last executing test programs: 6m26.704649296s ago: executing program 32 (id=87): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x200, 0x4) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000040)) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, 0x1, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_TUPLE={0x4}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private1}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = syz_clone3(&(0x7f0000000800)={0x800000, &(0x7f00000005c0)=0xffffffffffffffff, &(0x7f0000000600)=0x0, &(0x7f0000000640), {0x24}, &(0x7f0000000680)=""/171, 0xab, &(0x7f0000000740)=""/79, &(0x7f00000007c0)=[0x0], 0x1, {r0}}, 0x58) capset(&(0x7f0000000880)={0x20080522, r3}, &(0x7f00000008c0)={0xfffffff8, 0x1, 0x1000, 0x21, 0x8000, 0x4}) capget(&(0x7f0000000900)={0x20071026, r3}, &(0x7f0000000940)={0x80000001, 0x80000001, 0x2, 0x3, 0xf8a, 0x5}) r4 = semget(0x2, 0x0, 0x200) semctl$GETNCNT(r4, 0x1, 0xe, &(0x7f0000000980)=""/7) capget(&(0x7f00000009c0)={0x20071026, r3}, &(0x7f0000000a00)={0x8, 0x9, 0x6, 0x2, 0x8, 0x1}) semctl$GETPID(r4, 0xbc6f20c23a9db718, 0xb, &(0x7f0000000a40)=""/61) capset(&(0x7f0000000a80)={0x0, r3}, &(0x7f0000000ac0)={0x2, 0x101, 0x893e, 0xffffffff, 0x81, 0x7}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) r6 = semget$private(0x0, 0x3, 0x30) semctl$IPC_RMID(r6, 0x0, 0x0) r7 = semget(0x0, 0x2, 0x48) semctl$IPC_RMID(r7, 0x0, 0x0) semctl$IPC_RMID(r6, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000b40)={0x10, {0x24, 0x0, 0x6, 0x100, 0xe0}}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) quotactl_fd$Q_GETINFO(r8, 0xffffffff80000501, 0xee00, &(0x7f0000000b80)) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY(r9, 0x5000940f, &(0x7f0000000bc0)={{r2}, "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"}) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000001bc0)=[0x4, 0x1, 0x4, 0x0, 0x160, 0x4, 0x14, 0x3]) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000001c00)={@loopback, @dev={0xac, 0x14, 0x14, 0x1e}, 0x0, "41a89d83f07eb370f1bdd2471e285e8f143e913586c2bc3c0fd45ef049b7b100", 0xfffffff7, 0x6, 0x1, 0x5}, 0x3c) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x90) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000021c0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002180)={&(0x7f0000001d80)={0x3d4, 0x12, 0xe94d534d1ee3d698, 0x70bd2a, 0x25dfdbff, {0x1, 0x3, 0x2, 0x3, {0x4e22, 0x4e21, [0xa, 0x401, 0x7, 0x7fffffff], [0x4, 0x348b, 0x7, 0x9], 0x0, [0x9, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "24b5506f3144d467d301ae27f7966efef7585d7d75d3e328be5196125ba58f7177a6c14120f5b3"}, @INET_DIAG_REQ_BYTECODE={0x26, 0x1, "685960100dc596a204cc78dac56f35584aa7af5925904f953627b780695d914693be"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "96805324b16617bf1eb7c3d1dc0d43308d40afa34dd1fb9f63c162d07e991122789495f56d2d044830f0015a49744df7157b99b056c13db46b8823d7fca74610f49522e67299f779c830b8b4b011a907428de77a90ae5fdf2101bb1bdf2009893f89701a8b2c41e87407a9cb01154c111ae8fcfef211dd082a68cfc1ac77f6f40ce2b5e4b9beac45c1f79b798c0bfa5bc9790b4a97e9463e661e45c66d2808492d0c91373a3a382259f66a5f38c2c8444cd30f25b40d97f277be053d337e1f29a2c9b79ad7ca12ed113b96773d6d895cd7139130d39c143588d810ffdb893a"}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "0dc82c387b36f706f7042167016a8e54f8c398774a61f102c2144013ea97a83d3ca5af6ff14e9c569451cfa153bd62f810576176d0b8ba23c681488e12fc5331c501797edf87b4ead7459e326f6ea772c997b6b8afca4080125e44a7fd2e83ff4c4c6e46dabc39c34ce420ae231d8849e7466c030b083abdba53bf9b167923d89d8804a8193ddefb77"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "1bd2bd01cce7ea2626be7faa974f71ce1834eff18a0e24804316457688fa67c1c4006efa56f86980f266c83ce9ce4b84ef2c235fe0c886c4bd5f6c08350139a8806ec1bf6cea551ccf8b5706f0a2b800f196cedc4200675302b7e5a835a4adf557acd0446dcd43dcf04c852c4a5e2e0203e66bf54a5e01f268286a6bb75dae6f9adeca0d7cf4725ed7a3daf28dd921cd85452e361e9e6e174171f458147abd995665343b1d6de9a7f9d40a24b3ca110ef90a6cfcf0e8475e7b65e677fb6401028460e769d2dfef957a8179496aaa4a3317a722e15e6808efd0d0a7956c5f7d98e19192df2ccdf2c0540d2c7aa10147ceef61a76524c7dde448"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "c7f4d43decc50beabb780d9ad71ad2b411261f1beef1ce41339a73b6942630ffc89056e85a7aade521288a26390babe1da5abc7a362a0eac1a919c6d0bc9d049dc324e0b44619be465e4c7e8ac92a51cc5d4c25736c715b657321c9c71efeda1aa11cf9ef84411c114cbf8abf18aea8867b304f2923b0947d0e7eaa74ea555a8c6eb4924d21490256f1b707198774895e8a9d2012304e653aa20a0e726c59cffd6da1d37a6f523dca296619a9621cc15956469534677b4e526"}]}, 0x3d4}}, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000002200)={@local, @local, 0x1, "4bd5399f2bda40992cbf590ab2e511ba7f0407bbd5864001d07a694854a6ddce", 0x8, 0x3, 0x8, 0x4720}, 0x3c) ptrace(0x8, r1) socket$nl_generic(0x10, 0x3, 0x10) 6m26.550727906s ago: executing program 33 (id=91): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) 6m23.691653463s ago: executing program 34 (id=117): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xf}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) personality(0xfe47fef9f5ff7379) 6m18.539338735s ago: executing program 35 (id=187): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x86a}}, {@jqfmt_vfsold}, {@init_itable}, {@quota}]}, 0x3, 0x451, &(0x7f0000001080)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000104010100000000000000000a00000605000100110000060006400003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbaf, &(0x7f0000002f00)="$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") r5 = openat(r0, &(0x7f00000004c0)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x0) fchown(r5, 0x0, 0xee01) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) r7 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x2c86, 0x0) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x2881435, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000002c0)={r11, 0xffff, 0x8002}, 0xfffffffffffffe1b) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000004a000b0000000000000000000a008000", @ANYRES32=0x0, @ANYRES32=r2], 0x68}}, 0x0) r13 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[], 0x9) 6m17.711015313s ago: executing program 36 (id=194): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x48, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x841}, 0x8004) 6m12.264253383s ago: executing program 37 (id=241): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0004110004000000b9a66eec00be00c22ffffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xf8) 6m2.785208289s ago: executing program 38 (id=336): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x100514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @loopback}, 0x1, 0x3, 0x4}}, 0x26) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 6m2.476315147s ago: executing program 8 (id=340): r0 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x15, 0x200000000000000) 6m2.241616121s ago: executing program 8 (id=342): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40000) 6m2.196683793s ago: executing program 8 (id=344): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x6, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@loopback, @multicast1}, 0x8) r3 = socket$kcm(0x2, 0x200000000000003, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000000), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@cgroup=r4, r4, 0x21}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) write$nci(r6, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @f={0x6, 0x2, 0x0, 0x2, 0xb, 0x9, 0x4, {0x88, 0x50, "6e3680b4b5970e6ac115e4664c816e8c3b7ad1d4ce3b4ffa851ec12b2cdb641cda3eb15141682243e2913f61768bb3dbeeedd25900bbae552a7becd9f176ddab972b59f4407cfeef1156854dde91dbdb"}, 0x1, 0x1, 0x2, 0xff}}, 0x61) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="84400100000001000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r10, 0x0, 0xcd, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, 0xffffffffffffffff, "66853cb55f3ffc6a464299109f86f447cac90ffd10d595d36e92de60633061f9", 0x5, 0x0, 0xfffffff2, 0x9}, 0x3c) 6m1.58106362s ago: executing program 8 (id=349): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) (fail_nth: 9) 6m1.312414045s ago: executing program 8 (id=350): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x8b, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x77, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000000)={0x24, 0x13, 0x1, 0x70bd08, 0x25dfdbff, "", [@typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xdb, 0x0, 0x1, [@nested={0x4, 0x31}]}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x849c4}, 0x8014) syz_emit_ethernet(0x6e, &(0x7f00000010c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x2f, 0xff, @mcast2, @mcast2, [@fragment={0x1d, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}]}}}}}}}, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000080}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 6m1.160005124s ago: executing program 8 (id=352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 5m57.451797441s ago: executing program 39 (id=372): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x40) 5m46.068010158s ago: executing program 40 (id=352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 5m44.243072666s ago: executing program 2 (id=541): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r4}, [@IFA_LABEL={0x14, 0x3, 'ip6_vti0\x00'}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) syz_io_uring_setup(0x135, &(0x7f00000000c0)={0x0, 0x21df, 0x400, 0x1, 0x6b}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x61e9, 0x8, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r6, 0x0, 0x0, 0x0, 0x80000}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0xa79, 0x1, &(0x7f00000001c0)="94dcebaa26e9ff20741a3b2db70f57eef5c2897bf5b5992e5fd8b9f633a046196c74a12ef71e88a5fc7ba91a78817546558977f41beb708792c8cf009b1f2f30ac48a19f0986394bc960f33d015a8f93177803ea7bcd55e2caa411690346628fce69c56a9b119697d2852e7d2feb78987ae39d1066542c752e69a515c42ae87d66bfd03f3a56b92edaf3db2286d7c47b234291a181640428fbcf3134ade75432cf501bd3e4d71963910ad749d5103171a2cd47e30d479111fc813a61eebad41e90a140", 0x2, 0x0, 0x0, {0x2, r9}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/187, 0xbb, 0x0, &(0x7f0000000640)=""/25, 0x19}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x24000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}]}, &(0x7f0000000300)='syzkaller\x00', 0xffffffff, 0xa2, &(0x7f0000000480)=""/162, 0x41100, 0x42, '\x00', r4, 0x1b, r0, 0x8, &(0x7f0000000540)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r10, 0x0, 0x8, &(0x7f0000000700)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000740)=[{0x3, 0x4, 0x0, 0x5}, {0x0, 0x5, 0xb, 0x6}, {0x4, 0x1, 0xa, 0x7}, {0x0, 0x5, 0x6, 0x4}, {0x3, 0x1, 0x8, 0x4}, {0x2, 0x3, 0x10, 0x8}, {0x2, 0x4, 0xc, 0x3}, {0x5, 0x4, 0x2, 0x8}], 0x10, 0x40}, 0x94) getsockopt$bt_hci(r1, 0x84, 0x80, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r4}, [@IFA_LABEL={0x14, 0x3, 'ip6_vti0\x00'}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) syz_io_uring_setup(0x135, &(0x7f00000000c0)={0x0, 0x21df, 0x400, 0x1, 0x6b}, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x61e9, 0x8, 0x2}, &(0x7f0000000340), &(0x7f00000000c0)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r6, 0x0, 0x0, 0x0, 0x80000}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, r8, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0xa79, 0x1, &(0x7f00000001c0)="94dcebaa26e9ff20741a3b2db70f57eef5c2897bf5b5992e5fd8b9f633a046196c74a12ef71e88a5fc7ba91a78817546558977f41beb708792c8cf009b1f2f30ac48a19f0986394bc960f33d015a8f93177803ea7bcd55e2caa411690346628fce69c56a9b119697d2852e7d2feb78987ae39d1066542c752e69a515c42ae87d66bfd03f3a56b92edaf3db2286d7c47b234291a181640428fbcf3134ade75432cf501bd3e4d71963910ad749d5103171a2cd47e30d479111fc813a61eebad41e90a140", 0x2, 0x0, 0x0, {0x2, r9}}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/187, 0xbb, 0x0, &(0x7f0000000640)=""/25, 0x19}}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x24000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}]}, &(0x7f0000000300)='syzkaller\x00', 0xffffffff, 0xa2, &(0x7f0000000480)=""/162, 0x41100, 0x42, '\x00', r4, 0x1b, r0, 0x8, &(0x7f0000000540)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r10, 0x0, 0x8, &(0x7f0000000700)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000740)=[{0x3, 0x4, 0x0, 0x5}, {0x0, 0x5, 0xb, 0x6}, {0x4, 0x1, 0xa, 0x7}, {0x0, 0x5, 0x6, 0x4}, {0x3, 0x1, 0x8, 0x4}, {0x2, 0x3, 0x10, 0x8}, {0x2, 0x4, 0xc, 0x3}, {0x5, 0x4, 0x2, 0x8}], 0x10, 0x40}, 0x94) (async) getsockopt$bt_hci(r1, 0x84, 0x80, 0x0, &(0x7f0000000000)) (async) 5m43.456313622s ago: executing program 2 (id=553): mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000039000000000000000000000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x3, 0x5, 0x34, 0x66, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@rr={0x7, 0xf, 0xc2, [@broadcast, @private=0x7, @loopback]}]}}, {{0x400, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x7, 0x5, "89772b", 0x7, "15582c"}}}}}}, 0x0) 5m43.407616294s ago: executing program 2 (id=554): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x2fc}}) 5m43.31278837s ago: executing program 2 (id=555): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) unshare(0x6a000200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8224, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r3, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00', 0x7003, [0xfffffffd, 0xe9, 0x0, 0x2, 0x2]}, &(0x7f0000000140)=0x54) 5m42.759407893s ago: executing program 2 (id=561): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x4) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@loopback, @multicast1}, 0x8) r3 = socket$kcm(0x2, 0x200000000000003, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@cgroup=r4, r4, 0x21}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) write$nci(r6, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @f={0x6, 0x2, 0x0, 0x2, 0xb, 0x9, 0x4, {0x88, 0x50, "6e3680b4b5970e6ac115e4664c816e8c3b7ad1d4ce3b4ffa851ec12b2cdb641cda3eb15141682243e2913f61768bb3dbeeedd25900bbae552a7becd9f176ddab972b59f4407cfeef1156854dde91dbdb"}, 0x1, 0x1, 0x2, 0xff}}, 0x61) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="84400100000001000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r10, 0x0, 0xcd, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, 0xffffffffffffffff, "66853cb55f3ffc6a464299109f86f447cac90ffd10d595d36e92de60633061f9", 0x5, 0x0, 0xfffffff2, 0x9}, 0x3c) 5m41.676361606s ago: executing program 2 (id=569): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) socket$nl_route(0x10, 0x3, 0x0) 5m41.634483869s ago: executing program 41 (id=569): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) socket$nl_route(0x10, 0x3, 0x0) 5m18.179827084s ago: executing program 1 (id=829): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x2b, 0x1, 0x1) listen(r6, 0x0) r7 = syz_io_uring_setup(0x1ca0, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x28, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) r10 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, r14, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000084) sendmsg$NL802154_CMD_SET_PAN_ID(r11, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r14, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x1c}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x26, 0x6, &(0x7f0000001040)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r10}, 0x94) 5m17.55207857s ago: executing program 1 (id=838): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0xc0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x4000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 5m17.205253331s ago: executing program 1 (id=842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x581, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r2 = semget(0x1, 0x4, 0x3c4) memfd_create(&(0x7f0000000240)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd4\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',defcontext=\"\"']) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x7f, 0xfff8, 0x2, 0x4]) semop(r2, &(0x7f0000000040)=[{0x2, 0xbbdd, 0x1000}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x34, 0x5, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4080) 5m16.588490487s ago: executing program 1 (id=847): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@nobh}]}, 0x1, 0x795, &(0x7f0000000ac0)="$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") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000080001000a081000418e0fff0004fcff", 0x58}], 0x1) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000080001000a081000418e0fff0004fcff", 0x58}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="a219831f107016d759fe08004fa19d4d82b9effe2b510e0464bd95de324459686dd2edc4b82e2603a5ee9e58053ea559c1ed53ed98cde539a8077b8c9ec42149ea50e9445512f5a06caeb23f626f15770011d703b786d24688bf7edb5365ad356e74a5fc0db4aecfed35e0ef0f80a9e2b6", 0x71}, {&(0x7f00000000c0)="736da81a75cf01e57339724b36350665f6fdc5c1c0b1c59a3f1bdaa77f28515d6236b702e9897607dbded433c10c282fd93ac112683bdddc6feb55653cc63561ce14a69c7d024f271c3380541b138beb98f0d6cfd567b554994488a067a6ecf148b84c478f78059e127af0386656b6dc3d0787f64db493bfba5fe3f2a120f7aebc6e9491673270e27cc533a11efe2781584d818dc02df7409c86f2fb455b4a8a4b954686a3d5498eb8b89b47548b934404af501071c939994a91b03240e015c5b0deca2984ca0910bf54a019ea52ec8680f35d1e63a6c0ed5e1db0650aa1", 0xde}, {&(0x7f00000001c0)="093980a88ab91b3c181b", 0xa}], 0x3) r2 = fcntl$getown(r0, 0x9) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r4, 0x1, 0x2d, 0x0, &(0x7f0000000600)) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000140)={{0x0}, 0x0}, 0x20) (async) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000140)={{0x0}, 0x0}, 0x20) ptrace(0x10, r3) (async) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r3, 0x80000001, 0x4) (async) ptrace$cont(0x21, r3, 0x80000001, 0x4) epoll_create1(0x80000) (async) r6 = epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000f05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000280)={r6, r0, 0xda7}) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 5m15.598352115s ago: executing program 1 (id=853): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0xc0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x4000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 5m14.954507063s ago: executing program 1 (id=860): open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000020000001d"], 0x642182) 5m14.83829738s ago: executing program 42 (id=860): open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000020000001d"], 0x642182) 3m10.796704481s ago: executing program 5 (id=3017): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x40}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x84, 0x30, 0x1, 0xe4ff, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 3m10.712572516s ago: executing program 5 (id=3018): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fadvise64(r0, 0x3, 0x1, 0x5) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3m10.542265377s ago: executing program 5 (id=3019): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x5, @remote, 0xffffffff}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="322f461d1194c9ae061a3d21f6f632567287df5de4980afb116df8d72a03b100e842ef29336b72169b2a6a68ad82d8590488fa3eee4d30eb", 0x38}], 0x1, &(0x7f00000000c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xfff}}], 0x18}, 0x48000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r1, 0x2f, 0x5, 0x2, 0x7, 0x8, @empty, @empty, 0x7, 0x8000, 0x7, 0x1}}) r2 = syz_io_uring_setup(0x4d41, &(0x7f0000000240)={0x0, 0x9179, 0x2000, 0x3, 0x40}, &(0x7f00000002c0), &(0x7f0000000300)) r3 = syz_io_uring_setup(0x356a, &(0x7f0000000340)={0x0, 0xa652, 0x400, 0x2, 0xa5, 0x0, r2}, &(0x7f00000003c0), &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in=@broadcast}}, &(0x7f00000006c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000840)=0xe8) fstat(r3, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000900)=0x0) fstat(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000a80)={{}, {0x1, 0x6}, [{0x2, 0x5, r5}, {0x2, 0x5, r6}, {0x2, 0x1, r7}, {0x2, 0x1, 0xee01}, {0x2, 0x4, r8}, {0x2, 0x0, r10}, {0x2, 0x2, r11}, {0x2, 0x0, r12}, {0x2, 0x1, 0xee00}, {0x2, 0x6, r13}], {0x4, 0x4}, [{0x8, 0x4, 0xee01}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x3, r14}, {0x8, 0x2, r15}], {}, {0x20, 0x5}}, 0x94, 0x0) r16 = socket(0x2c, 0x6, 0x2) unshare(0x54000000) quotactl_fd$Q_QUOTAON(r16, 0xffffffff80000201, r11, &(0x7f0000000b40)='./file0\x00') r17 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r4}, 0x8) r18 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r18) read$qrtrtun(r17, &(0x7f0000000c00)=""/97, 0x61) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000c80)) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x10}, 0x48001) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000d80)={'nicvf0\x00'}) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r13, 0x0) ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, &(0x7f0000000dc0)={0x9, 0x8000, 0x7, 0x401, 0xff}) 3m10.491453589s ago: executing program 5 (id=3020): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fadvise64(r1, 0x3, 0x1, 0x5) r2 = getpgid(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) r4 = getgid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid={'resgid', 0x3d, r4}, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b80)={'\x00', 0xfff, 0x7fffffff, 0x3, 0x5, 0x2, 0x0}) getresgid(&(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000dc0)=0xe8) getgroups(0x6, &(0x7f0000000e00)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee01, 0xee00]) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000e40)=0x0) stat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000f40)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000f80)={0x0, 0x0, 0x0}, &(0x7f0000000fc0)=0xc) r13 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) ptrace$setsig(0x4203, r13, 0xfffffffffffffff8, &(0x7f0000000140)={0x1b, 0x7, 0x80}) lstat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getgid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid={'resgid', 0x3d, r15}, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") sendmsg$unix(r1, &(0x7f00000011c0)={&(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000080)="3d8b0801244f513e957afdba992fd20b13545752ca4fdfaef5b2afa3d5310d2e86db4fa3", 0x24}, {&(0x7f00000002c0)="909e8cd13282b4fe8ef7", 0xa}, {&(0x7f00000006c0)="ac95b4a277090a778a6446d488c47f10180a8413378841c4359a0cb0697d21ee6d880700202dc308d716487263e5861213759ab4e0ce5178fcf4dae1c27540e4c51106a6f30d1a892e0380d22d13528da6f27a0f92747dc0ee6312b0b04ad6c8e5f8be5b42dfaf78320a782a5b52c756161319783f0bff8e66d227e38c33035eed92a7e68906c1a4d9f07b23bf08", 0x8e}, {&(0x7f0000000340)="0ce83777b00b8f5b91c9f02101d2e3d6382b44189328c6817c18247b13c4a578343a10cb482e596592fe", 0x2a}, {&(0x7f0000000780)="75ab8736e033545ee09973096d9385f360f8f38c6542944eda3fb7d2d348b84ebf4758a639f3f59e028172e11ed0d4450b7353f52c4489ee24205f21d0ef0c2b918f6dc077ad4fc9f9dd1cc76399122b08500206e3643920b232d50b652d0c43d3e6694b80647e0aef5ebdb850ea66e38cb95ea2630a42a39e5f71bfd3d7d5ecba0351fc9ff9c3ae0812745b437b0c50b8c56c633895927700bf3d947ce38241ac877faa0e309d58540ca74e0c74db5c759c4fedbc9ba3d95fcce6ef10e36d9a9b50d2f861b0fde27e21369a7340444eef75c2b92b782018e1cb116e07ce9db0f15785d5f072e14ba2e46d55132ec171d0f03a7edd7032", 0xf7}, {&(0x7f0000000880)="e986e699a69ddff9a5ac", 0xa}, {&(0x7f00000008c0)="5d8096480f392221874cddf4eeddf32cc433c0b292c0e40353d61616af22a0052ff4932b2657f6e3bc5785be84a282d51dd1f9eb8da2bf04df9ef13b273edee755edb20f0929c330e91cff1693300111f1b2f3343dd6dc3d4fb184c760a8aab6bfa0d203ed30a2b81445f735ba8a15de7bc4888e90c3643ebd3556083e5058bcf24673917eee5ab32490f0905b8d3e8595e08bc673ea3b1f3bdf645b2106b09f9def8b23836904a70251", 0xaa}, {&(0x7f0000000980)="be46b9", 0x3}, {&(0x7f00000009c0)="a7b4ff76f1fc4ae22556eedcc967e237e22f6174c9f4adaec66cac417f4e5a7a15117b36b68433b586c95f1e863ba20fce914034e1ef3d9849ffe582e75f0c90477f06c3799739b5e9f9d92050e28d831562b042ec6ef3f60cbe245097aaece66870f2c55524e6396f9cd467faee690cb02eb580ec098d0022fee79a5111bf5025f51679f8b6a02ebd", 0x89}], 0x9, &(0x7f00000010c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, r6}}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee00, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}], 0xe0, 0x4000000}, 0x40000000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3m10.376648976s ago: executing program 5 (id=3021): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x1f, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100001002cbd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="38280400270c0400240012800b00010062726964676500001400028008001a00010000000500194081"], 0x44}, 0x1, 0x2000000, 0x0, 0x8090}, 0x4048004) 3m10.022450827s ago: executing program 5 (id=3031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1000, @empty}, 0x1c) chdir(&(0x7f0000000080)='./file0\x00') setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x304}, "68c40110c3a2c2a1", "43ce39d444a021c82eca1cc4bc46c789", '/:)N', "5f7b960b7f9d5422"}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum={0x1}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0]}}, 0x0, 0x31, 0x0, 0x1, 0xfffffff9}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000440), 0x3d) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x4040000, 0x0, 0x0) 3m10.021562177s ago: executing program 43 (id=3031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1000, @empty}, 0x1c) chdir(&(0x7f0000000080)='./file0\x00') setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x304}, "68c40110c3a2c2a1", "43ce39d444a021c82eca1cc4bc46c789", '/:)N', "5f7b960b7f9d5422"}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum={0x1}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0]}}, 0x0, 0x31, 0x0, 0x1, 0xfffffff9}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000440), 0x3d) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x4040000, 0x0, 0x0) 3m6.136810585s ago: executing program 7 (id=3096): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r2, 0x301, 0x70bd30}, 0x14}, 0x1, 0x3000000}, 0x800) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000900000/0x3000)=nil, 0x3000) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@check_strict}, {@map_off}, {@nocompress}, {@cruft}]}, 0x1, 0x51d, &(0x7f0000000680)="$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") 3m5.989612424s ago: executing program 7 (id=3099): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0xeae}}, './file0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = msgget$private(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x29, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x3, 0xfff2}, {0x0, 0x13}}}, 0x24}}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000000)={0x4}, 0x8) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x455d, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) msgsnd(r2, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES64=r2, @ANYRES16=r8], 0x2000, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000030701080000001f00000000010000090c00034000000000000000031400078008000240fffffff70800024000000008"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4000010) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="e19227613a702db2147ef3bd450aeed41f19776087d531a3be9bda2eb5c1d6aa8824949134f5b7c8a442287d9970e9e599b73c79b6c65e7fd6251c00232daf24d55ec74f6f0160511e82dad89aa70c4030ebb289c1c2b4ff7ce3496ecce5176ecf5d9fcf7d32a48ad41cf7731a89e93a46b955302a353b20578fca302b79899066f3cec05bca8b0625e0ad9b48cde410282aab50823cc04017065eb186c81ddec0b3631d966a25132317cba4ab2e1ab329a6ba9081954c758d8b754a", @ANYBLOB="9ca1a79af5b03e8c4647f9815471c559ffe2357c49cdd331ae4ed13c3af1eefe0fcd3f2ef2c2360abe26ca5001bfc230765713ccaf437a9a0c82b462399ebd35b73a", @ANYRES16=r9, @ANYRESOCT=r9, @ANYRESDEC=r3, @ANYRES32=r9, @ANYRESDEC=r9, @ANYBLOB="21f1"], 0x60}, 0x1, 0x0, 0x0, 0x4080810}, 0x2048004) 3m5.664844482s ago: executing program 7 (id=3101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="1380000023b201002400128009000100626f6e6400000000140002800800070081000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec00000010000108000000060000000000000000", @ANYRES32=r6, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 3m5.509211132s ago: executing program 7 (id=3104): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x2, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000001240)='./file0\x00', 0x808082, &(0x7f0000000040), 0xfe, 0x4a3, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x28c242, 0x14) getdents(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sched_setscheduler(0x0, 0x1, 0x0) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8, 0xffffffff0}, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x4, 0x1, 0x4, 0x2}}, 0x26) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, 0x0) socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000300), 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001304000000000000000100000500110000000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x20) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x200140, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f00000003c0)) 3m5.062489488s ago: executing program 7 (id=3114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0xa00, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m3.632390352s ago: executing program 7 (id=3146): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x4) 3m3.562082176s ago: executing program 44 (id=3146): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x4) 7.190223573s ago: executing program 6 (id=4712): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000080)={0x400000000005, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x1d, 0x2, 0x8000000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x5000) 7.087108429s ago: executing program 6 (id=4717): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010100}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) sendmsg$kcm(r3, 0x0, 0x200008c0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.539174549s ago: executing program 6 (id=4741): socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r3, &(0x7f0000000540), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300), 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) 3.240032846s ago: executing program 9 (id=4746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000380)={0x0, 0x2, {0xffffffffffffffff, 0x0, 0xffffffff, 0x3, 0x3}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000001280)='ntfs3\x00', 0x0) close(r5) syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socket(0x840000000002, 0x3, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 2.801331321s ago: executing program 0 (id=4749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a3200000000140000001100"], 0xa0}}, 0x40880) 2.669228369s ago: executing program 4 (id=4750): r0 = socket(0xa, 0x3, 0x3a) setreuid(0x0, 0xee00) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) 2.584557194s ago: executing program 4 (id=4751): r0 = msgget$private(0x0, 0x100) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10002, 0x51, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) 2.220370414s ago: executing program 3 (id=4752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x500, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r1, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 2.173019757s ago: executing program 6 (id=4753): close(0xffffffffffffffff) socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x57d9, 0xc000, 0xc, 0xf0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.100581071s ago: executing program 3 (id=4754): syz_io_uring_setup(0x5f1d, &(0x7f0000000040)={0x0, 0x5e62, 0x400, 0x2, 0x119}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, &(0x7f0000000440)=""/81) 2.086730552s ago: executing program 6 (id=4755): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 2.086106492s ago: executing program 3 (id=4756): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa97, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f00000005c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) write$binfmt_script(r5, 0x0, 0x0) execveat(r5, 0x0, 0x0, 0x0, 0x1000) timer_settime(0x0, 0x1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000000340)) 2.008382516s ago: executing program 9 (id=4757): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/163, 0xa3) 1.94833825s ago: executing program 9 (id=4758): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x56d, &(0x7f0000000880)="$eJzs3c9rXEUcAPDv22z6uzaFUlREAj1Yqd00iT8qeKhH0WJB73VJXkPJpluym9LEgu3BXrxIEUSsiHe9eyz+A/4VBS0UKUEPXiJv8zZNk9383Dap7/OBV2Z23mbed+fNdGZnlw2gsAazf0oRL0XE10nEkYhI8rJy5IWDi+fNP7oxlh1JLCx88lfSOi/Lt/9W+3kH88yLEfHblxGnSqvrbczOTVZrtXQ6zw81p64ONWbnTl+eqk6kE+mVkdHRs2+Njrz7ztubimfvGmWvX/jnu4/vfXD2qxPz3/7y4OidJM7FobxseRzbcHN5ZjAG89ekP86tOHG4B5XtJslOXwBb0pf38/7IxoAj0Zf3euD/74uIWAAKKtH/oaDa84D22r5H6+DnxsP3FxdAq+MvL743Evtaa6MD88kTK6NsvTvQg/qzOn798+6d7IjevQ8BsK6btyLiTLm8evxL8vFv685s4JyVdRj/4Nm5l81/3ug0/yktzX+iw/znYIe+uxXr9//Sgx5U01U2/3uv4/x3adNqoC/PHW7N+fqTS5draTa2vRARJ6N/b5Zfaz/n7Pz9hW5ly+d/2ZHV354L5tfxoLxiU2u82qxuJ+blHt6KeLnj/DdZav+kQ/tnr8eFDdZxPL37arey9eN/uhZ+initY/s/3tFK1t6fHGrdD0Ptu2K1v28f/71b/Tsdf9b+B9aOfyBZvl/b2HwdP+77N+1W9kT88UT8Pyye0fn+35N82krvyR+7Xm02p4cj9iQfrX585PFz2/n2+Vn8J0+sPf51uv/3R8RnG4z/9rGfX1kr/vY6fKfaf3xT7b/5xP0PP/++W/3r3P/lxfZ/s5U5mT+4kfFvoxe4zZcPAAAAAAAAdpVSRByKpFRZSpdKlcri5zuOxYFSrd5onrpUn7kyHq3vyg5Ef6m9031k2echhvPPw7bzIyvyoxFxNCK+6dvfylfG6rXxnQ4eAAAAAAAAAAAAAAAAAAAAdomDXb7/n/mjb6evDnjq/OQ3FNe6/b8Xv/QE7Er+/4fi0v+huPR/KC79H4pL/4fi0v+huPR/KC79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrqwvnz2bEw/+jGWJYfvzY7M1m/dno8bUxWpmbGKmP16auViXp9opZWxupT6/29Wr1+dXgkZq4PNdNGc6gxO3dxqj5zpXnx8lR1Ir2Y9j+TqAAAAAAAAAAAAAAAAAAAAOD50pidm6zWaun0NhJJbOvpRU8cjl1xGVtNlHfHZUj0OLHTIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPZfAAAA///wGTUB") r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x3, 0x0, 0x6000) dup(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) 1.851905245s ago: executing program 0 (id=4759): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) 1.466282947s ago: executing program 0 (id=4760): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x174) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000180)='@\aj\xf9\xcb\xef4\xdc\x1a\x8f%\x10\x00\x00\x00\x00\x00\x00\x00\x98\xbe\f\xb5\x93\x8c-\xe5\x01/\xcd\xc5Nc\x963\xe9I\x88\xc9;\xd0D3\xea\xf0\xc4K\x0e\xa2\x02/o\x15\xc0\xd1\x1a\xe4\xe0+ ^\xbeQ\x9fX\xe1\x9c\x94\x80\xb1W\x84\xbb8\x16\x17XZ\"\x82^5m\xf2`d1X B>\xafU\x80\xe3N\xb6\x86\x9d\x12\r1\x1b\xfd\xc9\xa5v\xc0c\xb9|\xc0\x15\xe4\xe22\fQ+', &(0x7f00000000c0)='./file0\x00', 0x0, 0x26540c1, 0x0) 1.41655719s ago: executing program 4 (id=4761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) 1.284071447s ago: executing program 0 (id=4762): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x5, {0x0, 0x1}}, 0x18) 1.168728353s ago: executing program 6 (id=4763): socket$inet6(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@auto_da_alloc}, {@nombcache}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time}, {@commit}, {@nodiscard}], [{@seclabel}]}, 0x1, 0xbb9, &(0x7f0000006f00)="$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") sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c0014", @ANYRES32=0x0, @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x90) pread64(0xffffffffffffffff, 0x0, 0x0, 0x58) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getitimer(0x0, &(0x7f00000000c0)) 1.06438963s ago: executing program 0 (id=4764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, r1, 0x60b, 0x70bd2d, 0x4000, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x8000000, 0x0, 0x41}, 0x0) 1.063947229s ago: executing program 9 (id=4765): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x528, 0x370, 0x0, 0x1b0, 0x0, 0x280, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xff, 0xff000000], [], 'syzkaller0\x00', 'bridge0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x0, 0x7}, {0x1}, 0x202}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x39}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'xfrm0\x00', 'team_slave_1\x00', {0xff}, {}, 0x11, 0x9, 0x6, 0x40}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x80, 0xd, @ipv4=@empty, 0x4e26}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) 1.06355517s ago: executing program 0 (id=4766): r0 = socket$inet(0x2, 0x3, 0x100) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='THAWED\x00', 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) r4 = mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0) mq_notify(r4, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xff6, 0xffffffff}, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080", @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$nl_route(0x10, 0x3, 0x0) 1.019357762s ago: executing program 9 (id=4767): syz_io_uring_setup(0x5f1d, &(0x7f0000000040)={0x0, 0x5e62, 0x400, 0x2, 0x119}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, &(0x7f0000000440)=""/81) 1.019188052s ago: executing program 3 (id=4768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4800) 1.018356062s ago: executing program 4 (id=4777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) 929.099407ms ago: executing program 9 (id=4769): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) chdir(&(0x7f00000000c0)='./bus\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0xb, 0x1, 0x9, 0x20002, 0x6, "3eccd255f677e8828000000000000200"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000004c0)='./file0\x00', 0x0) 928.915887ms ago: executing program 3 (id=4770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeff, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getegid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x8, 0xfd, 0x0, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 738.668548ms ago: executing program 4 (id=4771): r0 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) sendfile(r0, r0, 0x0, 0x80001d00c0d1) 280.393533ms ago: executing program 4 (id=4772): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000002c0)="36be", 0x2) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 0s ago: executing program 3 (id=4773): socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) kernel console output (not intermixed with test programs): 0] type 2 family 0 port 6081 - 0 [ 335.152429][ T4464] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.161161][ T4464] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.195015][T30224] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3797'. [ 335.236603][T30230] loop0: detected capacity change from 0 to 512 [ 335.260729][T30230] EXT4-fs: Ignoring removed mblk_io_submit option [ 335.275468][T30230] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 335.288021][T30218] bond4: entered promiscuous mode [ 335.293597][T30230] EXT4-fs (loop0): 1 truncate cleaned up [ 335.299855][T30218] 8021q: adding VLAN 0 to HW filter on device bond4 [ 335.307080][T30230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.324709][ T4464] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.333275][ T4464] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.357025][T30232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3798'. [ 335.366047][T30232] netlink: 'syz.4.3798': attribute type 30 has an invalid length. [ 335.371434][T30218] EXT4-fs warning (device loop0): ext4_group_extend:1862: can't shrink FS - resize aborted [ 335.396818][ T52] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.406991][ T52] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.415788][ T311] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.424120][ T311] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.429740][T25321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.950227][T30382] loop6: detected capacity change from 0 to 512 [ 335.956846][T30387] loop0: detected capacity change from 0 to 1024 [ 335.967102][T30387] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3810: bad orphan inode 134217728 [ 335.986384][T30387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.993264][T30345] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3808'. [ 336.008001][T30382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.026118][T30382] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.046163][T30345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3808'. [ 336.055105][T30345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3808'. [ 336.068459][T30345] geneve2: entered promiscuous mode [ 336.073733][T30345] geneve2: entered allmulticast mode [ 336.080488][ T320] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.095001][ T320] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.107752][T30398] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3813'. [ 336.116763][T30398] netlink: 'syz.9.3813': attribute type 30 has an invalid length. [ 336.125875][ T320] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.134103][ T320] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.184289][T28304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.302347][T30414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=30414 comm=syz.4.3817 [ 336.504803][T30429] netlink: 144 bytes leftover after parsing attributes in process `syz.9.3822'. [ 336.523590][T30435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=30435 comm=syz.4.3825 [ 336.616125][T30458] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3828'. [ 336.662220][T30460] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=30460 comm=syz.9.3830 [ 336.727722][T25321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.866483][T30486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3839'. [ 336.900152][T30501] netlink: 'syz.4.3840': attribute type 30 has an invalid length. [ 336.943424][T30505] 9p: Bad value for 'wfdno' [ 337.004380][T30519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=30519 comm=syz.9.3847 [ 337.125469][T30533] netlink: 'syz.9.3852': attribute type 30 has an invalid length. [ 337.133930][T30530] loop6: detected capacity change from 0 to 8192 [ 337.160341][T30530] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 337.168274][T30530] FAT-fs (loop6): Filesystem has been set read-only [ 337.175016][T30530] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 337.182933][T30530] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 337.196638][T30544] 9p: Bad value for 'wfdno' [ 337.197156][T30530] syz.6.3851: attempt to access beyond end of device [ 337.197156][T30530] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 337.215358][T30530] Buffer I/O error on dev loop6, logical block 57847, async page read [ 337.223689][T30530] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 337.232437][T30530] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 337.240452][T30530] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 337.255119][T30547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=30547 comm=syz.9.3855 [ 337.380854][T30575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=30575 comm=syz.9.3860 [ 337.577098][T30597] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 337.710421][T30608] atomic_op ffff88810e56cd28 conn xmit_atomic 0000000000000000 [ 337.726246][T30607] netlink: 'syz.6.3871': attribute type 29 has an invalid length. [ 338.471306][T30682] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=30682 comm=syz.3.3888 [ 338.745967][T30695] netlink: 'syz.3.3890': attribute type 29 has an invalid length. [ 338.777662][ T311] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.787600][ T311] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.824343][T30660] chnl_net:caif_netlink_parms(): no params data found [ 338.840437][ T311] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.850351][ T311] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.904417][ T311] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.914277][ T311] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.943459][T30797] netlink: 'syz.9.3896': attribute type 30 has an invalid length. [ 338.967188][ T311] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.977130][ T311] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.977722][T30765] loop3: detected capacity change from 0 to 164 [ 338.999083][T30660] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.006321][T30660] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.020427][T30660] bridge_slave_0: entered allmulticast mode [ 339.027868][T30660] bridge_slave_0: entered promiscuous mode [ 339.056049][T30660] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.063175][T30660] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.072516][T30660] bridge_slave_1: entered allmulticast mode [ 339.080736][T30660] bridge_slave_1: entered promiscuous mode [ 339.121445][T30660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.127485][T30864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=30864 comm=syz.9.3898 [ 339.135204][T30660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.155892][ T311] bridge_slave_1: left allmulticast mode [ 339.161655][ T311] bridge_slave_1: left promiscuous mode [ 339.167445][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.212650][ T311] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 339.216195][T30866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=30866 comm=syz.9.3899 [ 339.277682][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.287655][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.298397][ T311] bond0 (unregistering): Released all slaves [ 339.307267][ T311] bond1 (unregistering): Released all slaves [ 339.317308][ T311] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 339.326092][ T311] bond2 (unregistering): Released all slaves [ 339.361917][T30660] team0: Port device team_slave_0 added [ 339.380114][T30660] team0: Port device team_slave_1 added [ 339.388859][ T311] hsr_slave_0: left promiscuous mode [ 339.397216][ T311] hsr_slave_1: left promiscuous mode [ 339.471617][ T311] team0 (unregistering): Port device team_slave_1 removed [ 339.499104][ T311] team0 (unregistering): Port device team_slave_0 removed [ 339.568032][T30660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.575063][T30660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.601196][T30660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.616204][T30660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.623239][T30660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.649470][T30660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.665297][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 339.665321][ T29] audit: type=1400 audit(2000000377.302:8735): avc: denied { unmount } for pid=27057 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 339.703661][ T29] audit: type=1400 audit(2000000377.342:8736): avc: denied { read open } for pid=30917 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.757152][ T29] audit: type=1400 audit(2000000377.342:8737): avc: denied { getattr } for pid=30917 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.791498][T30660] hsr_slave_0: entered promiscuous mode [ 339.808562][T30660] hsr_slave_1: entered promiscuous mode [ 339.857300][ T29] audit: type=1400 audit(2000000377.502:8738): avc: denied { add_name } for pid=30912 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.880038][ T29] audit: type=1400 audit(2000000377.502:8739): avc: denied { create } for pid=30912 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.905498][ T29] audit: type=1400 audit(2000000377.542:8740): avc: denied { write } for pid=30912 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=15949 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.931889][ T29] audit: type=1400 audit(2000000377.542:8741): avc: denied { append } for pid=30912 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=15949 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.994736][T31010] netlink: 'syz.3.3908': attribute type 29 has an invalid length. [ 340.010180][ T29] audit: type=1400 audit(2000000377.652:8742): avc: denied { remove_name } for pid=31016 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=15949 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.034006][ T29] audit: type=1400 audit(2000000377.652:8743): avc: denied { unlink } for pid=31016 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=15949 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 340.088071][T31037] __nla_validate_parse: 20 callbacks suppressed [ 340.088094][T31037] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3909'. [ 340.141988][T31048] sctp: [Deprecated]: syz.6.3911 (pid 31048) Use of int in max_burst socket option deprecated. [ 340.141988][T31048] Use struct sctp_assoc_value instead [ 340.181129][T31050] loop3: detected capacity change from 0 to 512 [ 340.212822][T31050] EXT4-fs: Ignoring removed bh option [ 340.226139][T31050] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 340.245150][T31050] EXT4-fs (loop3): 1 truncate cleaned up [ 340.261695][T31050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.297121][T27057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.340782][T31082] netlink: 'syz.3.3915': attribute type 29 has an invalid length. [ 340.389831][T31085] loop6: detected capacity change from 0 to 164 [ 340.441901][T31093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3917'. [ 340.451015][T31093] tipc: Invalid UDP bearer configuration [ 340.451034][T31093] tipc: Enabling of bearer rejected, failed to enable media [ 340.479428][T31070] netlink: 144 bytes leftover after parsing attributes in process `syz.9.3913'. [ 340.551492][T31115] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3921'. [ 340.553470][ T29] audit: type=1400 audit(2000000378.192:8744): avc: denied { connect } for pid=31113 comm="syz.6.3920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 340.633181][T30660] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.657783][T30660] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 340.673031][T31134] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3922'. [ 340.688801][T30660] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.698011][T30660] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.734747][T31143] loop3: detected capacity change from 0 to 512 [ 340.754249][T31143] EXT4-fs: Ignoring removed bh option [ 340.786869][T31143] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 340.806804][T31143] EXT4-fs (loop3): 1 truncate cleaned up [ 340.814839][T31143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.844171][T30660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.870565][T30660] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.881333][T27057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.893419][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.900631][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.929719][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.936953][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.120975][T30660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.156656][T31183] loop0: detected capacity change from 0 to 512 [ 341.171751][T31183] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3927: inode has both inline data and extents flags [ 341.198448][T31183] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3927: couldn't read orphan inode 15 (err -117) [ 341.222279][T31183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.348480][T25321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.402295][T31199] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=31199 comm=syz.0.3928 [ 341.457714][T30660] veth0_vlan: entered promiscuous mode [ 341.485785][T30660] veth1_vlan: entered promiscuous mode [ 341.497016][T31207] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3930'. [ 341.506127][T31207] tipc: Invalid UDP bearer configuration [ 341.506141][T31207] tipc: Enabling of bearer rejected, failed to enable media [ 341.539533][T30660] veth0_macvtap: entered promiscuous mode [ 341.559239][T30660] veth1_macvtap: entered promiscuous mode [ 341.579636][T31210] loop0: detected capacity change from 0 to 512 [ 341.592273][T30660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.610126][T30660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.633535][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.647002][T31210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.663070][T31219] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3932'. [ 341.690772][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.734807][T31210] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.756525][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.801732][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.826114][T31210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3931'. [ 341.835101][T31210] netlink: 'syz.0.3931': attribute type 30 has an invalid length. [ 341.843692][T31230] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3934'. [ 341.866417][T31239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=31239 comm=syz.9.3936 [ 341.903402][T31244] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3937'. [ 341.921780][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.942258][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.980433][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.005028][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.015902][T25321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.254099][T31279] loop6: detected capacity change from 0 to 512 [ 342.414843][T31279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.582201][T31279] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.703595][T31279] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3944: bg 0: block 18: invalid block bitmap [ 342.945522][T31293] loop0: detected capacity change from 0 to 512 [ 343.037827][T31293] EXT4-fs: Ignoring removed orlov option [ 343.049116][T31293] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 343.066458][T31293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 343.066777][T28304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.093445][T31293] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3947: corrupted in-inode xattr: e_value size too large [ 343.112919][T31293] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3947: couldn't read orphan inode 15 (err -117) [ 343.153343][T31293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.212527][T25321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.336456][T31327] loop6: detected capacity change from 0 to 4096 [ 343.373641][T31333] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=31333 comm=syz.4.3957 [ 343.401745][T31327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.435451][T28304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.487537][T31350] loop3: detected capacity change from 0 to 8192 [ 343.525862][T31363] netlink: 'syz.4.3961': attribute type 4 has an invalid length. [ 343.610264][T31363] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.617763][T31363] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.622621][T31372] program syz.3.3958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.711635][T31363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.722568][T31363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.770688][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.780102][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.806514][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.828549][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.883904][T31384] loop0: detected capacity change from 0 to 512 [ 343.906584][T31383] siw: device registration error -23 [ 343.927092][T31384] EXT4-fs: Ignoring removed bh option [ 343.962030][T31384] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 343.975445][T31384] EXT4-fs (loop0): 1 truncate cleaned up [ 343.991839][T31384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.017706][T25321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.484142][T31434] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 344.534912][T31443] 9p: Bad value for 'wfdno' [ 344.543081][T31434] EXT4-fs (loop6): 1 truncate cleaned up [ 344.549522][T31434] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.609826][T31449] random: crng reseeded on system resumption [ 344.621847][T28304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.652854][T31450] EXT4-fs: Ignoring removed bh option [ 344.668977][T31450] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 344.714104][T31457] vfat: Unknown parameter 'utf‹cVŸ’]_tname' [ 344.722852][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 344.722870][ T29] audit: type=1400 audit(2000000382.372:8783): avc: denied { map } for pid=31456 comm="syz.6.3983" path="/98/file0" dev="tmpfs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 344.759533][T31450] EXT4-fs (loop3): 1 truncate cleaned up [ 344.789914][T31450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.828552][ T29] audit: type=1400 audit(2000000382.372:8784): avc: denied { execute } for pid=31456 comm="syz.6.3983" path="/98/file0" dev="tmpfs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 344.917750][T27057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.003769][ T29] audit: type=1326 audit(2000000382.642:8785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31485 comm="syz.6.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 345.027565][ T29] audit: type=1326 audit(2000000382.642:8786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31485 comm="syz.6.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 345.051703][ T29] audit: type=1326 audit(2000000382.642:8787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31485 comm="syz.6.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 345.075753][ T29] audit: type=1326 audit(2000000382.642:8788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31485 comm="syz.6.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 345.099341][ T29] audit: type=1326 audit(2000000382.642:8789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31485 comm="syz.6.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 345.123106][ T29] audit: type=1326 audit(2000000382.642:8790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31485 comm="syz.6.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 345.146783][ T29] audit: type=1326 audit(2000000382.642:8791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31485 comm="syz.6.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 345.170349][ T29] audit: type=1326 audit(2000000382.642:8792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31485 comm="syz.6.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 345.199022][T31491] __nla_validate_parse: 13 callbacks suppressed [ 345.199045][T31491] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3988'. [ 345.215843][T31492] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3990'. [ 345.347131][T31504] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3993'. [ 345.380120][T31501] set_capacity_and_notify: 4 callbacks suppressed [ 345.380140][T31501] loop4: detected capacity change from 0 to 8192 [ 345.524372][T31516] program syz.4.3992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.652071][T31523] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.662458][T31523] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.768142][T31533] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4000'. [ 345.791430][T31523] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.801922][T31523] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.810098][T31533] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4000'. [ 345.902294][T31541] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4003'. [ 345.917654][T31523] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.928329][T31523] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.970696][T31543] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4004'. [ 345.992348][T31523] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.002835][T31523] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.085653][ T37] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.094007][ T37] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.117406][ T37] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.125810][ T37] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.193398][T31566] netlink: 144 bytes leftover after parsing attributes in process `syz.9.4006'. [ 346.205141][ T320] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.213592][ T320] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.238319][T31569] xt_nat: multiple ranges no longer supported [ 346.260531][ T320] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.268885][ T320] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.346541][T31576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4009'. [ 346.408346][T31586] sctp: [Deprecated]: syz.4.4011 (pid 31586) Use of int in max_burst socket option deprecated. [ 346.408346][T31586] Use struct sctp_assoc_value instead [ 346.524457][T31594] netlink: 144 bytes leftover after parsing attributes in process `syz.9.4014'. [ 347.310605][T31663] netlink: 'syz.0.4029': attribute type 4 has an invalid length. [ 347.327122][ T37] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.340103][ T37] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.369264][ T37] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.393209][ T37] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.441389][T31669] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 348.683756][T31727] loop6: detected capacity change from 0 to 512 [ 348.694500][T31727] EXT4-fs: Ignoring removed bh option [ 348.728865][T31727] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 348.743433][T31727] EXT4-fs (loop6): 1 truncate cleaned up [ 348.750140][T31727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.778584][T28304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.839722][T31746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.857119][T31746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.893551][T31746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.902970][T31746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.915564][T31751] loop6: detected capacity change from 0 to 512 [ 348.928038][T31746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.937033][T31746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.946812][T31746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.960941][T31759] FAULT_INJECTION: forcing a failure. [ 348.960941][T31759] name failslab, interval 1, probability 0, space 0, times 0 [ 348.963323][T31751] EXT4-fs: Ignoring removed bh option [ 348.973676][T31759] CPU: 1 UID: 0 PID: 31759 Comm: syz.3.4050 Not tainted syzkaller #0 PREEMPT(voluntary) [ 348.973795][T31759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.973852][T31759] Call Trace: [ 348.973881][T31759] [ 348.973907][T31759] __dump_stack+0x1d/0x30 [ 348.974000][T31759] dump_stack_lvl+0x95/0xd0 [ 348.974094][T31759] dump_stack+0x15/0x1b [ 348.974165][T31759] should_fail_ex+0x263/0x280 [ 348.974270][T31759] should_failslab+0x8c/0xb0 [ 348.974356][T31759] kmem_cache_alloc_noprof+0x68/0x490 [ 348.974443][T31759] ? dup_fd+0x3a/0x510 [ 348.974541][T31759] dup_fd+0x3a/0x510 [ 348.974606][T31759] ? __fget_files+0x184/0x1c0 [ 348.974682][T31759] ? mutex_lock+0x57/0x90 [ 348.974835][T31759] ksys_unshare+0x343/0x6d0 [ 348.974909][T31759] ? ksys_write+0x194/0x1a0 [ 348.974985][T31759] __x64_sys_unshare+0x1f/0x30 [ 348.975139][T31759] x64_sys_call+0x2ae6/0x3000 [ 348.975260][T31759] do_syscall_64+0xc0/0x2a0 [ 348.975409][T31759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.975475][T31759] RIP: 0033:0x7fd577d4aeb9 [ 348.975532][T31759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.975615][T31759] RSP: 002b:00007fd5767a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 348.975681][T31759] RAX: ffffffffffffffda RBX: 00007fd577fc5fa0 RCX: 00007fd577d4aeb9 [ 348.975735][T31759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020060400 [ 348.975808][T31759] RBP: 00007fd5767a7090 R08: 0000000000000000 R09: 0000000000000000 [ 348.975852][T31759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.975905][T31759] R13: 00007fd577fc6038 R14: 00007fd577fc5fa0 R15: 00007ffd9d70dd28 [ 348.975969][T31759] [ 348.976572][T31746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.178789][T31751] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 349.238718][T31751] EXT4-fs (loop6): 1 truncate cleaned up [ 349.250050][T31751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.280797][T31751] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4049: invalid indirect mapped block 4294901760 (level 0) [ 349.353184][T31751] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4049: invalid indirect mapped block 4294967295 (level 1) [ 349.413358][T31751] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4049: invalid indirect mapped block 65535 (level 2) [ 349.697952][T28304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.565466][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 392.565486][ T29] audit: type=1400 audit(2000000430.202:8839): avc: denied { setopt } for pid=31801 comm="syz.4.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 392.591597][ T29] audit: type=1400 audit(2000000430.202:8840): avc: denied { bind } for pid=31801 comm="syz.4.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 392.611079][ T29] audit: type=1400 audit(2000000430.202:8841): avc: denied { name_bind } for pid=31801 comm="syz.4.4058" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 392.632223][ T29] audit: type=1400 audit(2000000430.202:8842): avc: denied { node_bind } for pid=31801 comm="syz.4.4058" saddr=fc01:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 392.752232][T31812] tipc: Started in network mode [ 392.757695][T31812] tipc: Node identity ffe5, cluster identity 4711 [ 392.764425][T31812] tipc: Enabling of bearer rejected, failed to enable media [ 392.773988][ T29] audit: type=1400 audit(2000000430.392:8843): avc: denied { create } for pid=31797 comm="syz.3.4060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 392.784173][T31812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.793779][ T29] audit: type=1400 audit(2000000430.392:8844): avc: denied { write } for pid=31797 comm="syz.3.4060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 392.830340][T31835] __nla_validate_parse: 6 callbacks suppressed [ 392.830357][T31835] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4061'. [ 392.850250][ T29] audit: type=1400 audit(2000000430.492:8845): avc: denied { ioctl } for pid=31798 comm="syz.6.4057" path="socket:[57286]" dev="sockfs" ino=57286 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 392.876006][T31812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.006206][T31802] tipc: Started in network mode [ 393.011246][T31802] tipc: Node identity da489c4383d2, cluster identity 4711 [ 393.018626][T31802] tipc: Enabled bearer , priority 0 [ 393.127067][T31802] syzkaller0: entered promiscuous mode [ 393.132772][T31802] syzkaller0: entered allmulticast mode [ 393.170664][T31847] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4063'. [ 393.173413][T31802] tipc: Resetting bearer [ 393.330421][T31850] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31850 comm=syz.0.4062 [ 393.371932][T31850] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31850 comm=syz.0.4062 [ 393.386361][T31798] tipc: Resetting bearer [ 393.395942][ T29] audit: type=1400 audit(2000000431.042:8846): avc: denied { create } for pid=31849 comm="syz.0.4062" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_kobject_uevent_socket permissive=1 [ 393.448437][T31798] tipc: Disabling bearer [ 393.521222][T31864] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4066'. [ 393.718354][ T29] audit: type=1326 audit(2000000431.352:8847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31872 comm="syz.9.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a110aeb9 code=0x7ffc0000 [ 393.742179][ T29] audit: type=1326 audit(2000000431.352:8848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31872 comm="syz.9.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a110aeb9 code=0x7ffc0000 [ 393.922907][T31885] loop0: detected capacity change from 0 to 128 [ 394.017962][T31885] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 394.173543][T31912] netlink: 'syz.3.4077': attribute type 1 has an invalid length. [ 394.176887][T31906] netlink: 'syz.4.4076': attribute type 1 has an invalid length. [ 394.181604][T31912] NCSI netlink: No device for ifindex 0 [ 394.404147][T31931] loop4: detected capacity change from 0 to 256 [ 394.411842][T31930] loop3: detected capacity change from 0 to 512 [ 394.434926][T31931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4080'. [ 394.481074][T31930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.505531][T31930] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.526573][T31930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4083'. [ 394.535684][T31930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4083'. [ 394.606620][T27057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.766593][T31951] sctp: [Deprecated]: syz.6.4086 (pid 31951) Use of int in max_burst socket option deprecated. [ 394.766593][T31951] Use struct sctp_assoc_value instead [ 394.797972][T31948] loop0: detected capacity change from 0 to 1024 [ 394.804863][T31948] EXT4-fs: Ignoring removed bh option [ 394.816899][ T4458] IPVS: starting estimator thread 0... [ 394.833311][T31948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.879999][T31963] syzkaller0: entered promiscuous mode [ 394.885575][T31963] syzkaller0: entered allmulticast mode [ 394.905315][T31957] IPVS: using max 2208 ests per chain, 110400 per kthread [ 394.969672][T31970] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20001 [ 395.000507][T31954] macvlan0: entered promiscuous mode [ 395.006379][T31954] bridge0: entered promiscuous mode [ 395.020493][T25321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.117528][T31993] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.4093'. [ 395.144648][T31996] macvtap1: entered promiscuous mode [ 395.150110][T31996] team0: entered promiscuous mode [ 395.155206][T31996] team_slave_0: entered promiscuous mode [ 395.161115][T31996] team_slave_1: entered promiscuous mode [ 395.176916][T32000] siw: device registration error -23 [ 395.192815][T31996] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 395.211533][T31996] team0: Device macvtap1 is already an upper device of the team interface [ 395.225917][T31996] team0: left promiscuous mode [ 395.230777][T31996] team_slave_0: left promiscuous mode [ 395.236317][T31996] team_slave_1: left promiscuous mode [ 395.431129][T32031] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4102'. [ 395.507979][T32035] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4103'. [ 395.516965][T32035] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4103'. [ 395.552593][T32028] loop4: detected capacity change from 0 to 512 [ 395.636423][T32028] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 395.654203][T32028] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4101: invalid indirect mapped block 256 (level 1) [ 395.714063][T32028] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4101: invalid indirect mapped block 2683928664 (level 1) [ 395.737761][T32028] EXT4-fs (loop4): 1 truncate cleaned up [ 395.760200][T32046] loop6: detected capacity change from 0 to 128 [ 395.778565][T32028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.796667][T32046] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 395.797110][T32046] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 395.837924][T28304] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 395.879207][T32028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.897970][T32059] cgroup: name respecified [ 396.018237][T32067] 9p: Bad value for 'port' [ 396.148455][T32095] loop0: detected capacity change from 0 to 128 [ 396.262253][T32111] sctp: [Deprecated]: syz.6.4124 (pid 32111) Use of int in max_burst socket option deprecated. [ 396.262253][T32111] Use struct sctp_assoc_value instead [ 396.325931][T32119] loop0: detected capacity change from 0 to 128 [ 396.334073][T32120] netlink: 'syz.0.4126': attribute type 4 has an invalid length. [ 396.346671][T32119] ext4: Unknown parameter './file0' [ 396.355064][T32120] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 396.446135][T32137] siw: device registration error -23 [ 396.470039][T32141] loop3: detected capacity change from 0 to 128 [ 396.651221][T32161] delete_channel: no stack [ 396.755067][T32169] netlink: 'syz.9.4142': attribute type 18 has an invalid length. [ 396.768222][T32170] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 396.815451][T32176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8218 sclass=netlink_route_socket pid=32176 comm=syz.4.4143 [ 397.122681][T32210] loop6: detected capacity change from 0 to 512 [ 397.151092][T32210] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.177092][T32210] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.287573][T28304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.382409][T32241] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 397.468094][T32252] FAULT_INJECTION: forcing a failure. [ 397.468094][T32252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.481338][T32252] CPU: 1 UID: 0 PID: 32252 Comm: syz.9.4163 Not tainted syzkaller #0 PREEMPT(voluntary) [ 397.481423][T32252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.481439][T32252] Call Trace: [ 397.481446][T32252] [ 397.481455][T32252] __dump_stack+0x1d/0x30 [ 397.481582][T32252] dump_stack_lvl+0x95/0xd0 [ 397.481611][T32252] dump_stack+0x15/0x1b [ 397.481639][T32252] should_fail_ex+0x263/0x280 [ 397.481683][T32252] should_fail+0xb/0x20 [ 397.481718][T32252] should_fail_usercopy+0x1a/0x20 [ 397.481778][T32252] _copy_from_user+0x1c/0xb0 [ 397.481855][T32252] copy_from_bpfptr+0x5c/0x90 [ 397.481889][T32252] bpf_prog_load+0x73a/0x1140 [ 397.481955][T32252] ? security_bpf+0x2b/0x90 [ 397.481987][T32252] __sys_bpf+0x469/0x7b0 [ 397.482084][T32252] __x64_sys_bpf+0x41/0x50 [ 397.482112][T32252] x64_sys_call+0x28e1/0x3000 [ 397.482171][T32252] do_syscall_64+0xc0/0x2a0 [ 397.482273][T32252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.482323][T32252] RIP: 0033:0x7f57a110aeb9 [ 397.482346][T32252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.482370][T32252] RSP: 002b:00007f579fb67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.482396][T32252] RAX: ffffffffffffffda RBX: 00007f57a1385fa0 RCX: 00007f57a110aeb9 [ 397.482412][T32252] RDX: 0000000000000094 RSI: 00002000000009c0 RDI: 0000000000000005 [ 397.482453][T32252] RBP: 00007f579fb67090 R08: 0000000000000000 R09: 0000000000000000 [ 397.482470][T32252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.482501][T32252] R13: 00007f57a1386038 R14: 00007f57a1385fa0 R15: 00007ffc752077a8 [ 397.482527][T32252] [ 397.722815][T32281] EXT4-fs: Ignoring removed i_version option [ 397.741462][T32281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.853195][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 397.853221][ T29] audit: type=1400 audit(2000000435.492:9425): avc: denied { setattr } for pid=32280 comm="syz.3.4169" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 397.908912][T27057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.949249][T32312] __nla_validate_parse: 23 callbacks suppressed [ 397.949264][T32312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4177'. [ 397.966768][T32301] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4175'. [ 397.985210][T32312] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4177'. [ 397.995066][T32312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4177'. [ 398.145355][ T29] audit: type=1326 audit(2000000435.782:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32339 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd577d4aeb9 code=0x7ffc0000 [ 398.169119][ T29] audit: type=1326 audit(2000000435.782:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32339 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd577d4aeb9 code=0x7ffc0000 [ 398.192995][ T29] audit: type=1326 audit(2000000435.782:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32339 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd577d4aeb9 code=0x7ffc0000 [ 398.217450][ T29] audit: type=1326 audit(2000000435.782:9429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32339 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd577d4aeb9 code=0x7ffc0000 [ 398.241115][ T29] audit: type=1326 audit(2000000435.782:9430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32339 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd577d4aeb9 code=0x7ffc0000 [ 398.264998][ T29] audit: type=1326 audit(2000000435.782:9431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32339 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd577d4aeb9 code=0x7ffc0000 [ 398.288585][ T29] audit: type=1326 audit(2000000435.782:9432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32339 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd577d4aeb9 code=0x7ffc0000 [ 398.312308][ T29] audit: type=1326 audit(2000000435.782:9433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32339 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd577d4aeb9 code=0x7ffc0000 [ 398.335886][ T29] audit: type=1326 audit(2000000435.782:9434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32339 comm="syz.3.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd577d4aeb9 code=0x7ffc0000 [ 398.400859][T32357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4190'. [ 398.410367][T32357] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4190'. [ 398.419911][T32357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4190'. [ 398.657394][T32388] macvtap1: entered promiscuous mode [ 398.662857][T32388] team0: entered promiscuous mode [ 398.668038][T32388] team_slave_0: entered promiscuous mode [ 398.674019][T32388] team_slave_1: entered promiscuous mode [ 398.700005][T32388] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 398.715933][T32388] team0: Device macvtap1 is already an upper device of the team interface [ 398.727671][T32388] team0: left promiscuous mode [ 398.732555][T32388] team_slave_0: left promiscuous mode [ 398.738157][T32388] team_slave_1: left promiscuous mode [ 398.761891][T32405] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4201'. [ 398.785534][T32405] bond0: entered promiscuous mode [ 398.791914][T32405] bond0: left promiscuous mode [ 398.801403][T32417] FAULT_INJECTION: forcing a failure. [ 398.801403][T32417] name failslab, interval 1, probability 0, space 0, times 0 [ 398.814215][T32417] CPU: 0 UID: 0 PID: 32417 Comm: syz.6.4204 Not tainted syzkaller #0 PREEMPT(voluntary) [ 398.814252][T32417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 398.814264][T32417] Call Trace: [ 398.814271][T32417] [ 398.814279][T32417] __dump_stack+0x1d/0x30 [ 398.814303][T32417] dump_stack_lvl+0x95/0xd0 [ 398.814386][T32417] dump_stack+0x15/0x1b [ 398.814404][T32417] should_fail_ex+0x263/0x280 [ 398.814511][T32417] should_failslab+0x8c/0xb0 [ 398.814533][T32417] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 398.814624][T32417] ? __alloc_skb+0x2f0/0x4b0 [ 398.814652][T32417] __alloc_skb+0x2f0/0x4b0 [ 398.814677][T32417] ? __alloc_skb+0x219/0x4b0 [ 398.814715][T32417] netlink_alloc_large_skb+0xbf/0xf0 [ 398.814744][T32417] netlink_sendmsg+0x40c/0x6f0 [ 398.814764][T32417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.814781][T32417] ____sys_sendmsg+0x5af/0x600 [ 398.814866][T32417] ___sys_sendmsg+0x195/0x1e0 [ 398.815041][T32417] __x64_sys_sendmsg+0xd4/0x160 [ 398.815062][T32417] x64_sys_call+0x17ba/0x3000 [ 398.815211][T32417] do_syscall_64+0xc0/0x2a0 [ 398.815273][T32417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.815301][T32417] RIP: 0033:0x7fcd8d14aeb9 [ 398.815351][T32417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.815374][T32417] RSP: 002b:00007fcd8bba7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.815399][T32417] RAX: ffffffffffffffda RBX: 00007fcd8d3c5fa0 RCX: 00007fcd8d14aeb9 [ 398.815414][T32417] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 398.815429][T32417] RBP: 00007fcd8bba7090 R08: 0000000000000000 R09: 0000000000000000 [ 398.815456][T32417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.815475][T32417] R13: 00007fcd8d3c6038 R14: 00007fcd8d3c5fa0 R15: 00007ffcaa211968 [ 398.815501][T32417] [ 399.089559][ T4464] Bluetooth: hci0: Frame reassembly failed (-84) [ 399.104571][T32435] set_capacity_and_notify: 1 callbacks suppressed [ 399.104590][T32435] loop4: detected capacity change from 0 to 1024 [ 399.216246][T32438] loop0: detected capacity change from 0 to 8192 [ 399.226935][T32438] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 399.234842][T32438] FAT-fs (loop0): Filesystem has been set read-only [ 399.241526][T32438] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 399.249541][T32438] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 399.272982][T32438] syz.0.4210: attempt to access beyond end of device [ 399.272982][T32438] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 399.286993][T32438] Buffer I/O error on dev loop0, logical block 57847, async page read [ 399.295444][T32438] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 399.311633][T32454] loop4: detected capacity change from 0 to 512 [ 399.322407][T32438] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 399.330562][T32438] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 399.350427][T32454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.363458][T32454] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.381372][T32454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4213'. [ 399.390693][T32454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4213'. [ 399.437563][T32465] loop3: detected capacity change from 0 to 164 [ 399.456257][T30660] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.499680][T32487] syz.4.4217 (32487): /proc/32487/oom_adj is deprecated, please use /proc/32487/oom_score_adj instead. [ 399.512825][T32487] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 399.513515][T32487] @0Ù: renamed from bond_slave_1 [ 399.655476][T32487] loop4: detected capacity change from 0 to 256 [ 399.801776][T32515] tmpfs: Unknown parameter 'mal:' [ 399.836206][T32523] FAULT_INJECTION: forcing a failure. [ 399.836206][T32523] name failslab, interval 1, probability 0, space 0, times 0 [ 399.849116][T32523] CPU: 0 UID: 0 PID: 32523 Comm: syz.3.4226 Not tainted syzkaller #0 PREEMPT(voluntary) [ 399.849159][T32523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.849171][T32523] Call Trace: [ 399.849178][T32523] [ 399.849186][T32523] __dump_stack+0x1d/0x30 [ 399.849209][T32523] dump_stack_lvl+0x95/0xd0 [ 399.849229][T32523] dump_stack+0x15/0x1b [ 399.849270][T32523] should_fail_ex+0x263/0x280 [ 399.849321][T32523] should_failslab+0x8c/0xb0 [ 399.849363][T32523] __kmalloc_noprof+0xb8/0x580 [ 399.849386][T32523] ? copy_splice_read+0xc2/0x6c0 [ 399.849481][T32523] copy_splice_read+0xc2/0x6c0 [ 399.849516][T32523] ? __pfx_copy_splice_read+0x10/0x10 [ 399.849546][T32523] splice_direct_to_actor+0x26e/0x670 [ 399.849674][T32523] ? __pfx_direct_splice_actor+0x10/0x10 [ 399.849696][T32523] do_splice_direct+0x119/0x1a0 [ 399.849714][T32523] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 399.849737][T32523] do_sendfile+0x382/0x650 [ 399.849801][T32523] __x64_sys_sendfile64+0x105/0x150 [ 399.849825][T32523] x64_sys_call+0x2db1/0x3000 [ 399.849848][T32523] do_syscall_64+0xc0/0x2a0 [ 399.849920][T32523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.849989][T32523] RIP: 0033:0x7fd577d4aeb9 [ 399.850005][T32523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.850045][T32523] RSP: 002b:00007fd5767a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 399.850063][T32523] RAX: ffffffffffffffda RBX: 00007fd577fc5fa0 RCX: 00007fd577d4aeb9 [ 399.850076][T32523] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 399.850087][T32523] RBP: 00007fd5767a7090 R08: 0000000000000000 R09: 0000000000000000 [ 399.850099][T32523] R10: 000000010000a006 R11: 0000000000000246 R12: 0000000000000001 [ 399.850111][T32523] R13: 00007fd577fc6038 R14: 00007fd577fc5fa0 R15: 00007ffd9d70dd28 [ 399.850130][T32523] [ 400.135128][T32524] loop4: detected capacity change from 0 to 1024 [ 400.146076][T32524] EXT4-fs: Ignoring removed orlov option [ 400.151939][T32524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 400.175587][T32528] loop3: detected capacity change from 0 to 8192 [ 400.185491][T32524] ext4: Unknown parameter 'subj_role' [ 400.208917][T32528] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 400.216915][T32528] FAT-fs (loop3): Filesystem has been set read-only [ 400.223559][T32528] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 400.231628][T32528] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 400.264678][T32528] syz.3.4227: attempt to access beyond end of device [ 400.264678][T32528] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 400.278812][T32528] Buffer I/O error on dev loop3, logical block 57847, async page read [ 400.287062][T32528] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 400.312646][T32528] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 400.320638][T32528] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 400.361554][T32548] netlink: 'syz.9.4231': attribute type 10 has an invalid length. [ 400.397332][T32551] macvlan2: entered promiscuous mode [ 400.405049][T32551] batman_adv: batadv0: Adding interface: macvlan2 [ 400.411656][T32551] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.437212][T32551] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 400.522219][T32564] FAULT_INJECTION: forcing a failure. [ 400.522219][T32564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.535470][T32564] CPU: 0 UID: 0 PID: 32564 Comm: syz.9.4235 Not tainted syzkaller #0 PREEMPT(voluntary) [ 400.535524][T32564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.535542][T32564] Call Trace: [ 400.535556][T32564] [ 400.535567][T32564] __dump_stack+0x1d/0x30 [ 400.535611][T32564] dump_stack_lvl+0x95/0xd0 [ 400.535639][T32564] dump_stack+0x15/0x1b [ 400.535738][T32564] should_fail_ex+0x263/0x280 [ 400.535780][T32564] should_fail+0xb/0x20 [ 400.535815][T32564] should_fail_usercopy+0x1a/0x20 [ 400.535912][T32564] _copy_from_user+0x1c/0xb0 [ 400.535941][T32564] ___sys_sendmsg+0xc1/0x1e0 [ 400.536038][T32564] __x64_sys_sendmsg+0xd4/0x160 [ 400.536071][T32564] x64_sys_call+0x17ba/0x3000 [ 400.536106][T32564] do_syscall_64+0xc0/0x2a0 [ 400.536144][T32564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.536221][T32564] RIP: 0033:0x7f57a110aeb9 [ 400.536281][T32564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.536306][T32564] RSP: 002b:00007f579fb67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.536412][T32564] RAX: ffffffffffffffda RBX: 00007f57a1385fa0 RCX: 00007f57a110aeb9 [ 400.536432][T32564] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 400.536450][T32564] RBP: 00007f579fb67090 R08: 0000000000000000 R09: 0000000000000000 [ 400.536467][T32564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.536483][T32564] R13: 00007f57a1386038 R14: 00007f57a1385fa0 R15: 00007ffc752077a8 [ 400.536508][T32564] [ 400.831261][T32593] netlink: 'syz.4.4245': attribute type 10 has an invalid length. [ 400.844592][T32593] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 400.855813][T32598] loop0: detected capacity change from 0 to 512 [ 400.886962][T32598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.904728][T32598] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.986867][T25321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.155349][T11910] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 401.155428][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 401.202336][T32629] loop0: detected capacity change from 0 to 512 [ 401.214813][T32629] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 401.225539][T32629] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.4252: attempt to clear invalid blocks 2 len 1 [ 401.243640][T32629] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 401.258584][T32629] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4252: invalid indirect mapped block 1819239214 (level 0) [ 401.275400][T32629] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4252: invalid indirect mapped block 1819239214 (level 1) [ 401.295734][T32629] EXT4-fs (loop0): 1 truncate cleaned up [ 401.303997][T32629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.321974][T32629] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.4252: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 401.377054][T25321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.408384][T32648] FAULT_INJECTION: forcing a failure. [ 401.408384][T32648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.421686][T32648] CPU: 0 UID: 0 PID: 32648 Comm: syz.0.4257 Not tainted syzkaller #0 PREEMPT(voluntary) [ 401.421730][T32648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.421791][T32648] Call Trace: [ 401.421798][T32648] [ 401.421806][T32648] __dump_stack+0x1d/0x30 [ 401.421837][T32648] dump_stack_lvl+0x95/0xd0 [ 401.421899][T32648] dump_stack+0x15/0x1b [ 401.421979][T32648] should_fail_ex+0x263/0x280 [ 401.422015][T32648] should_fail+0xb/0x20 [ 401.422053][T32648] should_fail_usercopy+0x1a/0x20 [ 401.422136][T32648] strncpy_from_user+0x27/0x250 [ 401.422226][T32648] path_getxattrat+0xab/0x2a0 [ 401.422273][T32648] __x64_sys_fgetxattr+0x59/0x70 [ 401.422337][T32648] x64_sys_call+0x1592/0x3000 [ 401.422365][T32648] do_syscall_64+0xc0/0x2a0 [ 401.422428][T32648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.422454][T32648] RIP: 0033:0x7fd9810eaeb9 [ 401.422475][T32648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.422513][T32648] RSP: 002b:00007fd97fb47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 401.422533][T32648] RAX: ffffffffffffffda RBX: 00007fd981365fa0 RCX: 00007fd9810eaeb9 [ 401.422550][T32648] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 401.422568][T32648] RBP: 00007fd97fb47090 R08: 0000000000000000 R09: 0000000000000000 [ 401.422585][T32648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.422654][T32648] R13: 00007fd981366038 R14: 00007fd981365fa0 R15: 00007ffdb511da58 [ 401.422676][T32648] [ 401.623635][T32654] loop3: detected capacity change from 0 to 512 [ 401.692319][T32654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.725466][T32654] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.833680][T27057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.907672][T32701] EXT4-fs (loop6): 1 truncate cleaned up [ 401.913811][T32701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.964137][T32701] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.6.4271: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 402.020536][T32716] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 402.089097][T32726] FAULT_INJECTION: forcing a failure. [ 402.089097][T32726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.102282][T32726] CPU: 1 UID: 0 PID: 32726 Comm: syz.0.4275 Not tainted syzkaller #0 PREEMPT(voluntary) [ 402.102311][T32726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.102325][T32726] Call Trace: [ 402.102335][T32726] [ 402.102346][T32726] __dump_stack+0x1d/0x30 [ 402.102378][T32726] dump_stack_lvl+0x95/0xd0 [ 402.102490][T32726] dump_stack+0x15/0x1b [ 402.102517][T32726] should_fail_ex+0x263/0x280 [ 402.102647][T32726] should_fail+0xb/0x20 [ 402.102683][T32726] should_fail_usercopy+0x1a/0x20 [ 402.102720][T32726] _copy_from_user+0x1c/0xb0 [ 402.102857][T32726] __sys_bind+0x106/0x290 [ 402.102901][T32726] __x64_sys_bind+0x3f/0x50 [ 402.102934][T32726] x64_sys_call+0x2ceb/0x3000 [ 402.102960][T32726] do_syscall_64+0xc0/0x2a0 [ 402.103071][T32726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.103100][T32726] RIP: 0033:0x7fd9810eaeb9 [ 402.103119][T32726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.103175][T32726] RSP: 002b:00007fd97fb47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 402.103202][T32726] RAX: ffffffffffffffda RBX: 00007fd981365fa0 RCX: 00007fd9810eaeb9 [ 402.103222][T32726] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000003 [ 402.103256][T32726] RBP: 00007fd97fb47090 R08: 0000000000000000 R09: 0000000000000000 [ 402.103273][T32726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.103290][T32726] R13: 00007fd981366038 R14: 00007fd981365fa0 R15: 00007ffdb511da58 [ 402.103311][T32726] [ 402.489601][T32749] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 402.497595][T32749] FAT-fs (loop0): Filesystem has been set read-only [ 402.504289][T32749] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 402.512361][T32749] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 402.520621][T32749] syz.0.4280: attempt to access beyond end of device [ 402.520621][T32749] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 402.534735][T32749] Buffer I/O error on dev loop0, logical block 57847, async page read [ 402.543002][T32749] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 402.577384][T32749] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 402.585406][T32749] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 402.694489][T28304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.934998][ T363] netlink: 'syz.6.4295': attribute type 4 has an invalid length. [ 402.948166][ T363] netlink: 'syz.6.4295': attribute type 4 has an invalid length. [ 402.988588][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.990076][ T368] __nla_validate_parse: 24 callbacks suppressed [ 402.990123][ T368] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4296'. [ 402.995952][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.044848][ T372] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 403.057941][ T372] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 403.072938][ T372] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4297: bg 0: block 248: padding at end of block bitmap is not set [ 403.088274][ T372] __quota_error: 97 callbacks suppressed [ 403.088293][ T372] Quota error (device loop3): write_blk: dquota write failed [ 403.101723][ T372] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 403.111864][ T372] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4297: Failed to acquire dquot type 1 [ 403.112010][ T363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.131546][ T372] EXT4-fs (loop3): 1 truncate cleaned up [ 403.137882][ T372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 403.138103][ T363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.209936][ T372] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 403.217874][ T4464] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.226377][ T4464] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.239264][ T4464] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.247803][ T4464] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.260040][ T37] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.268648][ T37] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.286279][ T4464] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.294764][ T4464] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.322507][T27057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 403.342165][ T394] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 403.342165][ T394] [ 403.353619][ T394] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 403.399553][ T408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4301'. [ 403.458734][ T415] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4304'. [ 403.496862][ T421] netlink: 'syz.4.4305': attribute type 24 has an invalid length. [ 403.508083][ T29] audit: type=1326 audit(2000000441.152:9532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=420 comm="syz.4.4305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff7c76aeb9 code=0x0 [ 403.576942][ T434] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4307'. [ 403.627022][ T29] audit: type=1326 audit(2000000441.262:9533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=437 comm="syz.6.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 403.650468][ T29] audit: type=1326 audit(2000000441.262:9534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=437 comm="syz.6.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 403.672909][ T436] syzkaller0: entered promiscuous mode [ 403.673998][ T29] audit: type=1326 audit(2000000441.272:9535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=437 comm="syz.6.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 403.679349][ T436] syzkaller0: entered allmulticast mode [ 403.700195][ T444] netlink: 'syz.9.4310': attribute type 4 has an invalid length. [ 403.703243][ T29] audit: type=1326 audit(2000000441.272:9536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=437 comm="syz.6.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 403.717324][ T444] netlink: 'syz.9.4310': attribute type 4 has an invalid length. [ 403.762133][ T29] audit: type=1326 audit(2000000441.282:9537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=437 comm="syz.6.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 403.785738][ T29] audit: type=1326 audit(2000000441.282:9538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=437 comm="syz.6.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 403.809465][ T29] audit: type=1326 audit(2000000441.282:9539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=437 comm="syz.6.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8d14aeb9 code=0x7ffc0000 [ 403.836935][ T451] EXT4-fs: Ignoring removed bh option [ 403.839201][ T451] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 403.859216][ T451] EXT4-fs (loop0): 1 truncate cleaned up [ 403.866408][ T451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.881316][ T444] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.895923][ T444] bond_slave_0: left promiscuous mode [ 403.901443][ T444] bond_slave_1: left promiscuous mode [ 403.948450][ T444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.959242][ T444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.008461][ T31] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.017080][ T31] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.027829][ T31] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.036345][ T31] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.046105][ T31] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.054622][ T31] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.067037][ T31] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.074513][T25321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.075555][ T31] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.136842][ T484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4318'. [ 404.318694][ T515] set_capacity_and_notify: 9 callbacks suppressed [ 404.318713][ T515] loop0: detected capacity change from 0 to 164 [ 404.599688][ T537] macvtap1: entered promiscuous mode [ 404.605066][ T537] batadv0: entered promiscuous mode [ 404.611436][ T537] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 404.620531][ T537] batadv0: left promiscuous mode [ 404.685006][ T549] netlink: 'syz.3.4328': attribute type 4 has an invalid length. [ 404.694302][ T549] netlink: 'syz.3.4328': attribute type 4 has an invalid length. [ 404.708686][ T549] bridge0: left promiscuous mode [ 404.714475][ T320] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.723302][ T320] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.732232][ T320] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.743126][ T320] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.780489][ T555] FAULT_INJECTION: forcing a failure. [ 404.780489][ T555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.793825][ T555] CPU: 1 UID: 0 PID: 555 Comm: syz.3.4330 Not tainted syzkaller #0 PREEMPT(voluntary) [ 404.793912][ T555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.793925][ T555] Call Trace: [ 404.793934][ T555] [ 404.793945][ T555] __dump_stack+0x1d/0x30 [ 404.794058][ T555] dump_stack_lvl+0x95/0xd0 [ 404.794089][ T555] dump_stack+0x15/0x1b [ 404.794117][ T555] should_fail_ex+0x263/0x280 [ 404.794159][ T555] should_fail+0xb/0x20 [ 404.794196][ T555] should_fail_usercopy+0x1a/0x20 [ 404.794264][ T555] _copy_from_user+0x1c/0xb0 [ 404.794291][ T555] input_event_from_user+0x5e/0x190 [ 404.794352][ T555] evdev_write+0x1b0/0x2b0 [ 404.794388][ T555] ? __pfx_evdev_write+0x10/0x10 [ 404.794418][ T555] vfs_write+0x269/0x9f0 [ 404.794438][ T555] ? kmem_cache_free+0xdf/0x380 [ 404.794490][ T555] ? putname+0x90/0x100 [ 404.794524][ T555] ksys_write+0xdc/0x1a0 [ 404.794553][ T555] __x64_sys_write+0x40/0x50 [ 404.794578][ T555] x64_sys_call+0x2847/0x3000 [ 404.794682][ T555] do_syscall_64+0xc0/0x2a0 [ 404.794715][ T555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.794736][ T555] RIP: 0033:0x7fd577d4aeb9 [ 404.794753][ T555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.794842][ T555] RSP: 002b:00007fd5767a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 404.794870][ T555] RAX: ffffffffffffffda RBX: 00007fd577fc5fa0 RCX: 00007fd577d4aeb9 [ 404.794905][ T555] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000009 [ 404.794919][ T555] RBP: 00007fd5767a7090 R08: 0000000000000000 R09: 0000000000000000 [ 404.794933][ T555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.794947][ T555] R13: 00007fd577fc6038 R14: 00007fd577fc5fa0 R15: 00007ffd9d70dd28 [ 404.794972][ T555] [ 404.992076][ T557] loop0: detected capacity change from 0 to 512 [ 405.007792][ T557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.021723][ T557] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.082681][ T569] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4333'. [ 405.110031][T25321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.122886][ T577] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4337'. [ 405.125194][ T574] loop3: detected capacity change from 0 to 256 [ 405.158686][ T580] loop0: detected capacity change from 0 to 164 [ 405.533614][ T630] loop6: detected capacity change from 0 to 512 [ 405.544538][ T630] EXT4-fs: Ignoring removed bh option [ 405.551445][ T630] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 405.562366][ T630] EXT4-fs (loop6): 1 truncate cleaned up [ 405.570483][ T630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.617495][T28304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.677142][ T648] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4351'. [ 406.102031][ T674] bridge_slave_1: left allmulticast mode [ 406.107899][ T674] bridge_slave_1: left promiscuous mode [ 406.113691][ T674] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.121925][ T674] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 406.229309][ T683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4358'. [ 406.294438][ T708] program syz.3.4367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.321970][ T707] loop3: detected capacity change from 0 to 512 [ 406.417185][ T707] EXT4-fs (loop3): orphan cleanup on readonly fs [ 406.424208][ T707] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.4367: ea_inode with extended attributes [ 406.552108][ T707] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4367: error while reading EA inode 11 err=-117 [ 406.555532][ T732] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4369'. [ 406.583242][ T707] EXT4-fs (loop3): 1 orphan inode deleted [ 406.583839][ T724] loop4: detected capacity change from 0 to 1024 [ 406.592100][ T707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 406.612184][ T724] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.640336][T27057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.684134][ T724] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 406.714225][ T724] System zones: 0-1, 3-36 [ 406.729523][ T724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.779179][T30660] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.843505][ T757] can: request_module (can-proto-0) failed. [ 406.950983][ T757] wireguard0: entered promiscuous mode [ 406.960801][ T757] wireguard0: entered allmulticast mode [ 407.017072][ T780] loop4: detected capacity change from 0 to 512 [ 407.049826][ T780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.063705][ T780] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.101831][ T794] netlink: 'syz.0.4385': attribute type 46 has an invalid length. [ 407.116552][T30660] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.370439][ T828] loop3: detected capacity change from 0 to 8192 [ 407.395525][ T828] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 407.403450][ T828] FAT-fs (loop3): Filesystem has been set read-only [ 407.410262][ T828] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 407.418179][ T828] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 407.492226][ T828] syz.3.4394: attempt to access beyond end of device [ 407.492226][ T828] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 407.492270][ T828] Buffer I/O error on dev loop3, logical block 57847, async page read [ 407.492298][ T828] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 407.492330][ T828] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 407.492349][ T828] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 407.564833][ T843] loop6: detected capacity change from 0 to 164 [ 407.707817][ T858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=858 comm=syz.3.4399 [ 407.821772][ T870] FAULT_INJECTION: forcing a failure. [ 407.821772][ T870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.835096][ T870] CPU: 0 UID: 0 PID: 870 Comm: syz.4.4402 Not tainted syzkaller #0 PREEMPT(voluntary) [ 407.835140][ T870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.835155][ T870] Call Trace: [ 407.835163][ T870] [ 407.835254][ T870] __dump_stack+0x1d/0x30 [ 407.835286][ T870] dump_stack_lvl+0x95/0xd0 [ 407.835336][ T870] dump_stack+0x15/0x1b [ 407.835363][ T870] should_fail_ex+0x263/0x280 [ 407.835469][ T870] should_fail+0xb/0x20 [ 407.835549][ T870] should_fail_usercopy+0x1a/0x20 [ 407.835589][ T870] _copy_from_user+0x1c/0xb0 [ 407.835645][ T870] do_sock_getsockopt+0xf1/0x210 [ 407.835732][ T870] __x64_sys_getsockopt+0x11d/0x1a0 [ 407.835854][ T870] x64_sys_call+0x2dc7/0x3000 [ 407.835891][ T870] do_syscall_64+0xc0/0x2a0 [ 407.836001][ T870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.836021][ T870] RIP: 0033:0x7eff7c76aeb9 [ 407.836036][ T870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.836064][ T870] RSP: 002b:00007eff7b1c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 407.836083][ T870] RAX: ffffffffffffffda RBX: 00007eff7c9e5fa0 RCX: 00007eff7c76aeb9 [ 407.836096][ T870] RDX: 000000000000271e RSI: 0000200000000114 RDI: 0000000000000003 [ 407.836158][ T870] RBP: 00007eff7b1c7090 R08: 0000200000000040 R09: 0000000000000000 [ 407.836182][ T870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.836217][ T870] R13: 00007eff7c9e6038 R14: 00007eff7c9e5fa0 R15: 00007ffce91ce188 [ 407.836238][ T870] [ 408.123383][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 408.123469][ T29] audit: type=1400 audit(2000000445.762:9863): avc: denied { create } for pid=882 comm="syz.6.4405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 408.150923][ T29] audit: type=1400 audit(2000000445.782:9864): avc: denied { setopt } for pid=882 comm="syz.6.4405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 408.171056][ T29] audit: type=1400 audit(2000000445.782:9865): avc: denied { write } for pid=882 comm="syz.6.4405" path="socket:[62593]" dev="sockfs" ino=62593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 408.194366][ T29] audit: type=1400 audit(2000000445.782:9866): avc: denied { setopt } for pid=882 comm="syz.6.4405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 408.335073][ T29] audit: type=1400 audit(2000000445.972:9867): avc: denied { ioctl } for pid=908 comm="syz.4.4415" path="socket:[62119]" dev="sockfs" ino=62119 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 408.526244][ T947] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 408.561651][ T949] netlink: 'syz.3.4424': attribute type 13 has an invalid length. [ 408.667049][ T954] sctp: [Deprecated]: syz.0.4425 (pid 954) Use of int in max_burst socket option deprecated. [ 408.667049][ T954] Use struct sctp_assoc_value instead [ 408.680914][ T957] tap0: tun_chr_ioctl cmd 2147767517 [ 408.690266][ T957] tap0: tun_chr_ioctl cmd 1075599392 [ 409.066549][ T976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.086530][ T976] __nla_validate_parse: 4 callbacks suppressed [ 409.086613][ T976] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4429'. [ 409.139078][T28304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.187327][ T973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.196372][ T973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.257641][ T995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.270501][ T995] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.311064][ T1004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4433'. [ 409.332113][T28304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.360506][ T1008] set_capacity_and_notify: 3 callbacks suppressed [ 409.360546][ T1008] loop4: detected capacity change from 0 to 2048 [ 409.406693][ T1008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.479053][ T29] audit: type=1400 audit(2000000447.122:9868): avc: denied { read } for pid=1007 comm="syz.4.4436" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 409.521686][ T1028] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4439'. [ 409.531056][ T1028] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4439'. [ 409.557383][T30660] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.594804][ T29] audit: type=1326 audit(2000000447.232:9869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1037 comm="syz.4.4441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff7c76aeb9 code=0x0 [ 409.646590][ T1044] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 409.653176][ T1044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 409.660845][ T1044] vhci_hcd vhci_hcd.0: Device attached [ 409.677233][ T1044] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 409.683881][ T1044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 409.691507][ T1044] vhci_hcd vhci_hcd.0: Device attached [ 409.714002][ T1024] No such timeout policy "syz1" [ 409.749083][ T1055] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 409.755730][ T1055] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 409.763468][ T1055] vhci_hcd vhci_hcd.0: Device attached [ 409.779291][ T1044] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(10) [ 409.786042][ T1044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 409.791103][ T1052] loop4: detected capacity change from 0 to 512 [ 409.794052][ T1044] vhci_hcd vhci_hcd.0: Device attached [ 409.843372][ T1044] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(12) [ 409.850566][ T1044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 409.858266][ T1044] vhci_hcd vhci_hcd.0: Device attached [ 409.866154][ T1059] vhci_hcd: connection closed [ 409.866424][ T31] vhci_hcd vhci_hcd.0: stop threads [ 409.867709][ T1068] vhci_hcd: connection closed [ 409.871177][ T31] vhci_hcd vhci_hcd.0: release socket [ 409.871204][ T31] vhci_hcd vhci_hcd.0: disconnect device [ 409.871952][ T1048] vhci_hcd: connection closed [ 409.876811][ T1045] vhci_hcd: connection closed [ 409.897233][ T1056] vhci_hcd: connection closed [ 409.901926][ T31] vhci_hcd vhci_hcd.0: stop threads [ 409.912087][ T31] vhci_hcd vhci_hcd.0: release socket [ 409.917629][ T31] vhci_hcd vhci_hcd.0: disconnect device [ 409.926784][ T3423] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 409.934388][ T1046] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 409.945380][ T31] vhci_hcd vhci_hcd.0: stop threads [ 409.950651][ T31] vhci_hcd vhci_hcd.0: release socket [ 409.956127][ T31] vhci_hcd vhci_hcd.0: disconnect device [ 409.985408][ T31] vhci_hcd vhci_hcd.0: stop threads [ 409.990818][ T31] vhci_hcd vhci_hcd.0: release socket [ 409.996659][ T31] vhci_hcd vhci_hcd.0: disconnect device [ 410.004087][ T31] vhci_hcd vhci_hcd.0: stop threads [ 410.004682][ T1079] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4449'. [ 410.010453][ T31] vhci_hcd vhci_hcd.0: release socket [ 410.025817][ T31] vhci_hcd vhci_hcd.0: disconnect device [ 410.050941][ T1081] sock: sock_set_timeout: `syz.9.4450' (pid 1081) tries to set negative timeout [ 410.098540][ T29] audit: type=1400 audit(2000000447.742:9870): avc: denied { sqpoll } for pid=1086 comm="syz.6.4453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 410.152156][ T29] audit: type=1400 audit(2000000447.792:9871): avc: denied { write } for pid=1086 comm="syz.6.4453" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 410.175600][ T29] audit: type=1400 audit(2000000447.792:9872): avc: denied { setattr } for pid=1086 comm="syz.6.4453" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 410.519241][ T1140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4461'. [ 410.574488][ T1147] loop6: detected capacity change from 0 to 512 [ 410.583947][ T1149] loop0: detected capacity change from 0 to 164 [ 410.602310][ T1147] EXT4-fs: Ignoring removed bh option [ 410.610387][ T1147] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 410.642755][ T1147] EXT4-fs (loop6): 1 truncate cleaned up [ 410.649857][ T1147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.691347][ T1160] loop4: detected capacity change from 0 to 512 [ 410.701418][T28304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.718769][ T1160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.743368][ T1160] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.802263][T30660] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.822246][ T1182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=1182 comm=syz.0.4470 [ 410.859240][ T1189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4469'. [ 410.885616][ T1189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.067123][ T1236] loop6: detected capacity change from 0 to 8192 [ 411.080259][ T1236] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 411.088230][ T1236] FAT-fs (loop6): Filesystem has been set read-only [ 411.095040][ T1236] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 411.102993][ T1236] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 411.111096][ T1236] syz.6.4473: attempt to access beyond end of device [ 411.111096][ T1236] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 411.125382][ T1236] Buffer I/O error on dev loop6, logical block 57847, async page read [ 411.133643][ T1236] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 411.142366][ T1236] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 411.150318][ T1236] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 411.257246][ T1255] loop0: detected capacity change from 0 to 512 [ 411.263939][ T1255] EXT4-fs: Ignoring removed bh option [ 411.271013][ T1255] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 411.280537][ T1255] EXT4-fs (loop0): 1 truncate cleaned up [ 411.286984][ T1255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.310821][T25321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.636125][ T1289] loop0: detected capacity change from 0 to 512 [ 411.661488][ T1289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.674294][ T1289] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.701066][ T1289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4480'. [ 411.824469][T25321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.878508][ T1315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4485'. [ 412.042082][ T1333] loop3: detected capacity change from 0 to 512 [ 412.049277][ T1333] EXT4-fs: Ignoring removed bh option [ 412.055151][ T1333] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 412.066923][ T1333] EXT4-fs (loop3): 1 truncate cleaned up [ 412.073178][ T1333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.112760][T27057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.191566][ T1352] netlink: 7 bytes leftover after parsing attributes in process `syz.6.4491'. [ 412.227909][ T1351] syzkaller0: entered promiscuous mode [ 412.233514][ T1351] syzkaller0: entered allmulticast mode [ 412.247565][ T1351] syzkaller0: create flow: hash 379273313 index 1 [ 412.254857][ T1351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=794 sclass=netlink_route_socket pid=1351 comm=syz.3.4492 [ 412.273728][ T1348] syzkaller0: delete flow: hash 379273313 index 1 [ 412.316958][ T1368] loop6: detected capacity change from 0 to 512 [ 412.345429][ T1376] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=1376 comm=syz.3.4495 [ 412.368360][ T1368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.381492][ T1368] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.425870][T28304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.430338][ T1383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.468194][ T1391] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.481731][ T1391] ext4 filesystem being mounted at /228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 412.589406][T28304] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.660711][T27057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.719274][ T1418] EXT4-fs: Ignoring removed bh option [ 412.732338][ T1418] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 412.763659][ T1418] EXT4-fs (loop3): 1 truncate cleaned up [ 412.773779][ T1418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.847277][T27057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.973158][ T1448] netlink: 'syz.3.4510': attribute type 46 has an invalid length. [ 413.062750][ T1454] EXT4-fs: Ignoring removed nobh option [ 413.076370][ T1431] tipc: Started in network mode [ 413.081405][ T1431] tipc: Node identity , cluster identity 4711 [ 413.087777][ T1431] tipc: Failed to obtain node identity [ 413.093340][ T1431] tipc: Enabling of bearer rejected, failed to enable media [ 413.109311][ T1431] syzkaller0: entered promiscuous mode [ 413.114884][ T1431] syzkaller0: entered allmulticast mode [ 413.136028][ T1454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.149159][ T1454] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.160669][ T1454] EXT4-fs warning (device loop3): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 413.203987][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 413.204007][ T29] audit: type=1326 audit(2000000450.842:9989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1462 comm="syz.9.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a110aeb9 code=0x7ffc0000 [ 413.233849][ T29] audit: type=1326 audit(2000000450.842:9990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1462 comm="syz.9.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a110aeb9 code=0x7ffc0000 [ 413.257377][ T29] audit: type=1326 audit(2000000450.852:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1462 comm="syz.9.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a110aeb9 code=0x7ffc0000 [ 413.266771][ T1464] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 3: comm syz.3.4511: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 413.281530][ T29] audit: type=1326 audit(2000000450.862:9992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1462 comm="syz.9.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57a10cb78e code=0x7ffc0000 [ 413.324349][ T29] audit: type=1326 audit(2000000450.862:9993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1462 comm="syz.9.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a110aeb9 code=0x7ffc0000 [ 413.347904][ T29] audit: type=1326 audit(2000000450.862:9994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1462 comm="syz.9.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a110aeb9 code=0x7ffc0000 [ 413.372118][ T29] audit: type=1326 audit(2000000450.862:9996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1462 comm="syz.9.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a110aeb9 code=0x7ffc0000 [ 413.395808][ T29] audit: type=1326 audit(2000000450.862:9997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1462 comm="syz.9.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a110aeb9 code=0x7ffc0000 [ 413.419367][ T29] audit: type=1326 audit(2000000450.862:9995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1462 comm="syz.9.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a110aeb9 code=0x7ffc0000 [ 413.449112][ T29] audit: type=1326 audit(2000000450.892:9998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1462 comm="syz.9.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f57a110aeb9 code=0x7ffc0000 [ 413.625448][ T1485] tmpfs: Unknown parameter 'mal:' [ 413.668594][T27057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.884865][ T1515] IPVS: set_ctl: invalid protocol: 94 172.20.20.16:20002 [ 413.912459][ T1518] netlink: 'syz.6.4521': attribute type 46 has an invalid length. [ 414.061788][ T1524] netlink: 'syz.6.4524': attribute type 1 has an invalid length. [ 414.069628][ T1524] NCSI netlink: No device for ifindex 0 [ 414.189149][ T1531] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 414.197094][ T1531] FAT-fs (loop6): Filesystem has been set read-only [ 414.203727][ T1531] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 414.211828][ T1531] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 414.220644][ T1531] syz.6.4525: attempt to access beyond end of device [ 414.220644][ T1531] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 414.234854][ T1531] Buffer I/O error on dev loop6, logical block 57847, async page read [ 414.243155][ T1531] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 414.252934][ T1531] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 414.260948][ T1531] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 414.460196][ T1554] tipc: Started in network mode [ 414.465340][ T1554] tipc: Node identity b2f593e00913, cluster identity 4711 [ 414.472648][ T1554] tipc: Enabled bearer , priority 0 [ 414.623545][ T1567] syzkaller0: entered promiscuous mode [ 414.629169][ T1567] syzkaller0: entered allmulticast mode [ 414.643057][ T1577] FAULT_INJECTION: forcing a failure. [ 414.643057][ T1577] name failslab, interval 1, probability 0, space 0, times 0 [ 414.655835][ T1577] CPU: 0 UID: 0 PID: 1577 Comm: syz.9.4535 Not tainted syzkaller #0 PREEMPT(voluntary) [ 414.655865][ T1577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.655946][ T1577] Call Trace: [ 414.655957][ T1577] [ 414.655968][ T1577] __dump_stack+0x1d/0x30 [ 414.656003][ T1577] dump_stack_lvl+0x95/0xd0 [ 414.656046][ T1577] dump_stack+0x15/0x1b [ 414.656082][ T1577] should_fail_ex+0x263/0x280 [ 414.656130][ T1577] should_failslab+0x8c/0xb0 [ 414.656321][ T1577] __kmalloc_noprof+0xb8/0x580 [ 414.656357][ T1577] ? io_cache_alloc_new+0x2a/0xb0 [ 414.656388][ T1577] io_cache_alloc_new+0x2a/0xb0 [ 414.656452][ T1577] __io_prep_rw+0x118/0x710 [ 414.656489][ T1577] ? __rcu_read_unlock+0x4e/0x70 [ 414.656531][ T1577] io_prep_rwv+0x33/0x260 [ 414.656603][ T1577] io_prep_readv+0x1f/0x30 [ 414.656703][ T1577] io_submit_sqes+0x70e/0x11b0 [ 414.656874][ T1577] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 414.656915][ T1577] ? __rcu_read_unlock+0x4e/0x70 [ 414.657009][ T1577] ? get_pid_task+0x96/0xd0 [ 414.657045][ T1577] ? proc_fail_nth_write+0x13b/0x160 [ 414.657087][ T1577] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 414.657127][ T1577] ? vfs_write+0x86e/0x9f0 [ 414.657232][ T1577] ? __rcu_read_unlock+0x4e/0x70 [ 414.657293][ T1577] ? __fget_files+0x184/0x1c0 [ 414.657358][ T1577] ? mutex_lock+0x57/0x90 [ 414.657386][ T1577] ? mutex_unlock+0x4e/0x90 [ 414.657410][ T1577] ? fput+0x8f/0xc0 [ 414.657495][ T1577] __x64_sys_io_uring_enter+0x78/0x90 [ 414.657670][ T1577] x64_sys_call+0x27e4/0x3000 [ 414.657697][ T1577] do_syscall_64+0xc0/0x2a0 [ 414.657735][ T1577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.657776][ T1577] RIP: 0033:0x7f57a110aeb9 [ 414.657834][ T1577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.657853][ T1577] RSP: 002b:00007f579fb67028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 414.657874][ T1577] RAX: ffffffffffffffda RBX: 00007f57a1385fa0 RCX: 00007f57a110aeb9 [ 414.657889][ T1577] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000007 [ 414.657908][ T1577] RBP: 00007f579fb67090 R08: 0000000000000000 R09: 0000000000000000 [ 414.657926][ T1577] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000001 [ 414.658013][ T1577] R13: 00007f57a1386038 R14: 00007f57a1385fa0 R15: 00007ffc752077a8 [ 414.658042][ T1577] [ 414.678586][ T1567] tipc: Resetting bearer [ 414.929062][ T1580] netlink: 'syz.0.4532': attribute type 1 has an invalid length. [ 414.956963][ T1579] netlink: 'syz.0.4532': attribute type 1 has an invalid length. [ 414.969905][ T1594] tmpfs: Unknown parameter 'mal:' [ 414.995444][ T3423] usb 1-1: enqueue for inactive port 0 [ 415.001128][ T3423] usb 1-1: enqueue for inactive port 0 [ 415.022638][ T1539] tipc: Resetting bearer [ 415.056732][ T1539] tipc: Disabling bearer [ 415.086606][ T3423] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 415.117837][ T1611] __nla_validate_parse: 15 callbacks suppressed [ 415.117856][ T1611] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4537'. [ 415.157267][ T1611] team0: Port device team_slave_0 removed [ 415.166804][ T1615] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4538'. [ 415.349629][ T1648] IPVS: set_ctl: invalid protocol: 94 172.20.20.16:20002 [ 415.418229][ T1659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=1659 comm=syz.4.4551 [ 415.505382][ T1662] IPVS: set_ctl: invalid protocol: 94 172.20.20.16:20002 [ 415.568702][ T1667] set_capacity_and_notify: 5 callbacks suppressed [ 415.568726][ T1667] loop4: detected capacity change from 0 to 512 [ 415.613741][ T1670] IPv6: NLM_F_CREATE should be specified when creating new route [ 415.628217][ T1667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.735108][ T1684] FAULT_INJECTION: forcing a failure. [ 415.735108][ T1684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.748403][ T1684] CPU: 0 UID: 0 PID: 1684 Comm: syz.0.4558 Not tainted syzkaller #0 PREEMPT(voluntary) [ 415.748435][ T1684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 415.748449][ T1684] Call Trace: [ 415.748457][ T1684] [ 415.748486][ T1684] __dump_stack+0x1d/0x30 [ 415.748517][ T1684] dump_stack_lvl+0x95/0xd0 [ 415.748594][ T1684] dump_stack+0x15/0x1b [ 415.748622][ T1684] should_fail_ex+0x263/0x280 [ 415.748656][ T1684] should_fail+0xb/0x20 [ 415.748693][ T1684] should_fail_usercopy+0x1a/0x20 [ 415.748814][ T1684] _copy_from_user+0x1c/0xb0 [ 415.748863][ T1684] sctp_getsockopt_pr_supported+0x71/0x350 [ 415.748905][ T1684] sctp_getsockopt+0x980/0xaa0 [ 415.748932][ T1684] sock_common_getsockopt+0x60/0x70 [ 415.748989][ T1684] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 415.749016][ T1684] do_sock_getsockopt+0x1c4/0x210 [ 415.749057][ T1684] __x64_sys_getsockopt+0x11d/0x1a0 [ 415.749212][ T1684] ? arch_exit_work+0x20/0x40 [ 415.749301][ T1684] ? arch_exit_work+0x20/0x40 [ 415.749340][ T1684] x64_sys_call+0x2dc7/0x3000 [ 415.749374][ T1684] do_syscall_64+0xc0/0x2a0 [ 415.749480][ T1684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.749508][ T1684] RIP: 0033:0x7fd9810eaeb9 [ 415.749526][ T1684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.749560][ T1684] RSP: 002b:00007fd97fb47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 415.749587][ T1684] RAX: ffffffffffffffda RBX: 00007fd981365fa0 RCX: 00007fd9810eaeb9 [ 415.749607][ T1684] RDX: 0000000000000071 RSI: 0000000000000084 RDI: 0000000000000003 [ 415.749624][ T1684] RBP: 00007fd97fb47090 R08: 0000200000000100 R09: 0000000000000000 [ 415.749653][ T1684] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 415.749698][ T1684] R13: 00007fd981366038 R14: 00007fd981365fa0 R15: 00007ffdb511da58 [ 415.749726][ T1684] [ 415.976223][ T1689] tmpfs: Unknown parameter 'mal:' [ 416.034358][ T1693] IPVS: set_ctl: invalid protocol: 94 172.20.20.16:20002 [ 416.064323][ T1667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4554'. [ 416.069220][ T1689] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4560'. [ 416.250579][T30660] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.259974][ T1713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=1713 comm=syz.9.4566 [ 416.312652][ T1715] SELinux: Context Ü is not valid (left unmapped). [ 416.358869][ T1724] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4571'. [ 416.552322][ T1755] tmpfs: Unknown parameter 'mal:' [ 416.639127][ T1755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4576'. [ 416.719852][ T1769] loop4: detected capacity change from 0 to 512 [ 416.752494][ T1769] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.782002][ T1769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4579'. [ 416.868229][ T1786] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4583'. [ 416.881437][ T1788] netlink: 'syz.9.4584': attribute type 46 has an invalid length. [ 417.157723][ T1804] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4590'. [ 417.322859][ T1813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.342546][ T1815] sctp: [Deprecated]: syz.0.4595 (pid 1815) Use of int in max_burst socket option deprecated. [ 417.342546][ T1815] Use struct sctp_assoc_value instead [ 417.370766][ T1817] netlink: 'syz.9.4596': attribute type 46 has an invalid length. [ 417.505140][ T1831] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4597'. [ 417.649155][ T1839] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 417.655745][ T1839] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 417.663508][ T1839] vhci_hcd vhci_hcd.0: Device attached [ 417.669600][ T1840] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 417.677010][ T12] vhci_hcd vhci_hcd.3: stop threads [ 417.682401][ T12] vhci_hcd vhci_hcd.3: release socket [ 417.687891][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 418.039478][ T1872] loop4: detected capacity change from 0 to 128 [ 418.051379][ T1872] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 418.103248][ T1883] tmpfs: Unknown parameter 'mal:' [ 418.214218][ T1888] loop3: detected capacity change from 0 to 512 [ 418.222682][ T1888] EXT4-fs: Ignoring removed bh option [ 418.241784][ T1888] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 418.262023][ T1888] EXT4-fs (loop3): 1 truncate cleaned up [ 418.340214][ T1910] loop3: detected capacity change from 0 to 2048 [ 418.387665][ T1910] loop3: p1 < > p4 < > [ 418.465923][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 418.465943][ T29] audit: type=1326 audit(2000000456.112:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 418.551240][ T29] audit: type=1326 audit(2000000456.142:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 418.574992][ T29] audit: type=1326 audit(2000000456.142:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 418.586906][ T1931] IPVS: set_ctl: invalid protocol: 94 172.20.20.16:20002 [ 418.598863][ T29] audit: type=1326 audit(2000000456.142:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 418.598907][ T29] audit: type=1326 audit(2000000456.142:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 418.598960][ T29] audit: type=1326 audit(2000000456.142:10094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 418.599013][ T29] audit: type=1326 audit(2000000456.142:10095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 418.599157][ T29] audit: type=1326 audit(2000000456.142:10096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 418.599254][ T29] audit: type=1326 audit(2000000456.142:10097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 418.599316][ T29] audit: type=1326 audit(2000000456.142:10098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.0.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 418.841001][ T1936] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 418.934950][ T1940] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 418.945700][ T1975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=1975 comm=syz.9.4627 [ 419.112211][ T1986] loop6: detected capacity change from 0 to 512 [ 419.135009][ T1986] EXT4-fs: Ignoring removed bh option [ 419.159378][ T1986] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 419.192600][ T1986] EXT4-fs (loop6): 1 truncate cleaned up [ 419.348785][ T2008] loop6: detected capacity change from 0 to 512 [ 419.487443][ T2008] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.789609][ T2034] netlink: 'syz.6.4641': attribute type 10 has an invalid length. [ 419.799227][ T2029] IPVS: set_ctl: invalid protocol: 94 172.20.20.16:20002 [ 419.998839][ T2052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.096568][ T2052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.190955][ T2052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.261817][ T2067] syz_tun: entered allmulticast mode [ 420.315432][ T2052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.349219][ T2067] dvmrp8: entered allmulticast mode [ 420.359501][ T2066] syz_tun: left allmulticast mode [ 421.247037][ T2101] loop0: detected capacity change from 0 to 1024 [ 421.256377][ T2101] ext4: Unknown parameter 'nouser_xattr' [ 422.250243][ T2147] lo speed is unknown, defaulting to 1000 [ 422.256198][ T2147] lo speed is unknown, defaulting to 1000 [ 422.262432][ T2147] lo speed is unknown, defaulting to 1000 [ 422.269516][ T2147] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 422.306511][ T2147] lo speed is unknown, defaulting to 1000 [ 422.312967][ T2147] lo speed is unknown, defaulting to 1000 [ 422.319308][ T2147] lo speed is unknown, defaulting to 1000 [ 422.325874][ T2147] lo speed is unknown, defaulting to 1000 [ 422.332170][ T2147] lo speed is unknown, defaulting to 1000 [ 422.338913][ T2147] lo speed is unknown, defaulting to 1000 [ 422.345656][ T2147] lo speed is unknown, defaulting to 1000 [ 422.948405][ T2179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.969365][ T2179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.145704][ T2190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.157327][ T2188] lo speed is unknown, defaulting to 1000 [ 423.183126][ T2190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.758245][ T2230] loop4: detected capacity change from 0 to 1024 [ 423.766270][ T2230] EXT4-fs: Ignoring removed orlov option [ 423.772172][ T2230] EXT4-fs: Ignoring removed bh option [ 424.042306][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 424.042325][ T29] audit: type=1400 audit(2000000461.682:10113): avc: denied { shutdown } for pid=2232 comm="syz.0.4688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 424.525315][ T29] audit: type=1400 audit(2000000461.992:10114): avc: denied { setopt } for pid=2229 comm="syz.4.4687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 424.725076][ T2253] loop0: detected capacity change from 0 to 256 [ 424.762055][T30660] EXT4-fs unmount: 11 callbacks suppressed [ 424.762078][T30660] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.776252][ T2253] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 424.862183][ T29] audit: type=1400 audit(2000000462.502:10115): avc: denied { getopt } for pid=2263 comm="syz.4.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 424.937156][ T2267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.965482][ T2267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.842585][ T2307] xt_hashlimit: size too large, truncated to 1048576 [ 426.183580][ T2318] No such timeout policy "syz1" [ 426.684219][ T2329] loop3: detected capacity change from 0 to 512 [ 426.796518][ T2329] EXT4-fs (loop3): blocks per group (34) and clusters per group (32768) inconsistent [ 427.025664][ T2352] loop3: detected capacity change from 0 to 512 [ 427.040221][ T2352] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 427.068549][ T2352] EXT4-fs (loop3): 1 truncate cleaned up [ 427.074589][ T2352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.248464][ T29] audit: type=1400 audit(2000000464.892:10116): avc: denied { lock } for pid=2361 comm="syz.6.4717" path="socket:[64949]" dev="sockfs" ino=64949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 427.282973][ T2372] sg_write: data in/out 327680/120 bytes for SCSI command 0x0-- guessing data in; [ 427.282973][ T2372] program syz.0.4719 not setting count and/or reply_len properly [ 427.347494][T27057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.957899][ T2388] loop3: detected capacity change from 0 to 128 [ 427.964914][ T29] audit: type=1400 audit(2000000465.602:10117): avc: denied { write } for pid=2361 comm="syz.6.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 428.118604][ T2388] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 428.169001][ T2394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.186188][ T2388] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 428.214877][ T2394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.339865][T27057] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 428.601583][ T2411] loop0: detected capacity change from 0 to 512 [ 429.339040][ T2430] __nla_validate_parse: 14 callbacks suppressed [ 429.339060][ T2430] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4729'. [ 429.612135][ T2411] EXT4-fs (loop0): blocks per group (34) and clusters per group (32768) inconsistent [ 430.637547][ T2463] loop3: detected capacity change from 0 to 512 [ 430.797963][ T2478] syzkaller1: entered promiscuous mode [ 430.803564][ T2478] syzkaller1: entered allmulticast mode [ 430.811204][ T2478] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 431.235949][ T2498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.283300][ T2498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.037408][ T29] audit: type=1400 audit(2000000469.682:10118): avc: denied { read } for pid=2522 comm="syz.6.4753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 432.613429][ T2545] xt_nat: multiple ranges no longer supported [ 432.774669][ T29] audit: type=1400 audit(2000000470.412:10119): avc: denied { execute_no_trans } for pid=2549 comm="syz.0.4760" path="/302/file1" dev="tmpfs" ino=1617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 433.114850][ T2561] loop6: detected capacity change from 0 to 4096 [ 433.141205][ T2561] EXT4-fs: test_dummy_encryption option not supported [ 433.186796][ T29] audit: type=1400 audit(2000000470.822:10120): avc: denied { write } for pid=2576 comm="syz.3.4768" lport=41013 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 433.362760][ T2593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4766'. [ 433.372214][ T2593] netlink: 'syz.0.4766': attribute type 1 has an invalid length. [ 433.380054][ T2593] netlink: 'syz.0.4766': attribute type 2 has an invalid length. [ 433.404264][ T29] audit: type=1326 audit(2000000471.002:10121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2569 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 433.427843][ T29] audit: type=1326 audit(2000000471.002:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2569 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 433.451571][ T29] audit: type=1326 audit(2000000471.002:10123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2569 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 433.475235][ T29] audit: type=1326 audit(2000000471.002:10124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2569 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 433.498811][ T29] audit: type=1326 audit(2000000471.002:10125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2569 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 433.522462][ T29] audit: type=1326 audit(2000000471.002:10126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2569 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 433.545976][ T29] audit: type=1326 audit(2000000471.002:10127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2569 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9810eaeb9 code=0x7ffc0000 [ 433.909058][ T2602] loop4: detected capacity change from 0 to 1024 [ 433.994016][ T2603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4763'. [ 434.019505][ T2602] EXT4-fs: Ignoring removed oldalloc option [ 434.025663][ T2602] EXT4-fs: Ignoring removed bh option [ 434.053490][ T2606] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4763'. [ 434.194027][ T2602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.499190][ T2602] ================================================================== [ 434.507358][ T2602] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 434.515315][ T2602] [ 434.517665][ T2602] write to 0xffff88811a182e9c of 4 bytes by task 2615 on cpu 0: [ 434.525326][ T2602] xas_set_mark+0x12b/0x140 [ 434.530129][ T2602] __folio_start_writeback+0x17b/0x370 [ 434.535621][ T2602] ext4_bio_write_folio+0x5ad/0x9f0 [ 434.540857][ T2602] mpage_process_page_bufs+0x4a1/0x620 [ 434.546437][ T2602] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 434.552300][ T2602] ext4_do_writepages+0x9f6/0x2800 [ 434.557547][ T2602] ext4_writepages+0x18f/0x320 [ 434.562348][ T2602] do_writepages+0x1c6/0x310 [ 434.566984][ T2602] file_write_and_wait_range+0x178/0x2f0 [ 434.572653][ T2602] generic_buffers_fsync_noflush+0x45/0x130 [ 434.578609][ T2602] ext4_sync_file+0x1aa/0x680 [ 434.583304][ T2602] vfs_fsync_range+0x10d/0x130 [ 434.588090][ T2602] ext4_buffered_write_iter+0x34f/0x3c0 [ 434.593730][ T2602] ext4_file_write_iter+0x380/0xf70 [ 434.598955][ T2602] iter_file_splice_write+0x6bc/0xa80 [ 434.604351][ T2602] direct_splice_actor+0x156/0x2a0 [ 434.609488][ T2602] splice_direct_to_actor+0x311/0x670 [ 434.614896][ T2602] do_splice_direct+0x119/0x1a0 [ 434.619771][ T2602] do_sendfile+0x382/0x650 [ 434.624306][ T2602] __x64_sys_sendfile64+0x105/0x150 [ 434.629797][ T2602] x64_sys_call+0x2db1/0x3000 [ 434.634518][ T2602] do_syscall_64+0xc0/0x2a0 [ 434.639053][ T2602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.644977][ T2602] [ 434.647311][ T2602] read to 0xffff88811a182e9c of 4 bytes by task 2602 on cpu 1: [ 434.654872][ T2602] __writeback_single_inode+0x201/0x7b0 [ 434.660445][ T2602] writeback_single_inode+0x16d/0x3f0 [ 434.665858][ T2602] sync_inode_metadata+0x6e/0xa0 [ 434.670833][ T2602] generic_buffers_fsync_noflush+0xee/0x130 [ 434.676791][ T2602] ext4_sync_file+0x1aa/0x680 [ 434.681500][ T2602] vfs_fsync_range+0x10d/0x130 [ 434.686303][ T2602] ext4_buffered_write_iter+0x34f/0x3c0 [ 434.691894][ T2602] ext4_file_write_iter+0x380/0xf70 [ 434.697140][ T2602] iter_file_splice_write+0x6bc/0xa80 [ 434.702541][ T2602] direct_splice_actor+0x156/0x2a0 [ 434.707663][ T2602] splice_direct_to_actor+0x311/0x670 [ 434.713061][ T2602] do_splice_direct+0x119/0x1a0 [ 434.717920][ T2602] do_sendfile+0x382/0x650 [ 434.722371][ T2602] __x64_sys_sendfile64+0x105/0x150 [ 434.727606][ T2602] x64_sys_call+0x2db1/0x3000 [ 434.732321][ T2602] do_syscall_64+0xc0/0x2a0 [ 434.736864][ T2602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.742783][ T2602] [ 434.745113][ T2602] value changed: 0x0a000021 -> 0x04000021 [ 434.750893][ T2602] [ 434.753243][ T2602] Reported by Kernel Concurrency Sanitizer on: [ 434.759408][ T2602] CPU: 1 UID: 0 PID: 2602 Comm: syz.4.4772 Not tainted syzkaller #0 PREEMPT(voluntary) [ 434.769166][ T2602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.779352][ T2602] ================================================================== [ 435.077792][T30660] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.