last executing test programs: 3m55.527771513s ago: executing program 32 (id=379): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001", @ANYRESOCT=r0], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000080)=0x8400, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) r4 = perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, r4, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000000c0)=0x6a, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c9702", 0x5e, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r5, 0x5) 3m28.942554819s ago: executing program 33 (id=782): unshare(0x26020480) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000200)={[{@nombcache}, {@init_itable}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x4c07e, 0x0) io_setup(0x7d, &(0x7f0000000600)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000700), 0x1, 0x5ae, &(0x7f0000000e80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x80007}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000000)='2', 0x1, 0xffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) close(r6) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x9004, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x10efe}, 0x14) splice(r4, 0x0, r7, 0x0, 0x5947, 0xc) 3m27.03145728s ago: executing program 34 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 3m13.299822549s ago: executing program 35 (id=945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3m2.986737468s ago: executing program 6 (id=1081): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 3m2.968181249s ago: executing program 6 (id=1082): msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000002840)={0x2}, 0x8, 0x800) msgsnd(0x0, &(0x7f00000001c0)={0x3}, 0x8, 0x800) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/76}, 0x54, 0x0, 0x3800) (fail_nth: 1) 3m2.717803914s ago: executing program 6 (id=1084): msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000002840)={0x2}, 0x8, 0x800) msgsnd(0x0, &(0x7f00000001c0)={0x3}, 0x8, 0x800) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/76}, 0x54, 0x0, 0x3800) 3m2.695738035s ago: executing program 6 (id=1086): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x7f, &(0x7f0000001040)=0x0) eventfd(0x40) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r5, 0x0, 0x0, 0x800, 0x0) io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x3, 0x3, r3, &(0x7f00000010c0), 0x0, 0x8, 0x0, 0x1, r5}]) close(r2) socket(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 3m2.480427888s ago: executing program 6 (id=1091): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000180)=@access={'system_u:object_r:var_log_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x100000000}, 0x62) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'wrr\x00', 0x19}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 3m2.212878294s ago: executing program 6 (id=1099): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = syz_pidfd_open(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800014000100017050002000000000008000340000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3000000, 0x810, r1, 0xda0ae000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000140)}, {&(0x7f0000000480)=""/79, 0x4f}], 0x6, 0x1, 0x9, 0xa) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x8020, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$802154_dgram(r3, 0x0, 0x0) 3m2.174466416s ago: executing program 36 (id=1099): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = syz_pidfd_open(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800014000100017050002000000000008000340000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3000000, 0x810, r1, 0xda0ae000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000140)}, {&(0x7f0000000480)=""/79, 0x4f}], 0x6, 0x1, 0x9, 0xa) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x8020, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$802154_dgram(r3, 0x0, 0x0) 3m0.03054069s ago: executing program 4 (id=1123): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m59.872930699s ago: executing program 4 (id=1125): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="43b1849c32a1", @remote, @local, @empty}}}}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newrule={0x64, 0x20, 0x1, 0x70bd26, 0x25dfdbff, {0xa, 0x80, 0x10, 0x7, 0x5, 0x0, 0x0, 0x0, 0x1001a}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e23}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff7}]}, 0x64}, 0x1, 0x0, 0x0, 0xc001}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x4000, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="6efb", 0x2, 0x20000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) 2m59.838393282s ago: executing program 4 (id=1126): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x83, 0x4) (async) sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000340)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, 0x0}}], 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000003c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc800}, 0x80) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) 2m59.764423586s ago: executing program 4 (id=1127): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f00000004c0)={[{@inode_readahead_blks}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@data_ordered}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0xfb100000, 0x0, 0x0) 2m59.665813742s ago: executing program 4 (id=1128): getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) chown(&(0x7f0000000200)='./file0\x00', r3, r4) r5 = getegid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x4}, [{0x2, 0x2, r0}], {0x4, 0x2}, [{0x8, 0x0, r2}, {0x8, 0x0, 0xee00}, {0x8, 0x4, r4}, {0x8, 0x4, r5}, {0x8, 0x0, r6}], {0x10, 0x6}, {0x20, 0x1}}, 0x54, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m59.040971558s ago: executing program 4 (id=1135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x30, 0x10, 0x801, 0x0, 0x1002, {0x0, 0x0, 0x0, 0x0, 0xb069, 0xc}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc800}, 0x40040) 2m58.990429021s ago: executing program 37 (id=1135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x30, 0x10, 0x801, 0x0, 0x1002, {0x0, 0x0, 0x0, 0x0, 0xb069, 0xc}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc800}, 0x40040) 2m40.471986237s ago: executing program 3 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x148}}, 0x0) 2m40.25854466s ago: executing program 3 (id=1386): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000000c0)={@private=0xa010100, @remote, @multicast2}, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x8}, &(0x7f00000001c0)=0x8) 2m40.245872371s ago: executing program 3 (id=1389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680), 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ppoll(&(0x7f0000000d40), 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x40801, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x66) 2m39.782874498s ago: executing program 3 (id=1395): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2000844, &(0x7f0000002640)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c6e6f646f74732c6e6f636173652c616c6c6f775f7574696d653d30303030303030303030303030303030303037373737372c6e6f646f74732c646f74732c756d61736b3d30303030303030303030303030303030303030303030342c757365667265652c646f74732c747a3d5554432c666d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303061382c7379735f696d6d757461626c652c6e66732c636865636b3d7374726963742c0093f99a253a1dda0931df14d4fb1913ff12b260194d14e78b2c3c93733da16f0f419b36cd358c427b1916c1ea6f7d238b5906033155b2869e22beb55ef22d0a7e71cfb24a91fd48493dfe81bb7b397bcc98e9bde274a41feba7fd5abb032f2c1341a483821adc011d6ecfdd762da5c0cd185f9afceb8f65e39ee1f914d1fa"], 0x1, 0x23d, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xe0b2, 0x66798cf9) r1 = getpgrp(0x0) capset(&(0x7f0000000380)={0x19980336, r1}, &(0x7f0000000040)={0x200000, 0x40202003, 0x0, 0x7db, 0x5, 0x443c}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x11, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x8, &(0x7f0000000140)={0x1d, 0x5, 0xfefffff9}) ioprio_set$pid(0x1, r2, 0x4004) 2m39.611533067s ago: executing program 3 (id=1397): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xfc}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709000000000000000001000000050007000200000008000a0000000000060002000100000008001700", @ANYRES32=r3, @ANYBLOB='\b\x00\t'], 0x3c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000d00)='./file2\x00', 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESHEX=r0], 0x0, 0x318, &(0x7f0000000780)="$eJzs3c9rE1sUwPEzaX62ry9dPB6Px3twqSCKdGgC7lxYpAUxoLSNYAVhaqcaMk1KJhQiYrMQ3Lp20YVLEURw50bEbTf+Bf7addOdBYsjM5NM02RM02rtD7+fRXM6c87MnbkzzfSW3qyde7hQnLf1L05UPDERcXzL/hKpy+k3K+//n3r9h/+9UhNj05msUhERuX736fCr6sDVF3++TMjq0I219eyn1f+mRb5O35aIKtiq5G5LzZbLVc0tnivYRV2pK5Zp2KYqlGyzUlWGt96YtUw1b5UXF2vKKM0N9i9WTNtWRqmmimZNVcuqWqkp45ZRKCld19Vgv0BEhoIo0rFO61aYf7LhOLLudlCi7nZ7SHa9GcQar4kfaywOk7b+75rbcXH07WfL8CtsONGg/+M79D+OH//+//Col/sfx8/UtZlLY7nc+KRSSZGFB0v5pbz/6q9/NyAFscSUlckzM5vBo6F7qWju14mLufFR5RmSkwvLjfrlpbz/5jA236jPSNp9Tmmpl2Z9xq9X2+tj0t9an5W0/BVen1XiPZWKRFrq43LqREu9Lml5e1PKWl3mvEfcrfp7GaUuXM617T/l5bXjLQ8AAAAAAAAAcBToKrA1fq8Ff+pN6XrCG1sP1qfcxW6enxCMr49KWjbDx+dHQ8f3o/Jv9AAPHAAAAACA34hdu1M0LMus7D6QHnL6Hqe67CImIm4gcn/YbUzXDf7daHHbKncbIVVxEencTl8vbW4EqbP+/p5NNhomez1R+xhERKR1if/PGu7BW8+bOamw82NHdnUBjMRDzrxlJX/OUUjbUXwnaM0Rx3FCkyW5tws70XmAPQbaZnPJP6E5jtalXIv6OYYV85c0b8yd9n4+/HboMXB73wuS7Sdq5KO/XavLD43PwRAfAAAAgCOk5RcnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwQHqYM6xzbrbmvP3bk6XxEfGdU7K1f2gu8/4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOIS+BQAA//+8NrDx") 2m39.438274688s ago: executing program 3 (id=1401): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3, 0x3032, 0xffffffffffffffff, 0x350b) 2m39.39607066s ago: executing program 38 (id=1401): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3, 0x3032, 0xffffffffffffffff, 0x350b) 2m20.253379583s ago: executing program 7 (id=1691): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xf0, 0x28, 0x200, 0x70bd26, 0x25dfdbff, {0x18}, [@typed={0x8, 0xb6, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="e3fa360ccac33fc03745615ebf16aaa8c5c08ed6cf5054acb615dfa575e1bbe57b0a1e83c83cfda1ccd87562cfbd12bbf06f4ce26e9158a8e91a36a92bae24985c425cc24f0fb2d3dd863ec26d8a26a2f2043c8d552e5a7e957e46e08a44e71dcc6a2f7a88f6ee6d72323e10ef1b5c76b813957efca7ab0a0a7a2554e20d434eda8402a42d8dad39e6d11b1d8befbe1769554cb0d118b59d962aaf7679e5ee99db1697ea701dccaaee19d3a8caaed710773d83282525edb30838f5ef84bba1e8af36e07bbe577545af09f31b10f53c7fc1fa"]}, 0xf0}, 0x1, 0x0, 0x0, 0x41}, 0x8000) wait4(0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffeb4, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 2m20.182212737s ago: executing program 7 (id=1693): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000300"], 0x60}}, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x4200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x200, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000e40)="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", 0x481}], 0x1) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x140, 0x278, 0x140, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @private1, [0xff000000, 0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xff], 'nr0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x29, 0x38, 0x0, 0x6afc0ffaa5ed9690}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x185}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "42a179464b7407ccd70a3e9d9822452c68013ec5d96b5573aa8d060bf55d"}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x28}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0x749422dc7bc550a2, 0xff, 0x0, 0xff000000], 'gre0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x33, 0xb, 0x0, 0xd}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffff00, 0xffffff00, 0xff, 0xff], 0x4e21, 0x4e21, 0x4e22, 0x4e24, 0x7, 0x200, 0x100, 0x1, 0x661}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m19.594314352s ago: executing program 7 (id=1703): link(&(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00') mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001) 2m19.45032094s ago: executing program 7 (id=1706): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x30}}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r3, 0x107, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000180)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nobarrier}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x52}}, {@norecovery}]}, 0x3, 0x576, &(0x7f0000000400)="$eJzs3U9rHOUfAPDvbJL+//2aQinqQQI9WKndNIl/KgitR9FiQS+e6pJMQ8mmW7Kb0sRC24O9eJEiiFgQX4B3j8U34KsoaKFICXrwEpnNbLtNsvm7dbfO5wPTPs/MbJ55Zub77Hd2ZtkACmsk+6cU8XJEfJ1EHG5bNhj5wpGV9ZYe35jMpiSWlz/5I4kkn9daP8n/P5hXXoqIX76MOFla2259YXGmUq2mc3l9tDF7dbS+sHjq8mxlOp1Or4xPTJx5a2L83Xfe7lpfX7/w13cf3//gzFfHl7796eGRu0mci0P5svZ+7MKt9spIjOT7ZCjOrVpxrAuN9ZOk1xvAjgzkcT4U2RhwOAbyqAf++25GxDJQUIn4h4Jq5QGta/suXQe/MB69v3IBtLb/gyufjcS+5rXRgaXkmSuj7Hp3uAvtZ238/Pu9u9kUm3wOcbML7QG03LodEacHB9eOf0k+/u3c6eaHxxtb3UbR3n+gl+5n+c8b6+U/pSf5T6yT/xxcJ3Z3YvP4Lz3sQjMdZfnfe+vmv0+GruGBvPa/Zs43lFy6XE1PR8T/I+JEDO3N6hvdzzmz9GC507L2/C+bsvZbuWC+HQ8H9z77mqlKo7KbPrd7dDvilaf5bxJrxv99zVx39fHP9seFLbZxLL33aqdlm/e/Xfcz4OUfI15b9/g/vaOVbHx/crR5Poy2zoq1/rxz7Nf2evu9wO31v/uy439g4/4PJ+33a+vbb+OHfX+nnZbt9Pzfk3zaLO/J512vNBpzYxF7ko/Wzh9/+tpWvbV+1v8Txzce/9Y7//dHxOdb7P+do3c6rtoPx39qW8d/+4UHH37xfaf2t3b832yWTuRztjL+bXUDd7PvAAAAAAAAoN+UIuJQJKXyk3KpVC6vPN9xNA6UqrV64+Sl2vyVqWh+V3Y4hkqtO92H256HGMufh23Vx1fVJyLiSER8M7C/WS9P1qpTve48AAAAAAAAAAAAAAAAAAAA9ImDHb7/n/ltoNdbBzx3fvIbimvT+O/GLz0Bfcn7PxSX+IfiEv9QXOIfikv8Q3GJfygu8Q/FJf4BAAAAAAAAAAAAAAAAAAAAAAAAAACgqy6cP59Ny0uPb0xm9alrC/MztWunptL6THl2frI8WZu7Wp6u1aaraXmyNrvZ36vWalfHxmP++mgjrTdG6wuLF2dr81caFy/PVqbTi+nQv9IrAAAAAAAAAAAAAAAAAAAAeLHUFxZnKtVqOtfjwmeV/tqe9sLZ6IvN2HEh2Wyvns1Phh01Mdj7Dio8h0IvRyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeNY/AQAA//8JCTFT") sync() socket(0x2c, 0x6, 0x11b2) sync() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@empty, @in=@empty}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r4, 0x3, 0x1) getdents64(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0xe22, 0x0, @empty, 0x1}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x8, @local, 0xb}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000340)={0x73, 0x9, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x0, 0x5, [0x100000001, 0xffffffffffffffff, 0x7fffffffffffffff, 0x81, 0xd, 0xe8, 0xf, 0x8001]}}]}, 0x58) syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000f4c2d9500000000000000000d000000000000"], 0x0, 0x26, 0x0, 0xa}, 0x28) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0}, 0x0) r6 = syz_io_uring_complete(0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r6, &(0x7f0000000080)="b80a716ee097b90a1e24fb"}, 0x20) 2m18.217039071s ago: executing program 7 (id=1723): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 2m17.808424625s ago: executing program 7 (id=1729): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) fcntl$setstatus(r0, 0x4, 0x40000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103b7e, 0x2, @perf_bp={0x0, 0x4}, 0x204, 0x0, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000ad12a128fb6e305e2e001ee8fffb71ed7c00"], &(0x7f0000000280)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r5 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="137c0300231a05002c0012800e000100697036677265746170000000180002801400070000000000000000000000000002"], 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x20040840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x16, &(0x7f0000000300)=@ringbuf={{}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @tail_call]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000380)={'erspan0\x00', r4, 0x20, 0x8, 0x4, 0x3, {{0x25, 0x4, 0x0, 0x39, 0x94, 0x66, 0x0, 0x41, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x1, 0x6, "51b2b830"}, {0x1, 0x2}, {0x7, 0x6, "413dfac4"}, {0x1, 0x5, "949ab5"}, {0x0, 0x11, "15e53d1135a3ecbcd08c688ea7fc1a"}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x166}, {@multicast2, 0xffffffff}]}, @end, @cipso={0x86, 0x18, 0xfffffffffffffffc, [{0x5, 0x2}, {0x1, 0x7, "01417db4f5"}, {0x2, 0x9, "ae4d6a87119e3c"}]}, @rr={0x7, 0x7, 0x7b, [@empty]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x28, 0x0, 0x7, [0x52a818d6, 0x8000]}]}}}}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 2m17.743766789s ago: executing program 39 (id=1729): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) fcntl$setstatus(r0, 0x4, 0x40000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103b7e, 0x2, @perf_bp={0x0, 0x4}, 0x204, 0x0, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000ad12a128fb6e305e2e001ee8fffb71ed7c00"], &(0x7f0000000280)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r5 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="137c0300231a05002c0012800e000100697036677265746170000000180002801400070000000000000000000000000002"], 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x20040840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x16, &(0x7f0000000300)=@ringbuf={{}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @tail_call]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000380)={'erspan0\x00', r4, 0x20, 0x8, 0x4, 0x3, {{0x25, 0x4, 0x0, 0x39, 0x94, 0x66, 0x0, 0x41, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x1, 0x6, "51b2b830"}, {0x1, 0x2}, {0x7, 0x6, "413dfac4"}, {0x1, 0x5, "949ab5"}, {0x0, 0x11, "15e53d1135a3ecbcd08c688ea7fc1a"}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x166}, {@multicast2, 0xffffffff}]}, @end, @cipso={0x86, 0x18, 0xfffffffffffffffc, [{0x5, 0x2}, {0x1, 0x7, "01417db4f5"}, {0x2, 0x9, "ae4d6a87119e3c"}]}, @rr={0x7, 0x7, 0x7b, [@empty]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x28, 0x0, 0x7, [0x52a818d6, 0x8000]}]}}}}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1m42.62597622s ago: executing program 9 (id=2244): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(0x0, 0x0) syz_emit_ethernet(0xca, &(0x7f00000004c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@rr={0x7, 0x3, 0x3c}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x9) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) inotify_add_watch(r4, &(0x7f00000002c0)='./file0\x00', 0x80) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x9, 0x0, 0x2, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bc76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x61}, 0x94) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="750114349cdc58"], 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x44, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x10}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x742b576e1ff83934) r8 = io_uring_setup(0x63d3, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) 1m41.701836094s ago: executing program 9 (id=2268): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv2(r0, &(0x7f0000002580)=[{0x0}], 0x1, 0x7, 0x7, 0x0) 1m41.642655218s ago: executing program 9 (id=2270): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000000c0)={{0x0, 0x1}, 0x0, 0x4, 0x2, {0x4, 0x1}, 0x3, 0x801}) 1m41.642222718s ago: executing program 9 (id=2272): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f00000004c0)={[{@inode_readahead_blks}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@data_ordered}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0xfbffffff, 0x0, 0x0) 1m41.441616189s ago: executing program 9 (id=2280): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x1662, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0xf1ffffff, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) 1m41.210500763s ago: executing program 9 (id=2287): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f00000000c0)=""/35, 0x23) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000001"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b0620af0200b60ea400000000000000bc00000000800000080000001519f557ca1ddfc6cab23aeee62858e36f2ae054634678", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) r6 = syz_io_uring_setup(0xda, &(0x7f0000000480)={0x0, 0x183, 0x8, 0x1, 0x15}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r6, 0x22d2, 0x20, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000008740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/23, 0x17}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10022, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x1fc}}, 0x0) readahead(r0, 0xfff, 0xffffffffffffffe0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), 0x4) 1m41.207699513s ago: executing program 40 (id=2287): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f00000000c0)=""/35, 0x23) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000001"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b0620af0200b60ea400000000000000bc00000000800000080000001519f557ca1ddfc6cab23aeee62858e36f2ae054634678", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) r6 = syz_io_uring_setup(0xda, &(0x7f0000000480)={0x0, 0x183, 0x8, 0x1, 0x15}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r6, 0x22d2, 0x20, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000008740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/23, 0x17}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10022, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x1fc}}, 0x0) readahead(r0, 0xfff, 0xffffffffffffffe0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), 0x4) 3.078028501s ago: executing program 5 (id=4097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 2.962446158s ago: executing program 5 (id=4100): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x2c020400) unshare(0x2c020400) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200008a0000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701000004ffffffb702000008000000b70300000002000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000520e0000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000009dc9000000", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000080)={0xc}, 0x4) 2.859285594s ago: executing program 5 (id=4101): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r2, 0xffffffffffffffff, 0x7a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x9414, 0x2021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR={0xa}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000001f4c180a566769ffeaffffbf0700"], 0x48) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5421}, 0x1c) 2.823868396s ago: executing program 5 (id=4104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) timer_create(0x5, &(0x7f0000000140)={0x0, 0x80, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000240)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) getsockopt$inet_int(r2, 0x0, 0x18, 0x0, &(0x7f0000000040)=0xfffffffffffffff0) setsockopt$inet_int(r2, 0x0, 0x22, &(0x7f0000000100)=0x364, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$inet6(0xa, 0x1, 0x100) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000280)={0x0, 0x6f, 0x1, 0x80, 0x8}) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 2.734331691s ago: executing program 5 (id=4105): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x9a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14d, 0x14d, 0xc, [@enum64={0x7, 0x2, 0x0, 0x13, 0x0, 0xb, [{0x10, 0x2, 0xe1}, {0x2, 0x4, 0x5}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x4, 0x2}, {0x0, 0x2}, {0xc}, {0x2, 0x1}]}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x101, [{0x4, 0x4, 0x8}, {0xf, 0x0, 0x4}]}, @struct={0x8, 0x8, 0x0, 0x4, 0x1, 0x8, [{0x2, 0x0, 0x3}, {0x9, 0x5, 0x3}, {0x9, 0x1, 0x2}, {0xa, 0x3, 0x2}, {0x8, 0x0, 0x2588}, {0x5, 0x5, 0x5}, {0x8, 0x2, 0x400}, {0x9, 0x0, 0xff}]}, @func={0x5, 0x0, 0x0, 0xc, 0x3}, @struct={0xa, 0x4, 0x0, 0x4, 0x1, 0xffff, [{0x2, 0x2, 0x8}, {0xd, 0x1, 0x15668a64}, {0x3, 0x4, 0x2}, {0x9, 0x3, 0x2}]}, @datasec={0xb, 0x2, 0x0, 0xf, 0x1, [{0x4, 0x70000000, 0x8001}, {0x5, 0x0, 0x8}], "18"}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x5f, 0x30, 0x0, 0x20, 0x61, 0x0]}}, &(0x7f0000000100)=""/62, 0x174, 0x3e, 0x0, 0x5}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x6, 0x8, 0x40260, r0, 0xa61, '\x00', r2, r3, 0x2, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r4, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 2.521674483s ago: executing program 5 (id=4108): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000280)={[{@acl}, {@nobh}, {@barrier}, {@noquota}, {}]}, 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") socket(0x28, 0x5, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x28, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.520843883s ago: executing program 1 (id=4109): socketpair$unix(0x1, 0x1, 0x0, 0x0) msgrcv(0x0, 0x0, 0x1b, 0x1, 0x6c0c8c5a9a789dad) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0x2, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000001000)={0xb, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff620af0fff8ffffff79a4f0ff000000002d040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5040000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d300000080e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/82}, 0x5a, 0x0, 0x2000) 2.109228138s ago: executing program 0 (id=4120): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 1.622691486s ago: executing program 1 (id=4126): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat(0xffffffffffffff9c, 0x0, 0xc2042, 0x0) fallocate(r1, 0x40, 0x4, 0x80000000) ioctl$BLKRRPART(r1, 0x125f, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0x925]}, 0x8) read(r3, 0x0, 0x0) flistxattr(r2, &(0x7f0000000280)=""/183, 0xb7) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002400128009000100626f6e6400000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket(0x1, 0x803, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x3a, 0x0, &(0x7f0000001c40)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x48800}, 0x4) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) socket$netlink(0x10, 0x3, 0x0) 1.597776437s ago: executing program 1 (id=4127): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 1.268441366s ago: executing program 0 (id=4129): nanosleep(&(0x7f0000000000), &(0x7f0000000040)) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@private1, 0x0}, &(0x7f0000000100)=0x14) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711246000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', r1, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.249357187s ago: executing program 0 (id=4130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000e4ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000800000a6020000f8ffffffb703000008000000b704000002000000850000003300000095000000bdea0b0c"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) close(r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 1.229657839s ago: executing program 0 (id=4131): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x400) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x1, 0x2, 0x8, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x1f, 0x3, 0x10, 0x4, 0x0, 0x1000000000000, 0x3000000, 0x1}, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 743.468247ms ago: executing program 1 (id=4143): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @local, @local, @multicast2}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10010}, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r5, @ANYBLOB="f77024d0ef5b68b78d56e64cf686248341c7a53131b02d2dfd51371e206be3f0cc71445f30bc86c2bcdbcaf5dedc709f9b804a7143e1c5e7267a31e558d4d99ddd81701f1f4cee71e87c8e82a7d4c8b9b1668bc55fe2521b98caa625472ced7e42897a4d3c96872181937ebc420a48224f39650a2bc35b585657ee03845f092d55147642e4a63f6e56b93d"], 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x4000000) openat2(r2, &(0x7f0000000040)='./cgroup/file0\x00', &(0x7f0000000000)={0x4400, 0x0, 0x13}, 0x18) 694.37988ms ago: executing program 1 (id=4145): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route(r0, 0x0, 0x20000000) 684.38896ms ago: executing program 8 (id=4146): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(0x0, 0x268) ioctl$PPPIOCSMRU1(r1, 0x40047452, 0x0) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r3, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000140)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x810) 599.930306ms ago: executing program 1 (id=4147): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x11}, 0x104000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="63ecedda41c3903803ed69d8d41f", 0x0, 0x1000000, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 599.373656ms ago: executing program 8 (id=4148): socketpair$unix(0x1, 0x1, 0x0, 0x0) msgrcv(0x0, 0x0, 0x1b, 0x1, 0x6c0c8c5a9a789dad) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0x2, 0x0, 0x0) msgsnd(0x0, &(0x7f0000002840)={0x2}, 0x8, 0x800) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/82}, 0x5a, 0x0, 0x2000) 374.883558ms ago: executing program 0 (id=4150): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) 326.896381ms ago: executing program 2 (id=4151): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x9, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041", 0x5}], 0x1}, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0xffffffff, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 326.296451ms ago: executing program 8 (id=4152): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB='%\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0xa4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) r3 = socket(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000180), 0x64, 0x526, &(0x7f0000000200)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r5 = io_uring_setup(0x1dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x120}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000000280)={0xffffffff, 0x0, &(0x7f0000000040)=[{0x0}], 0x0, 0x1}, 0x20) close_range(r3, r4, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c0c4}, 0x4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 309.030092ms ago: executing program 0 (id=4153): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) splice(r1, 0x0, r2, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 271.977684ms ago: executing program 8 (id=4154): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x702, 0xcc0, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) connect$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x231d, &(0x7f00000004c0)={0x0, 0xd73a, 0x4000, 0x3, 0xa}, &(0x7f0000000540)=0x0, &(0x7f0000000740)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x110, &(0x7f0000000780)=0xc, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=r1, @ANYBLOB="000000000000000008001b000000000024001a8020000a80140007"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 269.555294ms ago: executing program 2 (id=4155): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x4, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x46, 0x0, 0xa}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x46, 0x0, 0xa}, 0x28) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000000)) getsockopt$inet_udp_int(r1, 0x11, 0x67, 0x0, &(0x7f0000000040)) (async) getsockopt$inet_udp_int(r1, 0x11, 0x67, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0xd3, &(0x7f0000000100)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x9d, 0x3a, 0x0, @mcast2, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e0c687edbae5d41da989490fb05d572c02eacf800000000d578bbf939de4011ef152a854245088ed563b0a99efb59c502bcb4e8b8b71d9b5222cd17e6c5c9c25bf9338ed9ee97ab7ade2c2e5cc55bb18fbc6827e6055f0516bf1f5348e28b82043a82690f03"}}}}}}}, 0x0) (async) syz_emit_ethernet(0xd3, &(0x7f0000000100)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x9d, 0x3a, 0x0, @mcast2, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e0c687edbae5d41da989490fb05d572c02eacf800000000d578bbf939de4011ef152a854245088ed563b0a99efb59c502bcb4e8b8b71d9b5222cd17e6c5c9c25bf9338ed9ee97ab7ade2c2e5cc55bb18fbc6827e6055f0516bf1f5348e28b82043a82690f03"}}}}}}}, 0x0) 162.239541ms ago: executing program 2 (id=4156): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @local, @local, @multicast2}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10010}, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r5, @ANYBLOB="f77024d0ef5b68b78d56e64cf686248341c7a53131b02d2dfd51371e206be3f0cc71445f30bc86c2bcdbcaf5dedc709f9b804a7143e1c5e7267a31e558d4d99ddd81701f1f4cee71e87c8e82a7d4c8b9b1668bc55fe2521b98caa625472ced7e42897a4d3c96872181937ebc420a48224f39650a2bc35b585657ee03845f092d55147642e4a63f6e56b93d"], 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x4000000) openat2(r2, &(0x7f0000000040)='./cgroup/file0\x00', &(0x7f0000000000)={0x4400, 0x0, 0x13}, 0x18) 139.147272ms ago: executing program 2 (id=4157): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x169a82, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) sendfile(r1, r1, 0x0, 0x7) 89.437755ms ago: executing program 2 (id=4158): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x20000000) 6.13715ms ago: executing program 2 (id=4159): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x39000, 0x0) r8 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) splice(r6, 0x0, r8, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) sendmsg$nl_generic(r1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 5.81238ms ago: executing program 8 (id=4160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000020000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) 0s ago: executing program 8 (id=4161): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) io_setup(0x8f0, &(0x7f0000002400)) kernel console output (not intermixed with test programs): has an invalid length. [ 241.354104][ T7093] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.373581][T18427] loop2: detected capacity change from 0 to 512 [ 241.395099][T18427] EXT4-fs: Ignoring removed nobh option [ 241.419391][T18427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.438118][T18427] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.479933][T10805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.502153][T18456] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.514905][T18456] bond6: option ad_select: unable to set because the bond device is up [ 241.579251][T18495] SELinux: failed to load policy [ 241.704598][T18512] SELinux: failed to load policy [ 241.764308][T18519] FAULT_INJECTION: forcing a failure. [ 241.764308][T18519] name failslab, interval 1, probability 0, space 0, times 0 [ 241.777081][T18519] CPU: 0 UID: 0 PID: 18519 Comm: syz.2.3106 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 241.777119][T18519] Tainted: [W]=WARN [ 241.777128][T18519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.777169][T18519] Call Trace: [ 241.777177][T18519] [ 241.777187][T18519] __dump_stack+0x1d/0x30 [ 241.777237][T18519] dump_stack_lvl+0x95/0xd0 [ 241.777316][T18519] dump_stack+0x15/0x1b [ 241.777337][T18519] should_fail_ex+0x263/0x280 [ 241.777367][T18519] should_failslab+0x8c/0xb0 [ 241.777467][T18519] kmem_cache_alloc_noprof+0x68/0x490 [ 241.777499][T18519] ? skb_clone+0x151/0x1f0 [ 241.777524][T18519] skb_clone+0x151/0x1f0 [ 241.777553][T18519] __netlink_deliver_tap+0x2c9/0x500 [ 241.777659][T18519] netlink_unicast+0x66b/0x690 [ 241.777744][T18519] netlink_sendmsg+0x5c8/0x6f0 [ 241.777766][T18519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.777790][T18519] ____sys_sendmsg+0x5af/0x600 [ 241.777908][T18519] ___sys_sendmsg+0x195/0x1e0 [ 241.778002][T18519] __x64_sys_sendmsg+0xd4/0x160 [ 241.778026][T18519] x64_sys_call+0x17ba/0x3000 [ 241.778115][T18519] do_syscall_64+0xc0/0x2a0 [ 241.778186][T18519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.778234][T18519] RIP: 0033:0x7ff5ce52aeb9 [ 241.778249][T18519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.778398][T18519] RSP: 002b:00007ff5ccf87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.778423][T18519] RAX: ffffffffffffffda RBX: 00007ff5ce7a5fa0 RCX: 00007ff5ce52aeb9 [ 241.778439][T18519] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 241.778455][T18519] RBP: 00007ff5ccf87090 R08: 0000000000000000 R09: 0000000000000000 [ 241.778467][T18519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.778488][T18519] R13: 00007ff5ce7a6038 R14: 00007ff5ce7a5fa0 R15: 00007ffe0987c528 [ 241.778509][T18519] [ 242.145034][ C0] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 242.186955][T18552] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 242.973656][T18594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.182353][T18612] SELinux: failed to load policy [ 243.214105][T18626] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=18626 comm=syz.0.3133 [ 243.270943][T18645] __nla_validate_parse: 8 callbacks suppressed [ 243.270958][T18645] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3137'. [ 243.287361][T18628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.298443][T18641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3136'. [ 243.333699][T18654] netlink: 'syz.1.3139': attribute type 1 has an invalid length. [ 243.411141][T18668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18668 comm=syz.5.3137 [ 243.434758][T18670] loop0: detected capacity change from 0 to 1024 [ 243.441939][T18670] EXT4-fs: Ignoring removed nobh option [ 243.562771][T18695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3143'. [ 243.577401][T18695] vlan2: entered promiscuous mode [ 243.594989][T18685] netlink: 'syz.8.3146': attribute type 16 has an invalid length. [ 243.602877][T18685] netlink: 'syz.8.3146': attribute type 17 has an invalid length. [ 243.634102][T18685] bridge0: port 3(dummy0) entered blocking state [ 243.640530][T18685] bridge0: port 3(dummy0) entered forwarding state [ 243.648545][T18685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.713015][T18745] loop8: detected capacity change from 0 to 512 [ 243.729401][T18745] ext4 filesystem being mounted at /396/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.743880][T18745] EXT4-fs (loop8): shut down requested (1) [ 243.794037][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'. [ 243.806027][T18758] netlink: 'syz.2.3151': attribute type 10 has an invalid length. [ 243.830515][T18761] netlink: 188 bytes leftover after parsing attributes in process `syz.8.3150'. [ 243.834340][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3152'. [ 243.851468][T18761] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3150'. [ 243.868957][T18763] bond2: option lacp_active: invalid value (5) [ 243.876795][T18763] bond2 (unregistering): Released all slaves [ 244.072363][T18836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=68 sclass=netlink_route_socket pid=18836 comm=syz.2.3153 [ 244.113406][T18668] Process accounting resumed [ 244.149821][T18844] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 244.160051][T18844] SELinux: failed to load policy [ 244.167580][T18843] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 244.177692][T18843] SELinux: failed to load policy [ 244.201744][T18847] FAULT_INJECTION: forcing a failure. [ 244.201744][T18847] name failslab, interval 1, probability 0, space 0, times 0 [ 244.214458][T18847] CPU: 1 UID: 0 PID: 18847 Comm: syz.2.3156 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 244.214494][T18847] Tainted: [W]=WARN [ 244.214502][T18847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.214518][T18847] Call Trace: [ 244.214593][T18847] [ 244.214599][T18847] __dump_stack+0x1d/0x30 [ 244.214630][T18847] dump_stack_lvl+0x95/0xd0 [ 244.214647][T18847] dump_stack+0x15/0x1b [ 244.214662][T18847] should_fail_ex+0x263/0x280 [ 244.214689][T18847] should_failslab+0x8c/0xb0 [ 244.214707][T18847] kmem_cache_alloc_noprof+0x68/0x490 [ 244.214831][T18847] ? skb_clone+0x151/0x1f0 [ 244.214847][T18847] skb_clone+0x151/0x1f0 [ 244.214939][T18847] dev_queue_xmit_nit+0x13e/0x510 [ 244.214961][T18847] ? validate_xmit_xfrm+0x43/0x7a0 [ 244.214990][T18847] dev_hard_start_xmit+0xd3/0x3e0 [ 244.215042][T18847] __dev_queue_xmit+0xdb1/0x1f20 [ 244.215152][T18847] ? __dev_queue_xmit+0x148/0x1f20 [ 244.215186][T18847] ip_finish_output2+0x77f/0x8b0 [ 244.215205][T18847] ? __rcu_read_unlock+0x33/0x70 [ 244.215309][T18847] ip_finish_output+0x114/0x2a0 [ 244.215396][T18847] ip_output+0xbd/0x1c0 [ 244.215411][T18847] ? __pfx_ip_finish_output+0x10/0x10 [ 244.215429][T18847] __ip_queue_xmit+0xbb0/0xbf0 [ 244.215445][T18847] ? __copy_skb_header+0x22f/0x2b0 [ 244.215518][T18847] ? tcp_options_write+0x4af/0x950 [ 244.215534][T18847] ip_queue_xmit+0x39/0x50 [ 244.215550][T18847] ? __pfx_ip_queue_xmit+0x10/0x10 [ 244.215566][T18847] __tcp_transmit_skb+0x17fd/0x1c10 [ 244.215640][T18847] tcp_write_xmit+0x1597/0x3640 [ 244.215664][T18847] ? _parse_integer_limit+0x170/0x190 [ 244.215748][T18847] ? tcp_established_options+0x2cc/0x4f0 [ 244.215793][T18847] __tcp_push_pending_frames+0x6d/0x1b0 [ 244.215819][T18847] tcp_send_fin+0x672/0x800 [ 244.215880][T18847] tcp_shutdown+0xbe/0xd0 [ 244.215900][T18847] ? __pfx_tcp_shutdown+0x10/0x10 [ 244.215920][T18847] inet_shutdown+0x1c2/0x210 [ 244.216077][T18847] __x64_sys_shutdown+0xd6/0x130 [ 244.216131][T18847] x64_sys_call+0xd2f/0x3000 [ 244.216151][T18847] do_syscall_64+0xc0/0x2a0 [ 244.216251][T18847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.216268][T18847] RIP: 0033:0x7ff5ce52aeb9 [ 244.216280][T18847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.216294][T18847] RSP: 002b:00007ff5ccf87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 244.216380][T18847] RAX: ffffffffffffffda RBX: 00007ff5ce7a5fa0 RCX: 00007ff5ce52aeb9 [ 244.216391][T18847] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 244.216401][T18847] RBP: 00007ff5ccf87090 R08: 0000000000000000 R09: 0000000000000000 [ 244.216472][T18847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.216481][T18847] R13: 00007ff5ce7a6038 R14: 00007ff5ce7a5fa0 R15: 00007ffe0987c528 [ 244.216498][T18847] [ 244.564365][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3159'. [ 244.760509][T18889] loop8: detected capacity change from 0 to 128 [ 244.770392][T18889] syz.8.3168: attempt to access beyond end of device [ 244.770392][T18889] loop8: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 244.785175][T18889] syz.8.3168: attempt to access beyond end of device [ 244.785175][T18889] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 244.788896][T18891] loop5: detected capacity change from 0 to 128 [ 244.800223][T18889] syz.8.3168: attempt to access beyond end of device [ 244.800223][T18889] loop8: rw=2049, sector=146, nr_sectors = 2 limit=128 [ 244.820070][T18889] syz.8.3168: attempt to access beyond end of device [ 244.820070][T18889] loop8: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 244.840488][T18889] syz.8.3168: attempt to access beyond end of device [ 244.840488][T18889] loop8: rw=2049, sector=170, nr_sectors = 2 limit=128 [ 244.854909][T18889] syz.8.3168: attempt to access beyond end of device [ 244.854909][T18889] loop8: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 244.869372][T18889] syz.8.3168: attempt to access beyond end of device [ 244.869372][T18889] loop8: rw=2049, sector=178, nr_sectors = 2 limit=128 [ 244.886180][T18889] syz.8.3168: attempt to access beyond end of device [ 244.886180][T18889] loop8: rw=2049, sector=178, nr_sectors = 16 limit=128 [ 244.906607][T18889] syz.8.3168: attempt to access beyond end of device [ 244.906607][T18889] loop8: rw=2049, sector=194, nr_sectors = 2 limit=128 [ 244.921629][T18889] syz.8.3168: attempt to access beyond end of device [ 244.921629][T18889] loop8: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 244.965175][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3171'. [ 245.041508][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3173'. [ 245.091779][T18928] FAULT_INJECTION: forcing a failure. [ 245.091779][T18928] name failslab, interval 1, probability 0, space 0, times 0 [ 245.104630][T18928] CPU: 0 UID: 0 PID: 18928 Comm: syz.5.3175 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 245.104728][T18928] Tainted: [W]=WARN [ 245.104782][T18928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.104806][T18928] Call Trace: [ 245.104816][T18928] [ 245.104824][T18928] __dump_stack+0x1d/0x30 [ 245.104867][T18928] dump_stack_lvl+0x95/0xd0 [ 245.104918][T18928] dump_stack+0x15/0x1b [ 245.104967][T18928] should_fail_ex+0x263/0x280 [ 245.105083][T18928] should_failslab+0x8c/0xb0 [ 245.105110][T18928] __kmalloc_cache_noprof+0x64/0x4a0 [ 245.105192][T18928] ? genl_start+0x117/0x390 [ 245.105232][T18928] genl_start+0x117/0x390 [ 245.105260][T18928] __netlink_dump_start+0x334/0x520 [ 245.105325][T18928] genl_family_rcv_msg_dumpit+0x1a5/0x210 [ 245.105356][T18928] ? __pfx_genl_start+0x10/0x10 [ 245.105420][T18928] ? __pfx_genl_dumpit+0x10/0x10 [ 245.105488][T18928] ? __pfx_genl_done+0x10/0x10 [ 245.105519][T18928] genl_rcv_msg+0x400/0x470 [ 245.105545][T18928] ? __pfx_batadv_mcast_flags_dump+0x10/0x10 [ 245.105615][T18928] netlink_rcv_skb+0x123/0x220 [ 245.105650][T18928] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.105683][T18928] genl_rcv+0x28/0x40 [ 245.105707][T18928] netlink_unicast+0x5c0/0x690 [ 245.105752][T18928] netlink_sendmsg+0x5c8/0x6f0 [ 245.105855][T18928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.105878][T18928] ____sys_sendmsg+0x5af/0x600 [ 245.105909][T18928] ___sys_sendmsg+0x195/0x1e0 [ 245.105947][T18928] __x64_sys_sendmsg+0xd4/0x160 [ 245.105976][T18928] x64_sys_call+0x17ba/0x3000 [ 245.106005][T18928] do_syscall_64+0xc0/0x2a0 [ 245.106099][T18928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.106189][T18928] RIP: 0033:0x7fadb8a4aeb9 [ 245.106207][T18928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.106235][T18928] RSP: 002b:00007fadb74a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.106258][T18928] RAX: ffffffffffffffda RBX: 00007fadb8cc5fa0 RCX: 00007fadb8a4aeb9 [ 245.106275][T18928] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 245.106366][T18928] RBP: 00007fadb74a7090 R08: 0000000000000000 R09: 0000000000000000 [ 245.106382][T18928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.106396][T18928] R13: 00007fadb8cc6038 R14: 00007fadb8cc5fa0 R15: 00007ffdc213b028 [ 245.106420][T18928] [ 245.146982][T18902] hub 6-0:1.0: USB hub found [ 245.376673][T18902] hub 6-0:1.0: 8 ports detected [ 245.432142][T18941] loop8: detected capacity change from 0 to 1024 [ 245.439963][T18941] EXT4-fs: Ignoring removed orlov option [ 245.592003][T18972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.924913][T19018] SELinux: failed to load policy [ 246.038118][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 246.038135][ T29] audit: type=1400 audit(1769878550.799:5991): avc: denied { read open } for pid=19029 comm="syz.8.3196" path="/" dev="configfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.084625][ T29] audit: type=1400 audit(1769878550.829:5992): avc: denied { add_name } for pid=19029 comm="syz.8.3196" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.086910][T19036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.105501][ T29] audit: type=1400 audit(1769878550.829:5993): avc: denied { create } for pid=19029 comm="syz.8.3196" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 246.140758][T19038] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 246.151310][T19038] SELinux: failed to load policy [ 246.283176][T19059] netlink: 'syz.8.3203': attribute type 10 has an invalid length. [ 246.291202][T19059] bridge0: port 3(dummy0) entered disabled state [ 246.369042][T19074] netlink: 'syz.8.3207': attribute type 27 has an invalid length. [ 246.427892][T19074] bond3: left promiscuous mode [ 246.432803][T19074] bond3: left allmulticast mode [ 246.437919][T19074] geneve2: left promiscuous mode [ 246.443042][T19074] geneve2: left allmulticast mode [ 246.490868][T19087] netlink: 'syz.0.3208': attribute type 27 has an invalid length. [ 246.550273][ T29] audit: type=1400 audit(1769878551.313:5994): avc: denied { shutdown } for pid=19073 comm="syz.8.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 246.597513][T19097] FAULT_INJECTION: forcing a failure. [ 246.597513][T19097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.610776][T19097] CPU: 1 UID: 0 PID: 19097 Comm: syz.0.3208 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.610844][T19097] Tainted: [W]=WARN [ 246.610853][T19097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.610872][T19097] Call Trace: [ 246.610880][T19097] [ 246.610930][T19097] __dump_stack+0x1d/0x30 [ 246.610960][T19097] dump_stack_lvl+0x95/0xd0 [ 246.611026][T19097] dump_stack+0x15/0x1b [ 246.611052][T19097] should_fail_ex+0x263/0x280 [ 246.611090][T19097] should_fail+0xb/0x20 [ 246.611191][T19097] should_fail_usercopy+0x1a/0x20 [ 246.611230][T19097] _copy_from_iter+0xcf/0xea0 [ 246.611320][T19097] ? __alloc_skb+0x397/0x4b0 [ 246.611355][T19097] ? __alloc_skb+0x219/0x4b0 [ 246.611392][T19097] netlink_sendmsg+0x4ae/0x6f0 [ 246.611419][T19097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.611442][T19097] ____sys_sendmsg+0x5af/0x600 [ 246.611565][T19097] ___sys_sendmsg+0x195/0x1e0 [ 246.611607][T19097] __x64_sys_sendmsg+0xd4/0x160 [ 246.611636][T19097] x64_sys_call+0x17ba/0x3000 [ 246.611665][T19097] do_syscall_64+0xc0/0x2a0 [ 246.611719][T19097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.611745][T19097] RIP: 0033:0x7f1bdd3daeb9 [ 246.611763][T19097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.611829][T19097] RSP: 002b:00007f1bdbdf5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.611853][T19097] RAX: ffffffffffffffda RBX: 00007f1bdd656180 RCX: 00007f1bdd3daeb9 [ 246.611911][T19097] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a [ 246.611935][T19097] RBP: 00007f1bdbdf5090 R08: 0000000000000000 R09: 0000000000000000 [ 246.611952][T19097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.611968][T19097] R13: 00007f1bdd656218 R14: 00007f1bdd656180 R15: 00007ffdcfc9e868 [ 246.612004][T19097] [ 246.823897][T19087] hsr1: left promiscuous mode [ 246.852874][T19074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.861534][T19074] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.881002][T19074] bridge0: port 3(dummy0) entered blocking state [ 246.887427][T19074] bridge0: port 3(dummy0) entered forwarding state [ 246.917674][T19074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.933540][T19090] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 246.963341][T19079] bond0: (slave bridge0): Releasing backup interface [ 246.970660][T19079] bridge0: left promiscuous mode [ 246.976099][T19079] bridge0: port 3(dummy0) entered disabled state [ 247.022853][T19079] dummy0: left allmulticast mode [ 247.039312][T19079] dummy0: left promiscuous mode [ 247.044431][T19079] bridge0: port 3(dummy0) entered disabled state [ 247.065635][T19079] bridge_slave_0: left allmulticast mode [ 247.071499][T19079] bridge_slave_0: left promiscuous mode [ 247.077267][T19079] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.107179][T19079] bridge_slave_1: left allmulticast mode [ 247.113013][T19079] bridge_slave_1: left promiscuous mode [ 247.118814][T19079] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.155634][ T29] audit: type=1326 audit(1769878551.918:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.0.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 247.179180][ T29] audit: type=1326 audit(1769878551.918:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.0.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 247.202812][ T29] audit: type=1326 audit(1769878551.918:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.0.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 247.226599][ T29] audit: type=1326 audit(1769878551.918:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.0.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 247.253064][T19079] bond0: (slave bond_slave_0): Releasing backup interface [ 247.260796][ T29] audit: type=1326 audit(1769878552.039:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.0.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 247.285660][ T29] audit: type=1326 audit(1769878552.039:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.0.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1bdd3dac22 code=0x7ffc0000 [ 247.296894][T19079] bond_slave_0: left promiscuous mode [ 247.329925][T19079] bond0: (slave bond_slave_1): Releasing backup interface [ 247.346823][T19079] bond_slave_1: left promiscuous mode [ 247.354660][T19079] team0: Port device team_slave_0 removed [ 247.361936][T19079] team0: Port device team_slave_1 removed [ 247.368210][T19079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.384046][T19079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 247.391101][T19106] IPVS: set_ctl: invalid protocol: 3 4.0.0.0:0 [ 247.407637][T19112] netlink: 'syz.1.3214': attribute type 16 has an invalid length. [ 247.415530][T19112] netlink: 'syz.1.3214': attribute type 17 has an invalid length. [ 247.460870][T19098] syzkaller0: entered promiscuous mode [ 247.466568][T19098] syzkaller0: entered allmulticast mode [ 247.508884][T19116] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 247.517646][T19116] SELinux: failed to load policy [ 247.544055][T19112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.555431][T19112] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.565216][T19124] netlink: 'syz.0.3216': attribute type 10 has an invalid length. [ 247.574367][T19112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.650874][T19154] loop0: detected capacity change from 0 to 1024 [ 247.664145][T19154] EXT4-fs: inline encryption not supported [ 247.674463][T19154] ext4: Bad value for 'barrier' [ 247.714094][T19179] netlink: 'syz.8.3221': attribute type 27 has an invalid length. [ 247.895673][T19187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.904004][T19187] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.913761][T19187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.983647][T19179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.258610][T19228] __nla_validate_parse: 7 callbacks suppressed [ 248.258623][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3226'. [ 248.310490][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3229'. [ 248.320154][T19235] netlink: 'syz.1.3229': attribute type 10 has an invalid length. [ 248.328274][T19236] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 248.339044][T19236] SELinux: failed to load policy [ 248.388191][T19244] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3232'. [ 248.404970][T19244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3232'. [ 248.471951][T19258] loop0: detected capacity change from 0 to 256 [ 248.601036][T19278] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 248.622101][T19278] SELinux: failed to load policy [ 248.696275][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3243'. [ 248.717647][T19289] netlink: 'syz.1.3243': attribute type 10 has an invalid length. [ 248.781121][T19293] netlink: 'syz.8.3244': attribute type 16 has an invalid length. [ 248.801247][T19295] xt_bpf: check failed: parse error [ 248.834083][T19293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.857657][T19280] hub 6-0:1.0: USB hub found [ 248.871148][T19280] hub 6-0:1.0: 8 ports detected [ 248.947860][T19322] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3248'. [ 249.093441][T19336] SELinux: failed to load policy [ 249.105446][T19346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3255'. [ 249.299648][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3257'. [ 249.308666][T19361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3257'. [ 249.335153][T19365] loop5: detected capacity change from 0 to 1024 [ 249.342174][T19365] EXT4-fs: Ignoring removed nobh option [ 249.356236][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3257'. [ 249.362185][ T1720] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.412891][T19366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.440400][ T1720] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.497730][T19380] vlan2: entered promiscuous mode [ 249.502869][T19380] žÿ: entered promiscuous mode [ 249.507901][T19380] bond_slave_0: entered promiscuous mode [ 249.513983][T19380] bond_slave_1: entered promiscuous mode [ 249.520192][T19380] bridge0: entered promiscuous mode [ 249.553263][ T1720] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.583248][ T1720] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.726316][T19419] bridge0: entered promiscuous mode [ 249.755933][T19419] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 249.779439][T19460] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 249.810118][T19460] SELinux: failed to load policy [ 250.004258][T19475] loop0: detected capacity change from 0 to 512 [ 250.013305][T19475] msdos: Unknown parameter '' [ 250.366684][T19488] hub 6-0:1.0: USB hub found [ 250.372054][T19488] hub 6-0:1.0: 8 ports detected [ 250.457169][T19496] loop0: detected capacity change from 0 to 512 [ 250.464443][T19496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 250.483656][T19496] ext4 filesystem being mounted at /389/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.661871][T19532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.671793][T19532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.897983][T19560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=19560 comm=syz.0.3286 [ 251.057475][T19570] loop0: detected capacity change from 0 to 164 [ 251.090774][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 251.090787][ T29] audit: type=1326 audit(1769878555.888:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19584 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 251.121197][ T29] audit: type=1326 audit(1769878555.888:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19584 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 251.144852][ T29] audit: type=1326 audit(1769878555.888:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19584 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 251.168378][ T29] audit: type=1326 audit(1769878555.918:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19584 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 251.192005][ T29] audit: type=1326 audit(1769878555.918:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19584 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 251.215774][ T29] audit: type=1326 audit(1769878555.928:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19584 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 251.239355][ T29] audit: type=1326 audit(1769878555.928:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19584 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 251.263018][ T29] audit: type=1326 audit(1769878555.928:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19584 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 251.286505][ T29] audit: type=1326 audit(1769878555.928:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19584 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 251.287917][T19570] hub 6-0:1.0: USB hub found [ 251.310112][ T29] audit: type=1326 audit(1769878555.928:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19584 comm="syz.1.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 251.341506][T19570] hub 6-0:1.0: 8 ports detected [ 251.441955][T19595] validate_nla: 9 callbacks suppressed [ 251.441977][T19595] netlink: 'syz.1.3297': attribute type 1 has an invalid length. [ 252.234674][T19618] netlink: 'syz.1.3303': attribute type 2 has an invalid length. [ 252.323966][T19615] hub 6-0:1.0: USB hub found [ 252.329109][T19615] hub 6-0:1.0: 8 ports detected [ 252.421391][T19640] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 252.473347][T19648] loop5: detected capacity change from 0 to 164 [ 252.652464][T19648] hub 6-0:1.0: USB hub found [ 252.657634][T19648] hub 6-0:1.0: 8 ports detected [ 252.849822][T19666] loop2: detected capacity change from 0 to 1024 [ 252.868603][T19666] EXT4-fs mount: 10 callbacks suppressed [ 252.868615][T19666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.894576][T19666] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 252.910220][T19666] EXT4-fs (loop2): Remounting filesystem read-only [ 252.920765][T19666] batadv0: entered promiscuous mode [ 252.926066][T19666] macvtap1: entered promiscuous mode [ 252.932094][T19666] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 252.943926][T19666] batadv0: left promiscuous mode [ 253.160624][T19689] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19689 comm=syz.1.3319 [ 253.175154][T19689] SELinux: failed to load policy [ 253.201498][T10805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.214595][T19691] netlink: 'syz.1.3320': attribute type 2 has an invalid length. [ 253.404121][T19718] __nla_validate_parse: 16 callbacks suppressed [ 253.404204][T19718] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3327'. [ 253.465332][T19703] hub 6-0:1.0: USB hub found [ 253.471930][T19703] hub 6-0:1.0: 8 ports detected [ 254.197111][T19730] hub 6-0:1.0: USB hub found [ 254.202007][T19730] hub 6-0:1.0: 8 ports detected [ 254.307621][T19738] hub 6-0:1.0: USB hub found [ 254.312836][T19738] hub 6-0:1.0: 8 ports detected [ 254.442112][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3338'. [ 254.554902][T19767] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3339'. [ 254.564859][T19767] netlink: 'syz.5.3339': attribute type 16 has an invalid length. [ 254.572779][T19767] netlink: 'syz.5.3339': attribute type 17 has an invalid length. [ 254.583826][T19767] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 254.925866][T19814] netlink: 'syz.8.3341': attribute type 16 has an invalid length. [ 254.933775][T19814] netlink: 'syz.8.3341': attribute type 17 has an invalid length. [ 254.950109][T19816] loop2: detected capacity change from 0 to 1024 [ 254.975066][T19814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.001915][T19816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.045296][T19832] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3344'. [ 255.074639][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3345'. [ 255.084499][T19835] netlink: 'syz.1.3345': attribute type 10 has an invalid length. [ 255.096379][T19816] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 255.161265][T10805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.221725][T19853] netlink: 'syz.2.3351': attribute type 1 has an invalid length. [ 255.252185][T19853] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 255.263363][T19853] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 255.289113][T19904] loop8: detected capacity change from 0 to 1024 [ 255.308724][T19906] bond2: (slave gretap0): making interface the new active one [ 255.308655][T19904] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.328932][T19906] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 255.351146][T19853] macvlan2: entered promiscuous mode [ 255.356552][T19853] macvlan2: entered allmulticast mode [ 255.362330][T19853] bond2: entered promiscuous mode [ 255.367523][T19853] gretap0: entered promiscuous mode [ 255.373198][T19853] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 255.373641][T19918] netlink: 'syz.1.3355': attribute type 16 has an invalid length. [ 255.388990][T19853] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap0 [ 255.401356][T19853] bond2: left promiscuous mode [ 255.406179][T19853] gretap0: left promiscuous mode [ 255.423538][T19918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.528705][T19945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'. [ 255.602037][T19954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3361'. [ 256.059672][ T7093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.259448][T20012] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 256.263154][T20017] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 256.274092][T20013] SELinux: failed to load policy [ 256.281550][T20017] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 256.288844][T20053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3370'. [ 256.317508][T20062] bond2: (slave gretap1): making interface the new active one [ 256.325963][T20062] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 256.352532][T20062] macvlan2: entered promiscuous mode [ 256.357864][T20062] macvlan2: entered allmulticast mode [ 256.374163][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 256.374179][ T29] audit: type=1326 audit(1769878561.216:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.2.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 256.403798][ T29] audit: type=1326 audit(1769878561.216:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.2.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 256.435943][T20062] bond2: entered promiscuous mode [ 256.441032][T20062] gretap1: entered promiscuous mode [ 256.446581][T20062] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 256.457788][T20062] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 256.466534][ T29] audit: type=1326 audit(1769878561.266:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.2.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 256.492760][ T29] audit: type=1326 audit(1769878561.266:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.2.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 256.516251][ T29] audit: type=1326 audit(1769878561.266:6229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.2.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 256.539892][ T29] audit: type=1326 audit(1769878561.266:6230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.2.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 256.563395][ T29] audit: type=1326 audit(1769878561.276:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.2.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 256.586897][ T29] audit: type=1326 audit(1769878561.276:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.2.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 256.610371][ T29] audit: type=1326 audit(1769878561.276:6233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.2.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 256.633959][ T29] audit: type=1326 audit(1769878561.276:6234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.2.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 256.657819][T20062] bond2: left promiscuous mode [ 256.662660][T20062] gretap1: left promiscuous mode [ 256.750956][T20097] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 256.761398][T20097] SELinux: failed to load policy [ 256.851868][T20121] validate_nla: 4 callbacks suppressed [ 256.851885][T20121] netlink: 'syz.2.3383': attribute type 16 has an invalid length. [ 256.865321][T20121] netlink: 'syz.2.3383': attribute type 17 has an invalid length. [ 256.877580][T20125] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 256.888284][T20125] SELinux: failed to load policy [ 256.902147][T20121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.943271][T20098] hub 6-0:1.0: USB hub found [ 256.948659][T20098] hub 6-0:1.0: 8 ports detected [ 257.006764][T20134] SELinux: failed to load policy [ 257.144901][T20162] netlink: 'syz.2.3394': attribute type 1 has an invalid length. [ 257.160576][T20191] netlink: 188 bytes leftover after parsing attributes in process `syz.8.3392'. [ 257.177887][T20162] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 257.189074][T20162] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 257.225233][T20145] hub 6-0:1.0: USB hub found [ 257.230917][T20145] hub 6-0:1.0: 8 ports detected [ 257.256918][T20211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3395'. [ 257.286691][T20214] netlink: 'syz.2.3396': attribute type 10 has an invalid length. [ 257.312985][T20217] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 257.323457][T20217] SELinux: failed to load policy [ 257.395543][T20240] netlink: 'syz.2.3398': attribute type 16 has an invalid length. [ 257.403642][T20240] netlink: 'syz.2.3398': attribute type 17 has an invalid length. [ 257.420762][T20240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.664250][T20262] SELinux: failed to load policy [ 257.705597][T20272] loop5: detected capacity change from 0 to 1024 [ 257.712587][T20272] EXT4-fs: Ignoring removed nobh option [ 257.733694][T20272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.071528][T20296] loop8: detected capacity change from 0 to 1024 [ 258.093910][T20289] hub 6-0:1.0: USB hub found [ 258.101661][T20289] hub 6-0:1.0: 8 ports detected [ 258.102573][T20296] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.139054][T20296] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 258.154081][T20296] EXT4-fs (loop8): Remounting filesystem read-only [ 258.175112][T20296] macvtap1: entered promiscuous mode [ 258.180460][T20296] batadv0: entered promiscuous mode [ 258.199122][T20296] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 258.223958][T20296] batadv0: left promiscuous mode [ 258.415607][ T7093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.469143][T20330] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 258.479573][T20330] SELinux: failed to load policy [ 258.605656][T20340] __nla_validate_parse: 3 callbacks suppressed [ 258.605668][T20340] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3421'. [ 258.695941][T20346] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 258.806427][T20363] loop0: detected capacity change from 0 to 1024 [ 258.813421][T20364] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3426'. [ 258.849018][T20363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.866451][T20363] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 258.881539][T20363] EXT4-fs (loop0): Remounting filesystem read-only [ 258.894040][T20363] macvtap1: entered promiscuous mode [ 258.899361][T20363] batadv0: entered promiscuous mode [ 258.905844][T20363] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 258.922293][T20363] batadv0: left promiscuous mode [ 258.944696][T20374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3428'. [ 259.041857][T20380] netlink: 'syz.1.3430': attribute type 1 has an invalid length. [ 259.062137][T20380] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 259.073100][T20380] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 259.086984][ T9376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.114169][T20427] macvlan2: entered promiscuous mode [ 259.119733][T20427] macvlan2: entered allmulticast mode [ 259.126817][T20427] bond3: entered promiscuous mode [ 259.132456][T20427] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 259.142227][T20427] bond3: left promiscuous mode [ 259.260391][T20442] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3434'. [ 259.271951][T20442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3434'. [ 259.474462][T20446] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 259.593529][T20466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3440'. [ 260.104263][T20510] hub 6-0:1.0: USB hub found [ 260.109386][T20510] hub 6-0:1.0: 8 ports detected [ 260.136285][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'. [ 260.262000][T20557] batadv0: entered promiscuous mode [ 260.267560][T20557] macvtap1: entered promiscuous mode [ 260.274267][T20557] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 260.282689][T20557] batadv0: left promiscuous mode [ 260.456463][T20588] netlink: 'syz.2.3459': attribute type 4 has an invalid length. [ 260.466388][T20588] netlink: 'syz.2.3459': attribute type 16 has an invalid length. [ 260.474391][T20588] netlink: 'syz.2.3459': attribute type 17 has an invalid length. [ 260.496154][T20588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.554345][T20600] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3461'. [ 260.567821][T20600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3461'. [ 260.670688][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3465'. [ 260.692504][T12959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.751522][T20621] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 260.762137][T20621] SELinux: failed to load policy [ 260.770685][T20625] batadv0: entered promiscuous mode [ 260.776109][T20625] macvtap1: entered promiscuous mode [ 260.782257][T20625] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 260.804999][T20625] batadv0: left promiscuous mode [ 260.900553][T20651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.950820][T20618] hub 6-0:1.0: USB hub found [ 260.956068][T20618] hub 6-0:1.0: 8 ports detected [ 261.096209][T20687] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 261.107094][T20687] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 261.145817][T20733] macvlan2: entered promiscuous mode [ 261.151283][T20733] macvlan2: entered allmulticast mode [ 261.158153][T20733] bond4: entered promiscuous mode [ 261.170474][T20733] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 261.181550][T20733] bond4: left promiscuous mode [ 261.603346][T20747] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 261.613718][T20747] SELinux: failed to load policy [ 261.712534][T20753] SELinux: failed to load policy [ 261.793310][T20766] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 261.837578][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 261.837595][ T29] audit: type=1400 audit(1769878566.698:6342): avc: denied { lock } for pid=20773 comm="syz.0.3490" path="socket:[51791]" dev="sockfs" ino=51791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.867561][ T29] audit: type=1326 audit(1769878566.708:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20773 comm="syz.0.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 261.891272][ T29] audit: type=1326 audit(1769878566.708:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20773 comm="syz.0.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 261.914822][ T29] audit: type=1326 audit(1769878566.708:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20773 comm="syz.0.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 261.938383][ T29] audit: type=1326 audit(1769878566.708:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20773 comm="syz.0.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 262.082159][T20795] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 262.092392][T20795] SELinux: failed to load policy [ 262.218894][ T29] audit: type=1326 audit(1769878567.088:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.2.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 262.242547][ T29] audit: type=1326 audit(1769878567.088:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.2.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 262.271707][ T29] audit: type=1326 audit(1769878567.128:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.2.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 262.295327][ T29] audit: type=1326 audit(1769878567.128:6350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.2.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 262.318837][ T29] audit: type=1326 audit(1769878567.128:6351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.2.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ce52aeb9 code=0x7ffc0000 [ 262.448273][T20844] validate_nla: 5 callbacks suppressed [ 262.448300][T20844] netlink: 'syz.1.3505': attribute type 10 has an invalid length. [ 262.482637][T20845] netlink: 'syz.8.3504': attribute type 1 has an invalid length. [ 262.621548][T20855] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 262.631930][T20855] SELinux: failed to load policy [ 262.744350][T20872] netlink: 'syz.0.3513': attribute type 1 has an invalid length. [ 262.765447][T20872] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.776080][T20872] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 262.817085][T20914] bond2: (slave gretap1): making interface the new active one [ 262.825310][T20914] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 262.839829][T20872] macvlan2: entered promiscuous mode [ 262.845275][T20872] macvlan2: entered allmulticast mode [ 262.858052][T20872] bond2: entered promiscuous mode [ 262.863103][T20872] gretap1: entered promiscuous mode [ 262.868736][T20872] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 262.878992][T20872] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 262.890748][T20872] bond2: left promiscuous mode [ 262.895595][T20872] gretap1: left promiscuous mode [ 262.985391][T20935] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 263.015197][T20937] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 263.190014][T20950] loop2: detected capacity change from 0 to 128 [ 263.291528][T20978] netlink: 'syz.5.3529': attribute type 1 has an invalid length. [ 263.344573][T20978] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 263.355896][T20978] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 263.396161][T21019] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 263.408249][T21029] bond0: (slave gretap1): making interface the new active one [ 263.418405][T21029] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 263.441078][T20978] macvlan2: entered promiscuous mode [ 263.446397][T20978] macvlan2: entered allmulticast mode [ 263.458208][T20978] bond0: entered promiscuous mode [ 263.463259][T20978] gretap1: entered promiscuous mode [ 263.469306][T20978] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 263.486349][T20978] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 263.498250][T20978] bond0: left promiscuous mode [ 263.503105][T20978] gretap1: left promiscuous mode [ 263.562729][T12340] kernel write not supported for file bpf-prog (pid: 12340 comm: kworker/1:8) [ 263.665686][T21075] __nla_validate_parse: 8 callbacks suppressed [ 263.665703][T21075] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3540'. [ 263.688705][T21075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3540'. [ 263.795113][T21093] netlink: 'syz.5.3550': attribute type 1 has an invalid length. [ 263.819094][T21093] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 263.833029][T21129] loop0: detected capacity change from 0 to 1024 [ 263.839394][T21093] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 263.858828][T21129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.875412][T21142] macvlan2: entered promiscuous mode [ 263.880903][T21142] macvlan2: entered allmulticast mode [ 263.886963][T21142] bond2: entered promiscuous mode [ 263.892746][T21142] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 263.893310][ T9376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.909254][T21142] bond2: left promiscuous mode [ 263.928083][T21151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3552'. [ 263.937054][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3552'. [ 264.146275][T21179] loop2: detected capacity change from 0 to 256 [ 264.158316][T21179] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21179 comm=syz.2.3561 [ 264.204252][T21187] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3562'. [ 264.247500][T21197] netlink: 'syz.5.3565': attribute type 1 has an invalid length. [ 264.270534][T21197] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 264.281848][T21197] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 264.302270][T21241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3566'. [ 264.311511][T21241] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3566'. [ 264.320987][T21241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3566'. [ 264.334070][T21242] macvlan2: entered promiscuous mode [ 264.339491][T21242] macvlan2: entered allmulticast mode [ 264.341606][T21241] 9p: Bad value for 'wfdno' [ 264.346770][T21242] bond3: entered promiscuous mode [ 264.355039][T21242] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 264.367000][T21242] bond3: left promiscuous mode [ 264.449908][T21252] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3567'. [ 264.462496][T21254] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 264.493771][T21193] hub 6-0:1.0: USB hub found [ 264.499511][T21193] hub 6-0:1.0: 8 ports detected [ 264.610424][T21277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3574'. [ 264.685129][T21286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.115210][T21301] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 265.267223][T21321] netlink: 'syz.2.3583': attribute type 16 has an invalid length. [ 265.275074][T21321] netlink: 'syz.2.3583': attribute type 17 has an invalid length. [ 265.306330][T21321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.409817][T21343] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 265.420138][T21343] SELinux: failed to load policy [ 265.468719][T21348] netlink: 'syz.2.3588': attribute type 10 has an invalid length. [ 265.546699][T21357] vlan3: entered allmulticast mode [ 265.611281][T21373] netlink: 'syz.5.3593': attribute type 1 has an invalid length. [ 265.635353][T21373] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 265.647069][T21373] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 265.697492][T21420] macvlan2: entered promiscuous mode [ 265.702887][T21420] macvlan2: entered allmulticast mode [ 265.726584][T21420] bond4: entered promiscuous mode [ 265.732182][T21420] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 265.740768][T21420] bond4: left promiscuous mode [ 266.411655][T21458] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 266.422293][T21458] SELinux: failed to load policy [ 266.582326][T21466] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 266.603360][T21466] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 266.706015][T21535] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 266.716531][T21535] SELinux: failed to load policy [ 266.829001][T21569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.848404][T21570] loop2: detected capacity change from 0 to 1024 [ 266.867375][T21570] EXT4-fs: Ignoring removed oldalloc option [ 266.875546][T21570] EXT4-fs (loop2): invalid inodes per group: 204800 [ 266.875546][T21570] [ 267.016600][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 267.016639][ T29] audit: type=1326 audit(1769878571.890:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21620 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 267.057044][ T29] audit: type=1326 audit(1769878571.920:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21620 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 267.080651][ T29] audit: type=1326 audit(1769878571.920:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21620 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 267.104176][ T29] audit: type=1326 audit(1769878571.920:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21620 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 267.127678][ T29] audit: type=1326 audit(1769878571.920:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21620 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 267.151215][ T29] audit: type=1326 audit(1769878571.920:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21620 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 267.174779][ T29] audit: type=1326 audit(1769878571.920:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21620 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 267.198351][ T29] audit: type=1326 audit(1769878571.920:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21620 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 267.221873][ T29] audit: type=1326 audit(1769878571.920:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21620 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 267.245251][ T29] audit: type=1326 audit(1769878571.920:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21620 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a39ebaeb9 code=0x7ffc0000 [ 267.335424][T21634] SELinux: failed to load policy [ 267.349807][T21636] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 267.360864][T21636] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 267.459187][T21693] validate_nla: 4 callbacks suppressed [ 267.459201][T21693] netlink: 'syz.5.3633': attribute type 10 has an invalid length. [ 267.514607][T21703] netlink: 'syz.8.3635': attribute type 1 has an invalid length. [ 267.551032][T21711] loop5: detected capacity change from 0 to 1024 [ 267.576381][T21703] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 267.587612][T21703] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 267.596352][T21711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.612738][T21711] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 267.632074][T21711] EXT4-fs (loop5): Remounting filesystem read-only [ 267.640642][T21759] macvlan3: entered promiscuous mode [ 267.646008][T21759] macvlan3: entered allmulticast mode [ 267.653253][T21759] bond7: entered promiscuous mode [ 267.659178][T21759] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 267.667440][T21759] bond7: left promiscuous mode [ 267.766314][T21767] SELinux: failed to load policy [ 267.773069][T12959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.824865][T21746] hub 6-0:1.0: USB hub found [ 267.830891][T21746] hub 6-0:1.0: 8 ports detected [ 267.859441][T21781] loop8: detected capacity change from 0 to 1024 [ 267.879183][T21781] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.900679][T21781] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 267.915621][T21781] EXT4-fs (loop8): Remounting filesystem read-only [ 267.985001][ T7093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.061047][T21798] loop8: detected capacity change from 0 to 128 [ 268.068050][T21798] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 268.080834][T21798] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.263121][T21832] netlink: 'syz.8.3649': attribute type 16 has an invalid length. [ 268.271111][T21832] netlink: 'syz.8.3649': attribute type 17 has an invalid length. [ 268.286939][T21832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.349772][T21839] loop8: detected capacity change from 0 to 1024 [ 268.370853][T21839] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.401935][T21844] SELinux: failed to load policy [ 268.457332][T21839] macvtap1: entered promiscuous mode [ 268.462681][T21839] batadv0: entered promiscuous mode [ 268.500606][T21839] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 268.515210][T21858] netlink: 'syz.2.3655': attribute type 1 has an invalid length. [ 268.527540][T21839] batadv0: left promiscuous mode [ 268.595904][T21873] netlink: 'syz.0.3656': attribute type 1 has an invalid length. [ 268.604295][T21865] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 268.616147][T21865] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 268.655508][T21858] macvlan2: entered promiscuous mode [ 268.660860][T21858] macvlan2: entered allmulticast mode [ 268.673316][T21858] bond4: entered promiscuous mode [ 268.679266][T21858] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 268.687871][T21858] bond4: left promiscuous mode [ 268.708808][T21943] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 268.720229][T21943] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 268.733886][T21873] macvlan2: entered promiscuous mode [ 268.739258][T21873] macvlan2: entered allmulticast mode [ 268.755041][T21873] bond3: entered promiscuous mode [ 268.760312][T21873] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 268.776677][T21873] bond3: left promiscuous mode [ 268.836973][ T7093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.846550][T21965] __nla_validate_parse: 20 callbacks suppressed [ 268.846568][T21965] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3658'. [ 268.878296][T21965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3658'. [ 269.022194][T22003] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 269.046190][T22003] SELinux: failed to load policy [ 269.127579][T22017] loop8: detected capacity change from 0 to 1024 [ 269.166527][T22017] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.182631][T22017] macvtap1: entered promiscuous mode [ 269.187979][T22017] batadv0: entered promiscuous mode [ 269.193878][T22017] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 269.202430][T22017] batadv0: left promiscuous mode [ 269.354217][ T7093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.402067][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3675'. [ 269.480763][T22049] SELinux: failed to load policy [ 269.484261][T22053] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3680'. [ 269.624651][T22061] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3682'. [ 269.692101][T22067] netlink: 'syz.2.3684': attribute type 1 has an invalid length. [ 269.712462][T22067] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 269.723455][T22067] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 269.760320][T22109] macvlan2: entered promiscuous mode [ 269.765806][T22109] macvlan2: entered allmulticast mode [ 269.771660][T22109] bond5: entered promiscuous mode [ 269.777110][T22109] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.785249][T22109] bond5: left promiscuous mode [ 269.992057][T22151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3689'. [ 270.021969][T22154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3690'. [ 270.031679][T22154] netlink: 'syz.2.3690': attribute type 10 has an invalid length. [ 270.071561][T22163] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 270.082039][T22163] SELinux: failed to load policy [ 270.476827][T22188] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3701'. [ 270.526640][T22191] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3702'. [ 270.547514][T22191] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3702'. [ 270.559616][T22191] loop8: detected capacity change from 0 to 512 [ 270.582674][T22191] vfat: Unknown parameter 'sho' [ 270.630217][T22211] netlink: 'syz.8.3703': attribute type 10 has an invalid length. [ 270.708729][T22217] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 270.719254][T22217] SELinux: failed to load policy [ 270.787195][T22224] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 270.867704][T22227] loop5: detected capacity change from 0 to 1024 [ 270.888194][T22227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.905344][T22230] loop8: detected capacity change from 0 to 1024 [ 270.919362][T22227] batadv0: entered promiscuous mode [ 270.932989][T22227] macvtap1: entered promiscuous mode [ 270.945383][T22230] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.965482][T22227] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 270.978641][T22227] batadv0: left promiscuous mode [ 270.990662][T22230] macvtap1: entered promiscuous mode [ 270.996054][T22230] batadv0: entered promiscuous mode [ 271.002660][T22230] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 271.012610][T22230] batadv0: left promiscuous mode [ 271.060351][T22247] netlink: 'syz.1.3710': attribute type 1 has an invalid length. [ 271.079449][T12959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.111703][T22247] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 271.151969][T22247] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 271.168158][T22289] FAULT_INJECTION: forcing a failure. [ 271.168158][T22289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.181317][T22289] CPU: 0 UID: 0 PID: 22289 Comm: syz.5.3711 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 271.181360][T22289] Tainted: [W]=WARN [ 271.181368][T22289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.181443][T22289] Call Trace: [ 271.181451][T22289] [ 271.181460][T22289] __dump_stack+0x1d/0x30 [ 271.181489][T22289] dump_stack_lvl+0x95/0xd0 [ 271.181513][T22289] dump_stack+0x15/0x1b [ 271.181562][T22289] should_fail_ex+0x263/0x280 [ 271.181601][T22289] should_fail+0xb/0x20 [ 271.181631][T22289] should_fail_usercopy+0x1a/0x20 [ 271.181702][T22289] _copy_from_user+0x1c/0xb0 [ 271.181728][T22289] do_fcntl+0x44b/0xf80 [ 271.181770][T22289] __se_sys_fcntl+0xb1/0x120 [ 271.181874][T22289] __x64_sys_fcntl+0x43/0x50 [ 271.181910][T22289] x64_sys_call+0x2d6f/0x3000 [ 271.181940][T22289] do_syscall_64+0xc0/0x2a0 [ 271.182031][T22289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.182055][T22289] RIP: 0033:0x7fadb8a4aeb9 [ 271.182069][T22289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.182086][T22289] RSP: 002b:00007fadb74a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 271.182104][T22289] RAX: ffffffffffffffda RBX: 00007fadb8cc5fa0 RCX: 00007fadb8a4aeb9 [ 271.182186][T22289] RDX: 0000200000000080 RSI: 0000000000000410 RDI: 0000000000000009 [ 271.182269][T22289] RBP: 00007fadb74a7090 R08: 0000000000000000 R09: 0000000000000000 [ 271.182358][T22289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.182372][T22289] R13: 00007fadb8cc6038 R14: 00007fadb8cc5fa0 R15: 00007ffdc213b028 [ 271.182399][T22289] [ 271.420568][ T7093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.445556][T22303] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 271.457034][T22303] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 271.692364][T22401] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 271.708771][T22401] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 271.743982][T22452] macvlan2: entered promiscuous mode [ 271.749756][T22452] macvlan2: entered allmulticast mode [ 271.757294][T22452] bond8: entered promiscuous mode [ 271.762610][T22452] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 271.771982][T22452] bond8: left promiscuous mode [ 272.067382][T22471] hub 6-0:1.0: USB hub found [ 272.072440][T22471] hub 6-0:1.0: 8 ports detected [ 272.461544][T22496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.714230][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 272.714260][ T29] audit: type=1326 audit(1769878577.593:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 272.745009][ T29] audit: type=1326 audit(1769878577.623:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 272.768650][ T29] audit: type=1326 audit(1769878577.623:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 272.792206][ T29] audit: type=1326 audit(1769878577.623:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 272.817557][ T29] audit: type=1326 audit(1769878577.643:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 272.841170][ T29] audit: type=1326 audit(1769878577.643:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 272.864828][ T29] audit: type=1326 audit(1769878577.643:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 272.888490][ T29] audit: type=1326 audit(1769878577.643:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 272.897805][T22548] validate_nla: 4 callbacks suppressed [ 272.897841][T22548] netlink: 'syz.8.3740': attribute type 10 has an invalid length. [ 272.912117][ T29] audit: type=1326 audit(1769878577.653:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 272.941787][T22542] hub 6-0:1.0: USB hub found [ 272.949213][ T29] audit: type=1326 audit(1769878577.653:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 272.977422][T22542] hub 6-0:1.0: 8 ports detected [ 273.021521][T22557] loop8: detected capacity change from 0 to 1024 [ 273.028717][T22557] EXT4-fs: Ignoring removed nobh option [ 273.050568][T22557] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.128760][T22568] vlan2: entered promiscuous mode [ 273.624432][T22602] netlink: 'syz.2.3746': attribute type 16 has an invalid length. [ 273.632415][T22602] netlink: 'syz.2.3746': attribute type 17 has an invalid length. [ 273.650030][T22602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.803040][T22632] SELinux: failed to load policy [ 273.872856][T22636] loop7: detected capacity change from 1024 to 0 [ 273.959827][T22653] __nla_validate_parse: 7 callbacks suppressed [ 273.959844][T22653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3753'. [ 273.977880][T22653] netlink: 'syz.5.3753': attribute type 10 has an invalid length. [ 274.014555][T22660] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3755'. [ 274.337632][T22701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3759'. [ 274.503862][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3765'. [ 274.513553][T22727] netlink: 'syz.1.3765': attribute type 10 has an invalid length. [ 274.595662][T22741] netlink: 'syz.2.3770': attribute type 1 has an invalid length. [ 274.641259][T22741] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 274.653199][T22741] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 274.695978][T22805] macvlan2: entered promiscuous mode [ 274.701396][T22805] macvlan2: entered allmulticast mode [ 274.710803][T22805] bond7: entered promiscuous mode [ 274.716551][T22805] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 274.725308][T22805] bond7: left promiscuous mode [ 274.793989][T22820] batadv0: entered promiscuous mode [ 274.799466][T22820] macvtap1: entered promiscuous mode [ 274.806414][T22820] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 274.815101][T22820] batadv0: left promiscuous mode [ 274.822745][T22782] hub 6-0:1.0: USB hub found [ 274.828700][T22782] hub 6-0:1.0: 8 ports detected [ 274.863518][T22828] veth1_macvtap: left promiscuous mode [ 274.871323][T22828] macsec0: entered promiscuous mode [ 274.879781][T22828] veth1_macvtap: entered promiscuous mode [ 274.885817][T22828] macsec0: left promiscuous mode [ 274.925915][T22836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3779'. [ 274.944471][T22836] netlink: 'syz.0.3779': attribute type 10 has an invalid length. [ 274.962037][T22839] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3778'. [ 274.973049][T22839] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3778'. [ 275.671189][T22857] hub 6-0:1.0: USB hub found [ 275.676296][T22857] hub 6-0:1.0: 8 ports detected [ 275.890952][T22898] SELinux: failed to load policy [ 275.896870][T22900] netlink: 'syz.0.3791': attribute type 10 has an invalid length. [ 275.961687][T22905] macvtap1: entered promiscuous mode [ 275.967042][T22905] batadv0: entered promiscuous mode [ 275.973980][T22905] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 275.982841][T22905] batadv0: left promiscuous mode [ 275.988467][T22918] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3792'. [ 276.020142][ T7093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.055113][T22926] netlink: 'syz.2.3797': attribute type 1 has an invalid length. [ 276.105187][T22926] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 276.117012][T22926] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 276.151231][T22992] macvlan2: entered promiscuous mode [ 276.156573][T22992] macvlan2: entered allmulticast mode [ 276.163470][T22992] bond8: entered promiscuous mode [ 276.168792][T22992] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 276.181211][T22992] bond8: left promiscuous mode [ 276.203064][T22998] loop0: detected capacity change from 0 to 512 [ 276.215689][T22998] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 276.232750][T22998] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3799: invalid indirect mapped block 256 (level 1) [ 276.246307][T22998] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3799: invalid indirect mapped block 2683928664 (level 1) [ 276.261876][T22998] EXT4-fs (loop0): 1 truncate cleaned up [ 276.262328][T22998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.266169][T22998] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz.0.3799: invalid fast symlink length 39 [ 276.293125][T22930] hub 6-0:1.0: USB hub found [ 276.293847][T22930] hub 6-0:1.0: 8 ports detected [ 276.298122][ T9376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.412353][T23017] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 276.427510][T23021] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3800'. [ 276.457703][T23021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3800'. [ 276.551418][T23036] netlink: 'syz.1.3804': attribute type 10 has an invalid length. [ 276.657084][T23060] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 276.672552][T23060] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 276.776821][T23132] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 277.001360][T23140] hub 6-0:1.0: USB hub found [ 277.001927][T23170] SELinux: failed to load policy [ 277.012064][T23140] hub 6-0:1.0: 8 ports detected [ 277.253887][T23195] loop0: detected capacity change from 0 to 512 [ 277.300988][T23195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.339103][T23195] ext4 filesystem being mounted at /503/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 277.398698][T23195] EXT4-fs error (device loop0): ext4_resize_begin:60: comm syz.0.3823: resize_inode disabled but reserved GDT blocks non-zero [ 277.448133][T23219] loop8: detected capacity change from 0 to 512 [ 277.482647][T23219] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 277.510153][ T9376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.525945][T23219] EXT4-fs error (device loop8): __ext4_fill_super:5553: inode #2: comm syz.8.3824: iget: bogus i_mode (2355) [ 277.571822][T23219] EXT4-fs (loop8): get root inode failed [ 277.577541][T23219] EXT4-fs (loop8): mount failed [ 277.706329][T23241] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 277.744972][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 277.744985][ T29] audit: type=1326 audit(1769878582.626:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23245 comm="syz.8.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 277.774772][ T29] audit: type=1326 audit(1769878582.626:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23245 comm="syz.8.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 277.800322][ T29] audit: type=1326 audit(1769878582.686:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23245 comm="syz.8.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 277.839898][ T29] audit: type=1326 audit(1769878582.716:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23245 comm="syz.8.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 277.863681][ T29] audit: type=1326 audit(1769878582.716:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23245 comm="syz.8.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 277.985949][T23271] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 278.139722][T23299] validate_nla: 2 callbacks suppressed [ 278.139735][T23299] netlink: 'syz.8.3841': attribute type 1 has an invalid length. [ 278.154608][T23297] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 278.187600][T23299] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 278.199528][T23299] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 278.236648][T23347] macvlan3: entered promiscuous mode [ 278.242049][T23347] macvlan3: entered allmulticast mode [ 278.251730][T23347] bond8: entered promiscuous mode [ 278.257044][T23347] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 278.266059][T23347] bond8: left promiscuous mode [ 278.304202][T23292] hub 6-0:1.0: USB hub found [ 278.308933][T23292] hub 6-0:1.0: 8 ports detected [ 278.562486][T23417] hub 6-0:1.0: USB hub found [ 278.567175][T23417] hub 6-0:1.0: 8 ports detected [ 278.945262][T23426] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 279.036317][T23437] netlink: 'syz.0.3856': attribute type 1 has an invalid length. [ 279.061948][T23437] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 279.072043][T23423] hub 6-0:1.0: USB hub found [ 279.073246][T23423] hub 6-0:1.0: 8 ports detected [ 279.078808][T23437] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 279.230567][T23496] __nla_validate_parse: 11 callbacks suppressed [ 279.230587][T23496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3860'. [ 279.260125][T23497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3859'. [ 279.313616][ T29] audit: type=1326 audit(1769878584.196:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.5.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 279.337254][ T29] audit: type=1326 audit(1769878584.196:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.5.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 279.337291][ T29] audit: type=1326 audit(1769878584.196:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.5.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 279.417644][ T29] audit: type=1326 audit(1769878584.277:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.5.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 279.441316][ T29] audit: type=1326 audit(1769878584.277:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.5.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb8a4aeb9 code=0x7ffc0000 [ 279.470859][T23525] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3863'. [ 279.482046][T23525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3863'. [ 279.531153][T23530] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 279.626112][T23542] netlink: 'syz.5.3868': attribute type 1 has an invalid length. [ 279.645834][T23542] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 279.656954][T23542] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 279.771391][T23593] loop5: detected capacity change from 0 to 1024 [ 279.780633][T23593] EXT4-fs: Ignoring removed nobh option [ 279.810235][T23593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.900128][T23600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3880'. [ 280.455210][T23607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23607 comm=syz.1.3872 [ 280.851781][T23620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3875'. [ 280.927069][T23647] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 281.157217][T23655] netlink: 'syz.0.3879': attribute type 1 has an invalid length. [ 281.176464][T23649] hub 6-0:1.0: USB hub found [ 281.181753][T23649] hub 6-0:1.0: 8 ports detected [ 281.186557][T23655] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 281.197796][T23655] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 281.357747][T23706] macvtap1: entered promiscuous mode [ 281.363140][T23706] batadv0: entered promiscuous mode [ 281.369278][T23706] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 281.377874][T23706] batadv0: left promiscuous mode [ 281.447407][T23715] FAULT_INJECTION: forcing a failure. [ 281.447407][T23715] name failslab, interval 1, probability 0, space 0, times 0 [ 281.460123][T23715] CPU: 0 UID: 0 PID: 23715 Comm: syz.1.3885 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 281.460212][T23715] Tainted: [W]=WARN [ 281.460252][T23715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.460311][T23715] Call Trace: [ 281.460318][T23715] [ 281.460327][T23715] __dump_stack+0x1d/0x30 [ 281.460354][T23715] dump_stack_lvl+0x95/0xd0 [ 281.460387][T23715] dump_stack+0x15/0x1b [ 281.460412][T23715] should_fail_ex+0x263/0x280 [ 281.460448][T23715] should_failslab+0x8c/0xb0 [ 281.460485][T23715] kmem_cache_alloc_noprof+0x68/0x490 [ 281.460526][T23715] ? skb_clone+0x151/0x1f0 [ 281.460549][T23715] skb_clone+0x151/0x1f0 [ 281.460570][T23715] dev_queue_xmit_nit+0x13e/0x510 [ 281.460660][T23715] ? validate_xmit_xfrm+0x43/0x7a0 [ 281.460702][T23715] dev_hard_start_xmit+0xd3/0x3e0 [ 281.460756][T23715] __dev_queue_xmit+0xdb1/0x1f20 [ 281.460795][T23715] ? __dev_queue_xmit+0x148/0x1f20 [ 281.460849][T23715] ? should_fail_ex+0xd9/0x280 [ 281.460945][T23715] __netlink_deliver_tap+0x3c3/0x500 [ 281.461054][T23715] netlink_unicast+0x66b/0x690 [ 281.461094][T23715] netlink_sendmsg+0x5c8/0x6f0 [ 281.461125][T23715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.461149][T23715] ____sys_sendmsg+0x5af/0x600 [ 281.461253][T23715] ___sys_sendmsg+0x195/0x1e0 [ 281.461293][T23715] __x64_sys_sendmsg+0xd4/0x160 [ 281.461377][T23715] x64_sys_call+0x17ba/0x3000 [ 281.461435][T23715] do_syscall_64+0xc0/0x2a0 [ 281.461470][T23715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.461495][T23715] RIP: 0033:0x7f6a39ebaeb9 [ 281.461513][T23715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.461586][T23715] RSP: 002b:00007f6a38917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.461608][T23715] RAX: ffffffffffffffda RBX: 00007f6a3a135fa0 RCX: 00007f6a39ebaeb9 [ 281.461621][T23715] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 281.461642][T23715] RBP: 00007f6a38917090 R08: 0000000000000000 R09: 0000000000000000 [ 281.461653][T23715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.461666][T23715] R13: 00007f6a3a136038 R14: 00007f6a3a135fa0 R15: 00007ffcfbccd448 [ 281.461738][T23715] [ 281.463738][T23701] hub 6-0:1.0: USB hub found [ 281.705388][T23701] hub 6-0:1.0: 8 ports detected [ 281.780751][T23725] FAULT_INJECTION: forcing a failure. [ 281.780751][T23725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.793970][T23725] CPU: 1 UID: 0 PID: 23725 Comm: syz.1.3887 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 281.794000][T23725] Tainted: [W]=WARN [ 281.794009][T23725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.794024][T23725] Call Trace: [ 281.794035][T23725] [ 281.794042][T23725] __dump_stack+0x1d/0x30 [ 281.794123][T23725] dump_stack_lvl+0x95/0xd0 [ 281.794140][T23725] dump_stack+0x15/0x1b [ 281.794159][T23725] should_fail_ex+0x263/0x280 [ 281.794184][T23725] should_fail+0xb/0x20 [ 281.794294][T23725] should_fail_usercopy+0x1a/0x20 [ 281.794319][T23725] _copy_to_user+0x20/0xa0 [ 281.794336][T23725] simple_read_from_buffer+0xb5/0x130 [ 281.794431][T23725] proc_fail_nth_read+0x10e/0x150 [ 281.794454][T23725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.794479][T23725] vfs_read+0x1ab/0x7f0 [ 281.794494][T23725] ? __rcu_read_unlock+0x4e/0x70 [ 281.794541][T23725] ? __fget_files+0x184/0x1c0 [ 281.794559][T23725] ? mutex_lock+0x57/0x90 [ 281.794578][T23725] ksys_read+0xdc/0x1a0 [ 281.794594][T23725] __x64_sys_read+0x40/0x50 [ 281.794622][T23725] x64_sys_call+0x2889/0x3000 [ 281.794642][T23725] do_syscall_64+0xc0/0x2a0 [ 281.794666][T23725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.794684][T23725] RIP: 0033:0x7f6a39e7b78e [ 281.794696][T23725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 281.794729][T23725] RSP: 002b:00007f6a388f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.794770][T23725] RAX: ffffffffffffffda RBX: 00007f6a388f66c0 RCX: 00007f6a39e7b78e [ 281.794781][T23725] RDX: 000000000000000f RSI: 00007f6a388f60a0 RDI: 0000000000000006 [ 281.794791][T23725] RBP: 00007f6a388f6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.794802][T23725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.794891][T23725] R13: 00007f6a3a136128 R14: 00007f6a3a136090 R15: 00007ffcfbccd448 [ 281.794907][T23725] [ 282.082388][T23737] netlink: 'syz.2.3891': attribute type 1 has an invalid length. [ 282.105724][T23737] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 282.118904][T23737] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 282.160227][T23783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3892'. [ 282.316138][T23794] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 282.388888][T23794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3896'. [ 282.400518][T23794] vlan2: entered allmulticast mode [ 282.544798][T23802] FAULT_INJECTION: forcing a failure. [ 282.544798][T23802] name failslab, interval 1, probability 0, space 0, times 0 [ 282.557549][T23802] CPU: 1 UID: 0 PID: 23802 Comm: syz.0.3899 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.557583][T23802] Tainted: [W]=WARN [ 282.557592][T23802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.557608][T23802] Call Trace: [ 282.557616][T23802] [ 282.557625][T23802] __dump_stack+0x1d/0x30 [ 282.557648][T23802] dump_stack_lvl+0x95/0xd0 [ 282.557668][T23802] dump_stack+0x15/0x1b [ 282.557686][T23802] should_fail_ex+0x263/0x280 [ 282.557722][T23802] should_failslab+0x8c/0xb0 [ 282.557744][T23802] kmem_cache_alloc_noprof+0x68/0x490 [ 282.557770][T23802] ? vm_area_alloc+0x2c/0xb0 [ 282.557802][T23802] vm_area_alloc+0x2c/0xb0 [ 282.557836][T23802] mmap_region+0xfd8/0x1d20 [ 282.557894][T23802] do_mmap+0x9b2/0xbd0 [ 282.557931][T23802] vm_mmap_pgoff+0x183/0x2d0 [ 282.557975][T23802] ksys_mmap_pgoff+0xc1/0x310 [ 282.558000][T23802] ? __x64_sys_mmap+0x49/0x70 [ 282.558025][T23802] x64_sys_call+0x16bb/0x3000 [ 282.558047][T23802] do_syscall_64+0xc0/0x2a0 [ 282.558080][T23802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.558105][T23802] RIP: 0033:0x7f1bdd3dac22 [ 282.558119][T23802] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 282.558136][T23802] RSP: 002b:00007f1bdbe36df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 282.558172][T23802] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1bdd3dac22 [ 282.558189][T23802] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 282.558201][T23802] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 282.558213][T23802] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 282.558229][T23802] R13: 00007f1bdbe36ee0 R14: 00007f1bdbe36ea0 R15: 0000200000000180 [ 282.558255][T23802] [ 282.767981][T12959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.801700][T23814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3902'. [ 282.844450][T23821] netlink: 'syz.1.3905': attribute type 1 has an invalid length. [ 282.878384][T23821] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 282.889361][T23821] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 282.943673][T23871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3906'. [ 282.983846][T23892] netlink: 'syz.1.3907': attribute type 10 has an invalid length. [ 283.012774][ T8689] IPVS: starting estimator thread 0... [ 283.044767][T23817] hub 6-0:1.0: USB hub found [ 283.053052][T23817] hub 6-0:1.0: 8 ports detected [ 283.117648][T23897] IPVS: using max 2592 ests per chain, 129600 per kthread [ 283.188417][T23909] 8021q: VLANs not supported on vcan0 [ 283.719952][T23915] loop5: detected capacity change from 0 to 128 [ 283.730607][T23915] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.746780][T23915] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.796407][T12959] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.816106][T23924] ref_ctr increment failed for inode: 0x64d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810472d7c0 [ 283.982805][T23952] netlink: 'syz.1.3919': attribute type 16 has an invalid length. [ 284.032181][T23967] macvtap1: entered promiscuous mode [ 284.037512][T23967] batadv0: entered promiscuous mode [ 284.043775][T23967] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 284.052010][T23967] batadv0: left promiscuous mode [ 284.336200][T23975] hub 6-0:1.0: USB hub found [ 284.341405][T23975] hub 6-0:1.0: 8 ports detected [ 284.499725][T23992] netlink: 'syz.8.3929': attribute type 1 has an invalid length. [ 284.519882][T23992] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 284.530712][T23992] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 284.593134][T24036] __nla_validate_parse: 2 callbacks suppressed [ 284.593150][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3930'. [ 284.612144][T24036] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3930'. [ 284.767804][T24046] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3931'. [ 284.787127][T24049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3933'. [ 284.817514][T24052] batadv0: entered promiscuous mode [ 284.822783][T24052] macvtap1: entered promiscuous mode [ 284.829281][T24052] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 284.837937][T24052] batadv0: left promiscuous mode [ 285.042550][T24059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3935'. [ 285.084209][T24085] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 285.139346][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 285.139365][ T29] audit: type=1326 audit(1769878590.019:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24089 comm="syz.5.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fadb8a44cd7 code=0x7ffc0000 [ 285.172329][ T29] audit: type=1326 audit(1769878590.029:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24089 comm="syz.5.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadb89ec2d9 code=0x7ffc0000 [ 285.195838][ T29] audit: type=1326 audit(1769878590.029:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24089 comm="syz.5.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fadb8a44cd7 code=0x7ffc0000 [ 285.219459][ T29] audit: type=1326 audit(1769878590.029:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24089 comm="syz.5.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadb89ec2d9 code=0x7ffc0000 [ 285.243060][ T29] audit: type=1326 audit(1769878590.029:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24089 comm="syz.5.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fadb8a44cd7 code=0x7ffc0000 [ 285.266553][ T29] audit: type=1326 audit(1769878590.029:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24089 comm="syz.5.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadb89ec2d9 code=0x7ffc0000 [ 285.290045][ T29] audit: type=1326 audit(1769878590.029:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24089 comm="syz.5.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fadb8a44cd7 code=0x7ffc0000 [ 285.313567][ T29] audit: type=1326 audit(1769878590.029:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24089 comm="syz.5.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadb89ec2d9 code=0x7ffc0000 [ 285.337076][ T29] audit: type=1326 audit(1769878590.029:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24089 comm="syz.5.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fadb8a44cd7 code=0x7ffc0000 [ 285.360554][ T29] audit: type=1326 audit(1769878590.029:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24089 comm="syz.5.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadb89ec2d9 code=0x7ffc0000 [ 285.972584][T24121] ip6tnl1: entered allmulticast mode [ 286.053168][T24128] batadv0: entered promiscuous mode [ 286.058770][T24128] macvtap1: entered promiscuous mode [ 286.065346][T24128] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 286.074239][T24128] batadv0: left promiscuous mode [ 286.085863][T24132] macvtap1: entered promiscuous mode [ 286.091207][T24132] batadv0: entered promiscuous mode [ 286.097167][T24132] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 286.105536][T24132] batadv0: left promiscuous mode [ 286.185765][T24149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3956'. [ 286.194899][T24149] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3956'. [ 286.208668][T24154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3954'. [ 286.226947][T24155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3955'. [ 286.591715][T24193] SELinux: security_context_str_to_sid (DcG}¶Ã›õ…)¢’Á.2å;òô§ç«/>“‹å P ¿6&}ëÅvER) failed with errno=-22 [ 286.608961][T24195] hub 6-0:1.0: USB hub found [ 286.613938][T24195] hub 6-0:1.0: 8 ports detected [ 286.621020][T24196] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.660384][T24202] batadv0: entered promiscuous mode [ 286.666023][T24202] macvtap1: entered promiscuous mode [ 286.672116][T24202] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 286.680771][T24202] batadv0: left promiscuous mode [ 286.761768][T24211] loop2: detected capacity change from 0 to 1024 [ 286.773117][T24211] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 286.782923][T24211] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 286.799054][T24211] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 286.809513][T24211] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: inode #32: comm syz.2.3965: iget: special inode unallocated [ 286.823058][T24211] EXT4-fs (loop2): no journal found [ 286.828315][T24211] EXT4-fs (loop2): can't get journal size [ 286.834589][T24212] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3964'. [ 286.835494][T24211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 286.858337][T24212] vlan3: entered promiscuous mode [ 286.877280][T24211] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.937192][T24211] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.987505][T24211] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.047047][T24211] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.117371][ T7141] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.146068][ T6283] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.166972][ T6283] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.175231][ T6283] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.207488][T10805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.287029][T24251] netlink: 'syz.2.3972': attribute type 10 has an invalid length. [ 287.387709][T24241] hub 6-0:1.0: USB hub found [ 287.392816][T24241] hub 6-0:1.0: 8 ports detected [ 287.849934][T24267] batadv0: entered promiscuous mode [ 287.855334][T24267] macvtap1: entered promiscuous mode [ 287.861467][T24267] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 287.869793][T24267] batadv0: left promiscuous mode [ 288.261767][T24307] batadv0: entered promiscuous mode [ 288.275131][T24307] macvtap1: entered promiscuous mode [ 288.281715][T24307] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 288.296659][T24307] batadv0: left promiscuous mode [ 288.331471][T24319] batadv0: entered promiscuous mode [ 288.337258][T24319] macvtap1: entered promiscuous mode [ 288.343553][T24319] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 288.353859][T24319] batadv0: left promiscuous mode [ 288.388354][T24330] ip6tnl2: entered allmulticast mode [ 288.414616][T24335] loop5: detected capacity change from 0 to 128 [ 288.423196][T24335] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 288.442842][T24335] bio_check_eod: 18 callbacks suppressed [ 288.442855][T24335] syz.5.3993: attempt to access beyond end of device [ 288.442855][T24335] loop5: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 288.473338][T24335] syz.5.3993: attempt to access beyond end of device [ 288.473338][T24335] loop5: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 288.586055][T12340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 288.594123][T12340] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 288.670236][T24366] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24366 comm=syz.1.4003 [ 288.736746][T24376] netlink: 'syz.1.4007': attribute type 1 has an invalid length. [ 288.763962][T24376] macvlan2: entered promiscuous mode [ 288.769436][T24376] macvlan2: entered allmulticast mode [ 288.776133][T24376] bond11: entered promiscuous mode [ 288.776704][T24374] netlink: 'syz.2.4006': attribute type 27 has an invalid length. [ 288.781810][T24376] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 288.798614][T24357] hid-generic 0000:0000:0000.0006: pid 24357 passed too short report [ 288.806925][T24376] bond11: left promiscuous mode [ 288.865300][T24423] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 288.868147][T24374] batadv_slave_0: left promiscuous mode [ 288.881303][T24374] batadv_slave_0: left allmulticast mode [ 288.918809][T24374] syzkaller0: left promiscuous mode [ 288.924061][T24374] syzkaller0: left allmulticast mode [ 288.933832][ T6283] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.947835][ T6283] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.956542][ T6283] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.965122][ T6283] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.014198][T24439] FAULT_INJECTION: forcing a failure. [ 289.014198][T24439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.027430][T24439] CPU: 1 UID: 0 PID: 24439 Comm: syz.2.4014 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.027484][T24439] Tainted: [W]=WARN [ 289.027492][T24439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.027508][T24439] Call Trace: [ 289.027515][T24439] [ 289.027524][T24439] __dump_stack+0x1d/0x30 [ 289.027551][T24439] dump_stack_lvl+0x95/0xd0 [ 289.027619][T24439] dump_stack+0x15/0x1b [ 289.027636][T24439] should_fail_ex+0x263/0x280 [ 289.027668][T24439] should_fail+0xb/0x20 [ 289.027700][T24439] should_fail_usercopy+0x1a/0x20 [ 289.027816][T24439] _copy_from_user+0x1c/0xb0 [ 289.027840][T24439] kstrtouint_from_user+0x69/0xf0 [ 289.027870][T24439] proc_fail_nth_write+0x50/0x160 [ 289.027917][T24439] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 289.027949][T24439] vfs_write+0x269/0x9f0 [ 289.027972][T24439] ? __rcu_read_unlock+0x4e/0x70 [ 289.028080][T24439] ? __fget_files+0x184/0x1c0 [ 289.028105][T24439] ? mutex_lock+0x57/0x90 [ 289.028134][T24439] ksys_write+0xdc/0x1a0 [ 289.028158][T24439] __x64_sys_write+0x40/0x50 [ 289.028246][T24439] x64_sys_call+0x2847/0x3000 [ 289.028276][T24439] do_syscall_64+0xc0/0x2a0 [ 289.028312][T24439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.028409][T24439] RIP: 0033:0x7ff5ce4eb78e [ 289.028539][T24439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 289.028577][T24439] RSP: 002b:00007ff5ccf86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.028603][T24439] RAX: ffffffffffffffda RBX: 00007ff5ccf876c0 RCX: 00007ff5ce4eb78e [ 289.028621][T24439] RDX: 0000000000000001 RSI: 00007ff5ccf870a0 RDI: 0000000000000004 [ 289.028643][T24439] RBP: 00007ff5ccf87090 R08: 0000000000000000 R09: 0000000000000000 [ 289.028705][T24439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.028725][T24439] R13: 00007ff5ce7a6038 R14: 00007ff5ce7a5fa0 R15: 00007ffe0987c528 [ 289.028745][T24439] [ 289.285830][T24451] hub 3-0:1.0: USB hub found [ 289.290506][T24451] hub 3-0:1.0: 8 ports detected [ 289.310358][T24451] syzkaller0: entered promiscuous mode [ 289.315999][T24451] syzkaller0: entered allmulticast mode [ 289.387808][T24461] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 289.451407][T24467] netlink: 'syz.5.4021': attribute type 1 has an invalid length. [ 289.480793][T24467] macvlan2: entered promiscuous mode [ 289.486229][T24467] macvlan2: entered allmulticast mode [ 289.492487][T24467] bond6: entered promiscuous mode [ 289.498168][T24467] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 289.506812][T24467] bond6: left promiscuous mode [ 289.539464][T24502] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 289.547120][T24502] SELinux: failed to load policy [ 289.663418][T24523] netlink: 'syz.1.4028': attribute type 1 has an invalid length. [ 289.724739][T24567] __nla_validate_parse: 9 callbacks suppressed [ 289.724751][T24567] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4032'. [ 289.742660][T24567] netlink: 'syz.8.4032': attribute type 10 has an invalid length. [ 289.946065][T24601] netlink: 'syz.0.4042': attribute type 1 has an invalid length. [ 289.956383][T24603] loop5: detected capacity change from 0 to 512 [ 289.973750][T24603] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 289.982896][T24603] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 289.991126][T24603] EXT4-fs (loop5): SIPHASH is not a valid default hash value [ 290.020366][T24644] FAULT_INJECTION: forcing a failure. [ 290.020366][T24644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.033629][T24644] CPU: 1 UID: 0 PID: 24644 Comm: syz.0.4043 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 290.033697][T24644] Tainted: [W]=WARN [ 290.033704][T24644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.033742][T24644] Call Trace: [ 290.033751][T24644] [ 290.033762][T24644] __dump_stack+0x1d/0x30 [ 290.033832][T24644] dump_stack_lvl+0x95/0xd0 [ 290.033856][T24644] dump_stack+0x15/0x1b [ 290.033950][T24644] should_fail_ex+0x263/0x280 [ 290.033992][T24644] should_fail+0xb/0x20 [ 290.034034][T24644] should_fail_usercopy+0x1a/0x20 [ 290.034149][T24644] _copy_to_user+0x20/0xa0 [ 290.034173][T24644] bpf_test_finish+0x117/0x500 [ 290.034245][T24644] bpf_prog_test_run_xdp+0x663/0xa10 [ 290.034297][T24644] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 290.034389][T24644] bpf_prog_test_run+0x204/0x340 [ 290.034428][T24644] __sys_bpf+0x4c0/0x7b0 [ 290.034466][T24644] __x64_sys_bpf+0x41/0x50 [ 290.034569][T24644] x64_sys_call+0x28e1/0x3000 [ 290.034599][T24644] do_syscall_64+0xc0/0x2a0 [ 290.034630][T24644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.034701][T24644] RIP: 0033:0x7f1bdd3daeb9 [ 290.034727][T24644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.034752][T24644] RSP: 002b:00007f1bdbe37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.034777][T24644] RAX: ffffffffffffffda RBX: 00007f1bdd655fa0 RCX: 00007f1bdd3daeb9 [ 290.034799][T24644] RDX: 0000000000000022 RSI: 0000200000001bc0 RDI: 000000000000000a [ 290.034812][T24644] RBP: 00007f1bdbe37090 R08: 0000000000000000 R09: 0000000000000000 [ 290.034869][T24644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.034919][T24644] R13: 00007f1bdd656038 R14: 00007f1bdd655fa0 R15: 00007ffdcfc9e868 [ 290.034946][T24644] [ 290.070440][T24647] loop5: detected capacity change from 0 to 1024 [ 290.222346][T24651] macvtap1: entered promiscuous mode [ 290.230079][T24651] batadv0: entered promiscuous mode [ 290.238722][T24656] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4046'. [ 290.239388][T24647] EXT4-fs: Ignoring removed nobh option [ 290.249901][T24651] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 290.263402][T24651] batadv0: left promiscuous mode [ 290.272336][T24656] netlink: 'syz.2.4046': attribute type 10 has an invalid length. [ 290.281881][T24647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.343321][T24667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4048'. [ 290.352363][T24667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4048'. [ 290.372433][T24668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4044'. [ 290.427519][ T29] kauditd_printk_skb: 3278 callbacks suppressed [ 290.427537][ T29] audit: type=1326 audit(1769878595.312:10033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24675 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 290.458097][ T29] audit: type=1326 audit(1769878595.312:10034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24675 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 290.481872][ T29] audit: type=1326 audit(1769878595.322:10035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24675 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 290.505507][ T29] audit: type=1326 audit(1769878595.342:10036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24675 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 290.529233][ T29] audit: type=1326 audit(1769878595.342:10037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24675 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 290.552837][ T29] audit: type=1326 audit(1769878595.342:10038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24675 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 290.576547][ T29] audit: type=1326 audit(1769878595.342:10039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24675 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1bdd39b78e code=0x7ffc0000 [ 290.600128][ T29] audit: type=1326 audit(1769878595.342:10040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24675 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1bdd39b78e code=0x7ffc0000 [ 290.623686][ T29] audit: type=1326 audit(1769878595.342:10041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24675 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1bdd39b78e code=0x7ffc0000 [ 290.647188][ T29] audit: type=1326 audit(1769878595.342:10042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24675 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdd3daeb9 code=0x7ffc0000 [ 290.845249][T24687] netlink: 324 bytes leftover after parsing attributes in process `syz.8.4055'. [ 290.874899][T24676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.892663][T24676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.124342][T24695] hub 6-0:1.0: USB hub found [ 291.129555][T24695] hub 6-0:1.0: 8 ports detected [ 291.165093][T24703] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4058'. [ 291.174795][T24703] netlink: 'syz.2.4058': attribute type 10 has an invalid length. [ 291.592560][T24738] netlink: 'syz.2.4073': attribute type 16 has an invalid length. [ 291.600595][T24738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4073'. [ 291.611625][T24745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'. [ 291.903904][T24790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4068'. [ 291.951565][T24792] netlink: 'syz.0.4070': attribute type 10 has an invalid length. [ 292.172344][T24812] hub 6-0:1.0: USB hub found [ 292.177118][T24812] hub 6-0:1.0: 8 ports detected [ 292.815081][T24856] netlink: 'syz.2.4086': attribute type 10 has an invalid length. [ 292.913410][T24875] loop2: detected capacity change from 0 to 128 [ 292.933861][T24875] syz.2.4092: attempt to access beyond end of device [ 292.933861][T24875] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 292.957252][T24875] syz.2.4092: attempt to access beyond end of device [ 292.957252][T24875] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 292.971145][T24875] buffer_io_error: 191 callbacks suppressed [ 292.971158][T24875] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 292.996507][T24874] syz.2.4092: attempt to access beyond end of device [ 292.996507][T24874] loop2: rw=8912896, sector=154, nr_sectors = 8 limit=128 [ 293.010876][T24875] syz.2.4092: attempt to access beyond end of device [ 293.010876][T24875] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 293.024760][T24874] syz.2.4092: attempt to access beyond end of device [ 293.024760][T24874] loop2: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 293.038792][T24874] syz.2.4092: attempt to access beyond end of device [ 293.038792][T24874] loop2: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 293.059523][T24874] syz.2.4092: attempt to access beyond end of device [ 293.059523][T24874] loop2: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 293.078149][T24874] syz.2.4092: attempt to access beyond end of device [ 293.078149][T24874] loop2: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 293.102584][T12959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.178142][T24901] wireguard0: entered promiscuous mode [ 293.183652][T24901] wireguard0: entered allmulticast mode [ 293.358794][T24921] loop2: detected capacity change from 0 to 2048 [ 293.395370][T24928] loop5: detected capacity change from 0 to 512 [ 293.406786][T24928] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.4105: inode has both inline data and extents flags [ 293.433308][T24921] loop2: p2 p3 p7 [ 293.440655][T24928] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4105: couldn't read orphan inode 15 (err -117) [ 293.454526][T24928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.574619][T12959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.605083][ T3748] udevd[3748]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 293.605813][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 293.619655][ T9126] udevd[9126]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 293.677539][T24957] loop5: detected capacity change from 0 to 1024 [ 293.704376][T24957] EXT4-fs: Ignoring removed nobh option [ 293.736470][T24957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.038002][T24999] tipc: Enabling of bearer rejected, failed to enable media [ 294.063253][T25001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25001 comm=syz.8.4122 [ 294.094423][T25004] vlan4: entered promiscuous mode [ 294.099495][T25004] geneve1: entered promiscuous mode [ 294.104931][T25004] vlan4: entered allmulticast mode [ 294.110050][T25004] geneve1: entered allmulticast mode [ 294.130660][T25008] tipc: Enabling of bearer rejected, failed to enable media [ 294.539801][T25014] netlink: 'syz.1.4126': attribute type 10 has an invalid length. [ 294.879330][T25022] netlink: 'syz.0.4129': attribute type 21 has an invalid length. [ 295.019936][T25032] __nla_validate_parse: 9 callbacks suppressed [ 295.020002][T25032] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4132'. [ 295.087459][T25020] hub 6-0:1.0: USB hub found [ 295.103866][T25020] hub 6-0:1.0: 8 ports detected [ 295.385028][T25058] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4142'. [ 295.395670][T25058] netlink: 'syz.8.4142': attribute type 10 has an invalid length. [ 295.426591][T25060] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4143'. [ 295.439012][T25062] netlink: 'syz.8.4144': attribute type 1 has an invalid length. [ 295.502710][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 295.502722][ T29] audit: type=1326 audit(1769878859.381:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.8.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 295.532577][ T29] audit: type=1326 audit(1769878859.381:10165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.8.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 295.567544][ T29] audit: type=1326 audit(1769878859.441:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.8.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 295.591304][ T29] audit: type=1326 audit(1769878859.441:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.8.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 295.615023][ T29] audit: type=1326 audit(1769878859.441:10168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.8.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 295.638675][ T29] audit: type=1326 audit(1769878859.441:10169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.8.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 295.662347][ T29] audit: type=1326 audit(1769878859.441:10170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.8.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 295.686035][ T29] audit: type=1326 audit(1769878859.441:10171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.8.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 295.709643][ T29] audit: type=1326 audit(1769878859.451:10172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.8.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 295.733194][ T29] audit: type=1326 audit(1769878859.451:10173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.8.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6adaeb9 code=0x7ffc0000 [ 295.970910][T25129] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4156'. [ 296.031042][T25133] netlink: 'syz.2.4157': attribute type 1 has an invalid length. [ 296.087312][T25121] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4154'. [ 296.096341][T25121] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4154'. [ 296.268121][T25180] ================================================================== [ 296.276228][T25180] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 296.284555][T25180] [ 296.286868][T25180] write to 0xffffea0005a50418 of 8 bytes by task 25183 on cpu 0: [ 296.294576][T25180] delete_from_page_cache_batch+0x32c/0x740 [ 296.300460][T25180] truncate_inode_pages_range+0x1fe/0x7e0 [ 296.306178][T25180] truncate_setsize+0x9b/0xc0 [ 296.310880][T25180] aio_free_ring+0x47/0x1e0 [ 296.315397][T25180] aio_setup_ring+0x5d6/0x750 [ 296.320077][T25180] ioctx_alloc+0x2a9/0x4c0 [ 296.324490][T25180] __se_sys_io_setup+0x6b/0x1b0 [ 296.329334][T25180] __x64_sys_io_setup+0x31/0x40 [ 296.334182][T25180] x64_sys_call+0x2a8e/0x3000 [ 296.338850][T25180] do_syscall_64+0xc0/0x2a0 [ 296.343350][T25180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.349234][T25180] [ 296.351551][T25180] read to 0xffffea0005a50418 of 8 bytes by task 25180 on cpu 1: [ 296.359172][T25180] folio_mapping+0xa1/0xe0 [ 296.363605][T25180] lru_add+0x8d/0x480 [ 296.367603][T25180] folio_batch_move_lru+0x1c5/0x270 [ 296.372802][T25180] folio_add_lru+0x149/0x1e0 [ 296.377393][T25180] shmem_get_folio_gfp+0x7b0/0xd60 [ 296.382508][T25180] shmem_fault+0xf6/0x250 [ 296.386845][T25180] __do_fault+0xbc/0x200 [ 296.391085][T25180] handle_mm_fault+0x11d7/0x3030 [ 296.396023][T25180] do_user_addr_fault+0x3fd/0x1050 [ 296.401134][T25180] exc_page_fault+0x62/0xa0 [ 296.405635][T25180] asm_exc_page_fault+0x26/0x30 [ 296.410473][T25180] rep_movs_alternative+0x4a/0x90 [ 296.415495][T25180] _copy_from_iter+0x117/0xea0 [ 296.420255][T25180] copy_page_from_iter+0x178/0x2a0 [ 296.425366][T25180] anon_pipe_write+0x53f/0xb30 [ 296.430125][T25180] vfs_write+0x5a6/0x9f0 [ 296.434376][T25180] ksys_write+0xdc/0x1a0 [ 296.438608][T25180] __x64_sys_write+0x40/0x50 [ 296.443190][T25180] x64_sys_call+0x2847/0x3000 [ 296.447858][T25180] do_syscall_64+0xc0/0x2a0 [ 296.452368][T25180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.458265][T25180] [ 296.460601][T25180] value changed: 0xffff88811b6508a8 -> 0x0000000000000000 [ 296.467693][T25180] [ 296.470003][T25180] Reported by Kernel Concurrency Sanitizer on: [ 296.476143][T25180] CPU: 1 UID: 0 PID: 25180 Comm: syz.8.4161 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 296.487501][T25180] Tainted: [W]=WARN [ 296.491292][T25180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.501341][T25180] ================================================================== [ 296.577060][T25182] hub 6-0:1.0: USB hub found [ 296.582887][T25182] hub 6-0:1.0: 8 ports detected [ 296.663543][T12959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.703804][ T3422] page_pool_release_retry() stalled pool shutdown: id 170, 10 inflight 60 sec