last executing test programs: 1m16.600952139s ago: executing program 4 (id=82): socket$inet6(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 6) 1m16.536786223s ago: executing program 4 (id=83): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x587142, 0x7d) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x5) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001e0000000c00000006000100fe0f000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x58}}, 0x8000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r5, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2}, 0x0) 1m16.045024691s ago: executing program 4 (id=94): syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002e40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9fd3597a81eb01001800000000000000110000002400000002000000000000000300000d000000000d0000000000000000000000020000000000000004000000000044fe649e8be7370aa0d56a8341c9a975e90f21862c58e4bf90a97fdc4f4820ace6bd89f4f1303ccce20b1152610ef20d7b39505e7e4353023df5a9ea3a013fead2acd65b1c844212e0b95f53bdbd7f3b3f8c191a6849a46214762078f08b8b611088c43aeb780180c51ace36e175d9143a7e"], &(0x7f0000002dc0)=""/87, 0x3e, 0x57, 0x1}, 0x28) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="fd9eef64b9", @ANYRES16=r2, @ANYBLOB="0100ffffffff00000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0001000100000000000c009000ff01000000000000"], 0x54}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000480)="aedf42ffc0951d", 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) setresuid(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 1m15.987349484s ago: executing program 4 (id=97): syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200), 0xfe, 0x283, &(0x7f0000000400)="$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") setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8900, &(0x7f0000001dc0)={0x8f, 0x74, 0x100000}, 0x20) setresgid(r0, r0, 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [], {0x4, 0x1}}, 0x24, 0x0) 1m15.793541955s ago: executing program 4 (id=102): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x70, 0x41, &(0x7f00000001c0)=""/65, 0x41100, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0xb3c, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) futex_waitv(&(0x7f00000018c0)=[{0xaa, &(0x7f0000000940)=0x8, 0x2}, {0x0, &(0x7f0000000980)=0x6, 0x82}, {0x80000000, &(0x7f00000009c0)=0x9, 0x2}, {0x0, &(0x7f0000000a00)=0x3ff, 0x82}, {0x7, &(0x7f0000000a40)=0xf4c3, 0x82}, {0x94e, &(0x7f0000000a80)=0x5, 0x82}, {0x20000000, &(0x7f0000000ac0)=0xfffffffffffffffd, 0x82}, {0x6, &(0x7f0000000b00)=0x7, 0x82}, {0x4b, &(0x7f0000000b40)=0xfffffffffffffffe, 0x2}, {0x6, &(0x7f0000000b80)=0x8001, 0x82}, {0x9, &(0x7f0000000bc0)=0x3, 0x2}, {0x5, &(0x7f0000000c00)=0x101}, {0x96, &(0x7f0000000c40)=0xd, 0x82}, {0x8, &(0x7f0000000c80)=0x4, 0x2}, {0x800, &(0x7f0000000cc0)=0x9, 0x82}, {0x6, &(0x7f0000000d00), 0x2}, {0x0, &(0x7f0000000d40), 0x2}, {0x286d, &(0x7f0000000d80)=0x8000, 0x2}, {0x6, &(0x7f0000000dc0)=0x80, 0x2}, {0x8, &(0x7f0000000e00)=0x800, 0x2}, {0x0, &(0x7f0000000e40)=0x4, 0x2}, {0x1, &(0x7f0000000e80)=0x9, 0x82}, {0x7fffffff, 0x0, 0x82}, {0x7, &(0x7f0000000f00)=0xc92, 0x82}, {0xa, &(0x7f0000000f40)=0x8000000000000001}, {0x0, &(0x7f0000000f80)=0x1a6, 0x2}, {0x9, &(0x7f0000000fc0), 0x2}, {0x4dd3, &(0x7f0000001000)=0x7, 0x2}, {0x10000, &(0x7f0000001040)=0x80, 0x82}, {0x4, &(0x7f0000001080)=0x9, 0x2}, {0x8, &(0x7f00000010c0)=0xe2, 0x80}, {0x638a, &(0x7f0000001100)=0xc3c, 0x82}, {0x7, &(0x7f0000001140)=0x92, 0x82}, {0x0, &(0x7f0000001180)=0x9, 0x2}, {0xffff, 0x0, 0x2}, {0x8, &(0x7f0000001200)=0x6, 0x2}, {0x8, &(0x7f0000001240), 0x82}, {0xf, &(0x7f0000001280)=0xffffffffffffffff, 0x2}, {0x7, &(0x7f00000012c0)=0xb7, 0x82}, {0x8000, &(0x7f0000001300)=0x7, 0x82}, {0x1bd8, &(0x7f0000001340)=0x25e, 0x2}, {0x1000, &(0x7f0000001380)=0x5, 0x2}, {0x800, &(0x7f00000013c0)=0x7}, {0x2, &(0x7f0000001400)=0x2, 0x82}, {0x3ff, &(0x7f0000001440)=0x8, 0x82}, {0x3, &(0x7f0000001480)=0x8, 0x2}, {0x3, &(0x7f00000014c0)=0x8, 0x82}, {0x3, &(0x7f0000001500)=0xca, 0x2}, {0x10000, &(0x7f0000001540)=0x3, 0x82}, {0xfffffffffffffffb, &(0x7f0000001580)=0x100000000, 0x82}, {0x2, &(0x7f00000015c0)=0x80000000, 0x2}, {0x4, &(0x7f0000001600)=0x4, 0x82}, {0x7fffffffffffffff, &(0x7f0000001640)=0x3, 0x82}, {0x100000001, &(0x7f0000001680)=0x3, 0x82}, {0x5, &(0x7f00000016c0)=0xb7, 0x82}, {0x8, &(0x7f0000001700)=0x2, 0x2}, {0xd, &(0x7f0000001780)=0xe, 0x2}, {0x1, &(0x7f00000017c0)=0x2, 0x2}, {0x0, &(0x7f0000001800)=0x10000, 0x2}, {0x0, &(0x7f0000001840)=0x800, 0x82}, {0x100000001, &(0x7f0000001880)=0x400, 0x2}], 0x3d, 0x0, &(0x7f0000001ec0)={0x0, 0x989680}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000003280)={0x6, 'macvlan0\x00', {0x4}, 0xd26e}) open$dir(&(0x7f0000003540)='./file0\x00', 0x501400, 0x1a8) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) 1m14.822483111s ago: executing program 4 (id=118): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) 1m14.802726692s ago: executing program 32 (id=118): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) 11.831887034s ago: executing program 2 (id=1526): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r3 = epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[], 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="11"], 0x11) 11.676060883s ago: executing program 2 (id=1528): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d410a8b089b3f36356d030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a5e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c1071231cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94c8598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00", 0x1000}}, 0x1006) syz_io_uring_setup(0x102, &(0x7f0000000380)={0x0, 0x2d48, 0x10000, 0x3, 0x2000089}, &(0x7f0000000500), &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x20002, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x3, 0x0, {@ip4=@dev={0xac, 0x14, 0x14, 0x1a}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) 11.314305914s ago: executing program 2 (id=1532): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) 11.279285767s ago: executing program 2 (id=1533): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x250043, &(0x7f00000000c0)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}, 0x4, 0xbbf, &(0x7f0000000bc0)="$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") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000540)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x4, 0x279, &(0x7f0000000380)="$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") sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYBLOB="000008006199387d5848ed0cfc3d9c9308010f", @ANYRES16=0x0, @ANYBLOB="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"], 0x5fc}, 0x1, 0x0, 0x0, 0x180c5}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x45, 0x0, 0x3, 0x3}, 0x10) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x80000001, 0x4) ftruncate(r3, 0x81ff) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000680)='.\'}\x00', &(0x7f00000006c0)='\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) 10.972764683s ago: executing program 2 (id=1543): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) 10.668961021s ago: executing program 2 (id=1552): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x12000000, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0x7ffffff7}}], 0x1, 0x0) 10.659373862s ago: executing program 33 (id=1552): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x12000000, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0x7ffffff7}}], 0x1, 0x0) 3.719803338s ago: executing program 6 (id=1657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040040}, 0x5) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x507b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xc11, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) tkill(0x0, 0xb) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) setpgid(r1, r1) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) 2.778043331s ago: executing program 6 (id=1681): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x43d, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000054) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@fragment={0x8, 0x0, 0x95, 0x1, 0x0, 0x7, 0x65}, 0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getpid() setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r6, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.213430124s ago: executing program 3 (id=1698): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x48800) 1.877772943s ago: executing program 6 (id=1699): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x3fff8000}, 0x0, 0x2f, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x103440) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x41015500, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = syz_io_uring_setup(0xec2, &(0x7f00000003c0)={0x0, 0x81d8, 0x100, 0x9}, &(0x7f0000000580)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x95d, 0xfa39, 0xe1, 0x0, 0x0) io_uring_enter(r3, 0xedd, 0x8acb, 0x41, 0x0, 0x0) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x14, 0x7, 0x1, 0x6bfc, 0x40, 0x72, 0xce, 0x3, 0xf9, 0xe7, 0xe, 0x1, 0x8, 0xff, 0x0, 0x7fff, [0x7ff, 0x2]}}) io_uring_enter(r3, 0x46a4, 0xf441, 0x48, &(0x7f0000000140)={[0x6]}, 0x8) accept4$unix(r0, 0x0, 0x0, 0x80800) 1.649772766s ago: executing program 0 (id=1704): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) clock_getres(0x3, &(0x7f0000000100)) 1.598277048s ago: executing program 0 (id=1705): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000006000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 1.411694329s ago: executing program 0 (id=1706): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000073112e00000000008510000002000000850000000500000095ff0000000000009500a50500000000e4e6758787eb"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000073112e00000000008510000002000000850000000500000095ff0000000000009500a50500000000e4e6758787eb"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) (async) 1.325443304s ago: executing program 0 (id=1707): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x250043, &(0x7f00000000c0)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}, 0x4, 0xbbf, &(0x7f0000000bc0)="$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") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000540)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x4, 0x279, &(0x7f0000000380)="$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") sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYBLOB="000008006199387d5848ed0cfc3d9c9308010f", @ANYRES16=0x0, @ANYBLOB="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"], 0x5fc}, 0x1, 0x0, 0x0, 0x180c5}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x45, 0x0, 0x3, 0x3}, 0x10) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x80000001, 0x4) ftruncate(r3, 0x81ff) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000680)='.\'}\x00', &(0x7f00000006c0)='\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) 1.226991229s ago: executing program 0 (id=1708): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0x11, 0x148, 0x318, 0x0, 0x428, 0x2a8, 0x2a8, 0x428, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2d0, 0x318, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x0, 0xc}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev, @remote, 0x0, 0x28}}) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000940)={'nat\x00', 0x0, 0x0, 0x0, [0x100, 0x0, 0xd, 0x10, 0x292, 0x9d0], 0x6, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x3e, 0x1, {0x0, 0x7, 0x1ff, 0x9, 0x3, 0x2, 0x97a, 0x7, 0x6f}}}}, @TCA_RATE={0x0, 0x5, {0x4, 0x2}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x3b, 0x6c, 0x9, 0x3, 0x1, 0xffffff07, 0x8}}, {0x0, 0x2, [0xff, 0x4]}}, {{0x0, 0x1, {0x4, 0x7, 0x800, 0x6, 0x1, 0x7adadaaa, 0x6a}}, {0x0, 0x2, [0xc, 0x81, 0x6, 0x8]}}, {{0x0, 0x1, {0x8, 0x5, 0x4000, 0xffffffff, 0x2, 0x82, 0xc}}, {0x0, 0x2, [0x1, 0xc, 0x5, 0xbaf]}}, {{0x0, 0x1, {0xc6, 0xf, 0x2, 0xbc, 0x1, 0xffffffc0, 0x1}}, {0x0, 0x2, [0xaf, 0xb, 0x4, 0xae5a, 0xd185, 0xfa, 0x0, 0xdf, 0xb69]}}]}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x3, 0x8, 0xa0, 0x400, 0x1, 0x2, 0x1}}, {0x0, 0x2, [0x0, 0x3ff]}}, {{0x0, 0x1, {0x4, 0xf8, 0x4, 0x2, 0x2, 0x4, 0x9}}, {0x0, 0x2, [0x0, 0xfffd, 0x3]}}, {{0x0, 0x1, {0x3, 0x81, 0x8, 0x3, 0x2, 0x8e3, 0xffffff3c}}, {0x0, 0x2, [0x5, 0x6]}}, {{0x0, 0x1, {0x5, 0x0, 0x4, 0xe5c0, 0x0, 0x40, 0x3}}, {0x0, 0x2, [0x5, 0xa, 0x9158, 0x6]}}, {{0x0, 0x1, {0x3, 0x2, 0x8, 0x8, 0x0, 0x5, 0x3}}, {0x0, 0x2, [0x4]}}, {{0x0, 0x1, {0x9, 0x3, 0x8, 0x3, 0x0, 0x4, 0x5}}, {0x0, 0x2, [0x9f94, 0x9, 0x9, 0x6]}}, {{0x0, 0x1, {0xf0, 0x3, 0x8, 0x78, 0x2, 0x0, 0x400}}, {0x0, 0x2, [0xff, 0x0, 0x8, 0x200, 0x6]}}, {{0x0, 0x1, {0x3, 0x91, 0x200, 0x77, 0x1, 0x4, 0x2}}, {0x0, 0x2, [0x1000]}}, {{0x0, 0x1, {0x10, 0xff, 0x4, 0x400000, 0x0, 0x4, 0x6}}, {0x0, 0x2, [0x7, 0x7f]}}]}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x40000000}]}, 0x58}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.200155262s ago: executing program 3 (id=1709): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="7a42d635ca99634b74073af14b0bbdbb0bfeb471ba64e64edce5affca235bec8d9c3df4311a881c83bc2abb3973e1e71a7216366b5ad00ec9bcffc823bf26f6a47e42b1849f8ceba5838018e462e972e926cdb9e5b09ef673446591534ce113248885fc0a8c8692c274da893fdd1efe24db53e91cfc68f4e949fb823abeb796daf30bcd015e51ca63bc1a84a889361a9161b1f81e6971ce8f781080cfc626d7b49cb5a1fbede0839f22120d3a35eb232e221c6b62e3030d03c0bb0febfdb527f287f6793ebd2a0490cbf05c2583bfdc0c5", @ANYBLOB="6d07abdcd8", @ANYBLOB="bec8da8f059c0c89acf3fd261ff3cbfb7918e7fcebfed85ef79a381d78cddecd3077c8", @ANYRES8=r1, @ANYRESHEX=r1], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x182, 0xfffc, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES8=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="010101007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.109858316s ago: executing program 5 (id=1710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) close(r7) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 781.507885ms ago: executing program 6 (id=1714): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$inet6(0xa, 0x80002, 0x0) unlink(0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0xb7fc}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x68d5}]}}]}, 0x40}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000004000000040000000a"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r3, &(0x7f0000000240)="716c62659f"}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={&(0x7f00000000c0), 0xf}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x7, 0x3, 0x0, 0xfffffffd, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x1, 0x0, 0x4, 0x3}}, 0x2e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) futex(&(0x7f000000cffc)=0x1, 0xa, 0x2, 0x0, 0x0, 0xfffffffc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0xe, 0x10010, r8, 0x8000) 780.698535ms ago: executing program 5 (id=1715): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x7021, 0x4005, 0xa, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22159, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) 666.785322ms ago: executing program 1 (id=1716): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x9) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e008000000008", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 634.073504ms ago: executing program 5 (id=1717): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r1, 0x0, 0x20000801) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x30, r0, 0x21, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x800) 633.426573ms ago: executing program 1 (id=1718): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4d, 0x4d, 0x3, [@datasec={0x9, 0x4, 0x0, 0xf, 0x1, [{0x1, 0x5, 0xf}, {0x2, 0x8, 0x2}, {0x4, 0x3, 0xe}, {0x5, 0x4}], '`'}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x21, 0x0, 0x2e, 0x5}]}, {0x0, [0x30]}}, &(0x7f0000000240)=""/132, 0x6b, 0x84, 0x0, 0x2}, 0x28) r2 = perf_event_open(&(0x7f0000000fc0)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffffff9, 0x8}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/resume_offset', 0x242, 0x145) write$selinux_user(r4, &(0x7f0000001180)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x25) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90224fc602f00000008000300feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 610.014515ms ago: executing program 5 (id=1719): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x250043, &(0x7f00000000c0)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}, 0x4, 0xbbf, &(0x7f0000000bc0)="$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") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000540)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x4, 0x279, &(0x7f0000000380)="$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") sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYBLOB="000008006199387d5848ed0cfc3d9c9308010f", @ANYRES16=0x0, @ANYBLOB="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"], 0x5fc}, 0x1, 0x0, 0x0, 0x180c5}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x45, 0x0, 0x3, 0x3}, 0x10) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x80000001, 0x4) ftruncate(r3, 0x81ff) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000680)='.\'}\x00', &(0x7f00000006c0)='\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$rds(0x15, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) 493.754082ms ago: executing program 1 (id=1720): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x2f4, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x20, 0x2f, 0x0, @empty, @empty}}}}) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x200) r2 = syz_open_dev$usbmon(&(0x7f0000000740), 0x0, 0x20402) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000400)={0x30, r4, 0x1, 0x70b92c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x0, 0x2c, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xfffffc7e, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20040980) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r1, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5ebce9ac, 0x1}}, './file0\x00'}) dup3(r1, r2, 0x80000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x40043) syz_emit_ethernet(0x5a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x10, {[@sack_perm={0x4, 0x2}, @mptcp=@capable={0x1e, 0xc, 0xd, 0x8, 0x2, 0x3}]}}}}}}}}, 0x0) 490.968782ms ago: executing program 5 (id=1721): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = semget$private(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000400000001000084010000000a0000000200000006000000000000000000000105000000200000000a0000000000000e02000000000000000061002e2e61610061005f"], 0x0, 0x5c, 0x0, 0x0, 0x80}, 0x28) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) r5 = semget(0x2, 0x3, 0x200) semop(r5, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="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", 0x5b2}], 0x1}, 0x400c000) sendmsg$sock(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) semtimedop(r5, &(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f00000007c0)=[{r2, 0x4100}, {r2, 0x2009}], 0x2, 0x0, 0x0, 0x0) close(r1) r8 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000100)={0xc4, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x11, 0x2}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x47, 0x0, &(0x7f0000000e00)="82a7aa972a55b403d81ca71327e825b2438c61557bb2ebcc6d3b0abf56e113b06a39d46cdf2a1ad575ac2c4f5beae59139be97a3cfc40be56d7e51a46de5531c64591cb7a290b3", 0x0, 0xcfe, 0x0, 0x0, 0x36, 0x0, 0x0, 0x2, 0x1100, 0xfffffffe}, 0x50) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000340)={0x5, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @empty}}}, 0x108) 487.532212ms ago: executing program 1 (id=1722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x5}, 0x0, 0x10000, 0x8, 0xe9cf891527523525, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x10000000000001f7, 0x0) write$tun(r2, &(0x7f0000000380)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e21, 0x20, 0x41424344, 0x41424344, 0x0, 0x5, 0x7, 0x0, 0x5, 0x0, 0x18, {[@window={0x9, 0x3}, @sack={0x5, 0x2}]}}}}}}, 0x3e) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'netdevsim0\x00', {0x4}, 0x9}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)={0xbc, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xae4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd9e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000841}, 0x24000084) 386.982538ms ago: executing program 6 (id=1723): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000000c0)={0x60000002}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000002440)={0x2000201e}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'rose0\x00', {0x800}, 0x65f0}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea560a20f3d74eee2c64e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f85", 0xe9}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81", 0x74}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451f9025c4e153612d4674b9411fb4de", 0x8c}, {&(0x7f00000005c0)="8d684aa45f4b69499d4f7f3c8df53c55d05558d633eb828c28281f114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023d", 0x38}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") statx(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4000, 0x1f842f947b598ea3, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 309.749262ms ago: executing program 1 (id=1724): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xa, 0x4, 0x208, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0xff, 0x4b4, &(0x7f0000000c80)="$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") setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000680)='g', 0x1, 0x841, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)='+', 0x1}], 0x1}}], 0x1, 0x4000045) 309.447912ms ago: executing program 1 (id=1725): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x17, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfd, 0x0, 0x0, 0xfffffffe, 0x3}}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000040)={'bridge_slave_0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') readv(r7, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000500)={r6, @in6={{0xa, 0x4e21, 0x4, @local}}, [0xfd, 0x0, 0x9, 0x3ff, 0x2, 0x1be, 0x7, 0x148ed8cb, 0x101, 0xa23, 0x9, 0x4, 0x6b8d, 0x7, 0x3]}, &(0x7f00000002c0)=0x100) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000016c0)="426b81e8a30452b9", 0x8}, {0x0}], 0x2}}], 0x1, 0x80) syz_emit_ethernet(0x3a, &(0x7f0000001980)={@local, @random='\x00@\x00', @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @rand_addr=0x64010101, @loopback}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1}}}}}}, 0x0) 281.144554ms ago: executing program 3 (id=1726): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) write$bt_hci(r1, &(0x7f0000000140)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0xff}}}, 0x5) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x36, 0x2, 0x0, 0x0, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8094}, 0x4000000) sendmmsg(r1, &(0x7f0000000180), 0x0, 0x4042011) 259.265195ms ago: executing program 5 (id=1727): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0xd7, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 230.736656ms ago: executing program 34 (id=1727): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0xd7, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 176.074289ms ago: executing program 3 (id=1729): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x20800f00, 0x0, 0x0, 0x0, 0x0, 0x0) 137.281432ms ago: executing program 3 (id=1730): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x2, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffc3, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) 114.987283ms ago: executing program 6 (id=1731): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x250043, &(0x7f00000000c0)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}, 0x4, 0xbbf, &(0x7f0000000bc0)="$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") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000540)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="00631dda01aef2b0bad477a11d13ec0c19456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d24c60c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e9000001001d0149e6d308cbe315789f4baffe39bbced9b1d4db174c6121d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac10222664bbc980b4e99027c53ae2c6cc05d3be246e5837cbf286225d43e8c1d2e3fda86b86906b79fdedae7f3bbe362e8ad7f2b370442013de1788be93a3d553c2e1f5b559393d964df51bf393f52ecbe6f832b222231fbb9fee9e0343c2d3d567f7cff6d0b25303bcbcc99c879d3bc"], 0x4, 0x279, &(0x7f0000000380)="$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") sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYBLOB="000008006199387d5848ed0cfc3d9c9308010f", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250e000000e6050e0080180c00080211000001080211000001872a71df559a7c1009000000000000000b00100003010d0406050205005b00058e808d05c916f9e7f99401feaad9ed589da2b81185e301374628d608f2abc5f458aa8bcc53f401511cb186e4c3c3e95620b57320e56d30a9e5658b13e85b7f89d70351c2c6af4db7d50f9039606dde02d779fef3d75a086322cd05267619b73652a6289fa2271b0e548f0d15a0440f332f439a5f7a30a1a7ce7f32221f1306a1b3da9f0ba891b701c263ef7c0370e22d1a20000c020000000000000002000000060000000100da000000b17206030303030303760603063900ba0ddd4db30fc0bb47d68f7a95c03ca6adedcbb7294061fac5297053baa596ad5a11a8c238bfe71a96c3285ba59fa8fe28b5690533291c57bc613ca155661439d40d730fe722df6da865e46911521f87d4dd7f322825e2d005d598b07fd2e8a66adb84581b91c5e453a1e06102d1696b1665f40568bd2f7d59fb9c3f07626361c117eda3e29b68d2a446bf0431e982c2d6e4ffbf23eaeed904609d59af0299a80dc4da61166cfaf4b49867c6ec285ad87e0cb392df3aedacc4d9e49e45c10fec2e9472e9ecf7a606b78937277836446afe56dddc663fdf26dd57e8b7100d673cc99dd089a4e59da1f19e8b719ab2e1b34c19ba01fc4bf19fdfb4415089d9483cb0bb8d902f00f996d2414bb8493e3375ddb121edd285a366b50751e0db1d8034df278305f8ebfc436a0e9902112a974a41bd07dc42cafcad1b4472e0d049641ab914676659f98e7b1f352d9fbb5342fa7b00faacd70b30a6b1eac015e90dafb6a816968d364043a4cfeb91977867eaa514b471b1b9337df6d984e19948f940730910b9fac068ba49acf09d902414ea4684dbd7f90351dbf289b3efad164f0ed5be407f48faed3f9bca0fea1184122ae2dddc63ede6f8e78cf3702a0ef660fef5256ac831e1164b670100ad99501d02cfd8811d1c3b406532bad9cf47b6778c1e6a09b49441dfeacf6e0fe97a74fce3403a7f315ecea34035791ebaadde9e1b47782541671b28b320c26ea5229f876838f6c040195859ec0a1318e5a3444cf8bab67c71b979d3d039b9a3910794281cf4a15dc793943b040437e725dd5eea6975072231ccd4bb5be3e8985cf2469823f9193e4920d9c7dfc35920e5a8bf509e822f0fbb681ee2c02147aafcbc97fb7b6ed157f887fc69b3f789912845d27892674c7359cb50f6a6517f248a9771afddd13ad6517dc9f7eb0256b2c9f8215d566cfdb767abb6c05b9a060e35ea674c20f169a52bcbf315347b8ebdfa2b7c0667c64d4929d23a9ac7eef641947a0cc5f2fa8d28f8af3a12e8a6086311fb1235ef72bb1d85eedf872436ebc351098c5c8cdd8df4a36d453f87281e11832381c1bea150ec2c52833ca8fc664715855cabced957602f13df0298be072fb50fcd1bda22e3b8e61f0fe324328c4f2a0d43a2fccd96e2b1989fb0272170b49f6ed1f2b9c42b01ad30362ca28fa882d7be12368330081e7dbe749a10253822353a8348df87aadd107099210f126923dc342e50a41ce2400cddbf7328851a3dcbdaa2f1d64fe4833fd4c2918ca252dc1dba506f29b623c8fe12eac45ff5d3fb8c69bee0a393d0dff8e92d19a112060bf39d5e5019d5c3975268aa1cb0f01ce4a10f63b77ea0e56e6fc200c5120724e4d090bad977067da6c8131fa9873e3bd4ee16d6acf54e90b3f8e70386362c77fb429710c76cbe6f60e0683b14e4011260de4b9d0b2687e2e308104e7239a323ad06eef377053ed225390f301827743d758451d039a18942455f4704996ca080d3119cf45c40fff3278441ddc3d305a19a610c06822b2390836e1f360beb289c52112c39f689d050706ca6c149556076da59afa9716f3aa672945c7ecb5bc1bca2bb3f9fc7c3c5a3067bad3af5b5ad70d4eee4cc15d65b14dcbe506b052f1a4359c07bffb969e41f88430ba9b769013d4693c172a1f58bde23e2fa8320513b6b1f8682fc29c46d98bfbc424dfe4ad157aa76cc6e0b81f3a55874af54186d87175f10e1baaf059c4f22674c91ee57da9d7638dd2e324356734d1a9343331eafeb7e6753108346cb59aae4e95a390025990000"], 0x5fc}, 0x1, 0x0, 0x0, 0x180c5}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x45, 0x0, 0x3, 0x3}, 0x10) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x80000001, 0x4) ftruncate(r3, 0x81ff) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000680)='.\'}\x00', &(0x7f00000006c0)='\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$rds(0x15, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) 91.263825ms ago: executing program 0 (id=1732): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x2f4, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x20, 0x2f, 0x0, @empty, @empty}}}}) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x200) r2 = syz_open_dev$usbmon(&(0x7f0000000740), 0x0, 0x20402) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000400)={0x30, r4, 0x1, 0x70b92c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x0, 0x2c, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xfffffc7e, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20040980) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r1, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5ebce9ac, 0x1}}, './file0\x00'}) dup3(r1, r2, 0x80000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x40043) syz_emit_ethernet(0x5a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x10, {[@sack_perm={0x4, 0x2}, @mptcp=@capable={0x1e, 0xc, 0xd, 0x8, 0x2, 0x3}]}}}}}}}}, 0x0) 60.422466ms ago: executing program 35 (id=1732): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x2f4, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x20, 0x2f, 0x0, @empty, @empty}}}}) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x200) r2 = syz_open_dev$usbmon(&(0x7f0000000740), 0x0, 0x20402) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000400)={0x30, r4, 0x1, 0x70b92c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x0, 0x2c, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xfffffc7e, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20040980) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r1, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5ebce9ac, 0x1}}, './file0\x00'}) dup3(r1, r2, 0x80000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x40043) syz_emit_ethernet(0x5a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x10, {[@sack_perm={0x4, 0x2}, @mptcp=@capable={0x1e, 0xc, 0xd, 0x8, 0x2, 0x3}]}}}}}}}}, 0x0) 0s ago: executing program 3 (id=1734): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): e #16: comm syz.2.770: mark_inode_dirty error [ 78.081153][ T5776] syzkaller0: entered promiscuous mode [ 78.086667][ T5776] syzkaller0: entered allmulticast mode [ 78.098414][ T5776] tipc: Enabled bearer , priority 0 [ 78.109527][ T5766] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.770: corrupted inode contents [ 78.130375][ T5775] tipc: Resetting bearer [ 78.139443][ T5775] tipc: Disabling bearer [ 78.162790][ T5766] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.770: mark_inode_dirty error [ 78.209173][ T5784] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.769: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 78.227414][ T5766] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.770: corrupted inode contents [ 78.247653][ T5766] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 78.264420][ T5766] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.770: corrupted inode contents [ 78.276859][ T5766] EXT4-fs error (device loop2): ext4_truncate:4635: inode #16: comm syz.2.770: mark_inode_dirty error [ 78.279253][ T5788] syzkaller0: entered promiscuous mode [ 78.293841][ T5788] syzkaller0: entered allmulticast mode [ 78.300147][ T5766] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 78.309443][ T5762] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 78.317471][ T5766] EXT4-fs (loop2): 1 truncate cleaned up [ 78.335229][ T5766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.348070][ T5474] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 1 [ 78.364703][ T5766] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.379588][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.515165][ T5800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 78.524343][ T5800] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 78.662463][ T5816] syzkaller0: entered promiscuous mode [ 78.668084][ T5816] syzkaller0: entered allmulticast mode [ 78.830050][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.901569][ T5846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.804'. [ 78.910677][ T5846] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 79.152356][ T5868] syzkaller0: entered promiscuous mode [ 79.157952][ T5868] syzkaller0: entered allmulticast mode [ 79.208678][ T5876] set_capacity_and_notify: 3 callbacks suppressed [ 79.208698][ T5876] loop5: detected capacity change from 0 to 2048 [ 79.262693][ T5876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.526713][ T5910] EXT4-fs error (device loop5): ext4_ext_precache:632: inode #2: comm syz.5.811: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 79.552416][ T5876] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 79.591122][ T5914] syzkaller0: entered promiscuous mode [ 79.596820][ T5914] syzkaller0: entered allmulticast mode [ 80.019511][ T5956] syzkaller0: entered promiscuous mode [ 80.025052][ T5956] syzkaller0: entered allmulticast mode [ 80.060593][ T5956] tipc: Enabling of bearer rejected, failed to enable media [ 80.095940][ T3810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.416535][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.858'. [ 80.425509][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.858'. [ 80.437907][ T5983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.494984][ T5989] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 80.503805][ T5989] syzkaller0: entered promiscuous mode [ 80.509484][ T5989] syzkaller0: entered allmulticast mode [ 80.523430][ T5990] loop0: detected capacity change from 0 to 2048 [ 80.561795][ T5990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.637861][ T5994] syzkaller0: entered promiscuous mode [ 80.643503][ T5994] syzkaller0: entered allmulticast mode [ 80.670548][ T5994] tipc: Enabling of bearer rejected, failed to enable media [ 80.748960][ T5995] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.860: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 80.790833][ T5990] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 80.917238][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.962663][ T6001] syzkaller0: entered promiscuous mode [ 80.968316][ T6001] syzkaller0: entered allmulticast mode [ 80.980606][ T6003] syzkaller0: entered promiscuous mode [ 80.986141][ T6003] syzkaller0: entered allmulticast mode [ 81.006664][ T6003] tipc: Enabling of bearer rejected, failed to enable media [ 81.140590][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'. [ 81.152688][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 81.209486][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.878'. [ 81.226703][ T6029] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 81.243634][ T6030] loop1: detected capacity change from 0 to 512 [ 81.256460][ T6026] loop0: detected capacity change from 0 to 2048 [ 81.285729][ T6026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.301762][ T6030] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.877: corrupted inode contents [ 81.349244][ T6030] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.877: mark_inode_dirty error [ 81.361778][ T6044] syzkaller0: entered promiscuous mode [ 81.367306][ T6044] syzkaller0: entered allmulticast mode [ 81.383357][ T6030] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.877: corrupted inode contents [ 81.412956][ T6030] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.877: mark_inode_dirty error [ 81.438573][ T6030] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.877: corrupted inode contents [ 81.477270][ T6030] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 81.520830][ T6030] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.877: corrupted inode contents [ 81.559711][ T6030] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.877: mark_inode_dirty error [ 81.608340][ T6058] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.876: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 81.608393][ T6030] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 81.698816][ T6030] EXT4-fs (loop1): 1 truncate cleaned up [ 81.718633][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 81.734518][ T6030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.756948][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 81.786350][ T6030] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.808298][ T6030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.912683][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.996921][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 81.996943][ T29] audit: type=1326 audit(1770580566.857:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6027 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f39eaeb9 code=0x7ffc0000 [ 82.026671][ T29] audit: type=1326 audit(1770580566.877:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6027 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f39eaeb9 code=0x7ffc0000 [ 82.050173][ T29] audit: type=1326 audit(1770580566.877:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6027 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14f39eaeb9 code=0x7ffc0000 [ 82.073588][ T29] audit: type=1326 audit(1770580566.877:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6027 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f39eaeb9 code=0x7ffc0000 [ 82.097061][ T29] audit: type=1326 audit(1770580566.877:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6027 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f39eaeb9 code=0x7ffc0000 [ 82.137104][ T6070] loop2: detected capacity change from 0 to 4096 [ 82.191937][ T6075] syzkaller0: entered promiscuous mode [ 82.197487][ T6075] syzkaller0: entered allmulticast mode [ 82.203768][ T6076] loop1: detected capacity change from 0 to 512 [ 82.221254][ T6076] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 82.276130][ T6070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.308239][ T6076] EXT4-fs (loop1): orphan cleanup on readonly fs [ 82.335383][ T6076] EXT4-fs error (device loop1): __ext4_iget:5426: inode #11: block 8: comm syz.1.895: invalid block [ 82.392173][ T6076] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.895: couldn't read orphan inode 11 (err -117) [ 82.438663][ T6076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 82.481991][ T6076] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 82.491424][ T29] audit: type=1400 audit(1770580567.427:1504): avc: denied { remount } for pid=6074 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.520354][ T6070] netlink: 80 bytes leftover after parsing attributes in process `syz.2.893'. [ 82.831310][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.859286][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.150311][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 83.175979][ T6109] loop1: detected capacity change from 0 to 2048 [ 83.215702][ T6111] syzkaller0: entered promiscuous mode [ 83.221447][ T6111] syzkaller0: entered allmulticast mode [ 83.248966][ T6109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.555627][ T6123] loop2: detected capacity change from 0 to 4096 [ 83.591164][ T6123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.644454][ T6135] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.904: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 83.752061][ T29] audit: type=1326 audit(1770580568.697:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6141 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f6aaeb9 code=0x7ffc0000 [ 83.752433][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'. [ 83.775624][ T29] audit: type=1326 audit(1770580568.697:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6141 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f6aaeb9 code=0x7ffc0000 [ 83.775668][ T29] audit: type=1326 audit(1770580568.697:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6141 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb60f6aaeb9 code=0x7ffc0000 [ 83.775701][ T29] audit: type=1326 audit(1770580568.697:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6141 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f6aaeb9 code=0x7ffc0000 [ 83.879559][ T6147] FAULT_INJECTION: forcing a failure. [ 83.879559][ T6147] name failslab, interval 1, probability 0, space 0, times 0 [ 83.892366][ T6147] CPU: 0 UID: 0 PID: 6147 Comm: syz.5.920 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.892448][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 83.892524][ T6147] Call Trace: [ 83.892531][ T6147] [ 83.892541][ T6147] __dump_stack+0x1d/0x30 [ 83.892570][ T6147] dump_stack_lvl+0x95/0xd0 [ 83.892592][ T6147] dump_stack+0x15/0x1b [ 83.892612][ T6147] should_fail_ex+0x263/0x280 [ 83.892661][ T6147] should_failslab+0x8c/0xb0 [ 83.892692][ T6147] __kmalloc_noprof+0xb8/0x580 [ 83.892731][ T6147] ? bpf_test_init+0x86/0x130 [ 83.892838][ T6147] bpf_test_init+0x86/0x130 [ 83.892879][ T6147] bpf_prog_test_run_xdp+0x306/0xa10 [ 83.892920][ T6147] ? __rcu_read_unlock+0x4e/0x70 [ 83.893031][ T6147] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.893092][ T6147] bpf_prog_test_run+0x204/0x340 [ 83.893133][ T6147] __sys_bpf+0x4c0/0x7b0 [ 83.893177][ T6147] __x64_sys_bpf+0x41/0x50 [ 83.893236][ T6147] x64_sys_call+0x28e1/0x3000 [ 83.893266][ T6147] do_syscall_64+0xc0/0x2a0 [ 83.893306][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.893335][ T6147] RIP: 0033:0x7fb60f6aaeb9 [ 83.893362][ T6147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.893417][ T6147] RSP: 002b:00007fb60e0ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.893444][ T6147] RAX: ffffffffffffffda RBX: 00007fb60f925fa0 RCX: 00007fb60f6aaeb9 [ 83.893463][ T6147] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 83.893478][ T6147] RBP: 00007fb60e0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 83.893491][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.893504][ T6147] R13: 00007fb60f926038 R14: 00007fb60f925fa0 R15: 00007ffee63a1718 [ 83.893554][ T6147] [ 84.099157][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.126452][ T6152] __nla_validate_parse: 1 callbacks suppressed [ 84.126471][ T6152] netlink: 36 bytes leftover after parsing attributes in process `syz.5.924'. [ 84.217318][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.5.926'. [ 84.227412][ T6159] syzkaller0: entered promiscuous mode [ 84.233054][ T6159] syzkaller0: entered allmulticast mode [ 84.245917][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.256528][ T6157] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 84.403619][ T6175] loop2: detected capacity change from 0 to 4096 [ 84.413064][ T6181] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 84.449702][ T6183] syzkaller0: entered promiscuous mode [ 84.455345][ T6183] syzkaller0: entered allmulticast mode [ 84.473016][ T6175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.486751][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 84.577305][ T6175] netlink: 80 bytes leftover after parsing attributes in process `syz.2.932'. [ 84.578798][ T6189] Driver unsupported XDP return value 0 on prog (id 270) dev N/A, expect packet loss! [ 84.643010][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.734199][ T6211] syzkaller0: entered promiscuous mode [ 84.739792][ T6211] syzkaller0: entered allmulticast mode [ 84.750220][ T6211] tipc: Enabled bearer , priority 0 [ 84.764526][ T6211] tipc: Resetting bearer [ 84.783095][ T6210] tipc: Resetting bearer [ 84.796842][ T6210] tipc: Disabling bearer [ 84.808466][ T6217] syzkaller0: entered promiscuous mode [ 84.814066][ T6217] syzkaller0: entered allmulticast mode [ 84.828493][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.951'. [ 84.838047][ T6217] tipc: Enabling of bearer rejected, failed to enable media [ 84.971672][ T6226] loop2: detected capacity change from 0 to 4096 [ 84.996166][ T6226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.025439][ T6235] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 85.076623][ T6226] netlink: 80 bytes leftover after parsing attributes in process `syz.2.954'. [ 85.107027][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.178249][ T6249] loop3: detected capacity change from 0 to 128 [ 85.190911][ T6249] netlink: 'syz.3.963': attribute type 21 has an invalid length. [ 85.222122][ T6249] syz.3.963: attempt to access beyond end of device [ 85.222122][ T6249] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 85.244106][ T6253] syzkaller0: entered promiscuous mode [ 85.249839][ T6253] syzkaller0: entered allmulticast mode [ 85.253911][ T6249] syz.3.963: attempt to access beyond end of device [ 85.253911][ T6249] loop3: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 85.262387][ T6253] tipc: Enabled bearer , priority 0 [ 85.274403][ T6249] syz.3.963: attempt to access beyond end of device [ 85.274403][ T6249] loop3: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 85.275808][ T6254] capability: warning: `syz.3.963' uses deprecated v2 capabilities in a way that may be insecure [ 85.289243][ T6249] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 85.293473][ T6249] syz.3.963: attempt to access beyond end of device [ 85.293473][ T6249] loop3: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 85.306728][ T6253] tipc: Resetting bearer [ 85.328494][ T6249] syz.3.963: attempt to access beyond end of device [ 85.328494][ T6249] loop3: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 85.342195][ T6249] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 85.351639][ T6249] syz.3.963: attempt to access beyond end of device [ 85.351639][ T6249] loop3: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 85.352006][ T6252] tipc: Resetting bearer [ 85.370942][ T6249] syz.3.963: attempt to access beyond end of device [ 85.370942][ T6249] loop3: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 85.370997][ T6249] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 85.372779][ T6249] syz.3.963: attempt to access beyond end of device [ 85.372779][ T6249] loop3: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 85.394157][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.963'. [ 85.417165][ T6252] tipc: Disabling bearer [ 85.424801][ T6249] syz.3.963: attempt to access beyond end of device [ 85.424801][ T6249] loop3: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 85.438697][ T6249] Buffer I/O error on dev loop3, logical block 104, lost async page write [ 85.447728][ T6249] syz.3.963: attempt to access beyond end of device [ 85.447728][ T6249] loop3: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 85.463555][ T6249] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 85.473989][ T6249] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 85.504945][ T6249] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 85.520495][ T6249] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 85.537663][ T6259] syzkaller0: entered promiscuous mode [ 85.540282][ T6249] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 85.543558][ T6259] syzkaller0: entered allmulticast mode [ 85.556269][ T6249] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 85.569349][ T6259] tipc: Enabling of bearer rejected, failed to enable media [ 85.664444][ T6269] loop2: detected capacity change from 0 to 4096 [ 85.677180][ T6269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.760989][ T6269] netlink: 80 bytes leftover after parsing attributes in process `syz.2.971'. [ 85.788408][ T6275] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 85.811145][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.888617][ T6284] syz.2.974 uses obsolete (PF_INET,SOCK_PACKET) [ 85.943480][ T6290] syzkaller0: entered promiscuous mode [ 85.949071][ T6290] syzkaller0: entered allmulticast mode [ 85.982223][ T6290] tipc: Enabled bearer , priority 0 [ 86.011478][ T6290] tipc: Resetting bearer [ 86.018020][ T6297] syzkaller0: entered promiscuous mode [ 86.023657][ T6297] syzkaller0: entered allmulticast mode [ 86.032181][ T6287] tipc: Resetting bearer [ 86.060212][ T6287] tipc: Disabling bearer [ 86.085259][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'. [ 86.094605][ T6306] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 86.187792][ T6314] loop0: detected capacity change from 0 to 2048 [ 86.210860][ T6314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.384496][ T6330] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.990: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 86.627630][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.644547][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'. [ 86.663396][ T6350] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 86.754710][ T6359] loop3: detected capacity change from 0 to 1024 [ 86.781769][ T6359] EXT4-fs: Ignoring removed nobh option [ 86.828401][ T6359] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.860891][ T6359] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 86.874572][ T6369] netlink: 'syz.1.1011': attribute type 39 has an invalid length. [ 86.879863][ T6370] FAULT_INJECTION: forcing a failure. [ 86.879863][ T6370] name failslab, interval 1, probability 0, space 0, times 0 [ 86.883575][ T6368] netlink: 'syz.1.1011': attribute type 39 has an invalid length. [ 86.895130][ T6370] CPU: 1 UID: 0 PID: 6370 Comm: syz.5.1012 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.895164][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 86.895181][ T6370] Call Trace: [ 86.895190][ T6370] [ 86.895234][ T6370] __dump_stack+0x1d/0x30 [ 86.895358][ T6370] dump_stack_lvl+0x95/0xd0 [ 86.895511][ T6370] dump_stack+0x15/0x1b [ 86.895558][ T6370] should_fail_ex+0x263/0x280 [ 86.895740][ T6370] should_failslab+0x8c/0xb0 [ 86.895856][ T6370] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 86.895979][ T6370] ? __alloc_skb+0x2f0/0x4b0 [ 86.896133][ T6370] __alloc_skb+0x2f0/0x4b0 [ 86.896289][ T6370] ? __alloc_skb+0x219/0x4b0 [ 86.896395][ T6370] netlink_alloc_large_skb+0xbf/0xf0 [ 86.896497][ T6370] netlink_sendmsg+0x40c/0x6f0 [ 86.896637][ T6370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.896710][ T6370] ____sys_sendmsg+0x5af/0x600 [ 86.896815][ T6370] ___sys_sendmsg+0x195/0x1e0 [ 86.896924][ T6370] __x64_sys_sendmsg+0xd4/0x160 [ 86.897025][ T6370] x64_sys_call+0x17ba/0x3000 [ 86.897190][ T6370] do_syscall_64+0xc0/0x2a0 [ 86.897366][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.897441][ T6370] RIP: 0033:0x7fb60f6aaeb9 [ 86.897497][ T6370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.897597][ T6370] RSP: 002b:00007fb60e0ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.897717][ T6370] RAX: ffffffffffffffda RBX: 00007fb60f925fa0 RCX: 00007fb60f6aaeb9 [ 86.897773][ T6370] RDX: 0000000020004010 RSI: 0000200000000280 RDI: 0000000000000003 [ 86.897818][ T6370] RBP: 00007fb60e0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 86.897863][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.897907][ T6370] R13: 00007fb60f926038 R14: 00007fb60f925fa0 R15: 00007ffee63a1718 [ 86.897966][ T6370] [ 87.029235][ T6359] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 87.121007][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 87.121026][ T29] audit: type=1326 audit(1770580572.067:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b008db78e code=0x7ffc0000 [ 87.170753][ T29] audit: type=1326 audit(1770580572.107:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b0091ab4b code=0x7ffc0000 [ 87.194325][ T29] audit: type=1326 audit(1770580572.107:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2b008db78e code=0x7ffc0000 [ 87.203913][ T6378] loop5: detected capacity change from 0 to 256 [ 87.217978][ T29] audit: type=1326 audit(1770580572.107:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 87.249078][ T29] audit: type=1326 audit(1770580572.107:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 87.272727][ T29] audit: type=1326 audit(1770580572.117:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 87.296270][ T29] audit: type=1326 audit(1770580572.117:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 87.305019][ T6381] loop0: detected capacity change from 0 to 2048 [ 87.319753][ T29] audit: type=1326 audit(1770580572.117:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 87.351932][ T29] audit: type=1326 audit(1770580572.297:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 87.375450][ T6378] netlink: 'syz.5.1015': attribute type 10 has an invalid length. [ 87.375684][ T29] audit: type=1326 audit(1770580572.297:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 87.434671][ T6378] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 87.458727][ T6381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.598398][ T6381] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.1016: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 87.602578][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1021'. [ 87.688257][ T6399] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 87.979942][ T6426] loop3: detected capacity change from 0 to 2048 [ 88.215544][ T6442] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.1032: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 88.245980][ T6448] FAULT_INJECTION: forcing a failure. [ 88.245980][ T6448] name failslab, interval 1, probability 0, space 0, times 0 [ 88.259453][ T6448] CPU: 1 UID: 0 PID: 6448 Comm: syz.2.1040 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.259507][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 88.259524][ T6448] Call Trace: [ 88.259534][ T6448] [ 88.259616][ T6448] __dump_stack+0x1d/0x30 [ 88.259645][ T6448] dump_stack_lvl+0x95/0xd0 [ 88.259674][ T6448] dump_stack+0x15/0x1b [ 88.259702][ T6448] should_fail_ex+0x263/0x280 [ 88.259804][ T6448] should_failslab+0x8c/0xb0 [ 88.259836][ T6448] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 88.259871][ T6448] ? __alloc_skb+0x2f0/0x4b0 [ 88.259980][ T6448] __alloc_skb+0x2f0/0x4b0 [ 88.260018][ T6448] ? __alloc_skb+0x219/0x4b0 [ 88.260058][ T6448] netlink_alloc_large_skb+0xbf/0xf0 [ 88.260105][ T6448] netlink_sendmsg+0x40c/0x6f0 [ 88.260127][ T6448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.260147][ T6448] ____sys_sendmsg+0x5af/0x600 [ 88.260178][ T6448] ___sys_sendmsg+0x195/0x1e0 [ 88.260222][ T6448] __sys_sendmmsg+0x185/0x320 [ 88.260277][ T6448] __x64_sys_sendmmsg+0x57/0x70 [ 88.260304][ T6448] x64_sys_call+0x1e28/0x3000 [ 88.260330][ T6448] do_syscall_64+0xc0/0x2a0 [ 88.260391][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.260519][ T6448] RIP: 0033:0x7ff2b9c4aeb9 [ 88.260541][ T6448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.260617][ T6448] RSP: 002b:00007ff2b869f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 88.260641][ T6448] RAX: ffffffffffffffda RBX: 00007ff2b9ec5fa0 RCX: 00007ff2b9c4aeb9 [ 88.260660][ T6448] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 88.260684][ T6448] RBP: 00007ff2b869f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.260702][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.260719][ T6448] R13: 00007ff2b9ec6038 R14: 00007ff2b9ec5fa0 R15: 00007fff742d5018 [ 88.260746][ T6448] [ 88.750860][ T6462] loop2: detected capacity change from 0 to 2048 [ 88.886188][ T6474] EXT4-fs: inline encryption not supported [ 88.940945][ T6474] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.008851][ T6479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.286283][ T6494] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.1047: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 89.418850][ T6500] syzkaller0: entered promiscuous mode [ 89.424443][ T6500] syzkaller0: entered allmulticast mode [ 89.446810][ T6500] tipc: Enabled bearer , priority 0 [ 89.465794][ T6500] tipc: Resetting bearer [ 89.473068][ T6507] __nla_validate_parse: 4 callbacks suppressed [ 89.473089][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 89.474366][ T6499] tipc: Resetting bearer [ 89.514294][ T6508] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.1053: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 89.536122][ T6499] tipc: Disabling bearer [ 89.643624][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1064'. [ 89.730799][ T6521] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1067'. [ 89.828347][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 89.974033][ T6541] set_capacity_and_notify: 3 callbacks suppressed [ 89.974055][ T6541] loop3: detected capacity change from 0 to 2048 [ 90.049278][ T6553] netlink: 'syz.1.1080': attribute type 1 has an invalid length. [ 90.079347][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1082'. [ 90.135962][ T6555] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 90.189780][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'. [ 90.199363][ T6567] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.1076: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 90.223958][ T6553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.238168][ T6388] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 90.243211][ T6553] bond1: (slave bond2): making interface the new active one [ 90.310661][ T6553] bond1: (slave bond2): Enslaving as an active interface with an up link [ 90.327771][ T6553] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 90.355373][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1098'. [ 90.355473][ T6553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1080'. [ 90.375218][ T6553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.399373][ T6553] syz.1.1080 (6553) used greatest stack depth: 9296 bytes left [ 90.467916][ T6587] batman_adv: batadv0: Adding interface: dummy0 [ 90.474496][ T6587] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.538403][ T6590] loop3: detected capacity change from 0 to 2048 [ 90.547645][ T6587] batman_adv: batadv0: Interface activated: dummy0 [ 90.828902][ T6616] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.1090: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 90.858393][ T6613] FAULT_INJECTION: forcing a failure. [ 90.858393][ T6613] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 90.871911][ T6613] CPU: 1 UID: 0 PID: 6613 Comm: syz.1.1101 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.871945][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 90.871962][ T6613] Call Trace: [ 90.871971][ T6613] [ 90.872001][ T6613] __dump_stack+0x1d/0x30 [ 90.872031][ T6613] dump_stack_lvl+0x95/0xd0 [ 90.872056][ T6613] dump_stack+0x15/0x1b [ 90.872158][ T6613] should_fail_ex+0x263/0x280 [ 90.872197][ T6613] should_fail_alloc_page+0xf2/0x100 [ 90.872231][ T6613] __alloc_frozen_pages_noprof+0x108/0x350 [ 90.872275][ T6613] alloc_pages_mpol+0xb3/0x260 [ 90.872379][ T6613] alloc_pages_noprof+0x8f/0x130 [ 90.872420][ T6613] __pud_alloc+0x47/0x4a0 [ 90.872462][ T6613] handle_mm_fault+0x1d62/0x3030 [ 90.872520][ T6613] ? __rcu_read_unlock+0x4e/0x70 [ 90.872647][ T6613] ? check_vma_flags+0x26d/0x330 [ 90.872670][ T6613] __get_user_pages+0x1023/0x1ea0 [ 90.872726][ T6613] __gup_longterm_locked+0x8d7/0xe30 [ 90.872759][ T6613] ? security_ptrace_access_check+0x61/0x70 [ 90.872799][ T6613] ? __ptrace_may_access+0x2bc/0x340 [ 90.872833][ T6613] pin_user_pages_remote+0x7e/0xb0 [ 90.872862][ T6613] process_vm_rw+0x49b/0x9c0 [ 90.873060][ T6613] __x64_sys_process_vm_writev+0x78/0x90 [ 90.873145][ T6613] x64_sys_call+0x27ef/0x3000 [ 90.873246][ T6613] do_syscall_64+0xc0/0x2a0 [ 90.873281][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.873304][ T6613] RIP: 0033:0x7f14f39eaeb9 [ 90.873386][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.873406][ T6613] RSP: 002b:00007f14f243f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 90.873427][ T6613] RAX: ffffffffffffffda RBX: 00007f14f3c65fa0 RCX: 00007f14f39eaeb9 [ 90.873442][ T6613] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 0000000000000237 [ 90.873509][ T6613] RBP: 00007f14f243f090 R08: 0000000000000001 R09: 0000000000000000 [ 90.873523][ T6613] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 90.873540][ T6613] R13: 00007f14f3c66038 R14: 00007f14f3c65fa0 R15: 00007ffe38fe99f8 [ 90.873579][ T6613] [ 91.315766][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 91.339170][ T6620] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53 sclass=netlink_audit_socket pid=6620 comm=syz.5.1104 [ 91.408558][ T6637] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1109'. [ 91.729155][ T6662] loop0: detected capacity change from 0 to 2048 [ 91.860864][ T6681] loop5: detected capacity change from 0 to 256 [ 92.299434][ T6720] loop1: detected capacity change from 0 to 128 [ 92.341968][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 92.341987][ T29] audit: type=1400 audit(1770580577.287:1861): avc: denied { write } for pid=6723 comm="syz.2.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.532527][ T29] audit: type=1400 audit(1770580577.457:1862): avc: denied { getopt } for pid=6740 comm="syz.2.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.635507][ T29] audit: type=1400 audit(2000000000.000:1863): avc: denied { mount } for pid=6746 comm="syz.2.1144" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 92.643190][ T6755] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.1116: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 92.734929][ T29] audit: type=1326 audit(2000000000.100:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f6aaeb9 code=0x7ffc0000 [ 92.758498][ T29] audit: type=1326 audit(2000000000.100:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb60f6aaeb9 code=0x7ffc0000 [ 92.782296][ T29] audit: type=1326 audit(2000000000.100:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f6aaeb9 code=0x7ffc0000 [ 92.805847][ T29] audit: type=1326 audit(2000000000.100:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb60f6aaeb9 code=0x7ffc0000 [ 92.829506][ T29] audit: type=1326 audit(2000000000.100:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f6aaeb9 code=0x7ffc0000 [ 92.924435][ T29] audit: type=1400 audit(2000000000.230:1869): avc: denied { write } for pid=6762 comm="syz.3.1148" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 92.947611][ T29] audit: type=1400 audit(2000000000.230:1870): avc: denied { open } for pid=6762 comm="syz.3.1148" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.095395][ T6770] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 93.197439][ T6770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.217909][ T6770] bond2: (slave bond3): making interface the new active one [ 93.226034][ T6770] bond2: (slave bond3): Enslaving as an active interface with an up link [ 93.298531][ T6770] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 93.327032][ T6775] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.534793][ T6790] FAULT_INJECTION: forcing a failure. [ 93.534793][ T6790] name failslab, interval 1, probability 0, space 0, times 0 [ 93.547543][ T6790] CPU: 0 UID: 0 PID: 6790 Comm: syz.0.1155 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.547573][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 93.547586][ T6790] Call Trace: [ 93.547593][ T6790] [ 93.547600][ T6790] __dump_stack+0x1d/0x30 [ 93.547633][ T6790] dump_stack_lvl+0x95/0xd0 [ 93.547685][ T6790] dump_stack+0x15/0x1b [ 93.547706][ T6790] should_fail_ex+0x263/0x280 [ 93.547743][ T6790] should_failslab+0x8c/0xb0 [ 93.547885][ T6790] __kmalloc_cache_noprof+0x64/0x4a0 [ 93.547919][ T6790] ? sctp_transport_new+0x69/0x3a0 [ 93.547997][ T6790] sctp_transport_new+0x69/0x3a0 [ 93.548031][ T6790] sctp_assoc_add_peer+0x1a0/0xac0 [ 93.548058][ T6790] ? sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 93.548174][ T6790] sctp_connect_new_asoc+0x1eb/0x3a0 [ 93.548200][ T6790] sctp_sendmsg+0xfff/0x1d60 [ 93.548250][ T6790] ? selinux_socket_sendmsg+0x192/0x1c0 [ 93.548281][ T6790] ? __pfx_sctp_sendmsg+0x10/0x10 [ 93.548304][ T6790] inet_sendmsg+0xc5/0xd0 [ 93.548336][ T6790] __sys_sendto+0x3f4/0x4d0 [ 93.548444][ T6790] __x64_sys_sendto+0x76/0x90 [ 93.548496][ T6790] x64_sys_call+0x29a7/0x3000 [ 93.548529][ T6790] do_syscall_64+0xc0/0x2a0 [ 93.548571][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.548634][ T6790] RIP: 0033:0x7f7c451daeb9 [ 93.548650][ T6790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.548671][ T6790] RSP: 002b:00007f7c43c2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 93.548697][ T6790] RAX: ffffffffffffffda RBX: 00007f7c45455fa0 RCX: 00007f7c451daeb9 [ 93.548789][ T6790] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000004 [ 93.548803][ T6790] RBP: 00007f7c43c2f090 R08: 0000200000000380 R09: 000000000000001c [ 93.548816][ T6790] R10: 000000000004c000 R11: 0000000000000246 R12: 0000000000000001 [ 93.548882][ T6790] R13: 00007f7c45456038 R14: 00007f7c45455fa0 R15: 00007ffeaf9cd988 [ 93.548978][ T6790] [ 93.822934][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b436600: rx timeout, send abort [ 94.070681][ T6811] netlink: 'syz.5.1161': attribute type 12 has an invalid length. [ 94.098046][ T6812] netlink: 'syz.3.1162': attribute type 12 has an invalid length. [ 94.280443][ T6823] syzkaller0: entered promiscuous mode [ 94.286002][ T6823] syzkaller0: entered allmulticast mode [ 94.331225][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b436600: abort rx timeout. Force session deactivation [ 94.584771][ T6840] __nla_validate_parse: 4 callbacks suppressed [ 94.584787][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 94.752980][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1179'. [ 94.792328][ T6858] syzkaller0: entered promiscuous mode [ 94.797857][ T6858] syzkaller0: entered allmulticast mode [ 94.818742][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'. [ 94.931633][ T6869] loop5: detected capacity change from 0 to 128 [ 94.959612][ T6872] loop2: detected capacity change from 0 to 2048 [ 94.985474][ T6872] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 95.025181][ T6869] bio_check_eod: 16 callbacks suppressed [ 95.025204][ T6869] syz.5.1187: attempt to access beyond end of device [ 95.025204][ T6869] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 95.051737][ T6869] syz.5.1187: attempt to access beyond end of device [ 95.051737][ T6869] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 95.076178][ T6869] syz.5.1187: attempt to access beyond end of device [ 95.076178][ T6869] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 95.095553][ T6869] syz.5.1187: attempt to access beyond end of device [ 95.095553][ T6869] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 95.109458][ T6869] syz.5.1187: attempt to access beyond end of device [ 95.109458][ T6869] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 95.123070][ T6869] syz.5.1187: attempt to access beyond end of device [ 95.123070][ T6869] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 95.138415][ T6869] syz.5.1187: attempt to access beyond end of device [ 95.138415][ T6869] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 95.152149][ T6869] syz.5.1187: attempt to access beyond end of device [ 95.152149][ T6869] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 95.165723][ T6869] syz.5.1187: attempt to access beyond end of device [ 95.165723][ T6869] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 95.179411][ T6869] syz.5.1187: attempt to access beyond end of device [ 95.179411][ T6869] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 95.369520][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 95.400973][ T6896] syzkaller0: entered promiscuous mode [ 95.406534][ T6896] syzkaller0: entered allmulticast mode [ 95.495688][ T6905] netlink: 'syz.3.1198': attribute type 12 has an invalid length. [ 95.605863][ T6922] batman_adv: batadv0: Adding interface: dummy0 [ 95.612401][ T6922] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.641769][ T6922] batman_adv: batadv0: Interface activated: dummy0 [ 95.653421][ T6922] batadv0: mtu less than device minimum [ 95.659828][ T6922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.670871][ T6922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.682024][ T6922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.693063][ T6922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.704482][ T6922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.715580][ T6922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.726729][ T6922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.737668][ T6922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.748976][ T6922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.942338][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 96.069599][ T6967] loop2: detected capacity change from 0 to 2048 [ 96.111360][ T6967] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 96.554673][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 96.586454][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 96.603690][ T6987] loop3: detected capacity change from 0 to 4096 [ 96.640089][ T6987] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1234'. [ 96.735678][ T6987] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1234'. [ 96.798162][ T6875] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 96.876079][ T7010] loop1: detected capacity change from 0 to 512 [ 96.878496][ T7012] netlink: 'syz.0.1244': attribute type 12 has an invalid length. [ 96.960193][ T7010] EXT4-fs: Mount option(s) incompatible with ext2 [ 96.961714][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1245'. [ 97.125797][ T7010] bridge0: port 1(macvtap1) entered blocking state [ 97.133458][ T7010] bridge0: port 1(macvtap1) entered disabled state [ 97.148130][ T7010] macvtap1: entered allmulticast mode [ 97.156443][ T7010] macvtap1: left allmulticast mode [ 97.180479][ T7025] syzkaller0: entered promiscuous mode [ 97.186156][ T7025] syzkaller0: entered allmulticast mode [ 97.194713][ T7029] syzkaller0: entered promiscuous mode [ 97.200428][ T7029] syzkaller0: entered allmulticast mode [ 97.256757][ T7031] loop1: detected capacity change from 0 to 4096 [ 97.425500][ T7047] loop2: detected capacity change from 0 to 2048 [ 97.425649][ T7049] netlink: 'syz.5.1256': attribute type 12 has an invalid length. [ 97.442999][ T7050] loop1: detected capacity change from 0 to 128 [ 97.471763][ T7047] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 97.559587][ T7050] syz.1.1258 (7050) used greatest stack depth: 9064 bytes left [ 97.758842][ T7060] netlink: 'syz.0.1261': attribute type 10 has an invalid length. [ 97.761594][ T7061] netlink: 'syz.0.1261': attribute type 10 has an invalid length. [ 97.781013][ T7060] team0: Port device geneve1 added [ 97.967501][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 97.967520][ T29] audit: type=1400 audit(2000000000.130:2090): avc: denied { create } for pid=7064 comm="syz.3.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 98.239103][ T7070] syzkaller0: entered promiscuous mode [ 98.245281][ T7070] syzkaller0: entered allmulticast mode [ 98.504923][ T7088] loop5: detected capacity change from 0 to 2048 [ 98.517497][ T7089] netlink: 'syz.2.1271': attribute type 12 has an invalid length. [ 98.528816][ T7088] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.817009][ T29] audit: type=1326 audit(2000000000.980:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 98.840828][ T29] audit: type=1326 audit(2000000000.980:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 98.864834][ T29] audit: type=1326 audit(2000000000.990:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 98.888728][ T29] audit: type=1326 audit(2000000000.990:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 98.912726][ T29] audit: type=1326 audit(2000000000.990:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 98.937314][ T29] audit: type=1326 audit(2000000000.990:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 98.960864][ T29] audit: type=1326 audit(2000000000.990:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 98.984566][ T29] audit: type=1326 audit(2000000000.990:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 99.008854][ T29] audit: type=1326 audit(2000000001.000:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0091aeb9 code=0x7ffc0000 [ 99.012867][ T7098] syzkaller0: entered promiscuous mode [ 99.038845][ T7098] syzkaller0: entered allmulticast mode [ 99.059794][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b000400: rx timeout, send abort [ 99.314968][ T7114] loop3: detected capacity change from 0 to 512 [ 99.327421][ T7114] EXT4-fs: Mount option(s) incompatible with ext2 [ 99.390462][ T7114] bridge0: port 3(macvtap1) entered blocking state [ 99.398683][ T7114] bridge0: port 3(macvtap1) entered disabled state [ 99.406483][ T7114] macvtap1: entered allmulticast mode [ 99.415186][ T7114] macvtap1: left allmulticast mode [ 99.499309][ T7121] xt_l2tp: missing protocol rule (udp|l2tpip) [ 99.541047][ T7123] tipc: Enabled bearer , priority 0 [ 99.559933][ T7123] tipc: Resetting bearer [ 99.567709][ T7122] tipc: Disabling bearer [ 99.568233][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b000400: abort rx timeout. Force session deactivation [ 99.676545][ T7136] __nla_validate_parse: 13 callbacks suppressed [ 99.676563][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'. [ 99.709380][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1298'. [ 99.811599][ T7149] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.828489][ T7152] loop3: detected capacity change from 0 to 128 [ 99.971723][ T7155] loop5: detected capacity change from 0 to 512 [ 100.017646][ T7155] EXT4-fs: Mount option(s) incompatible with ext2 [ 100.049002][ T5474] bio_check_eod: 293 callbacks suppressed [ 100.049039][ T5474] kworker/u8:15: attempt to access beyond end of device [ 100.049039][ T5474] loop3: rw=1, sector=681, nr_sectors = 1 limit=128 [ 100.115125][ T7155] bridge0: port 3(macvtap1) entered blocking state [ 100.123449][ T7155] bridge0: port 3(macvtap1) entered disabled state [ 100.135402][ T7155] macvtap1: entered allmulticast mode [ 100.146067][ T7161] xt_l2tp: missing protocol rule (udp|l2tpip) [ 100.150097][ T7155] macvtap1: left allmulticast mode [ 100.176636][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1306'. [ 100.185920][ T7161] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1306'. [ 100.225629][ T7163] tipc: Enabled bearer , priority 0 [ 100.234519][ T7163] tipc: Resetting bearer [ 100.242250][ T7162] tipc: Disabling bearer [ 100.331790][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 100.615709][ T7192] xt_l2tp: missing protocol rule (udp|l2tpip) [ 100.627239][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 100.650753][ T7192] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1319'. [ 100.709704][ T12] kworker/u8:0: attempt to access beyond end of device [ 100.709704][ T12] loop5: rw=1, sector=129, nr_sectors = 24 limit=128 [ 100.719412][ T7197] tipc: Enabled bearer , priority 0 [ 100.731530][ T12] kworker/u8:0: attempt to access beyond end of device [ 100.731530][ T12] loop5: rw=8388609, sector=161, nr_sectors = 1 limit=128 [ 100.734041][ T7197] tipc: Resetting bearer [ 100.745569][ T12] buffer_io_error: 2 callbacks suppressed [ 100.745626][ T12] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 100.766227][ T12] kworker/u8:0: attempt to access beyond end of device [ 100.766227][ T12] loop5: rw=8388609, sector=128, nr_sectors = 1 limit=128 [ 100.766687][ T7196] tipc: Disabling bearer [ 100.780235][ T12] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 100.784200][ T12] kworker/u8:0: attempt to access beyond end of device [ 100.784200][ T12] loop5: rw=8388609, sector=153, nr_sectors = 1 limit=128 [ 100.809317][ T12] Buffer I/O error on dev loop5, logical block 153, lost async page write [ 100.817913][ T12] kworker/u8:0: attempt to access beyond end of device [ 100.817913][ T12] loop5: rw=8388609, sector=154, nr_sectors = 1 limit=128 [ 100.831897][ T12] Buffer I/O error on dev loop5, logical block 154, lost async page write [ 100.840794][ T12] kworker/u8:0: attempt to access beyond end of device [ 100.840794][ T12] loop5: rw=8388609, sector=155, nr_sectors = 1 limit=128 [ 100.855176][ T12] Buffer I/O error on dev loop5, logical block 155, lost async page write [ 100.864105][ T12] kworker/u8:0: attempt to access beyond end of device [ 100.864105][ T12] loop5: rw=8388609, sector=156, nr_sectors = 1 limit=128 [ 100.878166][ T12] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 100.888015][ T12] kworker/u8:0: attempt to access beyond end of device [ 100.888015][ T12] loop5: rw=1, sector=157, nr_sectors = 4 limit=128 [ 100.900821][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 101.047110][ T7218] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 101.213870][ T7240] tipc: Enabled bearer , priority 0 [ 101.223291][ T7240] tipc: Resetting bearer [ 101.234957][ T7239] tipc: Disabling bearer [ 101.245726][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b434200: rx timeout, send abort [ 101.290054][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 101.320196][ T7248] syzkaller0: entered promiscuous mode [ 101.325745][ T7248] syzkaller0: entered allmulticast mode [ 101.337283][ T7248] tipc: Enabled bearer , priority 0 [ 101.355096][ T7247] tipc: Resetting bearer [ 101.364072][ T7247] tipc: Disabling bearer [ 101.504305][ T7267] FAULT_INJECTION: forcing a failure. [ 101.504305][ T7267] name failslab, interval 1, probability 0, space 0, times 0 [ 101.517379][ T7267] CPU: 0 UID: 0 PID: 7267 Comm: syz.3.1348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.517475][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 101.517491][ T7267] Call Trace: [ 101.517501][ T7267] [ 101.517511][ T7267] __dump_stack+0x1d/0x30 [ 101.517590][ T7267] dump_stack_lvl+0x95/0xd0 [ 101.517612][ T7267] dump_stack+0x15/0x1b [ 101.517636][ T7267] should_fail_ex+0x263/0x280 [ 101.517716][ T7267] should_failslab+0x8c/0xb0 [ 101.517740][ T7267] kmem_cache_alloc_noprof+0x68/0x490 [ 101.517773][ T7267] ? dst_alloc+0xbd/0x100 [ 101.517813][ T7267] dst_alloc+0xbd/0x100 [ 101.517923][ T7267] ? ip_route_input_rcu+0xfb2/0x1c10 [ 101.517986][ T7267] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 101.518017][ T7267] ip_route_output_key_hash+0x63/0xa0 [ 101.518046][ T7267] tcp_v4_connect+0x3e4/0xaf0 [ 101.518076][ T7267] __inet_stream_connect+0x169/0x7f0 [ 101.518156][ T7267] ? _raw_spin_lock_bh+0x56/0xb0 [ 101.518193][ T7267] ? _raw_spin_unlock_bh+0x18/0x20 [ 101.518212][ T7267] ? lock_sock_nested+0x132/0x160 [ 101.518257][ T7267] inet_stream_connect+0x44/0x70 [ 101.518298][ T7267] kernel_connect+0x9f/0xf0 [ 101.518357][ T7267] smc_connect+0x4f3/0x670 [ 101.518398][ T7267] ? __pfx_smc_connect+0x10/0x10 [ 101.518430][ T7267] __sys_connect+0x1f1/0x2a0 [ 101.518485][ T7267] __x64_sys_connect+0x3f/0x50 [ 101.518516][ T7267] x64_sys_call+0x2e09/0x3000 [ 101.518599][ T7267] do_syscall_64+0xc0/0x2a0 [ 101.518633][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.518702][ T7267] RIP: 0033:0x7f2b0091aeb9 [ 101.518719][ T7267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.518739][ T7267] RSP: 002b:00007f2aff36f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 101.518761][ T7267] RAX: ffffffffffffffda RBX: 00007f2b00b95fa0 RCX: 00007f2b0091aeb9 [ 101.518835][ T7267] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 101.518849][ T7267] RBP: 00007f2aff36f090 R08: 0000000000000000 R09: 0000000000000000 [ 101.518863][ T7267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.518877][ T7267] R13: 00007f2b00b96038 R14: 00007f2b00b95fa0 R15: 00007fff84140868 [ 101.518908][ T7267] [ 101.754087][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b434200: abort rx timeout. Force session deactivation [ 101.817166][ T7273] tipc: Enabled bearer , priority 0 [ 101.826081][ T7273] tipc: Resetting bearer [ 101.844538][ T7272] tipc: Disabling bearer [ 101.860063][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'. [ 101.912553][ T7283] syzkaller0: entered promiscuous mode [ 101.918205][ T7283] syzkaller0: entered allmulticast mode [ 101.929152][ T7283] tipc: Enabled bearer , priority 0 [ 101.948269][ T7282] tipc: Resetting bearer [ 101.970977][ T7282] tipc: Disabling bearer [ 102.023935][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.098895][ T7300] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 102.456335][ T7328] syzkaller0: entered promiscuous mode [ 102.457781][ T7330] xt_l2tp: missing protocol rule (udp|l2tpip) [ 102.461906][ T7328] syzkaller0: entered allmulticast mode [ 102.478691][ T7328] tipc: Enabled bearer , priority 0 [ 102.492205][ T7328] tipc: Resetting bearer [ 102.501421][ T7327] tipc: Resetting bearer [ 102.516310][ T7327] tipc: Disabling bearer [ 102.825095][ T7355] xt_l2tp: missing protocol rule (udp|l2tpip) [ 103.119471][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 103.119540][ T29] audit: type=1400 audit(2000000003.090:2164): avc: denied { read } for pid=7383 comm="syz.3.1400" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.138852][ T7386] set_capacity_and_notify: 2 callbacks suppressed [ 103.138937][ T7386] loop1: detected capacity change from 0 to 1024 [ 103.169254][ T7386] EXT4-fs mount: 29 callbacks suppressed [ 103.169275][ T7386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.230498][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.255031][ T7392] xt_l2tp: missing protocol rule (udp|l2tpip) [ 103.275119][ T7396] loop2: detected capacity change from 0 to 1024 [ 103.284806][ T7396] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.312739][ T7396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.328911][ T7396] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.341699][ T7396] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.1405: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.367422][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.506353][ T7421] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 103.516638][ T29] audit: type=1400 audit(2000000003.470:2165): avc: denied { mac_admin } for pid=7420 comm="syz.0.1412" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.537757][ T29] audit: type=1400 audit(2000000003.480:2166): avc: denied { relabelto } for pid=7420 comm="syz.0.1412" name="273" dev="tmpfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 103.564438][ T29] audit: type=1400 audit(2000000003.480:2167): avc: denied { associate } for pid=7420 comm="syz.0.1412" name="273" dev="tmpfs" ino=1453 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 103.683115][ T29] audit: type=1400 audit(2000000003.650:2168): avc: denied { remove_name } for pid=3318 comm="syz-executor" name="file0" dev="tmpfs" ino=1458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 103.719172][ T29] audit: type=1400 audit(2000000003.650:2169): avc: denied { rmdir } for pid=3318 comm="syz-executor" name="273" dev="tmpfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 103.846393][ T29] audit: type=1400 audit(2000000003.810:2170): avc: denied { mount } for pid=7440 comm="syz.0.1417" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 103.869885][ T7441] netlink: 'syz.0.1417': attribute type 1 has an invalid length. [ 103.915560][ T7446] netlink: 'syz.5.1419': attribute type 8 has an invalid length. [ 103.943284][ T7448] tipc: Enabled bearer , priority 0 [ 103.952418][ T7448] tipc: Resetting bearer [ 103.960639][ T7447] tipc: Disabling bearer [ 103.998731][ T7450] xt_l2tp: missing protocol rule (udp|l2tpip) [ 104.071789][ T7460] loop5: detected capacity change from 0 to 1024 [ 104.113223][ T7460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.140907][ T7460] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 104.141553][ T29] audit: type=1400 audit(2000000004.110:2171): avc: denied { watch } for pid=7458 comm="syz.5.1425" path="/265/file1/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.187777][ T29] audit: type=1400 audit(2000000004.120:2172): avc: denied { relabelto } for pid=7458 comm="syz.5.1425" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 104.307177][ T3810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.342967][ T7474] FAULT_INJECTION: forcing a failure. [ 104.342967][ T7474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.356149][ T7474] CPU: 1 UID: 0 PID: 7474 Comm: syz.3.1432 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.356245][ T7474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 104.356263][ T7474] Call Trace: [ 104.356272][ T7474] [ 104.356283][ T7474] __dump_stack+0x1d/0x30 [ 104.356312][ T7474] dump_stack_lvl+0x95/0xd0 [ 104.356334][ T7474] dump_stack+0x15/0x1b [ 104.356430][ T7474] should_fail_ex+0x263/0x280 [ 104.356465][ T7474] should_fail+0xb/0x20 [ 104.356501][ T7474] should_fail_usercopy+0x1a/0x20 [ 104.356657][ T7474] _copy_from_user+0x1c/0xb0 [ 104.356685][ T7474] ___sys_sendmsg+0xc1/0x1e0 [ 104.356756][ T7474] __x64_sys_sendmsg+0xd4/0x160 [ 104.356786][ T7474] x64_sys_call+0x17ba/0x3000 [ 104.356887][ T7474] do_syscall_64+0xc0/0x2a0 [ 104.356943][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.356965][ T7474] RIP: 0033:0x7f2b0091aeb9 [ 104.356983][ T7474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.357067][ T7474] RSP: 002b:00007f2aff36f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.357093][ T7474] RAX: ffffffffffffffda RBX: 00007f2b00b95fa0 RCX: 00007f2b0091aeb9 [ 104.357111][ T7474] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000004 [ 104.357124][ T7474] RBP: 00007f2aff36f090 R08: 0000000000000000 R09: 0000000000000000 [ 104.357136][ T7474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.357216][ T7474] R13: 00007f2b00b96038 R14: 00007f2b00b95fa0 R15: 00007fff84140868 [ 104.357245][ T7474] [ 104.402344][ T7478] tipc: Enabled bearer , priority 0 [ 104.540145][ T7478] tipc: Resetting bearer [ 104.552907][ T7477] tipc: Disabling bearer [ 104.601955][ T29] audit: type=1400 audit(2000000004.570:2173): avc: denied { execute } for pid=7481 comm="syz.1.1434" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 104.679973][ T7491] netlink: 'syz.5.1437': attribute type 4 has an invalid length. [ 104.680146][ T7492] netlink: 'syz.5.1437': attribute type 4 has an invalid length. [ 104.700163][ T7493] xt_l2tp: missing protocol rule (udp|l2tpip) [ 104.731157][ T7493] __nla_validate_parse: 14 callbacks suppressed [ 104.731244][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1438'. [ 104.760300][ T7493] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1438'. [ 104.814050][ T7505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1443'. [ 104.823286][ T7505] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1443'. [ 105.002107][ T7516] tipc: Enabled bearer , priority 0 [ 105.012080][ T7516] tipc: Resetting bearer [ 105.038549][ T7515] tipc: Disabling bearer [ 105.068544][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 105.233053][ T7534] netlink: 'syz.1.1455': attribute type 3 has an invalid length. [ 105.311747][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'. [ 105.322283][ T7532] loop3: detected capacity change from 0 to 128 [ 105.340506][ T7532] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.370444][ T7532] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.444746][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 105.454206][ T7554] tipc: Enabled bearer , priority 0 [ 105.465081][ T7557] FAULT_INJECTION: forcing a failure. [ 105.465081][ T7557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.478275][ T7557] CPU: 1 UID: 0 PID: 7557 Comm: syz.1.1459 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.478310][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 105.478327][ T7557] Call Trace: [ 105.478336][ T7557] [ 105.478347][ T7557] __dump_stack+0x1d/0x30 [ 105.478394][ T7557] dump_stack_lvl+0x95/0xd0 [ 105.478418][ T7557] dump_stack+0x15/0x1b [ 105.478439][ T7557] should_fail_ex+0x263/0x280 [ 105.478508][ T7557] should_fail+0xb/0x20 [ 105.478544][ T7557] should_fail_usercopy+0x1a/0x20 [ 105.478586][ T7557] _copy_to_user+0x20/0xa0 [ 105.478689][ T7557] simple_read_from_buffer+0xb5/0x130 [ 105.478776][ T7557] proc_fail_nth_read+0x10e/0x150 [ 105.478812][ T7557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.478842][ T7557] vfs_read+0x1ab/0x7f0 [ 105.478882][ T7557] ? __rcu_read_unlock+0x4e/0x70 [ 105.478921][ T7557] ? __fget_files+0x184/0x1c0 [ 105.478969][ T7557] ? mutex_lock+0x57/0x90 [ 105.479001][ T7557] ksys_read+0xdc/0x1a0 [ 105.479060][ T7557] __x64_sys_read+0x40/0x50 [ 105.479164][ T7557] x64_sys_call+0x2889/0x3000 [ 105.479196][ T7557] do_syscall_64+0xc0/0x2a0 [ 105.479229][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.479313][ T7557] RIP: 0033:0x7f14f39ab78e [ 105.479335][ T7557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.479357][ T7557] RSP: 002b:00007f14f241dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.479439][ T7557] RAX: ffffffffffffffda RBX: 00007f14f241e6c0 RCX: 00007f14f39ab78e [ 105.479455][ T7557] RDX: 000000000000000f RSI: 00007f14f241e0a0 RDI: 0000000000000004 [ 105.479468][ T7557] RBP: 00007f14f241e090 R08: 0000000000000000 R09: 0000000000000000 [ 105.479508][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.479521][ T7557] R13: 00007f14f3c66128 R14: 00007f14f3c66090 R15: 00007ffe38fe99f8 [ 105.479542][ T7557] [ 105.486852][ T7554] tipc: Resetting bearer [ 105.687130][ T7559] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.695090][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.707496][ T7553] tipc: Disabling bearer [ 105.806787][ T7578] FAULT_INJECTION: forcing a failure. [ 105.806787][ T7578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.820283][ T7578] CPU: 0 UID: 0 PID: 7578 Comm: syz.1.1470 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.820317][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 105.820332][ T7578] Call Trace: [ 105.820339][ T7578] [ 105.820346][ T7578] __dump_stack+0x1d/0x30 [ 105.820381][ T7578] dump_stack_lvl+0x95/0xd0 [ 105.820410][ T7578] dump_stack+0x15/0x1b [ 105.820435][ T7578] should_fail_ex+0x263/0x280 [ 105.820521][ T7578] should_fail+0xb/0x20 [ 105.820549][ T7578] should_fail_usercopy+0x1a/0x20 [ 105.820654][ T7578] _copy_from_user+0x1c/0xb0 [ 105.820681][ T7578] ___sys_sendmsg+0xc1/0x1e0 [ 105.820796][ T7578] __sys_sendmmsg+0x185/0x320 [ 105.820838][ T7578] __x64_sys_sendmmsg+0x57/0x70 [ 105.820906][ T7578] x64_sys_call+0x1e28/0x3000 [ 105.820933][ T7578] do_syscall_64+0xc0/0x2a0 [ 105.820974][ T7578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.821119][ T7578] RIP: 0033:0x7f14f39eaeb9 [ 105.821135][ T7578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.821229][ T7578] RSP: 002b:00007f14f243f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.821256][ T7578] RAX: ffffffffffffffda RBX: 00007f14f3c65fa0 RCX: 00007f14f39eaeb9 [ 105.821273][ T7578] RDX: 0000000000000001 RSI: 0000200000000c00 RDI: 0000000000000003 [ 105.821290][ T7578] RBP: 00007f14f243f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.821391][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.821407][ T7578] R13: 00007f14f3c66038 R14: 00007f14f3c65fa0 R15: 00007ffe38fe99f8 [ 105.821477][ T7578] [ 106.020115][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'. [ 106.135193][ T7591] syzkaller0: entered promiscuous mode [ 106.140794][ T7591] syzkaller0: entered allmulticast mode [ 106.202775][ T7597] tipc: Enabled bearer , priority 0 [ 106.267772][ T7591] tipc: Resetting bearer [ 106.281542][ T7587] tipc: Resetting bearer [ 106.308200][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.372251][ T7587] tipc: Disabling bearer [ 106.462151][ T7621] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 106.625833][ T7642] cgroup: No subsys list or none specified [ 106.648029][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 106.891534][ T7658] FAULT_INJECTION: forcing a failure. [ 106.891534][ T7658] name failslab, interval 1, probability 0, space 0, times 0 [ 106.904751][ T7658] CPU: 1 UID: 0 PID: 7658 Comm: syz.5.1489 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.904790][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 106.904806][ T7658] Call Trace: [ 106.904812][ T7658] [ 106.904830][ T7658] __dump_stack+0x1d/0x30 [ 106.904891][ T7658] dump_stack_lvl+0x95/0xd0 [ 106.904978][ T7658] dump_stack+0x15/0x1b [ 106.905077][ T7658] should_fail_ex+0x263/0x280 [ 106.905120][ T7658] should_failslab+0x8c/0xb0 [ 106.905151][ T7658] kmem_cache_alloc_noprof+0x68/0x490 [ 106.905206][ T7658] ? io_submit_one+0xcf/0x1350 [ 106.905247][ T7658] io_submit_one+0xcf/0x1350 [ 106.905348][ T7658] __se_sys_io_submit+0xfb/0x280 [ 106.905389][ T7658] __x64_sys_io_submit+0x43/0x50 [ 106.905424][ T7658] x64_sys_call+0x2e40/0x3000 [ 106.905539][ T7658] do_syscall_64+0xc0/0x2a0 [ 106.905584][ T7658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.905615][ T7658] RIP: 0033:0x7fb60f6aaeb9 [ 106.905638][ T7658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.905669][ T7658] RSP: 002b:00007fb60e0ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 106.905946][ T7658] RAX: ffffffffffffffda RBX: 00007fb60f925fa0 RCX: 00007fb60f6aaeb9 [ 106.905974][ T7658] RDX: 0000200000000440 RSI: 0000000000000001 RDI: 00007fb60f8fd000 [ 106.906064][ T7658] RBP: 00007fb60e0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 106.906080][ T7658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.906151][ T7658] R13: 00007fb60f926038 R14: 00007fb60f925fa0 R15: 00007ffee63a1718 [ 106.906183][ T7658] [ 107.279943][ T7669] syzkaller0: entered promiscuous mode [ 107.285651][ T7669] syzkaller0: entered allmulticast mode [ 107.307872][ T7669] tipc: Enabled bearer , priority 0 [ 107.318951][ T7671] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.357402][ T7669] tipc: Resetting bearer [ 107.364325][ T7668] tipc: Resetting bearer [ 107.385200][ T7668] tipc: Disabling bearer [ 107.498800][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1498'. [ 107.676217][ T7718] loop5: detected capacity change from 0 to 512 [ 107.689476][ T7718] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32681!=33349) [ 107.730660][ T7718] EXT4-fs (loop5): failed to initialize system zone (-117) [ 107.743398][ T7718] EXT4-fs (loop5): mount failed [ 107.760220][ T7734] FAULT_INJECTION: forcing a failure. [ 107.760220][ T7734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.773638][ T7734] CPU: 0 UID: 0 PID: 7734 Comm: syz.1.1508 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.773675][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 107.773692][ T7734] Call Trace: [ 107.773699][ T7734] [ 107.773708][ T7734] __dump_stack+0x1d/0x30 [ 107.773750][ T7734] dump_stack_lvl+0x95/0xd0 [ 107.773781][ T7734] dump_stack+0x15/0x1b [ 107.773858][ T7734] should_fail_ex+0x263/0x280 [ 107.773894][ T7734] should_fail+0xb/0x20 [ 107.773930][ T7734] should_fail_usercopy+0x1a/0x20 [ 107.773967][ T7734] _copy_from_user+0x1c/0xb0 [ 107.774073][ T7734] do_sock_getsockopt+0xf1/0x210 [ 107.774117][ T7734] __x64_sys_getsockopt+0x11d/0x1a0 [ 107.774165][ T7734] x64_sys_call+0x2dc7/0x3000 [ 107.774201][ T7734] do_syscall_64+0xc0/0x2a0 [ 107.774290][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.774376][ T7734] RIP: 0033:0x7f14f39eaeb9 [ 107.774393][ T7734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.774418][ T7734] RSP: 002b:00007f14f243f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 107.774444][ T7734] RAX: ffffffffffffffda RBX: 00007f14f3c65fa0 RCX: 00007f14f39eaeb9 [ 107.774459][ T7734] RDX: 000000000000000a RSI: 0000000000000112 RDI: 0000000000000004 [ 107.774472][ T7734] RBP: 00007f14f243f090 R08: 0000200000000200 R09: 0000000000000000 [ 107.774518][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.774531][ T7734] R13: 00007f14f3c66038 R14: 00007f14f3c65fa0 R15: 00007ffe38fe99f8 [ 107.774560][ T7734] [ 107.946794][ T7735] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.980095][ T7741] loop1: detected capacity change from 0 to 512 [ 107.986827][ T7741] EXT4-fs: Ignoring removed bh option [ 107.994180][ T7738] syzkaller0: entered promiscuous mode [ 107.999832][ T7738] syzkaller0: entered allmulticast mode [ 108.008596][ T7741] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 108.009553][ T7738] tipc: Enabled bearer , priority 0 [ 108.026748][ T7738] tipc: Resetting bearer [ 108.033838][ T7737] tipc: Resetting bearer [ 108.042585][ T7737] tipc: Disabling bearer [ 108.061337][ T7741] EXT4-fs (loop1): 1 truncate cleaned up [ 108.086245][ T7741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.143220][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 108.143235][ T29] audit: type=1400 audit(2000000008.110:2318): avc: denied { create } for pid=7739 comm="syz.1.1510" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 108.170046][ T29] audit: type=1400 audit(2000000008.110:2319): avc: denied { remove_name } for pid=7739 comm="syz.1.1510" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.193429][ T29] audit: type=1400 audit(2000000008.110:2320): avc: denied { rename } for pid=7739 comm="syz.1.1510" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.216761][ T29] audit: type=1400 audit(2000000008.110:2321): avc: denied { reparent } for pid=7739 comm="syz.1.1510" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.240358][ T29] audit: type=1400 audit(2000000008.110:2322): avc: denied { add_name } for pid=7739 comm="syz.1.1510" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 108.382481][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.417997][ T7779] 9p: Bad value for 'rfdno' [ 108.445280][ T7783] FAULT_INJECTION: forcing a failure. [ 108.445280][ T7783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.458524][ T7783] CPU: 0 UID: 0 PID: 7783 Comm: syz.3.1520 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.458580][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 108.458598][ T7783] Call Trace: [ 108.458641][ T7783] [ 108.458690][ T7783] __dump_stack+0x1d/0x30 [ 108.458786][ T7783] dump_stack_lvl+0x95/0xd0 [ 108.458866][ T7783] dump_stack+0x15/0x1b [ 108.458930][ T7783] should_fail_ex+0x263/0x280 [ 108.459035][ T7783] should_fail+0xb/0x20 [ 108.459066][ T7783] should_fail_usercopy+0x1a/0x20 [ 108.459125][ T7783] _copy_from_user+0x1c/0xb0 [ 108.459155][ T7783] kstrtouint_from_user+0x69/0xf0 [ 108.459203][ T7783] proc_fail_nth_write+0x50/0x160 [ 108.459240][ T7783] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 108.459354][ T7783] vfs_write+0x269/0x9f0 [ 108.459380][ T7783] ? __rcu_read_unlock+0x4e/0x70 [ 108.459419][ T7783] ? __fget_files+0x184/0x1c0 [ 108.459527][ T7783] ? mutex_lock+0x57/0x90 [ 108.459608][ T7783] ksys_write+0xdc/0x1a0 [ 108.459673][ T7783] __x64_sys_write+0x40/0x50 [ 108.459703][ T7783] x64_sys_call+0x2847/0x3000 [ 108.459740][ T7783] do_syscall_64+0xc0/0x2a0 [ 108.459795][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.459892][ T7783] RIP: 0033:0x7f2b008db78e [ 108.459909][ T7783] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.459969][ T7783] RSP: 002b:00007f2aff36efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.459992][ T7783] RAX: ffffffffffffffda RBX: 00007f2aff36f6c0 RCX: 00007f2b008db78e [ 108.460007][ T7783] RDX: 0000000000000001 RSI: 00007f2aff36f0a0 RDI: 0000000000000003 [ 108.460024][ T7783] RBP: 00007f2aff36f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.460062][ T7783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.460152][ T7783] R13: 00007f2b00b96038 R14: 00007f2b00b95fa0 R15: 00007fff84140868 [ 108.460180][ T7783] [ 108.746549][ T29] audit: type=1326 audit(2000000008.710:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.2.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b9c4aeb9 code=0x7ffc0000 [ 108.756818][ T7791] loop1: detected capacity change from 0 to 164 [ 108.770147][ T29] audit: type=1326 audit(2000000008.710:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.2.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b9c4aeb9 code=0x7ffc0000 [ 108.770185][ T29] audit: type=1326 audit(2000000008.710:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.2.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2b9c4aeb9 code=0x7ffc0000 [ 108.770240][ T29] audit: type=1326 audit(2000000008.710:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.2.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b9c4aeb9 code=0x7ffc0000 [ 108.770276][ T29] audit: type=1326 audit(2000000008.710:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.2.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff2b9c4aeb9 code=0x7ffc0000 [ 108.820454][ T7797] team0: No ports can be present during mode change [ 108.922347][ T7785] loop5: detected capacity change from 0 to 8192 [ 108.993037][ T7791] Unsupported NM flag settings (240) [ 109.017916][ T7806] FAULT_INJECTION: forcing a failure. [ 109.017916][ T7806] name failslab, interval 1, probability 0, space 0, times 0 [ 109.031304][ T7806] CPU: 0 UID: 0 PID: 7806 Comm: syz.3.1530 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.031339][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 109.031355][ T7806] Call Trace: [ 109.031363][ T7806] [ 109.031374][ T7806] __dump_stack+0x1d/0x30 [ 109.031436][ T7806] dump_stack_lvl+0x95/0xd0 [ 109.031464][ T7806] dump_stack+0x15/0x1b [ 109.031488][ T7806] should_fail_ex+0x263/0x280 [ 109.031528][ T7806] should_failslab+0x8c/0xb0 [ 109.031657][ T7806] __kmalloc_noprof+0xb8/0x580 [ 109.031688][ T7806] ? bpf_test_init+0x86/0x130 [ 109.031728][ T7806] bpf_test_init+0x86/0x130 [ 109.031775][ T7806] bpf_prog_test_run_xdp+0x306/0xa10 [ 109.031844][ T7806] ? __rcu_read_unlock+0x4e/0x70 [ 109.031887][ T7806] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 109.031946][ T7806] bpf_prog_test_run+0x204/0x340 [ 109.031983][ T7806] __sys_bpf+0x4c0/0x7b0 [ 109.032025][ T7806] __x64_sys_bpf+0x41/0x50 [ 109.032053][ T7806] x64_sys_call+0x28e1/0x3000 [ 109.032114][ T7806] do_syscall_64+0xc0/0x2a0 [ 109.032152][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.032257][ T7806] RIP: 0033:0x7f2b0091aeb9 [ 109.032276][ T7806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.032312][ T7806] RSP: 002b:00007f2aff36f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.032338][ T7806] RAX: ffffffffffffffda RBX: 00007f2b00b95fa0 RCX: 00007f2b0091aeb9 [ 109.032414][ T7806] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 109.032430][ T7806] RBP: 00007f2aff36f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.032487][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.032513][ T7806] R13: 00007f2b00b96038 R14: 00007f2b00b95fa0 R15: 00007fff84140868 [ 109.032579][ T7806] [ 109.344350][ T7815] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.370774][ T7812] loop2: detected capacity change from 0 to 4096 [ 109.422367][ T7812] loop2: detected capacity change from 0 to 128 [ 109.553262][ T7835] netlink: 'syz.1.1539': attribute type 12 has an invalid length. [ 109.724526][ T7846] netlink: 'syz.5.1546': attribute type 11 has an invalid length. [ 109.750149][ T7838] 9p: Bad value for 'rfdno' [ 109.771545][ T7850] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 109.863824][ T7863] __nla_validate_parse: 10 callbacks suppressed [ 109.863846][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 110.111002][ T7866] chnl_net:caif_netlink_parms(): no params data found [ 110.175850][ T7866] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.183236][ T7866] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.190896][ T7866] bridge_slave_0: entered allmulticast mode [ 110.197763][ T7866] bridge_slave_0: entered promiscuous mode [ 110.204911][ T7866] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.212256][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.220413][ T7866] bridge_slave_1: entered allmulticast mode [ 110.227019][ T7866] bridge_slave_1: entered promiscuous mode [ 110.267949][ T7866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.278911][ T7866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.301512][ T7866] team0: Port device team_slave_0 added [ 110.308941][ T7866] team0: Port device team_slave_1 added [ 110.329415][ T7866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.336492][ T7866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.362597][ T7866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.377944][ T7866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.384992][ T7866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.411295][ T7866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.457760][ T7866] hsr_slave_0: entered promiscuous mode [ 110.464417][ T7866] hsr_slave_1: entered promiscuous mode [ 110.470892][ T7866] debugfs: 'hsr0' already exists in 'hsr' [ 110.476756][ T7866] Cannot create hsr debugfs directory [ 110.556878][ T7897] FAULT_INJECTION: forcing a failure. [ 110.556878][ T7897] name failslab, interval 1, probability 0, space 0, times 0 [ 110.569730][ T7897] CPU: 1 UID: 0 PID: 7897 Comm: syz.3.1559 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.569761][ T7897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 110.569775][ T7897] Call Trace: [ 110.569806][ T7897] [ 110.569894][ T7897] __dump_stack+0x1d/0x30 [ 110.569926][ T7897] dump_stack_lvl+0x95/0xd0 [ 110.569955][ T7897] dump_stack+0x15/0x1b [ 110.570053][ T7897] should_fail_ex+0x263/0x280 [ 110.570091][ T7897] should_failslab+0x8c/0xb0 [ 110.570124][ T7897] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 110.570193][ T7897] ? __d_alloc+0x37/0x340 [ 110.570279][ T7897] __d_alloc+0x37/0x340 [ 110.570311][ T7897] ? number+0xa78/0xb90 [ 110.570344][ T7897] d_alloc_parallel+0x54/0xce0 [ 110.570380][ T7897] ? __d_lookup+0x316/0x340 [ 110.570444][ T7897] ? lookup_noperm_common+0x1c2/0x2a0 [ 110.570484][ T7897] ? d_lookup+0xb2/0xd0 [ 110.570572][ T7897] proc_fill_cache+0x17b/0x260 [ 110.570596][ T7897] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 110.570690][ T7897] proc_map_files_readdir+0x521/0x6a0 [ 110.570805][ T7897] iterate_dir+0x114/0x330 [ 110.570905][ T7897] __se_sys_getdents+0xd2/0x220 [ 110.570948][ T7897] ? __pfx_filldir+0x10/0x10 [ 110.570970][ T7897] __x64_sys_getdents+0x43/0x50 [ 110.571039][ T7897] x64_sys_call+0xe03/0x3000 [ 110.571102][ T7897] do_syscall_64+0xc0/0x2a0 [ 110.571198][ T7897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.571303][ T7897] RIP: 0033:0x7f2b0091aeb9 [ 110.571324][ T7897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.571413][ T7897] RSP: 002b:00007f2aff36f028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 110.571440][ T7897] RAX: ffffffffffffffda RBX: 00007f2b00b95fa0 RCX: 00007f2b0091aeb9 [ 110.571458][ T7897] RDX: 0000000000000031 RSI: 00002000000000c0 RDI: 0000000000000003 [ 110.571484][ T7897] RBP: 00007f2aff36f090 R08: 0000000000000000 R09: 0000000000000000 [ 110.571502][ T7897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.571599][ T7897] R13: 00007f2b00b96038 R14: 00007f2b00b95fa0 R15: 00007fff84140868 [ 110.571628][ T7897] [ 110.598720][ T7866] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 110.768444][ T7899] xt_l2tp: missing protocol rule (udp|l2tpip) [ 110.814357][ T7866] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 110.865645][ T7905] FAULT_INJECTION: forcing a failure. [ 110.865645][ T7905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.879043][ T7905] CPU: 1 UID: 0 PID: 7905 Comm: syz.0.1563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.879073][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 110.879087][ T7905] Call Trace: [ 110.879094][ T7905] [ 110.879113][ T7905] __dump_stack+0x1d/0x30 [ 110.879210][ T7905] dump_stack_lvl+0x95/0xd0 [ 110.879246][ T7905] dump_stack+0x15/0x1b [ 110.879270][ T7905] should_fail_ex+0x263/0x280 [ 110.879318][ T7905] should_fail+0xb/0x20 [ 110.879390][ T7905] should_fail_usercopy+0x1a/0x20 [ 110.879449][ T7905] _copy_from_user+0x1c/0xb0 [ 110.879471][ T7905] __sys_bpf+0x183/0x7b0 [ 110.879510][ T7905] __x64_sys_bpf+0x41/0x50 [ 110.879565][ T7905] x64_sys_call+0x28e1/0x3000 [ 110.879669][ T7905] do_syscall_64+0xc0/0x2a0 [ 110.879716][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.879752][ T7905] RIP: 0033:0x7f7c451daeb9 [ 110.879770][ T7905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.879790][ T7905] RSP: 002b:00007f7c43c2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.879812][ T7905] RAX: ffffffffffffffda RBX: 00007f7c45455fa0 RCX: 00007f7c451daeb9 [ 110.879838][ T7905] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 110.879852][ T7905] RBP: 00007f7c43c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 110.879907][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.879920][ T7905] R13: 00007f7c45456038 R14: 00007f7c45455fa0 R15: 00007ffeaf9cd988 [ 110.879943][ T7905] [ 110.880266][ T7866] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 111.053870][ T7866] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 111.075905][ T7908] macvtap0: entered promiscuous mode [ 111.082221][ T7908] macvtap0: left promiscuous mode [ 111.201885][ T7915] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1566'. [ 111.211495][ T7915] FAULT_INJECTION: forcing a failure. [ 111.211495][ T7915] name failslab, interval 1, probability 0, space 0, times 0 [ 111.224474][ T7915] CPU: 0 UID: 0 PID: 7915 Comm: syz.1.1566 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.224522][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 111.224538][ T7915] Call Trace: [ 111.224546][ T7915] [ 111.224556][ T7915] __dump_stack+0x1d/0x30 [ 111.224587][ T7915] dump_stack_lvl+0x95/0xd0 [ 111.224630][ T7915] dump_stack+0x15/0x1b [ 111.224656][ T7915] should_fail_ex+0x263/0x280 [ 111.224743][ T7915] should_failslab+0x8c/0xb0 [ 111.224829][ T7915] ? rtnl_newlink+0x66f/0x1370 [ 111.224854][ T7915] __kmalloc_cache_noprof+0x64/0x4a0 [ 111.224915][ T7915] ? __request_module+0x1c4/0x3d0 [ 111.224994][ T7915] ? rtnl_newlink+0x66f/0x1370 [ 111.225058][ T7915] __request_module+0x1c4/0x3d0 [ 111.225109][ T7915] rtnl_newlink+0x66f/0x1370 [ 111.225152][ T7915] ? __rcu_read_unlock+0x4e/0x70 [ 111.225241][ T7915] ? __memcg_slab_free_hook+0x135/0x230 [ 111.225315][ T7915] ? __rcu_read_unlock+0x4e/0x70 [ 111.225427][ T7915] ? avc_has_perm_noaudit+0xab/0x130 [ 111.225472][ T7915] ? cred_has_capability+0x224/0x290 [ 111.225585][ T7915] ? selinux_capable+0x31/0x40 [ 111.225606][ T7915] ? security_capable+0x7b/0x90 [ 111.225667][ T7915] ? ns_capable+0x7c/0xb0 [ 111.225704][ T7915] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.225734][ T7915] rtnetlink_rcv_msg+0x64b/0x720 [ 111.225771][ T7915] netlink_rcv_skb+0x123/0x220 [ 111.225862][ T7915] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.225894][ T7915] rtnetlink_rcv+0x1c/0x30 [ 111.225921][ T7915] netlink_unicast+0x5c0/0x690 [ 111.226050][ T7915] netlink_sendmsg+0x5c8/0x6f0 [ 111.226079][ T7915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.226105][ T7915] ____sys_sendmsg+0x5af/0x600 [ 111.226131][ T7915] ___sys_sendmsg+0x195/0x1e0 [ 111.226207][ T7915] __x64_sys_sendmsg+0xd4/0x160 [ 111.226239][ T7915] x64_sys_call+0x17ba/0x3000 [ 111.226273][ T7915] do_syscall_64+0xc0/0x2a0 [ 111.226357][ T7915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.226379][ T7915] RIP: 0033:0x7f14f39eaeb9 [ 111.226443][ T7915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.226468][ T7915] RSP: 002b:00007f14f243f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.226495][ T7915] RAX: ffffffffffffffda RBX: 00007f14f3c65fa0 RCX: 00007f14f39eaeb9 [ 111.226574][ T7915] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 111.226593][ T7915] RBP: 00007f14f243f090 R08: 0000000000000000 R09: 0000000000000000 [ 111.226609][ T7915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.226622][ T7915] R13: 00007f14f3c66038 R14: 00007f14f3c65fa0 R15: 00007ffe38fe99f8 [ 111.226644][ T7915] [ 111.496241][ T7915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1566'. [ 111.506791][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.535574][ T7931] FAULT_INJECTION: forcing a failure. [ 111.535574][ T7931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.548769][ T7931] CPU: 0 UID: 0 PID: 7931 Comm: syz.1.1569 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.548811][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 111.548830][ T7931] Call Trace: [ 111.548839][ T7931] [ 111.548863][ T7931] __dump_stack+0x1d/0x30 [ 111.548898][ T7931] dump_stack_lvl+0x95/0xd0 [ 111.549040][ T7931] dump_stack+0x15/0x1b [ 111.549068][ T7931] should_fail_ex+0x263/0x280 [ 111.549113][ T7931] should_fail+0xb/0x20 [ 111.549179][ T7931] should_fail_usercopy+0x1a/0x20 [ 111.549222][ T7931] _copy_from_iter+0xcf/0xea0 [ 111.549247][ T7931] ? selinux_file_open+0x2e6/0x330 [ 111.549352][ T7931] ? skb_set_owner_w+0x19b/0x200 [ 111.549407][ T7931] ? sock_alloc_send_pskb+0x469/0x500 [ 111.549437][ T7931] skb_copy_datagram_from_iter+0xb2/0x480 [ 111.549508][ T7931] ? skb_put+0xa9/0xf0 [ 111.549548][ T7931] tun_get_user+0x90b/0x27c0 [ 111.549594][ T7931] ? ref_tracker_alloc+0x1f2/0x2f0 [ 111.549645][ T7931] tun_chr_write_iter+0x15e/0x210 [ 111.549729][ T7931] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 111.549757][ T7931] vfs_write+0x5a6/0x9f0 [ 111.549827][ T7931] ksys_write+0xdc/0x1a0 [ 111.549856][ T7931] __x64_sys_write+0x40/0x50 [ 111.549897][ T7931] x64_sys_call+0x2847/0x3000 [ 111.549943][ T7931] do_syscall_64+0xc0/0x2a0 [ 111.549986][ T7931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.550016][ T7931] RIP: 0033:0x7f14f39ab78e [ 111.550064][ T7931] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.550094][ T7931] RSP: 002b:00007f14f243efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.550121][ T7931] RAX: ffffffffffffffda RBX: 00007f14f243f6c0 RCX: 00007f14f39ab78e [ 111.550142][ T7931] RDX: 0000000000000e80 RSI: 0000200000000340 RDI: 00000000000000c8 [ 111.550232][ T7931] RBP: 00007f14f243f090 R08: 0000000000000000 R09: 0000000000000000 [ 111.550250][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.550267][ T7931] R13: 00007f14f3c66038 R14: 00007f14f3c65fa0 R15: 00007ffe38fe99f8 [ 111.550375][ T7931] [ 111.640645][ T7866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.786595][ T7866] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.830912][ T5474] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.838173][ T5474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.852092][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.859411][ T5474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.873180][ T7937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1573'. [ 111.906192][ T7937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1573'. [ 111.918267][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1574'. [ 111.950845][ T7947] loop5: detected capacity change from 0 to 512 [ 111.961352][ T7948] 9p: Bad value for 'rfdno' [ 111.985807][ T7947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.002290][ T7947] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.081220][ T7866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.183315][ T3810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.247582][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1579'. [ 112.319565][ T7975] loop1: detected capacity change from 0 to 164 [ 112.471269][ T7981] sctp: [Deprecated]: syz.5.1583 (pid 7981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.471269][ T7981] Use struct sctp_sack_info instead [ 112.542401][ T7866] veth0_vlan: entered promiscuous mode [ 112.589892][ T7866] veth1_vlan: entered promiscuous mode [ 112.597065][ T7993] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1585'. [ 112.651911][ T7866] veth0_macvtap: entered promiscuous mode [ 112.666220][ T7866] veth1_macvtap: entered promiscuous mode [ 112.686855][ T7866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.697075][ T7866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.728067][ T5458] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.754513][ T5458] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.789386][ T5458] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.801058][ T5458] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.889438][ T8013] loop3: detected capacity change from 0 to 128 [ 112.900520][ T8013] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.914804][ T8013] ext4 filesystem being mounted at /331/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.954121][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1593'. [ 112.964641][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1593'. [ 113.214131][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 113.214175][ T29] audit: type=1400 audit(2000000013.180:2377): avc: denied { setattr } for pid=8012 comm="syz.3.1593" path="/331/mnt" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.355057][ T8028] FAULT_INJECTION: forcing a failure. [ 113.355057][ T8028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.368855][ T8028] CPU: 1 UID: 0 PID: 8028 Comm: syz.5.1596 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.368887][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 113.369315][ T8028] Call Trace: [ 113.369323][ T8028] [ 113.369332][ T8028] __dump_stack+0x1d/0x30 [ 113.369359][ T8028] dump_stack_lvl+0x95/0xd0 [ 113.369382][ T8028] dump_stack+0x15/0x1b [ 113.369485][ T8028] should_fail_ex+0x263/0x280 [ 113.369944][ T8028] should_fail+0xb/0x20 [ 113.369973][ T8028] should_fail_usercopy+0x1a/0x20 [ 113.370052][ T8028] _copy_from_iter+0xcf/0xea0 [ 113.370076][ T8028] ? __rcu_read_unlock+0x4e/0x70 [ 113.370132][ T8028] tun_get_user+0x15f/0x27c0 [ 113.370169][ T8028] ? ref_tracker_alloc+0x1f2/0x2f0 [ 113.370633][ T8028] tun_chr_write_iter+0x15e/0x210 [ 113.370657][ T8028] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 113.370678][ T8028] vfs_write+0x5a6/0x9f0 [ 113.370713][ T8028] ksys_write+0xdc/0x1a0 [ 113.370735][ T8028] __x64_sys_write+0x40/0x50 [ 113.370756][ T8028] x64_sys_call+0x2847/0x3000 [ 113.370787][ T8028] do_syscall_64+0xc0/0x2a0 [ 113.371246][ T8028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.371292][ T8028] RIP: 0033:0x7fb60f6aaeb9 [ 113.371309][ T8028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.371328][ T8028] RSP: 002b:00007fb60e0de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.371350][ T8028] RAX: ffffffffffffffda RBX: 00007fb60f926090 RCX: 00007fb60f6aaeb9 [ 113.371363][ T8028] RDX: 000000000000002a RSI: 0000200000000200 RDI: 0000000000000003 [ 113.371414][ T8028] RBP: 00007fb60e0de090 R08: 0000000000000000 R09: 0000000000000000 [ 113.371427][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.371440][ T8028] R13: 00007fb60f926128 R14: 00007fb60f926090 R15: 00007ffee63a1718 [ 113.371464][ T8028] [ 113.622527][ T8031] loop0: detected capacity change from 0 to 2048 [ 113.676310][ T8031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.772158][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.792210][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.844088][ T29] audit: type=1326 audit(2000000013.800:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 113.867769][ T29] audit: type=1326 audit(2000000013.800:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 113.891378][ T29] audit: type=1326 audit(2000000013.800:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 113.915287][ T29] audit: type=1326 audit(2000000013.800:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 113.938906][ T29] audit: type=1326 audit(2000000013.800:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 113.962499][ T29] audit: type=1326 audit(2000000013.800:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 113.986609][ T29] audit: type=1326 audit(2000000013.800:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 114.010604][ T29] audit: type=1326 audit(2000000013.800:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 114.034857][ T29] audit: type=1326 audit(2000000013.800:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 114.135054][ T8047] net_ratelimit: 10 callbacks suppressed [ 114.135071][ T8047] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 114.214856][ T8053] loop5: detected capacity change from 0 to 2048 [ 114.422156][ T8029] loop6: detected capacity change from 0 to 1024 [ 114.452309][ T8066] loop3: detected capacity change from 0 to 4096 [ 114.466751][ T8066] ext4: Unknown parameter 'appraise_type' [ 114.469223][ T8029] EXT4-fs: Ignoring removed bh option [ 114.505319][ T8029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 114.556567][ T8073] loop5: detected capacity change from 0 to 512 [ 114.579415][ T8076] 9p: Bad value for 'wfdno' [ 114.621506][ T8029] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.1595: corrupted in-inode xattr: overlapping e_value [ 114.658060][ T8073] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.696142][ T8073] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.1611: corrupted in-inode xattr: e_value size too large [ 114.752706][ T8073] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1611: couldn't read orphan inode 15 (err -117) [ 114.804776][ T8081] loop3: detected capacity change from 0 to 512 [ 114.811729][ T8073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.849792][ T8081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.972746][ T8081] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.010731][ T3810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.028188][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.057408][ T8085] xt_l2tp: missing protocol rule (udp|l2tpip) [ 115.069279][ T8025] syz.6.1595 (8025) used greatest stack depth: 7272 bytes left [ 115.104990][ T7866] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 115.156849][ T8095] netlink: 'syz.6.1616': attribute type 11 has an invalid length. [ 115.206821][ T8100] FAULT_INJECTION: forcing a failure. [ 115.206821][ T8100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.220095][ T8100] CPU: 1 UID: 0 PID: 8100 Comm: syz.5.1618 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.220191][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 115.220209][ T8100] Call Trace: [ 115.220218][ T8100] [ 115.220227][ T8100] __dump_stack+0x1d/0x30 [ 115.220260][ T8100] dump_stack_lvl+0x95/0xd0 [ 115.220288][ T8100] dump_stack+0x15/0x1b [ 115.220313][ T8100] should_fail_ex+0x263/0x280 [ 115.220373][ T8100] should_fail+0xb/0x20 [ 115.220408][ T8100] should_fail_usercopy+0x1a/0x20 [ 115.220450][ T8100] _copy_to_user+0x20/0xa0 [ 115.220559][ T8100] simple_read_from_buffer+0xb5/0x130 [ 115.220646][ T8100] proc_fail_nth_read+0x10e/0x150 [ 115.220679][ T8100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.220707][ T8100] vfs_read+0x1ab/0x7f0 [ 115.220788][ T8100] ? __rcu_read_unlock+0x4e/0x70 [ 115.220819][ T8100] ? __fget_files+0x184/0x1c0 [ 115.220850][ T8100] ? mutex_lock+0x57/0x90 [ 115.220885][ T8100] ksys_read+0xdc/0x1a0 [ 115.220907][ T8100] __x64_sys_read+0x40/0x50 [ 115.220928][ T8100] x64_sys_call+0x2889/0x3000 [ 115.220967][ T8100] do_syscall_64+0xc0/0x2a0 [ 115.221028][ T8100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.221074][ T8100] RIP: 0033:0x7fb60f66b78e [ 115.221096][ T8100] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.221117][ T8100] RSP: 002b:00007fb60e0fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.221140][ T8100] RAX: ffffffffffffffda RBX: 00007fb60e0ff6c0 RCX: 00007fb60f66b78e [ 115.221188][ T8100] RDX: 000000000000000f RSI: 00007fb60e0ff0a0 RDI: 0000000000000004 [ 115.221234][ T8100] RBP: 00007fb60e0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 115.221249][ T8100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.221294][ T8100] R13: 00007fb60f926038 R14: 00007fb60f925fa0 R15: 00007ffee63a1718 [ 115.221324][ T8100] [ 115.539659][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.579762][ T8120] __nla_validate_parse: 3 callbacks suppressed [ 115.579798][ T8120] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1621'. [ 115.662588][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1628'. [ 115.703164][ T8133] loop5: detected capacity change from 0 to 512 [ 115.719743][ T8133] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.742099][ T8133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.814929][ T8145] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.1629: lblock 23 mapped to illegal pblock 18 (length 1) [ 115.953014][ T8140] loop0: detected capacity change from 0 to 1764 [ 116.012988][ T8152] netlink: 'syz.1.1635': attribute type 30 has an invalid length. [ 116.052679][ T8138] loop6: detected capacity change from 0 to 32768 [ 116.233803][ T8159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8159 comm=syz.0.1637 [ 116.287247][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'. [ 116.632721][ T3810] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 116.664822][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 116.677302][ T3810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.711291][ T8189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8189 comm=syz.5.1649 [ 116.947172][ T8211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8211 comm=syz.5.1659 [ 116.960619][ T8210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1658'. [ 117.019161][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 117.068958][ T8225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8225 comm=syz.0.1664 [ 117.161647][ T8233] sctp: [Deprecated]: syz.0.1665 (pid 8233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.161647][ T8233] Use struct sctp_sack_info instead [ 117.178870][ T8233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1665'. [ 117.300150][ T8243] pim6reg9: entered allmulticast mode [ 117.371140][ T8245] tipc: MTU too low for tipc bearer [ 117.510332][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1675'. [ 117.550830][ T8260] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1676'. [ 117.618522][ T8262] xt_l2tp: missing protocol rule (udp|l2tpip) [ 117.705032][ T8269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1679'. [ 117.978783][ T8295] FAULT_INJECTION: forcing a failure. [ 117.978783][ T8295] name failslab, interval 1, probability 0, space 0, times 0 [ 117.991681][ T8295] CPU: 1 UID: 0 PID: 8295 Comm: syz.0.1689 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.991710][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 117.991733][ T8295] Call Trace: [ 117.991740][ T8295] [ 117.991748][ T8295] __dump_stack+0x1d/0x30 [ 117.991774][ T8295] dump_stack_lvl+0x95/0xd0 [ 117.991829][ T8295] dump_stack+0x15/0x1b [ 117.991858][ T8295] should_fail_ex+0x263/0x280 [ 117.991969][ T8295] should_failslab+0x8c/0xb0 [ 117.992036][ T8295] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 117.992069][ T8295] ? __alloc_skb+0x2f0/0x4b0 [ 117.992109][ T8295] __alloc_skb+0x2f0/0x4b0 [ 117.992208][ T8295] ? __alloc_skb+0x219/0x4b0 [ 117.992238][ T8295] netlink_alloc_large_skb+0xbf/0xf0 [ 117.992294][ T8295] netlink_sendmsg+0x40c/0x6f0 [ 117.992322][ T8295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.992354][ T8295] ____sys_sendmsg+0x5af/0x600 [ 117.992377][ T8295] ___sys_sendmsg+0x195/0x1e0 [ 117.992419][ T8295] __x64_sys_sendmsg+0xd4/0x160 [ 117.992450][ T8295] x64_sys_call+0x17ba/0x3000 [ 117.992501][ T8295] do_syscall_64+0xc0/0x2a0 [ 117.992533][ T8295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.992558][ T8295] RIP: 0033:0x7f7c451daeb9 [ 117.992615][ T8295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.992634][ T8295] RSP: 002b:00007f7c43c2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.992668][ T8295] RAX: ffffffffffffffda RBX: 00007f7c45455fa0 RCX: 00007f7c451daeb9 [ 117.992685][ T8295] RDX: 0000000004000080 RSI: 0000200000001200 RDI: 0000000000000003 [ 117.992698][ T8295] RBP: 00007f7c43c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 117.992715][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.992731][ T8295] R13: 00007f7c45456038 R14: 00007f7c45455fa0 R15: 00007ffeaf9cd988 [ 117.992757][ T8295] [ 118.247671][ T8304] xt_l2tp: missing protocol rule (udp|l2tpip) [ 118.287095][ T8305] loop0: detected capacity change from 0 to 4096 [ 118.306445][ T8308] tipc: Enabling of bearer rejected, failed to enable media [ 118.359555][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 118.359571][ T29] audit: type=1326 audit(2000000018.320:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 118.389492][ T29] audit: type=1326 audit(2000000018.320:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 118.413276][ T29] audit: type=1326 audit(2000000018.320:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 118.436866][ T29] audit: type=1326 audit(2000000018.330:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 118.460509][ T29] audit: type=1326 audit(2000000018.330:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 118.484722][ T29] audit: type=1326 audit(2000000018.330:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 118.510155][ T29] audit: type=1326 audit(2000000018.320:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 118.533994][ T29] audit: type=1326 audit(2000000018.390:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 118.558570][ T29] audit: type=1326 audit(2000000018.390:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 118.582632][ T29] audit: type=1326 audit(2000000018.420:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c451daeb9 code=0x7ffc0000 [ 118.793118][ T8334] loop0: detected capacity change from 0 to 1024 [ 118.804413][ T8334] EXT4-fs: Ignoring removed orlov option [ 118.810782][ T8334] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 118.831184][ T8334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.869523][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.879893][ T8326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.889260][ T8326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.976288][ T8342] netlink: 'syz.0.1705': attribute type 27 has an invalid length. [ 119.023677][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.030966][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.084214][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.094297][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.156181][ T3433] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.165352][ T3433] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.191468][ T3433] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.202788][ T3433] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.229433][ T8348] loop0: detected capacity change from 0 to 4096 [ 119.274360][ T8348] loop0: detected capacity change from 0 to 128 [ 119.631216][ T8356] syzkaller0: entered promiscuous mode [ 119.636806][ T8356] syzkaller0: entered allmulticast mode [ 119.653735][ T8356] tipc: Enabled bearer , priority 0 [ 119.666277][ T8356] tipc: Resetting bearer [ 119.674148][ T8355] tipc: Resetting bearer [ 119.692143][ T8355] tipc: Disabling bearer [ 119.812227][ T8362] netlink: 'syz.6.1714': attribute type 21 has an invalid length. [ 119.825975][ T3433] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.837597][ T3433] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.845564][ T8362] netlink: 'syz.6.1714': attribute type 21 has an invalid length. [ 119.858298][ T3433] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.872064][ T3433] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.942014][ T8374] bridge_slave_0: entered promiscuous mode [ 119.958043][ T8374] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 119.993481][ T8376] loop5: detected capacity change from 0 to 4096 [ 120.027945][ T8376] loop5: detected capacity change from 0 to 128 [ 120.243609][ T8388] loop6: detected capacity change from 0 to 512 [ 120.254404][ T8388] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 120.278447][ T8388] EXT4-fs (loop6): orphan cleanup on readonly fs [ 120.300697][ T8388] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.1723: Block bitmap for bg 0 marked uninitialized [ 120.323678][ T5458] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.334588][ T8388] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 120.348447][ T8388] EXT4-fs (loop6): 1 orphan inode deleted [ 120.366721][ T8388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 120.411781][ T5458] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.444159][ T7866] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.450320][ T8401] team0: Device gtp0 is of different type [ 120.510235][ T5458] bond0: (slave netdevsim1): Releasing backup interface [ 120.521580][ T5458] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.534344][ T8404] loop6: detected capacity change from 0 to 4096 [ 120.578180][ T8404] loop6: detected capacity change from 0 to 128 [ 120.594790][ T5458] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.615483][ T8404] ================================================================== [ 120.623677][ T8404] BUG: KCSAN: data-race in fat32_ent_put / fat_mirror_bhs [ 120.630956][ T8404] [ 120.633304][ T8404] read-write to 0xffff88811c64213c of 4 bytes by task 8412 on cpu 0: [ 120.641573][ T8404] fat32_ent_put+0x4e/0x90 [ 120.646031][ T8404] fat_alloc_clusters+0x57b/0xc50 [ 120.651083][ T8404] fat_get_block+0x258/0x5e0 [ 120.655812][ T8404] __block_write_begin_int+0x400/0xf90 [ 120.661325][ T8404] cont_write_begin+0x5fe/0x970 [ 120.666215][ T8404] fat_write_begin+0x4f/0xe0 [ 120.670835][ T8404] cont_write_begin+0x1b0/0x970 [ 120.675825][ T8404] fat_write_begin+0x4f/0xe0 [ 120.680535][ T8404] generic_perform_write+0x183/0x490 [ 120.685882][ T8404] __generic_file_write_iter+0x9e/0x120 [ 120.691478][ T8404] generic_file_write_iter+0x8d/0x310 [ 120.696979][ T8404] __kernel_write_iter+0x319/0x590 [ 120.702126][ T8404] dump_user_range+0xa7d/0xdb0 [ 120.706936][ T8404] elf_core_dump+0x21a2/0x2330 [ 120.711739][ T8404] coredump_write+0xacf/0xdf0 [ 120.716467][ T8404] vfs_coredump+0x26bc/0x3120 [ 120.721185][ T8404] get_signal+0xd7b/0xf60 [ 120.725547][ T8404] arch_do_signal_or_restart+0x96/0x450 [ 120.731136][ T8404] exit_to_user_mode_loop+0x6a/0x6f0 [ 120.736479][ T8404] do_syscall_64+0x1d3/0x2a0 [ 120.741211][ T8404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.747137][ T8404] [ 120.749491][ T8404] read to 0xffff88811c642000 of 512 bytes by task 8404 on cpu 1: [ 120.757354][ T8404] fat_mirror_bhs+0x1df/0x320 [ 120.762069][ T8404] fat_ent_write+0xd0/0xe0 [ 120.766515][ T8404] fat_chain_add+0x16c/0x490 [ 120.771312][ T8404] fat_get_block+0x46c/0x5e0 [ 120.775940][ T8404] __block_write_begin_int+0x400/0xf90 [ 120.781447][ T8404] cont_write_begin+0x5fe/0x970 [ 120.786435][ T8404] fat_write_begin+0x4f/0xe0 [ 120.791083][ T8404] cont_write_begin+0x1b0/0x970 [ 120.795969][ T8404] fat_write_begin+0x4f/0xe0 [ 120.800628][ T8404] generic_cont_expand_simple+0xb0/0x150 [ 120.806382][ T8404] fat_cont_expand+0x3e/0x170 [ 120.811108][ T8404] fat_setattr+0x2a4/0x8a0 [ 120.815744][ T8404] notify_change+0x872/0x8f0 [ 120.820389][ T8404] do_ftruncate+0x349/0x3d0 [ 120.824941][ T8404] __x64_sys_ftruncate+0x68/0xc0 [ 120.830520][ T8404] x64_sys_call+0x2e35/0x3000 [ 120.835237][ T8404] do_syscall_64+0xc0/0x2a0 [ 120.839787][ T8404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.845723][ T8404] [ 120.848074][ T8404] Reported by Kernel Concurrency Sanitizer on: [ 120.854442][ T8404] CPU: 1 UID: 0 PID: 8404 Comm: syz.6.1731 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.864371][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 120.874468][ T8404] ================================================================== [ 121.082156][ T5458] bridge_slave_1: left allmulticast mode [ 121.087862][ T5458] bridge_slave_1: left promiscuous mode [ 121.093732][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.119924][ T5458] bridge_slave_0: left allmulticast mode [ 121.125631][ T5458] bridge_slave_0: left promiscuous mode [ 121.133149][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.310517][ T5458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.321704][ T5458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.332507][ T5458] bond0 (unregistering): Released all slaves [ 121.381211][ T5458] tipc: Left network mode [ 121.391628][ T5458] hsr_slave_0: left promiscuous mode [ 121.397584][ T5458] hsr_slave_1: left promiscuous mode [ 121.403458][ T5458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.410975][ T5458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.420288][ T5458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.427711][ T5458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.437585][ T5458] batman_adv: batadv0: Interface deactivated: dummy0 [ 121.444525][ T5458] batman_adv: batadv0: Removing interface: dummy0 [ 121.455444][ T5458] veth1_macvtap: left promiscuous mode [ 121.461247][ T5458] veth0_macvtap: left promiscuous mode [ 121.466802][ T5458] veth1_vlan: left promiscuous mode [ 121.472399][ T5458] veth0_vlan: left promiscuous mode [ 121.552354][ T5458] team0 (unregistering): Port device team_slave_1 removed [ 121.569448][ T5458] team0 (unregistering): Port device team_slave_0 removed [ 121.706182][ T5474] kworker/u8:15: attempt to access beyond end of device [ 121.706182][ T5474] loop6: rw=8388609, sector=138, nr_sectors = 1 limit=128 [ 121.720197][ T5474] Buffer I/O error on dev loop6, logical block 138, lost async page write [ 121.729128][ T5474] kworker/u8:15: attempt to access beyond end of device [ 121.729128][ T5474] loop6: rw=8388609, sector=139, nr_sectors = 1 limit=128 [ 121.743166][ T5474] Buffer I/O error on dev loop6, logical block 139, lost async page write [ 121.752278][ T5474] kworker/u8:15: attempt to access beyond end of device [ 121.752278][ T5474] loop6: rw=8388609, sector=140, nr_sectors = 1 limit=128 [ 121.766407][ T5474] Buffer I/O error on dev loop6, logical block 140, lost async page write [ 121.776750][ T5474] kworker/u8:15: attempt to access beyond end of device [ 121.776750][ T5474] loop6: rw=8388609, sector=141, nr_sectors = 1 limit=128 [ 121.790919][ T5474] Buffer I/O error on dev loop6, logical block 141, lost async page write [ 121.800765][ T5474] kworker/u8:15: attempt to access beyond end of device [ 121.800765][ T5474] loop6: rw=8388609, sector=142, nr_sectors = 1 limit=128 [ 121.814794][ T5474] Buffer I/O error on dev loop6, logical block 142, lost async page write [ 121.823623][ T5474] kworker/u8:15: attempt to access beyond end of device [ 121.823623][ T5474] loop6: rw=1, sector=143, nr_sectors = 16 limit=128 [ 122.039458][ T5458] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.049832][ T5458] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.101516][ T5458] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.112235][ T5458] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.161222][ T5458] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.171656][ T5458] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.231299][ T5458] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.241791][ T5458] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.309852][ T5458] bridge_slave_1: left allmulticast mode [ 122.315548][ T5458] bridge_slave_1: left promiscuous mode [ 122.321409][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.329322][ T5458] bridge_slave_0: left allmulticast mode [ 122.335042][ T5458] bridge_slave_0: left promiscuous mode [ 122.340870][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.440734][ T5458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.450873][ T5458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.460769][ T5458] bond0 (unregistering): Released all slaves [ 122.531364][ T5458] hsr_slave_0: left promiscuous mode [ 122.537179][ T5458] hsr_slave_1: left promiscuous mode [ 122.543440][ T5458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.551014][ T5458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.560305][ T5458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.567962][ T5458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.581315][ T5458] veth1_macvtap: left promiscuous mode [ 122.586994][ T5458] veth0_macvtap: left promiscuous mode [ 122.592966][ T5458] veth1_vlan: left promiscuous mode [ 122.598337][ T5458] veth0_vlan: left promiscuous mode [ 122.672874][ T5458] team0 (unregistering): Port device team_slave_1 removed [ 122.683143][ T5458] team0 (unregistering): Port device team_slave_0 removed