last executing test programs: 6.492267616s ago: executing program 3 (id=1401): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) semtimedop(0x0, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(0x0, &(0x7f0000000180)=[{0x2, 0x2, 0x800}, {0x3, 0x5, 0x3000}], 0x2) get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x2) r0 = semget$private(0x0, 0x2, 0xc) semop(r0, &(0x7f0000000000)=[{0x7, 0x5, 0x2000}, {0x2, 0x54}, {0x4, 0xb61, 0x1800}, {0x0, 0x0, 0x800}], 0x4) r1 = socket$unix(0x1, 0x1, 0x0) mbind(&(0x7f0000859000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0)=0x1, 0x1ef, 0x2) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x0, 0x734a, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x1, 0x83, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000080)="75a101010100188d9233a34871d6000000000003", 0x14, 0xfffffffffffffffe) close_range(r1, r2, 0x0) semctl$GETZCNT(0x0, 0x5, 0xf, 0x0) 4.546088981s ago: executing program 3 (id=1406): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) fcntl$lock(0xffffffffffffffff, 0x22, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r1 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x24, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.386774838s ago: executing program 3 (id=1410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x63, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x7e, 0x3, 0x6, 0x0, 0xabe, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x7, 0x7, 0x4, 0x8, 0x2, 0x3bf1, 0x0, 0x3ff, 0x0, 0x489d}, 0x0, 0xe, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x101, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000000) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x800000000000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0x10d}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000680)={0x23b, 0x2, 0x1, 0x8, 0x7, 0x0, [{0x1, 0xb5, 0x4, '\x00', 0x81}, {0x8, 0x5, 0x1, '\x00', 0x480}, {0xd, 0x1, 0x800, '\x00', 0x320a}, {0x4, 0x5, 0x77, '\x00', 0x600}, {0xeba, 0x6, 0xfffffffffffffffe, '\x00', 0x202}, {0x5c, 0x5e, 0x0, '\x00', 0x2080}, {0x5, 0x8000, 0x5}]}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 4.202083318s ago: executing program 3 (id=1414): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x10c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xdc, 0x2, {{0x0, 0x0, 0xe, 0x1000, 0x0, 0xfffffffe}, [@TCA_NETEM_LOSS={0xa0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x3ff, 0x1, 0x8, 0xca}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8020, 0xfe, 0x9, 0xffffffff}}, @NETEM_LOSS_GE={0xfffffffffffffd67, 0x2, {0xf6af, 0x1ff, 0x2, 0x10}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xc2, 0xcd8, 0x7d1, 0xdc}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffffffe, 0x0, 0x6, 0x88, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffffffe, 0xfffffff7, 0x924, 0x101, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x80000001, 0x5, 0x1, 0x79}}]}, @TCA_NETEM_SLOT={0x0, 0xc, {0xffffffffffffffff, 0x10001, 0x400007, 0x11, 0x7, 0x20000}}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x10c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x92}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc0}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) 4.126225681s ago: executing program 3 (id=1415): socket$kcm(0x1e, 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000000600)=""/4099, 0xfdef, 0x110) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16=r3, @ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) 3.860087896s ago: executing program 3 (id=1417): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x6d65, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="0a000300010000", 0x7) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @dev={0xac, 0x14, 0x14, 0x3c}}}}, &(0x7f0000000040)=0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 2.270025231s ago: executing program 4 (id=1429): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) unshare(0x20000400) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r1) socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xe}, 0x2, 0x0, 0x10ffe, 0x0, 0x20000002, 0xb1fe, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) open(&(0x7f00000001c0)='./bus\x00', 0x143bc2, 0x1c0) munlockall() r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x691c, 0x4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.949817115s ago: executing program 0 (id=1431): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x626}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r1, 0xfffff800}, 0x8) socket$inet(0x2, 0x5, 0x2) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x0) 1.91789619s ago: executing program 2 (id=1432): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(&(0x7f0000004000), 0x5, 0x2, 0x0, 0x0, 0xb601fffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r1, 0xfffd) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008451}, 0x20000040) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x24, @loopback, 0x23}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7817, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/111, 0x6f}], 0x1, &(0x7f0000000680)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x2, 0x400000a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x12}}], 0x400000000000181, 0x9200000000000000) 1.846646192s ago: executing program 0 (id=1434): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x100, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x1, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x4008080) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) 1.539347193s ago: executing program 2 (id=1435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.422510483s ago: executing program 2 (id=1436): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200408c0}, 0x51) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b05d25a806c8c6394f90324fc60100003000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.385849959s ago: executing program 2 (id=1439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x800) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@newtaction={0x68, 0x30, 0x100, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40, 0xfffffffffffffffe, 0x4}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x2c, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xfff1, 0xf}, {}, {0xc, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_FW_MASK={0x5, 0x5, 0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00000009000100053582c137153e3702480180000c0000d1bd", 0x33fe0}], 0x1}, 0x0) r10 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x8, 0xb, 0x6, 0x3f5a, 0x1}, &(0x7f00000001c0)=0x14) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000480)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1d3d}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$eJzs3M1vG0UbAPBnNx/9btK+fYF+QA0FEVFImrRADxwKAqkXJCQ4lGNIQ1WatqgJEq0qGhAqR8RfAByRkDhx4QQSQsAJxBXuCKlCvbRwQEFr7yabxEkd24kB/36SnZndWc88uzv27E7sALpWJXtKIrZHxM8RMVDLLi5Qqf25ffPqxB83r04kMTf34u9Jtdytm1cniqLFdlvyzFAakb6bxP469U5fvnJufGpq8lKeH5k5//rI9OUrj509P35m8szkhbHjx48dHX3yibHH2xJnFtetfW9dPLD35MsfPD8xF69892nW3u35+nIcNYMt11mJSszlFpb2V58favnV/1l2lNJJbwcbwpr0RER2uPqq/X8gemLh4A3Ec+/MZ77uUAOBdZN9Nu1atrQn/5vOf34B/0WJPg5dqvjEz65/i8dGjj867cbT2fNkNf7b+aO2pjfS7Fp2sHbFvtIl7YkW698eEadm//wwe0Td+xAAAO31ZTb+ebTe+C+Nu0rlduZzKIMRcTgidkfE/yJiT0T8P6Ja9u6IuGeN9VeW5JePf37c0lRgDcrGf0/lc1uLx39pXiKZz+2oxt+XvHp2avJIvk+Gom9Tlh9dpY6vnv3p/ZXWVUrjv+yR1V+MBfN2/Na7afE2p8dnxlsIeZEbb0fs660XfzI/5s32wN6I2NfE62f77OwjnxzI0ju3LV9/5/hX0YZ5prmPIx6uHf/ZWBJ/IanVtNL85MjmmJo8MlKcFct9/8P1F8r5vlJ6UfybG4tpc7PB1pEd/611z/88/qIbFPO102uv4/ov7614TbP8+CdxarZconb+p6Ul2fnfn7xUTffny94cn5m5NBrRny9YtHxsYdsiX5TP4h86VL//747466N8u/0RkZ3E90bEfRFxMG/7/RHxQEQcWiX+b5958LXV91CT538bZPGfXu34Rwwm5fn6JhI95775YqX6G3v/O1ZNDeVLGnn/a7SBrew7AAAA+LdIq3PQSTpcpEs3p/bE1nTq4vTM4Uq8ceF0ba56MPrS4k7XQOl+6Gh+b7jIjy3JH42IXdX/NNpSzQ9PXJza0cnAgdi2tP9Hmg4P19b92tPp1gHrbk3zaOVvB372efsbA2wo39eE7qX/Q/fS/6F76f/Qver1/2sRtzvQFGCD+fyH7qX/Q/fS/6F76f/QlZZ/Jb74uZVmvum/kNh9sqXN1z0xN7Aurzy79q161inSKP9ox4qJJCKaqyLS1cv0N1B7xxLpHcucaHK3rCFxME9siohGt7q2YXu1s+9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7fJ3AAAA//+Aadzz") r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) 1.364852782s ago: executing program 4 (id=1441): socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x84, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240400d0}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x80400, 0x0) fchdir(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1.264315559s ago: executing program 1 (id=1442): set_mempolicy(0x1, 0x0, 0x7582) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) unshare(0x6020400) r2 = socket(0x22, 0x2, 0x3) r3 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x92, 0x6, 0x0, 0xf, 0x39009, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x100000, 0x3ff, 0xe, 0x1, 0x2, 0x6, 0x8, 0x0, 0x7, 0x0, 0x5df}, r0, 0x10, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bind$x25(r2, 0x0, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 961.57806ms ago: executing program 0 (id=1443): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x4000000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x20002, 0x2) 940.342373ms ago: executing program 0 (id=1444): r0 = syz_io_uring_setup(0x7efd, &(0x7f00000002c0)={0x0, 0xca85, 0x80, 0x2, 0x223}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000400)={0x8, 0x3}, 0xb00) 846.166469ms ago: executing program 0 (id=1445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x181102, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) lremovexattr(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xb4}}, 0x980) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0x1, 0x849a, 0x7c1, 0x4, 0x9, 0x6, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000280)={'geneve0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000140001032dbd7000fcdbdf250b00000008000100", @ANYRES32=r5], 0x1c}}, 0x0) 845.589959ms ago: executing program 1 (id=1446): socket$netlink(0x10, 0x3, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat(r2, &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x450002, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x2, 0x3, 0xff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x76, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 610.156888ms ago: executing program 1 (id=1447): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xd}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b82, 0x0, @perf_bp={0x0, 0x1}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10022, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000200000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800010000000000000000001d0100001500"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 508.084446ms ago: executing program 4 (id=1448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 477.81396ms ago: executing program 2 (id=1449): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200408c0}, 0x51) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b05d25a806c8c6394f90324fc60100003000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 430.314298ms ago: executing program 4 (id=1450): unshare(0x2a020400) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x79, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000002640)=0x9) accept4(r0, 0x0, 0x0, 0x80800) listen(0xffffffffffffffff, 0x5) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x40900) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000001c0)=""/71) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) 407.688322ms ago: executing program 0 (id=1451): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x8001) (async) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x8001) socket$rds(0x15, 0x5, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) pwritev2(r0, &(0x7f0000000040), 0x0, 0x7, 0x101, 0x1e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}]}}, 0x0, 0x26}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000180)={[{@errors_remount}, {@barrier}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x74, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp, 0x16e4c, 0x0, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x74, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp, 0x16e4c, 0x0, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={0x14, r7, 0x1, 0x0, 0x0, {0x36}}, 0x14}}, 0x8014) write(r5, &(0x7f0000019140)='@', 0x1) (async) write(r5, &(0x7f0000019140)='@', 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0xffffffff}, 0x6025, 0x4005, 0xb, 0x6, 0xc2d, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000057c0)) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) ioprio_set$pid(0x3, 0x0, 0x0) sendfile(r5, r2, 0x0, 0x7fffffff) (async) sendfile(r5, r2, 0x0, 0x7fffffff) 407.285972ms ago: executing program 4 (id=1452): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000001, 0x8}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=@newtfilter={0x448, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x41c, 0x2, [@TCA_U32_POLICE={0x4}, @TCA_U32_SEL={0x414, 0x5, {0x3, 0xbf, 0x40, 0xfff, 0x8000, 0x3, 0x8, 0x9c19, [{0x5b5, 0x0, 0xa, 0x10001}, {0x1, 0x7fffffff, 0xa6b7, 0x9}, {0xf16, 0x1ff, 0x5, 0x40}, {0x59c, 0x4, 0x7, 0x9}, {0x7ff, 0x2, 0x0, 0x10000}, {0x2, 0x2, 0xffff, 0x7}, {0x5, 0x6, 0x9, 0x23903cef}, {0x2, 0x9, 0x7, 0x6}, {0xfffffff7, 0x8, 0x80000000, 0x2}, {0x40, 0x80000001, 0x2, 0xc0000000}, {0xa, 0x5, 0x545, 0xd}, {0x9, 0x3, 0xa52, 0x8}, {0x1, 0x3, 0x4, 0x5a8}, {0x7, 0x8b5, 0xff, 0x3}, {0x7ff, 0x0, 0x6, 0x1}, {0x4, 0x8, 0xffff, 0x4}, {0xffffffff, 0x2, 0x1, 0xe}, {0x126c, 0x2ba70bc3, 0x7, 0x7}, {0xc, 0x8, 0x3, 0xb}, {0x8, 0x7, 0x7, 0x7}, {0x4, 0x1, 0x1, 0x56}, {0x0, 0x4, 0x0, 0x1}, {0xfffffffd, 0x8001, 0x200, 0x7}, {0x0, 0xa, 0x800, 0xd849}, {0x5, 0x9, 0x3, 0x2db}, {0x13318b36, 0xffff, 0x9, 0x6}, {0x6, 0x3, 0x8, 0x7}, {0x80000001, 0x9b5d, 0x4c6e, 0x1}, {0x6, 0x5, 0x4d2, 0x292b}, {0x4, 0x1ff, 0x5, 0x4}, {0x80, 0x5, 0xff, 0x1}, {0x4, 0x9b0, 0x2, 0x3}, {0x2000, 0x3, 0x2c, 0x8}, {0x793dd766, 0x3f, 0x7, 0x1ff}, {0x6, 0x2, 0x48b, 0x4}, {0xd, 0xfffffffc, 0x8, 0x57}, {0x687, 0x1, 0x4, 0x1}, {0x4, 0x1bc, 0x1000, 0x9}, {0x6, 0xfffffff9, 0xfffffff9, 0x5}, {0x5, 0x4, 0x4, 0x5}, {0x4, 0x9, 0x1, 0x3}, {0x1, 0x416a, 0xe0000000, 0x40}, {0x2, 0x1, 0x7fff, 0x1}, {0x7, 0x7fff, 0x800, 0x8000}, {0x3, 0x9, 0xfff, 0x7}, {0xbd7, 0xd0c, 0xf, 0x8}, {0x7, 0x2, 0x5, 0x3}, {0x80, 0xe, 0xc09c}, {0xd, 0x9, 0x0, 0x9}, {0x4, 0x4, 0x0, 0x3}, {0x1, 0x8, 0x8, 0x7}, {0x3, 0x2, 0x9, 0x6}, {0x1, 0xd6a1, 0xe9a3, 0xb07}, {0x3, 0xfff, 0x0, 0x1}, {0x48000000, 0x9, 0x4, 0x3fd}, {0x8, 0xfb, 0x800, 0x1}, {0x62, 0x3, 0x5, 0x5}, {0xd5a, 0xffffe007, 0xfffffffb, 0x1000}, {0x81, 0x7, 0x66, 0x1ff}, {0x5, 0xffff8001, 0x1, 0x401}, {0xf, 0x4, 0xffffff09, 0x3bfd}, {0x5, 0x3, 0x5, 0x5}, {0x9c8c, 0x6, 0x9, 0x8}, {0x990, 0x40, 0x2, 0xb}]}}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 400.864183ms ago: executing program 1 (id=1453): socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x84, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x240400d0}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x80400, 0x0) fchdir(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 354.034191ms ago: executing program 2 (id=1454): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) fsopen(0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000001ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3ffffe, 0xfffffff7, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) fcntl$addseals(r4, 0x409, 0xc) 222.065653ms ago: executing program 4 (id=1455): perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff7ffc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x6c, 0x10, 0x439, 0x70bd28, 0x4000, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}, @IFLA_GTP_FD0={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xb}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x9}]}}}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random}, @IFLA_TARGET_NETNSID={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240400d0}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0xe, @local, 0xb}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r8, @ANYBLOB="10100000000000000800002005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r8], 0x40c}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xe7c) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000140)={0x1ff, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x88) 76.166228ms ago: executing program 1 (id=1456): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=1457): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg(r0, &(0x7f0000001740)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000001640)=[{&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f0000000100)=""/250, 0xfa}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/194, 0xc2}, {&(0x7f0000001300)=""/230, 0xe6}, {&(0x7f0000001400)=""/67, 0x43}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f0000001500)=""/239, 0xef}, {&(0x7f0000001600)=""/58, 0x3a}], 0x9, &(0x7f0000001700)=""/63, 0x3f}, 0x0) listen(r0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001780)={0x0, @in={{0x2, 0x4e24, @private=0xa010100}}, 0x7, 0x7, 0x80000000, 0x8001, 0xa1e21d60a63cfee6, 0xfffffff7, 0xc}, &(0x7f0000001840)=0x9c) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000002cc0)={&(0x7f0000001880)=@nl=@unspec, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/134, 0x86}, {&(0x7f00000029c0)=""/244, 0xf4}, {&(0x7f0000002ac0)=""/148, 0x94}], 0x4, &(0x7f0000002bc0)=""/232, 0xe8}, 0x2) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002d00)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002e00)={{0x1, 0xffffffffffffffff}, &(0x7f0000002d80), &(0x7f0000002dc0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002ec0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002e40), &(0x7f0000002e80)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000030c0)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003440)={0xffffffffffffffff, 0xe0, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000003180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f00000031c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f0000003240)=[{}], 0x8, 0x10, &(0x7f0000003280), &(0x7f00000032c0), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000003300)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003500)={{0x1, 0xffffffffffffffff}, &(0x7f0000003480), &(0x7f00000034c0)}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) r11 = syz_open_dev$vcsu(&(0x7f00000035c0), 0x8, 0x4000) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000003680)={0x2, 0x19, &(0x7f0000002f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x9}, @generic={0x52, 0x0, 0xc, 0x3}, @jmp={0x5, 0x0, 0x7, 0x3, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x3, 0x4, 0x4, 0x9, 0x50, 0xffffffffffffffff}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003000)='syzkaller\x00', 0x532, 0x5e, &(0x7f0000003040)=""/94, 0x40f00, 0x25, '\x00', r6, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000003100)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000003140)={0x4, 0x0, 0x7fffffff, 0x401}, 0x10, r8, 0xffffffffffffffff, 0x3, &(0x7f0000003600)=[r9, r10, 0xffffffffffffffff, r11], &(0x7f0000003640)=[{0x5, 0x5, 0xb, 0xc}, {0x5, 0x3, 0x1, 0x2}, {0x1, 0x5, 0x5, 0x7}], 0x10, 0x7fffffff}, 0x94) r13 = accept4(r0, &(0x7f0000003740)=@tipc=@id, &(0x7f00000037c0)=0x80, 0x80000) sendfile(r12, r12, &(0x7f0000003800), 0xfffffffffffffffb) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000005000)={'vxcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000005e80)={r4, 0x58, &(0x7f0000005e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r2, &(0x7f0000006000)=[{{&(0x7f0000003840)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000003bc0)=[{&(0x7f0000003880)="39c53d1fd32fd31d122dadadf69b21de40f8af254404ed6c9a0aae6685851fd63641c08dc7e69b28d13e3f00b5664d618181c458618e1371baf0c30c4b678ac560c30213d6a5dde63c17545d3e808076b0cb6198742725c02a2c78a4de4d650f9b1a864c2b392c4545edf201a50e46d638132b8a889b7da31903ce3bfa23bc9f2d8e32560c738f925352ca838bc398848a492aafff4cc8aeeaf09e738693bddc17cd1f128d73932485be4e0dcbd0a1977bc2713d8b6d905742ef4673c12f886e6a5170d6cfd3924c6ea6f985cc70dedce5c541fae03aa92bc6f5e61803de7f4844676cbcfad923750405df577505153d3f9e14d93c1305", 0xf7}, {&(0x7f0000003980)="7db0c32197eb2c7ab2430c41de2f788be0661287ff7a6d0faff23d0b273eba9738b9e891b8d0bc432a7fc7fee39a27a1fce4d856c2ef109e24ad8116398a7b23fe1b21dc88fcea9cef4b6ba8ee7e8357eb1f2dca480bd443a21dca50d3501592b53baeb767c17da9c31ebaffd6084841de08bb75613822210ceb5afbc9e3312eb5f92c225ac50ec04328b3856a625b320ad0dbb6e0e9", 0x96}, {&(0x7f0000003a40)="daaedb8003c0d4fc2c4eaa46751998cb88e1efc29e07af3849315b0446b28101440eb76af182ae3d812b411ca4ad6887b333ee959522edfe5a24ed07a85904fe38bb085912280f36f5ae7f3a34ed5e51a1dd5da43bbe5128fa5eb09c3f669f851acd1738e946fce23078ec42180101f2bf4d953191a55c97e7d045e283567db407b521c4765a95b2c7606c11b2a5a539ea438b82915e8ce9f6bed59f3b0fdfda96b7e266fab2b08992f6d9b6eb62cf66085f2c6536be509026cfc8a227a77b0e41aeb07c337127272e206ac282d01263754d9e6de67ec240acd6d096a8b92cce0723a86c7012", 0xe6}, {&(0x7f0000003b40)="8eda4c9879e2aed4d1f5239b22712f6a607a84db46d318a4b7c6f624531f3e5538667c41ad6b06bc808bc1bc1b14313aacce20f6417b313fb006afeccb80531696976ba06038cd2d7e3bfcb0df75afe28f721855b7d9f2104fb091af99f129f97ee18c34", 0x64}], 0x4}}, {{&(0x7f0000003c00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003c40), 0x0, &(0x7f0000003c80)=[@ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x86, 0x12, "8d603cbda8940aae011983beda733f7d"}, @lsrr={0x83, 0x13, 0x66, [@local, @rand_addr=0x64010102, @broadcast, @empty]}, @generic={0x7, 0x4, "78e6"}, @ra={0x94, 0x4}, @noop]}}}], 0x40}}, {{&(0x7f0000003cc0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000004f80)=[{&(0x7f0000003d00)="07ff970b17f68a77a9a31b650e44cd3b00544767b3cea25abf1b828ddff5be528d3ab61fe52f918004a18074dc287eb67b283d8fa053ece4ab9606074393120fdc7fba50c95c369e9030ea0b809fbf208c5047e9766e77361e844ca644797c3e3e6c1f817151844f88d00c54dcd64fd14fe0f214909d9f0499ec3f860ff82ea9890f8cf8cf8dc26d232828471e2ddf946edc", 0x92}, {&(0x7f0000003dc0)="2716fa01a595b913ede1a3c104af5ecaf5271c660ae62b4e5a81621fe16bffbd1d5d4aa1ee40af43143e64a6f60a92633f350ecabfc9f7", 0x37}, {&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000004e00)="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", 0xff}, {&(0x7f0000004f00)="e7961e212fbb69f824808ee2afb5d5974d6b110458cd05207a617f9dfaf3c0229ac693cfb6b0052d5ade772a4863d698c119ea20c9b4c49d3e715b898d9447c3f7c26f44d7b8e9b4c8", 0x49}], 0x5, &(0x7f0000005040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x77, [@rand_addr=0x64010101]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x2c}, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x679}}], 0x68}}, {{&(0x7f00000050c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000005200)=[{&(0x7f0000005100)="ecd806cf8d8b1f93ef11ba819fe4fcfdf16eec7ff72942be8e379a852ae2fef783dc3f5edd1f34a9e0805f35b97aaaa0614ee967dc0f9b1eabfd191a7177a09a96382333c03696e63410e3a5bf2f753ea29d3172cf75c0c7d35b0c2bee2823c748ed915ee1d1791c14d7c27c215ead60a3c962da4b62840174d61e1ccca91ae19e63ee613df08efb62452059722c75d86b99b6ac99d700a0f92902ebffa3ba087108224da4965f08865623cabafedaf7e05a1b91cb088ae22a9c9be004db1071c74618326d6a884674a209ee0d220cbaa27ac5e9608b506b0d683ecad3a1e01eccb5c5a5dd47e5d6d6d6", 0xea}], 0x1, &(0x7f0000005240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x89, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0xe0, 0x3, 0x9, [{@loopback, 0x43fa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast2, 0x9}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x32}, 0xae}, {@multicast1, 0x10001}]}, @noop, @noop, @cipso={0x86, 0x3f, 0x3, [{0x1, 0x8, "38ee4c13ba21"}, {0x0, 0xa, "cb951a834f8ea400"}, {0x7, 0x4, "c057"}, {0x7, 0x2}, {0x7, 0xc, "0f37b99ad42615039c46"}, {0x5, 0x9, "4e92db379df685"}, {0x7, 0xc, "a6c3ff7604e67016018a"}]}, @noop, @timestamp={0x44, 0xc, 0x6f, 0x0, 0x9, [0xf, 0x4]}, @cipso={0x86, 0xb, 0xffffffffffffffff, [{0x2, 0x5, "a2a16c"}]}]}}}], 0xe0}}, {{&(0x7f0000005340)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000005a80)=[{&(0x7f0000005380)="3447d6bc4553dfbd5b22384df2682c6a5b802a9797bcc8a57db3404980c693f4e6884fa4b7cee137fa52894061c899330d643f7539b3e75bf40693e5f7eef9164e961126e8b5af01d555a9d233e884d3d07a4b0377c8d504a3748cbab961d5231576a7d173dea1801d208c4183ae7bcbdcadd571fe166916d2db6191e941784d2a32efca0fcf2a5c55453fbae49e780bdc2b1e6e70dd484532cf87775ad2e1da91483ae56674ebd4cf662fd877c347766cbb35fc5b1d5090ac77b5a3808a88e3fb0cebc203d2d423e5", 0xc9}, {&(0x7f0000005480)="8a3a79dbd53a7fc5a2e18f2a19fad07cc7df712cdcd6c689462fe66b0f292409286c041eca4def2edf58e523b1455c74d4022b3b2311c9830bae542a1e3c167db777cc12943cd1b9e7e2efbfc13732aa1438805ed7c509700c3ac5b6b29fc0faecfb8c7d54", 0x65}, {&(0x7f0000005500)="b1200dac0b9c33a80c178d3f11544a154c105ddc1dd461d520e96a583842ca16245094ffe69bf68f53288c7f67661189b2466f679662cb55d36d4900062c0d55c66b53d3d6d38f91fad55998fdb6191e047371aac8eddc8c0d7f548463b3828198bb15de0599fccb9b4e0d145f9ee07b7a86800186029c1046ae59cc63cfcd07cc64f2266412f87067c3a8cb091f2c14caecc54af346dd1adc6ed79b9d1d3b3a8d296ea0b900e173f32e3b945e25ff5ff4cca2e712f6be6a3a6eb0", 0xbb}, {&(0x7f00000055c0)="082b91753e1d24a9fe4b1e2c094a94fed5b172441634b58c7df96a591c66adc8ffc495b27254a023238793b801a30d586adc2af52e3f755c5fae2de0d8669665aaf3361ed7c265e35d93485e2c016ce358069ee9d1af4d77ff2db0f99608a98cd9a247ac749b19a3ab7d86a1b39e9f0ffe0f69030ef0211ee9e8f77f93e8ff92fda8467aebec1ad6ac4b1c6761308855d0c523a8a34e265f13f059930866fc3d2c53d1ebcf66b15cd2d37a0796a31a74d96a3648bceb34af6b30b42021de8eaba257444f8b237513bd56721cd16e430aa141e56ee41046f0547c1fe3", 0xdc}, {&(0x7f00000056c0)="df902b2a3302972554d7c65c54bc01cd8de84b09b885c4e6f8bbc6116b3918c07d936f3c3d11d4b6996e193c1b4941cd0bc16e9f7d490d845481760f65a37606c9fa31cfc3d5c3ab6b30fe83f23c1773988b02966ad558b2c489adc20c93d6de8d1d0cbdba1f483945d9278e9f0cb43d5deef1221d89e6ec", 0x78}, {&(0x7f0000005740)="004c7df64f5c12385f840c82f5a9ebd430db35b919720fe5519cd693d7302062f552b348db70c8e5f159c3cf2753c9fe2178dd6aae09020ae30b319e8cdbd19946a8e4b6a2601181e53154aeeb59072007e7d319bb475279632ec8ec3a1231f3bde45fcfe5e58afdbbcb47a3862a3ebe59409f89449f34549eb3b72286406890c4bb1cd89b50", 0x86}, {&(0x7f0000005800)="3942bae3d6824e52787b8c3b92fd949e9cddcb8402e1e546b1d91fb5500e81071f968b5de3c457141f7f99b7a0f80df6bd3e98d652aab4c796e7ac119a138ed392a3ad207dc4e93ab831ac9532dec51d940dc80a88860c6d5b8eda34afd3182c050a8e5894377ddbfda0f2fbdded11d95fa1313ef8af13963e23dd9046888066603bae8fead40bb2099711f4240e847d75b8c20f72a3562e4c41e2821936a597c3f176b6fab8b41bf6f6c1a0", 0xac}, {&(0x7f00000058c0)="da2098382c8702f7def9df74d058fc3828bace9681e96e19f872aa519afa67af6bb6e0a225eb87b81a9def7ca694ea9a25d8c9e190e590b7947183fedee3f5f401c9bc68c26f13353dec299f1b42487acf8a9fd2f8338b85f726eba42e6b1584104f87681af6c6dbe25adf78c968e5ce7f6d028e2857d65becdc54f4938ebb45c9c40acb3ac913787736fd0e4459f83d5d81e0b3ab93a91cd098052ab7b2dbf8fcb8a2ea9e75f9e3ccc83caa8b255e08f8202c331de24fe360295c5c681dfaddd0b2c9f187145a49e81415616f8e4c294feb3458cbac11ec2ee080f0e952b528fdb06ebf021160e371567f9ddbef56dd4852", 0xf2}, {&(0x7f00000059c0)="3f7026496b64b57b0d1ccd106c1ba33a3fa77ac0afccd44fbd520aadfa68d27e06af9096eaae1dd1bf4a1e56b2a0", 0x2e}, {&(0x7f0000005a00)="6f6e667669f9adac33c6337839d54c11bfb7934f5709eeb67a3b37fb6ba111b148850a48b95e6fa6c9e64dc599e3bc8b6d34ae1b57d7a81e4c2b8600282badcacdd22ddcdc8e053fedfab565fe72c22217cec3b6749ac01ce149fd475a3da1594b94404cab3ad91d8c7711106790", 0x6e}], 0xa, &(0x7f0000005b40)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000005b80)="79ae97f114a467f414246dd8ec71a07b171a88313e7385c020c34b5b4855783c89bafda5d6ecb135fec795943a4912ac779e02fc673d27d44b6b6e6868aecc01689c43e78d830aaa7561d982168c918bfce189baa15d8f3dc6fb9a9ba20214d0b9b47372561b43ecb44bde81d74699644e2648d31bfb743772bc837761a1c8b13ccf2c6a4f2ca7cb2d1945cfbac83f635a3fb17f916030a4f4792277fd875e1ebc31b13bec3a4848ef68ed04d531", 0xae}], 0x1}}, {{&(0x7f0000005c80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000005dc0)=[{&(0x7f0000005cc0)="e6fdc66bbe834c", 0x7}, {&(0x7f0000005d00)="2730a45774e55497aa151be3c545d72d77896cef58b19507245d4ada316cb2321b2eaab70721c629eb223111e005c34b891dcf128e40cd792a0009afc658e2b5db83f6f47d2190e79c9b80991b93c4919f0c909b2bd8b8a78d7c87fca6a63ac01ee12157396ba76514090c5ab472e92edca068bc67c6063378f0e7c4e2a56577f225faa5fac5c7412f9e5392327287", 0x8f}], 0x2, &(0x7f0000005ec0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xe1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x8c, 0x0, 0x4, [0x8000]}, @timestamp_prespec={0x44, 0x14, 0x69, 0x3, 0x8, [{@broadcast, 0x1}, {@loopback, 0x1}]}, @timestamp_addr={0x44, 0xc, 0xfd, 0x1, 0xa, [{@broadcast, 0x3ff}]}, @cipso={0x86, 0x39, 0x3, [{0x2, 0x5, "469e70"}, {0x5, 0x5, "ddaa61"}, {0x1, 0x11, "b619858a4a3baed1db23bc3222d0ea"}, {0x3, 0x6, "ee028d68"}, {0x2, 0x12, "22ba2fe7b55f53dab135b56e3e5de1b0"}]}, @generic={0x44, 0xf, "bc94676852c7f8705296def98b"}, @generic={0x82, 0x4, "bf5c"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x15a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @remote, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x110}}], 0x7, 0x0) r16 = accept4$inet6(r13, 0x0, &(0x7f00000061c0), 0x80800) r17 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r12, 0xc0385869, &(0x7f0000006300)={r17, &(0x7f0000006200)='%pI4 \x00', 0x408540, &(0x7f0000006240)={@align=0x2, {0x8, 0x8, 0x5, 0x7}}, 0x5, &(0x7f0000006280)={@_ha_fsid}, &(0x7f00000062c0)=0x2}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000006440)={@fallback=r5, 0x10, 0x1, 0x1, &(0x7f0000006340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000006380)=[0x0, 0x0], &(0x7f00000063c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000006400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000006480)={@fallback=r16, r11, 0x22, 0x2, 0xffffffffffffffff, @void, @value=r12, @void, @void, r18}, 0x20) r19 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(r19, &(0x7f0000006a40)=[{&(0x7f00000064c0)="589832a13fad5faf402a1b6051b227f606cab6dede542eb082344df78bc8dfc34260d3196e2a3fd0d733aa6f2e970fe89559cb91a34316152d9148e2bc272f92b1b5c892d6a68986397fbe1fee0615eecb47a5ffe728249ff7269da351e39a6aba81c5d204044dd90a469cdfae7cac5a57df78b67f9f76bc4cb84e2705836393fc1696dbc55f4a4ac56785fb063acf3cc26c61c32d876e7fb2ae273d638d318fe9f8b9837c21f9e4265a6331ce71e35e74ba6d5950636fcf5f841d3b9839fee32113474a2ae17bf2892fbe3e0f292dfecd6c384353f14a94d2be64c6fe6b8ddecc0e573a956a4770000a9735f0222852ec", 0xf1}, {&(0x7f00000065c0)="f947852db008ad0fe1cd1a83e64f73ef9c5c648006d7288d6b0ffa4d270e0671fe215d190d3afa3cdacffde48b6d3309a6d6c48047612dd9481c9f0b2ef2f429d8cb45145013f716c4b05df4ef03ae6c2ca461391e27bf27b03456c7bba32e1d10cf0b30aba55350b6fd6f44240f096669060c4c5c53868dc96d987db7d74948d714bd9e63223bc84632fdfc198fcd49e366f0679c720daf5065bb2774cb0a9800d4a5a40f3e5cc748b3d6788e2f22185f8c3a50b560", 0xb6}, {&(0x7f0000006680)="424cae1d123559f80a9c0550435c4b3e9e909c9b928d05f1d90171bf5b93a6021fb48ce741320e06b2958b791e16e26fa4f446827652996227f166a38ee490093cf3439178a0ff3cdd2e545f985f05a3ff2e5a062fcfb1bc3ef9220cf73568f3f741cb87eb524221b98d7c487ea0b34bb0609a6a1b47c1dee99234", 0x7b}, {&(0x7f0000006700)="3f43aae5f2b63bb861a145fbac5b492f7f162fb59b94e27dbaea4a5a7c187b06c1a3e05b0ffb2784e2118af0097af6347b474c25ae5fed446dca6f7f4c5bc605a403def4750fdbeee8bb98b78e81a94b1156a931dadd8bf0b87217e495d20d916a60561b9356e521708df97c1df9e454c9d780f76ddc3d5ee03e8a5ade23cd5e4ace5da1a1bf342f0a4084", 0x8b}, {&(0x7f00000067c0)="530473ad15ad0630e3e43a5d45e3a74ced230bc8eaf8e87c13490da468954e2a0d83982965b3b1a37e1df86e50fc5af3ff191c1c3ee1b6b2e33a8020d0a6a315cacc481d3bccdc3c4afb1d2035c154afc3c92d77875ea31574881f142c0d59a72a33cea2f2db63decf357c239cab17ac06bcb0dd79ae", 0x76}, {&(0x7f0000006840)="5f9ab3287e65f368d789abd088b2000e764dcce8b5fcb6f37e1fa23e81a1cc3b9877016f780a85c58be78ebd63415e6f16203f750bf7e1a384a08a41994dbd665e438e27898d865603e07400c380e342e494be8018fef0af82932df6b45fccd2b4c983b82c34a8c924561abe4a0a9704514e14ef339a45b80b04fe2e48b2100a5a6eb04abb0584771e14483da2c6b1c99a98114cd18884fce1cee1469364de7a2bbc", 0xa2}, {&(0x7f0000006900)="46c987b56a3ec6e712784a5d2c7394cf32c037bdd3fde58d277cad161dcc13f50c994fc661d0f3b76fe5d5fb9a0c5a205c043794478a6ae9eaef71a4f427bd3a12980c0e07cc0823f936a2797af9169dccb43ad035ee567ec2a511de3c2fb9282436c2e82c54d1bf31a4593cc1c2a48f21f4d7f9e1c69e141a2aa10db32bfa3d159416f9221fd19988d19ced55b5fb928502ba2d7edfd089eb2cb1b138d9cdf253758256cf51ebdc036905273d2c215c8d9e1195478a5af279bc9ba485d9ba2c74481f2f99c3e29148424a8c9e14dd3544b0ae8bc73675cd46321be763d805f9ae907933", 0xe4}, {&(0x7f0000006a00)="dca7a0547824dd2f9616cc891b21f33db3b1a29fb15631c8db5231cf0e3877132071f0cf", 0x24}], 0x8) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000006e80)={&(0x7f0000006ac0)={0x2c, 0x8, r7, 0x21}, 0x10, &(0x7f0000006e00)=[{&(0x7f0000006b00)="398b97b009ab425d38711acdd3ac02390b6587ffbb17d6f2c5f0a00d7fb0", 0x1e}, {&(0x7f0000006b40)="65c7da37d3fa9aa1072140c30a4c8d2c141c234fdf056b36877114dfda5c926848a5ebc01f171c927b506526be2ee8ed4fecd85e4470a97d74aefc5abc0281c35439af3589cf71ba3467bb622dd4d584e59e5a313233480019e4a5c89fdb65aa874ff6759b4118120cf28832e9716e8fb7e367c63fd2d844845e84dac18d0e8ce8ba0a3b961a849ab62bb5493b27d8", 0x8f}, {&(0x7f0000006c00)="51141abd94e9719a0eff97074c67bc1d6dd0699022b6bd96f486346fd649c6cb02b4633b2f2b72ed43a498b5560067598078b10cd40a64f14249e7d0da588af780221900c39ca86275bf483e9f632c7690f80de3d26138463f3eadf089f0c1109391d78c88f19d4f94f890fa1d1e522e0eb525569dd9d769ea6bab23b3b1c126ff980bd1df28c983cf56e0d6608238ad6ceab1aff822a56d471079e6b7b2c54cdc8008aa81067c6ac2091ae6ec23ffe8f8e6661079cd77aa5176d4b5191e900973806b7726ef7cda79999e5d8dfda91b61425d87040731be3de1", 0xda}, {&(0x7f0000006d00)="f4cb7b27f05761e02c2c369396e5146baba44bf961e95ea371cc55fa722f7788a011eb7538b975eb0d85e3dc668215f4cb37715ca8e46ba971ecda9f353dc428a8f55b2e0317f3ea14307932980b0d2a02bd0eea314e261ec074b437d043ac938b4417080c3fe781a150970c2aadc0d5d3061b71b4756924a04449b7ede426", 0x7f}, {&(0x7f0000006d80)="f900ac1900208613dae6f194deb86542f3dfa2ca4f9fa9628d1ec696642dced4a78900cce5aff617cf02a657d113667ad83a012e60c631922e5e5cab89fd539b12a5067f70218d984982264d981f424a755688c365e2f220493e6e0c53f151aaffa310bd58d56a6d85290295b6447ee66b40477a05192d11bd9d", 0x7a}], 0x5, 0x0, 0x0, 0x8080}, 0x40804) kernel console output (not intermixed with test programs): to 1024 [ 112.164102][ T5348] loop2: detected capacity change from 0 to 1024 [ 112.168658][ T5346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.237805][ T5348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.304945][ T5342] openvswitch: netlink: EtherType 200 is less than min 600 [ 112.336271][ T5347] openvswitch: netlink: EtherType 200 is less than min 600 [ 112.469992][ T5370] tmpfs: Unknown parameter 'ÿ' [ 112.528473][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.539980][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.614095][ T5377] loop2: detected capacity change from 0 to 512 [ 112.627278][ T5377] EXT4-fs: Ignoring removed orlov option [ 112.663007][ T5384] tmpfs: Unknown parameter 'ÿ' [ 112.826198][ T5399] loop2: detected capacity change from 0 to 512 [ 112.848055][ T5399] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.864133][ T5399] EXT4-fs (loop2): 1 truncate cleaned up [ 112.877289][ T5399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.907333][ T28] audit: type=1326 audit(112.862:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 112.966758][ T28] audit: type=1326 audit(112.862:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 112.989878][ T28] audit: type=1326 audit(112.862:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 113.013301][ T28] audit: type=1326 audit(112.862:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 113.036217][ T28] audit: type=1326 audit(112.862:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 113.088511][ T28] audit: type=1326 audit(112.862:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 113.112509][ T28] audit: type=1326 audit(112.862:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 113.135762][ T28] audit: type=1326 audit(112.862:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 113.159117][ T28] audit: type=1326 audit(112.862:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 113.181976][ T28] audit: type=1326 audit(112.862:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 113.475545][ T5409] openvswitch: netlink: EtherType 200 is less than min 600 [ 113.733564][ T5418] loop4: detected capacity change from 0 to 256 [ 113.745179][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.764649][ T5418] FAT-fs (loop4): Directory bread(block 64) failed [ 113.771395][ T5418] FAT-fs (loop4): Directory bread(block 65) failed [ 113.785050][ T5418] FAT-fs (loop4): Directory bread(block 66) failed [ 113.794437][ T5418] FAT-fs (loop4): Directory bread(block 67) failed [ 113.806378][ T5418] FAT-fs (loop4): Directory bread(block 68) failed [ 113.813882][ T5418] FAT-fs (loop4): Directory bread(block 69) failed [ 113.818672][ T5422] tmpfs: Unknown parameter 'ÿ' [ 113.821511][ T5418] FAT-fs (loop4): Directory bread(block 70) failed [ 113.850555][ T5418] FAT-fs (loop4): Directory bread(block 71) failed [ 113.857274][ T5418] FAT-fs (loop4): Directory bread(block 72) failed [ 113.863940][ T5418] FAT-fs (loop4): Directory bread(block 73) failed [ 113.885079][ T5424] Cannot find del_set index 29 as target [ 113.947286][ T5433] tipc: Enabled bearer , priority 0 [ 113.960868][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 113.970215][ T5433] syzkaller0: entered promiscuous mode [ 113.975916][ T5433] syzkaller0: entered allmulticast mode [ 113.994156][ T5433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 114.012457][ T5433] tipc: Resetting bearer [ 114.015393][ T5437] loop3: detected capacity change from 0 to 512 [ 114.027143][ T5432] tipc: Resetting bearer [ 114.034512][ T5432] tipc: Disabling bearer [ 114.039916][ T5437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.210099][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.367906][ T5461] loop2: detected capacity change from 0 to 512 [ 114.478755][ T5461] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.596932][ T5461] ------------[ cut here ]------------ [ 114.602528][ T5461] EA inode 11 i_nlink=2 [ 114.602560][ T5461] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.2.581/5461 [ 114.617811][ T5461] Modules linked in: [ 114.621862][ T5461] CPU: 1 UID: 0 PID: 5461 Comm: syz.2.581 Not tainted syzkaller #0 PREEMPT(full) [ 114.631179][ T5461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 114.641319][ T5461] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 114.647977][ T5461] Code: 84 2f 99 ff 4c 8d 2d 1d a1 5d 05 49 8d 7e 40 e8 f4 c8 b5 ff 49 8b 6e 40 4c 89 e7 e8 28 c4 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f 03 de 03 66 66 66 66 66 66 2e [ 114.667709][ T5461] RSP: 0018:ffffc9000154f778 EFLAGS: 00010246 [ 114.673840][ T5461] RAX: ffff888104668ac8 RBX: ffff88811bc0cec8 RCX: ffffffff81c02c68 [ 114.681877][ T5461] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd70 [ 114.689943][ T5461] RBP: 000000000000000b R08: 000188811bc0ce7b R09: 0000000000000000 [ 114.698208][ T5461] R10: ffffc9000154f6a8 R11: 0001c9000154f6a8 R12: ffff88811bc0ce78 [ 114.706252][ T5461] R13: ffffffff871dcd70 R14: ffff88811bc0ce30 R15: 0000000000000001 [ 114.714390][ T5461] FS: 00007f8090a576c0(0000) GS:ffff8882ae9d7000(0000) knlGS:0000000000000000 [ 114.723481][ T5461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.730275][ T5461] CR2: 00007fff2ac48020 CR3: 0000000120f5c000 CR4: 00000000003506f0 [ 114.738578][ T5461] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.746847][ T5461] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 114.754891][ T5461] Call Trace: [ 114.758254][ T5461] [ 114.761218][ T5461] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 114.767337][ T5461] ? errseq_check+0x2c/0x50 [ 114.771903][ T5461] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 114.777501][ T5461] ? ext4_truncate+0x92b/0xb00 [ 114.782323][ T5461] ext4_evict_inode+0xac1/0xe40 [ 114.787364][ T5461] ? __pfx_ext4_evict_inode+0x10/0x10 [ 114.792837][ T5461] evict+0x2af/0x510 [ 114.796798][ T5461] ? __dquot_initialize+0x146/0x7c0 [ 114.802192][ T5461] iput+0x41a/0x580 [ 114.806052][ T5461] ext4_process_orphan+0x1a9/0x1c0 [ 114.811334][ T5461] ext4_orphan_cleanup+0x6a8/0xa00 [ 114.816513][ T5461] ext4_fill_super+0x3414/0x37c0 [ 114.821564][ T5461] ? set_blocksize+0x14c/0x270 [ 114.826847][ T5461] ? setup_bdev_super+0x30e/0x370 [ 114.831950][ T5461] ? __pfx_ext4_fill_super+0x10/0x10 [ 114.837414][ T5461] get_tree_bdev_flags+0x291/0x300 [ 114.842613][ T5461] ? __pfx_ext4_fill_super+0x10/0x10 [ 114.848143][ T5461] get_tree_bdev+0x1f/0x30 [ 114.852627][ T5461] ext4_get_tree+0x1c/0x30 [ 114.857198][ T5461] vfs_get_tree+0x57/0x1d0 [ 114.861717][ T5461] do_new_mount+0x288/0x8d0 [ 114.866315][ T5461] path_mount+0x4d0/0xbc0 [ 114.870878][ T5461] __se_sys_mount+0x28c/0x2e0 [ 114.875616][ T5461] __x64_sys_mount+0x67/0x80 [ 114.880309][ T5461] x64_sys_call+0x2d61/0x3020 [ 114.885023][ T5461] do_syscall_64+0x12c/0x370 [ 114.889701][ T5461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.895664][ T5461] RIP: 0033:0x7f8091ffda8a [ 114.900144][ T5461] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.919902][ T5461] RSP: 002b:00007f8090a56e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.928479][ T5461] RAX: ffffffffffffffda RBX: 00007f8090a56ee0 RCX: 00007f8091ffda8a [ 114.936536][ T5461] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f8090a56ea0 [ 114.944584][ T5461] RBP: 00002000000009c0 R08: 00007f8090a56ee0 R09: 0000000000800718 [ 114.952707][ T5461] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 114.960896][ T5461] R13: 00007f8090a56ea0 R14: 000000000000048d R15: 0000200000000200 [ 114.968941][ T5461] [ 114.972072][ T5461] ---[ end trace 0000000000000000 ]--- [ 114.978193][ T5461] EXT4-fs (loop2): 1 orphan inode deleted [ 114.984434][ T5461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.103677][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.170211][ T5469] tmpfs: Unknown parameter 'ÿ' [ 115.583531][ T5470] openvswitch: netlink: EtherType 200 is less than min 600 [ 115.628833][ T5472] loop2: detected capacity change from 0 to 512 [ 115.640228][ T5477] FAULT_INJECTION: forcing a failure. [ 115.640228][ T5477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.654856][ T5472] EXT4-fs: Ignoring removed orlov option [ 115.664510][ T5477] CPU: 1 UID: 0 PID: 5477 Comm: syz.3.587 Tainted: G W syzkaller #0 PREEMPT(full) [ 115.664542][ T5477] Tainted: [W]=WARN [ 115.664609][ T5477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 115.664668][ T5477] Call Trace: [ 115.664677][ T5477] [ 115.664687][ T5477] __dump_stack+0x1d/0x30 [ 115.664742][ T5477] dump_stack_lvl+0x95/0xd0 [ 115.664845][ T5477] dump_stack+0x15/0x1b [ 115.664895][ T5477] should_fail_ex+0x263/0x280 [ 115.664924][ T5477] should_fail+0xb/0x20 [ 115.664954][ T5477] should_fail_usercopy+0x1a/0x20 [ 115.664985][ T5477] _copy_from_user+0x1c/0xb0 [ 115.665076][ T5477] ___sys_sendmsg+0xc1/0x1e0 [ 115.665117][ T5477] __x64_sys_sendmsg+0xd4/0x160 [ 115.665140][ T5477] x64_sys_call+0x194c/0x3020 [ 115.665249][ T5477] do_syscall_64+0x12c/0x370 [ 115.665282][ T5477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.665310][ T5477] RIP: 0033:0x7fb4cc11c819 [ 115.665342][ T5477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.665364][ T5477] RSP: 002b:00007fb4cab77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.665388][ T5477] RAX: ffffffffffffffda RBX: 00007fb4cc395fa0 RCX: 00007fb4cc11c819 [ 115.665433][ T5477] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 115.665448][ T5477] RBP: 00007fb4cab77090 R08: 0000000000000000 R09: 0000000000000000 [ 115.665464][ T5477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.665479][ T5477] R13: 00007fb4cc396038 R14: 00007fb4cc395fa0 R15: 00007ffe83c337c8 [ 115.665503][ T5477] [ 116.022488][ T5472] loop2: detected capacity change from 0 to 1024 [ 116.049727][ T5486] loop4: detected capacity change from 0 to 512 [ 116.054543][ T5472] EXT4-fs: Ignoring removed bh option [ 116.111449][ T5487] syz_tun: entered promiscuous mode [ 116.116858][ T5487] macvtap1: entered promiscuous mode [ 116.796334][ T5487] syz_tun: left promiscuous mode [ 116.881191][ T5486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.895345][ T5472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.088757][ T5472] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.586: bg 0: block 112: padding at end of block bitmap is not set [ 117.140736][ T5500] netlink: 'syz.0.593': attribute type 10 has an invalid length. [ 117.160328][ T5500] netlink: 40 bytes leftover after parsing attributes in process `syz.0.593'. [ 117.169403][ T5500] dummy0: entered promiscuous mode [ 117.174625][ T5500] dummy0: entered allmulticast mode [ 117.181440][ T5500] bridge0: port 1(dummy0) entered blocking state [ 117.188693][ T5500] bridge0: port 1(dummy0) entered disabled state [ 117.234457][ T5500] batadv_slave_0: entered promiscuous mode [ 117.247207][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 117.298876][ T5500] batadv_slave_0 (unregistering): left promiscuous mode [ 117.322074][ T5507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1021 sclass=netlink_route_socket pid=5507 comm=syz.3.594 [ 117.360819][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.379173][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.423059][ T5509] tmpfs: Unknown parameter 'ÿ' [ 118.143061][ T5529] program syz.2.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.377169][ T5531] lo: entered allmulticast mode [ 118.504315][ T5531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.557768][ T4625] lo speed is unknown, defaulting to 1000 [ 118.565552][ T5533] loop4: detected capacity change from 0 to 512 [ 118.575505][ T5534] geneve1: entered promiscuous mode [ 118.581480][ T4625] syU×: Port: 1 Link DOWN [ 118.595456][ T5534] macsec1: entered promiscuous mode [ 118.623450][ T5534] macsec1: entered allmulticast mode [ 118.631676][ T5534] geneve1: entered allmulticast mode [ 118.643484][ T4625] lo speed is unknown, defaulting to 1000 [ 118.686358][ T5536] syzkaller0: entered promiscuous mode [ 118.693098][ T5536] syzkaller0: entered allmulticast mode [ 118.724249][ T28] kauditd_printk_skb: 145 callbacks suppressed [ 118.724268][ T28] audit: type=1400 audit(118.692:1518): avc: denied { read } for pid=5518 comm="syz.3.600" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.763574][ T5533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 118.778648][ T5540] syzkaller1: entered allmulticast mode [ 118.781264][ T28] audit: type=1400 audit(118.692:1519): avc: denied { open } for pid=5518 comm="syz.3.600" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.873118][ T28] audit: type=1400 audit(118.842:1520): avc: denied { mounton } for pid=5532 comm="syz.4.605" path="/96/file2" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.957741][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 119.004714][ T5553] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.026385][ T5555] tmpfs: Unknown parameter 'ÿ' [ 119.064595][ T5553] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.142359][ T5570] SELinux: failed to load policy [ 119.240316][ T28] audit: type=1326 audit(119.122:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5568 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 119.263133][ T28] audit: type=1326 audit(119.122:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5568 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 119.285866][ T28] audit: type=1326 audit(119.122:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5568 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 119.355069][ T28] audit: type=1326 audit(119.122:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5568 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 119.462698][ T5577] loop4: detected capacity change from 0 to 512 [ 120.294877][ T5553] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.396969][ T28] audit: type=1326 audit(119.122:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5568 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 120.419736][ T28] audit: type=1326 audit(119.122:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5568 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 121.402422][ T28] audit: type=1326 audit(119.122:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5568 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 121.459301][ T5577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.027110][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.046013][ T5553] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.147341][ T5607] tmpfs: Unknown parameter 'ÿ' [ 122.179317][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.191078][ T5612] loop3: detected capacity change from 0 to 512 [ 122.238271][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.271376][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.329673][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.340201][ T5612] EXT4-fs (loop3): 1 orphan inode deleted [ 122.346568][ T5612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.593747][ T5624] netlink: 188 bytes leftover after parsing attributes in process `syz.1.632'. [ 122.606985][ T5624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.632'. [ 124.499777][ T5641] wg2: entered allmulticast mode [ 124.522456][ T5645] tmpfs: Unknown parameter 'ÿ' [ 124.691427][ T5654] netlink: 188 bytes leftover after parsing attributes in process `syz.1.643'. [ 124.700771][ T5654] netlink: 40 bytes leftover after parsing attributes in process `syz.1.643'. [ 125.586517][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.657110][ T5677] loop3: detected capacity change from 0 to 256 [ 125.840512][ T5677] FAT-fs (loop3): Directory bread(block 64) failed [ 125.915623][ T5669] loop2: detected capacity change from 0 to 512 [ 125.940081][ T5677] FAT-fs (loop3): Directory bread(block 65) failed [ 125.977522][ T5677] FAT-fs (loop3): Directory bread(block 66) failed [ 125.994325][ T5682] tmpfs: Unknown parameter 'ÿ' [ 126.022757][ T5669] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 126.038377][ T5677] FAT-fs (loop3): Directory bread(block 67) failed [ 126.069047][ T5677] FAT-fs (loop3): Directory bread(block 68) failed [ 126.101188][ T5677] FAT-fs (loop3): Directory bread(block 69) failed [ 126.128116][ T5677] FAT-fs (loop3): Directory bread(block 70) failed [ 126.154354][ T5677] FAT-fs (loop3): Directory bread(block 71) failed [ 126.182851][ T5677] FAT-fs (loop3): Directory bread(block 72) failed [ 126.209438][ T5677] FAT-fs (loop3): Directory bread(block 73) failed [ 126.216347][ T5669] EXT4-fs (loop2): 1 truncate cleaned up [ 126.259245][ T5669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.379375][ T5684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33397 sclass=netlink_route_socket pid=5684 comm=syz.3.649 [ 126.465374][ T5685] IPv6: sit1: Disabled Multicast RS [ 126.747850][ T4625] IPVS: starting estimator thread 0... [ 126.762173][ T5693] IPVS: sed: FWM 3 0x00000003 - no destination available [ 126.790264][ T5688] bond2: (slave bond_slave_1): Device is not our slave [ 126.823707][ T5695] usb usb1: usbfs: process 5695 (syz.4.653) did not claim interface 0 before use [ 126.841931][ T5688] bond2: option active_slave: invalid value (bond_slave_1) [ 126.886740][ T5694] IPVS: using max 2352 ests per chain, 117600 per kthread [ 126.900244][ T5688] bond2 (unregistering): Released all slaves [ 126.912591][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 126.912605][ T28] audit: type=1400 audit(126.881:1530): avc: denied { connect } for pid=5696 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.017324][ T5691] Cannot find add_set index 0 as target [ 127.028330][ T5698] syzkaller1: left allmulticast mode [ 127.231173][ T5701] loop4: detected capacity change from 0 to 128 [ 127.238137][ T5701] msdos: Bad value for 'gid' [ 127.242798][ T5701] msdos: Bad value for 'gid' [ 127.310207][ T5703] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.317675][ T5703] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.382772][ T28] audit: type=1400 audit(127.311:1531): avc: denied { bind } for pid=5700 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.432794][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.652008][ T5703] bridge_slave_0: left allmulticast mode [ 127.710304][ T5703] bridge_slave_0: left promiscuous mode [ 127.736960][ T5703] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.846376][ T5703] bridge_slave_1: left allmulticast mode [ 127.852210][ T5703] bridge_slave_1: left promiscuous mode [ 127.858278][ T5703] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.870902][ T5703] bond0: (slave bond_slave_0): Releasing backup interface [ 127.882017][ T5703] bond0: (slave bond_slave_1): Releasing backup interface [ 127.894620][ T5703] team0: Port device team_slave_0 removed [ 127.903533][ T5703] team0: Port device team_slave_1 removed [ 127.911893][ T5703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.921899][ T5703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.932176][ T5703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.941752][ T5703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.954258][ T5703] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 127.970784][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'. [ 128.054900][ T5718] netlink: 'syz.4.662': attribute type 83 has an invalid length. [ 128.072074][ T28] audit: type=1400 audit(128.041:1532): avc: denied { bind } for pid=5721 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.124330][ T5724] tmpfs: Unknown parameter 'ÿ' [ 128.151329][ T28] audit: type=1400 audit(128.061:1533): avc: denied { write } for pid=5721 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.176882][ T28] audit: type=1326 audit(128.061:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 128.205738][ T28] audit: type=1326 audit(128.061:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 128.229227][ T28] audit: type=1326 audit(128.061:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 128.253043][ T28] audit: type=1326 audit(128.061:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 128.284164][ T5726] loop4: detected capacity change from 0 to 8192 [ 128.322920][ T28] audit: type=1326 audit(128.061:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 128.326567][ T5733] netlink: 96 bytes leftover after parsing attributes in process `syz.3.668'. [ 128.357430][ T5731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.365903][ T5731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.375169][ T3306] loop4: p1 p2 p3 p4 [ 128.376646][ T5733] netlink: 192 bytes leftover after parsing attributes in process `syz.3.668'. [ 128.381514][ T3306] loop4: p2 size 262235 extends beyond EOD, truncated [ 128.400198][ T3306] loop4: p3 start 117772289 is beyond EOD, truncated [ 128.410138][ T5731] loop2: detected capacity change from 0 to 256 [ 128.414552][ T3306] loop4: p4 size 720896 extends beyond EOD, truncated [ 128.418144][ T5731] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.436564][ T5731] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.451454][ T5726] loop4: p1 p2 p3 p4 [ 128.457489][ T5726] loop4: p2 size 262235 extends beyond EOD, truncated [ 128.576464][ T5726] loop4: p3 start 117772289 is beyond EOD, truncated [ 128.607752][ T5726] loop4: p4 size 720896 extends beyond EOD, truncated [ 128.854714][ T5745] loop3: detected capacity change from 0 to 1024 [ 128.953296][ T5745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.173660][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 129.184788][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 129.208040][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 129.218154][ T5738] openvswitch: netlink: EtherType 200 is less than min 600 [ 129.228561][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.672'. [ 129.239372][ T5749] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 129.265279][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 129.269558][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 129.286831][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 129.297238][ T28] audit: type=1400 audit(129.271:1539): avc: denied { connect } for pid=5752 comm="syz.2.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.325627][ T5749] bond0 (unregistering): Released all slaves [ 129.385856][ T5751] loop4: detected capacity change from 0 to 8192 [ 129.414473][ T5751] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.425853][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.559776][ T5763] loop4: detected capacity change from 0 to 512 [ 129.686770][ T5767] netlink: 'syz.4.677': attribute type 10 has an invalid length. [ 129.697883][ T5767] veth1_macvtap: left promiscuous mode [ 130.641717][ T5790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.734063][ T5790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.844445][ T5790] loop4: detected capacity change from 0 to 256 [ 131.809542][ T5800] loop4: detected capacity change from 0 to 128 [ 131.830836][ T5800] vfat: Unknown parameter 'nonumta' [ 131.966731][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 131.966750][ T28] audit: type=1400 audit(131.931:1543): avc: denied { write } for pid=5804 comm="syz.4.690" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.060107][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.067556][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.118350][ T5808] bridge_slave_0: left allmulticast mode [ 132.127531][ T5808] bridge_slave_0: left promiscuous mode [ 132.143512][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.160563][ T5808] bridge_slave_1: left allmulticast mode [ 132.166471][ T5808] bridge_slave_1: left promiscuous mode [ 132.172498][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.183534][ T5808] bond0: (slave bond_slave_0): Releasing backup interface [ 132.197167][ T5808] bond0: (slave bond_slave_1): Releasing backup interface [ 132.214925][ T5808] team0: Port device team_slave_0 removed [ 132.224358][ T5808] team0: Port device 72žÿ removed [ 132.231187][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.240129][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.249219][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.257942][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.270412][ T5808] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 132.287897][ T5816] loop4: detected capacity change from 0 to 512 [ 132.355761][ T5816] loop4: detected capacity change from 0 to 256 [ 132.449024][ T5827] FAULT_INJECTION: forcing a failure. [ 132.449024][ T5827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.462657][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz.2.700 Tainted: G W syzkaller #0 PREEMPT(full) [ 132.462698][ T5827] Tainted: [W]=WARN [ 132.462705][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 132.462717][ T5827] Call Trace: [ 132.462724][ T5827] [ 132.462732][ T5827] __dump_stack+0x1d/0x30 [ 132.462832][ T5827] dump_stack_lvl+0x95/0xd0 [ 132.462863][ T5827] dump_stack+0x15/0x1b [ 132.462902][ T5827] should_fail_ex+0x263/0x280 [ 132.462938][ T5827] should_fail+0xb/0x20 [ 132.462970][ T5827] should_fail_usercopy+0x1a/0x20 [ 132.463061][ T5827] strncpy_from_user+0x27/0x250 [ 132.463087][ T5827] path_setxattrat+0xeb/0x310 [ 132.463156][ T5827] __x64_sys_fsetxattr+0x6b/0x80 [ 132.463191][ T5827] x64_sys_call+0x2f0e/0x3020 [ 132.463218][ T5827] do_syscall_64+0x12c/0x370 [ 132.463247][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.463327][ T5827] RIP: 0033:0x7f8091ffc819 [ 132.463353][ T5827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.463372][ T5827] RSP: 002b:00007f8090a57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 132.463447][ T5827] RAX: ffffffffffffffda RBX: 00007f8092275fa0 RCX: 00007f8091ffc819 [ 132.463465][ T5827] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 132.463514][ T5827] RBP: 00007f8090a57090 R08: 0000000000000001 R09: 0000000000000000 [ 132.463527][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.463538][ T5827] R13: 00007f8092276038 R14: 00007f8092275fa0 R15: 00007fff2ac47c28 [ 132.463557][ T5827] [ 132.748537][ T5836] program syz.1.704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.757878][ T28] audit: type=1400 audit(132.721:1544): avc: denied { append } for pid=5835 comm="syz.1.704" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 132.840714][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 132.849814][ T5842] program syz.1.704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.964979][ T28] audit: type=1400 audit(132.831:1545): avc: denied { remount } for pid=5838 comm="syz.2.706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.985588][ T5840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.706'. [ 133.424127][ T5862] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 133.492247][ T5862] netlink: 116 bytes leftover after parsing attributes in process `syz.4.712'. [ 133.962784][ T5865] loop4: detected capacity change from 0 to 512 [ 134.093602][ T5871] loop4: detected capacity change from 0 to 1024 [ 134.195442][ T5876] loop4: detected capacity change from 0 to 512 [ 134.264649][ T5876] loop4: detected capacity change from 0 to 256 [ 134.286772][ T28] audit: type=1400 audit(134.251:1546): avc: denied { read } for pid=5880 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.372564][ T28] audit: type=1400 audit(134.311:1547): avc: denied { ioctl } for pid=5880 comm="syz.1.719" path="socket:[12270]" dev="sockfs" ino=12270 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.431010][ T5888] loop4: detected capacity change from 0 to 512 [ 134.460558][ T5888] EXT4-fs: Ignoring removed i_version option [ 134.903547][ T5895] loop4: detected capacity change from 0 to 512 [ 134.914785][ T5895] EXT4-fs: Ignoring removed orlov option [ 134.952512][ T5896] usb usb1: usbfs: process 5896 (syz.2.723) did not claim interface 0 before use [ 135.022502][ T5894] Cannot find del_set index 4 as target [ 135.196027][ T5905] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.352697][ T5917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.362292][ T5917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.438527][ T5919] EXT4-fs: Ignoring removed i_version option [ 135.444693][ T5919] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.898513][ T5919] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.734: bad orphan inode 1 [ 135.926782][ T5919] loop3: lost filesystem error report for type 5 error -117 [ 135.927498][ T5919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.166654][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.202953][ T5930] usb usb1: usbfs: process 5930 (syz.1.738) did not claim interface 0 before use [ 136.228206][ T5930] Cannot find add_set index 0 as target [ 136.287073][ T5934] set_capacity_and_notify: 2 callbacks suppressed [ 136.287283][ T5934] loop4: detected capacity change from 0 to 512 [ 136.338510][ T5938] netlink: 44 bytes leftover after parsing attributes in process `syz.1.741'. [ 136.350193][ T28] audit: type=1400 audit(136.301:1548): avc: denied { mounton } for pid=5937 comm="syz.1.741" path="/proc/476/task" dev="proc" ino=13404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 136.372353][ T5938] netlink: 43 bytes leftover after parsing attributes in process `syz.1.741'. [ 136.381353][ T5938] netlink: 'syz.1.741': attribute type 5 has an invalid length. [ 136.390423][ T5938] netlink: 43 bytes leftover after parsing attributes in process `syz.1.741'. [ 138.642938][ T5963] openvswitch: netlink: EtherType 200 is less than min 600 [ 138.745016][ T5978] loop3: detected capacity change from 0 to 512 [ 138.982535][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.754'. [ 139.023930][ T5978] loop3: detected capacity change from 0 to 128 [ 139.177528][ T5991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.189062][ T5991] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.210140][ T28] audit: type=1400 audit(139.041:1549): avc: denied { shutdown } for pid=5979 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.256215][ T5991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.735851][ T5999] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.758'. [ 139.746764][ T28] audit: type=1400 audit(139.691:1550): avc: denied { create } for pid=5977 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 139.787131][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.758'. [ 139.850426][ T28] audit: type=1400 audit(139.691:1551): avc: denied { create } for pid=5977 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 139.915427][ T28] audit: type=1400 audit(139.691:1552): avc: denied { write } for pid=5977 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 139.935928][ T28] audit: type=1400 audit(139.701:1553): avc: denied { nlmsg_write } for pid=5977 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 139.959410][ T6009] syzkaller0: entered promiscuous mode [ 139.968667][ T6009] syzkaller0: entered allmulticast mode [ 140.286264][ T6015] loop3: detected capacity change from 0 to 1024 [ 141.897446][ T6015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.254005][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.279912][ T28] audit: type=1326 audit(142.251:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 142.326743][ T28] audit: type=1326 audit(142.251:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 142.352632][ T6039] loop3: detected capacity change from 0 to 256 [ 142.383422][ T28] audit: type=1326 audit(142.251:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 142.406627][ T28] audit: type=1326 audit(142.251:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 142.414094][ T6039] FAT-fs (loop3): Directory bread(block 64) failed [ 142.430149][ T28] audit: type=1326 audit(142.251:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 142.441625][ T6039] FAT-fs (loop3): Directory bread(block 65) failed [ 142.466291][ T6039] FAT-fs (loop3): Directory bread(block 66) failed [ 142.473115][ T6039] FAT-fs (loop3): Directory bread(block 67) failed [ 142.480003][ T6039] FAT-fs (loop3): Directory bread(block 68) failed [ 142.486597][ T6039] FAT-fs (loop3): Directory bread(block 69) failed [ 142.493741][ T6039] FAT-fs (loop3): Directory bread(block 70) failed [ 142.500557][ T6039] FAT-fs (loop3): Directory bread(block 71) failed [ 142.507304][ T6039] FAT-fs (loop3): Directory bread(block 72) failed [ 142.513906][ T6039] FAT-fs (loop3): Directory bread(block 73) failed [ 142.546534][ T6049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.555377][ T6049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.954566][ T6069] loop3: detected capacity change from 0 to 512 [ 142.984969][ T6069] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 143.012965][ T6069] EXT4-fs (loop3): 1 truncate cleaned up [ 143.024981][ T6074] Cannot find add_set index 0 as target [ 143.026520][ T6069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.078661][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.096804][ T6080] loop3: detected capacity change from 0 to 256 [ 143.127134][ T6080] FAT-fs (loop3): Directory bread(block 64) failed [ 143.136565][ T6080] FAT-fs (loop3): Directory bread(block 65) failed [ 143.145798][ T6080] FAT-fs (loop3): Directory bread(block 66) failed [ 143.152671][ T6080] FAT-fs (loop3): Directory bread(block 67) failed [ 143.159740][ T6080] FAT-fs (loop3): Directory bread(block 68) failed [ 143.183173][ T6080] FAT-fs (loop3): Directory bread(block 69) failed [ 143.190921][ T6080] FAT-fs (loop3): Directory bread(block 70) failed [ 143.206605][ T6080] FAT-fs (loop3): Directory bread(block 71) failed [ 143.207854][ T6086] netlink: 9 bytes leftover after parsing attributes in process `syz.4.793'. [ 143.213807][ T6080] FAT-fs (loop3): Directory bread(block 72) failed [ 143.232121][ T6080] FAT-fs (loop3): Directory bread(block 73) failed [ 143.238797][ T6086] gretap0: entered promiscuous mode [ 143.277119][ T6086] netlink: 5 bytes leftover after parsing attributes in process `syz.4.793'. [ 143.298564][ T6086] 0ªî{X¹¦: renamed from gretap0 [ 143.314340][ T6086] 0ªî{X¹¦: left promiscuous mode [ 143.319771][ T6086] 0ªî{X¹¦: entered allmulticast mode [ 143.327336][ T6086] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 143.395974][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.798'. [ 143.412603][ T6102] bond0: entered promiscuous mode [ 143.423902][ T6104] Cannot find del_set index 4 as target [ 143.430441][ T6102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.482825][ T6102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.490274][ T6102] bond0: (slave sit1): The slave device specified does not support setting the MAC address [ 143.501826][ T6102] bond0: (slave sit1): Error -95 calling set_mac_address [ 143.561064][ T6119] tmpfs: Unknown parameter 'ÿ' [ 143.584127][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.606578][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.644068][ T6131] lo speed is unknown, defaulting to 1000 [ 143.874795][ T6155] usb usb1: usbfs: process 6155 (syz.0.815) did not claim interface 0 before use [ 143.910654][ T6150] bridge0: port 1(dummy0) entered disabled state [ 143.919122][ T6150] hsr0: left allmulticast mode [ 143.924006][ T6150] hsr_slave_0: left allmulticast mode [ 143.945890][ T6150] hsr_slave_1: left allmulticast mode [ 143.948500][ T6160] netlink: 36 bytes leftover after parsing attributes in process `syz.4.813'. [ 143.960574][ T6150] bridge0: port 3(hsr0) entered disabled state [ 144.054703][ T6152] syzkaller0: entered promiscuous mode [ 144.060298][ T6152] syzkaller0: entered allmulticast mode [ 144.079402][ T6160] geneve2: entered promiscuous mode [ 144.230113][ T6174] tmpfs: Unknown parameter 'ÿ' [ 144.251209][ T6176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6176 comm=syz.1.824 [ 144.270090][ T6180] netlink: 'syz.2.825': attribute type 2 has an invalid length. [ 144.645318][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 144.645346][ T28] audit: type=1400 audit(144.611:1648): avc: denied { map } for pid=6192 comm="syz.0.830" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 144.675101][ T28] audit: type=1400 audit(144.621:1649): avc: denied { execute } for pid=6192 comm="syz.0.830" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 145.025297][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.032615][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.211510][ T6197] bridge_slave_0: left allmulticast mode [ 145.219421][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.228005][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.228492][ T6197] bridge_slave_0: left promiscuous mode [ 145.245770][ T6210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.835'. [ 145.248390][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.299123][ T6197] bridge_slave_1: left allmulticast mode [ 145.304909][ T6197] bridge_slave_1: left promiscuous mode [ 145.311571][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.344027][ T6211] netlink: 165 bytes leftover after parsing attributes in process `syz.3.835'. [ 145.353340][ T6197] bond0: (slave bond_slave_0): Releasing backup interface [ 145.364439][ T6197] bond0: (slave bond_slave_1): Releasing backup interface [ 145.376141][ T6197] team0: Port device team_slave_0 removed [ 145.385243][ T6197] team0: Port device team_slave_1 removed [ 145.393170][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.402193][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.411319][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.420466][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.431581][ T6197] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 145.478218][ T6218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.488058][ T6218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.536036][ T6224] tmpfs: Unknown parameter 'ÿ' [ 145.759506][ T6226] lo speed is unknown, defaulting to 1000 [ 145.766106][ T6226] lo speed is unknown, defaulting to 1000 [ 145.772522][ T6226] lo speed is unknown, defaulting to 1000 [ 145.807539][ T6226] infiniband lyz2: set active [ 145.811564][ T6228] Unsupported ieee802154 address type: 0 [ 145.812362][ T4623] lo speed is unknown, defaulting to 1000 [ 145.820536][ T6226] infiniband lyz2: added lo [ 145.823808][ T28] audit: type=1400 audit(145.781:1650): avc: denied { bind } for pid=6225 comm="syz.2.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.851151][ T6226] RDS/IB: lyz2: added [ 145.855323][ T6226] smc: adding ib device lyz2 with port count 1 [ 145.861720][ T6226] smc: ib device lyz2 port 1 has no pnetid [ 145.868123][ T3582] lo speed is unknown, defaulting to 1000 [ 145.874011][ T6226] lo speed is unknown, defaulting to 1000 [ 145.876279][ T28] audit: type=1400 audit(145.841:1651): avc: denied { ioctl } for pid=6225 comm="syz.2.840" path="socket:[14461]" dev="sockfs" ino=14461 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 145.932809][ T6226] lo speed is unknown, defaulting to 1000 [ 145.981092][ T6226] lo speed is unknown, defaulting to 1000 [ 146.024371][ T6226] lo speed is unknown, defaulting to 1000 [ 146.063171][ T6226] lo speed is unknown, defaulting to 1000 [ 146.173491][ T6237] lo speed is unknown, defaulting to 1000 [ 146.179574][ T6237] lo speed is unknown, defaulting to 1000 [ 146.185793][ T6237] lo speed is unknown, defaulting to 1000 [ 146.192595][ T6237] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 146.201156][ T6237] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 146.248371][ T6238] lo speed is unknown, defaulting to 1000 [ 146.321664][ T6238] lo speed is unknown, defaulting to 1000 [ 146.401614][ T6238] lo speed is unknown, defaulting to 1000 [ 146.557316][ T6237] lo speed is unknown, defaulting to 1000 [ 146.564011][ T6237] lo speed is unknown, defaulting to 1000 [ 146.570841][ T6237] lo speed is unknown, defaulting to 1000 [ 146.577049][ T6237] lo speed is unknown, defaulting to 1000 [ 146.583802][ T6237] lo speed is unknown, defaulting to 1000 [ 146.610291][ T28] audit: type=1400 audit(146.511:1652): avc: denied { getopt } for pid=6232 comm="syz.3.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.797225][ T6241] FAULT_INJECTION: forcing a failure. [ 146.797225][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 146.833254][ T6241] CPU: 0 UID: 0 PID: 6241 Comm: syz.0.843 Tainted: G W syzkaller #0 PREEMPT(full) [ 146.833343][ T6241] Tainted: [W]=WARN [ 146.833351][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 146.833367][ T6241] Call Trace: [ 146.833385][ T6241] [ 146.833395][ T6241] __dump_stack+0x1d/0x30 [ 146.833422][ T6241] dump_stack_lvl+0x95/0xd0 [ 146.833478][ T6241] dump_stack+0x15/0x1b [ 146.833624][ T6241] should_fail_ex+0x263/0x280 [ 146.833708][ T6241] should_failslab+0x8c/0xb0 [ 146.833730][ T6241] kmem_cache_alloc_noprof+0x66/0x400 [ 146.833796][ T6241] ? do_getname+0x2e/0x1c0 [ 146.833845][ T6241] do_getname+0x2e/0x1c0 [ 146.833873][ T6241] __se_sys_renameat2+0x29/0x1c0 [ 146.833908][ T6241] __x64_sys_renameat2+0x67/0x80 [ 146.833992][ T6241] x64_sys_call+0x2a12/0x3020 [ 146.834022][ T6241] do_syscall_64+0x12c/0x370 [ 146.834052][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.834155][ T6241] RIP: 0033:0x7fbb6e95c819 [ 146.834233][ T6241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.834251][ T6241] RSP: 002b:00007fbb6d3b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 146.834275][ T6241] RAX: ffffffffffffffda RBX: 00007fbb6ebd5fa0 RCX: 00007fbb6e95c819 [ 146.834293][ T6241] RDX: 0000000000000003 RSI: 0000200000000100 RDI: 0000000000000003 [ 146.834307][ T6241] RBP: 00007fbb6d3b7090 R08: 0000000000000002 R09: 0000000000000000 [ 146.834323][ T6241] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 146.834417][ T6241] R13: 00007fbb6ebd6038 R14: 00007fbb6ebd5fa0 R15: 00007ffd10a97478 [ 146.834442][ T6241] [ 146.939163][ T6252] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.941164][ T6245] 9p: Bad value for 'wfdno' [ 147.071049][ T6251] lo speed is unknown, defaulting to 1000 [ 147.078104][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 147.132232][ T6261] tmpfs: Unknown parameter 'ÿ' [ 147.147495][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 147.165754][ T6251] lo speed is unknown, defaulting to 1000 [ 147.227018][ T6251] lo speed is unknown, defaulting to 1000 [ 149.363810][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 149.373846][ T6274] openvswitch: netlink: EtherType 200 is less than min 600 [ 149.417797][ T6284] ip6tnl1: entered allmulticast mode [ 149.558134][ T28] audit: type=1400 audit(149.531:1653): avc: denied { override_creds } for pid=6277 comm="syz.3.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 149.601736][ T6290] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 149.668654][ T28] audit: type=1326 audit(149.631:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 149.701095][ T28] audit: type=1326 audit(149.631:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 149.773811][ T28] audit: type=1326 audit(149.631:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 149.815535][ T28] audit: type=1326 audit(149.631:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 149.824652][ T6306] tmpfs: Unknown parameter 'ÿ' [ 149.839622][ T28] audit: type=1326 audit(149.631:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 149.867060][ T28] audit: type=1326 audit(149.631:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 150.051101][ T28] audit: type=1326 audit(149.631:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 150.096905][ T28] audit: type=1326 audit(149.631:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 150.133753][ T28] audit: type=1326 audit(149.641:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 150.163952][ T28] audit: type=1326 audit(149.641:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 150.209670][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.870'. [ 150.252391][ T6292] lo speed is unknown, defaulting to 1000 [ 150.378484][ T6292] lo speed is unknown, defaulting to 1000 [ 150.692462][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.699719][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.833393][ T6330] bridge_slave_0: left allmulticast mode [ 150.855289][ T6330] bridge_slave_0: left promiscuous mode [ 150.874154][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.974842][ T6330] bridge_slave_1: left allmulticast mode [ 151.011903][ T6330] bridge_slave_1: left promiscuous mode [ 151.017833][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.046541][ T6330] team0: Port device team_slave_0 removed [ 151.098260][ T6330] team0: Port device team_slave_1 removed [ 151.168561][ T6330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.197344][ T6330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.219080][ T6330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.233662][ T6330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.255668][ T6330] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 151.285805][ T6292] lo speed is unknown, defaulting to 1000 [ 151.468247][ T6341] usb usb1: usbfs: process 6341 (syz.0.878) did not claim interface 0 before use [ 151.500054][ T6344] tmpfs: Unknown parameter 'ÿ' [ 151.518562][ T6341] Cannot find add_set index 0 as target [ 151.561145][ T6320] kexec: Could not allocate control_code_buffer [ 151.576233][ T6348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.585726][ T6348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.618680][ T6352] netlink: 132 bytes leftover after parsing attributes in process `syz.4.883'. [ 151.623391][ T6354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.882'. [ 151.736204][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 151.745755][ T6363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6363 comm=syz.3.886 [ 151.772731][ T6363] netlink: 'syz.3.886': attribute type 1 has an invalid length. [ 151.808389][ T6363] netlink: 'syz.3.886': attribute type 1 has an invalid length. [ 151.840067][ T6363] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.886'. [ 151.904397][ T6367] lo speed is unknown, defaulting to 1000 [ 151.949713][ T6379] bridge_slave_0: default FDB implementation only supports local addresses [ 152.309401][ T6386] tmpfs: Unknown parameter 'ÿ' [ 152.435528][ T6367] lo speed is unknown, defaulting to 1000 [ 152.498830][ T6367] lo speed is unknown, defaulting to 1000 [ 153.085048][ T6405] netlink: 132 bytes leftover after parsing attributes in process `syz.4.898'. [ 153.191657][ T6412] program syz.0.900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.213099][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.902'. [ 153.222377][ T6416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6416 comm=syz.4.902 [ 153.246998][ T6416] netlink: 'syz.4.902': attribute type 1 has an invalid length. [ 153.255826][ T6416] netlink: 'syz.4.902': attribute type 1 has an invalid length. [ 153.266716][ T6416] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.902'. [ 153.279326][ T6420] netlink: 132 bytes leftover after parsing attributes in process `syz.1.904'. [ 153.391427][ T6429] netlink: 9 bytes leftover after parsing attributes in process `syz.2.906'. [ 153.507286][ T6429] gretap0: entered promiscuous mode [ 153.514550][ T6435] netlink: 5 bytes leftover after parsing attributes in process `syz.2.906'. [ 153.575415][ T6435] 0ªî{X¹¦: renamed from gretap0 [ 153.582292][ T6435] 0ªî{X¹¦: left promiscuous mode [ 153.597129][ T6435] 0ªî{X¹¦: entered allmulticast mode [ 153.605561][ T6435] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 154.041892][ T6437] openvswitch: netlink: EtherType 0 is less than min 600 [ 156.688592][ T6460] lo speed is unknown, defaulting to 1000 [ 156.925839][ T6476] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.919'. [ 156.968933][ T6476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.919'. [ 156.978979][ T6479] tmpfs: Unknown parameter 'ÿ' [ 157.117914][ T6460] lo speed is unknown, defaulting to 1000 [ 157.985989][ T6504] tmpfs: Unknown parameter 'ÿ' [ 158.074273][ T28] kauditd_printk_skb: 324 callbacks suppressed [ 158.074302][ T28] audit: type=1400 audit(158.041:1988): avc: denied { create } for pid=6501 comm="syz.0.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 158.101127][ T6490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.120363][ T6460] lo speed is unknown, defaulting to 1000 [ 158.243424][ T6511] netlink: 132 bytes leftover after parsing attributes in process `syz.1.929'. [ 158.276716][ T28] audit: type=1400 audit(158.241:1989): avc: denied { nlmsg_write } for pid=6512 comm="syz.0.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 158.436832][ T6524] tmpfs: Unknown parameter 'ÿ' [ 159.009667][ T6528] tipc: Started in network mode [ 159.020775][ T6528] tipc: Node identity ca9f7915a93f, cluster identity 4711 [ 159.037807][ T6528] tipc: Enabled bearer , priority 0 [ 159.067778][ T6528] syzkaller0: entered promiscuous mode [ 159.073494][ T6528] syzkaller0: entered allmulticast mode [ 159.118253][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 159.209620][ T6528] tipc: Resetting bearer [ 159.237111][ T6527] tipc: Resetting bearer [ 159.326424][ T6527] tipc: Disabling bearer [ 159.399866][ T28] audit: type=1326 audit(159.361:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 159.446192][ T28] audit: type=1326 audit(159.361:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 159.952373][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 160.014725][ T6563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6563 comm=syz.1.945 [ 160.145521][ T28] audit: type=1326 audit(159.361:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 160.225414][ T28] audit: type=1326 audit(159.361:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb6e91d04e code=0x7ffc0000 [ 160.248408][ T6567] tmpfs: Unknown parameter 'ÿ' [ 160.272480][ T28] audit: type=1326 audit(159.361:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 160.295407][ T28] audit: type=1326 audit(159.361:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 160.319715][ T28] audit: type=1326 audit(159.361:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 160.342548][ T28] audit: type=1326 audit(159.371:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 161.188209][ T6592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.955'. [ 161.379540][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'. [ 161.536207][ T6612] tmpfs: Unknown parameter 'ÿ' [ 161.600556][ T6616] bond2: (slave bond_slave_1): Device is not bonding slave [ 161.629000][ T6616] bond2: option active_slave: invalid value (bond_slave_1) [ 161.637544][ T6616] bond2 (unregistering): Released all slaves [ 161.657143][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 161.796561][ T6614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.909613][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'. [ 162.126480][ T6636] openvswitch: netlink: EtherType 200 is less than min 600 [ 162.770739][ T6653] netlink: 'syz.2.978': attribute type 29 has an invalid length. [ 162.826869][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 162.916911][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 163.081005][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 163.081022][ T28] audit: type=1400 audit(163.051:2071): avc: denied { create } for pid=6668 comm="syz.1.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.139359][ T28] audit: type=1400 audit(163.051:2072): avc: denied { getopt } for pid=6668 comm="syz.1.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.140420][ T6669] netlink: 132 bytes leftover after parsing attributes in process `syz.1.984'. [ 163.225375][ T6683] tmpfs: Unknown parameter 'ÿ' [ 163.346537][ T28] audit: type=1400 audit(163.301:2073): avc: denied { create } for pid=6689 comm="syz.1.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.406229][ T28] audit: type=1400 audit(163.301:2074): avc: denied { write } for pid=6689 comm="syz.1.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.450643][ T28] audit: type=1400 audit(163.301:2075): avc: denied { accept } for pid=6689 comm="syz.1.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.731476][ T6700] netlink: 52 bytes leftover after parsing attributes in process `syz.3.992'. [ 163.798601][ T6699] openvswitch: netlink: EtherType 200 is less than min 600 [ 163.826168][ T6698] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 163.865123][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 163.885140][ T28] audit: type=1400 audit(163.721:2076): avc: denied { create } for pid=6697 comm="syz.3.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.926539][ T6704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6704 comm=syz.4.993 [ 164.021372][ T28] audit: type=1400 audit(163.721:2077): avc: denied { setopt } for pid=6697 comm="syz.3.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.061353][ T6703] netlink: 'syz.4.993': attribute type 1 has an invalid length. [ 164.128908][ T6703] netlink: 'syz.4.993': attribute type 1 has an invalid length. [ 164.147520][ T28] audit: type=1400 audit(163.791:2078): avc: denied { bind } for pid=6697 comm="syz.3.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.166201][ T28] audit: type=1400 audit(163.811:2079): avc: denied { bind } for pid=6701 comm="syz.4.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.185244][ T6703] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.993'. [ 164.194875][ T28] audit: type=1400 audit(163.811:2080): avc: denied { name_bind } for pid=6701 comm="syz.4.993" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 164.227219][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 164.362785][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'. [ 164.382415][ T6720] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 164.471495][ T6725] team0: Port device gtp0 added [ 164.477793][ T6726] tmpfs: Unknown parameter 'ÿ' [ 164.510019][ T6727] Cannot find del_set index 4 as target [ 164.708246][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 164.723327][ T6715] FAULT_INJECTION: forcing a failure. [ 164.723327][ T6715] name failslab, interval 1, probability 0, space 0, times 0 [ 164.743900][ T6738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6738 comm=syz.1.1008 [ 164.766837][ T6715] CPU: 0 UID: 0 PID: 6715 Comm: syz.4.998 Tainted: G W syzkaller #0 PREEMPT(full) [ 164.766927][ T6715] Tainted: [W]=WARN [ 164.766936][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.766953][ T6715] Call Trace: [ 164.766962][ T6715] [ 164.767011][ T6715] __dump_stack+0x1d/0x30 [ 164.767046][ T6715] dump_stack_lvl+0x95/0xd0 [ 164.767148][ T6715] dump_stack+0x15/0x1b [ 164.767175][ T6715] should_fail_ex+0x263/0x280 [ 164.767275][ T6715] should_failslab+0x8c/0xb0 [ 164.767304][ T6715] kmem_cache_alloc_noprof+0x66/0x400 [ 164.767399][ T6715] ? alloc_empty_file+0x76/0x200 [ 164.767501][ T6715] alloc_empty_file+0x76/0x200 [ 164.767536][ T6715] path_openat+0x65/0x2050 [ 164.767589][ T6715] ? _parse_integer_limit+0x170/0x190 [ 164.767615][ T6715] ? _parse_integer+0x27/0x40 [ 164.767641][ T6715] ? kstrtoull+0x111/0x140 [ 164.767731][ T6715] ? kstrtouint+0x76/0xc0 [ 164.767829][ T6715] do_file_open+0x16c/0x290 [ 164.767857][ T6715] do_sys_openat2+0x94/0x130 [ 164.768035][ T6715] __x64_sys_openat+0xf2/0x120 [ 164.768069][ T6715] x64_sys_call+0x1e39/0x3020 [ 164.768105][ T6715] do_syscall_64+0x12c/0x370 [ 164.768203][ T6715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.768232][ T6715] RIP: 0033:0x7f3316d7c819 [ 164.768253][ T6715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.768277][ T6715] RSP: 002b:00007f33157cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.768298][ T6715] RAX: ffffffffffffffda RBX: 00007f3316ff5fa0 RCX: 00007f3316d7c819 [ 164.768347][ T6715] RDX: 0000000000040040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 164.768364][ T6715] RBP: 00007f33157cf090 R08: 0000000000000000 R09: 0000000000000000 [ 164.768377][ T6715] R10: 6ab858183a7ef6ba R11: 0000000000000246 R12: 0000000000000001 [ 164.768390][ T6715] R13: 00007f3316ff6038 R14: 00007f3316ff5fa0 R15: 00007fff1e3e4a58 [ 164.768485][ T6715] [ 165.409670][ T6744] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 165.438442][ T6744] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 165.517296][ T6744] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1008'. [ 165.637728][ T6753] lo speed is unknown, defaulting to 1000 [ 165.798089][ T6753] lo speed is unknown, defaulting to 1000 [ 165.900825][ T6753] lo speed is unknown, defaulting to 1000 [ 166.616842][ T6779] openvswitch: netlink: EtherType 200 is less than min 600 [ 167.724223][ T6807] hsr0: entered promiscuous mode [ 168.029985][ T6817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.124094][ T28] kauditd_printk_skb: 127 callbacks suppressed [ 168.124123][ T28] audit: type=1400 audit(168.091:2208): avc: denied { recv } for pid=6627 comm="syz.0.970" saddr=10.128.0.163 src=30036 daddr=10.128.0.73 dest=58630 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 168.236774][ T28] audit: type=1400 audit(168.191:2209): avc: denied { watch } for pid=6824 comm="syz.1.1036" path="/proc/704" dev="proc" ino=16507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 168.262946][ T6829] __nla_validate_parse: 3 callbacks suppressed [ 168.262964][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1037'. [ 168.297413][ T28] audit: type=1400 audit(168.211:2210): avc: denied { create } for pid=6820 comm="syz.3.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.350930][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 168.357012][ T28] audit: type=1400 audit(168.261:2211): avc: denied { connect } for pid=6827 comm="syz.1.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.399387][ T28] audit: type=1400 audit(168.261:2212): avc: denied { name_connect } for pid=6827 comm="syz.1.1038" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 168.439798][ T28] audit: type=1400 audit(168.341:2213): avc: denied { create } for pid=6820 comm="syz.3.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 168.482031][ T28] audit: type=1400 audit(168.391:2214): avc: denied { write } for pid=6827 comm="syz.1.1038" lport=37054 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.537206][ T28] audit: type=1400 audit(168.391:2215): avc: denied { shutdown } for pid=6827 comm="syz.1.1038" lport=37054 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.587456][ T28] audit: type=1400 audit(168.471:2216): avc: denied { create } for pid=6835 comm="syz.2.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 168.636711][ T28] audit: type=1400 audit(168.471:2217): avc: denied { bind } for pid=6835 comm="syz.2.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 168.915266][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1050'. [ 170.114342][ T6880] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 170.241947][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 170.465691][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1062'. [ 170.656578][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.666424][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.323875][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 171.333101][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 172.431350][ T6944] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1078'. [ 173.277547][ T28] kauditd_printk_skb: 244 callbacks suppressed [ 173.277562][ T28] audit: type=1400 audit(173.251:2462): avc: denied { mount } for pid=6940 comm="syz.3.1078" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 173.308200][ T6947] bridge1: entered promiscuous mode [ 173.314463][ T6947] bridge1: entered allmulticast mode [ 173.578804][ T6954] nft_compat: unsupported protocol 1 [ 173.606175][ T6944] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1078'. [ 173.677068][ T6954] usb usb7: check_ctrlrecip: process 6954 (syz.2.1083) requesting ep 01 but needs 81 [ 173.762143][ T6954] usb usb7: usbfs: process 6954 (syz.2.1083) did not claim interface 0 before use [ 174.054050][ T28] audit: type=1400 audit(174.021:2463): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 174.115997][ T28] audit: type=1400 audit(174.081:2464): avc: denied { create } for pid=6970 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 174.180269][ T6973] 9p: Bad value for 'aname' [ 174.188168][ T28] audit: type=1326 audit(174.101:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 174.239307][ T28] audit: type=1326 audit(174.101:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 174.306067][ T28] audit: type=1326 audit(174.111:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 174.357209][ T28] audit: type=1326 audit(174.111:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 174.380494][ T28] audit: type=1326 audit(174.111:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 174.403818][ T28] audit: type=1326 audit(174.111:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 174.427530][ T28] audit: type=1326 audit(174.111:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 175.352025][ T7003] Cannot find del_set index 4 as target [ 175.391410][ T7009] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20004 [ 175.397062][ T7010] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1081'. [ 175.407678][ T7010] 0ªî{X¹¦: entered promiscuous mode [ 175.413016][ T7010] 0ªî{X¹¦: left allmulticast mode [ 175.418389][ T7009] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 175.430769][ T7009] netlink: 'syz.2.1102': attribute type 10 has an invalid length. [ 175.438495][ T7010] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1081'. [ 175.456796][ T7010] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 175.466365][ T7010] 1ªî{X¹¦: left promiscuous mode [ 175.472983][ T7010] 1ªî{X¹¦: entered allmulticast mode [ 175.487680][ T7010] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 175.688610][ T7027] FAULT_INJECTION: forcing a failure. [ 175.688610][ T7027] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 175.727382][ T7027] CPU: 0 UID: 0 PID: 7027 Comm: syz.4.1108 Tainted: G W syzkaller #0 PREEMPT(full) [ 175.727496][ T7027] Tainted: [W]=WARN [ 175.727503][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 175.727516][ T7027] Call Trace: [ 175.727524][ T7027] [ 175.727532][ T7027] __dump_stack+0x1d/0x30 [ 175.727566][ T7027] dump_stack_lvl+0x95/0xd0 [ 175.727595][ T7027] dump_stack+0x15/0x1b [ 175.727673][ T7027] should_fail_ex+0x263/0x280 [ 175.727702][ T7027] should_fail_alloc_page+0xf2/0x100 [ 175.727734][ T7027] __alloc_frozen_pages_noprof+0x108/0x360 [ 175.727888][ T7027] alloc_pages_mpol+0xb3/0x260 [ 175.727930][ T7027] alloc_pages_noprof+0x8f/0x140 [ 175.727990][ T7027] pte_alloc_one+0x1c/0xc0 [ 175.728088][ T7027] __pte_alloc+0x32/0x2a0 [ 175.728122][ T7027] handle_mm_fault+0x203a/0x3020 [ 175.728163][ T7027] ? vma_start_read+0x1c7/0x2c0 [ 175.728202][ T7027] do_user_addr_fault+0x62f/0x1050 [ 175.728307][ T7027] ? ksys_mmap_pgoff+0xc1/0x310 [ 175.728343][ T7027] ? __x64_sys_mmap+0x49/0x70 [ 175.728365][ T7027] ? trace_page_fault_user+0x1f/0xe0 [ 175.728470][ T7027] exc_page_fault+0x62/0xa0 [ 175.728514][ T7027] asm_exc_page_fault+0x26/0x30 [ 175.728540][ T7027] RIP: 0033:0x7f3316c33b8e [ 175.728560][ T7027] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 175.728584][ T7027] RSP: 002b:00007f33157ce470 EFLAGS: 00010246 [ 175.728605][ T7027] RAX: 0000000000000001 RBX: 00007f33157ce530 RCX: 0000000000000101 [ 175.728624][ T7027] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f33157ce5d0 [ 175.728637][ T7027] RBP: 0000000000000102 R08: 00007f330d3af000 R09: 0000000000000000 [ 175.728649][ T7027] R10: 0000000000000000 R11: 00007f33157ce540 R12: 0000000000000001 [ 175.728661][ T7027] R13: 00007f3316e32600 R14: 0000000000000000 R15: 00007f33157ce5d0 [ 175.728718][ T7027] [ 175.728739][ T7027] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 176.331439][ T7033] netlink: 'syz.2.1110': attribute type 1 has an invalid length. [ 176.372352][ T7033] netlink: 'syz.2.1110': attribute type 1 has an invalid length. [ 176.419057][ T7033] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1110'. [ 176.603531][ T7042] Cannot find del_set index 4 as target [ 176.691826][ T7048] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 176.840192][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1121'. [ 176.956203][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'. [ 177.392263][ T7079] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1127'. [ 177.521164][ T7085] Cannot find del_set index 4 as target [ 177.553886][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1133'. [ 177.666023][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 177.716808][ T7105] tmpfs: Unknown parameter 'ÿ' [ 177.788094][ T7111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7111 comm=syz.2.1139 [ 177.861177][ T7122] Cannot find del_set index 4 as target [ 177.951250][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1146'. [ 178.019084][ T7130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7130 comm=syz.3.1148 [ 178.388306][ T28] kauditd_printk_skb: 285 callbacks suppressed [ 178.388335][ T28] audit: type=1400 audit(178.361:2755): avc: denied { setopt } for pid=7140 comm="syz.2.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.426296][ T7142] tmpfs: Unknown parameter 'ÿ' [ 178.453417][ T3389] IPVS: starting estimator thread 0... [ 178.513061][ T28] audit: type=1400 audit(178.451:2756): avc: denied { ioctl } for pid=7136 comm="syz.1.1151" path="socket:[17022]" dev="sockfs" ino=17022 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.537809][ T28] audit: type=1400 audit(178.451:2757): avc: denied { connect } for pid=7136 comm="syz.1.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.619494][ T7150] Cannot find del_set index 4 as target [ 178.626795][ T7143] IPVS: using max 2304 ests per chain, 115200 per kthread [ 178.639430][ T7154] __nla_validate_parse: 1 callbacks suppressed [ 178.639447][ T7154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1159'. [ 178.656515][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1157'. [ 178.665800][ T28] audit: type=1400 audit(178.621:2758): avc: denied { write } for pid=7151 comm="syz.3.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.686259][ T7152] x_tables: duplicate underflow at hook 1 [ 178.731296][ T28] audit: type=1326 audit(178.671:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 178.761919][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'. [ 178.772634][ T28] audit: type=1326 audit(178.671:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 178.778453][ T7152] tipc: Started in network mode [ 178.795781][ T28] audit: type=1326 audit(178.671:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 178.812235][ T7152] tipc: Node identity 4, cluster identity 4711 [ 178.827827][ T28] audit: type=1326 audit(178.671:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 178.833905][ T7152] tipc: Node number set to 4 [ 178.855859][ T28] audit: type=1326 audit(178.671:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 178.880978][ T28] audit: type=1326 audit(178.671:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3316d7c819 code=0x7ffc0000 [ 179.167267][ T7185] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1164'. [ 179.613237][ T7186] openvswitch: netlink: EtherType 200 is less than min 600 [ 179.629129][ T7185] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1164'. [ 179.697985][ T7190] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1171'. [ 179.773947][ T7193] GUP no longer grows the stack in syz.2.1173 (7193): 200000009000-20000000a000 (200000005000) [ 179.784772][ T7193] CPU: 0 UID: 0 PID: 7193 Comm: syz.2.1173 Tainted: G W syzkaller #0 PREEMPT(full) [ 179.784810][ T7193] Tainted: [W]=WARN [ 179.784818][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 179.784832][ T7193] Call Trace: [ 179.784840][ T7193] [ 179.784849][ T7193] __dump_stack+0x1d/0x30 [ 179.784937][ T7193] dump_stack_lvl+0x95/0xd0 [ 179.784966][ T7193] dump_stack+0x15/0x1b [ 179.785012][ T7193] __get_user_pages+0x195b/0x1ea0 [ 179.785124][ T7193] ? __mt_destroy+0xce/0xe0 [ 179.785158][ T7193] __gup_longterm_locked+0x8d7/0xe30 [ 179.785180][ T7193] ? __rcu_read_unlock+0x33/0x70 [ 179.785203][ T7193] ? try_get_folio+0x369/0x3b0 [ 179.785278][ T7193] ? try_grab_folio_fast+0xdc/0x370 [ 179.785302][ T7193] gup_fast_fallback+0x1f3/0x13c0 [ 179.785381][ T7193] get_user_pages_fast+0x5f/0x90 [ 179.785418][ T7193] __iov_iter_get_pages_alloc+0x24e/0x6f0 [ 179.785524][ T7193] iov_iter_get_pages2+0x5e/0xa0 [ 179.785562][ T7193] __se_sys_vmsplice+0x541/0xfd0 [ 179.785610][ T7193] __x64_sys_vmsplice+0x55/0x70 [ 179.785714][ T7193] x64_sys_call+0x28e9/0x3020 [ 179.785745][ T7193] do_syscall_64+0x12c/0x370 [ 179.785777][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.785812][ T7193] RIP: 0033:0x7f8091ffc819 [ 179.785831][ T7193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.785877][ T7193] RSP: 002b:00007f8090a36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 179.785901][ T7193] RAX: ffffffffffffffda RBX: 00007f8092276090 RCX: 00007f8091ffc819 [ 179.785917][ T7193] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000005 [ 179.785931][ T7193] RBP: 00007f8092092c91 R08: 0000000000000000 R09: 0000000000000000 [ 179.785968][ T7193] R10: 0100000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.785983][ T7193] R13: 00007f8092276128 R14: 00007f8092276090 R15: 00007fff2ac47c28 [ 179.786006][ T7193] [ 180.373404][ T7223] lo speed is unknown, defaulting to 1000 [ 180.558181][ T7223] lo speed is unknown, defaulting to 1000 [ 180.726781][ T7223] lo speed is unknown, defaulting to 1000 [ 181.018582][ T7229] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1185'. [ 181.532902][ T7252] pimreg: entered allmulticast mode [ 181.586776][ T7260] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1198'. [ 183.067600][ T7288] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 183.081465][ T7288] syzkaller1: linktype set to 778 [ 183.740715][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 183.740734][ T28] audit: type=1400 audit(183.711:2877): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 183.773468][ T7298] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1211'. [ 183.830551][ T28] audit: type=1400 audit(183.801:2878): avc: denied { write } for pid=7302 comm="syz.1.1213" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 183.910212][ T28] audit: type=1326 audit(183.881:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 183.982039][ T28] audit: type=1326 audit(183.881:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 184.059799][ T28] audit: type=1326 audit(183.881:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 184.128764][ T28] audit: type=1326 audit(183.881:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 184.224891][ T28] audit: type=1326 audit(183.881:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 184.320755][ T28] audit: type=1326 audit(183.881:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 184.373556][ T7313] netlink: 'syz.0.1216': attribute type 1 has an invalid length. [ 184.408360][ T7313] bond2: entered promiscuous mode [ 184.417825][ T28] audit: type=1326 audit(183.881:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 184.446713][ T28] audit: type=1326 audit(183.881:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cc11c819 code=0x7ffc0000 [ 184.496876][ T7313] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.666887][ T7322] tmpfs: Unknown parameter 'ÿ' [ 184.773563][ T7326] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 184.780163][ T7326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 184.790904][ T7326] vhci_hcd vhci_hcd.0: Device attached [ 184.798531][ T7327] vhci_hcd: connection closed [ 184.798806][ T125] vhci_hcd vhci_hcd.1: stop threads [ 184.809941][ T125] vhci_hcd vhci_hcd.1: release socket [ 184.815593][ T125] vhci_hcd vhci_hcd.1: disconnect device [ 184.928174][ T7333] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1222'. [ 184.937924][ T7333] 0ªî{X¹¦: entered promiscuous mode [ 184.943371][ T7333] 0ªî{X¹¦: left allmulticast mode [ 184.953847][ T7333] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1222'. [ 184.963428][ T7333] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 184.970960][ T7333] 1ªî{X¹¦: left promiscuous mode [ 184.977100][ T7333] 1ªî{X¹¦: entered allmulticast mode [ 184.984182][ T7333] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 185.022240][ T7336] FAULT_INJECTION: forcing a failure. [ 185.022240][ T7336] name failslab, interval 1, probability 0, space 0, times 0 [ 185.041392][ T7336] CPU: 0 UID: 0 PID: 7336 Comm: syz.2.1223 Tainted: G W syzkaller #0 PREEMPT(full) [ 185.041434][ T7336] Tainted: [W]=WARN [ 185.041443][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.041460][ T7336] Call Trace: [ 185.041468][ T7336] [ 185.041479][ T7336] __dump_stack+0x1d/0x30 [ 185.041562][ T7336] dump_stack_lvl+0x95/0xd0 [ 185.041594][ T7336] dump_stack+0x15/0x1b [ 185.041669][ T7336] should_fail_ex+0x263/0x280 [ 185.041705][ T7336] ? __pfx_sock_alloc_inode+0x10/0x10 [ 185.041740][ T7336] should_failslab+0x8c/0xb0 [ 185.041845][ T7336] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 185.041903][ T7336] ? sock_alloc_inode+0x34/0xa0 [ 185.041937][ T7336] ? __pfx_sock_alloc_inode+0x10/0x10 [ 185.041970][ T7336] sock_alloc_inode+0x34/0xa0 [ 185.042042][ T7336] alloc_inode+0x40/0x170 [ 185.042150][ T7336] __sock_create+0x120/0x580 [ 185.042188][ T7336] __sys_socketpair+0x16f/0x420 [ 185.042223][ T7336] ? ksys_write+0x194/0x1a0 [ 185.042249][ T7336] __x64_sys_socketpair+0x52/0x60 [ 185.042336][ T7336] x64_sys_call+0x2de5/0x3020 [ 185.042373][ T7336] do_syscall_64+0x12c/0x370 [ 185.042456][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.042481][ T7336] RIP: 0033:0x7f8091ffe0ba [ 185.042499][ T7336] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.042521][ T7336] RSP: 002b:00007f8090a56f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 185.042543][ T7336] RAX: ffffffffffffffda RBX: 00007f8092275f00 RCX: 00007f8091ffe0ba [ 185.042606][ T7336] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 185.042632][ T7336] RBP: 00007f8090a57090 R08: 0000000000000000 R09: 0000000000000000 [ 185.042647][ T7336] R10: 00007f8090a56f88 R11: 0000000000000246 R12: 0000000000000001 [ 185.042662][ T7336] R13: 00007f8092276038 R14: 00007f8092275fa0 R15: 00007fff2ac47c28 [ 185.042684][ T7336] [ 185.042707][ T7336] socket: no more sockets [ 185.437037][ T7330] openvswitch: netlink: EtherType 200 is less than min 600 [ 185.509363][ T7340] Cannot find del_set index 4 as target [ 185.900965][ T7353] FAULT_INJECTION: forcing a failure. [ 185.900965][ T7353] name failslab, interval 1, probability 0, space 0, times 0 [ 185.913731][ T7353] CPU: 1 UID: 0 PID: 7353 Comm: syz.0.1226 Tainted: G W syzkaller #0 PREEMPT(full) [ 185.913773][ T7353] Tainted: [W]=WARN [ 185.913782][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.913799][ T7353] Call Trace: [ 185.913857][ T7353] [ 185.913868][ T7353] __dump_stack+0x1d/0x30 [ 185.913904][ T7353] dump_stack_lvl+0x95/0xd0 [ 185.913973][ T7353] dump_stack+0x15/0x1b [ 185.913999][ T7353] should_fail_ex+0x263/0x280 [ 185.914032][ T7353] should_failslab+0x8c/0xb0 [ 185.914058][ T7353] __kvmalloc_node_noprof+0x155/0x650 [ 185.914108][ T7353] ? xt_alloc_entry_offsets+0x4d/0x60 [ 185.914216][ T7353] xt_alloc_entry_offsets+0x4d/0x60 [ 185.914260][ T7353] translate_table+0xa8/0x11b0 [ 185.914368][ T7353] ? __rcu_read_unlock+0x4e/0x70 [ 185.914395][ T7353] ? __memcg_slab_post_alloc_hook+0x458/0x540 [ 185.914492][ T7353] ? should_fail_ex+0xd9/0x280 [ 185.914579][ T7353] ? _copy_from_user+0x89/0xb0 [ 185.914616][ T7353] do_ip6t_set_ctl+0x6d9/0x8f0 [ 185.914679][ T7353] nf_setsockopt+0x199/0x1b0 [ 185.914706][ T7353] ipv6_setsockopt+0x11a/0x130 [ 185.914736][ T7353] udpv6_setsockopt+0x99/0xb0 [ 185.914840][ T7353] sock_common_setsockopt+0x69/0x80 [ 185.914868][ T7353] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 185.914895][ T7353] __sys_setsockopt+0x184/0x200 [ 185.914942][ T7353] __x64_sys_setsockopt+0x64/0x80 [ 185.915057][ T7353] x64_sys_call+0x2327/0x3020 [ 185.915088][ T7353] do_syscall_64+0x12c/0x370 [ 185.915124][ T7353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.915221][ T7353] RIP: 0033:0x7fbb6e95c819 [ 185.915241][ T7353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.915264][ T7353] RSP: 002b:00007fbb6d375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 185.915284][ T7353] RAX: ffffffffffffffda RBX: 00007fbb6ebd6180 RCX: 00007fbb6e95c819 [ 185.915298][ T7353] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 185.915310][ T7353] RBP: 00007fbb6d375090 R08: 0000000000000510 R09: 0000000000000000 [ 185.915333][ T7353] R10: 0000200000000d40 R11: 0000000000000246 R12: 0000000000000001 [ 185.915345][ T7353] R13: 00007fbb6ebd6218 R14: 00007fbb6ebd6180 R15: 00007ffd10a97478 [ 185.915373][ T7353] [ 186.186413][ T7356] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 186.194294][ T7356] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 186.220653][ T7356] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1229'. [ 186.336246][ T7359] tmpfs: Unknown parameter 'ÿ' [ 186.601272][ T7374] Cannot find del_set index 4 as target [ 186.965830][ T7419] FAULT_INJECTION: forcing a failure. [ 186.965830][ T7419] name failslab, interval 1, probability 0, space 0, times 0 [ 186.989274][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.003627][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.016740][ T7419] CPU: 1 UID: 0 PID: 7419 Comm: syz.1.1244 Tainted: G W syzkaller #0 PREEMPT(full) [ 187.016946][ T7419] Tainted: [W]=WARN [ 187.016956][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 187.016973][ T7419] Call Trace: [ 187.016982][ T7419] [ 187.016991][ T7419] __dump_stack+0x1d/0x30 [ 187.017062][ T7419] dump_stack_lvl+0x95/0xd0 [ 187.017095][ T7419] dump_stack+0x15/0x1b [ 187.017151][ T7419] should_fail_ex+0x263/0x280 [ 187.017323][ T7419] should_failslab+0x8c/0xb0 [ 187.017354][ T7419] kmem_cache_alloc_noprof+0x66/0x400 [ 187.017384][ T7419] ? __anon_vma_prepare+0xcd/0x2f0 [ 187.017422][ T7419] __anon_vma_prepare+0xcd/0x2f0 [ 187.017502][ T7419] do_wp_page+0x196b/0x2590 [ 187.017592][ T7419] ? css_rstat_updated+0xbb/0x280 [ 187.017618][ T7419] ? __rcu_read_lock+0x36/0x50 [ 187.017647][ T7419] handle_mm_fault+0x8cb/0x3020 [ 187.017713][ T7419] ? vma_start_read+0x1c7/0x2c0 [ 187.017813][ T7419] do_user_addr_fault+0x62f/0x1050 [ 187.017853][ T7419] ? ksys_mmap_pgoff+0xc1/0x310 [ 187.017939][ T7419] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 187.018033][ T7419] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 187.018064][ T7419] ? trace_page_fault_user+0x1f/0xe0 [ 187.018108][ T7419] exc_page_fault+0x62/0xa0 [ 187.018214][ T7419] asm_exc_page_fault+0x26/0x30 [ 187.018241][ T7419] RIP: 0033:0x7f1929413ae3 [ 187.018261][ T7419] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 187.018337][ T7419] RSP: 002b:00007f1927fb6470 EFLAGS: 00010202 [ 187.018356][ T7419] RAX: 0000000000000400 RBX: 00007f1927fb6530 RCX: 00007f191fb97000 [ 187.018431][ T7419] RDX: 00007f1927fb66d0 RSI: 0000000000000011 RDI: 00007f1927fb65d0 [ 187.018446][ T7419] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001a0 [ 187.018461][ T7419] R10: 00000000000001c4 R11: 00007f1927fb6530 R12: 0000000000000001 [ 187.018476][ T7419] R13: 00007f1929612600 R14: 0000000000000020 R15: 00007f1927fb65d0 [ 187.018498][ T7419] [ 187.018512][ T7419] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 187.253979][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.281200][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.316896][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.325981][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.366734][ T7424] tc_dump_action: action bad kind [ 187.372310][ T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.436768][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.618770][ T7445] Cannot find del_set index 4 as target [ 188.393249][ T7461] openvswitch: netlink: EtherType 200 is less than min 600 [ 189.376688][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 189.376710][ T28] audit: type=1400 audit(189.291:2922): avc: denied { accept } for pid=7467 comm="syz.1.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.458292][ T28] audit: type=1400 audit(189.301:2923): avc: denied { getopt } for pid=7467 comm="syz.1.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.574705][ T7475] FAULT_INJECTION: forcing a failure. [ 189.574705][ T7475] name failslab, interval 1, probability 0, space 0, times 0 [ 189.575879][ T7478] Cannot find del_set index 4 as target [ 189.616750][ T7475] CPU: 0 UID: 0 PID: 7475 Comm: syz.3.1259 Tainted: G W syzkaller #0 PREEMPT(full) [ 189.616814][ T7475] Tainted: [W]=WARN [ 189.616822][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 189.616837][ T7475] Call Trace: [ 189.616846][ T7475] [ 189.616856][ T7475] __dump_stack+0x1d/0x30 [ 189.616949][ T7475] dump_stack_lvl+0x95/0xd0 [ 189.616980][ T7475] dump_stack+0x15/0x1b [ 189.617002][ T7475] should_fail_ex+0x263/0x280 [ 189.617029][ T7475] ? io_drain_req+0x67/0x360 [ 189.617134][ T7475] should_failslab+0x8c/0xb0 [ 189.617159][ T7475] __kmalloc_cache_noprof+0x5f/0x410 [ 189.617209][ T7475] io_drain_req+0x67/0x360 [ 189.617237][ T7475] ? io_queue_sqe_fallback+0x12a/0x140 [ 189.617344][ T7475] io_queue_sqe_fallback+0x132/0x140 [ 189.617380][ T7475] io_submit_sqes+0xdd6/0x1230 [ 189.617471][ T7475] __se_sys_io_uring_enter+0x1c9/0xf60 [ 189.617531][ T7475] ? __fget_files+0x184/0x1c0 [ 189.617563][ T7475] ? mutex_unlock+0x4e/0x90 [ 189.617590][ T7475] ? __x64_sys_io_uring_enter+0x2c/0x90 [ 189.617697][ T7475] __x64_sys_io_uring_enter+0x78/0x90 [ 189.617726][ T7475] x64_sys_call+0x1e16/0x3020 [ 189.617812][ T7475] do_syscall_64+0x12c/0x370 [ 189.617847][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.617879][ T7475] RIP: 0033:0x7fb4cc11c819 [ 189.617895][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.617917][ T7475] RSP: 002b:00007fb4cab77028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 189.617972][ T7475] RAX: ffffffffffffffda RBX: 00007fb4cc395fa0 RCX: 00007fb4cc11c819 [ 189.617990][ T7475] RDX: 0000000000000014 RSI: 000000000000012a RDI: 0000000000000000 [ 189.618007][ T7475] RBP: 00007fb4cab77090 R08: 0000000000000000 R09: 0000000000000000 [ 189.618023][ T7475] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000001 [ 189.618039][ T7475] R13: 00007fb4cc396038 R14: 00007fb4cc395fa0 R15: 00007ffe83c337c8 [ 189.618192][ T7475] [ 189.846744][ T28] audit: type=1326 audit(189.811:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192955c819 code=0x7ffc0000 [ 189.902811][ T28] audit: type=1326 audit(189.811:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192955c819 code=0x7ffc0000 [ 189.938698][ T7494] audit: audit_backlog=65 > audit_backlog_limit=64 [ 189.945307][ T28] audit: type=1326 audit(189.811:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192955c819 code=0x7ffc0000 [ 189.968599][ T7494] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 189.976429][ T7494] audit: backlog limit exceeded [ 189.981533][ T28] audit: type=1326 audit(189.811:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f192955c819 code=0x7ffc0000 [ 190.004864][ T7494] SELinux: failed to load policy [ 190.010024][ T28] audit: type=1326 audit(189.811:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192955c819 code=0x7ffc0000 [ 190.075735][ T7500] netlink: 'syz.1.1266': attribute type 21 has an invalid length. [ 190.083736][ T7500] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1266'. [ 190.144215][ T7503] No such timeout policy "syz1" [ 191.258177][ T7524] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1273'. [ 191.268662][ T7524] gretap0: entered promiscuous mode [ 191.350161][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 191.482902][ T7538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1279'. [ 191.536937][ T7538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1279'. [ 191.748412][ T7549] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1284'. [ 191.887844][ T7549] gretap0: entered promiscuous mode [ 192.839165][ T7558] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1286'. [ 194.433341][ T28] kauditd_printk_skb: 186 callbacks suppressed [ 194.433359][ T28] audit: type=1326 audit(194.401:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.1.1291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f192955c819 code=0x0 [ 194.535004][ T28] audit: type=1400 audit(194.501:3114): avc: denied { ioctl } for pid=7570 comm="syz.1.1291" path="socket:[19628]" dev="sockfs" ino=19628 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 194.653360][ T28] audit: type=1400 audit(194.561:3115): avc: denied { write } for pid=7570 comm="syz.1.1291" path="socket:[19628]" dev="sockfs" ino=19628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 194.677852][ T28] audit: type=1400 audit(194.601:3116): avc: denied { bind } for pid=7580 comm="syz.3.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.698575][ T28] audit: type=1400 audit(194.621:3117): avc: denied { block_suspend } for pid=7582 comm="syz.1.1294" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.752952][ T7590] netlink: 'syz.3.1297': attribute type 1 has an invalid length. [ 194.792761][ T7588] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7588 comm=syz.4.1296 [ 194.816278][ T7590] netlink: 'syz.3.1297': attribute type 1 has an invalid length. [ 194.824126][ T7590] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1297'. [ 194.882760][ T7599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.893884][ T7599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.959075][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.969084][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.969483][ T7597] tmpfs: Unknown parameter 'ÿ' [ 195.017701][ T7607] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1303'. [ 195.648985][ T7626] binfmt_misc: register: failed to install interpreter file ./file0 [ 195.667537][ T7626] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 195.762528][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 195.809924][ T7629] vlan0: entered allmulticast mode [ 195.815104][ T7629] bridge0: entered allmulticast mode [ 195.856308][ T7629] bridge0: port 1(bond1) entered blocking state [ 195.862955][ T7629] bridge0: port 1(bond1) entered disabled state [ 195.869725][ T7629] bond1: entered allmulticast mode [ 195.876167][ T7629] bond1: entered promiscuous mode [ 195.910733][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.920200][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.061688][ T28] audit: type=1400 audit(196.031:3118): avc: denied { create } for pid=7637 comm="syz.2.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 196.144778][ T7643] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 196.175343][ T28] audit: type=1400 audit(196.141:3119): avc: denied { relabelto } for pid=7638 comm="syz.4.1314" name="238" dev="tmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 196.232286][ T28] audit: type=1400 audit(196.141:3120): avc: denied { associate } for pid=7638 comm="syz.4.1314" name="238" dev="tmpfs" ino=1312 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 196.362981][ T7649] tmpfs: Unknown parameter 'ÿ' [ 196.447296][ T28] audit: type=1326 audit(196.411:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192955c819 code=0x7ffc0000 [ 196.496698][ T28] audit: type=1326 audit(196.411:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192955c819 code=0x7ffc0000 [ 196.851894][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1321'. [ 196.883343][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1321'. [ 198.753044][ T7682] openvswitch: netlink: EtherType 200 is less than min 600 [ 199.166811][ T7699] tmpfs: Unknown parameter 'ÿ' [ 199.393023][ T7709] bond2: option resend_igmp: invalid value (18446744073709508766) [ 199.429072][ T7709] bond2: option resend_igmp: allowed values 0 - 255 [ 199.453089][ T7709] bond2 (unregistering): Released all slaves [ 199.605537][ T28] kauditd_printk_skb: 563 callbacks suppressed [ 199.605556][ T28] audit: type=1400 audit(199.571:3686): avc: denied { read } for pid=7714 comm="syz.2.1339" path="socket:[19839]" dev="sockfs" ino=19839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 200.129043][ T28] audit: type=1400 audit(199.611:3687): avc: denied { name_bind } for pid=7714 comm="syz.2.1339" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 200.176836][ T28] audit: type=1400 audit(200.131:3688): avc: denied { node_bind } for pid=7714 comm="syz.2.1339" saddr=fe80::15 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 200.382770][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.410140][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.478780][ T28] audit: type=1400 audit(200.301:3689): avc: denied { mounton } for pid=7743 comm="syz.0.1348" path="/proc/741/task" dev="proc" ino=18935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 200.506680][ T28] audit: type=1400 audit(200.311:3690): avc: denied { associate } for pid=7749 comm="syz.0.1348" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 200.662389][ T7758] lo speed is unknown, defaulting to 1000 [ 200.759328][ T7758] lo speed is unknown, defaulting to 1000 [ 200.867885][ T7758] lo speed is unknown, defaulting to 1000 [ 201.262077][ T28] audit: type=1400 audit(200.511:3691): avc: denied { ioctl } for pid=7739 comm="syz.2.1347" path="socket:[19885]" dev="sockfs" ino=19885 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.349154][ T7766] lo speed is unknown, defaulting to 1000 [ 201.579342][ T28] audit: type=1326 audit(201.551:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 201.662587][ T7766] lo speed is unknown, defaulting to 1000 [ 201.723215][ T28] audit: type=1326 audit(201.551:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 201.862049][ T28] audit: type=1326 audit(201.571:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 201.915860][ T7763] lo speed is unknown, defaulting to 1000 [ 201.922171][ T7766] lo speed is unknown, defaulting to 1000 [ 201.966316][ T28] audit: type=1326 audit(201.571:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091ffc819 code=0x7ffc0000 [ 202.161728][ T7763] lo speed is unknown, defaulting to 1000 [ 202.523870][ T7763] lo speed is unknown, defaulting to 1000 [ 202.568445][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 202.619079][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 202.657292][ T7797] netlink: 'syz.0.1360': attribute type 1 has an invalid length. [ 202.692361][ T7797] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1360'. [ 202.951096][ T7814] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.991350][ T7799] netlink: 'syz.2.1361': attribute type 1 has an invalid length. [ 203.065367][ T7799] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.088738][ T7826] bond4: (slave veth3): Enslaving as an active interface with a down link [ 203.100753][ T7829] netlink: 'syz.3.1373': attribute type 1 has an invalid length. [ 203.109352][ T7829] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1373'. [ 203.118750][ T7799] bond4: (slave dummy0): making interface the new active one [ 203.150086][ T7799] dummy0: entered promiscuous mode [ 203.155370][ T7826] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1361'. [ 203.164735][ T7799] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 203.289278][ T7827] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7827 comm=syz.0.1368 [ 203.304720][ T7826] bond4: (slave dummy0): Releasing active interface [ 203.311595][ T7826] dummy0 (unregistering): left promiscuous mode [ 203.779235][ T7837] openvswitch: netlink: EtherType 200 is less than min 600 [ 203.822113][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 204.039430][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 204.060956][ T7867] netlink: 'syz.2.1385': attribute type 1 has an invalid length. [ 204.077427][ T7867] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1385'. [ 204.098322][ T7866] Cannot find del_set index 4 as target [ 204.162523][ T7872] lo speed is unknown, defaulting to 1000 [ 204.274550][ T7878] veth1_vlan: left allmulticast mode [ 204.302753][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.322582][ T7885] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1392'. [ 204.324223][ T7872] lo speed is unknown, defaulting to 1000 [ 204.337969][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.356798][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.372208][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.455551][ T7872] lo speed is unknown, defaulting to 1000 [ 204.717471][ T7901] Cannot find del_set index 4 as target [ 204.773614][ T28] kauditd_printk_skb: 277 callbacks suppressed [ 204.773634][ T28] audit: type=1400 audit(204.741:3973): avc: denied { execute } for pid=7905 comm="syz.3.1401" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 205.052771][ T7904] hsr0: left promiscuous mode [ 205.104669][ T7910] openvswitch: netlink: EtherType 200 is less than min 600 [ 205.385081][ T7904] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 205.410285][ T7907] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 205.826139][ T7918] openvswitch: netlink: EtherType 200 is less than min 600 [ 206.142878][ T7923] random: crng reseeded on system resumption [ 206.444201][ T7925] openvswitch: netlink: EtherType 200 is less than min 600 [ 206.468827][ T28] audit: type=1400 audit(206.111:3974): avc: denied { write } for pid=7919 comm="syz.4.1404" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 206.506841][ T28] audit: type=1400 audit(206.111:3975): avc: denied { open } for pid=7919 comm="syz.4.1404" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 206.530620][ T28] audit: type=1400 audit(206.481:3976): avc: denied { ioctl } for pid=7919 comm="syz.4.1404" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 206.587242][ T28] audit: type=1326 audit(206.541:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.0.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 206.671225][ T28] audit: type=1326 audit(206.541:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.0.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 206.694246][ T28] audit: type=1326 audit(206.541:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.0.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 206.739067][ T28] audit: type=1326 audit(206.541:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.0.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 206.766480][ T28] audit: type=1326 audit(206.541:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.0.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 206.789721][ T28] audit: type=1326 audit(206.541:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.0.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 206.866316][ T7938] xt_TCPMSS: Only works on TCP SYN packets [ 206.924762][ T313] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.950241][ T7939] ip6gre1: entered allmulticast mode [ 206.984227][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.055928][ T7949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1414'. [ 208.450536][ T7989] __nla_validate_parse: 2 callbacks suppressed [ 208.450557][ T7989] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1428'. [ 208.977119][ T4681] Bluetooth: hci0: command 0x1003 tx timeout [ 208.983729][ T3648] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 209.115532][ T8000] x_tables: duplicate underflow at hook 3 [ 209.669441][ T8013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=8013 comm=syz.0.1434 [ 209.706246][ T8013] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1434'. [ 209.736724][ T8013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1434'. [ 209.791604][ T8020] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 209.811049][ T8020] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1436'. [ 209.947529][ T8035] netlink: 'syz.2.1439': attribute type 5 has an invalid length. [ 209.973246][ T8035] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1439'. [ 209.986333][ T28] kauditd_printk_skb: 165 callbacks suppressed [ 209.986426][ T28] audit: type=1400 audit(209.951:4148): avc: denied { bind } for pid=8036 comm="syz.1.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 210.000903][ T8035] netlink: zone id is out of range [ 210.023342][ T8035] netlink: zone id is out of range [ 210.033235][ T8035] netlink: zone id is out of range [ 210.043272][ T8035] netlink: zone id is out of range [ 210.053123][ T8035] netlink: zone id is out of range [ 210.062851][ T8035] netlink: zone id is out of range [ 210.066087][ T8037] lo speed is unknown, defaulting to 1000 [ 210.076508][ T8035] netlink: zone id is out of range [ 210.088906][ T8035] netlink: zone id is out of range [ 210.095437][ T8035] netlink: zone id is out of range [ 210.103320][ T8035] netlink: zone id is out of range [ 210.178580][ T8037] lo speed is unknown, defaulting to 1000 [ 210.239607][ T8037] lo speed is unknown, defaulting to 1000 [ 210.387120][ T28] audit: type=1326 audit(210.351:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 210.456689][ T28] audit: type=1326 audit(210.351:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 210.500842][ T28] audit: type=1326 audit(210.351:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 210.539009][ T8049] syzkaller0: entered promiscuous mode [ 210.544800][ T8049] syzkaller0: entered allmulticast mode [ 210.586758][ T28] audit: type=1326 audit(210.351:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 210.610368][ T28] audit: type=1326 audit(210.361:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 210.636979][ T28] audit: type=1326 audit(210.361:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 210.661088][ T28] audit: type=1326 audit(210.361:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 210.684555][ T28] audit: type=1326 audit(210.361:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 210.712027][ T28] audit: type=1326 audit(210.361:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6e95c819 code=0x7ffc0000 [ 210.752063][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1447'. [ 210.791596][ T8056] netlink: 'syz.2.1449': attribute type 1 has an invalid length. [ 210.816805][ T8056] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1449'. [ 210.866740][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.920649][ T8067] netlink: 'syz.2.1454': attribute type 10 has an invalid length. [ 210.932581][ T8067] veth0_vlan: entered allmulticast mode [ 211.071568][ T8067] veth0_vlan: left promiscuous mode [ 211.090405][ T8067] veth0_vlan: entered promiscuous mode [ 211.105732][ T8067] team0: Device veth0_vlan failed to register rx_handler [ 211.401248][ T8060] ================================================================== [ 211.409421][ T8060] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 211.418334][ T8060] [ 211.420681][ T8060] write to 0xffff888122fb2a68 of 8 bytes by task 8063 on cpu 0: [ 211.428330][ T8060] shmem_file_splice_read+0x470/0x600 [ 211.433949][ T8060] splice_direct_to_actor+0x26e/0x670 [ 211.439366][ T8060] do_splice_direct+0x119/0x1a0 [ 211.444249][ T8060] do_sendfile+0x382/0x650 [ 211.448701][ T8060] __x64_sys_sendfile64+0x105/0x150 [ 211.454112][ T8060] x64_sys_call+0x2dc4/0x3020 [ 211.458928][ T8060] do_syscall_64+0x12c/0x370 [ 211.463562][ T8060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.469661][ T8060] [ 211.472040][ T8060] write to 0xffff888122fb2a68 of 8 bytes by task 8060 on cpu 1: [ 211.479985][ T8060] shmem_file_splice_read+0x470/0x600 [ 211.485417][ T8060] splice_direct_to_actor+0x26e/0x670 [ 211.490823][ T8060] do_splice_direct+0x119/0x1a0 [ 211.495708][ T8060] do_sendfile+0x382/0x650 [ 211.500152][ T8060] __x64_sys_sendfile64+0x105/0x150 [ 211.505390][ T8060] x64_sys_call+0x2dc4/0x3020 [ 211.510098][ T8060] do_syscall_64+0x12c/0x370 [ 211.514724][ T8060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.520641][ T8060] [ 211.523156][ T8060] value changed: 0x00000000000091ac -> 0x00000000000091ae [ 211.530323][ T8060] [ 211.532761][ T8060] Reported by Kernel Concurrency Sanitizer on: [ 211.538934][ T8060] CPU: 1 UID: 0 PID: 8060 Comm: syz.0.1451 Tainted: G W syzkaller #0 PREEMPT(full) [ 211.549828][ T8060] Tainted: [W]=WARN [ 211.553657][ T8060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 211.563741][ T8060] ================================================================== [ 218.706777][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!