last executing test programs: 22.740366003s ago: executing program 4 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) (fail_nth: 2) 22.386027146s ago: executing program 4 (id=200): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xdd5}, 0x0, 0x7, 0x10000, 0xd, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x40, r0, 'id0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {r3, r4}}, './file0\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f00000000c0)='%d\xf1%\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) fstat(r2, &(0x7f0000000240)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}], 0x1, 0x40000a0) r7 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(r7, &(0x7f0000000000)={0x28, 0x37, 0x1, {0x2, 0x5, 0x9, r8, 0xa, 'syzkaller\x00'}}, 0x28) 21.491838058s ago: executing program 4 (id=203): mmap(&(0x7f000059e000/0x4000)=nil, 0x4000, 0x1000003, 0x31, 0xffffffffffffffff, 0x1cef000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r1, r1) r2 = getpid() syz_open_procfs$userns(r2, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstat(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, r4, r4) mount$nfs(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4400, &(0x7f00000000c0)={[{'#[{&!@{&'}, {'[)%'}], [{@fowner_gt={'fowner>', r1}}, {@euid_eq={'euid', 0x3d, r4}}, {@subj_type={'subj_type', 0x3d, ':'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x28}}, {@obj_role}]}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) 21.45441273s ago: executing program 4 (id=204): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f00000000c0)={[{@nomblk_io_submit}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x8000000000000000, 0x8, 0x6, 0x4}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_clone(0x80208000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21.357414543s ago: executing program 4 (id=207): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x94}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@add_del={0x2, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'team0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "0d2b9401ac964f91a65104bf5cb9c2ec4c05fb23dd00", "34b06b153ad4b7d98bd83fcdcdc8c3ddd07eae4b9b29ff9290049be7aaa2c5f0", "703934bd2b9b5d1347b7ef58e4ab3709dfbe2572814ce95900", "000000000900000000000000020000cf00", "d659e27ffa4a8b7bc50106cf1f8f42ce6bff0aba3dbb35ea18353c0f446f1c72", "5e77b29d8e272f07bd7f00", 0x7, 0x10401, 0x9, 0x8, 0x6}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) time(0x0) 21.102115722s ago: executing program 4 (id=212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x95, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x10) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000400)={0xa000001c}) fcntl$getown(r3, 0x9) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7f}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x29, 0xf9, 0xb, 0x3, 0x22, @mcast1, @empty, 0x7800, 0x710, 0x81, 0x7}}) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) syz_emit_ethernet(0x6a6, &(0x7f0000000e40)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "a3fc00", 0x670, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11, 0x4, 0xc18, 0xa000010, [{0x3, 0x1f, "adc877cfdffd832556357f0d4509e2a7b895c47fe891c2c7407af9c873a3595d3c015c060286000079c67091ecb309bc3607cc4f731686381c2ab65ec1fd6441cddf9cc3010837d0bc576b97ca438056094843b673e1db01ef535eb34d1bd788dd968ab5d99a00e9de173cd0190e2ef734230c3ab4479cfb77596190726b9b610e85b893033cf5e9847dd0b54fa5797c0f00d1f9322c71b8c453f7eb1e395a3b71e52897d09b1d16814f1d8f7b07094205f66b8065bb827f8dae965d41d38596a49e8dbef3f078f4a1dd87e289f690af08a1102177ddc612ed3f9318465412f323526ee23bd46b12bbbd821827314665bd0c8671220e"}, {0x3, 0x13, "c5af417b80835fbcc25455b7e13aad37405651c6bc79fd506803586fdfaa7747c039c5f8471e3deb6f39743e6b08724cad55b642e6024a4ed07ac03bcaba137d397beca669c6d7d4bfe5ed62c49c92d41259b28d0bef013c2fbf0c26bca3404ffdc21f8bfa5706dbaf65c0de91bddd85a60cc0bd9b7145c12eaae3e1731ec2994d77412405d8f8c6157663aa5b2e2d45f3e3561a70d1ee9a708073"}, {0x2, 0x99, "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"}]}}}}}}, 0x0) 20.802982593s ago: executing program 32 (id=212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x95, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x10) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000400)={0xa000001c}) fcntl$getown(r3, 0x9) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7f}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x29, 0xf9, 0xb, 0x3, 0x22, @mcast1, @empty, 0x7800, 0x710, 0x81, 0x7}}) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) syz_emit_ethernet(0x6a6, &(0x7f0000000e40)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "a3fc00", 0x670, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11, 0x4, 0xc18, 0xa000010, [{0x3, 0x1f, "adc877cfdffd832556357f0d4509e2a7b895c47fe891c2c7407af9c873a3595d3c015c060286000079c67091ecb309bc3607cc4f731686381c2ab65ec1fd6441cddf9cc3010837d0bc576b97ca438056094843b673e1db01ef535eb34d1bd788dd968ab5d99a00e9de173cd0190e2ef734230c3ab4479cfb77596190726b9b610e85b893033cf5e9847dd0b54fa5797c0f00d1f9322c71b8c453f7eb1e395a3b71e52897d09b1d16814f1d8f7b07094205f66b8065bb827f8dae965d41d38596a49e8dbef3f078f4a1dd87e289f690af08a1102177ddc612ed3f9318465412f323526ee23bd46b12bbbd821827314665bd0c8671220e"}, {0x3, 0x13, "c5af417b80835fbcc25455b7e13aad37405651c6bc79fd506803586fdfaa7747c039c5f8471e3deb6f39743e6b08724cad55b642e6024a4ed07ac03bcaba137d397beca669c6d7d4bfe5ed62c49c92d41259b28d0bef013c2fbf0c26bca3404ffdc21f8bfa5706dbaf65c0de91bddd85a60cc0bd9b7145c12eaae3e1731ec2994d77412405d8f8c6157663aa5b2e2d45f3e3561a70d1ee9a708073"}, {0x2, 0x99, "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"}]}}}}}}, 0x0) 5.007249s ago: executing program 0 (id=350): madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x66) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10532, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80001040}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1d4, 0x14, 0x800, 0x70bd28, 0x25dfdbfe, {0x2b, 0xfa}, [@INET_DIAG_REQ_BYTECODE={0x81, 0x1, "90895f8716e1062c21607c8f9e1aa58999af6b48e83aa9db7c59e0201a9e110e7f004ec22b5c04fa187f6a0e3b3a03833c703ca8b27159791d0f87a75c6ea07e9c63cf034e56d5163fd3239815d8a8d79a709750b9e784d28c7753fb1c19a671e3b9c52c499e131127d2b015f7e826cccec4b85abc6aa581ff0a875e3b"}, @INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "9aa95f8835ffcf9954e9536ba3bcfbd0d15c7c7d8a34be2818a998036e4be88d0a5ecce5d4705c454b5bd95058eee00e7c5b16715051183fbb9e3183f27a7314eabb1fcc7871792aa371758551b72bd1c93fbf3555bbf75d11746db8ec1d1000cdbd852764f9a7a6d1ab1961a4af283979c8cb6f5cc2157f33d0e6fffc00536addd57dacfa664bd5f9a8a4eb13838c55a2bb9530f8d6f51e534bc6fab7d5654780b200fd59ad67b1f03c41f9ce2601390b5f307a701108473614ece109220e70c7799b688035a6c9481929a6270fd4c6ff0af2bd389ce6b866e9a1535bcc594848acca636fd99fe5767ea22f276927c17b55be5f03"}, @INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "9319e1b72ea29bb2d564612c40b98359c9f7adebca233c324d69d01565af09b1a11e832269a259872ca119dd827607582937743ec397ab83cf40"}]}, 0x1d4}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6679d53b00fca49cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}, {&(0x7f00000000c0)="9c81339cd73204", 0x7}], 0x2}, 0x44000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd23, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x2}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000000)={0x14, "2449125043aaf315e86ae940f56abee02d3532251d6d786a45ba2ea188ede19a159616b5c84db3e0666ed2872baf238ea8c44defaf913406f2db0aa124025b14f35d11e7892223600a1c56e2b7d87b1bb3bceeeccf71a09ea675fc2e118b9a101f920e9fd102831869484a421cb62a99f7f090923ad2dc62c5e04a65b53a0bbb"}) 4.629865644s ago: executing program 0 (id=354): getpid() setitimer(0x0, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r2) r3 = inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) fcntl$setsig(r3, 0xa, 0xe) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') 4.278466616s ago: executing program 0 (id=359): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x943, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000100)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pipe(&(0x7f0000000000)) eventfd2(0x3, 0x801) pselect6(0x40, &(0x7f0000000340)={0x0, 0x2000000000000, 0x9, 0xffffffffffffffff, 0x0, 0x81, 0xffffffffffffc539, 0x40}, 0x0, &(0x7f00000001c0)={0x3ff, 0x1bc, 0x20000, 0x9, 0x1, 0x2, 0x2}, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc, 0x10, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x1, 0x1}, {{@in=@empty, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) 3.026134401s ago: executing program 0 (id=365): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0xfea2, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xce, "211b202c8a8a97f01ba80943c681600fd83f4a2f0079cd3bc43908baf090f09202d01e2d6efa867f68bb25464c783aef5a4c7fe993910f23cfc1a8a8c3775f91308468a77a3d99b2eeae21dddf4d6971bf0881d2ce09d1a3eab6a1a13f949e39a063f34c8955a9122a15e5c02e61d357b249b925fb4e24063b6903d2925bc084d8697d411753c86b0095e2dbba6d5859b80cfb3417ea4a65b509c472c213d5a58baf3657c4bdf28fe9be52dee9e67724c86106c0d2de8f45e1f71014e9533e44a07cda0499f0561da9cea9daf3af"}, &(0x7f0000000180)=0xd6) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x9}, 0x8) r4 = eventfd2(0x5, 0x80801) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r6 = eventfd2(0x2, 0x80800) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r8 = memfd_secret(0x80000) io_submit(0x0, 0x5, &(0x7f00000015c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f0000000200)="18c12f10e83dbfa8ed758fcd8f613d826f44c6dfdbcbb3d08ec2ea04563b8152b7b3292872cec47912bbc9a4710be2ba7d26eb02686262bdf9632e6df740", 0x3e, 0xfffffffffffffffe, 0x0, 0x0, r4}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0xd8, r5, &(0x7f00000002c0)="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", 0x1000, 0x9e, 0x0, 0x1, r6}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x2, 0xbcf9, r1, &(0x7f0000001300)="5551ed0224d4460ce4896426e98f1b21e7857223036bfa355745fa743c8916aa47518ddf409fdbd0aa2ccb6ae976e975e104470bdc2291915bbedc39404682a35daee6c95a9b8b723f388ecad45ee509f0dda264411f5c5e4e930153c1e3588fa3cc9627d8b6e2b957cae853c7a2de2130fd603f04700b", 0x77, 0x9, 0x0, 0x1, r7}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000001400)="f4c5646fddde288eddff5479d00a4125930d77ae049d0d70e2ccbdfd0c55612bd42cbd0bec59cd35f60bbbe599cda958cf85ddb69688065fd3", 0x39, 0x8, 0x0, 0x2}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0x6, r8, &(0x7f0000001480)="ddf4cbea03d95d30955db43d391f3e3904673b95015252bb9096d738ab5c7989eec3907a557c7b67af99e272a6442f7f09d1405e96dff352a98027b7d7dc9101deefee9dcac9154ab8d4a2426e71ab07ade0ca333356632f92a72da30f3fcd4dff20f0e01e3b5428fae5179268a9f91a7a4ea9ad3fa70890b6ffe2259c2d8f72640a8ca7f1c1936c84ab270747e7295abd8fdefda85ad3af7c5ba8621ebe7df1b6c89b460347cae4ccdfb62d6a933c8c0bccdf86f87f195b74d465be4108bfb694ae9218f56a619f78d04acc9f4f31a0fae7f037c4ba74c1de3e0533c1129a9b", 0xe0, 0x7}]) sendmsg(r7, &(0x7f0000002b40)={&(0x7f0000001600)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001680)="005abe7121a0042a5af3ea66485c8fb7509411a215e4062ada053be5cb427f9f3cf5a5c6fb0a6b180e25f228e40902f7bea3b57ffdd250ce8af49935ef57a8", 0x3f}, {&(0x7f00000016c0)="a44c6f39db947e9755ab377a623f5224388962eb780e9481c34d8f0505afc3855857caf774cd785f58998be20b4ab0125e30b89d815155bc992f7387e96b2366647ed22f3bf1fd9cb10efb0899d81f881c3cdeadc3003616d55e2a6c82ef0f20f7fcaa1d514c2282f0fbe46de1541e7133905886ed972174ccaa778c309e8d483cb9c974887e45c8272a2c891ee49ebc669411c0", 0x94}], 0x2, &(0x7f00000017c0)=[{0x1010, 0xff, 0xfffffff9, "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"}, {0xd8, 0x1, 0x5, "fedfc70d412f8c182ae73894de1ef29e4b9fb6fab6478196201f7746871f04c8ec46a4230caaa4e441b9c9ea907fed278cad3ef1849dcf05bbe3128fd64c3bfedb58d892590cb6705a8f83060bfc56ca4ef44f6142a66f6783649c505253f86a158d11875524f7dfa6284d412586aebbcf19f6411a09fc8cfe631c0ca7b35633351e3c87d02f1d7d4ed0fe3154739cfaabe0ff04de4280d52af7a67fbaeedfd4b2144863e34abbf12700eedf6accb883ef0e2a8d52f2df9491b40194c97bfb78da3d4a035a"}, {0xd0, 0x115, 0xfffffff9, "1a8459b088227a6de3f34631cf64a44bae2ce7fb8b7d805dcba9c8e8f5f2bc7ac3831cca704dcc188f4343db46f6dc11f73faf80149452d9707d8622f83114b851aff69be4e989005875c1c6f8b2131cf6dbd961e0f8a32c2b8dc2522082185186413e7d38a5aaddf2c1f6ad4b216102cca136d876edb546741e3bbdcb80da894c53657d64d3a1e6adcdc90502375db0a88116f0a508798474814097e8184f1345256e458a4e6f1137dc1eaf76292cd62317c02cf8fbb3178b5f14015fb4ad91"}, {0x98, 0x0, 0x6, "82ca15991d30149209947315167816803a934d34d0715f2e9d958fc33b4b43c471c489b5c37373ec3461eff0bc958893a960c82ca2e8ff3c2ebf8b682d210f4cc2e2181fc7a1d9857b08f499c16bd153e4c3ca4b76f79dd96367ddd062d105173d239e4b51e3302c674e77397f25a65da9065d37b79360f7c2701c39bbc4adb5c430"}, {0x100, 0x84, 0x401, "64db25e173ab4fbd31b77d0bca53ded208492a110d345610d2fa11245370746060a087f6c500f9ae742d61d81326436c6a3a1c1a84d8c20a15647e4cb6f9b1c0d94c1968bbfceda5313ea23668ec8f99883d6d863b0b24f9b82966270e75dfeffe5e69cbee68adcaa528d2a43f88d200528a3b6cd9f10eba472cb1f9b824d61209d5d1771977dbc3a07b156e30c46769708096c8a4d489f4693ed5c6e2d0e8c1f9ff938abbcbcfcd70ffea977dfb9770ebbcc9c89c50fcd2067c8bffbdbdbca0bd09f7a3e11cfe0a22afb073af7453af4aa606f80b2e2fc0b28f016455bc3a2e8988074c4e2b9d44c2c4"}], 0x1350}, 0x20000081) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000002b80)={r3, 0x8fe, 0x10}, &(0x7f0000002bc0)=0xc) copy_file_range(r7, &(0x7f0000002c00), r6, 0x0, 0x800, 0x0) ioctl$TIOCSISO7816(r8, 0xc0285443, &(0x7f0000002c40)={0x8, 0x8, 0x3, 0x9, 0x4}) sendmsg$nl_route_sched(r7, &(0x7f0000002dc0)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002cc0)=@gettaction={0xa4, 0x32, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe00}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000002e00)={0xff, 0x3, 0x8, 0xfffff354, 0x6}, 0x14) close_range(r6, r4, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000002e40)) getsockopt$inet6_buf(r5, 0x29, 0x3d, &(0x7f0000002e80)=""/58, &(0x7f0000002ec0)=0x3a) accept$inet6(r7, 0x0, &(0x7f0000002f00)) sendmsg$nl_generic(r5, &(0x7f0000003200)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000031c0)={&(0x7f0000002f80)={0x218, 0x23, 0x4, 0x70bd25, 0x25dfdbfd, {0x6}, [@generic="0529e5db6969cea1e7799cf4b8ed8419c2ed8eb29a74e8ef2f5de9c64dde28b6d109cdc51606611052017d8685075bd0e00f101b8da4a8a37c8d4758941c5010c4500da343860f1dab6f0ea485a9cbdc62732a22fd777a33de8ba29fba7a06707dc223d9b1d54c141aa53ec80543fc09996ea404178c49bdec664f9933fa3c977f4a7baeaa7159a4894a93", @generic="359a0b30b688bfc53149de0708f251c29fb56876624f07a0b487b659f1367061667279f81f6ccf8e1a9944bc57ee07d873c6d8ec025442227a6f884a2ade4ff56470c47a9dbeed31a00a895180e40d5665e8809c6364691ce0c0c16a1da9e741a7e7b12a98a020cb4b29c5f1d58abcd1ecdddc1d221c0166603aab4ff2f3125a4c96e612d790f236c4da25c84c77c76763ab9e06a5fb6e111e30cc1b0e00452ed21186ebe151262b574330f11a2c9039ef", @generic="403cfe21d6bbc64d8d0581116732c9eec0bf4d0e5b7fe5cfb0e2b1c2a818efff9f6d46853d679c0f11dcf2e756a6ff6c13486ad96554930ca08b5806559b1ac965cbb12398ea487b31ce9947ec8628988e44000b7c0ba9362c5baf4a0a87157dba7e8f9ff4724676c977ca927faf4940c4e2dfe18cd03d7712e507dcb61352bff35ca98a805fc9a50902c80d7ca939c09d961ef04ba61df2f84b64471386663af3f41a0dc9ca686fadfd6bcbc1f1321c9a7acf3f29bde1c5ba7a46aba00c185877b49b300b"]}, 0x218}, 0x1, 0x0, 0x0, 0x8800}, 0x40) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000003240)={0xa, 0x4e22, 0x8, @private1, 0xffffffff}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000003280)=@assoc_value, &(0x7f00000032c0)=0x8) r10 = syz_clone3(&(0x7f0000004440)={0x0, &(0x7f0000003300), &(0x7f0000003340), &(0x7f0000003380), {0x2c}, &(0x7f00000033c0)=""/4096, 0x1000, &(0x7f00000043c0)=""/54, &(0x7f0000004400)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r7}}, 0x58) sched_setscheduler(r10, 0x2, &(0x7f00000044c0)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000004540)={0x5cc21608, 0x10, '\x00', 0x1, &(0x7f0000004500)=[0x0, 0x0]}) 2.996277712s ago: executing program 0 (id=366): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000400)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0x2000402) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000d00)='./file0\x00', 0xa0004a, &(0x7f00000001c0)={[{@minixdf}, {@noquota}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x4}}]}, 0x1, 0x477, &(0x7f0000001900)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000300)={0x0, 0xc8a4, 0x1c008, 0x1, 0x25d}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@usrquota}]}, 0xfe, 0x475, &(0x7f0000001600)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x54, 0x0, 0xfffffffffe000001}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) fdatasync(r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x4) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) 2.282275468s ago: executing program 3 (id=377): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xffffff5e, &(0x7f00000002c0)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c050010ffff0af30000000075f800250003000f600000251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x20}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xd7a9652af506456b}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6a, 0x2, 0x50, 0x3, 0x3, 0x9}, {0xd4, 0x2, 0x7, 0x9, 0x4, 0x6}, 0x5dce2245, 0x2, 0xcc1}}]}}]}, 0x64}}, 0x40) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") (async) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000100)) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) (async) prctl$PR_GET_IO_FLUSHER(0x3a) (async) syz_emit_ethernet(0x56, &(0x7f0000000f40)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050e86dd60182325d6202c00fe8000000000000000000000000000bb2001000000000000000000000000000284000201000000002b0100aa0200000000080708000000030008000000010000"], 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) (async) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.67492027s ago: executing program 0 (id=378): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000010406000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000002000638000024001280090001007866726d000000001400028008000100030000000800020001000000140003007866726d30"], 0x58}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd2c, 0x5, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x812, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x240800c4) 1.09714816s ago: executing program 1 (id=381): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="341300001400010028bd7000fbdbdf2510"], 0x1334}, 0x1, 0x0, 0x0, 0x40000}, 0x20008010) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x1, 0x700, 0x90, 0xffffffff, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @local, {[@noop]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8d}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet6_mreq(r8, 0x29, 0x1b, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2201, 0x0) syz_open_dev$loop(0x0, 0x3, 0xa004) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r5, 0x0, 0x89) fchdir(r11) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)=""/7, 0x7) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x68, 0x2, 0x6, 0xe9d065cf8730f145, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}}, 0x400c1) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100003040000", @ANYRES64=r0, @ANYRESHEX=r11, @ANYRES32=0x0, @ANYRESOCT=r0], 0x48}}, 0x20000800) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.033507303s ago: executing program 2 (id=382): r0 = socket$inet6(0xa, 0x3, 0x5) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./mnt\x00', 0x2200454, &(0x7f0000000040)={[{@user_xattr}, {@nodelalloc}]}, 0x1, 0x244, &(0x7f0000000540)="$eJzs3DFoFXccB/Df3XuvadJHSdulUGgLpZQ2ENKt0CVdWgiUEEoptIWUIi5KIsQEt8TJxUFnlUwuQdyMjpIluCiCU9QMcRE0OCQ46PDk3iUSzQsKl7wT7/OBS+7e+//v9z/uff/3hncXQGX1R8RwRNQiYiAiGhGR7Gzwdb70b23O9y6PR7RafzxJ2u3y7dx2v48iYi4ifoqIpTSJI/WImcV/1p6u/Pbd6enGtxcX/+7t6kFuWV9b/X3zwuipKyM/zty682g0ieFovnJc+y/p8Fo9ifj0IIq9I5J62SPgbYyduHw3y/1nEfFNO/+NSCM/eWemPlhqxA/n9+p79vHtL7o5VmD/tVqN7Bo41wIqJ42IZiTpYETk62k6OJh/h79X60uPTk4dHzg8OT1xqOyZCtgvzYjVX6/1XN14Lf8Pa3n+gfdXlv8/xxbuZ+ubtbJHA3RTlv+B/2a/D/mHypF/qC75h+qSf6gu+Yfqkn+orj3yv/0z/7SscQEHz/Ufqkv+obrkH6prZ/4BgGpp9ZR9BzJQlrLnHwAAAAAAAAAAAAAAAAAAYLf53uXx7aVbNW+ci1j/JSLqnerXth5C/GH7b99GkjV7Kcm7FfLvVwV3UNClku++/vhBufVvfllu/dmJiLmTETFUr+/+/CWFH4L9yRveb/xfsEBBP/9Vbv3nC+XWH1mJuJ7NP0Od5p80Pm//7zz/NLPzV7D+sWcFdwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDXvAgAAP//DkFuIw==") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r1, &(0x7f0000001d40)=[{&(0x7f0000001d80)="840d404000fee9", 0x7}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7, 0xfff, 0x1000000007}) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) gettid() 1.023176813s ago: executing program 3 (id=383): syz_emit_ethernet(0x7a, &(0x7f0000000700)={@random="bb6233c1eb87", @random="35e855ae3f7e", @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "2ef702", 0x44, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1}, {0xdd86, 0x88be, 0x8000002, {{0xc, 0x1, 0x9, 0x0, 0x0, 0x2, 0x4, 0xa4}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0x6, 0x2, 0x8, 0x3, 0x0, 0x2, 0x2}, 0x2, {0x1, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x2c, 0x66, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xe}, {0x7, 0x9}, {0xb, 0xc}}, [{0x8, 0xb, 0xc5e1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40045}, 0x64814) 992.401454ms ago: executing program 2 (id=384): keyctl$restrict_keyring(0x6, 0xfffffffffffffffc, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x5, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000400)={[{@nogrpid}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xfffffff8, 0x2d, 0xfffffffd, 0xc4cf, 0x3, "00e1070000eadeffedffffff000000000600", 0x9, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) r7 = creat(&(0x7f0000000e40)='./bus\x00', 0x1a0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYRES8=r7], 0xa4}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000040) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_config_ext={0x100, 0x80000000004}, 0xa822, 0x4005, 0xb, 0x3, 0x2, 0xff000000, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000680)={[{@journal_async_commit}, {@noload}, {@data_err_abort}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@journal_async_commit}, {@auto_da_alloc}]}, 0xef, 0x457, &(0x7f0000000dc0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000200)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000007000000080000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0080000000000000000000000000000000000000000000000000000075f121747f633d66b05d88122f2ae75759b9272fb5404faedc0001fb14e632426b333e8dafef9affff7b92e8b160995b37ec760ee57bac2e35"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000180), &(0x7f0000000100)=r8}, 0x20) 946.380806ms ago: executing program 1 (id=385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000440)="7f", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 945.926606ms ago: executing program 1 (id=386): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xce23, 0x405, @mcast2}, 0xff1b) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast1, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f00000006c0)=ANY=[@ANYBLOB="5b685c7e778f09b16926e2b686dd6a00000000641100fe8000000000000000000000000000aaff0200000000000000000000000000014e234e20"], 0x0) 926.405746ms ago: executing program 1 (id=387): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x3, 0x10001, 0xff}]}]}, {0x0, [0x61, 0x30, 0x61, 0x2e]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x24, 0x1d, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r1, r0, 0x26, 0x0, @void}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xa, 0x3f7, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) readv(r6, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000440)=""/182, 0xb6}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000600)=""/25, 0x19}, {&(0x7f0000000940)=""/217, 0xd9}, {&(0x7f0000000740)=""/61, 0x3d}, {&(0x7f0000000780)=""/32, 0x20}, {&(0x7f00000007c0)=""/233, 0xe9}], 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40040, 0x48) 854.359469ms ago: executing program 1 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4084) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x6, 0x9, 0x0, 0x1}, 0x8) 798.168021ms ago: executing program 1 (id=389): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x63) r4 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1406}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x200}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x6d3b}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) r6 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc0ed0044, &(0x7f0000000980)={[{@barrier}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@noquota}, {@data_journal}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xfe, 0x489, &(0x7f0000000a40)="$eJzs3M9rHFUcAPDv7G7SpD9MrfVHf2m0isUfSZP+sAcvioIHRUEPFU9xk5babSNNBFuKRg8V8SAF7+JR8C/wpBdRT4JXvUtBpJdWQRiZ3dl2s91NN+kmG7OfD0z73szsvvedmTfz5s1OAuhbo9k/ScTWiPgtIkYiotS8wmjtv+tXL5b/vnqxnESavv5Xsuh7knzKbKnNSNM8v6lFuZfeipiqVGbO5fnx+TPvjs+dv/D0qTNTJ2dOzpydPHbs8KF9g0cnj3Qlziyua7s/mN2766U3L79SPn757Z++yeq7NV9+7erFclcKajBa27otPdbtwnpsW0M6KfWwIizLtry9D1Tb/8ieYgzfWDYSL37c08oBqypN07TV9Tm3kAIbWBK9rgHQG/ULfXb/W5/WqOuxLvz5XO0GKIv7ej7VlpSikK8z0HR/201DEXF84Z8vsylWaRwCAKDRd1n/56lW/b9C3New3l35M5TtEXF3ROyIiHsiYmdE3BtRXff+iHhgmeU3PyG5tf9TuLKiwDqU9f+ezZ9tLe7/1Xt/sb2Y57ZV4x9ITpyqzBzMt8mBGNiU5ScWfWSx71/49fPmeZ/lw+yjDf2/bMrKr/cF83pcKTUN0E1PzU91Jfgs/o8idpdaxZ/ceA6YRMSuiNi9wjJOPfH13nbLbh//ErrwnCn9KuLx2v5fiKb465K2zycnnjk6eWR8KCozB8frR8Wtfv7l0mvtyr+j+Lsg2/+bWx7/tfize8RkKGLu/IXT1ee1c83f8O9ty7j0+yflpM2ynSs8/geTN6rpwXze+1Pz8+cmIgaTl7Ps8KL5kzc/W8/X18/iP7C/dfvfUbs9q26JPRGRHcT7IuLBiHgo33cPR8QjEbF/ifh/fP7Rd9ota7//lxiV76Is/ukl9n92ystSN/d/B4nsPNgwp3j6h2/blZ92tP8PV1MH8jmdnP86rOktRzMAAABsRIXqb+CTwtiNdKEwNlb7Df/O2FyozM7NP3li9r2z07Xfym+PgUJ9pGukYTx0Ih8brucnm/KH8nHjL4rD1fxYebYy3evgoc9tadP+M38Ue107YNV5Xwv6l/YP/Uv7h/7Vqv0PNaTTNP1wDasDrCHXf+hTg61nu+BDf1j+9X8o2r3QAfy/6P9D/9L+oX+V9OahH7V9N76wvFf+N0iitD6q0TIxfEcfL3a7PlFYH5ulK4mFiHj101qTWA/1aUyUOv5jFitMbGq5qNdnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74LwAA//9KIeTZ") (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x188202, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf254200000008000300", @ANYRES32=r12, @ANYBLOB="6c8b888ec9764efd3fe81826c3735703a5e1d40e77bddef21b6aaa6ab570363242361dd9f17d53713b2d7f40332985652ff6b6a4628b95658405e2f7ca9c4dc9cd24355e6a192e5d1f8ea26a5f5e0526"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0xc004) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r9, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="5400008e0600000000b554d7793147147de10cb2def34e7e710192c10965f94d8ade255575f0003ca0856029097dd1f1baca85abfc1816f26e9534f2fa551281a1b0c973d209942753f70252707a2c2d43db71a47deaa2ad17ae5c26bb514ffdeb58831b", @ANYRES32=r12, @ANYBLOB], 0x4c}}, 0x2400c8d4) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810922}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048840) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x23}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000040}, 0x200000d4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) ptrace(0x10, r13) (async) ptrace$poke(0x5, r13, &(0x7f0000000200), 0x0) 797.816641ms ago: executing program 3 (id=390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket(0x1, 0x803, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "001200", 0x18, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x5e, 0x2, 0x2, 0x0, 0x0, [@mcast1]}]}}}}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001400b59527bd700000000000ad236ce83dcb137849100000c44f5589dfa62a1aed014d6a58447fedd19f1b873e87adcd967d705c65a6ca460ae893c53f9ac2ee876213277327416280f50000", @ANYRES32=r4, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0xc, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) 796.169051ms ago: executing program 3 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x163101, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth1_macvtap\x00', 0x120}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x61, 0xef2a}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) preadv2(r2, &(0x7f00000027c0)=[{&(0x7f0000002340)=""/199, 0xc7}, {&(0x7f0000002440)=""/161, 0xa1}, {&(0x7f0000002500)}, {&(0x7f0000002540)=""/227, 0xe3}, {&(0x7f0000002640)}, {&(0x7f0000002680)=""/134, 0x86}, {&(0x7f0000002740)=""/84, 0x54}], 0x7, 0x6, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b4000000000000006b113e00000000008510000002000000060000000800000095000000000000009500000000000000ca28ceea2d081e52b75dbde9741defe2aa16ff314ea0a0d11c13d07ca02791b3a6468bb0237e1ea7551bacac69c838960dfb4a9df3c45fe580e5bb41dea708cffc02bd4971e5101db6df825415"], &(0x7f0000000080)='GPL\x00', 0x4, 0xcd, &(0x7f0000000b40)=""/205, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000008000000000b702000000000004850000008600000018110000", @ANYRES16=r1, @ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0xed, 0xbe, 0x8, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x700, 0x2}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540), &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xca, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xf, 0x9, &(0x7f0000000c40)=ANY=[@ANYBLOB="18e4aa831b9ce00e99c71f8384145f4b389dcfb36ff07603fe039816dbd5b56660c2cca72b03aa211fca702a0e16da38b797389e6b0136a561253e48a66607cf60", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000000018480000fcffffff0000000000000000184b00000800"/64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', r5, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x5, 0x5, 0x8000}, 0x10, r7, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000840)=[{0x1, 0x1, 0x7, 0x4}, {0x1, 0x4, 0x10, 0x3}, {0x5, 0x5, 0x8, 0x5}, {0x3, 0x2, 0x2, 0xb}, {0x2, 0x3, 0x5, 0x5}], 0x10, 0xe14}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r9, &(0x7f0000000a80)={0x2, 0xe26, @loopback}, 0x10) connect$inet(r9, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000540)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f00000003c0)={0xb, 0x9, 0xffffffff}, 0xc) r11 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r11, 0xf) ptrace(0x4206, r11) ptrace(0x4207, r11) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYRES16, @ANYBLOB="150f013fec4d9f099700f0f3a373e796e7d2a206e52dbc9e2d8986d9a8141f2eccbadd3fd4e8e702bd7c842f3ef96f753dbb69fdff37f0c8ce4386edaacc9d7bc6f2d59b72e36ac3e16d01ca00ca10036778fd01ffc00d2900842002c0c9b070712af5fc7471ee4473720c3ceb08d240111a0cdb5a2baa3adc656f9de32be06abf6fed07e72155ebfccc81d7bee959e85b96e58160cc4a361c9f4cd4813e6d7c", @ANYRESDEC=r4, @ANYRES8=0x0, @ANYRES16=r2, @ANYRESHEX, @ANYRES16=r4, @ANYRESDEC=r11, @ANYRES64=r5], 0x30, 0x40044}}], 0x1, 0x4) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f00000005c0)={0x1d, r6}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$can_bcm(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000007f000000"], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) sendmsg$nl_route(r8, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4000b505df67fc0280b08dfe0000001d00040026bd70d7a19dc8aa077a1900", @ANYRES32=r6, @ANYBLOB="80000607060006004e2300001400030000000000f8ffffff222800000200000008000800", @ANYRES32=r6, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20040014}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f086dd", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 767.525632ms ago: executing program 3 (id=392): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x178, 0xc, 0x0, 0x178, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7fff, 0x836, 0x0, 0x0, 0x2, 0xfffffffc}}, @common=@unspec=@addrtype1={{0x28}, {0x428, 0x140}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @local, [0x0, 0x0, 0x0, 0xff], [], 'vlan1\x00', 'hsr0\x00', {}, {0xff}, 0x32}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) 728.496754ms ago: executing program 3 (id=393): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x2, 0xe9, 0x9, 0x0, 0x3, 0x10b00, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000000c0), 0xa}, 0x4000, 0x4, 0x3, 0x3, 0x4, 0x9, 0xffff, 0x0, 0xf, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000200)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240)=0x10b6, 0x4) r3 = io_uring_setup(0x4334, &(0x7f0000000280)={0x0, 0x414, 0x1, 0x2, 0xca}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000300)) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f0000000340)={0x8, 0x2, 0x7ff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) io_uring_enter(r3, 0x35ea, 0x9ffe, 0x2e, &(0x7f0000000400)={[0x1000]}, 0x8) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000600)={{r1, &(0x7f0000000440)='\x00', 0x440400, &(0x7f0000000480)={@_ha_fsid={[0x3]}, {0x401, 0x3, 0x4, 0xe57b}}, 0x1b, &(0x7f00000004c0), &(0x7f0000000500)=0xc3}, {[0xfff, 0x100, 0x6, 0x1]}, 0x6, 0x91, &(0x7f0000000540)=""/145}) sendmsg$nl_route(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@setneightbl={0x2c, 0x43, 0x8, 0x70bd28, 0x25dfdbfc, {0x2}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0x7}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000780)=0x401, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000007c0)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f00000008c0)=0xe8) fchown(r4, r5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000900)={0x1, [{}, {}, {0x0}], 0xf8, "d2bf19c9570a13"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001900)={{r6, 0x7, 0x4, 0x3, 0x9, 0xd, 0xc, 0x1, 0x5, 0x7f, 0x1, 0xd, 0x7, 0x3}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x40100c4) r7 = accept$phonet_pipe(r4, &(0x7f0000001ac0), &(0x7f0000001b00)=0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001b40)={0x5, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001b80)=r8, 0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c00), r4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x54, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000001d40)=0x0) fchown(r7, r10, 0xffffffffffffffff) 654.098696ms ago: executing program 5 (id=394): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) readv(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x3, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0xffffffff, 0x1, 0x0, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0x0, 0x8, 0xfffffff4, 0x3b98, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x7, 0xaa92, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cce, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0xfff, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x100, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x9, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x8000, 0x2, 0x17, 0x88, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x8000, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x6, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x7, 0xb, 0x0, 0x8, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x7, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x2, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x2, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x104, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x3, 0x800, 0x101, 0x800, 0x6, 0x9, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0xfff, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x7fff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 492.858612ms ago: executing program 5 (id=395): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x800001, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYRES8=r1, @ANYRES16=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x500, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00', 0x8}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r7, 0x5452, 0x0) shutdown(r7, 0x1) 385.743536ms ago: executing program 5 (id=396): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x800001, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYRES8=r1, @ANYRES16=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x500, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) (fail_nth: 1) socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00', 0x8}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r7, 0x5452, 0x0) shutdown(r7, 0x1) 77.366507ms ago: executing program 5 (id=397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000440)="7f", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 76.816707ms ago: executing program 5 (id=398): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x4}, 0x38) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x1d, 0x1, 0xd, &(0x7f00000004c0)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd61b341af00180000fe8800c2caf8731889cc00ff0700000000000000000101fc000000000000000000000000000001ff020708000000000000000000"], 0x0) r3 = getpgid(0x0) ioprio_get$pid(0x2, r3) unshare(0x60000600) 26.387699ms ago: executing program 2 (id=399): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x3a00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, &(0x7f0000000040)=""/176, 0x2a, 0xb0, 0x1}, 0x28) 26.076809ms ago: executing program 2 (id=400): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0), 0x3, 0x56d, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000000000000100000d000000713a8ae84bf3867c"], &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x1}, 0x28) 24.784969ms ago: executing program 2 (id=401): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$TCSETS(r1, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x453, 0x4, 0x70bd2d, 0x25dfdbfe, 'P'}, 0x14}, 0x1, 0x0, 0x0, 0x20000094}, 0x40880) 22.052659ms ago: executing program 2 (id=402): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0xffffffff, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x7) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000c80)={0x0, 0x6, 0x4, 0x2, 0x5, 0xa3}, &(0x7f0000000d00)=0x14) r2 = syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f0000000700), 0x4, &(0x7f0000000980)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000900)={&(0x7f0000000000), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x41}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x2b}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x881) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x1) syz_clone3(&(0x7f0000000680)={0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000340), {0x35}, &(0x7f0000000380)=""/98, 0x62, &(0x7f0000000400)=""/215, &(0x7f0000000640)=[r0, r0, r2, r2, r1, 0xffffffffffffffff, r0, r0, r2, r0], 0xa}, 0x58) ioprio_get$pid(0x2, r8) capset(&(0x7f0000000940)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r9, 0x4b4d, &(0x7f0000000040)={0x95, 0x1}) setpriority(0x1, r0, 0x806) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)="f175f1d5f33e27195a41725b3725d0083b23d99d8241f21d2f836248a1989fbff3e2a409e43c28c6d3515b60f4fae1980d484bbb96b97befc066c859f34754e6eb20b9359616db6b030cb0b58a3420f06aaa4eb16cf758e45d4fc9229193c91fcb5e46a42eec05aa9b2b90ee707ad884de8f5a850db460d50de399bd56e1913d22c85250e2479264e7be91389bb0733978f693325a90a2c6b380924d1a9f30256c8fa8d1cc0d860db00a94ae34c77a3d5057f01f67efbf0dbfe8ccf77f879b43007072ae69aa44b7bcc66e8a", 0xcc}, {&(0x7f0000000100)="d2e9c101ba5753dc4313fb4d3a5f8b712c3616aa3cf6009dbed255e194f40573b25e840481563be6593c2232ca3627cc59b42a600a5d8fdbf643226a0c34b6c33c3f6980732551c32ddc66436b3c976387a5fd6db54d41793ee8ebc2665c17b3b94a082f815306796a7375816a3b58b04d91413a154f426112500c7c664a4f75800da04a21ffc5f72d3cdae59e6da1fc5d0cc2f49ee76c8694eb0ebdf4281753b11540c2bad595cf299bfde2d395cd84226684cde5948aa20c6b18f339b0783855f96a9c340da794db3451131d9e20b1539cce6a84855c8e05", 0xd9}, {&(0x7f0000000540)="e507bed8d1c2d65d5ad0c18d30f06a3434c3932f0b24f02c9a136b2995100795df3c3aa57066187c6c449e5988a68d1ccb6ecd2902e1606c65ac870cf6db04bb8c1f44220a4b466ca469bf556d9a9c8b69a6807df08399aabaee2f55a4f5773bc7fc35ad4a95906628707fbe56d393197f31f4ff9402270e293db47452e35c1cc8356bddf3e5df908793ee2fe85d54fc5c8190911bb76159c5852d8782096f4b37f151bfcba95c665f96a3673522c7da7d35231b66f5fe763d5f26df516eaf361cc33eaa3781e65f77e0d989b6", 0xcd}, {&(0x7f0000000a40)="5e8cc8d6479cba4aa7f6fe5ca37af75dd7cd7666926ab140649f107a62733471e781055e2376b29f324be91398e7e5079e52bf111b1c2680d67bde41eb547cef5f78d1dea32f097a8c47d66c285b8059a5ae9c180e9a7e2506bf4c8c19348d910638a10f016bd8b1ae3bbf8f0a53", 0x6e}], 0x4}, 0x8000) recvmsg(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r10) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) 0s ago: executing program 5 (id=403): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='binfmt_misc\x00', 0x1000084, 0x0) (async, rerun: 32) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') (async, rerun: 32) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) ptrace(0x4207, r2) (rerun: 32) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES8=r4, @ANYBLOB="000000000021000008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r6, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}, 0x3320c05a}], 0x1, 0x40000000, &(0x7f00000035c0)={0x0, 0x989680}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003740)=ANY=[@ANYBLOB="1000df2500"/16], 0x10}, 0x1, 0x0, 0x0, 0x4804}, 0x4010) (async) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0xff, 0xa, 0x0, 0x100}, 0x20) fchown(r0, 0xffffffffffffffff, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000) kernel console output (not intermixed with test programs): the MTU to 1532 would solve the problem. [ 25.478848][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.540513][ T3321] hsr_slave_0: entered promiscuous mode [ 25.546655][ T3321] hsr_slave_1: entered promiscuous mode [ 25.552515][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 25.558224][ T3321] Cannot create hsr debugfs directory [ 25.715973][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.726901][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.737914][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.746886][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.767501][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.776634][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.789344][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.798026][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.827770][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.838781][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.851316][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.860065][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.888639][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.898812][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.908456][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.917250][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.957845][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.967092][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.976176][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.985126][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.994917][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.025249][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.038283][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.060152][ T2145] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.067227][ T2145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.076353][ T2145] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.083426][ T2145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.096228][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.114843][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.128748][ T2145] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.135799][ T2145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.151575][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.158599][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.175099][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.187001][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.197687][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.235648][ T2145] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.242790][ T2145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.252200][ T2145] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.259276][ T2145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.275399][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.305475][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.322618][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.341471][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.363608][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.377821][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.391831][ T2145] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.398916][ T2145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.407935][ T2145] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.415071][ T2145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.434386][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.455152][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.468674][ T2145] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.475818][ T2145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.495164][ T2145] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.502248][ T2145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.521238][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.543304][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.554180][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.606712][ T3314] veth0_vlan: entered promiscuous mode [ 26.630367][ T3314] veth1_vlan: entered promiscuous mode [ 26.677414][ T3319] veth0_vlan: entered promiscuous mode [ 26.684891][ T3315] veth0_vlan: entered promiscuous mode [ 26.692038][ T3314] veth0_macvtap: entered promiscuous mode [ 26.699515][ T3314] veth1_macvtap: entered promiscuous mode [ 26.712226][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.722596][ T3315] veth1_vlan: entered promiscuous mode [ 26.735064][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.744549][ T3319] veth1_vlan: entered promiscuous mode [ 26.756981][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.769483][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.789418][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.798295][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.819128][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.832314][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.861532][ T3319] veth0_macvtap: entered promiscuous mode [ 26.881697][ T3315] veth0_macvtap: entered promiscuous mode [ 26.889785][ T3315] veth1_macvtap: entered promiscuous mode [ 26.890028][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.901266][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.925367][ T3319] veth1_macvtap: entered promiscuous mode [ 26.933116][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.972634][ T3476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 26.990376][ T3313] veth0_vlan: entered promiscuous mode [ 27.009615][ T3313] veth1_vlan: entered promiscuous mode [ 27.023027][ T3313] veth0_macvtap: entered promiscuous mode [ 27.031329][ T3313] veth1_macvtap: entered promiscuous mode [ 27.043953][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.053535][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.096605][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.105976][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.122672][ T2145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.149240][ T2145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.158940][ T2145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.215919][ T2145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.251897][ T2145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.295203][ T3491] loop0: detected capacity change from 0 to 1764 [ 27.321531][ T797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.442400][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 27.442490][ T28] audit: type=1400 audit(1775259414.062:111): avc: denied { mount } for pid=3479 comm="syz.0.6" name="/" dev="loop0" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 27.472157][ T3487] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 27.538199][ T47] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.548219][ T47] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.558530][ T28] audit: type=1400 audit(1775259414.112:112): avc: denied { create } for pid=3479 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.580674][ T28] audit: type=1400 audit(1775259414.112:113): avc: denied { getopt } for pid=3479 comm="syz.0.6" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.615552][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.705734][ T3321] veth0_vlan: entered promiscuous mode [ 27.752625][ T47] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.826269][ T28] audit: type=1400 audit(1775259414.392:114): avc: denied { prog_load } for pid=3495 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.152505][ T3504] loop3: detected capacity change from 0 to 128 [ 28.161130][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.169923][ T28] audit: type=1400 audit(1775259414.402:115): avc: denied { bpf } for pid=3495 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.977583][ T3496] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2'. [ 28.991312][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.215086][ T3321] veth1_vlan: entered promiscuous mode [ 29.221005][ T28] audit: type=1400 audit(1775259414.622:116): avc: denied { prog_run } for pid=3495 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.246020][ T3321] veth0_macvtap: entered promiscuous mode [ 30.308766][ T3504] syz.3.4: attempt to access beyond end of device [ 30.308766][ T3504] loop3: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 30.322231][ T28] audit: type=1400 audit(1775259415.602:117): avc: denied { write } for pid=3495 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.342020][ T28] audit: type=1400 audit(1775259415.622:118): avc: denied { mount } for pid=3499 comm="syz.3.4" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.366162][ T3505] geneve2: entered promiscuous mode [ 30.375236][ T3500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 30.390998][ T3504] syz.3.4: attempt to access beyond end of device [ 30.390998][ T3504] loop3: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 30.436639][ T3321] veth1_macvtap: entered promiscuous mode [ 30.443205][ T3504] syz.3.4: attempt to access beyond end of device [ 30.443205][ T3504] loop3: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 30.463979][ T28] audit: type=1400 audit(1775259415.892:119): avc: denied { read write } for pid=3497 comm="syz.2.7" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 30.492206][ T162] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 30.504063][ T3496] loop1: detected capacity change from 0 to 512 [ 30.510589][ T3496] EXT4-fs: test_dummy_encryption option not supported [ 30.535712][ T162] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 30.616314][ T28] audit: type=1400 audit(1775259415.892:120): avc: denied { open } for pid=3497 comm="syz.2.7" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 30.644733][ T3517] loop0: detected capacity change from 0 to 128 [ 30.652096][ T12] kworker/u8:0: attempt to access beyond end of device [ 30.652096][ T12] loop3: rw=1, sector=138, nr_sectors = 2 limit=128 [ 30.666117][ T3496] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 30.682673][ T162] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 30.692530][ T3517] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.704640][ T162] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 30.755829][ T3517] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.756015][ T3522] GUP no longer grows the stack in syz.3.11 (3522): 200000004000-20000000a000 (200000002000) [ 30.769147][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.784162][ T3496] futex_wake_op: syz.1.2 tries to shift op by -1; fix this program [ 30.791057][ T3522] CPU: 1 UID: 0 PID: 3522 Comm: syz.3.11 Not tainted syzkaller #0 PREEMPT(full) [ 30.791088][ T3522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 30.791107][ T3522] Call Trace: [ 30.791114][ T3522] [ 30.791121][ T3522] __dump_stack+0x1d/0x30 [ 30.791150][ T3522] dump_stack_lvl+0x95/0xd0 [ 30.791175][ T3522] dump_stack+0x15/0x1b [ 30.791256][ T3522] __get_user_pages+0x195b/0x1ea0 [ 30.791290][ T3522] ? __perf_event_task_sched_in+0xa65/0xad0 [ 30.791320][ T3522] ? __rcu_read_unlock+0x4e/0x70 [ 30.791429][ T3522] get_user_pages_remote+0x1d5/0x6b0 [ 30.791466][ T3522] __access_remote_vm+0x15c/0x580 [ 30.791503][ T3522] access_remote_vm+0x32/0x40 [ 30.791597][ T3522] proc_pid_cmdline_read+0x32b/0x6b0 [ 30.791629][ T3522] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 30.791696][ T3522] vfs_readv+0x432/0x6e0 [ 30.791729][ T3522] __x64_sys_preadv+0xfd/0x1c0 [ 30.791753][ T3522] x64_sys_call+0x2915/0x3020 [ 30.791781][ T3522] do_syscall_64+0x12c/0x370 [ 30.791810][ T3522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.791884][ T3522] RIP: 0033:0x7f72ffb0c819 [ 30.791902][ T3522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.791921][ T3522] RSP: 002b:00007f72fe55f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 30.791946][ T3522] RAX: ffffffffffffffda RBX: 00007f72ffd85fa0 RCX: 00007f72ffb0c819 [ 30.791961][ T3522] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 30.791975][ T3522] RBP: 00007f72ffba2c91 R08: 00000000fffffff9 R09: 0000000000000000 [ 30.792032][ T3522] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 30.792046][ T3522] R13: 00007f72ffd86038 R14: 00007f72ffd85fa0 R15: 00007ffc4fc6a978 [ 30.792065][ T3522] [ 30.813864][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.873097][ C0] hrtimer: interrupt took 47410 ns [ 30.958067][ T3496] syzkaller0: entered promiscuous mode [ 31.015177][ T3496] syzkaller0: entered allmulticast mode [ 31.068672][ T3529] netlink: 71 bytes leftover after parsing attributes in process `syz.2.13'. [ 31.099628][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.114366][ T3529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 31.174891][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.202968][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.242936][ T3535] loop3: detected capacity change from 0 to 512 [ 31.253919][ T3536] loop2: detected capacity change from 0 to 512 [ 31.263043][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.284546][ T3536] EXT4-fs: test_dummy_encryption option not supported [ 31.293952][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.317467][ T3535] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 31.325963][ T3535] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 31.334977][ T3535] EXT4-fs (loop3): 1 truncate cleaned up [ 31.341195][ T3535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.418152][ T3529] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 31.450528][ T3529] futex_wake_op: syz.2.13 tries to shift op by -1; fix this program [ 31.513373][ T3545] loop4: detected capacity change from 0 to 128 [ 31.564002][ T3547] geneve2: entered promiscuous mode [ 31.585417][ T2145] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 31.611662][ T2145] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 31.682912][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.723722][ T3545] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.831424][ T3545] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.880363][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.887558][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.099311][ T3556] loop3: detected capacity change from 0 to 128 [ 32.111316][ T3556] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.127325][ T3556] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.886836][ T3554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'. [ 33.928322][ T3576] loop1: detected capacity change from 0 to 128 [ 34.245155][ T3576] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.924055][ T3576] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.960941][ T3547] syz.0.16 (3547) used greatest stack depth: 9592 bytes left [ 37.496123][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.514136][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.532940][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.543225][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.640727][ T3583] loop0: detected capacity change from 0 to 1024 [ 37.674907][ T3583] ======================================================= [ 37.674907][ T3583] WARNING: The mand mount option has been deprecated and [ 37.674907][ T3583] and is ignored by this kernel. Remove the mand [ 37.674907][ T3583] option from the mount to silence this warning. [ 37.674907][ T3583] ======================================================= [ 37.865456][ T2145] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 37.874529][ T2145] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 37.883860][ T3583] EXT4-fs: Ignoring removed orlov option [ 37.890049][ T2145] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.899688][ T3583] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 37.899688][ T3583] [ 37.949619][ T2145] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 37.966107][ T3588] loop1: detected capacity change from 0 to 512 [ 38.383146][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.415609][ T3588] EXT4-fs: Ignoring removed bh option [ 38.464550][ T3588] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 38.520890][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 38.520912][ T28] audit: type=1400 audit(1775259425.112:142): avc: denied { read } for pid=3584 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.627594][ T3596] netlink: 'syz.4.21': attribute type 10 has an invalid length. [ 38.869668][ T3588] EXT4-fs error (device loop1): ext4_iget_extra_inode:5040: inode #15: comm syz.1.20: corrupted in-inode xattr: e_value size too large [ 38.899063][ T28] audit: type=1400 audit(1775259425.242:143): avc: denied { create } for pid=3594 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.921393][ T3588] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.928723][ T3588] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.20: couldn't read orphan inode 15 (err -117) [ 38.937887][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 38.937909][ C0] EXT4-fs (loop1): initial error at time 1775259425: ext4_iget_extra_inode:5040: inode 15 [ 38.937941][ C0] EXT4-fs (loop1): last error at time 1775259425: ext4_iget_extra_inode:5040: inode 15 [ 38.981006][ T28] audit: type=1400 audit(1775259425.262:144): avc: denied { create } for pid=3582 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 39.029299][ T3596] veth1_macvtap: left promiscuous mode [ 39.043962][ T3588] loop1: lost filesystem error report for type 5 error -117 [ 39.044023][ T28] audit: type=1400 audit(1775259425.272:145): avc: denied { ioctl } for pid=3594 comm="syz.3.24" path="socket:[4087]" dev="sockfs" ino=4087 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.092942][ T3602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21'. [ 39.117092][ T3588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.132762][ T2145] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.172625][ T2145] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 39.224956][ T3588] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.247161][ T2145] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.258640][ T28] audit: type=1400 audit(1775259425.272:146): avc: denied { connect } for pid=3594 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.306837][ T2145] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 39.333218][ T3609] FAULT_INJECTION: forcing a failure. [ 39.333218][ T3609] name failslab, interval 1, probability 0, space 0, times 1 [ 39.361833][ T2145] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.374665][ T28] audit: type=1400 audit(1775259425.272:147): avc: denied { write } for pid=3594 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.410865][ T2145] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 39.421422][ T3609] CPU: 0 UID: 0 PID: 3609 Comm: syz.4.26 Not tainted syzkaller #0 PREEMPT(full) [ 39.421445][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 39.421456][ T3609] Call Trace: [ 39.421463][ T3609] [ 39.421470][ T3609] __dump_stack+0x1d/0x30 [ 39.421494][ T3609] dump_stack_lvl+0x95/0xd0 [ 39.421514][ T3609] dump_stack+0x15/0x1b [ 39.421537][ T3609] should_fail_ex+0x263/0x280 [ 39.421561][ T3609] should_failslab+0x8c/0xb0 [ 39.421580][ T3609] kmem_cache_alloc_noprof+0x66/0x400 [ 39.421601][ T3609] ? anon_vma_clone+0xc7/0x450 [ 39.421629][ T3609] anon_vma_clone+0xc7/0x450 [ 39.421656][ T3609] __split_vma+0x2c0/0x640 [ 39.421678][ T3609] ? mas_find+0x5d5/0x700 [ 39.421698][ T3609] vms_gather_munmap_vmas+0x2bc/0x850 [ 39.421726][ T3609] do_vmi_align_munmap+0x1e1/0x400 [ 39.421759][ T3609] do_vmi_munmap+0x1da/0x220 [ 39.421786][ T3609] do_munmap+0x8d/0xc0 [ 39.421815][ T3609] mremap_to+0x1a3/0x440 [ 39.421837][ T3609] ? check_prep_vma+0x49b/0x670 [ 39.421858][ T3609] __se_sys_mremap+0x7dd/0xb50 [ 39.421882][ T3609] ? ksys_write+0x194/0x1a0 [ 39.421899][ T3609] __x64_sys_mremap+0x67/0x80 [ 39.421920][ T3609] x64_sys_call+0x29db/0x3020 [ 39.421942][ T3609] do_syscall_64+0x12c/0x370 [ 39.421964][ T3609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.421984][ T3609] RIP: 0033:0x7fb3a3c7c819 [ 39.421999][ T3609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.422028][ T3609] RSP: 002b:00007fb3a26d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 39.422049][ T3609] RAX: ffffffffffffffda RBX: 00007fb3a3ef5fa0 RCX: 00007fb3a3c7c819 [ 39.422063][ T3609] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 00002000007ff000 [ 39.422076][ T3609] RBP: 00007fb3a26d7090 R08: 0000200000580000 R09: 0000000000000000 [ 39.422088][ T3609] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 39.422100][ T3609] R13: 00007fb3a3ef6038 R14: 00007fb3a3ef5fa0 R15: 00007ffedb69d828 [ 39.422115][ T3609] [ 39.650899][ T28] audit: type=1400 audit(1775259425.472:148): avc: denied { name_bind } for pid=3594 comm="syz.3.24" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.672340][ T28] audit: type=1400 audit(1775259425.472:149): avc: denied { node_bind } for pid=3594 comm="syz.3.24" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 39.694646][ T28] audit: type=1400 audit(1775259425.842:150): avc: denied { read write } for pid=3587 comm="syz.1.20" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.717965][ T28] audit: type=1400 audit(1775259425.842:151): avc: denied { open } for pid=3587 comm="syz.1.20" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.882758][ T3619] IPVS: length: 251 != 8 [ 39.949032][ T3626] netlink: 71 bytes leftover after parsing attributes in process `syz.3.32'. [ 39.985670][ T3626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 40.063687][ T3626] loop3: detected capacity change from 0 to 512 [ 40.079752][ T3626] EXT4-fs: test_dummy_encryption option not supported [ 40.109444][ T3626] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 40.125660][ T3626] futex_wake_op: syz.3.32 tries to shift op by -1; fix this program [ 40.216817][ T3626] syzkaller0: entered promiscuous mode [ 40.222717][ T3626] syzkaller0: entered allmulticast mode [ 40.260113][ T3583] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 40.267918][ T3583] netlink: 'syz.0.22': attribute type 4 has an invalid length. [ 40.275802][ T3583] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.22'. [ 40.366090][ T3643] netlink: 'syz.0.36': attribute type 10 has an invalid length. [ 40.403265][ T3643] veth1_macvtap: left promiscuous mode [ 40.415510][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.430610][ T3646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.36'. [ 40.448870][ T3648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.37'. [ 40.684016][ T3653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.699727][ T3653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.125858][ T3657] geneve2: entered promiscuous mode [ 42.452836][ T2025] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 42.482993][ T2145] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 42.996949][ T3662] FAULT_INJECTION: forcing a failure. [ 42.996949][ T3662] name failslab, interval 1, probability 0, space 0, times 0 [ 43.026980][ T3662] CPU: 1 UID: 0 PID: 3662 Comm: syz.0.41 Not tainted syzkaller #0 PREEMPT(full) [ 43.027008][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 43.027020][ T3662] Call Trace: [ 43.027025][ T3662] [ 43.027031][ T3662] __dump_stack+0x1d/0x30 [ 43.027054][ T3662] dump_stack_lvl+0x95/0xd0 [ 43.027072][ T3662] dump_stack+0x15/0x1b [ 43.027089][ T3662] should_fail_ex+0x263/0x280 [ 43.027115][ T3662] should_failslab+0x8c/0xb0 [ 43.027134][ T3662] kmem_cache_alloc_noprof+0x66/0x400 [ 43.027157][ T3662] ? mas_alloc_nodes+0x1a2/0x210 [ 43.027182][ T3662] mas_alloc_nodes+0x1a2/0x210 [ 43.027201][ T3662] mas_preallocate+0x2ca/0x510 [ 43.027223][ T3662] commit_merge+0x39e/0x720 [ 43.027252][ T3662] vma_expand+0x315/0x510 [ 43.027280][ T3662] vma_merge_new_range+0x29c/0x320 [ 43.027306][ T3662] copy_vma+0x34b/0x640 [ 43.027326][ T3662] move_vma+0x45c/0xd00 [ 43.027346][ T3662] ? arch_get_unmapped_area_topdown+0x152/0x550 [ 43.027367][ T3662] ? __rcu_read_unlock+0x4e/0x70 [ 43.027389][ T3662] ? cap_mmap_addr+0xb1/0x280 [ 43.027412][ T3662] ? security_mmap_addr+0x10/0x60 [ 43.027431][ T3662] ? __get_unmapped_area+0x2c8/0x2f0 [ 43.027453][ T3662] mremap_to+0x3ea/0x440 [ 43.027472][ T3662] ? check_prep_vma+0x49b/0x670 [ 43.027496][ T3662] __se_sys_mremap+0x7dd/0xb50 [ 43.027526][ T3662] ? ksys_write+0x194/0x1a0 [ 43.027546][ T3662] __x64_sys_mremap+0x67/0x80 [ 43.027566][ T3662] x64_sys_call+0x29db/0x3020 [ 43.027589][ T3662] do_syscall_64+0x12c/0x370 [ 43.027614][ T3662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.027636][ T3662] RIP: 0033:0x7f6e997bc819 [ 43.027652][ T3662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.027668][ T3662] RSP: 002b:00007f6e98217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 43.027686][ T3662] RAX: ffffffffffffffda RBX: 00007f6e99a35fa0 RCX: 00007f6e997bc819 [ 43.027698][ T3662] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 00002000007ff000 [ 43.027709][ T3662] RBP: 00007f6e98217090 R08: 0000200000580000 R09: 0000000000000000 [ 43.027719][ T3662] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 43.027729][ T3662] R13: 00007f6e99a36038 R14: 00007f6e99a35fa0 R15: 00007ffceaa1f378 [ 43.027747][ T3662] [ 43.386351][ T2145] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 43.395910][ T2145] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 43.629197][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 43.629220][ T28] audit: type=1400 audit(1775259430.252:176): avc: denied { bind } for pid=3666 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.656814][ T3657] syz.4.39 (3657) used greatest stack depth: 9528 bytes left [ 43.729079][ T3672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=3672 comm=syz.2.43 [ 43.783373][ T3676] hsr0: entered promiscuous mode [ 43.831069][ T28] audit: type=1400 audit(1775259430.452:177): avc: denied { create } for pid=3675 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 43.904815][ T3684] loop0: detected capacity change from 0 to 512 [ 43.951385][ T28] audit: type=1400 audit(1775259430.482:178): avc: denied { ioctl } for pid=3675 comm="syz.1.46" path="socket:[5357]" dev="sockfs" ino=5357 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 43.986820][ T3684] EXT4-fs: Ignoring removed nobh option [ 44.004086][ T28] audit: type=1400 audit(1775259430.632:179): avc: denied { create } for pid=3685 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 44.040912][ T3684] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.064790][ T3684] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.080372][ T28] audit: type=1400 audit(1775259430.692:180): avc: denied { mounton } for pid=3685 comm="syz.1.50" path="/8/file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.110321][ T3698] syzkaller0: entered promiscuous mode [ 44.131389][ T3698] syzkaller0: entered allmulticast mode [ 44.211727][ T3702] geneve2: entered promiscuous mode [ 44.233279][ T1937] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 44.249430][ T1937] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 44.265032][ T3684] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.282150][ T1937] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 44.327292][ T3684] EXT4-fs (loop0): 1 truncate cleaned up [ 44.377494][ T1937] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 44.427644][ T28] audit: type=1400 audit(1775259430.802:181): avc: denied { create } for pid=3697 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.448969][ T3684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.124761][ T28] audit: type=1400 audit(1775259430.872:182): avc: denied { setopt } for pid=3697 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.229189][ T28] audit: type=1400 audit(1775259430.872:183): avc: denied { write } for pid=3697 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.393309][ T28] audit: type=1400 audit(1775259431.832:184): avc: denied { add_name } for pid=3683 comm="syz.0.48" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.442786][ T3723] FAULT_INJECTION: forcing a failure. [ 45.442786][ T3723] name failslab, interval 1, probability 0, space 0, times 0 [ 45.458809][ T3684] 9p: Bad value for 'wfdno' [ 45.641493][ T3723] CPU: 1 UID: 0 PID: 3723 Comm: syz.2.56 Not tainted syzkaller #0 PREEMPT(full) [ 45.641521][ T3723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 45.641533][ T3723] Call Trace: [ 45.641540][ T3723] [ 45.641548][ T3723] __dump_stack+0x1d/0x30 [ 45.641573][ T3723] dump_stack_lvl+0x95/0xd0 [ 45.641591][ T3723] dump_stack+0x15/0x1b [ 45.641611][ T3723] should_fail_ex+0x263/0x280 [ 45.641637][ T3723] should_failslab+0x8c/0xb0 [ 45.641659][ T3723] kmem_cache_alloc_noprof+0x66/0x400 [ 45.641680][ T3723] ? vm_area_dup+0x33/0x2c0 [ 45.641707][ T3723] vm_area_dup+0x33/0x2c0 [ 45.641726][ T3723] __split_vma+0xe9/0x640 [ 45.641743][ T3723] ? commit_merge+0x6ca/0x720 [ 45.641772][ T3723] vms_gather_munmap_vmas+0x184/0x850 [ 45.641803][ T3723] ? vma_expand+0x437/0x510 [ 45.641834][ T3723] do_vmi_align_munmap+0x1e1/0x400 [ 45.641869][ T3723] do_vmi_munmap+0x1da/0x220 [ 45.641895][ T3723] move_vma+0xa19/0xd00 [ 45.641917][ T3723] ? cap_mmap_addr+0xb1/0x280 [ 45.641939][ T3723] ? security_mmap_addr+0x10/0x60 [ 45.641964][ T3723] mremap_to+0x3ea/0x440 [ 45.641981][ T3723] ? check_prep_vma+0x49b/0x670 [ 45.642002][ T3723] __se_sys_mremap+0x7dd/0xb50 [ 45.642030][ T3723] ? ksys_write+0x194/0x1a0 [ 45.642050][ T3723] __x64_sys_mremap+0x67/0x80 [ 45.642072][ T3723] x64_sys_call+0x29db/0x3020 [ 45.642098][ T3723] do_syscall_64+0x12c/0x370 [ 45.642124][ T3723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.642146][ T3723] RIP: 0033:0x7f7a8632c819 [ 45.642160][ T3723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.642177][ T3723] RSP: 002b:00007f7a84d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 45.642197][ T3723] RAX: ffffffffffffffda RBX: 00007f7a865a5fa0 RCX: 00007f7a8632c819 [ 45.642211][ T3723] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 00002000007ff000 [ 45.642224][ T3723] RBP: 00007f7a84d87090 R08: 0000200000580000 R09: 0000000000000000 [ 45.642237][ T3723] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 45.642249][ T3723] R13: 00007f7a865a6038 R14: 00007f7a865a5fa0 R15: 00007ffd2c81e218 [ 45.642268][ T3723] [ 45.648687][ T28] audit: type=1400 audit(1775259431.832:185): avc: denied { create } for pid=3683 comm="syz.0.48" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.928856][ T3736] can0: slcan on ttyS3. [ 45.936543][ T3737] IPVS: length: 194 != 8 [ 45.990999][ T3736] can0 (unregistered): slcan off ttyS3. [ 46.085341][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.192154][ T3753] sctp: [Deprecated]: syz.0.66 (pid 3753) Use of int in max_burst socket option. [ 46.192154][ T3753] Use struct sctp_assoc_value instead [ 46.413301][ T3759] loop4: detected capacity change from 0 to 256 [ 46.443337][ T3753] syz.0.66 (3753) used greatest stack depth: 9416 bytes left [ 46.623808][ T3762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 46.795731][ T3759] FAT-fs (loop4): Directory bread(block 64) failed [ 46.851438][ T3759] FAT-fs (loop4): Directory bread(block 65) failed [ 46.893435][ T3763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 46.929993][ T3759] FAT-fs (loop4): Directory bread(block 66) failed [ 46.950240][ T3762] openvswitch: netlink: Missing key (keys=40, expected=100) [ 46.979632][ T3759] FAT-fs (loop4): Directory bread(block 67) failed [ 46.989827][ T3759] FAT-fs (loop4): Directory bread(block 68) failed [ 47.070814][ T3759] FAT-fs (loop4): Directory bread(block 69) failed [ 47.081197][ T3767] loop3: detected capacity change from 0 to 4096 [ 47.085404][ T3759] FAT-fs (loop4): Directory bread(block 70) failed [ 47.102315][ T3767] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 47.104716][ T3759] FAT-fs (loop4): Directory bread(block 71) failed [ 47.140871][ T3759] FAT-fs (loop4): Directory bread(block 72) failed [ 47.160385][ T3759] FAT-fs (loop4): Directory bread(block 73) failed [ 47.187218][ T3773] FAULT_INJECTION: forcing a failure. [ 47.187218][ T3773] name failslab, interval 1, probability 0, space 0, times 0 [ 47.211694][ T3771] netlink: 'syz.1.70': attribute type 4 has an invalid length. [ 47.254046][ T3773] CPU: 0 UID: 0 PID: 3773 Comm: syz.2.71 Not tainted syzkaller #0 PREEMPT(full) [ 47.254073][ T3773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.254084][ T3773] Call Trace: [ 47.254089][ T3773] [ 47.254095][ T3773] __dump_stack+0x1d/0x30 [ 47.254117][ T3773] dump_stack_lvl+0x95/0xd0 [ 47.254135][ T3773] dump_stack+0x15/0x1b [ 47.254152][ T3773] should_fail_ex+0x263/0x280 [ 47.254179][ T3773] should_failslab+0x8c/0xb0 [ 47.254201][ T3773] kmem_cache_alloc_noprof+0x66/0x400 [ 47.254224][ T3773] ? mas_alloc_nodes+0x1a2/0x210 [ 47.254247][ T3773] mas_alloc_nodes+0x1a2/0x210 [ 47.254265][ T3773] mas_preallocate+0x2ca/0x510 [ 47.254288][ T3773] __split_vma+0x240/0x640 [ 47.254304][ T3773] ? commit_merge+0x6ca/0x720 [ 47.254333][ T3773] vms_gather_munmap_vmas+0x184/0x850 [ 47.254364][ T3773] ? vma_expand+0x437/0x510 [ 47.254395][ T3773] do_vmi_align_munmap+0x1e1/0x400 [ 47.254429][ T3773] do_vmi_munmap+0x1da/0x220 [ 47.254455][ T3773] move_vma+0xa19/0xd00 [ 47.254476][ T3773] ? cap_mmap_addr+0xb1/0x280 [ 47.254505][ T3773] ? security_mmap_addr+0x10/0x60 [ 47.254532][ T3773] mremap_to+0x3ea/0x440 [ 47.254553][ T3773] ? check_prep_vma+0x49b/0x670 [ 47.254578][ T3773] __se_sys_mremap+0x7dd/0xb50 [ 47.254603][ T3773] ? ksys_write+0x194/0x1a0 [ 47.254619][ T3773] __x64_sys_mremap+0x67/0x80 [ 47.254636][ T3773] x64_sys_call+0x29db/0x3020 [ 47.254660][ T3773] do_syscall_64+0x12c/0x370 [ 47.254686][ T3773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.254708][ T3773] RIP: 0033:0x7f7a8632c819 [ 47.254723][ T3773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.254739][ T3773] RSP: 002b:00007f7a84d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 47.254759][ T3773] RAX: ffffffffffffffda RBX: 00007f7a865a5fa0 RCX: 00007f7a8632c819 [ 47.254770][ T3773] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 00002000007ff000 [ 47.254781][ T3773] RBP: 00007f7a84d87090 R08: 0000200000580000 R09: 0000000000000000 [ 47.254792][ T3773] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 47.254802][ T3773] R13: 00007f7a865a6038 R14: 00007f7a865a5fa0 R15: 00007ffd2c81e218 [ 47.254818][ T3773] [ 47.328117][ T3767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64026 sclass=netlink_route_socket pid=3767 comm=syz.3.69 [ 47.504041][ T3782] syz.4.58: attempt to access beyond end of device [ 47.504041][ T3782] loop4: rw=2049, sector=1192, nr_sectors = 8 limit=256 [ 47.522156][ T3778] can0: slcan on ttyS3. [ 47.528447][ T3783] loop2: detected capacity change from 0 to 128 [ 47.667403][ T3779] can0 (unregistered): slcan off ttyS3. [ 47.723036][ T3806] netlink: 71 bytes leftover after parsing attributes in process `syz.0.77'. [ 47.777395][ T3806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 47.866717][ T3814] loop2: detected capacity change from 0 to 164 [ 47.889460][ T3806] loop0: detected capacity change from 0 to 512 [ 47.962328][ T3806] EXT4-fs: test_dummy_encryption option not supported [ 47.998138][ T1937] kworker/u8:8: attempt to access beyond end of device [ 47.998138][ T1937] loop4: rw=1, sector=1200, nr_sectors = 568 limit=256 [ 48.023119][ T1937] kworker/u8:8: attempt to access beyond end of device [ 48.023119][ T1937] loop4: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 48.042849][ T3806] futex_wake_op: syz.0.77 tries to shift op by -1; fix this program [ 48.051346][ T1937] kworker/u8:8: attempt to access beyond end of device [ 48.051346][ T1937] loop4: rw=1, sector=1960, nr_sectors = 1348 limit=256 [ 48.158223][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 48.182067][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 48.220333][ T3847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.80'. [ 48.621884][ T3866] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 48.636468][ T3865] loop3: detected capacity change from 0 to 2048 [ 48.655673][ T3865] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 48.672718][ T3865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.686433][ T28] kauditd_printk_skb: 165 callbacks suppressed [ 48.686446][ T28] audit: type=1326 audit(1775267627.311:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.3.92" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72ffb0c819 code=0x0 [ 48.716241][ T28] audit: type=1400 audit(1775267627.311:352): avc: denied { read write } for pid=3863 comm="syz.2.91" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.739990][ T28] audit: type=1400 audit(1775267627.311:353): avc: denied { ioctl open } for pid=3863 comm="syz.2.91" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.787950][ T28] audit: type=1400 audit(1775267627.411:354): avc: denied { create } for pid=3864 comm="syz.3.92" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.953550][ T28] audit: type=1326 audit(1775267627.581:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde57a7c819 code=0x7ffc0000 [ 48.976889][ T28] audit: type=1326 audit(1775267627.581:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde57a7c819 code=0x7ffc0000 [ 49.008244][ T28] audit: type=1326 audit(1775267627.581:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde57a7c819 code=0x7ffc0000 [ 49.034158][ T28] audit: type=1326 audit(1775267627.581:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fde57a7c819 code=0x7ffc0000 [ 49.057692][ T28] audit: type=1326 audit(1775267627.601:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde57a7c819 code=0x7ffc0000 [ 49.070221][ T3880] netlink: 'syz.4.95': attribute type 1 has an invalid length. [ 49.081426][ T28] audit: type=1326 audit(1775267627.601:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde57a7c819 code=0x7ffc0000 [ 49.156025][ T3882] netlink: 71 bytes leftover after parsing attributes in process `syz.1.96'. [ 49.172741][ T3882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 49.187955][ T3882] futex_wake_op: syz.1.96 tries to shift op by -1; fix this program [ 49.282365][ T3889] netlink: 44 bytes leftover after parsing attributes in process `syz.1.97'. [ 49.458290][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.506484][ T3915] FAULT_INJECTION: forcing a failure. [ 49.506484][ T3915] name failslab, interval 1, probability 0, space 0, times 0 [ 49.519450][ T3915] CPU: 0 UID: 0 PID: 3915 Comm: syz.3.106 Not tainted syzkaller #0 PREEMPT(full) [ 49.519475][ T3915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.519487][ T3915] Call Trace: [ 49.519493][ T3915] [ 49.519500][ T3915] __dump_stack+0x1d/0x30 [ 49.519526][ T3915] dump_stack_lvl+0x95/0xd0 [ 49.519548][ T3915] dump_stack+0x15/0x1b [ 49.519568][ T3915] should_fail_ex+0x263/0x280 [ 49.519595][ T3915] should_failslab+0x8c/0xb0 [ 49.519615][ T3915] kmem_cache_alloc_noprof+0x66/0x400 [ 49.519635][ T3915] ? mas_alloc_nodes+0x1a2/0x210 [ 49.519655][ T3915] mas_alloc_nodes+0x1a2/0x210 [ 49.519673][ T3915] mas_preallocate+0x2ca/0x510 [ 49.519696][ T3915] __split_vma+0x240/0x640 [ 49.519716][ T3915] ? mas_find+0x5d5/0x700 [ 49.519739][ T3915] vms_gather_munmap_vmas+0x2bc/0x850 [ 49.519773][ T3915] do_vmi_align_munmap+0x1e1/0x400 [ 49.519808][ T3915] do_vmi_munmap+0x1da/0x220 [ 49.519836][ T3915] move_vma+0xa19/0xd00 [ 49.519856][ T3915] ? cap_mmap_addr+0xb1/0x280 [ 49.519877][ T3915] ? security_mmap_addr+0x10/0x60 [ 49.519901][ T3915] mremap_to+0x3ea/0x440 [ 49.519921][ T3915] ? check_prep_vma+0x49b/0x670 [ 49.519943][ T3915] __se_sys_mremap+0x7dd/0xb50 [ 49.519970][ T3915] ? ksys_write+0x194/0x1a0 [ 49.519985][ T3915] __x64_sys_mremap+0x67/0x80 [ 49.519997][ T3915] x64_sys_call+0x29db/0x3020 [ 49.520018][ T3915] do_syscall_64+0x12c/0x370 [ 49.520033][ T3915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.520045][ T3915] RIP: 0033:0x7f72ffb0c819 [ 49.520054][ T3915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.520064][ T3915] RSP: 002b:00007f72fe55f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 49.520076][ T3915] RAX: ffffffffffffffda RBX: 00007f72ffd85fa0 RCX: 00007f72ffb0c819 [ 49.520083][ T3915] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 00002000007ff000 [ 49.520090][ T3915] RBP: 00007f72fe55f090 R08: 0000200000580000 R09: 0000000000000000 [ 49.520098][ T3915] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 49.520104][ T3915] R13: 00007f72ffd86038 R14: 00007f72ffd85fa0 R15: 00007ffc4fc6a978 [ 49.520115][ T3915] [ 49.961501][ T3931] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.010338][ T3923] Zero length message leads to an empty skb [ 50.048125][ T3936] loop2: detected capacity change from 0 to 128 [ 50.057186][ T3929] loop0: detected capacity change from 0 to 512 [ 50.073650][ T3936] syz.2.114: attempt to access beyond end of device [ 50.073650][ T3936] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 50.100304][ T3929] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.128488][ T3936] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 50.147351][ T3936] syz.2.114: attempt to access beyond end of device [ 50.147351][ T3936] loop2: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 50.161059][ T3936] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 50.169613][ T3936] syz.2.114: attempt to access beyond end of device [ 50.169613][ T3936] loop2: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 50.184168][ T3936] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 50.193385][ T3936] syz.2.114: attempt to access beyond end of device [ 50.193385][ T3936] loop2: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 50.207288][ T3936] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 50.216055][ T3936] syz.2.114: attempt to access beyond end of device [ 50.216055][ T3936] loop2: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 50.229742][ T3936] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 50.238364][ T3936] syz.2.114: attempt to access beyond end of device [ 50.238364][ T3936] loop2: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 50.252994][ T3936] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 50.261575][ T3936] Buffer I/O error on dev loop2, logical block 135, lost async page write [ 50.270263][ T3936] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 50.280518][ T3936] Buffer I/O error on dev loop2, logical block 145, lost async page write [ 50.289174][ T3936] Buffer I/O error on dev loop2, logical block 146, lost async page write [ 50.385012][ T3953] loop3: detected capacity change from 0 to 1024 [ 50.391777][ T3953] EXT4-fs: Ignoring removed bh option [ 50.405018][ T3953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.417751][ T3959] FAULT_INJECTION: forcing a failure. [ 50.417751][ T3959] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.431295][ T3959] CPU: 1 UID: 0 PID: 3959 Comm: syz.1.119 Not tainted syzkaller #0 PREEMPT(full) [ 50.431322][ T3959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.431334][ T3959] Call Trace: [ 50.431341][ T3959] [ 50.431348][ T3959] __dump_stack+0x1d/0x30 [ 50.431433][ T3959] dump_stack_lvl+0x95/0xd0 [ 50.431457][ T3959] dump_stack+0x15/0x1b [ 50.431573][ T3959] should_fail_ex+0x263/0x280 [ 50.431600][ T3959] should_fail+0xb/0x20 [ 50.431620][ T3959] should_fail_usercopy+0x1a/0x20 [ 50.431663][ T3959] _copy_to_user+0x20/0xa0 [ 50.431694][ T3959] simple_read_from_buffer+0xb5/0x130 [ 50.431770][ T3959] proc_fail_nth_read+0x10e/0x150 [ 50.431848][ T3959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.431956][ T3959] vfs_read+0x1ab/0x7f0 [ 50.431975][ T3959] ? __rcu_read_unlock+0x4e/0x70 [ 50.432043][ T3959] ? __fget_files+0x184/0x1c0 [ 50.432141][ T3959] ? mutex_lock+0x57/0x90 [ 50.432162][ T3959] ksys_read+0xdc/0x1a0 [ 50.432182][ T3959] __x64_sys_read+0x40/0x50 [ 50.432202][ T3959] x64_sys_call+0x2886/0x3020 [ 50.432302][ T3959] do_syscall_64+0x12c/0x370 [ 50.432329][ T3959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.432351][ T3959] RIP: 0033:0x7fde57a3d04e [ 50.432367][ T3959] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 50.432384][ T3959] RSP: 002b:00007fde564cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.432428][ T3959] RAX: ffffffffffffffda RBX: 00007fde564cf6c0 RCX: 00007fde57a3d04e [ 50.432443][ T3959] RDX: 000000000000000f RSI: 00007fde564cf0a0 RDI: 0000000000000003 [ 50.432456][ T3959] RBP: 00007fde564cf090 R08: 0000000000000000 R09: 0000000000000000 [ 50.432469][ T3959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.432482][ T3959] R13: 00007fde57cf6038 R14: 00007fde57cf5fa0 R15: 00007ffe9a2de8c8 [ 50.432586][ T3959] [ 50.743425][ T3979] loop4: detected capacity change from 0 to 512 [ 50.760093][ T3979] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 50.768750][ T3979] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.775782][ T3979] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 50.790971][ T3979] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 50.797710][ T3979] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.120: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 50.815883][ T3979] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 50.816081][ T3979] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.120: couldn't read orphan inode 13 (err -117) [ 50.825212][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 50.825230][ C0] EXT4-fs (loop4): last error at time 1775267629: ext4_ext_check_inode:521: inode 13 [ 50.860120][ T3979] loop4: lost filesystem error report for type 5 error -117 [ 50.860639][ T3979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.911248][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.026345][ T3997] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3997 comm=syz.0.131 [ 51.295328][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.607900][ T4032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=4032 comm=syz.1.144 [ 51.757163][ T4029] set_capacity_and_notify: 1 callbacks suppressed [ 51.757180][ T4029] loop3: detected capacity change from 0 to 512 [ 51.772485][ T4029] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 51.832272][ T4041] netlink: 'syz.0.146': attribute type 2 has an invalid length. [ 51.845298][ T4041] __nla_validate_parse: 9 callbacks suppressed [ 51.845364][ T4041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 51.900749][ T4044] IPv6: sit1: Disabled Multicast RS [ 51.907369][ T4044] sit1: entered allmulticast mode [ 51.958638][ T4041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=4041 comm=syz.0.146 [ 52.111454][ T2145] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.128356][ T4041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=4041 comm=syz.0.146 [ 52.184906][ T4045] loop0: detected capacity change from 0 to 512 [ 52.258833][ T4041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=4041 comm=syz.0.146 [ 52.273986][ T4045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.286633][ T4041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=4041 comm=syz.0.146 [ 52.299582][ T4045] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.324027][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.382496][ T4057] loop0: detected capacity change from 0 to 512 [ 52.389571][ T4057] EXT4-fs: Ignoring removed orlov option [ 52.427747][ T4061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4061 comm=syz.1.151 [ 52.466007][ T4065] loop0: detected capacity change from 0 to 128 [ 52.474509][ T4065] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.486901][ T4065] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.510386][ T4087] capability: warning: `syz.3.156' uses 32-bit capabilities (legacy support in use) [ 54.112701][ T3645] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.118967][ T4050] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 54.219032][ T4082] wireguard0: entered promiscuous mode [ 54.229857][ T4082] wireguard0: entered allmulticast mode [ 54.411161][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.421832][ T4098] program syz.4.162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.458026][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 54.458038][ T28] audit: type=1400 audit(1775267633.081:484): avc: denied { append } for pid=4099 comm="syz.2.164" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.497527][ T28] audit: type=1400 audit(1775267633.081:485): avc: denied { map } for pid=4099 comm="syz.2.164" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.540892][ T28] audit: type=1400 audit(1775267633.081:486): avc: denied { execute } for pid=4099 comm="syz.2.164" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.577033][ T4110] netlink: 40 bytes leftover after parsing attributes in process `syz.4.162'. [ 54.580801][ T28] audit: type=1400 audit(1775267633.201:487): avc: denied { connect } for pid=4108 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.605240][ T4110] netlink: 40 bytes leftover after parsing attributes in process `syz.4.162'. [ 54.633858][ T4110] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 54.680986][ T28] audit: type=1400 audit(1775267633.291:488): avc: denied { create } for pid=4114 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.739271][ T4124] loop3: detected capacity change from 0 to 2048 [ 54.770410][ T4124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.783981][ T4124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.798873][ T28] audit: type=1400 audit(1775267633.421:489): avc: denied { add_name } for pid=4123 comm="syz.3.170" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.867264][ T28] audit: type=1400 audit(1775267633.491:490): avc: denied { lock } for pid=4123 comm="syz.3.170" path="/32/file1/cpuset.effective_cpus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.893336][ T28] audit: type=1400 audit(1775267633.521:491): avc: denied { write } for pid=4123 comm="syz.3.170" name="cpuset.effective_cpus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.972909][ T4134] geneve2: entered promiscuous mode [ 54.994238][ T797] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 55.003454][ T797] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 55.148854][ T4133] loop2: detected capacity change from 0 to 512 [ 55.168245][ T797] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 55.262226][ T797] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 55.323649][ T4133] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 55.332769][ T4133] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 55.361857][ T4133] EXT4-fs (loop2): 1 truncate cleaned up [ 55.384300][ T4133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.827596][ T4145] loop0: detected capacity change from 0 to 128 [ 55.846660][ T4145] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.871082][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.877261][ T4145] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.901469][ T28] audit: type=1400 audit(1775267635.351:492): avc: denied { checkpoint_restore } for pid=4147 comm="syz.2.175" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.992741][ T4158] loop4: detected capacity change from 0 to 512 [ 56.999601][ T4158] EXT4-fs warning (device loop4): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 57.857642][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.889441][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.934133][ T4166] tmpfs: Bad value for 'mpol' [ 57.942684][ T28] audit: type=1400 audit(1775267636.561:493): avc: denied { mounton } for pid=4151 comm="syz.4.177" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 57.975255][ T4166] can0: slcan on ptm1. [ 58.097921][ T4194] netlink: 71 bytes leftover after parsing attributes in process `syz.1.186'. [ 58.118110][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 58.152182][ T4168] loop2: detected capacity change from 0 to 512 [ 58.160481][ T4168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.188533][ T4202] futex_wake_op: syz.1.186 tries to shift op by -1; fix this program [ 58.221549][ T4168] EXT4-fs (loop2): 1 truncate cleaned up [ 58.227834][ T4168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.342523][ T4210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=4210 comm=syz.1.188 [ 58.355188][ T4151] can0 (unregistered): slcan off ptm1. [ 58.750911][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.864176][ T4243] loop4: detected capacity change from 0 to 128 [ 58.900052][ T4243] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20001 [ 59.081519][ T4260] FAULT_INJECTION: forcing a failure. [ 59.081519][ T4260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.129199][ T4260] CPU: 0 UID: 0 PID: 4260 Comm: syz.4.195 Not tainted syzkaller #0 PREEMPT(full) [ 59.129224][ T4260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.129234][ T4260] Call Trace: [ 59.129239][ T4260] [ 59.129246][ T4260] __dump_stack+0x1d/0x30 [ 59.129311][ T4260] dump_stack_lvl+0x95/0xd0 [ 59.129334][ T4260] dump_stack+0x15/0x1b [ 59.129355][ T4260] should_fail_ex+0x263/0x280 [ 59.129379][ T4260] should_fail+0xb/0x20 [ 59.129413][ T4260] should_fail_usercopy+0x1a/0x20 [ 59.129440][ T4260] _copy_from_user+0x1c/0xb0 [ 59.129534][ T4260] memdup_user+0x5e/0xd0 [ 59.129553][ T4260] strndup_user+0x68/0xb0 [ 59.129643][ T4260] __se_sys_mount+0x4d/0x2e0 [ 59.129663][ T4260] ? fput+0x8f/0xc0 [ 59.129687][ T4260] ? ksys_write+0x194/0x1a0 [ 59.129708][ T4260] __x64_sys_mount+0x67/0x80 [ 59.129762][ T4260] x64_sys_call+0x2d61/0x3020 [ 59.129784][ T4260] do_syscall_64+0x12c/0x370 [ 59.129808][ T4260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.129827][ T4260] RIP: 0033:0x7fb3a3c7c819 [ 59.129843][ T4260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.129879][ T4260] RSP: 002b:00007fb3a26d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.129897][ T4260] RAX: ffffffffffffffda RBX: 00007fb3a3ef5fa0 RCX: 00007fb3a3c7c819 [ 59.129909][ T4260] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 59.129921][ T4260] RBP: 00007fb3a26d7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.129932][ T4260] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 59.129943][ T4260] R13: 00007fb3a3ef6038 R14: 00007fb3a3ef5fa0 R15: 00007ffedb69d828 [ 59.129972][ T4260] [ 59.391867][ T4287] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.200'. [ 59.401201][ T4287] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 59.408707][ T4283] loop2: detected capacity change from 0 to 2048 [ 59.431070][ T4285] netlink: 'syz.0.199': attribute type 21 has an invalid length. [ 59.439326][ T4285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.199'. [ 59.451746][ T4283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.493101][ T4274] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.196: bg 0: block 234: padding at end of block bitmap is not set [ 59.507723][ T4274] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 59.520346][ T4274] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.520346][ T4274] [ 59.532106][ T4274] EXT4-fs (loop2): Total free blocks count 0 [ 59.538175][ T4274] EXT4-fs (loop2): Free/Dirty block details [ 59.544434][ T4274] EXT4-fs (loop2): free_blocks=0 [ 59.549472][ T4274] EXT4-fs (loop2): dirty_blocks=16 [ 59.571030][ T4274] EXT4-fs (loop2): Block reservation details [ 59.577117][ T4274] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 59.584858][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 59.584870][ T28] audit: type=1400 audit(1775267638.211:516): avc: denied { map } for pid=4261 comm="syz.2.196" path="/47/file0/blkio.bfq.group_wait_time" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.647256][ T28] audit: type=1326 audit(1775267638.271:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e997bc819 code=0x7ffc0000 [ 59.689991][ T28] audit: type=1326 audit(1775267638.271:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e997bc819 code=0x7ffc0000 [ 59.717775][ T28] audit: type=1326 audit(1775267638.271:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e997bc819 code=0x7ffc0000 [ 59.749184][ T28] audit: type=1326 audit(1775267638.271:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e9977d04e code=0x7ffc0000 [ 59.815474][ T28] audit: type=1326 audit(1775267638.271:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e997bc819 code=0x7ffc0000 [ 59.842684][ T28] audit: type=1326 audit(1775267638.271:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e997bc819 code=0x7ffc0000 [ 59.872756][ T4306] netlink: 'syz.0.201': attribute type 21 has an invalid length. [ 59.893812][ T4306] netlink: 128 bytes leftover after parsing attributes in process `syz.0.201'. [ 59.906971][ T28] audit: type=1326 audit(1775267638.271:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e997bc819 code=0x7ffc0000 [ 59.949920][ T4306] netlink: 'syz.0.201': attribute type 5 has an invalid length. [ 59.985134][ T4306] netlink: 3 bytes leftover after parsing attributes in process `syz.0.201'. [ 60.008868][ T28] audit: type=1326 audit(1775267638.271:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e997bc819 code=0x7ffc0000 [ 60.070825][ T28] audit: type=1326 audit(1775267638.271:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6e9977d04e code=0x7ffc0000 [ 60.188143][ T3313] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #19: comm syz-executor: data will be lost [ 60.199801][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.232752][ T4317] tmpfs: Bad value for 'mpol' [ 60.287711][ T4287] syz.4.200 (4287) used greatest stack depth: 9336 bytes left [ 60.331982][ T4321] loop4: detected capacity change from 0 to 2048 [ 60.338657][ T4321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.363931][ T4321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.392979][ T4328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.206'. [ 60.597844][ T4334] /dev/sg0: Can't lookup blockdev [ 60.622068][ T4326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.989193][ T47] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.010079][ T47] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 61.076428][ T47] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.087212][ T47] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 61.134313][ T47] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.144689][ T47] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 61.188661][ T4343] chnl_net:caif_netlink_parms(): no params data found [ 61.199451][ T47] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.209775][ T47] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 61.244917][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.252125][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.259253][ T4343] bridge_slave_0: entered allmulticast mode [ 61.265937][ T4343] bridge_slave_0: entered promiscuous mode [ 61.272667][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.279821][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.287328][ T4343] bridge_slave_1: entered allmulticast mode [ 61.293713][ T4343] bridge_slave_1: entered promiscuous mode [ 61.310394][ T4343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.320731][ T4343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.342209][ T4343] team0: Port device team_slave_0 added [ 61.348971][ T4343] team0: Port device team_slave_1 added [ 61.374683][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.381876][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.407856][ T4343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.419338][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.426327][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.452361][ T4343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.463148][ T47] bridge_slave_1: left allmulticast mode [ 61.468811][ T47] bridge_slave_1: left promiscuous mode [ 61.474776][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.483237][ T47] bridge_slave_0: left allmulticast mode [ 61.488855][ T47] bridge_slave_0: left promiscuous mode [ 61.494609][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.510273][ T4338] syz.0.211 (4338) used greatest stack depth: 8760 bytes left [ 61.603462][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.612343][ T4359] loop0: detected capacity change from 0 to 164 [ 61.618787][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.627487][ T4359] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.636949][ T47] bond0 (unregistering): Released all slaves [ 61.678228][ T4343] hsr_slave_0: entered promiscuous mode [ 61.684371][ T4343] hsr_slave_1: entered promiscuous mode [ 61.690272][ T4343] debugfs: 'hsr0' already exists in 'hsr' [ 61.696364][ T4343] Cannot create hsr debugfs directory [ 61.711634][ T47] hsr_slave_0: left promiscuous mode [ 61.720804][ T47] hsr_slave_1: left promiscuous mode [ 61.726597][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.734087][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.742018][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.749448][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.760308][ T47] veth0_macvtap: left promiscuous mode [ 61.765919][ T47] veth1_vlan: left promiscuous mode [ 61.771317][ T47] veth0_vlan: left promiscuous mode [ 61.848085][ T47] team0 (unregistering): Port device team_slave_1 removed [ 61.857825][ T47] team0 (unregistering): Port device team_slave_0 removed [ 62.000368][ T4251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 62.073718][ T4343] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.092860][ T4343] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.131644][ T4343] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.153351][ T4343] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.350577][ T4393] loop0: detected capacity change from 0 to 1024 [ 62.352647][ T4398] loop3: detected capacity change from 0 to 256 [ 62.370930][ T4393] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.378285][ T4398] /dev/loop3: Can't open blockdev [ 62.386142][ T4393] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 62.404406][ T4393] EXT4-fs (loop0): orphan cleanup on readonly fs [ 62.419364][ T4343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.429755][ T4393] EXT4-fs error (device loop0): __ext4_get_inode_loc:4797: comm syz.0.220: Invalid inode table block 0 in block_group 0 [ 62.447928][ T4343] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.451405][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 62.464706][ T4393] loop0: lost filesystem error report for type 5 error -117 [ 62.465790][ T4393] EXT4-fs (loop0): Remounting filesystem read-only [ 62.473110][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 62.473129][ C0] EXT4-fs (loop0): initial error at time 1775267641: __ext4_get_inode_loc:4797 [ 62.473150][ C0] EXT4-fs (loop0): last error at time 1775267641: __ext4_get_inode_loc:4797 [ 62.474949][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.480488][ T4393] EXT4-fs (loop0): 1 truncate cleaned up [ 62.486148][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.498352][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 62.534578][ T4393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.539167][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.553968][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.586579][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.593775][ T4414] netlink: 96 bytes leftover after parsing attributes in process `syz.1.223'. [ 62.631270][ T4420] loop0: detected capacity change from 0 to 1024 [ 62.646351][ T4343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.679726][ T4343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.698650][ T4420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.714959][ T4431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.747280][ T4420] EXT4-fs error (device loop0): __ext4_new_inode:1079: comm syz.0.224: reserved inode found cleared - inode=2 [ 62.764702][ T4420] EXT4-fs (loop0): Remounting filesystem read-only [ 62.862673][ T4445] netlink: 'syz.1.227': attribute type 10 has an invalid length. [ 62.867806][ T4343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.888252][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.902671][ T4445] team0: Device xfrm0 is of different type [ 62.940992][ T4449] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 62.947535][ T4449] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.959362][ T4449] vhci_hcd vhci_hcd.0: Device attached [ 63.092994][ T4482] bond1: entered promiscuous mode [ 63.093831][ T4487] loop2: detected capacity change from 0 to 512 [ 63.099308][ T4482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.131029][ T3560] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 63.156623][ T4487] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 63.184501][ T4487] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 63.192799][ T3560] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 63.205183][ T4487] EXT4-fs (loop2): 1 truncate cleaned up [ 63.212656][ T4487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.228419][ T4343] veth0_vlan: entered promiscuous mode [ 63.238529][ T4458] vhci_hcd: connection reset by peer [ 63.255088][ T797] vhci_hcd vhci_hcd.3: stop threads [ 63.260320][ T797] vhci_hcd vhci_hcd.3: release socket [ 63.266477][ T4343] veth1_vlan: entered promiscuous mode [ 63.278064][ T797] vhci_hcd vhci_hcd.3: disconnect device [ 63.284419][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.316023][ T4343] veth0_macvtap: entered promiscuous mode [ 63.325722][ T4343] veth1_macvtap: entered promiscuous mode [ 63.375931][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.383459][ T4513] capability: warning: `syz.0.235' uses deprecated v2 capabilities in a way that may be insecure [ 63.388462][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.410990][ T797] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.431293][ T797] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.480992][ T4518] loop0: detected capacity change from 0 to 1024 [ 63.490237][ T797] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.523241][ T797] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.545213][ T4518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.614928][ T4531] __nla_validate_parse: 1 callbacks suppressed [ 63.614945][ T4531] netlink: 48 bytes leftover after parsing attributes in process `syz.2.239'. [ 63.630662][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 63.652330][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.708166][ T4531] bond1: option xmit_hash_policy: invalid value (64) [ 63.725888][ T4538] netlink: 71 bytes leftover after parsing attributes in process `syz.1.238'. [ 63.741415][ T4531] bond1 (unregistering): Released all slaves [ 63.762279][ T4542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 63.778363][ T4538] futex_wake_op: syz.1.238 tries to shift op by -1; fix this program [ 63.854981][ T4546] loop5: detected capacity change from 0 to 128 [ 63.867984][ T4546] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.992309][ T47] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.183719][ T4555] loop2: detected capacity change from 0 to 512 [ 64.228848][ T4549] xt_hashlimit: size too large, truncated to 1048576 [ 64.260937][ T4555] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.299932][ T4555] EXT4-fs (loop2): 1 truncate cleaned up [ 64.366650][ T4564] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.373975][ T4564] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.382840][ T4555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.409572][ T4564] bridge0: entered allmulticast mode [ 64.800998][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 64.801021][ T28] audit: type=1400 audit(1775267643.421:586): avc: denied { name_bind } for pid=4554 comm="syz.2.243" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.854296][ T4575] netlink: 'syz.3.247': attribute type 7 has an invalid length. [ 65.150520][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.164861][ T4588] netlink: 71 bytes leftover after parsing attributes in process `syz.3.252'. [ 65.166167][ T4589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=4589 comm=syz.5.250 [ 65.185850][ T4582] syzkaller0: entered promiscuous mode [ 65.201666][ T4592] loop2: detected capacity change from 0 to 128 [ 65.207063][ T4582] syzkaller0: entered allmulticast mode [ 65.218159][ T4593] futex_wake_op: syz.3.252 tries to shift op by -1; fix this program [ 65.310399][ T28] audit: type=1400 audit(1775267643.931:587): avc: denied { create } for pid=4596 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 65.344380][ T4601] loop0: detected capacity change from 0 to 512 [ 65.398223][ T4607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 65.431709][ T4601] netlink: 32 bytes leftover after parsing attributes in process `syz.0.255'. [ 65.441180][ T28] audit: type=1400 audit(1775267644.051:588): avc: denied { read write } for pid=4600 comm="syz.0.255" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.466102][ T28] audit: type=1400 audit(1775267644.051:589): avc: denied { open } for pid=4600 comm="syz.0.255" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.526962][ T4613] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20001 [ 65.534560][ T4613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.258'. [ 65.543545][ T3503] IPVS: starting estimator thread 0... [ 65.549465][ T4613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 65.575066][ T4613] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 65.584069][ T4613] bridge1: entered promiscuous mode [ 65.591593][ T4613] bridge1: entered allmulticast mode [ 65.674106][ T4614] IPVS: using max 2304 ests per chain, 115200 per kthread [ 65.814046][ T28] audit: type=1400 audit(1775267644.271:590): avc: denied { read } for pid=4616 comm="syz.0.260" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.837640][ T28] audit: type=1400 audit(1775267644.301:591): avc: denied { accept } for pid=4616 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.753991][ T28] audit: type=1400 audit(1775267645.381:592): avc: denied { block_suspend } for pid=4646 comm="syz.0.266" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.815920][ T28] audit: type=1400 audit(1775267645.411:593): avc: denied { accept } for pid=4646 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.862775][ T4649] netlink: 71 bytes leftover after parsing attributes in process `syz.1.267'. [ 66.908251][ T4649] futex_wake_op: syz.1.267 tries to shift op by -1; fix this program [ 66.930227][ T28] audit: type=1400 audit(1775267645.471:594): avc: denied { listen } for pid=4646 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.990838][ T28] audit: type=1400 audit(1775267645.471:595): avc: denied { accept } for pid=4646 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.249294][ T4671] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 67.355973][ T4677] veth1_to_bridge: entered promiscuous mode [ 67.431775][ T4677] veth1_to_bridge: left promiscuous mode [ 67.591511][ T4684] loop3: detected capacity change from 0 to 512 [ 67.596634][ T4644] Process accounting resumed [ 67.612446][ T4684] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 67.620494][ T4684] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 67.638856][ T4684] EXT4-fs (loop3): 1 truncate cleaned up [ 67.645038][ T4684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.723670][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.766909][ T4694] futex_wake_op: syz.3.280 tries to shift op by -1; fix this program [ 68.300234][ T4704] bond2: option xmit_hash_policy: invalid value (64) [ 68.308357][ T4704] bond2 (unregistering): Released all slaves [ 68.477317][ T4709] FAULT_INJECTION: forcing a failure. [ 68.477317][ T4709] name failslab, interval 1, probability 0, space 0, times 0 [ 68.516778][ T4709] CPU: 1 UID: 0 PID: 4709 Comm: syz.2.282 Not tainted syzkaller #0 PREEMPT(full) [ 68.516835][ T4709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.516848][ T4709] Call Trace: [ 68.516855][ T4709] [ 68.516863][ T4709] __dump_stack+0x1d/0x30 [ 68.516891][ T4709] dump_stack_lvl+0x95/0xd0 [ 68.516913][ T4709] dump_stack+0x15/0x1b [ 68.517009][ T4709] should_fail_ex+0x263/0x280 [ 68.517039][ T4709] should_failslab+0x8c/0xb0 [ 68.517062][ T4709] __kmalloc_noprof+0xb8/0x4e0 [ 68.517145][ T4709] ? security_sb_alloc+0x48/0x100 [ 68.517173][ T4709] ? alloc_super+0x3d/0x580 [ 68.517202][ T4709] security_sb_alloc+0x48/0x100 [ 68.517239][ T4709] alloc_super+0x10d/0x580 [ 68.517269][ T4709] sget_fc+0x24e/0x6e0 [ 68.517300][ T4709] ? __pfx_set_anon_super_fc+0x10/0x10 [ 68.517326][ T4709] ? __pfx_shmem_fill_super+0x10/0x10 [ 68.517390][ T4709] get_tree_nodev+0x2a/0x100 [ 68.517418][ T4709] shmem_get_tree+0x1c/0x30 [ 68.517479][ T4709] vfs_get_tree+0x57/0x1d0 [ 68.517499][ T4709] do_new_mount+0x288/0x8d0 [ 68.517522][ T4709] ? security_capable+0x7b/0x90 [ 68.517599][ T4709] path_mount+0x4d0/0xbc0 [ 68.517700][ T4709] __se_sys_mount+0x28c/0x2e0 [ 68.517719][ T4709] ? fput+0x8f/0xc0 [ 68.517741][ T4709] __x64_sys_mount+0x67/0x80 [ 68.517764][ T4709] x64_sys_call+0x2d61/0x3020 [ 68.517813][ T4709] do_syscall_64+0x12c/0x370 [ 68.517836][ T4709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.517897][ T4709] RIP: 0033:0x7f7a8632c819 [ 68.517915][ T4709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.517932][ T4709] RSP: 002b:00007f7a84d87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.517953][ T4709] RAX: ffffffffffffffda RBX: 00007f7a865a5fa0 RCX: 00007f7a8632c819 [ 68.517968][ T4709] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 68.517981][ T4709] RBP: 00007f7a84d87090 R08: 0000000000000000 R09: 0000000000000000 [ 68.518068][ T4709] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 68.518079][ T4709] R13: 00007f7a865a6038 R14: 00007f7a865a5fa0 R15: 00007ffd2c81e218 [ 68.518098][ T4709] [ 68.745375][ T3560] usb 7-1: enqueue for inactive port 0 [ 68.751650][ T3560] usb 7-1: enqueue for inactive port 0 [ 68.830838][ T3560] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 68.988286][ T4725] loop2: detected capacity change from 0 to 256 [ 70.031536][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 70.031548][ T28] audit: type=1400 audit(1775267648.661:600): avc: denied { read } for pid=4724 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.010397][ T28] audit: type=1400 audit(1775267649.101:601): avc: denied { write } for pid=4722 comm="syz.0.286" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 71.053125][ T28] audit: type=1400 audit(1775267649.681:602): avc: denied { connect } for pid=4724 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.015740][ T28] audit: type=1400 audit(1775267649.701:603): avc: denied { getopt } for pid=4724 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.497440][ T4743] loop3: detected capacity change from 0 to 512 [ 72.511171][ T4745] futex_wake_op: syz.2.292 tries to shift op by -1; fix this program [ 72.527478][ T4743] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 72.550278][ T4743] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 72.579406][ T4743] EXT4-fs (loop3): 1 truncate cleaned up [ 72.601730][ T4743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.675063][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.675969][ T4751] loop2: detected capacity change from 0 to 8192 [ 72.728266][ T4760] FAULT_INJECTION: forcing a failure. [ 72.728266][ T4760] name failslab, interval 1, probability 0, space 0, times 0 [ 72.742090][ T4754] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 72.756050][ T4760] CPU: 0 UID: 0 PID: 4760 Comm: syz.2.297 Not tainted syzkaller #0 PREEMPT(full) [ 72.756074][ T4760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.756084][ T4760] Call Trace: [ 72.756090][ T4760] [ 72.756097][ T4760] __dump_stack+0x1d/0x30 [ 72.756124][ T4760] dump_stack_lvl+0x95/0xd0 [ 72.756171][ T4760] dump_stack+0x15/0x1b [ 72.756193][ T4760] should_fail_ex+0x263/0x280 [ 72.756221][ T4760] ? shrinker_alloc+0x3b/0x650 [ 72.756245][ T4760] should_failslab+0x8c/0xb0 [ 72.756305][ T4760] __kmalloc_cache_noprof+0x5f/0x410 [ 72.756325][ T4760] ? pcpu_alloc_noprof+0xab2/0x1030 [ 72.756349][ T4760] shrinker_alloc+0x3b/0x650 [ 72.756400][ T4760] ? rcu_sync_init+0x32/0x40 [ 72.756441][ T4760] alloc_super+0x41a/0x580 [ 72.756472][ T4760] sget_fc+0x24e/0x6e0 [ 72.756528][ T4760] ? __pfx_set_anon_super_fc+0x10/0x10 [ 72.756571][ T4760] ? __pfx_shmem_fill_super+0x10/0x10 [ 72.756595][ T4760] get_tree_nodev+0x2a/0x100 [ 72.756699][ T4760] shmem_get_tree+0x1c/0x30 [ 72.756724][ T4760] vfs_get_tree+0x57/0x1d0 [ 72.756743][ T4760] do_new_mount+0x288/0x8d0 [ 72.756766][ T4760] ? security_capable+0x7b/0x90 [ 72.756834][ T4760] path_mount+0x4d0/0xbc0 [ 72.756856][ T4760] __se_sys_mount+0x28c/0x2e0 [ 72.756877][ T4760] ? fput+0x8f/0xc0 [ 72.756901][ T4760] __x64_sys_mount+0x67/0x80 [ 72.756978][ T4760] x64_sys_call+0x2d61/0x3020 [ 72.757003][ T4760] do_syscall_64+0x12c/0x370 [ 72.757097][ T4760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.757137][ T4760] RIP: 0033:0x7f7a8632c819 [ 72.757152][ T4760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.757167][ T4760] RSP: 002b:00007f7a84d87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.757185][ T4760] RAX: ffffffffffffffda RBX: 00007f7a865a5fa0 RCX: 00007f7a8632c819 [ 72.757198][ T4760] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 72.757293][ T4760] RBP: 00007f7a84d87090 R08: 0000000000000000 R09: 0000000000000000 [ 72.757306][ T4760] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 72.757317][ T4760] R13: 00007f7a865a6038 R14: 00007f7a865a5fa0 R15: 00007ffd2c81e218 [ 72.757334][ T4760] [ 72.986223][ T28] audit: type=1400 audit(1775267651.611:604): avc: denied { bind } for pid=4756 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.005564][ T28] audit: type=1400 audit(1775267651.611:605): avc: denied { name_bind } for pid=4756 comm="syz.3.296" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 73.027198][ T28] audit: type=1400 audit(1775267651.611:606): avc: denied { node_bind } for pid=4756 comm="syz.3.296" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 73.126070][ T4768] netlink: 'syz.0.301': attribute type 21 has an invalid length. [ 73.126851][ T4770] netlink: 'syz.0.301': attribute type 21 has an invalid length. [ 73.134088][ T4768] IPv6: NLM_F_CREATE should be specified when creating new route [ 73.149389][ T28] audit: type=1326 audit(1775267651.771:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8632c819 code=0x7ffc0000 [ 73.152310][ T4771] loop2: detected capacity change from 0 to 128 [ 73.172753][ T4770] IPv6: NLM_F_CREATE should be specified when creating new route [ 73.186734][ T28] audit: type=1326 audit(1775267651.771:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7a8632c819 code=0x7ffc0000 [ 73.212005][ T4768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.219200][ T4768] IPv6: NLM_F_CREATE should be set when creating new route [ 73.226478][ T4768] IPv6: NLM_F_CREATE should be set when creating new route [ 73.233671][ T4768] IPv6: NLM_F_CREATE should be set when creating new route [ 73.241301][ T28] audit: type=1326 audit(1775267651.771:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8632c819 code=0x7ffc0000 [ 73.260019][ T4770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.318920][ T4774] __nla_validate_parse: 6 callbacks suppressed [ 73.319086][ T4774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.302'. [ 73.353566][ T4774] program syz.5.302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.370497][ T4774] netlink: 44 bytes leftover after parsing attributes in process `syz.5.302'. [ 73.421546][ T4779] loop0: detected capacity change from 0 to 512 [ 73.440610][ T4779] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.448376][ T4781] futex_wake_op: syz.5.304 tries to shift op by -1; fix this program [ 73.472612][ T4779] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 73.612228][ T4800] FAULT_INJECTION: forcing a failure. [ 73.612228][ T4800] name failslab, interval 1, probability 0, space 0, times 0 [ 73.625481][ T4800] CPU: 0 UID: 0 PID: 4800 Comm: syz.0.310 Not tainted syzkaller #0 PREEMPT(full) [ 73.625508][ T4800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 73.625519][ T4800] Call Trace: [ 73.625583][ T4800] [ 73.625591][ T4800] __dump_stack+0x1d/0x30 [ 73.625677][ T4800] dump_stack_lvl+0x95/0xd0 [ 73.625697][ T4800] dump_stack+0x15/0x1b [ 73.625715][ T4800] should_fail_ex+0x263/0x280 [ 73.625781][ T4800] should_failslab+0x8c/0xb0 [ 73.625801][ T4800] __kmalloc_noprof+0xb8/0x4e0 [ 73.625823][ T4800] ? __list_lru_init+0x72/0x2e0 [ 73.625922][ T4800] __list_lru_init+0x72/0x2e0 [ 73.625951][ T4800] alloc_super+0x4d3/0x580 [ 73.625982][ T4800] sget_fc+0x24e/0x6e0 [ 73.626042][ T4800] ? __pfx_set_anon_super_fc+0x10/0x10 [ 73.626068][ T4800] ? __pfx_shmem_fill_super+0x10/0x10 [ 73.626152][ T4800] get_tree_nodev+0x2a/0x100 [ 73.626183][ T4800] shmem_get_tree+0x1c/0x30 [ 73.626287][ T4800] vfs_get_tree+0x57/0x1d0 [ 73.626303][ T4800] do_new_mount+0x288/0x8d0 [ 73.626386][ T4800] ? security_capable+0x7b/0x90 [ 73.626424][ T4800] path_mount+0x4d0/0xbc0 [ 73.626449][ T4800] __se_sys_mount+0x28c/0x2e0 [ 73.626468][ T4800] ? fput+0x8f/0xc0 [ 73.626491][ T4800] __x64_sys_mount+0x67/0x80 [ 73.626552][ T4800] x64_sys_call+0x2d61/0x3020 [ 73.626579][ T4800] do_syscall_64+0x12c/0x370 [ 73.626604][ T4800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.626623][ T4800] RIP: 0033:0x7f6e997bc819 [ 73.626666][ T4800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.626684][ T4800] RSP: 002b:00007f6e98217028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.626702][ T4800] RAX: ffffffffffffffda RBX: 00007f6e99a35fa0 RCX: 00007f6e997bc819 [ 73.626719][ T4800] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 73.626731][ T4800] RBP: 00007f6e98217090 R08: 0000000000000000 R09: 0000000000000000 [ 73.626744][ T4800] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000002 [ 73.626757][ T4800] R13: 00007f6e99a36038 R14: 00007f6e99a35fa0 R15: 00007ffceaa1f378 [ 73.626778][ T4800] [ 73.896692][ T4805] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 74.453009][ T4820] futex_wake_op: syz.0.315 tries to shift op by -1; fix this program [ 74.567004][ T4831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.577664][ T4831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.658396][ T797] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.672869][ T797] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 74.691060][ T797] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.699966][ T797] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 74.708948][ T797] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.726485][ T797] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 74.752390][ T4857] FAULT_INJECTION: forcing a failure. [ 74.752390][ T4857] name failslab, interval 1, probability 0, space 0, times 0 [ 74.765415][ T4857] CPU: 1 UID: 0 PID: 4857 Comm: syz.0.325 Not tainted syzkaller #0 PREEMPT(full) [ 74.765440][ T4857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 74.765452][ T4857] Call Trace: [ 74.765459][ T4857] [ 74.765468][ T4857] __dump_stack+0x1d/0x30 [ 74.765511][ T4857] dump_stack_lvl+0x95/0xd0 [ 74.765535][ T4857] dump_stack+0x15/0x1b [ 74.765557][ T4857] should_fail_ex+0x263/0x280 [ 74.765593][ T4857] should_failslab+0x8c/0xb0 [ 74.765611][ T4857] __kmalloc_noprof+0xb8/0x4e0 [ 74.765635][ T4857] ? __list_lru_init+0x72/0x2e0 [ 74.765708][ T4857] __list_lru_init+0x72/0x2e0 [ 74.765732][ T4857] alloc_super+0x519/0x580 [ 74.765761][ T4857] sget_fc+0x24e/0x6e0 [ 74.765788][ T4857] ? __pfx_set_anon_super_fc+0x10/0x10 [ 74.765850][ T4857] ? __pfx_shmem_fill_super+0x10/0x10 [ 74.765875][ T4857] get_tree_nodev+0x2a/0x100 [ 74.765941][ T4857] shmem_get_tree+0x1c/0x30 [ 74.765965][ T4857] vfs_get_tree+0x57/0x1d0 [ 74.765981][ T4857] do_new_mount+0x288/0x8d0 [ 74.766000][ T4857] ? security_capable+0x7b/0x90 [ 74.766072][ T4857] path_mount+0x4d0/0xbc0 [ 74.766096][ T4857] __se_sys_mount+0x28c/0x2e0 [ 74.766119][ T4857] ? fput+0x8f/0xc0 [ 74.766144][ T4857] __x64_sys_mount+0x67/0x80 [ 74.766167][ T4857] x64_sys_call+0x2d61/0x3020 [ 74.766194][ T4857] do_syscall_64+0x12c/0x370 [ 74.766246][ T4857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.766269][ T4857] RIP: 0033:0x7f6e997bc819 [ 74.766302][ T4857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.766319][ T4857] RSP: 002b:00007f6e98217028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.766338][ T4857] RAX: ffffffffffffffda RBX: 00007f6e99a35fa0 RCX: 00007f6e997bc819 [ 74.766355][ T4857] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 74.766370][ T4857] RBP: 00007f6e98217090 R08: 0000000000000000 R09: 0000000000000000 [ 74.766385][ T4857] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000002 [ 74.766435][ T4857] R13: 00007f6e99a36038 R14: 00007f6e99a35fa0 R15: 00007ffceaa1f378 [ 74.766452][ T4857] [ 74.978159][ T797] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.988039][ T797] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 75.120125][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 75.120139][ T28] audit: type=1326 audit(1775267653.741:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ffb0c819 code=0x7ffc0000 [ 75.150207][ T28] audit: type=1326 audit(1775267653.741:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f72ffb0c819 code=0x7ffc0000 [ 75.180993][ T28] audit: type=1326 audit(1775267653.741:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ffb0c819 code=0x7ffc0000 [ 75.207491][ T28] audit: type=1326 audit(1775267653.741:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72ffacd04e code=0x7ffc0000 [ 75.232368][ T28] audit: type=1326 audit(1775267653.741:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f72ffb0c819 code=0x7ffc0000 [ 75.390670][ T4895] netlink: 'syz.5.337': attribute type 39 has an invalid length. [ 75.401870][ T28] audit: type=1400 audit(1775267653.951:716): avc: denied { bind } for pid=4882 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.619577][ T28] audit: type=1400 audit(1775267654.011:717): avc: denied { accept } for pid=4894 comm="syz.5.337" lport=47923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.741212][ T28] audit: type=1326 audit(1775267654.061:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f72ffb0c819 code=0x7ffc0000 [ 75.770372][ T28] audit: type=1400 audit(1775267654.291:719): avc: denied { setopt } for pid=4898 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.790998][ T28] audit: type=1400 audit(1775267654.331:720): avc: denied { read } for pid=4898 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 75.915331][ T4888] loop0: detected capacity change from 0 to 1024 [ 75.927462][ T4917] FAULT_INJECTION: forcing a failure. [ 75.927462][ T4917] name failslab, interval 1, probability 0, space 0, times 0 [ 75.963497][ T4888] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.970484][ T4917] CPU: 1 UID: 0 PID: 4917 Comm: syz.5.340 Not tainted syzkaller #0 PREEMPT(full) [ 75.970511][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 75.970523][ T4917] Call Trace: [ 75.970530][ T4917] [ 75.970537][ T4917] __dump_stack+0x1d/0x30 [ 75.970610][ T4917] dump_stack_lvl+0x95/0xd0 [ 75.970677][ T4917] dump_stack+0x15/0x1b [ 75.970698][ T4917] should_fail_ex+0x263/0x280 [ 75.970795][ T4917] ? shmem_fill_super+0x59/0x600 [ 75.970828][ T4917] should_failslab+0x8c/0xb0 [ 75.970900][ T4917] __kmalloc_cache_noprof+0x5f/0x410 [ 75.970923][ T4917] ? __pfx_shmem_fill_super+0x10/0x10 [ 75.971000][ T4917] shmem_fill_super+0x59/0x600 [ 75.971024][ T4917] ? sget_fc+0x68a/0x6e0 [ 75.971049][ T4917] ? __pfx_set_anon_super_fc+0x10/0x10 [ 75.971113][ T4917] ? __pfx_shmem_fill_super+0x10/0x10 [ 75.971142][ T4917] get_tree_nodev+0x83/0x100 [ 75.971265][ T4917] shmem_get_tree+0x1c/0x30 [ 75.971292][ T4917] vfs_get_tree+0x57/0x1d0 [ 75.971313][ T4917] do_new_mount+0x288/0x8d0 [ 75.971347][ T4917] ? security_capable+0x7b/0x90 [ 75.971377][ T4917] path_mount+0x4d0/0xbc0 [ 75.971471][ T4917] __se_sys_mount+0x28c/0x2e0 [ 75.971492][ T4917] ? fput+0x8f/0xc0 [ 75.971522][ T4917] __x64_sys_mount+0x67/0x80 [ 75.971544][ T4917] x64_sys_call+0x2d61/0x3020 [ 75.971572][ T4917] do_syscall_64+0x12c/0x370 [ 75.971599][ T4917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.971621][ T4917] RIP: 0033:0x7fb4e77fc819 [ 75.971653][ T4917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.971682][ T4917] RSP: 002b:00007fb4e624f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.971747][ T4917] RAX: ffffffffffffffda RBX: 00007fb4e7a75fa0 RCX: 00007fb4e77fc819 [ 75.971762][ T4917] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 75.971777][ T4917] RBP: 00007fb4e624f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.971866][ T4917] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000002 [ 75.971879][ T4917] R13: 00007fb4e7a76038 R14: 00007fb4e7a75fa0 R15: 00007ffcde306418 [ 75.971901][ T4917] [ 76.199716][ T4890] loop3: detected capacity change from 0 to 32768 [ 76.318869][ T4931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=4931 comm=syz.5.344 [ 76.342349][ T4888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.371202][ T4932] loop3: detected capacity change from 0 to 4096 [ 76.476140][ T4932] EXT4-fs (loop3): #clusters per group too big: 32768 [ 76.562059][ T4957] loop5: detected capacity change from 0 to 8192 [ 76.573841][ T4932] loop3: detected capacity change from 0 to 512 [ 76.591102][ T4932] EXT4-fs: Ignoring removed nobh option [ 76.604845][ T4932] ------------[ cut here ]------------ [ 76.610350][ T4932] EA inode 11 i_nlink=1026 [ 76.610380][ T4932] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.343/4932 [ 76.625484][ T4932] Modules linked in: [ 76.629380][ T4932] CPU: 0 UID: 0 PID: 4932 Comm: syz.3.343 Not tainted syzkaller #0 PREEMPT(full) [ 76.638622][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.648732][ T4932] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 76.651071][ T4964] syz.1.348 uses obsolete (PF_INET,SOCK_PACKET) [ 76.655350][ T4932] Code: 14 34 99 ff 4c 8d 2d 7d a0 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff d2 dd 03 66 66 66 66 66 66 2e [ 76.681231][ T4932] RSP: 0018:ffffc90002dab5a8 EFLAGS: 00010246 [ 76.687305][ T4932] RAX: ffff888101ce8ac8 RBX: ffff88810aa15788 RCX: ffffffff81c02c98 [ 76.695314][ T4932] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 76.703326][ T4932] RBP: 000000000000000b R08: 000188810aa1573b R09: 0000000000000000 [ 76.711318][ T4932] R10: ffffc90002dab4d8 R11: 0001c90002dab4d8 R12: ffff88810aa15738 [ 76.719301][ T4932] R13: ffffffff871dcd00 R14: ffff88810aa156f0 R15: 0000000000000001 [ 76.727393][ T4932] FS: 00007f72fe55f6c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 76.736426][ T4932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.743047][ T4932] CR2: 00007f57fc866000 CR3: 0000000134c14000 CR4: 00000000003506f0 [ 76.751105][ T4932] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.759090][ T4932] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 76.767177][ T4932] Call Trace: [ 76.770452][ T4932] [ 76.773433][ T4932] ext4_xattr_set_entry+0x77c/0x1010 [ 76.778819][ T4932] ext4_xattr_ibody_set+0x184/0x3c0 [ 76.784080][ T4932] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 76.789943][ T4932] __ext4_expand_extra_isize+0x246/0x280 [ 76.795733][ T4932] __ext4_mark_inode_dirty+0x29b/0x400 [ 76.801242][ T4932] ext4_evict_inode+0x865/0xe40 [ 76.806179][ T4932] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.811606][ T4932] evict+0x2af/0x510 [ 76.815517][ T4932] ? __dquot_initialize+0x146/0x7c0 [ 76.820806][ T4932] iput+0x41a/0x580 [ 76.824652][ T4932] ext4_process_orphan+0x1a9/0x1c0 [ 76.829835][ T4932] ext4_orphan_cleanup+0x6a8/0xa00 [ 76.835075][ T4932] ext4_fill_super+0x3414/0x37c0 [ 76.840022][ T4932] ? set_blocksize+0x14c/0x270 [ 76.844849][ T4932] ? setup_bdev_super+0x30e/0x370 [ 76.849995][ T4932] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.855339][ T4932] get_tree_bdev_flags+0x291/0x300 [ 76.860460][ T4932] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.865931][ T4932] get_tree_bdev+0x1f/0x30 [ 76.870412][ T4932] ext4_get_tree+0x1c/0x30 [ 76.874922][ T4932] vfs_get_tree+0x57/0x1d0 [ 76.879349][ T4932] do_new_mount+0x288/0x8d0 [ 76.884068][ T4932] path_mount+0x4d0/0xbc0 [ 76.888417][ T4932] __se_sys_mount+0x28c/0x2e0 [ 76.893144][ T4932] ? __se_sys_mkdirat+0xa2/0xf0 [ 76.897999][ T4932] ? kmem_cache_free+0xc8/0x380 [ 76.902908][ T4932] __x64_sys_mount+0x67/0x80 [ 76.907508][ T4932] x64_sys_call+0x2d61/0x3020 [ 76.912228][ T4932] do_syscall_64+0x12c/0x370 [ 76.916834][ T4932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.922802][ T4932] RIP: 0033:0x7f72ffb0da8a [ 76.927222][ T4932] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.946926][ T4932] RSP: 002b:00007f72fe55ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.955375][ T4932] RAX: ffffffffffffffda RBX: 00007f72fe55eee0 RCX: 00007f72ffb0da8a [ 76.963390][ T4932] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f72fe55eea0 [ 76.971380][ T4932] RBP: 0000200000000180 R08: 00007f72fe55eee0 R09: 0000000000800718 [ 76.979577][ T4932] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 76.987678][ T4932] R13: 00007f72fe55eea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 76.995669][ T4932] [ 76.998671][ T4932] ---[ end trace 0000000000000000 ]--- [ 77.004904][ T4932] EXT4-fs (loop3): 1 orphan inode deleted [ 77.005170][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.011142][ T4932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.077356][ T5000] netlink: 'syz.0.350': attribute type 27 has an invalid length. [ 77.080983][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.098839][ T5000] netlink: 164 bytes leftover after parsing attributes in process `syz.0.350'. [ 77.176317][ T5012] netlink: 236 bytes leftover after parsing attributes in process `syz.0.354'. [ 77.221709][ T5012] netlink: 236 bytes leftover after parsing attributes in process `syz.0.354'. [ 77.240284][ T5023] FAULT_INJECTION: forcing a failure. [ 77.240284][ T5023] name failslab, interval 1, probability 0, space 0, times 0 [ 77.253660][ T5023] CPU: 1 UID: 0 PID: 5023 Comm: syz.1.356 Tainted: G W syzkaller #0 PREEMPT(full) [ 77.253693][ T5023] Tainted: [W]=WARN [ 77.253700][ T5023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.253742][ T5023] Call Trace: [ 77.253748][ T5023] [ 77.253808][ T5023] __dump_stack+0x1d/0x30 [ 77.253861][ T5023] dump_stack_lvl+0x95/0xd0 [ 77.253885][ T5023] dump_stack+0x15/0x1b [ 77.253953][ T5023] should_fail_ex+0x263/0x280 [ 77.253981][ T5023] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 77.254011][ T5023] should_failslab+0x8c/0xb0 [ 77.254056][ T5023] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 77.254077][ T5023] ? shmem_alloc_inode+0x34/0x50 [ 77.254118][ T5023] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 77.254147][ T5023] shmem_alloc_inode+0x34/0x50 [ 77.254194][ T5023] alloc_inode+0x40/0x170 [ 77.254213][ T5023] new_inode+0x1d/0xe0 [ 77.254233][ T5023] shmem_get_inode+0x246/0x750 [ 77.254268][ T5023] shmem_fill_super+0x4d4/0x600 [ 77.254355][ T5023] ? __pfx_shmem_fill_super+0x10/0x10 [ 77.254381][ T5023] get_tree_nodev+0x83/0x100 [ 77.254407][ T5023] shmem_get_tree+0x1c/0x30 [ 77.254492][ T5023] vfs_get_tree+0x57/0x1d0 [ 77.254509][ T5023] do_new_mount+0x288/0x8d0 [ 77.254532][ T5023] ? security_capable+0x7b/0x90 [ 77.254613][ T5023] path_mount+0x4d0/0xbc0 [ 77.254681][ T5023] __se_sys_mount+0x28c/0x2e0 [ 77.254703][ T5023] ? fput+0x8f/0xc0 [ 77.254728][ T5023] __x64_sys_mount+0x67/0x80 [ 77.254751][ T5023] x64_sys_call+0x2d61/0x3020 [ 77.254773][ T5023] do_syscall_64+0x12c/0x370 [ 77.254870][ T5023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.254893][ T5023] RIP: 0033:0x7fde57a7c819 [ 77.254910][ T5023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.254928][ T5023] RSP: 002b:00007fde564cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.254959][ T5023] RAX: ffffffffffffffda RBX: 00007fde57cf5fa0 RCX: 00007fde57a7c819 [ 77.254972][ T5023] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 77.254985][ T5023] RBP: 00007fde564cf090 R08: 0000000000000000 R09: 0000000000000000 [ 77.254998][ T5023] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000002 [ 77.255011][ T5023] R13: 00007fde57cf6038 R14: 00007fde57cf5fa0 R15: 00007ffe9a2de8c8 [ 77.255051][ T5023] [ 77.580841][ T5036] netlink: 43 bytes leftover after parsing attributes in process `syz.3.361'. [ 77.662371][ T5039] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 77.683736][ T5039] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.723737][ T5042] netlink: 43 bytes leftover after parsing attributes in process `syz.1.363'. [ 77.862314][ T5002] loop5: detected capacity change from 0 to 512 [ 77.887026][ T5002] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 77.896650][ T5002] EXT4-fs (loop5): orphan cleanup on readonly fs [ 77.907063][ T5002] EXT4-fs warning (device loop5): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 78.708492][ T5002] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 78.716893][ T5002] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.349: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 78.781092][ T5002] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 78.788288][ T5052] loop3: detected capacity change from 0 to 512 [ 78.797500][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 78.797519][ C1] EXT4-fs (loop5): last error at time 1775267657: ext4_ext_check_inode:521: inode 13 [ 78.804332][ T5002] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.349: couldn't read orphan inode 13 (err -117) [ 78.804379][ T5002] loop5: lost filesystem error report for type 5 error -117 [ 78.809855][ T5048] bond2 (unregistering): Released all slaves [ 78.817506][ T5052] EXT4-fs: Ignoring removed oldalloc option [ 78.825927][ T5056] loop0: detected capacity change from 0 to 512 [ 78.852023][ T5002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.884020][ T5056] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.894893][ T5002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.911924][ T5056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.965434][ T5052] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.023417][ T5052] EXT4-fs (loop3): failed to initialize system zone (-117) [ 79.050922][ T5052] EXT4-fs (loop3): mount failed [ 79.056741][ T5056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.072273][ T5056] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.116072][ T5073] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 80.120935][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.168304][ T5088] loop5: detected capacity change from 0 to 8192 [ 80.723606][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 80.723621][ T28] audit: type=1400 audit(1775267659.351:739): avc: denied { mount } for pid=5094 comm="syz.1.381" name="/" dev="autofs" ino=9728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 80.732378][ T5095] netlink: 40 bytes leftover after parsing attributes in process `syz.1.381'. [ 80.782925][ T5102] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 80.804524][ T28] audit: type=1400 audit(1775267659.431:740): avc: denied { view } for pid=5109 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 80.825022][ T5102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.848970][ T5111] bond2: (slave veth3): Enslaving as an active interface with a down link [ 80.868155][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 80.875746][ T5102] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 81.041512][ T5136] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 81.096138][ T28] audit: type=1326 audit(1775267659.721:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.5.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e77fc819 code=0x7ffc0000 [ 81.120035][ T28] audit: type=1326 audit(1775267659.721:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.5.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb4e77fc819 code=0x7ffc0000 [ 81.120140][ T28] audit: type=1326 audit(1775267659.721:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.5.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e77fc819 code=0x7ffc0000 [ 81.120182][ T28] audit: type=1326 audit(1775267659.721:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.5.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4e77fc819 code=0x7ffc0000 [ 81.120204][ T28] audit: type=1326 audit(1775267659.721:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.5.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e77fc819 code=0x7ffc0000 [ 81.120268][ T28] audit: type=1326 audit(1775267659.721:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.5.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4e77fc819 code=0x7ffc0000 [ 81.120287][ T28] audit: type=1326 audit(1775267659.721:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.5.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e77fc819 code=0x7ffc0000 [ 81.120308][ T28] audit: type=1326 audit(1775267659.721:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.5.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb4e77fc819 code=0x7ffc0000 [ 81.349259][ T5144] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 81.447787][ T5146] FAULT_INJECTION: forcing a failure. [ 81.447787][ T5146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.461237][ T5146] CPU: 1 UID: 0 PID: 5146 Comm: syz.5.396 Tainted: G W syzkaller #0 PREEMPT(full) [ 81.461257][ T5146] Tainted: [W]=WARN [ 81.461261][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.461268][ T5146] Call Trace: [ 81.461279][ T5146] [ 81.461284][ T5146] __dump_stack+0x1d/0x30 [ 81.461300][ T5146] dump_stack_lvl+0x95/0xd0 [ 81.461392][ T5146] dump_stack+0x15/0x1b [ 81.461440][ T5146] should_fail_ex+0x263/0x280 [ 81.461462][ T5146] should_fail+0xb/0x20 [ 81.461475][ T5146] should_fail_usercopy+0x1a/0x20 [ 81.461566][ T5146] _copy_from_user+0x1c/0xb0 [ 81.461584][ T5146] do_ipv6_setsockopt+0x124/0x21d0 [ 81.461601][ T5146] ? irqentry_exit+0x91/0x520 [ 81.461637][ T5146] ? irqentry_exit+0x91/0x520 [ 81.461656][ T5146] ? avc_has_perm_noaudit+0xab/0x130 [ 81.461683][ T5146] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 81.461696][ T5146] ? __pfx_ipv6_setsockopt+0x10/0x10 [ 81.461733][ T5146] ipv6_setsockopt+0x59/0x130 [ 81.461760][ T5146] tcp_setsockopt+0x98/0xb0 [ 81.461778][ T5146] sock_common_setsockopt+0x69/0x80 [ 81.461859][ T5146] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 81.462025][ T5146] __sys_setsockopt+0x184/0x200 [ 81.462054][ T5146] __x64_sys_setsockopt+0x64/0x80 [ 81.462100][ T5146] x64_sys_call+0x2327/0x3020 [ 81.462115][ T5146] do_syscall_64+0x12c/0x370 [ 81.462130][ T5146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.462142][ T5146] RIP: 0033:0x7fb4e77fc819 [ 81.462194][ T5146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.462203][ T5146] RSP: 002b:00007fb4e624f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.462216][ T5146] RAX: ffffffffffffffda RBX: 00007fb4e7a75fa0 RCX: 00007fb4e77fc819 [ 81.462223][ T5146] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 81.462231][ T5146] RBP: 00007fb4e624f090 R08: 0000000000000460 R09: 0000000000000000 [ 81.462238][ T5146] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 81.462293][ T5146] R13: 00007fb4e7a76038 R14: 00007fb4e7a75fa0 R15: 00007ffcde306418 [ 81.462304][ T5146] [ 81.797951][ T5161] ================================================================== [ 81.806039][ T5161] BUG: KCSAN: data-race in __follow_mount_rcu / do_new_mount [ 81.813431][ T5161] [ 81.815732][ T5161] read to 0xffff888106803cc0 of 4 bytes by task 5162 on cpu 1: [ 81.823250][ T5161] __follow_mount_rcu+0x15f/0x2b0 [ 81.828254][ T5161] step_into_slowpath+0x30c/0x4c0 [ 81.833254][ T5161] path_lookupat+0x330/0x500 [ 81.837830][ T5161] filename_lookup+0x190/0x390 [ 81.842585][ T5161] user_path_at+0x3e/0x100 [ 81.846988][ T5161] __x64_sys_pivot_root+0x9f/0x110 [ 81.852101][ T5161] x64_sys_call+0x20a/0x3020 [ 81.856675][ T5161] do_syscall_64+0x12c/0x370 [ 81.861249][ T5161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.867130][ T5161] [ 81.869429][ T5161] read-write to 0xffff888106803cc0 of 4 bytes by task 5161 on cpu 0: [ 81.877467][ T5161] do_new_mount+0x6a8/0x8d0 [ 81.881950][ T5161] path_mount+0x4d0/0xbc0 [ 81.886267][ T5161] __se_sys_mount+0x28c/0x2e0 [ 81.890919][ T5161] __x64_sys_mount+0x67/0x80 [ 81.895496][ T5161] x64_sys_call+0x2d61/0x3020 [ 81.900151][ T5161] do_syscall_64+0x12c/0x370 [ 81.904720][ T5161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.910589][ T5161] [ 81.912887][ T5161] Reported by Kernel Concurrency Sanitizer on: [ 81.919010][ T5161] CPU: 0 UID: 0 PID: 5161 Comm: syz.5.403 Tainted: G W syzkaller #0 PREEMPT(full) [ 81.929745][ T5161] Tainted: [W]=WARN [ 81.933530][ T5161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.943567][ T5161] ================================================================== [ 83.707287][ T5097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512