6322a3424115af19886c3ac628d057e84222a7d7beee124e611640376c61eafc489f1966840b1f5723b8a9a9442de902122f43f047d50332cb67e5e31c02524a2dc5560a04cccc95b18db2b867f5259cd671e5a163aaedf401a5b0176371ef6548a68ce4316d9874d231659acbb16184aac03883137a5f28bab0c40b841870a608cac8bff621078ac85b96914f08982c5b79ed50f92e63ea5ac20c14e8e09ae82ee985c4cb20a64b1327a16ea2c22fe80f0ee2b4cbe72ee8c6a24e6d9e5c22e29cd76feae821c7a41ba29876290f4753066f0a562d6a3fcb2da452d4252f34c08731e3770c11cf6403e8dd2620a087725d92bbb4ff9e7c6ffe29824f2726a2edcac2f8f2cd2f452ab138a53f7b5924c8377e55256cd14e9519b96d03aedf26a23aee5516bc87c16271e42322d0ef3ab9973c3f7c1403e309ae3d35c0ad7077cd845ef77361cc9ef93ae9b9d8176a8905a045d5f1ca58e0cb648c473e29d615dc45e6d659cec374680ff14c50158e8d56e5674778fe81e9a56bc84811de6fdbd5dbcf293d65ad8ceaf3511edd04365afc52484f93f41ae91fa78fca43cf188057bdc84ea810aba28de2d71af8cbc2ddfbc7cca85b6a4c6958925f0d6957e75c145957129fc5e401f1265af43a65af11511d8386e25ff43978e71ee337d6841c1be259da13711f72e1fb3f44dec0e5a4f8d3c027b91f2f1693e9408acbd11a305ba30227da04a0ff61679ff75a0b531a4c464355dc1434dd9716f59581a6b48f59bf28f37c837287d0e6c706e645e8b0e4f2c26a75d1eae3df2534a2de053a601c833fcfcf63debc81c229ddbc59f88c9fbadac69d6e9962674e50363a473a47fc3843882717797269279f42601e71ce57fefdce9547d111e58e4028b8c2008ad5e60ecddb741dd91d6e05718c4fc761edf51fcf710268d05842e9443adf568088b1b8424460b0b09a9d6a382248f4b566d9a369b252fe9fb433a2fe7e7abb3816a254a0e9c8f2b13b9a07e9d92ab97bf6d491da260a150cbca1fa567842e6452a1bd6438d13677ef1d47da032406ea06795cfaac341e4f9cdb407542dbf6bddd3e26984e2e9c56a29bb9aaf2d8df1023f6a95b6e3b13389c603b60d85a63e45a723a62e3dfddbd8e939af7bce80fe0785c8b97f10d6b33db585499b2c057ab94816d6497697a15ef7c7f26ad38e9cbccdbf4ef4cf6de03eaaab4478f4d2fce65762b3cd93bcb3c4239ff39fa1937bf27f6a8d78f4f8560e8c1284a2f13f4523f94654147b2d093383d9a1730997fcba2202258ae1df6717875a93d61efcc784f63cec83214da1520b420cb15ba5685c20de87ba1c9d418c2526e4a852085ed0fb4db00d3875d7669fa58003040cf8022d8df9ddaf7ba2a82d03d229c838f69f47c60dcf3fc39700001dc0c75aaeadd2a7626b6a37a80c7726819eb17f4ad0c65e3fd477cb7ee472dc94cef02ff08d57a5909ac4ef3f431e0c78c9040714da156b867d258cc7b324b020f7e06324c78f532aba987e222744cff82ce742429d09e9df92dcf02049a538e4ca286c11ba739d083e9f5895ae35483842be3bfdcef86fdfd71909606d41964aa2ae8457fd492c9ab88fd1d88a4adb293575466612d5b1985dfa0c678036f543297af8d9f02a16bba0d9e65610e858b88c8f8843f8194d51d1f4eeb09be8d9b12840201789574fc10389e1caa018a06b78370885ed54847456bec1860fbaa3c46944b6d3c6a6dff90c55450987bce4efde38c51487cdf82c5bc541bd44c00632856e699faad48467857ed1a893ef42f9520ba6a13f36845fa4afdae858971480b9c10a63f037a001a986daba1e98a68f834d7aeb28a3f9fa41848de1f08eb80462a22eb090d0e9fd60932fa1d47fd6aa7760334979e1ab397e37abd5a129294da85f27a0e2f49fb98a661ee52a17593048f7e7c7ff8e55f68d21792dffd7f0d2e7704c3cf00e52f596caca3cea23554c482844b29d946cd2c8f67dbdb173847a94f3f6346d989e7b177ed0cfa535bc3eee557073933830fd05277197a508a05b13501e24f0c5c88c469152ceff36942e2a2d232cfde0b9f38ea736958ed3a893fb29da74886ccf11ed4bb727849bdd38675a73fc07bffd240d87725e4d1b869662d7c0c1cea9c02da74da4b8c4dc1a9a18946b2114910170eab6bc82faaf214faaada11f0d50051c19c14d1c648dbdf9291bc95944fb85500ed20ca210be4e3682974a72ed4631e3c7e0f0309a2d929a2e3adb155fe896e7cca066b6a1d48d9771d21ee11c114406a3a5dfa84cc7aab80f17aa08774134743145d50357f6ac283078e8652f952ee0bb7c60cc4bfc40c9d6ee9526425b94d01b13928d519a445d3cab5d0c31f0cf176b37189502816ba151d736834e5778314807af2a64de2a86675a672ae720307f8c6dbd1fccfd40f3095f4ddd2d60959fa54ff1b010858136ccae7510762a8b7273607fc0e069fcee09418fed5a3a052d1be9b3375e89eef6a3603464162e7b9e0df3ed8336a5c40325fb2bc8db0c0ba212960e3091ae8d42ea38bbf488545204fadc716c9bab0aa986b3339e6381c45bcadb575cd71842273ddfff8ff014f491a543eb945f059e1c6f57abd230e5628db919ae44f09050180897ca75e9e4401c66ae490aa5f4cdefa318834e17a070f8b67e9e384f51486479098baa402742de0b0c0ff39c0e863f65ab541119298f6065496e515af400b36c05af25f73c48f5734ab566fd3834cbcd6ff4c6fddd2a3d5f071cc9be2bcf0400898"}, @ETHTOOL_A_BITSET_MASK={0x2d, 0x5, "766fcc931ce1e737e4f1256b94d26cda1058bbcf7cdc02873558c3ddb70562c5a7f8cdbe375d1c96f1"}, @ETHTOOL_A_BITSET_MASK={0xd9, 0x5, "468e12e213464d481d1ff75fd85e8b51c9becb9586d0ab8dd4c23d3c79c571b70c57f8b829be6f0e76334102c8e939852336564fd7735ccb7601d65a9e53247e0ac31720030443ef5c35137bbfb32a3b1a77202dbf8a450b981b1dbf74ffd48f219279238afe5ac00f420197a7c010319db5dc263111b3a68bc63b8df16fb553ad3132143a9d744789d442780ae2ccc9aba039b02b60d5a71703252c095c57741a007ae20a1ea3508d6b02e31574b1d57516579f87eed9e2eee371aff1e9e241595da01673b8adfb69dec5110e831e3cde32ebf698"}, @ETHTOOL_A_BITSET_VALUE={0xad, 0x4, "20f7abc5242487c6a44cfede65eec66b441ebd83de24a01d1c7b94887a707088bde996040714ffcfcee7627c30e74bc2d930373fa588b818630a2a00636691882c4450e2a0d244b171e3697812027b34ebaf7dcc6a7de729f587fecda0a36a1013d8d14333da225258582f86c9955e53ddbd470b4bb512bf2626a3d223847434e81f5f05fbfab5ab95155d7aaf419c615f215cb9b46f5f6bad8de63f8c1fc1fe8e48687a325afd98e6"}]}, @ETHTOOL_A_LINKMODES_OURS={0x268, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf7c}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']\x96\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'TEE\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!]#({-'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ns/user\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ns/user\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ns/user\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf80}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa5a4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',%)\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}, @ETHTOOL_A_BITSET_MASK={0xc9, 0x5, "5eb91784d0e44808aaa0d8730ce633687c849fb66a91a509f32b00fd6cd85282cba7185d294a83136b372e9bded3edc9a66b8759f1fd91ac365da093399e991fcf759b98bbb5c7c0bb09a59fe0677bba36fd2e6be2836bad883fbbf0d2355e1877ad572ce2d75df8ab2ca4320a17fdb8c501f8cdddb657276ff0092afeb943d0aad5e7386035f939db2b77469e3e7e92a72b0cb3cf098a0d23d8201330f6badc8a991b45b1e056a05fe399f15409dacad619d4d750ebaa4c601099f51e72cbf76ae7798a8f"}]}, @ETHTOOL_A_LINKMODES_OURS={0x2cc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, ']#)}+w[(,**[.^&{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe43}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$\'-\\\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ':%&(,%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'-('}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "3d87a93cec4c54cd3ac973f208d8b032a98407c3103cc7c8dcf62d2e8b5f13776bceb925713ac5846ce4ec8d537f1eb6946be5b80ba2074820797c8a47e3f60c6caf45ad72e14827f29bf7754577671c0ab40e5ed3cd3c3eb019aa15264fa389df33a8c5b9b3f1c542aa48d7471e7b3875b763c096a76449704d116b1c9e45adf7a576375a085b7e9e081ad4ec128737be643fb8b17ecbd13fe084cedaecec5c7cc5fb8e31408d1386ed5b484befd6927cccd1b3de3fec92fdcc0c5f696369539ea7648c72ec38eb78fb02dc0ea7b797656ed1"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xfd, 0x5, "d06972c64d80db30d442a053ae25e9ad1f64640004ec8d76d3223eaf01db9f28ece62b231b4f21055aa8d6ccaf8670274c86d6629eccdf0dc54dbf1a260ab9b78e8e3c6ddf28d734236f600a6028306bad3984d9a128bad3a525f7be4fd880643adaee80f802903b35e79a2d51cc8a7de8fd3781bfed2392de44c8f4a74104292963d21363cc9f54128935a29edf565d17933e87167886a01dc8867696f0aec05090ba46e7f52229615f502a0232e68e3684478b8131a834fd4a1b284ec6f85d335e421dfa40bccf2b7100345883c6c35e0d98f27066ad07ca6a71f7941adc8f174c292ef7b27520dbc0a6f4a9173c89c67abea3dfc4f9f931"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x170c}, 0x1, 0x0, 0x0, 0x24008080}, 0x40000) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 3.882931758s ago: executing program 3 (id=2411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, 0xffffffffffffffff, 0x66) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, r3, 0x0, 0x2, &(0x7f0000000180)='-\x00'}, 0x30) socket$inet_tcp(0x2, 0x1, 0x0) 3.759797922s ago: executing program 2 (id=2413): mknod$loop(&(0x7f00000004c0)='./cgroup.cpu/cpuset.cpus\x00', 0x200, 0x1) io_setup(0x6, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_async', 0x20001, 0x82) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x20000101}]) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000400)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") r3 = creat(&(0x7f0000000e40)='./bus\x00', 0x1a0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x54, 0xfffffffe, 0xfffffffffe000001}) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@mcast2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x6}, 0x0, 0xfffffffd}}, [@mark={0xc}]}, 0xcc}}, 0x0) 3.052493246s ago: executing program 1 (id=2419): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000580)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x125) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000140001032dbd7000fcdbdf250c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) 3.052160736s ago: executing program 2 (id=2420): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1}, 0x40014000) r3 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0x400454d0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) finit_module(r3, 0x0, 0x0) close(0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x7, 0x7, 0x7fc00002}]}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1000, 0x200) io_setup(0x239f, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000000)) 2.95263754s ago: executing program 3 (id=2421): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.235555594s ago: executing program 1 (id=2423): socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000380)={0x220042400, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x1e}, &(0x7f00000001c0)=""/161, 0xa1, &(0x7f0000000280)=""/147, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) setpriority(0x0, r3, 0x8) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) close(r4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) 2.209704685s ago: executing program 5 (id=2424): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) unshare(0x4040600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x40, 0x0, 0x0, 0x9, 0xb0552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0xfffffffa, 0x1, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000180), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.136285147s ago: executing program 5 (id=2425): r0 = socket(0x1, 0x5, 0x0) r1 = accept4$inet6(r0, 0x0, &(0x7f0000000080), 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xff, 0xff, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 'pimreg\x00', 'team_slave_1\x00', {}, {0xff}, 0x0, 0x81, 0x0, 0x11}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff76}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0xff, 0xffffffff, 0xffffffff, 0xff000000], [0xffffffff, 0x101, 0xff, 0xff], 'vlan1\x00', 'macvlan0\x00', {0xff}, {}, 0x3b, 0x8b, 0x3, 0x18}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) io_setup(0x6, &(0x7f0000000100)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newsa={0x180, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0xa1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'blake2b-512\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x4a9]}, 0x8) r5 = eventfd2(0x1, 0x0) r6 = eventfd2(0xffffffe0, 0x800) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000fc0)={{r1, &(0x7f0000000e40)='-}-\x00', 0x8000, &(0x7f0000000e80)={@align=0x6d4, {0x2, 0x1, 0x1ff, 0x2}}, 0x7ff, &(0x7f0000000ec0)={@_ha_fsid}, &(0x7f0000000f00)=0x101}, {[0xfffffff7, 0x800, 0x8, 0x8000]}, 0x4, 0x68, &(0x7f0000000f40)=""/104}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r8, 0x0, 0x483, &(0x7f0000000b40)={0x33, @rand_addr=0x64010100, 0x4e23, 0x2, 'lc\x00', 0x2, 0xaa04, 0x67}, 0x2c) r9 = eventfd(0x4b65) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r10, &(0x7f0000000180), 0x13bb711e) r11 = eventfd2(0x80000001, 0x81000) io_submit(r2, 0x8, &(0x7f0000001380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x2, r3, &(0x7f0000000140)="213b539497e020bed6c665056d17e58462d3f241cb7cbfd7bb8bac7aee5592143364e5279f94aaf2c8a13bedb85dd67972d9b488799e2333126ee1936a85dd", 0x3f, 0x0, 0x0, 0x2, r4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0xfff8, r1, &(0x7f0000000200)="dfa6ca3a338acae995398300686927748f7213cf39c63229fd6cfd837978cf07bddccd3b924c965c0da803868805ea1931810d3f401fec2013eea7f8034341e077fb9132d3360745de4f35a6a61730a084f341a8aaff2b5c736633895a32607d3ea571", 0x63, 0x80000001, 0x0, 0x6, r5}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x5, 0x114, r0, &(0x7f00000003c0)="2795759c75f553709e6bfbc076fbc2a3c3bb840d043405ac9339682484f440bfb067e7e9e6b1d08c18a2782c36c03fe3d73549e42c3df8ef150ebfa453e29b5041da6fe201c1e6c101587a8096cc7edf8eb1f1961a738a599fafaaa6cc178feff5d5fe8f6afe0fce1893157f4b980951b9e1dba13c9f951bc3a6f34427b7a1eb5bcf67c89ff88bfca5bc1403649afb4686f76626aa366f4cffffdd27b7c03bb3fb6f5996f0332df6f3b7fb12394b534e617c40b9c10ec99105adb8e698bf43cb27803535dca7f8ffbd", 0xc9, 0x0, 0x0, 0x0, r6}, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f0000000d40)="7faa5c4469a23e327db40432ad6e03f10c34659907fe4604815680ecdd5791a1010506105a4bcc063e603f6e5f4042bbc2acc972a1d86f9b45b90b2a6fffdc4ec7c036f1f1c86c360f0d577f15a93d3bb7fb11c15bc207508b2013b956dcee555d3893d51925e780191441be4680ca9ea9f4f1edfc3254372345f04aa25ed768691548f5cb62fee47c19af985eed491201f66df9692fadbab6a0b8f3215ef86744e3a21d25d0393ca70d98f57a80a4dd03d52136bb23bfa67d46aa74d7ac3bda8ff9cfd9f7312641c6fccf85d74fc9e5682d5081dd613e73eb10952c414fa1f8053c9a83c63b504f151fa0ac9a3d", 0xee, 0x9, 0x0, 0x1, r7}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x3, 0x7, r8, &(0x7f0000001080)="e512fa92e6a80c58523a0d6d81c9fbde4ac5bd3170", 0x15, 0x1, 0x0, 0x0, r9}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x2, 0x101, r0, &(0x7f0000001100)="7dda6fdb740d7861c8b7c19f4087dbe11552bb6545560db3f5ef3fec00967d056458e1cd94ff7958135e6681658804fbfcecc87dd3eaa006217f2d0b4e758afd7fb788fffb876a62c04ebddd8e22991cf8079b32b4410f9c69980f4c26af2f0a594f25c0d50c3724c5e70ac70f1a8bbfafd122154111040d0ef5aeee6b5504d8d7b6745e0218e8330720e66dbf9aec6fe4461b6e69822377b999221f99417b51e5d688fb26a56aa52c7f394ff6af92581a9cb3ea571012fdde", 0xb9, 0xffffffffffffffc0, 0x0, 0x2, r10}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f0000001200)="4347a93a2d31b439c41b65842e9541d62758fbc2ab4a0465573158b20a45cb806301b7fb5539ec433e1a4b064404b8c1ea3128969bc6f8ae546bab98e2e1f5cccd86fc5f5ff3f82398b55ef51827b3a791d558266f6e9d86fa38fc8b3ea5e7966f0b13dc86a677f3bd76d2b9cf94250e210534d29cf470a6c171e8e4be3c7866a189f5dbba4344929ecc24da372c697a644731d231865bb83ce1583cf9750f", 0x9f, 0x0, 0x0, 0x3, r11}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000001300)="7a8ea005d7c6df606539851c0106e1b7408bed9d2176fb7f022d56b5b22855e932646523499722144631f77112cb5be6fe19e99bc1851c4785cae41e74", 0x3d, 0x6, 0x0, 0x1}]) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r12, &(0x7f00000001c0)={0x0, 0xffffffffffffff88, &(0x7f0000000180)={&(0x7f0000000440)={0x78, r13, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x803]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x14}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x78}, 0x1, 0x0, 0x0, 0x54}, 0x8010) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000014c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0x88, r13, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffff9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) 2.101622808s ago: executing program 2 (id=2426): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r1 = getpid() tkill(r1, 0x23) 2.05826282s ago: executing program 3 (id=2427): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x40400, &(0x7f00000000c0)={@_ha_fsid={[0x1000, 0x5]}, {0x2, 0xb3, 0x1}}, 0x14000, &(0x7f0000000100), &(0x7f0000000140)=0x80}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) shmget(0x3, 0x3000, 0x1, &(0x7f000000c000/0x3000)=nil) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000280)={0x400, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r4 = syz_open_pts(r3, 0x8000) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000200)={0xa26d, 0x81, 0x8, 0xb33f, 0xa, "6c06002004dc17a8"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x410, 0xffffffff, 0xffffffff, 0x410, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x3173, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x0, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b0) set_mempolicy(0x8000, &(0x7f0000000540)=0x3, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1.988325023s ago: executing program 0 (id=2430): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7, 0x30}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r1, 0x8}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}], [], 0x6b}}) 1.870498156s ago: executing program 0 (id=2431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, 0xffffffffffffffff, 0x66) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, r3, 0x0, 0x2, &(0x7f0000000180)='-\x00'}, 0x30) socket$inet_tcp(0x2, 0x1, 0x0) 1.870252286s ago: executing program 5 (id=2432): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0) open(0x0, 0x14927e, 0x9) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0xff3c, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x2000007ffffffe, 0x0, &(0x7f0000000100)) 1.75609556s ago: executing program 5 (id=2433): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000580)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x125) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000140001032dbd7000fcdbdf250c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) 1.538432738s ago: executing program 1 (id=2434): mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000040)={0x0, 0x8, 0x170000}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x40}, 0x40000) sendmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000005e40)=[{&(0x7f0000007380)='S', 0x1}], 0x1, &(0x7f0000005e80)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x4000000}, 0x8841) r9 = dup3(r5, r4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) sendmmsg$inet6(r9, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xfff, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000290000000b0000000008080400000000"], 0x18}}], 0x1, 0x810) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) connect$rxrpc(r9, &(0x7f0000000200)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @mcast1, 0xf6d8}}, 0x24) sendmsg$sock(r3, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x404c040) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000180)={0x0, 0xfffffe93, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r2, 0xba87317d461c07c9, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40090d4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r10, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r10, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040)) r11 = io_uring_setup(0x7042, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 1.308247766s ago: executing program 1 (id=2435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00032dbd7000fcdbdf251b00000007002100616100000800010079000000540022801c0000800800050008000000080002000c000000080002000100000034000080080002006d00000008000200520f00000800030003000000080007000300000008000100010000000000050005000000"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x44, r6, 0x607, 0x70bd25, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x44}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0xa1, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r7) sendmsg$TIPC_NL_LINK_RESET_STATS(r9, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12080000}, 0xc, &(0x7f0000000880)={&(0x7f0000000a40)={0x288, r10, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x61}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9192}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9e8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3c0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc5000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "18856c8b0994699a5601db786194a35618b6091623e4fabbdb591054d78522095f9d0647bf73b2e2016336b1ad64705d6b744e88204b78299b9a9eefab4928aaa40557ef24533a92448a427914f6f54b48869615278b7dfcf9d4385da5800f8ae3f0c1ff665a38eec8178327a2910fbbaf78fb6c23f380168ed5759d3e71f6110ddb2158b40280de57b9234194cf13bc545d284f6dc648ea7c6c7994512198b345809f3218bd1dfee070176a80687c9681b10f44da65614329"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80d1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbae0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x802d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x423}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x170ffd47}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x48090}, 0x4040000) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r11, 0x1, 0x9, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc804}, 0x2) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getpeername$inet(r2, 0x0, &(0x7f0000000040)) getpid() 1.227335179s ago: executing program 3 (id=2436): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1}, 0x40014000) r3 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0x400454d0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) finit_module(r3, 0x0, 0x0) close(0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x7, 0x7, 0x7fc00002}]}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1000, 0x200) io_setup(0x239f, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000000)) 1.214728469s ago: executing program 2 (id=2437): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 893.22039ms ago: executing program 0 (id=2438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x89, 0x0, &(0x7f00000000c0)=0xfffffffffffffde1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7f0000006a007ffa9e", 0x9}, {&(0x7f00000001c0)="64cabf2dfb58fc021d6b689866f05d4800050088a8ffff0200258f2e4409b8f9e6aaeb88beab23fc2c6726e89b13e2f6e8bc95ee52dcd7298d390938510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400712cfff68aac572a830923ed3c3fac90beecd4521a447ffe975606ab42a207", 0x76}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x188, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x101, 0x8}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x36, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @peer_mgmt={0x75, 0x18, {0x0, 0x5, @val=0x9, @val=0x3f, @val="aca8bf33ae854d8fbf040a3d41e2362f"}}, @supported_rates={0x1, 0x5, [{0x24}, {0x16, 0x1}, {0x1b, 0x1}, {0x60, 0x1}, {0x69, 0x1}]}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x1, 0x7fff}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x109, 0x2a, [@cf={0x4, 0x6, {0x3, 0x8, 0xbb, 0x8}}, @perr={0x84, 0x7b, {0xc0, 0x7, [{{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x25}, {{0x0, 0x1}, @broadcast, 0xc71, @value=@device_b, 0xa}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x10}, {{}, @device_a, 0x0, @void, 0x2d}, {{}, @device_b, 0x6, @void, 0x8}, {{0x0, 0x1}, @device_b, 0xfe8b, @value=@device_b, 0x3e}, {{0x0, 0x1}, @device_b, 0x48d, @value=@device_b, 0x42}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0x8, @device_b, 0x4, @value, 0x9fc, 0x1ff, @device_b, 0x1ff}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_chsw={0x76, 0x6, {0xe0, 0xa7, 0x2a, 0x6}}, @channel_switch={0x25, 0x3, {0x0, 0xb0, 0x2}}, @dsss={0x3, 0x1, 0x3d}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x4, 0x20}}, @random={0x0, 0x22, "49b2de6226cf3e34701c6a9fb57258213b483ce418f3496e90b9877462dabd3ee227"}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x188}, 0x1, 0x0, 0x0, 0x14000000}, 0x8000) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048050}, 0x48804) 874.178541ms ago: executing program 5 (id=2439): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001}) 795.133033ms ago: executing program 0 (id=2440): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x165, 0x0, 0x1000}, {0x80, 0x1, 0xf000, 0xc, 0x800, 0x800000}, 0x81, 0x64b5, 0x132f}}, @TCA_TBF_RTAB={0x404, 0x2, [0x10, 0x3, 0x5, 0x0, 0x7, 0x9, 0xde3, 0x3, 0x2, 0x7665, 0x4, 0x8, 0x4, 0xf, 0x7ff, 0xe6d, 0x1, 0x5, 0x2, 0x200, 0x81, 0x400, 0x10001, 0xfffffffa, 0x2, 0x8, 0x4, 0x9, 0x2, 0xa0000, 0x37, 0x5, 0x9, 0x1, 0x80002a8b, 0xb, 0xf81, 0x0, 0x9, 0x90, 0x6, 0x2, 0xb6f, 0xdd, 0x1, 0x81, 0x1, 0x200, 0x0, 0x1, 0xc, 0x20d2, 0x75, 0x800, 0x2a, 0x7, 0x8000, 0x6, 0x6, 0x4, 0x40, 0x0, 0x6, 0x9, 0x8, 0x80000001, 0x97, 0x4, 0xffff3404, 0x8, 0x80080001, 0x8, 0x1, 0x2, 0x5, 0xf, 0x1, 0x7, 0x3, 0xb1d, 0x400, 0x9, 0x931, 0xffffffff, 0x1, 0x4, 0x6, 0x3, 0x400000, 0x5, 0xfffffff8, 0x3, 0x4, 0x8, 0x8, 0x9, 0x100, 0x0, 0x2, 0x7, 0x7f, 0x2, 0x6, 0x401, 0x8, 0x0, 0xfbb, 0x6, 0x100, 0x9, 0x401, 0x2, 0x100, 0x9, 0x80, 0xff, 0x0, 0x1, 0x6, 0x4, 0x3, 0x5, 0xe, 0x3, 0x3, 0x4, 0x3, 0x5, 0x81, 0xfff, 0x6, 0x1, 0x1, 0x7fffffff, 0x63c7, 0x3, 0x8, 0x7, 0x0, 0x7, 0x3, 0x3, 0xd, 0x9, 0x3, 0x80, 0x3, 0x0, 0x5, 0x1ff, 0xf3c3, 0x8, 0x36, 0x1, 0x0, 0x8, 0xffffffff, 0x6, 0x733, 0x7, 0xec4, 0x7, 0x9, 0x10000, 0x9, 0x8, 0x9, 0x1, 0x9, 0x100, 0x6, 0x78, 0x0, 0x10, 0x7, 0xffff7fff, 0x1, 0x6, 0x7ff, 0x9, 0x9, 0x3, 0x2, 0x8a0f, 0x4, 0x3, 0xffff8001, 0x78, 0x3, 0x7, 0x81, 0x2, 0x6, 0x8, 0x6, 0x231fe9d9, 0xffff, 0x200, 0x1, 0x401, 0x401, 0x6, 0x3, 0x80, 0x5, 0x8, 0x0, 0x1, 0x8, 0x80000001, 0xff000000, 0xbe3, 0x4, 0x0, 0x1, 0x2, 0xfffffffc, 0x4c, 0x8, 0x1, 0x6ef9, 0x69b9, 0x0, 0x1, 0x3, 0x8000, 0x80000001, 0xb4e, 0x401, 0xfffffffc, 0x0, 0x9, 0x9, 0x800, 0x5, 0x6, 0x4, 0x67d6, 0x3, 0x100, 0x9, 0x4, 0x400, 0x1908, 0x1000, 0x1000, 0x5, 0x6, 0x6, 0x9, 0x85, 0x6, 0xc3, 0x4, 0x7f, 0x8]}]}}]}, 0x45c}}, 0x4000010) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000f51df820a9ceb57cdf0d6404a629b783e258dbf2e262336a83b3d285ab12ad6ff076bf5389e3f9bea84e", @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0xc8d1}, 0x800) 720.520686ms ago: executing program 0 (id=2441): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) 720.264006ms ago: executing program 0 (id=2442): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0xe4}, {0xbb, 0x8, 0x7f, 0x923}, {0x101, 0xfa, 0x9, 0x2}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x50) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x48088) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8a"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x400008c4) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="a8000000120000042bbd7000fcdbdf25e40d08084e204e22ff7f00000000000022090000ff01000008000000ffffac7f0400000007000000", @ANYRES32=0x0, @ANYBLOB="00000100ffffffff0600000008000000590001008ff55df21dd27ac785c5f05a0e00e7781acfeb4c8205b2949b995fcf370d089b4b37a0247668bcf3d3c6e5c59e1f32d3c5c3a8f9224d5dabe3c575ca1fda16904ec1f2ae217775026b6bff171eab39b7e582dd65ba000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20008050}, 0x4040) 435.078205ms ago: executing program 1 (id=2443): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0) open(0x0, 0x14927e, 0x9) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0xff3c, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x2000007ffffffe, 0x0, &(0x7f0000000100)) 396.857957ms ago: executing program 1 (id=2444): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x462, &(0x7f0000000d80)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1) io_setup(0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 331.050649ms ago: executing program 2 (id=2445): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0x94, 0x30, 0xb, 0x0, 0x0, {}, [{0x80, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x34, 0x2, 0x0, 0x0, {{0xa}, {0x8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000410000009500575b1eb02c0b35000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0xffffff04, 0x61e5cc96}, 0x22) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000800000004d027c6bd6f676119000000b9b2e847a7e53c07abcdeaddb31fea6a004c90d435287c238bb308c791d5371630dea7f7cd8d790d37df", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000200000f0300000002000000010000000300000000000000000000000000000044942d000000000000000200000000000000000100000f010000000000000000000000000000008400002e"], &(0x7f00000014c0)=""/2, 0x6a, 0x2, 0x1}, 0x28) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r7, 0x719, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 232.623953ms ago: executing program 3 (id=2446): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x40400, &(0x7f00000000c0)={@_ha_fsid={[0x1000, 0x5]}, {0x2, 0xb3, 0x1}}, 0x14000, &(0x7f0000000100), &(0x7f0000000140)=0x80}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) shmget(0x3, 0x3000, 0x1, &(0x7f000000c000/0x3000)=nil) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000280)={0x400, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r4 = syz_open_pts(r3, 0x8000) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000200)={0xa26d, 0x81, 0x8, 0xb33f, 0xa, "6c06002004dc17a8"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x410, 0xffffffff, 0xffffffff, 0x410, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x3173, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x0, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b0) set_mempolicy(0x8000, &(0x7f0000000540)=0x3, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 0s ago: executing program 5 (id=2447): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup2(r2, r2) write$cgroup_int(r0, &(0x7f00000000c0)=0x2, 0x5) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1ffffb, 0x1}, 0xfffffffffffffed3) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) timerfd_settime(r3, 0x1, &(0x7f0000000040), &(0x7f0000000080)) (async) timerfd_settime(r3, 0x1, &(0x7f0000000040), &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), r5) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 179][ T9092] RBP: 00007f8cd7337090 R08: 0000000000000000 R09: 0000000000000000 [ 232.083191][ T9092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.083249][ T9092] R13: 00007f8cd8b56038 R14: 00007f8cd8b55fa0 R15: 00007fff0518c4d8 [ 232.083271][ T9092] [ 232.322613][ T9099] netlink: 'syz.5.1733': attribute type 10 has an invalid length. [ 232.330689][ T9099] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1733'. [ 232.345686][ T9099] ipvlan3: entered promiscuous mode [ 232.352626][ T9099] bridge0: port 3(ipvlan3) entered blocking state [ 232.359362][ T9099] bridge0: port 3(ipvlan3) entered disabled state [ 232.367101][ T9099] ipvlan3: entered allmulticast mode [ 232.372833][ T9099] bridge0: entered allmulticast mode [ 232.379211][ T9099] ipvlan3: left allmulticast mode [ 232.403195][ T9102] 9pnet_fd: Insufficient options for proto=fd [ 232.428650][ T9099] bridge0: left allmulticast mode [ 232.447638][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.686780][ T9105] loop5: detected capacity change from 0 to 128 [ 232.698916][ T9105] EXT4-fs: Ignoring removed i_version option [ 232.726394][ T9105] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.740945][ T9105] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.859633][ T5237] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.916299][ T9114] loop5: detected capacity change from 0 to 512 [ 232.936958][ T9114] EXT4-fs: Ignoring removed bh option [ 232.964193][ T9114] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 233.003787][ T9114] EXT4-fs (loop5): 1 truncate cleaned up [ 233.011487][ T9114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.036499][ T28] audit: type=1400 audit(1775221933.768:2869): avc: denied { read } for pid=9121 comm="syz.0.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 233.315458][ T9135] bridge1: entered promiscuous mode [ 233.324902][ T9135] bridge1: entered allmulticast mode [ 233.806287][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.833876][ T9149] loop5: detected capacity change from 0 to 128 [ 233.841304][ T9149] EXT4-fs: Ignoring removed i_version option [ 233.849409][ T9149] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.862057][ T9149] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.882556][ T5237] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.950291][ T9152] 9pnet_fd: Insufficient options for proto=fd [ 234.371283][ T28] audit: type=1400 audit(1775221935.038:2870): avc: denied { setopt } for pid=9153 comm="syz.0.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.392977][ T9158] FAULT_INJECTION: forcing a failure. [ 234.392977][ T9158] name failslab, interval 1, probability 0, space 0, times 0 [ 234.447754][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1751'. [ 234.456785][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1751'. [ 234.461368][ T9158] CPU: 1 UID: 0 PID: 9158 Comm: syz.2.1754 Tainted: G W syzkaller #0 PREEMPT(full) [ 234.461401][ T9158] Tainted: [W]=WARN [ 234.461408][ T9158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 234.461419][ T9158] Call Trace: [ 234.461426][ T9158] [ 234.461435][ T9158] __dump_stack+0x1d/0x30 [ 234.461463][ T9158] dump_stack_lvl+0x95/0xd0 [ 234.461486][ T9158] dump_stack+0x15/0x1b [ 234.461508][ T9158] should_fail_ex+0x263/0x280 [ 234.461536][ T9158] should_failslab+0x8c/0xb0 [ 234.461559][ T9158] kmem_cache_alloc_noprof+0x66/0x400 [ 234.461582][ T9158] ? mas_alloc_nodes+0x1a2/0x210 [ 234.461607][ T9158] mas_alloc_nodes+0x1a2/0x210 [ 234.461631][ T9158] mas_preallocate+0x2ca/0x510 [ 234.461659][ T9158] __split_vma+0x240/0x640 [ 234.461680][ T9158] ? __rcu_read_unlock+0x4e/0x70 [ 234.461704][ T9158] vms_gather_munmap_vmas+0x184/0x850 [ 234.461739][ T9158] ? mas_find+0x608/0x700 [ 234.461764][ T9158] mmap_region+0x718/0x2050 [ 234.461788][ T9158] ? selinux_file_open+0x2e6/0x330 [ 234.461835][ T9158] do_mmap+0x9b2/0xbd0 [ 234.461864][ T9158] vm_mmap_pgoff+0x183/0x2d0 [ 234.461890][ T9158] ksys_mmap_pgoff+0xc1/0x310 [ 234.461916][ T9158] ? __x64_sys_mmap+0x49/0x70 [ 234.461935][ T9158] x64_sys_call+0x14df/0x3020 [ 234.461962][ T9158] do_syscall_64+0x12c/0x370 [ 234.461989][ T9158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.462017][ T9158] RIP: 0033:0x7f59f724c819 [ 234.462034][ T9158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.462052][ T9158] RSP: 002b:00007f59f5c9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 234.462074][ T9158] RAX: ffffffffffffffda RBX: 00007f59f74c5fa0 RCX: 00007f59f724c819 [ 234.462088][ T9158] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000200000a95000 [ 234.462101][ T9158] RBP: 00007f59f5c9f090 R08: ffffffffffffffff R09: 0000000080000000 [ 234.462115][ T9158] R10: 0000000000008872 R11: 0000000000000246 R12: 0000000000000001 [ 234.462128][ T9158] R13: 00007f59f74c6038 R14: 00007f59f74c5fa0 R15: 00007ffd83e40098 [ 234.462147][ T9158] [ 234.600271][ T3541] IPVS: starting estimator thread 0... [ 234.601817][ T9161] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1751'. [ 234.685699][ T9171] loop2: detected capacity change from 0 to 512 [ 234.726937][ T9171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.748212][ T9171] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.806183][ T9184] loop1: detected capacity change from 0 to 512 [ 234.816106][ T9184] EXT4-fs: Ignoring removed bh option [ 234.821618][ T9168] IPVS: using max 2544 ests per chain, 127200 per kthread [ 234.832833][ T9184] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 234.845783][ T9184] EXT4-fs (loop1): 1 truncate cleaned up [ 234.852365][ T9184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.959270][ T9192] Invalid ELF header magic: != ELF [ 235.008734][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.056914][ T9195] bridge2: entered promiscuous mode [ 235.062931][ T9195] bridge2: entered allmulticast mode [ 235.324920][ T9205] loop5: detected capacity change from 0 to 1764 [ 235.372434][ T9207] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1770'. [ 235.381602][ T9207] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1770'. [ 235.390638][ T9207] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1770'. [ 235.438527][ T9210] FAULT_INJECTION: forcing a failure. [ 235.438527][ T9210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.451956][ T9210] CPU: 1 UID: 0 PID: 9210 Comm: syz.5.1771 Tainted: G W syzkaller #0 PREEMPT(full) [ 235.452050][ T9210] Tainted: [W]=WARN [ 235.452058][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.452071][ T9210] Call Trace: [ 235.452078][ T9210] [ 235.452086][ T9210] __dump_stack+0x1d/0x30 [ 235.452105][ T9210] dump_stack_lvl+0x95/0xd0 [ 235.452180][ T9210] dump_stack+0x15/0x1b [ 235.452194][ T9210] should_fail_ex+0x263/0x280 [ 235.452213][ T9210] should_fail+0xb/0x20 [ 235.452229][ T9210] should_fail_usercopy+0x1a/0x20 [ 235.452333][ T9210] _copy_to_user+0x20/0xa0 [ 235.452378][ T9210] simple_read_from_buffer+0xb5/0x130 [ 235.452394][ T9210] proc_fail_nth_read+0x10e/0x150 [ 235.452435][ T9210] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.452475][ T9210] vfs_read+0x1ab/0x7f0 [ 235.452488][ T9210] ? __rcu_read_unlock+0x4e/0x70 [ 235.452502][ T9210] ? __fget_files+0x184/0x1c0 [ 235.452519][ T9210] ? mutex_lock+0x57/0x90 [ 235.452535][ T9210] ksys_read+0xdc/0x1a0 [ 235.452555][ T9210] __x64_sys_read+0x40/0x50 [ 235.452568][ T9210] x64_sys_call+0x2886/0x3020 [ 235.452586][ T9210] do_syscall_64+0x12c/0x370 [ 235.452653][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.452668][ T9210] RIP: 0033:0x7f8cd889d04e [ 235.452680][ T9210] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.452755][ T9210] RSP: 002b:00007f8cd7336fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.452771][ T9210] RAX: ffffffffffffffda RBX: 00007f8cd73376c0 RCX: 00007f8cd889d04e [ 235.452781][ T9210] RDX: 000000000000000f RSI: 00007f8cd73370a0 RDI: 0000000000000004 [ 235.452834][ T9210] RBP: 00007f8cd7337090 R08: 0000000000000000 R09: 0000000000000000 [ 235.452843][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.452913][ T9210] R13: 00007f8cd8b56038 R14: 00007f8cd8b55fa0 R15: 00007fff0518c4d8 [ 235.452933][ T9210] [ 235.763794][ T9219] netlink: 'syz.5.1775': attribute type 10 has an invalid length. [ 235.773115][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.782144][ T9219] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1775'. [ 235.794473][ T9219] ipvlan3: entered promiscuous mode [ 235.813223][ T9228] FAULT_INJECTION: forcing a failure. [ 235.813223][ T9228] name failslab, interval 1, probability 0, space 0, times 0 [ 235.817991][ T9219] bridge0: port 3(ipvlan3) entered blocking state [ 235.826217][ T9228] CPU: 1 UID: 0 PID: 9228 Comm: syz.1.1777 Tainted: G W syzkaller #0 PREEMPT(full) [ 235.826249][ T9228] Tainted: [W]=WARN [ 235.826256][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.826346][ T9228] Call Trace: [ 235.826425][ T9228] [ 235.826434][ T9228] __dump_stack+0x1d/0x30 [ 235.826543][ T9228] dump_stack_lvl+0x95/0xd0 [ 235.826567][ T9228] dump_stack+0x15/0x1b [ 235.826590][ T9228] should_fail_ex+0x263/0x280 [ 235.826618][ T9228] should_failslab+0x8c/0xb0 [ 235.826666][ T9228] kmem_cache_alloc_noprof+0x66/0x400 [ 235.826690][ T9228] ? alloc_empty_file+0x76/0x200 [ 235.826718][ T9228] alloc_empty_file+0x76/0x200 [ 235.826861][ T9228] path_openat+0x65/0x2050 [ 235.826881][ T9228] ? _parse_integer_limit+0x170/0x190 [ 235.826908][ T9228] ? _parse_integer+0x27/0x40 [ 235.826931][ T9228] ? kstrtoull+0x111/0x140 [ 235.826966][ T9228] ? kstrtouint+0x76/0xc0 [ 235.826991][ T9228] do_file_open+0x16c/0x290 [ 235.827036][ T9228] do_sys_openat2+0x94/0x130 [ 235.827114][ T9228] __x64_sys_openat+0xf2/0x120 [ 235.827144][ T9228] x64_sys_call+0x1e39/0x3020 [ 235.827172][ T9228] do_syscall_64+0x12c/0x370 [ 235.827199][ T9228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.827229][ T9228] RIP: 0033:0x7f63e91ad04e [ 235.827246][ T9228] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.827265][ T9228] RSP: 002b:00007f63e7c46ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.827288][ T9228] RAX: ffffffffffffffda RBX: 00007f63e7c476c0 RCX: 00007f63e91ad04e [ 235.827304][ T9228] RDX: 0000000000000002 RSI: 00007f63e7c46f90 RDI: ffffffffffffff9c [ 235.827348][ T9228] RBP: 00007f63e7c47090 R08: 0000000000000000 R09: 0000000000000000 [ 235.827362][ T9228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.827379][ T9228] R13: 00007f63e9466038 R14: 00007f63e9465fa0 R15: 00007ffd6ac2eee8 [ 235.827399][ T9228] [ 236.030309][ T9219] bridge0: port 3(ipvlan3) entered disabled state [ 236.037037][ T9219] ipvlan3: entered allmulticast mode [ 236.042465][ T9219] bridge0: entered allmulticast mode [ 236.048343][ T9219] ipvlan3: left allmulticast mode [ 236.053503][ T9219] bridge0: left allmulticast mode [ 236.079702][ T9234] FAULT_INJECTION: forcing a failure. [ 236.079702][ T9234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.080044][ T3407] hid_parser_main: 9 callbacks suppressed [ 236.080062][ T3407] hid-generic 0000:0000:000E.0005: unknown main item tag 0x0 [ 236.109973][ T3407] hid-generic 0000:0000:000E.0005: unknown main item tag 0x0 [ 236.120622][ T3407] hid-generic 0000:0000:000E.0005: unknown main item tag 0x0 [ 236.125100][ T9234] CPU: 0 UID: 0 PID: 9234 Comm: syz.1.1779 Tainted: G W syzkaller #0 PREEMPT(full) [ 236.125134][ T9234] Tainted: [W]=WARN [ 236.125142][ T9234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.125154][ T9234] Call Trace: [ 236.125161][ T9234] [ 236.125169][ T9234] __dump_stack+0x1d/0x30 [ 236.125248][ T9234] dump_stack_lvl+0x95/0xd0 [ 236.125272][ T9234] dump_stack+0x15/0x1b [ 236.125351][ T9234] should_fail_ex+0x263/0x280 [ 236.125399][ T9234] should_fail+0xb/0x20 [ 236.125422][ T9234] should_fail_usercopy+0x1a/0x20 [ 236.125454][ T9234] _copy_from_user+0x1c/0xb0 [ 236.125486][ T9234] uhid_char_write+0xee/0x650 [ 236.125517][ T9234] ? __pfx_uhid_char_write+0x10/0x10 [ 236.125549][ T9234] vfs_write+0x269/0x9f0 [ 236.125569][ T9234] ? __rcu_read_unlock+0x4e/0x70 [ 236.125593][ T9234] ? __fget_files+0x184/0x1c0 [ 236.125622][ T9234] ksys_write+0xdc/0x1a0 [ 236.125642][ T9234] __x64_sys_write+0x40/0x50 [ 236.125757][ T9234] x64_sys_call+0x27e1/0x3020 [ 236.125797][ T9234] do_syscall_64+0x12c/0x370 [ 236.125825][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.125848][ T9234] RIP: 0033:0x7f63e91ec819 [ 236.125865][ T9234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.125883][ T9234] RSP: 002b:00007f63e7c47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.125916][ T9234] RAX: ffffffffffffffda RBX: 00007f63e9465fa0 RCX: 00007f63e91ec819 [ 236.125931][ T9234] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 236.125954][ T9234] RBP: 00007f63e7c47090 R08: 0000000000000000 R09: 0000000000000000 [ 236.125967][ T9234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.126003][ T9234] R13: 00007f63e9466038 R14: 00007f63e9465fa0 R15: 00007ffd6ac2eee8 [ 236.126142][ T9234] [ 236.316387][ T3407] hid-generic 0000:0000:000E.0005: unknown main item tag 0x0 [ 236.324105][ T3407] hid-generic 0000:0000:000E.0005: unknown main item tag 0x0 [ 236.331679][ T3407] hid-generic 0000:0000:000E.0005: unknown main item tag 0x0 [ 236.339256][ T3407] hid-generic 0000:0000:000E.0005: unknown main item tag 0x0 [ 236.346837][ T3407] hid-generic 0000:0000:000E.0005: unknown main item tag 0x0 [ 236.354359][ T3407] hid-generic 0000:0000:000E.0005: unknown main item tag 0x0 [ 236.367903][ T9239] __nla_validate_parse: 2 callbacks suppressed [ 236.367920][ T9239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 236.378337][ T3407] hid-generic 0000:0000:000E.0005: unknown main item tag 0x0 [ 236.383322][ T9239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 236.399935][ T9239] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1781'. [ 236.401790][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'. [ 236.462525][ T3407] hid-generic 0000:0000:000E.0005: hidraw0: HID v2000.00 Device [syz0] on syz0 [ 236.524740][ T9253] fido_id[9253]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 236.552987][ T28] audit: type=1400 audit(1775221937.288:2871): avc: denied { mount } for pid=9257 comm="syz.2.1785" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 236.576018][ T28] audit: type=1400 audit(1775221937.288:2872): avc: denied { unmount } for pid=9257 comm="syz.2.1785" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 236.627658][ T9263] loop2: detected capacity change from 0 to 512 [ 236.637427][ T9263] EXT4-fs: Ignoring removed bh option [ 236.648554][ T9263] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 236.661228][ T9263] EXT4-fs (loop2): 1 truncate cleaned up [ 236.667465][ T9263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.719793][ T9266] loop1: detected capacity change from 0 to 1024 [ 236.742555][ T9266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 236.753693][ T9266] System zones: 0-1, 3-36 [ 236.758676][ T9266] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1789: bad orphan inode 134217728 [ 236.770231][ T9266] loop1: lost filesystem error report for type 5 error -117 [ 236.770731][ T9266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.800934][ T9275] netlink: 'syz.3.1792': attribute type 10 has an invalid length. [ 236.813829][ T9275] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1792'. [ 236.836264][ T9275] ipvlan3: entered promiscuous mode [ 236.849917][ T9275] bridge0: port 2(ipvlan3) entered blocking state [ 236.856789][ T9275] bridge0: port 2(ipvlan3) entered disabled state [ 236.863758][ T9275] ipvlan3: entered allmulticast mode [ 236.869113][ T9275] bridge0: entered allmulticast mode [ 236.875072][ T9275] ipvlan3: left allmulticast mode [ 236.880197][ T9275] bridge0: left allmulticast mode [ 236.986431][ T9281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1793'. [ 236.995662][ T9281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1793'. [ 237.004631][ T9281] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1793'. [ 237.163706][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1794'. [ 237.409728][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.419732][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.456925][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.624819][ T9294] loop2: detected capacity change from 0 to 512 [ 237.646100][ T9294] EXT4-fs (loop2): failed to initialize system zone (-117) [ 237.658135][ T9294] EXT4-fs (loop2): mount failed [ 237.709140][ T9301] FAULT_INJECTION: forcing a failure. [ 237.709140][ T9301] name failslab, interval 1, probability 0, space 0, times 0 [ 237.752584][ T9301] CPU: 0 UID: 0 PID: 9301 Comm: syz.0.1800 Tainted: G W syzkaller #0 PREEMPT(full) [ 237.752686][ T9301] Tainted: [W]=WARN [ 237.752695][ T9301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.752712][ T9301] Call Trace: [ 237.752721][ T9301] [ 237.752729][ T9301] __dump_stack+0x1d/0x30 [ 237.752762][ T9301] dump_stack_lvl+0x95/0xd0 [ 237.752787][ T9301] dump_stack+0x15/0x1b [ 237.752809][ T9301] should_fail_ex+0x263/0x280 [ 237.752877][ T9301] should_failslab+0x8c/0xb0 [ 237.752936][ T9301] kmem_cache_alloc_noprof+0x66/0x400 [ 237.752968][ T9301] ? do_getname+0x2e/0x1c0 [ 237.752990][ T9301] ? mutex_lock+0x57/0x90 [ 237.753018][ T9301] do_getname+0x2e/0x1c0 [ 237.753046][ T9301] __se_sys_mknodat+0x24/0xf0 [ 237.753072][ T9301] __x64_sys_mknodat+0x55/0x70 [ 237.753094][ T9301] x64_sys_call+0x312/0x3020 [ 237.753198][ T9301] do_syscall_64+0x12c/0x370 [ 237.753299][ T9301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.753327][ T9301] RIP: 0033:0x7f82899fc819 [ 237.753347][ T9301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.753424][ T9301] RSP: 002b:00007f828844f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 237.753449][ T9301] RAX: ffffffffffffffda RBX: 00007f8289c75fa0 RCX: 00007f82899fc819 [ 237.753463][ T9301] RDX: 0000000000000040 RSI: 0000000000000000 RDI: ffffffffffffffff [ 237.753476][ T9301] RBP: 00007f828844f090 R08: 0000000000000000 R09: 0000000000000000 [ 237.753536][ T9301] R10: 0000000000000701 R11: 0000000000000246 R12: 0000000000000001 [ 237.753552][ T9301] R13: 00007f8289c76038 R14: 00007f8289c75fa0 R15: 00007ffff59c59d8 [ 237.753593][ T9301] [ 237.854745][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 237.983551][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.062936][ T9313] netlink: 'syz.2.1803': attribute type 10 has an invalid length. [ 238.076328][ T9313] ipvlan0: entered promiscuous mode [ 238.082535][ T9313] bridge0: port 1(ipvlan0) entered blocking state [ 238.089281][ T9313] bridge0: port 1(ipvlan0) entered disabled state [ 238.096218][ T9313] ipvlan0: entered allmulticast mode [ 238.101934][ T9313] bridge0: entered allmulticast mode [ 238.107788][ T9313] ipvlan0: left allmulticast mode [ 238.113105][ T9313] bridge0: left allmulticast mode [ 238.201805][ T9319] 9pnet_fd: Insufficient options for proto=fd [ 238.350647][ T28] audit: type=1400 audit(1775221939.078:2873): avc: denied { create } for pid=9321 comm="syz.2.1806" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 238.359449][ T28] audit: type=1400 audit(1775221939.098:2874): avc: denied { associate } for pid=9321 comm="syz.2.1806" name="memory.events" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 238.487592][ T9322] loop2: detected capacity change from 0 to 1024 [ 238.605657][ T28] audit: type=1400 audit(1775221939.098:2875): avc: denied { append open } for pid=9321 comm="syz.2.1806" path="/361/memory.events" dev="tmpfs" ino=1981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 238.635872][ T28] audit: type=1400 audit(1775221939.368:2876): avc: denied { create } for pid=9321 comm="syz.2.1806" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 238.729986][ T9322] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 238.831084][ T28] audit: type=1400 audit(1775221939.368:2877): avc: denied { mounton } for pid=9321 comm="syz.2.1806" path="/361/file0" dev="tmpfs" ino=1982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 238.832305][ T9322] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 238.962090][ T9322] EXT4-fs error (device loop2): ext4_get_journal_inode:5888: comm syz.2.1806: inode #4294967295: comm syz.2.1806: iget: illegal inode # [ 238.976405][ T9322] loop2: lost filesystem error report for type 5 error -117 [ 238.976574][ T9322] EXT4-fs (loop2): no journal found [ 238.983894][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 238.983928][ C0] EXT4-fs (loop2): initial error at time 1775221939: ext4_get_journal_inode:5888 [ 238.983961][ C0] EXT4-fs (loop2): last error at time 1775221939: ext4_get_journal_inode:5888 [ 239.030389][ T9322] EXT4-fs (loop2): can't get journal size [ 239.041115][ T9322] EXT4-fs (loop2): failed to initialize system zone (-22) [ 239.048351][ T9322] EXT4-fs (loop2): mount failed [ 239.129410][ T9338] FAULT_INJECTION: forcing a failure. [ 239.129410][ T9338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.143907][ T9338] CPU: 0 UID: 0 PID: 9338 Comm: syz.1.1812 Tainted: G W syzkaller #0 PREEMPT(full) [ 239.144014][ T9338] Tainted: [W]=WARN [ 239.144023][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.144037][ T9338] Call Trace: [ 239.144045][ T9338] [ 239.144054][ T9338] __dump_stack+0x1d/0x30 [ 239.144148][ T9338] dump_stack_lvl+0x95/0xd0 [ 239.144171][ T9338] dump_stack+0x15/0x1b [ 239.144202][ T9338] should_fail_ex+0x263/0x280 [ 239.144281][ T9338] should_fail+0xb/0x20 [ 239.144303][ T9338] should_fail_usercopy+0x1a/0x20 [ 239.144378][ T9338] _copy_to_user+0x20/0xa0 [ 239.144464][ T9338] simple_read_from_buffer+0xb5/0x130 [ 239.144498][ T9338] proc_fail_nth_read+0x10e/0x150 [ 239.144531][ T9338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.144590][ T9338] vfs_read+0x1ab/0x7f0 [ 239.144613][ T9338] ? __rcu_read_unlock+0x4e/0x70 [ 239.144638][ T9338] ? __fget_files+0x184/0x1c0 [ 239.144662][ T9338] ? mutex_lock+0x57/0x90 [ 239.144682][ T9338] ksys_read+0xdc/0x1a0 [ 239.144702][ T9338] __x64_sys_read+0x40/0x50 [ 239.144722][ T9338] x64_sys_call+0x2886/0x3020 [ 239.144747][ T9338] do_syscall_64+0x12c/0x370 [ 239.144773][ T9338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.144870][ T9338] RIP: 0033:0x7f63e91ad04e [ 239.144918][ T9338] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 239.144935][ T9338] RSP: 002b:00007f63e7c46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.144956][ T9338] RAX: ffffffffffffffda RBX: 00007f63e7c476c0 RCX: 00007f63e91ad04e [ 239.144972][ T9338] RDX: 000000000000000f RSI: 00007f63e7c470a0 RDI: 0000000000000004 [ 239.145007][ T9338] RBP: 00007f63e7c47090 R08: 0000000000000000 R09: 0000000000000000 [ 239.145019][ T9338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.145031][ T9338] R13: 00007f63e9466038 R14: 00007f63e9465fa0 R15: 00007ffd6ac2eee8 [ 239.145049][ T9338] [ 239.394671][ T9347] loop1: detected capacity change from 0 to 2048 [ 239.408771][ T9343] loop5: detected capacity change from 0 to 512 [ 239.417007][ T9343] EXT4-fs: inline encryption not supported [ 239.423796][ T9343] EXT4-fs: Ignoring removed i_version option [ 239.435058][ T28] audit: type=1400 audit(1775221940.168:2878): avc: denied { rmdir } for pid=3321 comm="syz-executor" name="file0" dev="tmpfs" ino=1982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 239.443318][ T9349] netlink: 'syz.3.1816': attribute type 10 has an invalid length. [ 239.544829][ T9343] EXT4-fs (loop5): 1 orphan inode deleted [ 239.546433][ T28] audit: type=1400 audit(1775221940.278:2879): avc: denied { unlink } for pid=3321 comm="syz-executor" name="memory.events" dev="tmpfs" ino=1981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 239.554769][ T3305] loop1: p2 p3 p7 [ 239.571560][ T9343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.669995][ T9349] ipvlan3: entered promiscuous mode [ 239.693936][ T9386] xt_policy: output policy not valid in PREROUTING and INPUT [ 239.812106][ T9347] loop1: p2 p3 p7 [ 239.818647][ T9386] tc_dump_action: action bad kind [ 239.829706][ T3000] loop1: p2 p3 p7 [ 240.057136][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.090596][ T9393] xt_policy: output policy not valid in PREROUTING and INPUT [ 240.125473][ T3738] udevd[3738]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 240.135360][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 240.161347][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 240.346982][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 240.365864][ T3738] udevd[3738]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 240.379411][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 240.696063][ T9396] tc_dump_action: action bad kind [ 241.870614][ T9419] random: crng reseeded on system resumption [ 241.889477][ T9419] Unrecognized hibernate image header format! [ 241.899137][ T9419] PM: hibernation: Image mismatch: architecture specific data [ 241.978479][ T9434] netlink: 'syz.0.1830': attribute type 10 has an invalid length. [ 241.989115][ T9434] __nla_validate_parse: 11 callbacks suppressed [ 241.989133][ T9434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1830'. [ 242.011987][ T9431] xt_policy: output policy not valid in PREROUTING and INPUT [ 242.028329][ T9423] bridge3: entered promiscuous mode [ 242.037682][ T9423] bridge3: entered allmulticast mode [ 242.055923][ T9434] ipvlan3: entered promiscuous mode [ 242.080466][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'. [ 242.118579][ T9431] tc_dump_action: action bad kind [ 242.238575][ T9449] netlink: 'syz.0.1840': attribute type 41 has an invalid length. [ 242.293120][ T9450] loop5: detected capacity change from 0 to 512 [ 242.335526][ T9450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.348498][ T9450] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.378645][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1841'. [ 242.396830][ T9456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1841'. [ 242.415024][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1841'. [ 242.424471][ T9456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1841'. [ 242.433862][ T9456] netlink: 'syz.0.1841': attribute type 6 has an invalid length. [ 242.838568][ T9468] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1845'. [ 242.904868][ T9470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1846'. [ 242.914038][ T9470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1846'. [ 242.923138][ T9470] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1846'. [ 242.933766][ T9471] program syz.1.1844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.323048][ T9478] netlink: 'syz.3.1849': attribute type 10 has an invalid length. [ 243.323651][ T9475] netlink: 'syz.0.1848': attribute type 10 has an invalid length. [ 243.345611][ T9475] ipvlan3: entered promiscuous mode [ 243.367718][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.625068][ T28] audit: type=1400 audit(1775221944.358:2880): avc: denied { read } for pid=9490 comm="syz.1.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.687773][ T9493] loop1: detected capacity change from 0 to 512 [ 243.699923][ T9493] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 243.853610][ T9503] loop2: detected capacity change from 0 to 128 [ 243.867110][ T9503] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 243.977900][ T9503] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 244.213013][ T9512] loop2: detected capacity change from 0 to 512 [ 244.243621][ T9514] ipvlan3: entered promiscuous mode [ 244.249204][ T9512] EXT4-fs (loop2): failed to initialize system zone (-117) [ 244.258463][ T9512] EXT4-fs (loop2): mount failed [ 246.304951][ T9529] 9pnet_fd: Insufficient options for proto=fd [ 246.629725][ T9532] program syz.1.1865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.648972][ T9541] xt_policy: output policy not valid in PREROUTING and INPUT [ 246.748279][ T9541] tc_dump_action: action bad kind [ 246.760288][ T28] audit: type=1400 audit(1775221947.488:2881): avc: denied { cpu } for pid=9544 comm="syz.3.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 246.835427][ T9553] ipvlan3: entered promiscuous mode [ 247.073328][ T9571] 9pnet_fd: Insufficient options for proto=fd [ 247.204308][ T9573] loop5: detected capacity change from 0 to 256 [ 247.468071][ T9573] FAT-fs (loop5): Directory bread(block 64) failed [ 247.474910][ T9573] FAT-fs (loop5): Directory bread(block 65) failed [ 247.481819][ T9573] FAT-fs (loop5): Directory bread(block 66) failed [ 247.488504][ T9573] FAT-fs (loop5): Directory bread(block 67) failed [ 247.495383][ T9573] FAT-fs (loop5): Directory bread(block 68) failed [ 247.501958][ T9573] FAT-fs (loop5): Directory bread(block 69) failed [ 247.508556][ T9573] FAT-fs (loop5): Directory bread(block 70) failed [ 247.515194][ T9573] FAT-fs (loop5): Directory bread(block 71) failed [ 247.522021][ T9573] FAT-fs (loop5): Directory bread(block 72) failed [ 247.528593][ T9573] FAT-fs (loop5): Directory bread(block 73) failed [ 248.470778][ T9581] __nla_validate_parse: 10 callbacks suppressed [ 248.470797][ T9581] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1881'. [ 248.939594][ T9585] loop2: detected capacity change from 0 to 1024 [ 249.098563][ T9585] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 249.123310][ T9585] System zones: 0-1, 3-36 [ 249.172098][ T9585] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1883: bad orphan inode 134217728 [ 249.193700][ T9585] loop2: lost filesystem error report for type 5 error -117 [ 249.249160][ T9585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.450406][ T9608] loop1: detected capacity change from 0 to 512 [ 249.495805][ T9608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.521342][ T9608] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.542135][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1890'. [ 249.553715][ T9607] tc_dump_action: action bad kind [ 249.662472][ T9619] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1892'. [ 249.885767][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.916017][ T9622] bridge6: entered promiscuous mode [ 249.951357][ T9622] bridge6: entered allmulticast mode [ 250.514576][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.058745][ T9647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1901'. [ 251.068004][ T9647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1901'. [ 251.077074][ T9647] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1901'. [ 251.098578][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1900'. [ 251.128590][ T9644] ipvlan4: entered promiscuous mode [ 251.157620][ T9652] loop5: detected capacity change from 0 to 1024 [ 251.190735][ T9657] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1904'. [ 251.212273][ T9652] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 251.221870][ T9652] System zones: 0-1, 3-36 [ 251.229728][ T9652] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1902: bad orphan inode 134217728 [ 251.252875][ T9652] loop5: lost filesystem error report for type 5 error -117 [ 251.268234][ T9662] Invalid ELF header magic: != ELF [ 251.275606][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 251.275650][ C0] EXT4-fs (loop5): initial error at time 1775221951: ext4_orphan_get:1423 [ 251.275675][ C0] EXT4-fs (loop5): last error at time 1775221951: ext4_orphan_get:1423 [ 251.307014][ T9652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.339968][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 251.408621][ T9666] tc_dump_action: action bad kind [ 251.807416][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.041900][ T28] audit: type=1326 audit(1775221952.778:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.5.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd88dc819 code=0x7ffc0000 [ 252.089988][ T9688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1913'. [ 252.116468][ T28] audit: type=1326 audit(1775221952.778:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.5.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd88dc819 code=0x7ffc0000 [ 252.170996][ T28] audit: type=1326 audit(1775221952.778:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.5.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cd88dc819 code=0x7ffc0000 [ 252.210993][ T28] audit: type=1326 audit(1775221952.778:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.5.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd88dc819 code=0x7ffc0000 [ 252.245788][ T9695] batman_adv: batadv0: Adding interface: dummy0 [ 252.258222][ T9695] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.287893][ T9695] batman_adv: batadv0: Interface activated: dummy0 [ 252.398288][ T9700] loop2: detected capacity change from 0 to 256 [ 252.433263][ T9684] batadv0: mtu less than device minimum [ 252.447931][ T9684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.466819][ T9684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.483921][ T9684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.502421][ T9684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.519360][ T9684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.537380][ T9684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.555539][ T9684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.575127][ T9684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.593788][ T9684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.739161][ T9700] FAT-fs (loop2): Directory bread(block 64) failed [ 252.745975][ T9700] FAT-fs (loop2): Directory bread(block 65) failed [ 252.752866][ T9700] FAT-fs (loop2): Directory bread(block 66) failed [ 252.759490][ T9700] FAT-fs (loop2): Directory bread(block 67) failed [ 252.766535][ T9700] FAT-fs (loop2): Directory bread(block 68) failed [ 252.773206][ T9700] FAT-fs (loop2): Directory bread(block 69) failed [ 252.780142][ T9700] FAT-fs (loop2): Directory bread(block 70) failed [ 252.786774][ T9700] FAT-fs (loop2): Directory bread(block 71) failed [ 252.793658][ T9700] FAT-fs (loop2): Directory bread(block 72) failed [ 252.800277][ T9700] FAT-fs (loop2): Directory bread(block 73) failed [ 252.863053][ T28] audit: type=1326 audit(1775221952.778:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.5.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd88dc819 code=0x7ffc0000 [ 253.059175][ T28] audit: type=1326 audit(1775221952.778:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.5.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cd88dc819 code=0x7ffc0000 [ 253.130354][ T28] audit: type=1326 audit(1775221952.778:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.5.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd88dc819 code=0x7ffc0000 [ 253.203576][ T28] audit: type=1326 audit(1775221952.778:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.5.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd88dc819 code=0x7ffc0000 [ 253.250190][ T9701] bridge7: entered promiscuous mode [ 253.260072][ T9701] bridge7: entered allmulticast mode [ 253.290877][ T9709] xt_policy: output policy not valid in PREROUTING and INPUT [ 253.306592][ T28] audit: type=1326 audit(1775221952.778:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.5.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8cd88dc819 code=0x7ffc0000 [ 253.399872][ T28] audit: type=1326 audit(1775221952.778:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.5.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd88dc819 code=0x7ffc0000 [ 253.769323][ T9716] __nla_validate_parse: 5 callbacks suppressed [ 253.769344][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'. [ 253.819045][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'. [ 253.924324][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1926'. [ 253.983708][ T9746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1931'. [ 253.992869][ T9746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1931'. [ 254.002165][ T9746] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1931'. [ 254.131695][ T9751] bridge8: entered promiscuous mode [ 254.138265][ T9751] bridge8: entered allmulticast mode [ 255.246808][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1936'. [ 255.986935][ T9783] loop2: detected capacity change from 0 to 256 [ 256.059690][ T9783] FAT-fs (loop2): Directory bread(block 64) failed [ 256.066439][ T9783] FAT-fs (loop2): Directory bread(block 65) failed [ 256.073147][ T9783] FAT-fs (loop2): Directory bread(block 66) failed [ 256.079686][ T9783] FAT-fs (loop2): Directory bread(block 67) failed [ 256.086371][ T9783] FAT-fs (loop2): Directory bread(block 68) failed [ 256.092903][ T9783] FAT-fs (loop2): Directory bread(block 69) failed [ 256.099471][ T9783] FAT-fs (loop2): Directory bread(block 70) failed [ 256.106077][ T9783] FAT-fs (loop2): Directory bread(block 71) failed [ 256.112718][ T9783] FAT-fs (loop2): Directory bread(block 72) failed [ 256.119295][ T9783] FAT-fs (loop2): Directory bread(block 73) failed [ 257.705855][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1944'. [ 258.078166][ T9811] net_ratelimit: 10 callbacks suppressed [ 258.078185][ T9811] netlink: get zone limit has 8 unknown bytes [ 258.199050][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1952'. [ 258.208433][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1952'. [ 258.268586][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 258.268604][ T28] audit: type=1326 audit(1775221958.998:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.1.1955" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63e91ec819 code=0x0 [ 258.309802][ T9831] loop5: detected capacity change from 0 to 512 [ 258.538704][ T9838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.569222][ T9831] EXT4-fs (loop5): failed to initialize system zone (-117) [ 258.581608][ T9831] EXT4-fs (loop5): mount failed [ 258.907716][ T9825] __nla_validate_parse: 3 callbacks suppressed [ 258.907736][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1953'. [ 258.975922][ T9847] xt_policy: output policy not valid in PREROUTING and INPUT [ 259.002416][ T9847] batman_adv: batadv0: Interface deactivated: dummy0 [ 259.086982][ T9851] loop2: detected capacity change from 0 to 2048 [ 259.194259][ T9851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.207728][ T9874] program syz.1.1964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.648408][ T28] audit: type=1400 audit(1775221960.378:2910): avc: denied { read } for pid=9850 comm="syz.2.1958" path="socket:[29594]" dev="sockfs" ino=29594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 260.426264][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.479721][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1968'. [ 260.549793][ T9913] loop5: detected capacity change from 0 to 256 [ 260.605127][ T9917] FAULT_INJECTION: forcing a failure. [ 260.605127][ T9917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.641701][ T28] audit: type=1400 audit(1775221961.368:2911): avc: denied { map } for pid=9918 comm="syz.2.1973" path="socket:[29653]" dev="sockfs" ino=29653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 260.650729][ T9917] CPU: 0 UID: 0 PID: 9917 Comm: syz.0.1972 Tainted: G W syzkaller #0 PREEMPT(full) [ 260.650778][ T9917] Tainted: [W]=WARN [ 260.650786][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.650798][ T9917] Call Trace: [ 260.650841][ T9917] [ 260.650849][ T9917] __dump_stack+0x1d/0x30 [ 260.650878][ T9917] dump_stack_lvl+0x95/0xd0 [ 260.650977][ T9917] dump_stack+0x15/0x1b [ 260.650999][ T9917] should_fail_ex+0x263/0x280 [ 260.651035][ T9917] should_fail+0xb/0x20 [ 260.651059][ T9917] should_fail_usercopy+0x1a/0x20 [ 260.651168][ T9917] _copy_to_user+0x20/0xa0 [ 260.651200][ T9917] simple_read_from_buffer+0xb5/0x130 [ 260.651225][ T9917] proc_fail_nth_read+0x10e/0x150 [ 260.651333][ T9917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.651407][ T9917] vfs_read+0x1ab/0x7f0 [ 260.651426][ T9917] ? __rcu_read_unlock+0x4e/0x70 [ 260.651449][ T9917] ? __fget_files+0x184/0x1c0 [ 260.651523][ T9917] ? inode_to_bdi+0x47/0xa0 [ 260.651544][ T9917] ? mutex_lock+0x57/0x90 [ 260.651564][ T9917] ksys_read+0xdc/0x1a0 [ 260.651608][ T9917] __x64_sys_read+0x40/0x50 [ 260.651673][ T9917] x64_sys_call+0x2886/0x3020 [ 260.651736][ T9917] do_syscall_64+0x12c/0x370 [ 260.651763][ T9917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.651786][ T9917] RIP: 0033:0x7f82899bd04e [ 260.651803][ T9917] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.651821][ T9917] RSP: 002b:00007f828844efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.651900][ T9917] RAX: ffffffffffffffda RBX: 00007f828844f6c0 RCX: 00007f82899bd04e [ 260.651916][ T9917] RDX: 000000000000000f RSI: 00007f828844f0a0 RDI: 0000000000000006 [ 260.651929][ T9917] RBP: 00007f828844f090 R08: 0000000000000000 R09: 0000000000000000 [ 260.651943][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.651956][ T9917] R13: 00007f8289c76038 R14: 00007f8289c75fa0 R15: 00007ffff59c59d8 [ 260.652014][ T9917] [ 260.871036][ T28] audit: type=1400 audit(1775221961.378:2912): avc: denied { accept } for pid=9918 comm="syz.2.1973" path="socket:[29653]" dev="sockfs" ino=29653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 260.907615][ T28] audit: type=1400 audit(1775221961.408:2913): avc: denied { name_bind } for pid=9918 comm="syz.2.1973" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 260.947065][ T9933] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1978'. [ 261.079693][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1981'. [ 261.101397][ T9941] loop2: detected capacity change from 0 to 512 [ 261.134853][ T9941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.147933][ T9941] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.190093][ T9937] bridge7: entered promiscuous mode [ 261.197777][ T9937] bridge7: entered allmulticast mode [ 261.222009][ T9949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1982'. [ 261.253251][ T9949] geneve2: entered promiscuous mode [ 261.285647][ T9379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.294700][ T9379] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.354178][ T9379] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.369533][ T9379] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.598977][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1983'. [ 261.837920][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'. [ 261.887139][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.062581][ T9977] Invalid ELF header magic: != ELF [ 262.099138][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'. [ 262.108990][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 263.085857][T10007] loop5: detected capacity change from 0 to 512 [ 263.184470][T10007] EXT4-fs (loop5): failed to initialize system zone (-117) [ 263.192768][T10007] EXT4-fs (loop5): mount failed [ 263.264140][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1998'. [ 263.292371][T10013] xt_hashlimit: size too large, truncated to 1048576 [ 263.299217][T10013] xt_hashlimit: max too large, truncated to 1048576 [ 263.318282][T10011] tc_dump_action: action bad kind [ 263.518375][T10045] Invalid ELF header magic: != ELF [ 263.597733][T10054] team0: Mode changed to "activebackup" [ 263.764132][T10061] FAULT_INJECTION: forcing a failure. [ 263.764132][T10061] name failslab, interval 1, probability 0, space 0, times 0 [ 263.782040][T10061] CPU: 0 UID: 0 PID: 10061 Comm: syz.2.2010 Tainted: G W syzkaller #0 PREEMPT(full) [ 263.782074][T10061] Tainted: [W]=WARN [ 263.782096][T10061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.782146][T10061] Call Trace: [ 263.782153][T10061] [ 263.782163][T10061] __dump_stack+0x1d/0x30 [ 263.782193][T10061] dump_stack_lvl+0x95/0xd0 [ 263.782244][T10061] dump_stack+0x15/0x1b [ 263.782271][T10061] should_fail_ex+0x263/0x280 [ 263.782370][T10061] ? device_add+0x88/0x770 [ 263.782393][T10061] should_failslab+0x8c/0xb0 [ 263.782414][T10061] __kmalloc_cache_noprof+0x5f/0x410 [ 263.782438][T10061] device_add+0x88/0x770 [ 263.782464][T10061] wakeup_source_sysfs_add+0x15a/0x1d0 [ 263.782622][T10061] wakeup_source_register+0xfd/0x240 [ 263.782643][T10061] ep_insert+0x82f/0xe00 [ 263.782685][T10061] do_epoll_ctl+0x686/0x8a0 [ 263.782721][T10061] __x64_sys_epoll_ctl+0xcb/0x100 [ 263.782806][T10061] x64_sys_call+0x2a8b/0x3020 [ 263.782832][T10061] do_syscall_64+0x12c/0x370 [ 263.782863][T10061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.782889][T10061] RIP: 0033:0x7f59f724c819 [ 263.782949][T10061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.782966][T10061] RSP: 002b:00007f59f5c9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 263.783066][T10061] RAX: ffffffffffffffda RBX: 00007f59f74c5fa0 RCX: 00007f59f724c819 [ 263.783148][T10061] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 263.783164][T10061] RBP: 00007f59f5c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 263.783178][T10061] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 263.783190][T10061] R13: 00007f59f74c6038 R14: 00007f59f74c5fa0 R15: 00007ffd83e40098 [ 263.783208][T10061] [ 263.980272][T10062] loop2: detected capacity change from 0 to 512 [ 264.353060][T10072] loop5: detected capacity change from 0 to 256 [ 264.388934][T10072] FAT-fs (loop5): codepage cp850 not found [ 264.483182][T10089] __nla_validate_parse: 4 callbacks suppressed [ 264.483443][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2021'. [ 264.500732][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2017'. [ 264.500909][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2021'. [ 264.524387][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2021'. [ 264.537063][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2021'. [ 264.548341][T10089] netlink: 'syz.5.2021': attribute type 6 has an invalid length. [ 264.571812][T10099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2022'. [ 265.760684][T10120] loop2: detected capacity change from 0 to 512 [ 265.957499][T10124] Invalid ELF header magic: != ELF [ 267.134494][T10139] loop2: detected capacity change from 0 to 256 [ 267.278549][T10139] FAT-fs (loop2): Directory bread(block 64) failed [ 267.285388][T10139] FAT-fs (loop2): Directory bread(block 65) failed [ 267.292133][T10139] FAT-fs (loop2): Directory bread(block 66) failed [ 267.298775][T10139] FAT-fs (loop2): Directory bread(block 67) failed [ 267.305579][T10139] FAT-fs (loop2): Directory bread(block 68) failed [ 267.312212][T10139] FAT-fs (loop2): Directory bread(block 69) failed [ 267.318992][T10139] FAT-fs (loop2): Directory bread(block 70) failed [ 267.325674][T10139] FAT-fs (loop2): Directory bread(block 71) failed [ 267.332357][T10139] FAT-fs (loop2): Directory bread(block 72) failed [ 267.339011][T10139] FAT-fs (loop2): Directory bread(block 73) failed [ 267.881224][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'. [ 271.203965][T10157] team0: No ports can be present during mode change [ 271.269202][T10164] Invalid ELF header magic: != ELF [ 271.295959][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'. [ 271.324357][T10165] tc_dump_action: action bad kind [ 271.347752][T10169] loop2: detected capacity change from 0 to 512 [ 271.385537][T10171] loop1: detected capacity change from 0 to 512 [ 271.404581][T10169] EXT4-fs (loop2): failed to initialize system zone (-117) [ 271.431524][T10171] EXT4-fs: Ignoring removed bh option [ 271.445039][T10169] EXT4-fs (loop2): mount failed [ 271.450604][T10171] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 271.483501][T10171] EXT4-fs (loop1): 1 truncate cleaned up [ 271.499787][T10171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.626760][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2045'. [ 271.870555][T10182] bridge4: entered promiscuous mode [ 271.890207][T10182] bridge4: entered allmulticast mode [ 271.962098][T10189] random: crng reseeded on system resumption [ 271.970003][T10189] Unrecognized hibernate image header format! [ 271.976280][T10189] PM: hibernation: Image mismatch: architecture specific data [ 272.325851][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.003844][T10203] team0: Unable to change to the same mode the team is in [ 274.067278][T10209] FAULT_INJECTION: forcing a failure. [ 274.067278][T10209] name failslab, interval 1, probability 0, space 0, times 0 [ 274.110540][T10209] CPU: 0 UID: 0 PID: 10209 Comm: syz.0.2056 Tainted: G W syzkaller #0 PREEMPT(full) [ 274.110622][T10209] Tainted: [W]=WARN [ 274.110640][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.110653][T10209] Call Trace: [ 274.110660][T10209] [ 274.110667][T10209] __dump_stack+0x1d/0x30 [ 274.110701][T10209] dump_stack_lvl+0x95/0xd0 [ 274.110727][T10209] dump_stack+0x15/0x1b [ 274.110748][T10209] should_fail_ex+0x263/0x280 [ 274.110849][T10209] ? alloc_fs_context+0x46/0x580 [ 274.110872][T10209] should_failslab+0x8c/0xb0 [ 274.110893][T10209] __kmalloc_cache_noprof+0x5f/0x410 [ 274.110992][T10209] alloc_fs_context+0x46/0x580 [ 274.111020][T10209] fs_context_for_mount+0x22/0x30 [ 274.111048][T10209] do_new_mount+0xe7/0x8d0 [ 274.111141][T10209] ? security_capable+0x7b/0x90 [ 274.111177][T10209] path_mount+0x4d0/0xbc0 [ 274.111202][T10209] __se_sys_mount+0x28c/0x2e0 [ 274.111232][T10209] ? fput+0x8f/0xc0 [ 274.111264][T10209] __x64_sys_mount+0x67/0x80 [ 274.111307][T10209] x64_sys_call+0x2d61/0x3020 [ 274.111332][T10209] do_syscall_64+0x12c/0x370 [ 274.111464][T10209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.111487][T10209] RIP: 0033:0x7f82899fc819 [ 274.111506][T10209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.111529][T10209] RSP: 002b:00007f828844f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 274.111555][T10209] RAX: ffffffffffffffda RBX: 00007f8289c75fa0 RCX: 00007f82899fc819 [ 274.111572][T10209] RDX: 0000200000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 274.111668][T10209] RBP: 00007f828844f090 R08: 00002000000001c0 R09: 0000000000000000 [ 274.111680][T10209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.111693][T10209] R13: 00007f8289c76038 R14: 00007f8289c75fa0 R15: 00007ffff59c59d8 [ 274.111749][T10209] [ 274.327958][T10211] loop2: detected capacity change from 0 to 1024 [ 274.412419][T10211] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 274.426234][T10211] System zones: 0-1, 3-36 [ 274.444277][T10211] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2057: bad orphan inode 134217728 [ 274.457273][T10211] loop2: lost filesystem error report for type 5 error -117 [ 274.483816][T10211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.673731][ T28] audit: type=1400 audit(1775221975.408:2914): avc: denied { ioctl } for pid=10200 comm="syz.1.2052" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31478 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 274.994872][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.235225][T10235] loop1: detected capacity change from 0 to 512 [ 275.275019][T10235] EXT4-fs (loop1): failed to initialize system zone (-117) [ 275.305887][T10235] EXT4-fs (loop1): mount failed [ 275.371068][ T28] audit: type=1400 audit(1775221976.098:2915): avc: denied { sys_module } for pid=10230 comm="syz.1.2062" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 275.452831][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2062'. [ 275.673370][T10246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51868 sclass=netlink_route_socket pid=10246 comm=syz.3.2065 [ 275.934098][T10243] bridge3: entered promiscuous mode [ 276.031566][T10243] bridge3: entered allmulticast mode [ 276.596800][T10262] team0: No ports can be present during mode change [ 276.604123][T10261] program syz.1.2069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.775233][ T28] audit: type=1400 audit(1775221977.508:2916): avc: denied { create } for pid=10269 comm="syz.3.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 276.841200][ T28] audit: type=1400 audit(1775221977.528:2917): avc: denied { connect } for pid=10269 comm="syz.3.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 276.883574][T10273] loop1: detected capacity change from 0 to 512 [ 276.931396][T10273] EXT4-fs (loop1): failed to initialize system zone (-117) [ 276.938671][T10273] EXT4-fs (loop1): mount failed [ 276.999591][ T28] audit: type=1400 audit(1775221977.728:2918): avc: denied { ioctl } for pid=10269 comm="syz.3.2073" path="socket:[30648]" dev="sockfs" ino=30648 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 277.043867][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2074'. [ 277.066621][ T28] audit: type=1400 audit(1775221977.728:2919): avc: denied { write } for pid=10269 comm="syz.3.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 277.636102][T10294] loop1: detected capacity change from 0 to 512 [ 277.664840][T10294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.689727][T10294] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 277.712605][T10299] team0: No ports can be present during mode change [ 277.732429][ T28] audit: type=1400 audit(1775221978.458:2920): avc: denied { bind } for pid=10293 comm="syz.1.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 277.754857][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2079'. [ 277.949694][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'. [ 278.556927][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.640530][ T28] audit: type=1400 audit(1775221979.368:2921): avc: denied { create } for pid=10312 comm="syz.1.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 278.675208][ T28] audit: type=1400 audit(1775221979.398:2922): avc: denied { write } for pid=10312 comm="syz.1.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 278.735421][T10321] loop1: detected capacity change from 0 to 512 [ 278.772022][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2087'. [ 278.815181][T10313] loop1: detected capacity change from 0 to 512 [ 278.907695][T10332] team0: Mode changed to "activebackup" [ 278.982183][T10313] EXT4-fs (loop1): 1 orphan inode deleted [ 278.996086][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2094'. [ 279.012771][T10313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.116287][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.162603][T10336] bridge8: entered promiscuous mode [ 279.170073][T10336] bridge8: entered allmulticast mode [ 279.456581][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2101'. [ 282.668331][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2108'. [ 282.937239][T10392] bridge9: entered promiscuous mode [ 282.943426][T10392] bridge9: entered allmulticast mode [ 284.287421][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2117'. [ 284.943334][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'. [ 284.962866][T10432] tc_dump_action: action bad kind [ 285.340434][T10441] Invalid ELF header magic: != ELF [ 285.368877][ T28] audit: type=1400 audit(1775221986.088:2923): avc: denied { map } for pid=10442 comm="syz.1.2124" path="socket:[33038]" dev="sockfs" ino=33038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 285.658771][T10437] loop5: detected capacity change from 0 to 1024 [ 285.737743][T10437] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 285.752930][T10437] System zones: 0-1, 3-36 [ 285.787070][T10437] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2122: bad orphan inode 134217728 [ 285.797743][T10458] xt_hashlimit: size too large, truncated to 1048576 [ 285.810334][T10437] loop5: lost filesystem error report for type 5 error -117 [ 285.838195][T10437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.864645][T10460] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2129'. [ 285.874464][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2129'. [ 285.936840][T10466] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 285.970605][T10466] bond0: entered promiscuous mode [ 285.980455][T10466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.998744][T10466] lo speed is unknown, defaulting to 1000 [ 286.005552][T10466] lo speed is unknown, defaulting to 1000 [ 286.012222][T10466] lo speed is unknown, defaulting to 1000 [ 286.050317][T10466] infiniband syU×: set down [ 286.054960][ T35] lo speed is unknown, defaulting to 1000 [ 286.055356][ T28] audit: type=1400 audit(1775221986.788:2924): avc: denied { ioctl } for pid=10465 comm="syz.2.2130" path="socket:[33071]" dev="sockfs" ino=33071 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 286.060727][T10466] infiniband syU×: added lo [ 286.103813][T10466] RDS/IB: syU×: added [ 286.107936][T10466] smc: adding ib device syU× with port count 1 [ 286.121447][T10466] smc: ib device syU× port 1 has no pnetid [ 286.130007][ T35] lo speed is unknown, defaulting to 1000 [ 286.154849][T10474] loop2: detected capacity change from 0 to 1024 [ 286.163991][T10474] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.164408][T10466] lo speed is unknown, defaulting to 1000 [ 286.181450][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 286.217574][T10474] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 286.252674][T10474] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 286.274578][T10474] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.2130: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 286.293728][T10474] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 286.293847][T10474] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2130: couldn't read orphan inode 11 (err -117) [ 286.303104][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 286.303123][ C0] EXT4-fs (loop2): initial error at time 1775221987: ext4_ext_check_inode:521: inode 11 [ 286.303165][ C0] EXT4-fs (loop2): last error at time 1775221987: ext4_ext_check_inode:521: inode 11 [ 286.305655][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.315847][T10474] loop2: lost filesystem error report for type 5 error -117 [ 286.330679][T10466] lo speed is unknown, defaulting to 1000 [ 286.370918][T10474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.437583][T10476] lo speed is unknown, defaulting to 1000 [ 286.465113][ T3400] IPVS: starting estimator thread 0... [ 286.477206][ T28] audit: type=1400 audit(1775221987.208:2925): avc: denied { create } for pid=10465 comm="syz.2.2130" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 286.508112][T10470] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2130: Invalid block bitmap block 0 in block_group 0 [ 286.531707][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2133'. [ 286.531968][T10470] Quota error (device loop2): write_blk: dquota write failed [ 286.561093][T10486] IPVS: using max 2496 ests per chain, 124800 per kthread [ 286.578967][T10470] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 286.589570][T10483] tc_dump_action: action bad kind [ 286.615251][T10466] lo speed is unknown, defaulting to 1000 [ 286.636488][T10470] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.2130: Failed to acquire dquot type 0 [ 286.708305][T10492] loop5: detected capacity change from 0 to 4096 [ 286.725758][T10492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.758399][T10466] lo speed is unknown, defaulting to 1000 [ 286.818680][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.819269][T10466] lo speed is unknown, defaulting to 1000 [ 287.497488][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.849361][T10508] loop1: detected capacity change from 0 to 512 [ 287.859478][T10509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51868 sclass=netlink_route_socket pid=10509 comm=syz.3.2142 [ 288.797613][T10508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.810793][T10508] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 288.824510][T10518] pim6reg: entered allmulticast mode [ 288.831318][T10521] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 288.839525][T10521] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 288.872510][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2141'. [ 288.878597][T10523] lo speed is unknown, defaulting to 1000 [ 288.922585][T10531] loop5: detected capacity change from 0 to 512 [ 288.949098][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.967697][T10531] EXT4-fs (loop5): failed to initialize system zone (-117) [ 288.975176][T10531] EXT4-fs (loop5): mount failed [ 288.997602][T10528] netlink: 'syz.3.2148': attribute type 10 has an invalid length. [ 289.051767][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2146'. [ 289.614660][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.242190][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.621991][T10577] Invalid ELF header magic: != ELF [ 290.632591][T10576] lo speed is unknown, defaulting to 1000 [ 290.664471][T10580] loop1: detected capacity change from 0 to 512 [ 290.725245][ T28] audit: type=1400 audit(1775221991.458:2926): avc: denied { read } for pid=10585 comm="syz.2.2167" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 290.751713][T10586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51868 sclass=netlink_route_socket pid=10586 comm=syz.2.2167 [ 290.828917][T10580] EXT4-fs (loop1): failed to initialize system zone (-117) [ 290.841921][ T28] audit: type=1400 audit(1775221991.458:2927): avc: denied { open } for pid=10585 comm="syz.2.2167" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 290.878688][T10580] EXT4-fs (loop1): mount failed [ 290.902434][T10592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51868 sclass=netlink_route_socket pid=10592 comm=syz.2.2168 [ 291.010161][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2164'. [ 291.630790][T10612] lo speed is unknown, defaulting to 1000 [ 292.281124][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.419870][T10622] lo speed is unknown, defaulting to 1000 [ 293.146305][T10628] 9p: Bad value for 'rfdno' [ 293.170675][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2162'. [ 293.251005][ T28] audit: type=1400 audit(1775221993.968:2928): avc: denied { ioctl } for pid=10569 comm="syz.0.2162" path="socket:[33316]" dev="sockfs" ino=33316 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 293.408832][T10638] lo speed is unknown, defaulting to 1000 [ 293.615488][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2180'. [ 293.639984][T10653] loop1: detected capacity change from 0 to 512 [ 293.685916][T10653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.730218][T10653] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.764825][ T28] audit: type=1400 audit(1775221994.498:2929): avc: denied { create } for pid=10652 comm="syz.1.2184" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 293.815649][ T28] audit: type=1400 audit(1775221994.548:2930): avc: denied { read } for pid=10652 comm="syz.1.2184" name=2E02 dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 293.858225][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.150173][T10661] loop5: detected capacity change from 0 to 1024 [ 294.234294][T10661] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 294.257649][T10665] loop1: detected capacity change from 0 to 1024 [ 294.275705][T10661] System zones: 0-1, 3-36 [ 294.362184][T10661] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2187: bad orphan inode 134217728 [ 294.375837][T10665] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 294.401252][T10661] loop5: lost filesystem error report for type 5 error -117 [ 294.453838][T10665] System zones: 0-1, 3-36 [ 294.502058][T10661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.566211][T10665] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.2188: bad orphan inode 134217728 [ 294.617629][T10665] loop1: lost filesystem error report for type 5 error -117 [ 294.621021][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 294.637321][ C1] EXT4-fs (loop1): initial error at time 1775221995: ext4_orphan_get:1423 [ 294.647623][ C1] EXT4-fs (loop1): last error at time 1775221995: ext4_orphan_get:1423 [ 294.715340][T10665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.827588][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2192'. [ 294.952325][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.015886][T10682] loop5: detected capacity change from 0 to 512 [ 295.052970][T10682] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 295.072341][T10682] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2193: invalid indirect mapped block 83886080 (level 1) [ 295.087560][T10682] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 295.087785][T10682] EXT4-fs (loop5): Remounting filesystem read-only [ 295.097283][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 295.097327][ C0] EXT4-fs (loop5): initial error at time 1775221995: ext4_free_branches:1023: inode 16 [ 295.097368][ C0] EXT4-fs (loop5): last error at time 1775221995: ext4_free_branches:1023: inode 16 [ 295.130332][T10682] EXT4-fs (loop5): 1 orphan inode deleted [ 295.156638][T10682] EXT4-fs (loop5): 1 truncate cleaned up [ 295.165052][T10682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.202192][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.240755][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.342505][T10690] loop5: detected capacity change from 0 to 512 [ 295.375011][T10690] EXT4-fs (loop5): failed to initialize system zone (-117) [ 295.390715][T10688] lo speed is unknown, defaulting to 1000 [ 295.421356][T10690] EXT4-fs (loop5): mount failed [ 295.628230][T10697] loop1: detected capacity change from 0 to 256 [ 295.662111][T10697] FAT-fs (loop1): Directory bread(block 64) failed [ 295.668692][T10697] FAT-fs (loop1): Directory bread(block 65) failed [ 295.675530][T10697] FAT-fs (loop1): Directory bread(block 66) failed [ 295.682484][T10697] FAT-fs (loop1): Directory bread(block 67) failed [ 295.689215][T10697] FAT-fs (loop1): Directory bread(block 68) failed [ 295.696054][T10697] FAT-fs (loop1): Directory bread(block 69) failed [ 295.703046][T10697] FAT-fs (loop1): Directory bread(block 70) failed [ 295.709838][T10697] FAT-fs (loop1): Directory bread(block 71) failed [ 295.716576][T10697] FAT-fs (loop1): Directory bread(block 72) failed [ 295.723285][T10697] FAT-fs (loop1): Directory bread(block 73) failed [ 295.810730][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2195'. [ 295.957025][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2198'. [ 296.077726][T10701] tc_dump_action: action bad kind [ 296.485489][T10711] FAULT_INJECTION: forcing a failure. [ 296.485489][T10711] name failslab, interval 1, probability 0, space 0, times 0 [ 296.518929][T10711] CPU: 1 UID: 0 PID: 10711 Comm: syz.5.2202 Tainted: G W syzkaller #0 PREEMPT(full) [ 296.518968][T10711] Tainted: [W]=WARN [ 296.518977][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 296.518988][T10711] Call Trace: [ 296.518996][T10711] [ 296.519003][T10711] __dump_stack+0x1d/0x30 [ 296.519043][T10711] dump_stack_lvl+0x95/0xd0 [ 296.519070][T10711] dump_stack+0x15/0x1b [ 296.519090][T10711] should_fail_ex+0x263/0x280 [ 296.519116][T10711] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 296.519181][T10711] should_failslab+0x8c/0xb0 [ 296.519205][T10711] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 296.519281][T10711] ? shmem_alloc_inode+0x34/0x50 [ 296.519316][T10711] ? kstrtouint+0x76/0xc0 [ 296.519344][T10711] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 296.519443][T10711] shmem_alloc_inode+0x34/0x50 [ 296.519472][T10711] alloc_inode+0x40/0x170 [ 296.519494][T10711] new_inode+0x1d/0xe0 [ 296.519522][T10711] shmem_get_inode+0x246/0x750 [ 296.519588][T10711] __shmem_file_setup+0x112/0x210 [ 296.519620][T10711] shmem_file_setup+0x3b/0x50 [ 296.519678][T10711] memfd_alloc_file+0x4e/0x300 [ 296.519708][T10711] __se_sys_memfd_create+0x2e1/0x3b0 [ 296.519739][T10711] __x64_sys_memfd_create+0x31/0x40 [ 296.519800][T10711] x64_sys_call+0x1f22/0x3020 [ 296.519832][T10711] do_syscall_64+0x12c/0x370 [ 296.519918][T10711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.519982][T10711] RIP: 0033:0x7f8cd88dc819 [ 296.520000][T10711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.520017][T10711] RSP: 002b:00007f8cd7336e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 296.520063][T10711] RAX: ffffffffffffffda RBX: 0000000000000452 RCX: 00007f8cd88dc819 [ 296.520081][T10711] RDX: 00007f8cd7336ee0 RSI: 0000000000000000 RDI: 00007f8cd8972e71 [ 296.520159][T10711] RBP: 0000200000000780 R08: 00000000ffffffff R09: 0000000000000000 [ 296.520172][T10711] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 296.520188][T10711] R13: 00007f8cd7336ee0 R14: 00007f8cd7336ea0 R15: 00002000000000c0 [ 296.520210][T10711] [ 297.026852][T10724] sctp: [Deprecated]: syz.3.2207 (pid 10724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.026852][T10724] Use struct sctp_sack_info instead [ 297.190619][T10728] lo speed is unknown, defaulting to 1000 [ 297.236140][T10729] loop2: detected capacity change from 0 to 512 [ 297.294996][T10731] loop1: detected capacity change from 0 to 512 [ 297.322158][T10733] Cannot find set identified by id 0 to match [ 297.335413][T10729] EXT4-fs (loop2): failed to initialize system zone (-117) [ 297.350162][T10729] EXT4-fs (loop2): mount failed [ 297.360915][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2211'. [ 297.376476][T10738] tc_dump_action: action bad kind [ 297.383302][T10731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.437726][T10731] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.478500][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2209'. [ 297.489973][T10740] lo speed is unknown, defaulting to 1000 [ 297.531154][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.575372][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2212'. [ 297.640620][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2208'. [ 297.695268][T10754] lo speed is unknown, defaulting to 1000 [ 297.753252][T10758] FAULT_INJECTION: forcing a failure. [ 297.753252][T10758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.761570][T10759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.791903][T10758] CPU: 1 UID: 0 PID: 10758 Comm: syz.2.2217 Tainted: G W syzkaller #0 PREEMPT(full) [ 297.791938][T10758] Tainted: [W]=WARN [ 297.791951][T10758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.791965][T10758] Call Trace: [ 297.791975][T10758] [ 297.791982][T10758] __dump_stack+0x1d/0x30 [ 297.792009][T10758] dump_stack_lvl+0x95/0xd0 [ 297.792035][T10758] dump_stack+0x15/0x1b [ 297.792077][T10758] should_fail_ex+0x263/0x280 [ 297.792107][T10758] should_fail+0xb/0x20 [ 297.792210][T10758] should_fail_usercopy+0x1a/0x20 [ 297.792237][T10758] _copy_from_iter+0xcf/0xea0 [ 297.792342][T10758] ? __alloc_skb+0x4f6/0x690 [ 297.792371][T10758] ? __alloc_skb+0x200/0x690 [ 297.792400][T10758] netlink_sendmsg+0x4ae/0x6f0 [ 297.792427][T10758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.792458][T10758] ____sys_sendmsg+0x563/0x5b0 [ 297.792494][T10758] ___sys_sendmsg+0x195/0x1e0 [ 297.792615][T10758] __x64_sys_sendmsg+0xd4/0x160 [ 297.792657][T10758] x64_sys_call+0x194c/0x3020 [ 297.792684][T10758] do_syscall_64+0x12c/0x370 [ 297.792716][T10758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.792744][T10758] RIP: 0033:0x7f59f724c819 [ 297.792761][T10758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.792778][T10758] RSP: 002b:00007f59f5c9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.792799][T10758] RAX: ffffffffffffffda RBX: 00007f59f74c5fa0 RCX: 00007f59f724c819 [ 297.792813][T10758] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 297.792878][T10758] RBP: 00007f59f5c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 297.792893][T10758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.792913][T10758] R13: 00007f59f74c6038 R14: 00007f59f74c5fa0 R15: 00007ffd83e40098 [ 297.792934][T10758] [ 297.990924][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.005955][T10747] loop5: detected capacity change from 0 to 1024 [ 298.041711][T10759] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2215'. [ 298.085184][T10747] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 298.095988][T10747] System zones: 0-1, 3-36 [ 298.129039][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2222'. [ 298.139770][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2224'. [ 298.148918][T10774] tc_dump_action: action bad kind [ 298.174089][T10747] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2213: bad orphan inode 134217728 [ 298.187371][T10747] loop5: lost filesystem error report for type 5 error -117 [ 298.202641][T10778] lo speed is unknown, defaulting to 1000 [ 298.238108][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.250072][T10782] loop2: detected capacity change from 0 to 512 [ 298.258653][T10782] EXT4-fs (loop2): failed to initialize system zone (-117) [ 298.262612][T10747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.270608][T10782] EXT4-fs (loop2): mount failed [ 298.293435][T10785] program syz.1.2226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.321316][T10780] lo speed is unknown, defaulting to 1000 [ 298.519985][T10797] netlink: 'syz.1.2230': attribute type 10 has an invalid length. [ 298.529341][T10797] team0: Port device netdevsim1 added [ 298.536197][T10797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7071 sclass=netlink_route_socket pid=10797 comm=syz.1.2230 [ 298.572353][T10801] FAULT_INJECTION: forcing a failure. [ 298.572353][T10801] name failslab, interval 1, probability 0, space 0, times 0 [ 298.585472][T10801] CPU: 1 UID: 0 PID: 10801 Comm: syz.1.2232 Tainted: G W syzkaller #0 PREEMPT(full) [ 298.585510][T10801] Tainted: [W]=WARN [ 298.585518][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.585531][T10801] Call Trace: [ 298.585538][T10801] [ 298.585546][T10801] __dump_stack+0x1d/0x30 [ 298.585577][T10801] dump_stack_lvl+0x95/0xd0 [ 298.585603][T10801] dump_stack+0x15/0x1b [ 298.585628][T10801] should_fail_ex+0x263/0x280 [ 298.585654][T10801] should_failslab+0x8c/0xb0 [ 298.585675][T10801] kmem_cache_alloc_noprof+0x66/0x400 [ 298.585696][T10801] ? anon_vma_clone+0xc7/0x450 [ 298.585727][T10801] anon_vma_clone+0xc7/0x450 [ 298.585758][T10801] __split_vma+0x2c0/0x640 [ 298.585782][T10801] ? xa_load+0xb1/0xe0 [ 298.585812][T10801] vms_gather_munmap_vmas+0x184/0x850 [ 298.585848][T10801] ? mas_find+0x608/0x700 [ 298.585875][T10801] mmap_region+0x718/0x2050 [ 298.585899][T10801] ? selinux_file_open+0x2e6/0x330 [ 298.585947][T10801] do_mmap+0x9b2/0xbd0 [ 298.585981][T10801] vm_mmap_pgoff+0x183/0x2d0 [ 298.586016][T10801] ksys_mmap_pgoff+0xc1/0x310 [ 298.586040][T10801] ? __x64_sys_mmap+0x49/0x70 [ 298.586058][T10801] x64_sys_call+0x14df/0x3020 [ 298.586084][T10801] do_syscall_64+0x12c/0x370 [ 298.586112][T10801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.586133][T10801] RIP: 0033:0x7f63e91ec819 [ 298.586151][T10801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.586171][T10801] RSP: 002b:00007f63e7c47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 298.586194][T10801] RAX: ffffffffffffffda RBX: 00007f63e9465fa0 RCX: 00007f63e91ec819 [ 298.586208][T10801] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000200000a95000 [ 298.586217][T10801] RBP: 00007f63e7c47090 R08: ffffffffffffffff R09: 0000000080000000 [ 298.586226][T10801] R10: 0000000000008872 R11: 0000000000000246 R12: 0000000000000001 [ 298.586235][T10801] R13: 00007f63e9466038 R14: 00007f63e9465fa0 R15: 00007ffd6ac2eee8 [ 298.586249][T10801] [ 298.587830][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.633971][T10805] loop1: detected capacity change from 0 to 512 [ 298.892135][T10813] program syz.2.2237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.910552][T10805] EXT4-fs (loop1): 1 orphan inode deleted [ 298.913539][T10808] tc_dump_action: action bad kind [ 298.918533][T10805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.945285][T10815] loop2: detected capacity change from 0 to 512 [ 298.964315][T10815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.009459][T10815] ext4 filesystem being mounted at /438/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.039909][ T28] audit: type=1400 audit(1775221999.768:2931): avc: denied { setattr } for pid=10804 comm="syz.1.2235" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.140822][T10805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=10805 comm=syz.1.2235 [ 299.216476][T10832] loop5: detected capacity change from 0 to 512 [ 299.234436][T10832] EXT4-fs (loop5): failed to initialize system zone (-117) [ 299.261041][T10832] EXT4-fs (loop5): mount failed [ 299.671454][T10829] lo speed is unknown, defaulting to 1000 [ 299.699875][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.289373][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.812537][T10844] loop1: detected capacity change from 0 to 256 [ 302.831204][T10844] FAT-fs (loop1): Directory bread(block 64) failed [ 302.837829][T10844] FAT-fs (loop1): Directory bread(block 65) failed [ 302.844529][T10844] FAT-fs (loop1): Directory bread(block 66) failed [ 302.851297][T10844] FAT-fs (loop1): Directory bread(block 67) failed [ 302.857866][T10844] FAT-fs (loop1): Directory bread(block 68) failed [ 302.864531][T10844] FAT-fs (loop1): Directory bread(block 69) failed [ 302.871358][T10844] FAT-fs (loop1): Directory bread(block 70) failed [ 302.878223][T10844] FAT-fs (loop1): Directory bread(block 71) failed [ 302.885056][T10844] FAT-fs (loop1): Directory bread(block 72) failed [ 302.891676][T10844] FAT-fs (loop1): Directory bread(block 73) failed [ 303.309049][T10854] bridge4: entered promiscuous mode [ 303.340198][T10854] bridge4: entered allmulticast mode [ 303.362907][T10878] __nla_validate_parse: 4 callbacks suppressed [ 303.362926][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2252'. [ 303.383474][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'. [ 303.393352][T10866] tc_dump_action: action bad kind [ 303.439924][T10878] lo speed is unknown, defaulting to 1000 [ 303.475880][T10887] loop1: detected capacity change from 0 to 512 [ 303.762529][T10887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.815714][T10887] ext4 filesystem being mounted at /440/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.914127][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 304.021099][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.188229][T10901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2258'. [ 304.219422][T10901] geneve2: entered promiscuous mode [ 304.233364][ T9376] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.246011][T10901] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.257692][ T9376] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.271802][ T9376] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.339169][ T9376] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.371337][T10904] lo speed is unknown, defaulting to 1000 [ 304.415769][T10907] program syz.5.2260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.471215][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2259'. [ 304.590014][T10914] lo: Caught tx_queue_len zero misconfig [ 304.602687][T10914] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 304.633334][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.761274][ T3505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.166446][T10924] lo speed is unknown, defaulting to 1000 [ 305.664165][T10925] lo speed is unknown, defaulting to 1000 [ 306.147925][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2268'. [ 306.159290][ T28] audit: type=1400 audit(1775222006.878:2932): avc: denied { getopt } for pid=10926 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 306.180139][T10929] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 306.186738][T10929] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 306.255781][T10931] lo speed is unknown, defaulting to 1000 [ 306.262626][T10929] vhci_hcd vhci_hcd.0: Device attached [ 306.306344][T10934] vhci_hcd: connection closed [ 306.306522][ T9378] vhci_hcd vhci_hcd.0: stop threads [ 306.326863][ T9378] vhci_hcd vhci_hcd.0: release socket [ 306.344671][ T9378] vhci_hcd vhci_hcd.0: disconnect device [ 306.491369][T10950] loop5: detected capacity change from 0 to 512 [ 306.548061][T10949] lo speed is unknown, defaulting to 1000 [ 306.773689][T10950] EXT4-fs (loop5): failed to initialize system zone (-117) [ 306.822635][T10950] EXT4-fs (loop5): mount failed [ 307.138082][T10957] loop1: detected capacity change from 0 to 2048 [ 308.428248][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2273'. [ 308.759383][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2278'. [ 308.801769][T10968] tc_dump_action: action bad kind [ 308.882721][T10972] netlink: 'syz.5.2279': attribute type 13 has an invalid length. [ 308.890678][T10972] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2279'. [ 308.986196][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2281'. [ 309.025227][T10979] program syz.5.2282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.048228][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2281'. [ 309.081105][T10977] netlink: 'syz.3.2281': attribute type 13 has an invalid length. [ 309.121040][T10977] netlink: 'syz.3.2281': attribute type 12 has an invalid length. [ 309.322757][T10986] netlink: 'syz.3.2284': attribute type 13 has an invalid length. [ 309.347043][T10986] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2284'. [ 309.381511][T10991] FAULT_INJECTION: forcing a failure. [ 309.381511][T10991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.437876][T10991] CPU: 0 UID: 0 PID: 10991 Comm: syz.5.2286 Tainted: G W syzkaller #0 PREEMPT(full) [ 309.437965][T10991] Tainted: [W]=WARN [ 309.437972][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.437987][T10991] Call Trace: [ 309.437995][T10991] [ 309.438003][T10991] __dump_stack+0x1d/0x30 [ 309.438053][T10991] dump_stack_lvl+0x95/0xd0 [ 309.438114][T10991] dump_stack+0x15/0x1b [ 309.438141][T10991] should_fail_ex+0x263/0x280 [ 309.438173][T10991] should_fail+0xb/0x20 [ 309.438229][T10991] should_fail_usercopy+0x1a/0x20 [ 309.438289][T10991] _copy_to_user+0x20/0xa0 [ 309.438394][T10991] simple_read_from_buffer+0xb5/0x130 [ 309.438445][T10991] proc_fail_nth_read+0x10e/0x150 [ 309.438550][T10991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.438585][T10991] vfs_read+0x1ab/0x7f0 [ 309.438605][T10991] ? __rcu_read_unlock+0x4e/0x70 [ 309.438660][T10991] ? __fget_files+0x184/0x1c0 [ 309.438690][T10991] ? mutex_lock+0x57/0x90 [ 309.438800][T10991] ksys_read+0xdc/0x1a0 [ 309.438819][T10991] __x64_sys_read+0x40/0x50 [ 309.438870][T10991] x64_sys_call+0x2886/0x3020 [ 309.438943][T10991] do_syscall_64+0x12c/0x370 [ 309.438975][T10991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.439055][T10991] RIP: 0033:0x7f8cd889d04e [ 309.439074][T10991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 309.439096][T10991] RSP: 002b:00007f8cd7336fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.439148][T10991] RAX: ffffffffffffffda RBX: 00007f8cd73376c0 RCX: 00007f8cd889d04e [ 309.439165][T10991] RDX: 000000000000000f RSI: 00007f8cd73370a0 RDI: 0000000000000003 [ 309.439181][T10991] RBP: 00007f8cd7337090 R08: 0000000000000000 R09: 0000000000000000 [ 309.439196][T10991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.439212][T10991] R13: 00007f8cd8b56038 R14: 00007f8cd8b55fa0 R15: 00007fff0518c4d8 [ 309.439234][T10991] [ 309.836170][T10996] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2288'. [ 309.949062][T11000] lo speed is unknown, defaulting to 1000 [ 310.221180][T11001] loop1: detected capacity change from 0 to 512 [ 310.292127][T10999] lo speed is unknown, defaulting to 1000 [ 310.382262][T11001] EXT4-fs (loop1): failed to initialize system zone (-117) [ 310.389539][T11001] EXT4-fs (loop1): mount failed [ 310.428200][T11008] loop5: detected capacity change from 0 to 512 [ 310.483521][T11008] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.519786][T11008] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.559044][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'. [ 310.727187][T11017] EXT4-fs: Ignoring removed orlov option [ 310.751595][T11017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 310.941443][T11017] EXT4-fs error (device loop5): __ext4_remount:6829: comm syz.5.2291: Abort forced by user [ 311.065898][T11017] EXT4-fs (loop5): Remounting filesystem read-only [ 311.176581][T11017] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 311.282805][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'. [ 311.857415][T11025] lo speed is unknown, defaulting to 1000 [ 312.133748][ T28] audit: type=1400 audit(1775222012.858:2933): avc: denied { read } for pid=11018 comm="syz.3.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 312.587431][T11032] loop1: detected capacity change from 0 to 256 [ 312.724810][T11032] FAT-fs (loop1): Directory bread(block 64) failed [ 312.731633][T11032] FAT-fs (loop1): Directory bread(block 65) failed [ 312.738448][T11032] FAT-fs (loop1): Directory bread(block 66) failed [ 312.745306][T11032] FAT-fs (loop1): Directory bread(block 67) failed [ 312.752084][T11032] FAT-fs (loop1): Directory bread(block 68) failed [ 312.758880][T11032] FAT-fs (loop1): Directory bread(block 69) failed [ 312.765696][T11032] FAT-fs (loop1): Directory bread(block 70) failed [ 312.772300][T11032] FAT-fs (loop1): Directory bread(block 71) failed [ 312.779041][T11032] FAT-fs (loop1): Directory bread(block 72) failed [ 312.785652][T11032] FAT-fs (loop1): Directory bread(block 73) failed [ 312.893568][ T28] audit: type=1400 audit(1775222013.628:2934): avc: denied { accept } for pid=11033 comm="syz.3.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.941204][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.373350][T11055] lo speed is unknown, defaulting to 1000 [ 316.414206][T11056] loop5: detected capacity change from 0 to 512 [ 316.493279][T11058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2305'. [ 316.675412][T11056] EXT4-fs (loop5): failed to initialize system zone (-117) [ 316.692168][T11058] geneve0: entered promiscuous mode [ 316.762521][ T9374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.868203][ T9374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.881176][T11056] EXT4-fs (loop5): mount failed [ 316.911085][ T9374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.940823][ T9374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.950052][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.033567][T11050] loop1: detected capacity change from 0 to 1024 [ 317.123100][ T28] audit: type=1400 audit(1775222017.848:2935): avc: denied { create } for pid=11063 comm="syz.0.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 317.255278][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2304'. [ 317.271139][T11050] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 317.280843][T11050] System zones: 0-1, 3-36 [ 317.309091][T11072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51868 sclass=netlink_route_socket pid=11072 comm=syz.5.2308 [ 317.331869][T11050] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.2300: bad orphan inode 134217728 [ 317.371163][T11050] loop1: lost filesystem error report for type 5 error -117 [ 317.426210][T11050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.456989][T11079] random: crng reseeded on system resumption [ 317.466336][T11079] Unrecognized hibernate image header format! [ 317.472583][ T9374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.491212][T11079] PM: hibernation: Image mismatch: architecture specific data [ 317.531488][T11081] netlink: 'syz.2.2312': attribute type 1 has an invalid length. [ 317.538222][T11079] lo speed is unknown, defaulting to 1000 [ 317.553051][T11081] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.620680][T11081] xt_policy: output policy not valid in PREROUTING and INPUT [ 317.811543][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.863695][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.954239][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2313'. [ 318.011226][ T9375] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.035344][ T9375] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.060365][ T9375] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.076094][ T9375] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.133448][T11096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51868 sclass=netlink_route_socket pid=11096 comm=syz.3.2316 [ 318.278396][T11106] loop1: detected capacity change from 0 to 512 [ 318.314206][T11106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.327224][T11106] ext4 filesystem being mounted at /453/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.395035][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2319'. [ 318.461159][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.546723][T11120] loop5: detected capacity change from 0 to 1024 [ 318.550515][T11122] bridge9: entered promiscuous mode [ 318.570974][T11122] bridge9: entered allmulticast mode [ 318.571517][T11126] netlink: 'syz.2.2327': attribute type 10 has an invalid length. [ 318.571535][T11126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2327'. [ 318.611714][ T9376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.622507][ T9376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.634640][T11120] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 318.659786][T11120] System zones: 0-1, 3-36 [ 318.682344][T11120] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2325: bad orphan inode 134217728 [ 318.692468][ T28] audit: type=1400 audit(1775222019.418:2936): avc: denied { append } for pid=11129 comm="syz.2.2328" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.708854][T11120] loop5: lost filesystem error report for type 5 error -117 [ 318.720964][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 318.735028][ C1] EXT4-fs (loop5): initial error at time 1775222019: ext4_orphan_get:1423 [ 318.743685][ C1] EXT4-fs (loop5): last error at time 1775222019: ext4_orphan_get:1423 [ 318.751189][T11120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.755611][ T28] audit: type=1400 audit(1775222019.488:2937): avc: denied { read } for pid=11129 comm="syz.2.2328" path="socket:[34471]" dev="sockfs" ino=34471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 319.107150][T11144] lo speed is unknown, defaulting to 1000 [ 319.223480][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.282231][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2330'. [ 319.321139][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.338452][ T28] audit: type=1400 audit(1775222020.068:2938): avc: denied { mount } for pid=11148 comm="syz.3.2332" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 319.362678][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.500964][ T3407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.549926][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2337'. [ 319.575878][T11171] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.726354][T11176] tc_dump_action: action bad kind [ 319.758648][T11185] ip6tnl0: Caught tx_queue_len zero misconfig [ 319.956373][T11171] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.087187][ T28] audit: type=1400 audit(1775222020.818:2939): avc: denied { bind } for pid=11174 comm="syz.2.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 320.163378][T11175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11175 comm=syz.2.2341 [ 320.193483][T11171] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.221247][T11194] loop2: detected capacity change from 0 to 512 [ 320.333862][T11194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.348316][T11171] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.368920][T11194] ext4 filesystem being mounted at /449/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.442087][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2343'. [ 320.477049][ T9379] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.499318][ T9376] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.516704][T11206] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2347'. [ 320.530891][ T9379] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.552640][ T9376] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.707422][T11204] loop1: detected capacity change from 0 to 1024 [ 320.762906][T11218] lo speed is unknown, defaulting to 1000 [ 320.825347][T11204] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 320.835691][T11204] System zones: 0-1, 3-36 [ 320.854002][T11204] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.2346: bad orphan inode 134217728 [ 320.898864][T11204] loop1: lost filesystem error report for type 5 error -117 [ 320.900957][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 320.914939][ C1] EXT4-fs (loop1): initial error at time 1775222021: ext4_orphan_get:1423 [ 320.923485][ C1] EXT4-fs (loop1): last error at time 1775222021: ext4_orphan_get:1423 [ 320.976274][T11204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.132336][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.455404][T11236] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003 [ 321.534297][T11237] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2357'. [ 321.620060][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.630082][T11228] bridge5: entered promiscuous mode [ 321.637350][T11228] bridge5: entered allmulticast mode [ 321.652210][ T28] audit: type=1326 audit(1775222022.388:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.2.2357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59f724c819 code=0x0 [ 321.719216][ T28] audit: type=1400 audit(1775222022.448:2941): avc: denied { ioctl } for pid=11248 comm="syz.1.2358" path="socket:[35727]" dev="sockfs" ino=35727 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 321.748990][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2363'. [ 321.784383][T11251] lo speed is unknown, defaulting to 1000 [ 321.818117][ T28] audit: type=1400 audit(1775222022.548:2942): avc: denied { write } for pid=11248 comm="syz.1.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 321.902614][ T28] audit: type=1400 audit(1775222022.548:2943): avc: denied { read } for pid=11248 comm="syz.1.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 321.922456][ T28] audit: type=1400 audit(1775222022.548:2944): avc: denied { shutdown } for pid=11248 comm="syz.1.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 321.951213][T11255] loop1: detected capacity change from 0 to 512 [ 321.961598][T11255] EXT4-fs: Ignoring removed bh option [ 321.967325][T11255] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 322.009380][T11255] EXT4-fs (loop1): 1 truncate cleaned up [ 322.024191][T11255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.115677][T11264] Invalid ELF header magic: != ELF [ 322.156405][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2368'. [ 322.190521][T11268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2368'. [ 322.201566][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2368'. [ 322.293623][T11272] loop2: detected capacity change from 0 to 1024 [ 322.318824][T11272] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 322.328786][T11272] System zones: 0-1, 3-36 [ 322.339087][T11272] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2369: bad orphan inode 134217728 [ 322.350176][T11272] loop2: lost filesystem error report for type 5 error -117 [ 322.352678][T11272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.784644][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.818263][T11279] lo speed is unknown, defaulting to 1000 [ 322.841096][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.853186][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.069920][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2376'. [ 323.085044][T11293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2376'. [ 323.109606][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2376'. [ 323.129187][T11293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2376'. [ 323.139439][T11293] netlink: 'syz.1.2376': attribute type 6 has an invalid length. [ 323.192847][T11304] lo speed is unknown, defaulting to 1000 [ 323.241618][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2380'. [ 323.758661][T11328] geneve2: entered promiscuous mode [ 323.806076][ T9379] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.814713][ T9379] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.841313][ T3407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.853506][ T9362] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.865826][T11332] Invalid ELF header magic: != ELF [ 323.884771][ T9366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.915598][ T9362] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.243766][T11342] netlink: get zone limit has 8 unknown bytes [ 324.283802][T11317] loop5: detected capacity change from 0 to 1024 [ 324.413765][T11317] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 324.468440][T11317] System zones: 0-1, 3-36 [ 324.484668][T11349] lo speed is unknown, defaulting to 1000 [ 324.541483][T11317] [ 324.588285][T11317] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2382: bad orphan inode 134217728 [ 324.630377][T11317] loop5: lost filesystem error report for type 5 error -117 [ 324.640953][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 324.654857][ C1] EXT4-fs (loop5): initial error at time 1775222025: ext4_orphan_get:1423 [ 324.663506][ C1] EXT4-fs (loop5): last error at time 1775222025: ext4_orphan_get:1423 [ 324.668531][T11317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.736191][T11359] random: crng reseeded on system resumption [ 324.761102][ T3387] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.931085][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.942100][ T9379] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.080817][ T9379] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.222468][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.185441][T11378] xt_policy: output policy not valid in PREROUTING and INPUT [ 326.216859][ T28] audit: type=1400 audit(1775222026.948:2945): avc: denied { mount } for pid=11374 comm="syz.3.2400" name="/" dev="hugetlbfs" ino=37014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 326.374578][T11386] xt_policy: output policy not valid in PREROUTING and INPUT [ 326.395660][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.454664][T11390] Invalid ELF header magic: != ELF [ 326.554070][T11394] loop5: detected capacity change from 0 to 512 [ 326.610450][T11394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.635995][T11394] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 326.731620][ T9376] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.747546][T11394] __nla_validate_parse: 3 callbacks suppressed [ 326.747600][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2406'. [ 326.750227][ T9376] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.805927][ T9376] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.158746][ T9376] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.431250][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2410'. [ 327.477144][T11416] lo speed is unknown, defaulting to 1000 [ 327.526785][T11417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11417 comm=syz.2.2410 [ 327.751654][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.974069][T11422] loop2: detected capacity change from 0 to 512 [ 328.000609][T11422] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.044774][T11422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 328.142754][T11422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.204611][T11433] RDS: rds_bind could not find a transport for ::3:0:20:0, load rds_tcp or rds_rdma? [ 328.253445][T11422] ext4 filesystem being mounted at /469/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.368905][ T28] audit: type=1400 audit(1775222029.098:2946): avc: denied { append } for pid=11421 comm="syz.2.2413" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 328.445376][ T28] audit: type=1400 audit(1775222029.138:2947): avc: denied { ioctl } for pid=11421 comm="syz.2.2413" path="/469/bus/file2" dev="loop2" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 328.496412][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.567403][T11444] Invalid ELF header magic: != ELF [ 328.666826][T11440] bridge10: entered promiscuous mode [ 328.673595][T11440] bridge10: entered allmulticast mode [ 328.708607][T11453] lo speed is unknown, defaulting to 1000 [ 329.001110][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.358338][T11461] loop1: detected capacity change from 0 to 512 [ 329.393838][T11461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.406707][T11461] ext4 filesystem being mounted at /469/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 329.409725][T11467] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003 [ 329.438426][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'. [ 329.481095][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.495500][T11468] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2425'. [ 330.048588][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.133202][ T28] audit: type=1400 audit(1775222030.868:2948): avc: denied { create } for pid=11492 comm="syz.1.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 330.381684][T11499] Invalid ELF header magic: != ELF [ 330.402813][T11496] bridge4: entered promiscuous mode [ 330.408353][T11496] bridge4: entered allmulticast mode [ 330.521083][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.664261][ T28] audit: type=1400 audit(1775222031.398:2949): avc: denied { getopt } for pid=11507 comm="syz.0.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 330.664985][T11508] netlink: 'syz.0.2438': attribute type 5 has an invalid length. [ 330.798240][T11517] ip6tnl0: Caught tx_queue_len zero misconfig [ 330.804664][T11517] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 331.198999][T11528] loop1: detected capacity change from 0 to 512 [ 331.205854][T11528] EXT4-fs: Ignoring removed bh option [ 331.211783][T11528] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 331.221283][T11528] EXT4-fs (loop1): 1 truncate cleaned up [ 331.227493][T11528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.422604][T11532] loop2: detected capacity change from 0 to 1024 [ 331.443176][T11532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 331.452020][T11532] System zones: 0-1, 3-36 [ 331.458291][T11532] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2445: bad orphan inode 134217728 [ 331.470655][T11532] loop2: lost filesystem error report for type 5 error -117 [ 331.473651][T11532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.604063][T11532] ================================================================== [ 331.612199][T11532] BUG: KCSAN: data-race in filemap_read / filemap_read [ 331.619073][T11532] [ 331.621574][T11532] write to 0xffff8881055689a8 of 8 bytes by task 11537 on cpu 1: [ 331.629294][T11532] filemap_read+0x98d/0xa10 [ 331.633981][T11532] generic_file_read_iter+0x79/0x330 [ 331.639275][T11532] ext4_file_read_iter+0x1cc/0x290 [ 331.644454][T11532] copy_splice_read+0x471/0x6c0 [ 331.649417][T11532] splice_direct_to_actor+0x28f/0x670 [ 331.654804][T11532] do_splice_direct+0x119/0x1a0 [ 331.659795][T11532] do_sendfile+0x382/0x650 [ 331.664230][T11532] __x64_sys_sendfile64+0x105/0x150 [ 331.669528][T11532] x64_sys_call+0x2dc4/0x3020 [ 331.674506][T11532] do_syscall_64+0x12c/0x370 [ 331.679201][T11532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.685109][T11532] [ 331.687438][T11532] read to 0xffff8881055689a8 of 8 bytes by task 11532 on cpu 0: [ 331.695260][T11532] filemap_read+0x6f/0xa10 [ 331.699780][T11532] generic_file_read_iter+0x79/0x330 [ 331.705173][T11532] ext4_file_read_iter+0x1cc/0x290 [ 331.710301][T11532] copy_splice_read+0x471/0x6c0 [ 331.715183][T11532] splice_direct_to_actor+0x28f/0x670 [ 331.720655][T11532] do_splice_direct+0x119/0x1a0 [ 331.725607][T11532] do_sendfile+0x382/0x650 [ 331.730033][T11532] __x64_sys_sendfile64+0x105/0x150 [ 331.735245][T11532] x64_sys_call+0x2dc4/0x3020 [ 331.739942][T11532] do_syscall_64+0x12c/0x370 [ 331.744548][T11532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.750714][T11532] [ 331.753040][T11532] value changed: 0x000000000000003d -> 0x000000000000003e [ 331.760324][T11532] [ 331.762652][T11532] Reported by Kernel Concurrency Sanitizer on: [ 331.769076][T11532] CPU: 0 UID: 0 PID: 11532 Comm: syz.2.2445 Tainted: G W syzkaller #0 PREEMPT(full) [ 331.780309][T11532] Tainted: [W]=WARN [ 331.784129][T11532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.794291][T11532] ================================================================== [ 332.083601][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.212418][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.441135][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration