last executing test programs: 49.997043029s ago: executing program 1 (id=2): unshare(0x6a040000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2, 0x13}}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r3 = socket$netlink(0x10, 0x3, 0x14) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f", 0x1f) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000340)=""/132, &(0x7f0000000140)=0x84) r4 = socket(0x2b, 0x80801, 0x1) listen(r4, 0x9) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x402, @dev={0xfe, 0x80, '\x00', 0x25}, 0x200101}, 0x1c) listen(r4, 0x1002) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x100000004, 0x0) syz_genetlink_get_family_id$batadv(0x0, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001000370410000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0c10080001000400160012800b0000040002800000000000000000009bfcc6ee55eb252132d5578c8dd7886db9f825020da660f8152c7c6ecf5f6368d6114f6b5dbe1d75d10ef3f4c7032020000070e809ffa858b5dd1d1da96e1d2a844ac22e7fa02cb80ed1eec27a01cdb0a3924c0a1be0b6e4ab2d0b299289f2c59505e54f10a90d12cd4a8e7e5da25c295996ab5754bab92bd638defa6cf89adad13a2c4a80f8c9bca6b733c5000088fb6cc38b1cd7a3a7edd344198fcf84867269781bb72e756d2d3e71afe0a7a8443937f5737b3ebba33e1d470ddcd57235774235a149736e4b3cce3be3f6504c4292ffbc5f55ef35fb32e21f689e5ab7cbc6a01de13f347e20000000000000000000"], 0x34}}, 0x4880) 49.049818536s ago: executing program 1 (id=13): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0xa, 0x3, 0x73) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7, 0xb}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 48.132688271s ago: executing program 1 (id=19): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="150601010000ffdbdf251000000005000f0031000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x2000888c) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x6}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x7}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x24f}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xd}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x455}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x102}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x201}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3aa}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x34, r2, 0x101, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) 48.132444221s ago: executing program 32 (id=19): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="150601010000ffdbdf251000000005000f0031000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x2000888c) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x6}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x7}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x24f}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xd}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x455}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x102}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x201}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3aa}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x34, r2, 0x101, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) 21.517925389s ago: executing program 3 (id=525): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040003000000080012000300000008001100ff0700030800100007ff020008000f"], 0x54}}, 0x0) 21.401552286s ago: executing program 3 (id=528): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x99f8, 0x40) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0x6, 0x5, 0x7}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYBLOB="01072bbd7000000000001900000008000300", @ANYRES32=r4], 0x1c}}, 0x0) 21.311577671s ago: executing program 3 (id=531): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000001140)=ANY=[], 0x0) 21.311107691s ago: executing program 3 (id=532): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 21.267522964s ago: executing program 3 (id=534): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x200000000000000, 0x3}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x542a, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 21.045265797s ago: executing program 3 (id=538): mbind(&(0x7f0000575000/0x1000)=nil, 0x1000, 0x10000000000001, 0x0, 0x0, 0x2) 21.011515969s ago: executing program 33 (id=538): mbind(&(0x7f0000575000/0x1000)=nil, 0x1000, 0x10000000000001, 0x0, 0x0, 0x2) 13.598848294s ago: executing program 4 (id=663): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0xfffc, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500ffffffffffffffa7000000", @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000002005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x4) 13.504148199s ago: executing program 4 (id=665): socket(0x40000000015, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="bccf119f2cd82f694b9acef1f800", @ANYBLOB="0200"], 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, 0xffffffffffffffff, 0x2000000}, 0xc) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 13.426242934s ago: executing program 4 (id=667): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) 13.347458999s ago: executing program 4 (id=669): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x5, 0x0, 0x0, 0x0, 0xfe, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x5}, 0x80, 0x7, 0x0, 0x1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 13.108348654s ago: executing program 4 (id=679): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) 12.425207035s ago: executing program 4 (id=691): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01072bbd7000000000001900000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 12.392448807s ago: executing program 34 (id=691): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01072bbd7000000000001900000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 1.8308708s ago: executing program 5 (id=914): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x7c, 0x30, 0x1, 0x8000000, 0x3, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x69, 0x6, 0x1, 0xd817}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0x6, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x7c, 0x30, 0x1, 0x8000000, 0x3, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x69, 0x6, 0x1, 0xd817}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) (async) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0x6, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) (async) 1.733660486s ago: executing program 5 (id=917): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) 1.716527898s ago: executing program 5 (id=918): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x0, 0x300}}, {0x28, '\x00', 0x4}}}}, 0x480) 1.614657204s ago: executing program 5 (id=920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x4010804) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo\x00') fallocate(r8, 0x40, 0x8000000000000000, 0xfff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xd4, r9, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x88, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x10, 0x4, "8bfea9d674fb5ae25d3f5cf0"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc050}, 0x4054) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.058044207s ago: executing program 6 (id=931): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) fsopen(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.051893967s ago: executing program 5 (id=933): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x1b, r1, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @remote}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone3(&(0x7f0000000c40)={0x42a1400, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) read$char_usb(r4, &(0x7f0000000000)=""/226, 0xe2) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x17) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 880.587067ms ago: executing program 2 (id=938): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x200084c, &(0x7f0000000080)={[{@fat=@time_offset={'time_offset', 0x3d, 0x4f7}}, {@fat=@sys_immutable}, {@nodots}, {@nodots}, {@fat=@nfs}, {@fat=@errors_continue}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@nodots}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}]}, 0x1, 0x274, &(0x7f0000000300)="$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") connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) 880.413838ms ago: executing program 6 (id=939): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) 851.245759ms ago: executing program 6 (id=941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r2 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000001340)={0xe0c, 0x0, 0x5, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x8}, 0x8, 0x3, 0x1ff, 0x2a, 0x10, 'syz1\x00', "bedb9d5ae88aa70a89bc484f59c87f0a42dec1562c247b4746480890c71aaf1e", "e622dcea2e660ce8013a099cf03c653411b472c22cdf4136ddba43314fb9730f", [{0x0, 0x6}, {0xff, 0x10, {0x2, 0x1ff}}, {0x9, 0x61ca, {0x0, 0xff}}, {0x2, 0x2, {0x0, 0x1}}, {0x6, 0x6890, {0x1, 0x2}}, {0xe7, 0x8, {0x3, 0x3}}, {0x6, 0x8, {0x0, 0x7}}, {0x5, 0xff, {0x1, 0x6}}, {0x9, 0x9, {0x3, 0x7}}, {0x2, 0xa, {0x1, 0x9}}, {0x3, 0xde1, {0x2, 0x3}}, {0x0, 0x6, {0x2, 0x574bdee7}}, {0x6f, 0x7, {0x1, 0xa}}, {0xe2a0, 0x430e, {0x1, 0x9}}, {0x4, 0xfff, {0x0, 0x2}}, {0x9, 0x2, {0x3, 0x7}}, {0x4, 0x6, {0xf3766ab47f4f1830, 0x8}}, {0x2, 0x0, {0x0, 0x7}}, {0x91, 0x6, {0x2, 0x800}}, {0x0, 0xd, {0x3, 0xb1}}, {0xd2, 0x97bf, {0x0, 0x3}}, {0x5, 0x9, {0x0, 0x5}}, {0x5abd, 0x3, {0x0, 0x3a7b}}, {0x1, 0x8, {0x2, 0xf}}, {0x2, 0x8, {0x3, 0x30000000}}, {0xe93, 0x81, {0x1, 0x1ff}}, {0xfeff, 0x6, {0x1, 0x4}}, {0x9, 0x1, {0x2, 0x41aae250}}, {0xfffe, 0x4, {0x0, 0x4}}, {0x4eda, 0x5, {0x1, 0x3}}, {0x40, 0xcd8, {0x0, 0x40}}, {0x6, 0x7f, {0x3, 0x200}}, {0x8, 0x7103, {0x0, 0x6}}, {0x2, 0xfff7, {0x1}}, {0x8, 0x6, {0x1, 0x5}}, {0x3, 0x2, {0x1, 0x56e7}}, {0xa, 0xff, {0x3, 0xa17f}}, {0x1, 0xff, {0x1, 0x1}}, {0x9, 0x0, {0x2, 0x3}}, {0x8, 0x1, {0x0, 0xfff}}]}}}, {{0x254, 0x1, {{0x1, 0xfffffff5}, 0x5, 0x6, 0x0, 0x2, 0x13, 'syz0\x00', "ef0658a0eb381213688a85dd7dd7076b289a7f64131b38adb58332c804d0cc5d", "750bc4aaadc6de0888bc15fb0228fd9db321a21aee1fd24010eac597ffd773de", [{0x1, 0x8, {0x3, 0x5}}, {0x5, 0x3ff, {0x1, 0x7}}, {0x101, 0x2, {0x1, 0x643}}, {0x5, 0x2, {0x2, 0x10001}}, {0xffff, 0x8}, {0x3, 0x1, {0x2, 0x3}}, {0xa, 0x8, {0x0, 0xd21}}, {0x3023, 0xb, {0x2, 0x9}}, {0x6, 0x1, {0x3, 0x4}}, {0x8, 0x7fff, {0x1, 0x9}}, {0x5, 0x6, {0x1, 0xff}}, {0x9, 0x9, {0x1, 0x1}}, {0x9, 0x8, {0x1, 0xff7}}, {0x100, 0x6, {0x3, 0x2}}, {0x6, 0xd, {0x0, 0x5}}, {0x9, 0x5, {0x2, 0x4}}, {0x6, 0x7, {0x1, 0x5}}, {0x4, 0x9f98, {0x2, 0xffff}}, {0x3, 0x6, {0x0, 0x81}}, {0x1ff, 0x0, {0x0, 0x34}}, {0x3, 0x57, {0x0, 0x9}}, {0xfff, 0x7f, {0x0, 0x5}}, {0x1, 0x1ff, {0x2}}, {0x5, 0x40, {0x3, 0xfff}}, {0x800, 0xb56a, {0x2, 0x3ff}}, {0x100, 0xb87, {0x3, 0x10001}}, {0x1, 0x3001, {0x1, 0x6}}, {0x0, 0x55, {0x0, 0x2}}, {0x8, 0x2, {0x0, 0x4}}, {0x4, 0x7, {0x1}}, {0x8, 0xfffe, {0x0, 0xb}}, {0x1, 0x2, {0x2, 0x1ff}}, {0xbf, 0xfff9, {0x1, 0x3d}}, {0x8, 0x7, {0x2, 0x2}}, {0x719a, 0x0, {0x2, 0x80000001}}, {0x7, 0xb, {0x2, 0x5}}, {0x9, 0x9, {0x2, 0x10001}}, {0x3ff, 0xfff8, {0x0, 0x81}}, {0x7, 0x3, {0x1, 0x1}}, {0x0, 0x400, {0x2}}]}}}, {{0x254, 0x1, {{0xec0970ef75494751, 0x200}, 0xb, 0x5, 0x9, 0x9, 0x8, 'syz1\x00', "98016c108770eaab15eb6c89829c0c8b2074df41505bb7015753a10be12ec1bd", "ad1382ca120f9db3c069ad294b70bf19c78363aa1012b681a1f9d3be0e8c179d", [{0x5, 0x62, {0x2, 0x6}}, {0x596f, 0x400, {0x3, 0x5}}, {0x0, 0x8, {0x3, 0x5}}, {0x8, 0x101, {0x0, 0x2}}, {0x80, 0x4f9, {0x0, 0x7}}, {0x1000, 0x5, {0x0, 0x80000000}}, {0x7f, 0x800, {0x2, 0x3}}, {0x7, 0x0, {0x3, 0x421}}, {0x5, 0xff, {0x0, 0x7}}, {0x65f3, 0x7fff, {0x3, 0x9}}, {0x0, 0x8001, {0x3, 0xfffffd2a}}, {0x6, 0x0, {0x3, 0x42}}, {0x8, 0x1f, {0x3, 0xaac}}, {0xecc, 0x9, {0x3, 0x7}}, {0x6, 0xff, {0x3, 0x4}}, {0x6, 0xfff8, {0x0, 0x8}}, {0x6, 0x6, {0x0, 0xa}}, {0x5, 0x8, {0x1, 0xffff}}, {0x3, 0x800, {0x3, 0x2}}, {0xa5c, 0x5982, {0x2, 0x3}}, {0x0, 0xfe01, {0x2, 0x4}}, {0x1, 0xffff, {0x0, 0xfff}}, {0x4, 0x10, {0x2, 0x80000001}}, {0x6, 0xa1f, {0x1, 0x2}}, {0x8001, 0x6, {0x1, 0xa}}, {0xede, 0x6, {0x0, 0x5}}, {0x101, 0x1, {0x1, 0x5}}, {0xfffd, 0x4, {0x1, 0xffffffff}}, {0x9, 0x3a15, {0x3, 0x4}}, {0xfff9, 0x3, {0x1, 0x1}}, {0x1, 0x7, {0x1, 0x3}}, {0x4, 0xfff5, {0x3, 0x7}}, {0xfff7, 0x9, {0x3, 0x3}}, {0x7, 0xd549, {0x3, 0x4}}, {0x9, 0x4b00, {0x1, 0xfecb}}, {0x0, 0x7, {0x1, 0x8}}, {0x4, 0x6, {0x1, 0x8}}, {0x5, 0x39ff, {0x0, 0x10001}}, {0x9, 0x0, {0x2, 0xe44}}, {0x200, 0x4, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0xc}, 0x3, 0x6, 0x8001, 0x1000, 0x16, 'syz0\x00', "04fdc495180c379a9c81299d656e8f69ab20dc6e51417cbadd86b35ff6dfe34e", "2abdcb6d02c3d6f143460dd7b9344b194c09fefc8996d0cb57c59ded36aac1cb", [{0x4, 0x1, {0x0, 0x400}}, {0x6141, 0x2a, {0x3, 0x2}}, {0xa, 0x0, {0x0, 0x1}}, {0x7, 0xd1, {0x0, 0x3}}, {0x8001, 0x9, {0x3, 0x7}}, {0x2, 0xaf58, {0x3, 0x63}}, {0x7f, 0x9, {0x3, 0x8}}, {0x8, 0x1167, {0x3, 0x4}}, {0x6, 0x9, {0x2, 0x2}}, {0x200, 0x100, {0x3, 0x80}}, {0x5, 0x6, {0x1, 0xf82}}, {0x7, 0x7, {0x2}}, {0x8b9c, 0x0, {0x2, 0x7}}, {0x4, 0x5, {0x2, 0x7}}, {0xe000, 0xdf37, {0x2, 0x100}}, {0x0, 0x4, {0x0, 0x6}}, {0x9, 0xfffa, {0x1, 0xb22}}, {0xb, 0x2, {0x0, 0xb}}, {0xaf7b, 0x1, {0x1, 0x14bc}}, {0x4, 0x7, {0x1, 0x5}}, {0x6, 0x5, {0x3, 0xfffffffa}}, {0x1ff, 0x101, {0x2, 0x2}}, {0x521, 0xa, {0x2}}, {0x9, 0x9541, {0x2, 0x8d3f}}, {0x7, 0xd14, {0x1, 0x7}}, {0x47, 0x2, {0x1, 0x4}}, {0x8, 0x4, {0x0, 0x3}}, {0x4, 0xfee, {0x2, 0x10000}}, {0xff, 0x3, {0x2, 0x4}}, {0x400, 0x1, {0x1, 0xfffffffc}}, {0x61a, 0x1c00, {0x2, 0x80000001}}, {0x8, 0x7598, {0x3, 0x3ff}}, {0x1, 0x0, {0x0, 0xa0}}, {0xe, 0x7, {0x2, 0x3}}, {0x8, 0xa, {0x492242ecfc5dd700, 0x1}}, {0x9, 0x4, {0x2}}, {0x4, 0x7ff, {0x0, 0x6}}, {0xfff7, 0x6, {0x2, 0x80000001}}, {0x2, 0x2, {0x1, 0x1c000000}}, {0xc5, 0x2, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0x61d6}, 0x80, 0x0, 0x5, 0x1, 0x11, 'syz0\x00', "8a8c1e4043b3a9fd228fbd0822ff6b906dc1ca1bb0a3fe5c7cf8019485a54799", "37945d8c895e16395a374a0b7c3ecfd7f8934180d214510fc05d8a187533a042", [{0x5, 0x6, {0x3, 0x9}}, {0x2, 0x0, {0x2, 0xff}}, {0x91, 0xed78, {0x2}}, {0x2, 0x4, {0x2, 0x1ff}}, {0x9, 0x5, {0x1, 0x9}}, {0xcb, 0x2, {0x0, 0x9}}, {0x200, 0x6, {0x2, 0x9}}, {0x9, 0x6, {0x0, 0x200}}, {0x5, 0x3, {0x2}}, {0x1, 0x4, {0x2, 0x4}}, {0x7, 0x5, {0x2, 0x5}}, {0x8000, 0x0, {0x2, 0x8d2}}, {0x4335, 0x6, {0x3}}, {0x5, 0x402, {0x0, 0x5}}, {0x1, 0x3ff, {0x0, 0xfff}}, {0xfff1, 0x6, {0x1, 0x101}}, {0x18ab, 0x8, {0x0, 0x9}}, {0x7, 0x72, {0x3, 0x8}}, {0x0, 0x4b3f, {0x0, 0xfffffffa}}, {0xc6, 0x6, {0x2, 0x140}}, {0xf, 0xb, {0x0, 0xfffffffd}}, {0x8, 0x9, {0x2, 0x86}}, {0x3, 0x5, {0x3, 0xcc1b}}, {0x8, 0x74, {0x3, 0x90ae}}, {0x7, 0x2, {0x3, 0x1ff}}, {0x3, 0x4, {0x1, 0x6}}, {0x3, 0x4, {0x0, 0x6}}, {0x8, 0x3, {0x2, 0x8}}, {0x400, 0x2, {0x2, 0x4}}, {0x8, 0x8, {0x3, 0x7ff}}, {0x7, 0x0, {0x3, 0xffffff66}}, {0x1, 0x9, {0x3}}, {0x49b8, 0x4, {0x3, 0x8}}, {0x6, 0x0, {0x0, 0x9ec}}, {0x8, 0x5, {0x0, 0x7f}}, {0x5, 0xfffa, {0x0, 0xfff}}, {0xc, 0xf37d, {0x3, 0x74ab}}, {0xa, 0x10, {0x1, 0x9}}, {0x3, 0x7, {0x0, 0x9}}, {0x9, 0x101, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x2, 0x6, 0x800, 0x9b18, 0x13, 'syz1\x00', "4016e85f7d6681608302154999b1f1db98222267b893b46418a8a177646b52e6", "74e623d1fb1f5349d531cd728403719846e7afb45bcba2200f5cf1acafe1d6f8", [{0x9, 0x0, {0x1, 0x10001}}, {0x5, 0xa, {0x2, 0xb9e58c87}}, {0x9, 0x1, {0x1, 0xb746}}, {0x7, 0x1, {0x3, 0x5}}, {0xb, 0xfff8, {0x0, 0xb}}, {0xfff, 0x5, {0x1, 0x3}}, {0x25f, 0x5, {0x2}}, {0x200, 0x5, {0x2, 0x18a24f99}}, {0x1, 0x6, {0x1, 0x7fff}}, {0xfffd, 0x1, {0x1, 0x5}}, {0x4, 0x0, {0x3, 0x1}}, {0x4, 0x99f3, {0x0, 0x3db3}}, {0x4, 0x7, {0x2, 0x8}}, {0x1, 0x7, {0x1, 0x7ff}}, {0x43, 0x7fff, {0x1, 0x5}}, {0x9, 0x1, {0x1, 0x6}}, {0x81, 0x5, {0x1, 0x6}}, {0x1, 0x13b1, {0x2, 0x10001}}, {0x7, 0x2, {0x1, 0x100}}, {0xf8d5, 0xfff9, {0x2}}, {0x5, 0x34f4, {0x0, 0x6}}, {0x4, 0x7, {0x0, 0xf0b4}}, {0x9, 0x3, {0x2, 0x800}}, {0xcb5, 0x3, {0x2, 0xff}}, {0x9, 0x39a9, {0x2, 0xa95}}, {0x5, 0xfffd, {0x3, 0x1}}, {0x66, 0x7, {0x3, 0x7}}, {0x4, 0x4, {0x0, 0x74d}}, {0x280, 0x6, {0x0, 0xe5ab}}, {0x3c, 0x8, {0x3, 0x2}}, {0x400, 0x3, {0x0, 0x1}}, {0x7, 0x1, {0x2, 0xf8c}}, {0x7, 0x7, {0x3, 0x7fff}}, {0x9, 0x539b, {0x0, 0xfffff000}}, {0xf835, 0x8, {0x2, 0x7}}, {0xf5b3, 0x81, {0x0, 0x8}}, {0x1, 0x3, {0x1, 0x81}}, {0x7ff, 0x4, {0x0, 0x9d8f}}, {0x7d0b, 0x80}, {0x7, 0x6, {0x2, 0x5}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x8040}, 0x4104) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) io_setup(0x48, &(0x7f00000005c0)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f0000"], 0x48) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) r8 = socket$inet_tcp(0x2, 0x1, 0x0) flistxattr(r8, &(0x7f0000000240)=""/7, 0x7) futex(0x0, 0x9, 0x1, &(0x7f0000000100), 0x0, 0x0) sendmsg$can_raw(r6, &(0x7f0000000440)={&(0x7f0000000200)={0x1d, r4}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)=@canfd={{0x3, 0x1, 0x1}, 0x21, 0x0, 0x0, 0x0, "2120142c1b950b0b3d24aa0c16f72b1ba6096f4f5d30f5d22ef1b98654cd8d3c4c19c1fc4c06d947a982da0a1ad3b4fdb67672d1cebd8275f7c843ae3ed8cf93"}, 0x48}}, 0x4000000) unshare(0x22020600) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fchmod(r9, 0x7) clock_gettime(0x3, &(0x7f0000000600)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="d1bc3350ae544490be926e2e6a01bd0000", @ANYRES16=r7, @ANYBLOB="00032cbd7000fedbdf253000000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2000004) unlinkat(r2, &(0x7f0000000640)='./file0\x00', 0x200) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x2, 0xd}, {0x4, 0xc}, {0xc, 0x2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 848.898499ms ago: executing program 2 (id=942): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000810000001c140000fe0000010000"], 0x24}}, 0x4000000) 767.584424ms ago: executing program 2 (id=943): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002cbd7000fddbdf250800", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x24000844}, 0x4000800) 766.893134ms ago: executing program 2 (id=944): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb71d) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x4) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), r3) (async) io_setup(0x20000006, &(0x7f0000000000)=0x0) io_destroy(r5) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES16=r4, @ANYBLOB="01002cbd0000ffdbdf251700000008000300", @ANYRES32=r6, @ANYBLOB="7c00308005000200fe00000014000400f8a7728ee678c188ec4c07bcb36977ba2400030057daf26708aec333fce985172d3dffd6e4f19d2d23b752088107eb80885979ff140004005736faed3017e3c130fcf586261b3825240003006864cb8c98d02d2614646e7c572daa4f8f0600"/124], 0x98}, 0x1, 0x0, 0x0, 0x804}, 0x10) 666.53397ms ago: executing program 2 (id=949): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000a0019000000ff00ff010000000000000000000000000002000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700008c00000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38fcd41507982019d120c39f4f3463784a1e1c1745a3d5c54b10144a895a16792b2a51a83bf0d0f1a33120bd8f6ffed75a12efe9840480594e30719fb91fe584d85c1e654c2a90822b51a0c946ab37516ad4588a35aaa2a6308996c214c8aa7df0e648ae1246b3b66b50b175ffebe4c9e31e7d5c103e8861fc4adb097bd6306170019"], 0x310) 666.4154ms ago: executing program 0 (id=950): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0xfffffffd) (fail_nth: 1) 441.713394ms ago: executing program 6 (id=952): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0xfffffffd) 431.864665ms ago: executing program 2 (id=953): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x181000, 0x168, 0x20}, 0x18) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x7ff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x8001}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "cc320e4a27cb5791", "1fd33481396ded740000002f1e2500", "62266bd8", "1e00040000000100"}, 0x28) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x7ff, &(0x7f0000006680)) r8 = socket$packet(0x11, 0x2, 0x300) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0xfffffffd) getsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0x4) 405.263056ms ago: executing program 6 (id=954): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket(0x11, 0x2, 0x0) socket(0x10, 0x803, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f00000002c0)) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000002c0), 0x0}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x2b, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000000000000000000001a8020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000f00)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0xfdef) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r5], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) 376.460028ms ago: executing program 0 (id=956): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x3, 0x6, @random="cea0300a1672"}, 0x10) dup2(r0, r1) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x4000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r6, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r7, 0x8001}}, 0x48) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 376.122048ms ago: executing program 7 (id=957): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000500), &(0x7f0000000540)=0x4) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xd, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x36, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x30880) unshare(0x2040400) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000010180)={0x2, 0x4e20, @broadcast}, 0x10) 312.599681ms ago: executing program 0 (id=958): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) eventfd2(0x0, 0x80000) socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x3, 0x84) epoll_create1(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@mcast1, 0x4, 0x2b}, @in6=@private0, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x40000, 0xa, 0x4, 0x0, 0x74}}, 0xf0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002cbd7000fddbdf250800", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x24000844}, 0x4000800) 312.160311ms ago: executing program 0 (id=959): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'macsec0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000fffe00", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) 311.798041ms ago: executing program 7 (id=960): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800005deac60000000000000000000000000018110000d71a3aed1db741d292aff6912c7f99edb7daea179d158cc1b1475a551b2c0af9e5c94d319feceaf68afb47b301cfc2dfc39b6599fb6bd819abc4f182efb973359381a134c85da21b85fbc10ee9db2aca7f1e8ee17837b260a27b569373bd9cba293a3afcc1cf499226b1e476a6a9036c4e80c6186d51d28649b1ee1e98571955f2fe19ac055ae8a595b4ab6f1119e5eb7fbb4ea75bacfae0dd613b0244372f330e509e3d363ea1dbf6c02bae48d273510c", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x20, r5, 0x6a98047402e98331, 0x70bd25, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x20, 0x8000, 0xff, 0x8, {{0xc, 0x4, 0x3, 0x13, 0x30, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@noop, @ssrr={0x89, 0x13, 0xa2, [@multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @cipso={0x86, 0x6, 0x3}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f0000000680)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0xe, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x10, 0x2, {0x8}}}, @TCA_RATE={0x6, 0x5, {0x40, 0x1}}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x29, 0x90, 0x5, 0x101, 0x13, @local, @private2, 0x8, 0x8, 0xd, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc200a100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000b00)={0x138, r5, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0xc840}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061118c000000000046000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 248.677676ms ago: executing program 7 (id=961): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x0, @perf_config_ext={0x8001, 0xf}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000002000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 248.162135ms ago: executing program 6 (id=962): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r0, &(0x7f0000001600)=ANY=[@ANYRESOCT=r0], 0x1000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x293491bf}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x700000, 0x136}, 0x0, 0x10000, 0x8, 0x7, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='cpu==-!|!') r6 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r7 = socket(0x8, 0x2, 0x400) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000300)) getdents(r6, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x28e7a72b}}}, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x4f, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010001500000000000000000005000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011000100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x61, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014110180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0x34, 0x25, 0x800, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0x6}, {0x10, 0xffe0}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x90) 247.185886ms ago: executing program 7 (id=963): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r1], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c000c"], 0x24}, 0x1, 0xa00000000000000}, 0x0) 216.998048ms ago: executing program 7 (id=964): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="6d48cfff76eee454a7f7fc57a5ff204d2c", @ANYRES16=r1, @ANYBLOB="110026bd7000ffdbdf2518000000100030800c000180080001000200000008000300", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) r3 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x5757, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r4, 0x6}, 0x8) pidfd_getfd(0xffffffffffffffff, r3, 0x0) select(0x406f205456671cf9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) (async, rerun: 64) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='uid_map\x00') (rerun: 64) read(r6, &(0x7f00000005c0)=""/4096, 0x1000) (async, rerun: 32) preadv(r6, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0xcd}], 0x1, 0xa6, 0x200) (async, rerun: 32) tkill(r5, 0x12) (async) tkill(r5, 0x12) (async, rerun: 32) r7 = gettid() (rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r9 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_buf(r9, 0x107, 0x6, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001"], 0x30}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) pipe2$9p(&(0x7f0000000100), 0x80800) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 56.418357ms ago: executing program 0 (id=965): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000"], 0x50}, 0x1, 0x0, 0x0, 0x20004884}, 0x40) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x598, 0x1c0, 0xd0, 0x0, 0x290, 0xd0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'virt_wifi0\x00', 'vlan1\x00', {}, {}, 0x21, 0x0, 0x4}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0xffffffff], 'ip6gre0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x14}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz0\x00', {0x6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffffff, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], 'pim6reg\x00', 'ip6tnl0\x00', {}, {}, 0x62, 0x5, 0x6, 0x20}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0x987, 0x2, 0x1, [0xfff8, 0x0, 0x6, 0xecdc, 0x7fff, 0x0, 0x8000, 0x8001, 0x8001, 0x8, 0x0, 0x401, 0x8000, 0x80, 0xfffa, 0x4], 0x11}}, @common=@frag={{0x30}, {[0x5, 0x9], 0x7, 0x38, 0xc8747f50405cede6}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) 691.17µs ago: executing program 5 (id=966): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0x6c25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f0000000a80)={[{@init_itable_val={'init_itable', 0x3d, 0x9}}]}, 0x2a, 0x63f, &(0x7f0000000d80)="$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") 248.58µs ago: executing program 0 (id=967): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup(r1) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[{0x10, 0x11, 0x8}], 0x10}, 0x4c086) write$bt_hci(r0, &(0x7f0000000100)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc9, 0xa3f, 0x6, 0x4, 0x9, 0x0, 0x1}}}, 0x12) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0x2, 0xa, 0x9, 0x4, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x100, 0x7a, &(0x7f0000000440)=""/122, 0x41000, 0x20, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xf, 0x800, 0x5}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000580)=[{0x5, 0x3, 0x2, 0x8}, {0x1, 0x5, 0x10}, {0x1, 0x1, 0x3, 0x8}], 0x10, 0x961}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) preadv2(r1, &(0x7f0000000180)=[{&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000200)=""/138, 0x8a}, {&(0x7f00000002c0)=""/159, 0x9f}], 0x3, 0x2, 0x2, 0x12) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5}]}}}]}, 0x44}, 0x1, 0xffffffea}, 0x0) 0s ago: executing program 7 (id=968): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000b0a000/0x6000)=nil, 0x6000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) ioctl$TCFLSH(r0, 0x541b, 0x7ffffffffffffffe) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) kernel console output (not intermixed with test programs): 46.181180][ T4336] RIP: 0033:0x7fdd936aaeb9 [ 46.181199][ T4336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.181219][ T4336] RSP: 002b:00007fdd92107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.181242][ T4336] RAX: ffffffffffffffda RBX: 00007fdd93925fa0 RCX: 00007fdd936aaeb9 [ 46.181319][ T4336] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 46.181333][ T4336] RBP: 00007fdd92107090 R08: 0000000000000000 R09: 0000000000000000 [ 46.181348][ T4336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.181360][ T4336] R13: 00007fdd93926038 R14: 00007fdd93925fa0 R15: 00007ffd629ee5e8 [ 46.181377][ T4336] [ 46.380351][ T29] audit: type=1400 audit(1769851146.467:697): avc: denied { create } for pid=4343 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 46.409643][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 46.426006][ T4334] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.260: corrupted xattr entries [ 46.438480][ T29] audit: type=1400 audit(1769851146.507:698): avc: denied { setopt } for pid=4343 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.457817][ T29] audit: type=1400 audit(1769851146.507:699): avc: denied { nlmsg_read } for pid=4343 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.478336][ T29] audit: type=1400 audit(1769851146.507:700): avc: denied { bind } for pid=4343 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.498610][ T4334] EXT4-fs (loop5): Remounting filesystem read-only [ 46.505227][ T4334] EXT4-fs (loop5): 1 truncate cleaned up [ 46.513577][ T4358] netlink: 48 bytes leftover after parsing attributes in process `syz.4.269'. [ 46.526050][ T4334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.539172][ T29] audit: type=1400 audit(1769851146.617:701): avc: denied { read } for pid=4357 comm="syz.4.269" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.562509][ T29] audit: type=1400 audit(1769851146.617:702): avc: denied { open } for pid=4357 comm="syz.4.269" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.562651][ T29] audit: type=1400 audit(1769851146.617:703): avc: denied { ioctl } for pid=4357 comm="syz.4.269" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.562901][ T29] audit: type=1400 audit(1769851146.657:704): avc: denied { bind } for pid=4359 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.562926][ T29] audit: type=1400 audit(1769851146.657:705): avc: denied { getopt } for pid=4359 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.660228][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.693918][ T4369] loop0: detected capacity change from 0 to 128 [ 46.717506][ T4369] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 46.736413][ T4364] loop2: detected capacity change from 0 to 8192 [ 46.742844][ T4369] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.744478][ T4364] vfat: Unknown parameter '' [ 46.754383][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.274'. [ 46.766913][ T4371] netlink: 48 bytes leftover after parsing attributes in process `syz.5.274'. [ 46.793249][ T4371] vlan2: entered allmulticast mode [ 46.798404][ T4371] bridge_slave_0: entered allmulticast mode [ 46.831824][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.868889][ T4383] tipc: Can't bind to reserved service type 0 [ 46.880994][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 46.892864][ T4387] @0: renamed from dummy0 [ 46.917463][ T4385] ip6gre2: entered promiscuous mode [ 46.922777][ T4385] ip6gre2: entered allmulticast mode [ 46.937504][ T4387] vhci_hcd vhci_hcd.2: invalid port number 98 [ 46.943718][ T4387] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffc i0062 l0 [ 46.985424][ T4387] syzkaller0: entered promiscuous mode [ 46.991117][ T4387] syzkaller0: entered allmulticast mode [ 47.040297][ T3430] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 47.047899][ T3430] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 47.066022][ T4409] netlink: 5 bytes leftover after parsing attributes in process `syz.4.289'. [ 47.075083][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 47.091570][ T4409] ..1{X: renamed from ..0{X (while UP) [ 47.101444][ T4409] A link change request failed with some changes committed already. Interface ..1{X may have been left with an inconsistent configuration, please check. [ 47.178407][ T4414] SELinux: security_context_str_to_sid (yb) failed with errno=-22 [ 47.216141][ T4424] netlink: 92 bytes leftover after parsing attributes in process `syz.2.293'. [ 47.321308][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 47.432753][ T4452] syzkaller0: entered promiscuous mode [ 47.438362][ T4452] syzkaller0: entered allmulticast mode [ 47.537206][ T4478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4478 comm=syz.4.306 [ 47.552129][ T4478] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 47.555234][ T4449] bond1: option ad_user_port_key: invalid value (1136) [ 47.567232][ T4449] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 47.576011][ T4449] bond1 (unregistering): Released all slaves [ 47.605437][ T4478] bond1: (slave bridge1): making interface the new active one [ 47.613301][ T4478] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 47.654261][ T4482] netlink: 'syz.2.307': attribute type 4 has an invalid length. [ 47.673539][ T4486] FAULT_INJECTION: forcing a failure. [ 47.673539][ T4486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.676738][ T4488] Cannot find add_set index 3 as target [ 47.686637][ T4486] CPU: 0 UID: 0 PID: 4486 Comm: syz.4.308 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.686661][ T4486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.686672][ T4486] Call Trace: [ 47.686678][ T4486] [ 47.686685][ T4486] __dump_stack+0x1d/0x30 [ 47.686709][ T4486] dump_stack_lvl+0x95/0xd0 [ 47.686778][ T4486] dump_stack+0x15/0x1b [ 47.686797][ T4486] should_fail_ex+0x263/0x280 [ 47.686883][ T4486] should_fail+0xb/0x20 [ 47.686910][ T4486] should_fail_usercopy+0x1a/0x20 [ 47.686944][ T4486] copy_folio_from_iter_atomic+0x269/0x1170 [ 47.687023][ T4486] ? shmem_write_begin+0xfc/0x1f0 [ 47.687052][ T4486] ? shmem_write_begin+0x135/0x1f0 [ 47.687117][ T4486] generic_perform_write+0x2c1/0x490 [ 47.687231][ T4486] shmem_file_write_iter+0xc5/0xf0 [ 47.687266][ T4486] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 47.687358][ T4486] vfs_write+0x5a6/0x9f0 [ 47.687382][ T4486] ksys_write+0xdc/0x1a0 [ 47.687403][ T4486] __x64_sys_write+0x40/0x50 [ 47.687450][ T4486] x64_sys_call+0x2847/0x3000 [ 47.687476][ T4486] do_syscall_64+0xc0/0x2a0 [ 47.687507][ T4486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.687531][ T4486] RIP: 0033:0x7fdd9366b78e [ 47.687572][ T4486] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 47.687591][ T4486] RSP: 002b:00007fdd92106da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.687612][ T4486] RAX: ffffffffffffffda RBX: 00007fdd921076c0 RCX: 00007fdd9366b78e [ 47.687627][ T4486] RDX: 0000000000040000 RSI: 00007fdd89ce7000 RDI: 0000000000000005 [ 47.687641][ T4486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.687708][ T4486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 47.687728][ T4486] R13: 00007fdd92106ee0 R14: 00007fdd92106ea0 R15: 00007fdd89ce7000 [ 47.687747][ T4486] [ 47.692140][ T4486] loop4: detected capacity change from 0 to 512 [ 47.889653][ T4486] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 47.898878][ T4486] EXT4-fs (loop4): invalid journal inode [ 47.904880][ T4486] EXT4-fs (loop4): can't get journal size [ 47.921194][ T4486] EXT4-fs (loop4): 1 truncate cleaned up [ 47.927867][ T4486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.968173][ T4500] process 'syz.2.314' launched './file0' with NULL argv: empty string added [ 47.980132][ T1035] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 48.043679][ T4508] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.081767][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.279978][ T4536] sctp: [Deprecated]: syz.5.322 (pid 4536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 48.279978][ T4536] Use struct sctp_sack_info instead [ 48.438092][ T4553] xt_hashlimit: size too large, truncated to 1048576 [ 48.604188][ T4570] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 48.613847][ T4570] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 48.624315][ T4570] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 48.637037][ T4570] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 48.737094][ T4582] tipc: Started in network mode [ 48.742213][ T4582] tipc: Node identity 06317c8d563a, cluster identity 4711 [ 48.749633][ T4582] tipc: Enabled bearer , priority 0 [ 48.765898][ T4582] syzkaller0: entered promiscuous mode [ 48.771555][ T4582] syzkaller0: entered allmulticast mode [ 48.794415][ T4582] FAULT_INJECTION: forcing a failure. [ 48.794415][ T4582] name failslab, interval 1, probability 0, space 0, times 0 [ 48.807167][ T4582] CPU: 0 UID: 0 PID: 4582 Comm: syz.3.337 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.807195][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.807255][ T4582] Call Trace: [ 48.807269][ T4582] [ 48.807278][ T4582] __dump_stack+0x1d/0x30 [ 48.807306][ T4582] dump_stack_lvl+0x95/0xd0 [ 48.807330][ T4582] dump_stack+0x15/0x1b [ 48.807430][ T4582] should_fail_ex+0x263/0x280 [ 48.807463][ T4582] should_failslab+0x8c/0xb0 [ 48.807490][ T4582] __kmalloc_cache_noprof+0x64/0x4a0 [ 48.807582][ T4582] ? nsim_fib_event_nb+0x19f/0xda0 [ 48.807610][ T4582] nsim_fib_event_nb+0x19f/0xda0 [ 48.807658][ T4582] ? kvfree_call_rcu+0x201/0x390 [ 48.807692][ T4582] ? _raw_spin_lock_bh+0x56/0xb0 [ 48.807724][ T4582] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 48.807746][ T4582] atomic_notifier_call_chain+0x76/0x1b0 [ 48.807802][ T4582] call_fib_notifiers+0x65/0xa0 [ 48.807829][ T4582] call_fib6_notifiers+0x30/0x40 [ 48.807860][ T4582] fib6_del+0x7aa/0x910 [ 48.807907][ T4582] ? fib6_del+0x301/0x910 [ 48.807937][ T4582] fib6_clean_node+0x18c/0x2a0 [ 48.807964][ T4582] fib6_walk_continue+0x39f/0x440 [ 48.807989][ T4582] __fib6_clean_all+0x21c/0x350 [ 48.808072][ T4582] ? __pfx_fib6_ifdown+0x10/0x10 [ 48.808122][ T4582] ? __pfx_fib6_clean_node+0x10/0x10 [ 48.808149][ T4582] ? __pfx_fib6_ifdown+0x10/0x10 [ 48.808203][ T4582] ? __pfx_fib6_ifdown+0x10/0x10 [ 48.808229][ T4582] fib6_clean_all+0x2a/0x40 [ 48.808254][ T4582] rt6_disable_ip+0xb0/0x590 [ 48.808294][ T4582] ? consume_skb+0x71/0x140 [ 48.808376][ T4582] addrconf_ifdown+0x94/0xf90 [ 48.808400][ T4582] ? __pfx_tun_device_event+0x10/0x10 [ 48.808466][ T4582] ? __pfx_cbs_dev_notifier+0x10/0x10 [ 48.808485][ T4582] ? tls_dev_event+0x47c/0x9b0 [ 48.808507][ T4582] addrconf_notify+0x222/0x8f0 [ 48.808567][ T4582] ? __pfx_addrconf_notify+0x10/0x10 [ 48.808652][ T4582] raw_notifier_call_chain+0x6f/0x1b0 [ 48.808767][ T4582] ? call_netdevice_notifiers_info+0x80/0xd0 [ 48.808862][ T4582] call_netdevice_notifiers_info+0x92/0xd0 [ 48.808892][ T4582] netif_set_mtu_ext+0x3e3/0x520 [ 48.808925][ T4582] netif_set_mtu+0x4a/0xe0 [ 48.809070][ T4582] dev_set_mtu+0xc1/0x170 [ 48.809100][ T4582] dev_ifsioc+0x48d/0xf60 [ 48.809163][ T4582] ? mutex_lock+0x57/0x90 [ 48.809182][ T4582] dev_ioctl+0x709/0x960 [ 48.809201][ T4582] sock_do_ioctl+0x1aa/0x230 [ 48.809224][ T4582] sock_ioctl+0x41b/0x610 [ 48.809300][ T4582] ? mutex_lock+0x57/0x90 [ 48.809324][ T4582] ? __pfx_sock_ioctl+0x10/0x10 [ 48.809378][ T4582] __se_sys_ioctl+0xce/0x140 [ 48.809413][ T4582] __x64_sys_ioctl+0x43/0x50 [ 48.809480][ T4582] x64_sys_call+0x14b0/0x3000 [ 48.809505][ T4582] do_syscall_64+0xc0/0x2a0 [ 48.809533][ T4582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.809625][ T4582] RIP: 0033:0x7f1a13a7aeb9 [ 48.809642][ T4582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.809692][ T4582] RSP: 002b:00007f1a124d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.809766][ T4582] RAX: ffffffffffffffda RBX: 00007f1a13cf5fa0 RCX: 00007f1a13a7aeb9 [ 48.809808][ T4582] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 48.809823][ T4582] RBP: 00007f1a124d7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.809835][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.809849][ T4582] R13: 00007f1a13cf6038 R14: 00007f1a13cf5fa0 R15: 00007ffdd0cbdb48 [ 48.809901][ T4582] [ 49.175062][ T4582] tipc: Resetting bearer [ 49.190661][ T4580] tipc: Resetting bearer [ 49.208739][ T4580] tipc: Disabling bearer [ 49.215125][ T4581] loop4: detected capacity change from 0 to 128 [ 49.229143][ T4581] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.245879][ T4581] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.310912][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.392449][ T4606] tipc: Enabled bearer , priority 0 [ 49.408380][ T4612] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 49.460667][ T4612] batman_adv: batadv0: Adding interface: ip6gretap1 [ 49.467408][ T4612] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.499075][ T4612] batman_adv: batadv0: Interface activated: ip6gretap1 [ 49.508685][ T4606] syzkaller0: entered promiscuous mode [ 49.514411][ T4606] syzkaller0: entered allmulticast mode [ 49.525994][ T4604] tipc: Resetting bearer [ 49.560927][ T4604] tipc: Disabling bearer [ 49.600395][ T4631] xt_TPROXY: Can be used only with -p tcp or -p udp [ 49.632463][ T4634] team0: Device vlan2 is already an upper device of the team interface [ 49.694555][ T4643] loop3: detected capacity change from 0 to 512 [ 49.703948][ T4643] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.713069][ T4643] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 49.727597][ T4643] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: inode #2: comm syz.3.359: iget: special inode unallocated [ 49.741716][ T4643] EXT4-fs (loop3): no journal found [ 49.746999][ T4643] EXT4-fs (loop3): can't get journal size [ 49.753478][ T4643] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.359: iget: special inode unallocated [ 49.766270][ T4643] EXT4-fs (loop3): get root inode failed [ 49.772023][ T4643] EXT4-fs (loop3): mount failed [ 49.892534][ T4648] loop0: detected capacity change from 0 to 8192 [ 49.980944][ T4662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 49.996163][ T4664] netlink: 'syz.0.367': attribute type 3 has an invalid length. [ 50.164697][ T4669] FAULT_INJECTION: forcing a failure. [ 50.164697][ T4669] name failslab, interval 1, probability 0, space 0, times 0 [ 50.177422][ T4669] CPU: 0 UID: 0 PID: 4669 Comm: syz.0.369 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.177457][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.177468][ T4669] Call Trace: [ 50.177475][ T4669] [ 50.177484][ T4669] __dump_stack+0x1d/0x30 [ 50.177539][ T4669] dump_stack_lvl+0x95/0xd0 [ 50.177563][ T4669] dump_stack+0x15/0x1b [ 50.177662][ T4669] should_fail_ex+0x263/0x280 [ 50.177752][ T4669] should_failslab+0x8c/0xb0 [ 50.177776][ T4669] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 50.177800][ T4669] ? __alloc_skb+0x2f0/0x4b0 [ 50.177838][ T4669] __alloc_skb+0x2f0/0x4b0 [ 50.177863][ T4669] ? __alloc_skb+0x219/0x4b0 [ 50.177893][ T4669] netlink_alloc_large_skb+0xbf/0xf0 [ 50.177995][ T4669] netlink_sendmsg+0x40c/0x6f0 [ 50.178053][ T4669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.178075][ T4669] ____sys_sendmsg+0x5af/0x600 [ 50.178100][ T4669] ___sys_sendmsg+0x195/0x1e0 [ 50.178165][ T4669] __x64_sys_sendmsg+0xd4/0x160 [ 50.178189][ T4669] x64_sys_call+0x17ba/0x3000 [ 50.178280][ T4669] do_syscall_64+0xc0/0x2a0 [ 50.178348][ T4669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.178449][ T4669] RIP: 0033:0x7fc3688daeb9 [ 50.178464][ T4669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.178541][ T4669] RSP: 002b:00007fc367337028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.178559][ T4669] RAX: ffffffffffffffda RBX: 00007fc368b55fa0 RCX: 00007fc3688daeb9 [ 50.178651][ T4669] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000004 [ 50.178663][ T4669] RBP: 00007fc367337090 R08: 0000000000000000 R09: 0000000000000000 [ 50.178675][ T4669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.178686][ T4669] R13: 00007fc368b56038 R14: 00007fc368b55fa0 R15: 00007ffc4ef96ee8 [ 50.178706][ T4669] [ 50.418177][ T4679] vlan2: entered promiscuous mode [ 50.432041][ T4682] tipc: Enabling of bearer rejected, failed to enable media [ 50.566437][ T4699] Cannot find add_set index 0 as target [ 50.649902][ T4707] syzkaller0: entered promiscuous mode [ 50.655496][ T4707] syzkaller0: entered allmulticast mode [ 50.703042][ T4711] loop4: detected capacity change from 0 to 128 [ 50.710061][ T4711] vfat: Unknown parameter '0xffffffffffffffff' [ 50.853911][ T4732] __nla_validate_parse: 17 callbacks suppressed [ 50.853932][ T4732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 50.873053][ T4730] loop0: detected capacity change from 0 to 128 [ 50.939288][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 50.948657][ T4739] loop5: detected capacity change from 0 to 1024 [ 50.970210][ T4739] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.994771][ T4742] netlink: 'syz.0.398': attribute type 22 has an invalid length. [ 51.002592][ T4742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 51.018067][ T4739] EXT4-fs error (device loop5): ext4_quota_enable:7173: comm syz.5.397: Bad quota inum: 511, type: 0 [ 51.062190][ T4739] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=511). Please run e2fsck to fix. [ 51.089763][ T4742] netlink: 'syz.0.398': attribute type 22 has an invalid length. [ 51.097515][ T4742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 51.112594][ T4739] EXT4-fs (loop5): mount failed [ 51.117704][ T41] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.128546][ T41] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.142686][ T41] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.151849][ T41] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.224496][ T4762] bond_slave_0: entered promiscuous mode [ 51.230249][ T4762] bond_slave_1: entered promiscuous mode [ 51.236070][ T4762] vlan2: entered promiscuous mode [ 51.241165][ T4762] bond0: entered promiscuous mode [ 51.264738][ T4764] loop5: detected capacity change from 0 to 512 [ 51.274220][ T4764] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 51.287228][ T4764] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: inode #2: comm syz.5.406: casefold flag without casefold feature [ 51.314637][ T4764] EXT4-fs (loop5): no journal found [ 51.328154][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 51.328169][ T29] audit: type=1326 audit(1769851151.428:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 51.379597][ T4771] netlink: 68 bytes leftover after parsing attributes in process `syz.4.408'. [ 51.396446][ T29] audit: type=1326 audit(1769851151.428:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 51.420093][ T29] audit: type=1326 audit(1769851151.428:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 51.443510][ T29] audit: type=1326 audit(1769851151.428:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 51.466716][ T29] audit: type=1326 audit(1769851151.428:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 51.489968][ T29] audit: type=1326 audit(1769851151.428:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3688dc747 code=0x7ffc0000 [ 51.513229][ T29] audit: type=1326 audit(1769851151.428:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 51.536529][ T29] audit: type=1326 audit(1769851151.428:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 51.559849][ T29] audit: type=1326 audit(1769851151.428:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 51.583258][ T29] audit: type=1326 audit(1769851151.428:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 51.631636][ T4781] netlink: 'syz.5.412': attribute type 6 has an invalid length. [ 51.697323][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.414'. [ 51.700548][ T4776] vlan2: entered promiscuous mode [ 51.734419][ T4788] ip6gre2: left promiscuous mode [ 51.739523][ T4788] ip6gre2: left allmulticast mode [ 51.767183][ T3430] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.792798][ T3430] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.821430][ T3430] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.821473][ T3430] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.884028][ T4800] netlink: 'syz.0.415': attribute type 4 has an invalid length. [ 51.912317][ T4771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.408'. [ 51.915643][ T4803] syzkaller0: entered promiscuous mode [ 51.926927][ T4803] syzkaller0: entered allmulticast mode [ 51.936260][ T4805] loop6: detected capacity change from 0 to 7 [ 51.944493][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 51.954188][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.963958][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 51.973650][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.981894][ T4805] loop6: unable to read partition table [ 51.989715][ T4805] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 52.006276][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.015915][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 52.024945][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.034638][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 52.043869][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.053491][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 52.069082][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.078682][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 52.088549][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.098261][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 52.149875][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 52.168367][ T4820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 52.329810][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 52.338693][ T4829] netlink: 48 bytes leftover after parsing attributes in process `syz.4.429'. [ 52.355935][ T4829] vlan2: entered allmulticast mode [ 52.436853][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 52.472343][ T4838] ip6gre1: entered promiscuous mode [ 52.477567][ T4838] ip6gre1: entered allmulticast mode [ 52.525703][ T4842] Driver unsupported XDP return value 0 on prog (id 76) dev N/A, expect packet loss! [ 52.669252][ T4854] ..0{X: renamed from gretap0 [ 52.692053][ T4854] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 52.711362][ T3329] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 52.719071][ T3329] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 52.739075][ T3400] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 52.877744][ T4873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.923334][ T4873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.080012][ T4889] FAULT_INJECTION: forcing a failure. [ 53.080012][ T4889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.093118][ T4889] CPU: 1 UID: 0 PID: 4889 Comm: syz.3.452 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.093147][ T4889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.093159][ T4889] Call Trace: [ 53.093241][ T4889] [ 53.093249][ T4889] __dump_stack+0x1d/0x30 [ 53.093276][ T4889] dump_stack_lvl+0x95/0xd0 [ 53.093300][ T4889] dump_stack+0x15/0x1b [ 53.093322][ T4889] should_fail_ex+0x263/0x280 [ 53.093489][ T4889] should_fail+0xb/0x20 [ 53.093557][ T4889] should_fail_usercopy+0x1a/0x20 [ 53.093590][ T4889] _copy_from_user+0x1c/0xb0 [ 53.093611][ T4889] get_user_ifreq+0x52/0x110 [ 53.093636][ T4889] sock_ioctl+0x54e/0x610 [ 53.093671][ T4889] ? __pfx_sock_ioctl+0x10/0x10 [ 53.093695][ T4889] __se_sys_ioctl+0xce/0x140 [ 53.093733][ T4889] __x64_sys_ioctl+0x43/0x50 [ 53.093846][ T4889] x64_sys_call+0x14b0/0x3000 [ 53.093872][ T4889] do_syscall_64+0xc0/0x2a0 [ 53.093955][ T4889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.094021][ T4889] RIP: 0033:0x7f1a13a7aeb9 [ 53.094038][ T4889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.094072][ T4889] RSP: 002b:00007f1a124d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.094094][ T4889] RAX: ffffffffffffffda RBX: 00007f1a13cf5fa0 RCX: 00007f1a13a7aeb9 [ 53.094110][ T4889] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 53.094148][ T4889] RBP: 00007f1a124d7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.094162][ T4889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.094175][ T4889] R13: 00007f1a13cf6038 R14: 00007f1a13cf5fa0 R15: 00007ffdd0cbdb48 [ 53.094194][ T4889] [ 53.133730][ T4887] bond1: option ad_user_port_key: invalid value (1136) [ 53.228965][ T3162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.234056][ T4887] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 53.248394][ T4893] loop3: detected capacity change from 0 to 512 [ 53.312630][ T4887] bond1 (unregistering): Released all slaves [ 53.355334][ T4893] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.3.453: corrupted xattr block 95: invalid header [ 53.369971][ T4893] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.453: bg 0: block 7: invalid block bitmap [ 53.375777][ T4892] ip6gre1: entered promiscuous mode [ 53.387801][ T4892] ip6gre1: entered allmulticast mode [ 53.415285][ T4893] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 53.426678][ T4893] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #11: comm syz.3.453: corrupted xattr block 95: invalid header [ 53.442612][ T4893] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 53.452141][ T4893] EXT4-fs (loop3): 1 orphan inode deleted [ 53.459437][ T4893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.464519][ T4900] Cannot find add_set index 3 as target [ 53.576033][ T4905] netlink: 'syz.5.457': attribute type 4 has an invalid length. [ 53.586316][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.659144][ T3400] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.685371][ T4915] loop5: detected capacity change from 0 to 128 [ 53.700536][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.701891][ T4915] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.708166][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.728908][ T3162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.766408][ T4915] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.859462][ T4924] syzkaller0: entered promiscuous mode [ 53.865073][ T4924] syzkaller0: entered allmulticast mode [ 53.922194][ T4932] loop2: detected capacity change from 0 to 512 [ 53.939429][ T4932] loop2: detected capacity change from 0 to 1024 [ 53.964520][ T4932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.000194][ T4941] loop3: detected capacity change from 0 to 512 [ 54.048365][ T4951] loop5: detected capacity change from 0 to 512 [ 54.060280][ T4951] EXT4-fs error (device loop5): ext4_quota_enable:7173: comm syz.5.473: Bad quota inum: 31, type: 1 [ 54.072327][ T4951] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=31). Please run e2fsck to fix. [ 54.085334][ T4956] netlink: 'syz.3.474': attribute type 2 has an invalid length. [ 54.087932][ T4951] EXT4-fs (loop5): mount failed [ 54.123159][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.345127][ T4971] netlink: 'syz.2.480': attribute type 10 has an invalid length. [ 54.393946][ T4973] xt_hashlimit: size too large, truncated to 1048576 [ 54.411741][ T4976] loop4: detected capacity change from 0 to 256 [ 54.496959][ T4984] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 54.521407][ T4985] wireguard0: entered promiscuous mode [ 54.526932][ T4985] wireguard0: entered allmulticast mode [ 54.629593][ T4995] netlink: 'syz.2.489': attribute type 10 has an invalid length. [ 54.639744][ T4995] team0: Device vxcan1 is of different type [ 54.685908][ T3162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 54.719532][ T4997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.754408][ T4997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 54.770381][ T5000] tipc: Started in network mode [ 54.775354][ T5000] tipc: Node identity 66b16990602c, cluster identity 4711 [ 54.782656][ T5000] tipc: Enabled bearer , priority 0 [ 54.790340][ T5000] syzkaller0: entered promiscuous mode [ 54.795822][ T5000] syzkaller0: entered allmulticast mode [ 54.827819][ T4997] loop5: detected capacity change from 0 to 512 [ 54.872013][ T4997] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 54.883693][ T5000] tipc: Resetting bearer [ 54.883866][ T5009] xt_SECMARK: invalid mode: 2 [ 54.890681][ T4997] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.906738][ T4998] tipc: Resetting bearer [ 54.916185][ T4998] tipc: Disabling bearer [ 54.928941][ T5009] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 54.971547][ T5011] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.497: inode has both inline data and extents flags [ 54.991353][ T5011] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.497: couldn't read orphan inode 15 (err -117) [ 55.014492][ T5011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.159302][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.231199][ T5030] xt_TPROXY: Can be used only with -p tcp or -p udp [ 55.270903][ T5032] syzkaller0: entered promiscuous mode [ 55.276418][ T5032] syzkaller0: entered allmulticast mode [ 55.415983][ T5038] syzkaller0: entered promiscuous mode [ 55.421695][ T5038] syzkaller0: entered allmulticast mode [ 55.429866][ T5038] FAULT_INJECTION: forcing a failure. [ 55.429866][ T5038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.443057][ T5038] CPU: 0 UID: 0 PID: 5038 Comm: syz.4.506 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.443162][ T5038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.443169][ T5038] Call Trace: [ 55.443175][ T5038] [ 55.443180][ T5038] __dump_stack+0x1d/0x30 [ 55.443196][ T5038] dump_stack_lvl+0x95/0xd0 [ 55.443209][ T5038] dump_stack+0x15/0x1b [ 55.443220][ T5038] should_fail_ex+0x263/0x280 [ 55.443277][ T5038] should_fail+0xb/0x20 [ 55.443345][ T5038] should_fail_usercopy+0x1a/0x20 [ 55.443397][ T5038] _copy_from_user+0x1c/0xb0 [ 55.443458][ T5038] sock_do_ioctl+0xe5/0x230 [ 55.443489][ T5038] sock_ioctl+0x41b/0x610 [ 55.443502][ T5038] ? mutex_lock+0x57/0x90 [ 55.443516][ T5038] ? __pfx_sock_ioctl+0x10/0x10 [ 55.443528][ T5038] __se_sys_ioctl+0xce/0x140 [ 55.443559][ T5038] __x64_sys_ioctl+0x43/0x50 [ 55.443577][ T5038] x64_sys_call+0x14b0/0x3000 [ 55.443591][ T5038] do_syscall_64+0xc0/0x2a0 [ 55.443643][ T5038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.443657][ T5038] RIP: 0033:0x7fdd936aaeb9 [ 55.443667][ T5038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.443678][ T5038] RSP: 002b:00007fdd920e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.443729][ T5038] RAX: ffffffffffffffda RBX: 00007fdd93926090 RCX: 00007fdd936aaeb9 [ 55.443744][ T5038] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 55.443757][ T5038] RBP: 00007fdd920e6090 R08: 0000000000000000 R09: 0000000000000000 [ 55.443771][ T5038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.443783][ T5038] R13: 00007fdd93926128 R14: 00007fdd93926090 R15: 00007ffd629ee5e8 [ 55.443799][ T5038] [ 57.978105][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 57.978118][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.183979][ T5023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.258153][ T5066] __nla_validate_parse: 11 callbacks suppressed [ 58.258168][ T5066] netlink: 28 bytes leftover after parsing attributes in process `syz.5.515'. [ 58.309208][ T29] kauditd_printk_skb: 579 callbacks suppressed [ 58.309224][ T29] audit: type=1400 audit(1769851158.420:1387): avc: denied { name_bind } for pid=5064 comm="syz.5.515" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 58.336249][ T29] audit: type=1400 audit(1769851158.420:1388): avc: denied { node_bind } for pid=5064 comm="syz.5.515" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 58.376309][ T5080] set_capacity_and_notify: 2 callbacks suppressed [ 58.376327][ T5080] loop3: detected capacity change from 0 to 512 [ 58.383387][ T5066] loop5: detected capacity change from 0 to 512 [ 58.395497][ T29] audit: type=1400 audit(1769851158.480:1389): avc: denied { ioctl } for pid=5064 comm="syz.5.515" path="socket:[10612]" dev="sockfs" ino=10612 ioctlcmd=0x2402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.426314][ T5081] netlink: 25 bytes leftover after parsing attributes in process `syz.2.517'. [ 58.443066][ T5066] EXT4-fs (loop5): bad geometry: first data block 2 is beyond end of filesystem (0) [ 58.481620][ T5080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.515794][ T5082] netlink: 'syz.2.517': attribute type 27 has an invalid length. [ 58.523703][ T5081] mmap: syz.2.517 (5081): VmData 29376512 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 58.554191][ T5080] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.569841][ T5080] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.518: corrupted inode contents [ 58.579412][ T29] audit: type=1400 audit(1769853736.680:1390): avc: denied { write } for pid=5088 comm="syz.5.520" dev="sockfs" ino=10208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.582614][ T5080] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.518: mark_inode_dirty error [ 58.602784][ T29] audit: type=1400 audit(1769853736.680:1391): avc: denied { setattr } for pid=5088 comm="syz.5.520" name="RDS" dev="sockfs" ino=10208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.615126][ T5080] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.518: corrupted inode contents [ 58.651200][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.658423][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.686194][ T5096] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.518: corrupted inode contents [ 58.702379][ T5096] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.518: mark_inode_dirty error [ 58.714985][ T29] audit: type=1400 audit(1769853736.760:1392): avc: denied { setopt } for pid=5088 comm="syz.5.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.746305][ T5096] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.518: corrupted inode contents [ 58.769776][ T5096] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.518: mark_inode_dirty error [ 58.785884][ T5096] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.518: corrupted inode contents [ 58.799348][ T5096] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.518: mark_inode_dirty error [ 58.825242][ T5096] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.518: corrupted inode contents [ 58.850555][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.861827][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.895328][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 58.907726][ T29] audit: type=1400 audit(1769853737.010:1393): avc: denied { execute } for pid=5106 comm="syz.0.524" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 58.938991][ T5082] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 58.947619][ T5082] ip6gre1: left promiscuous mode [ 58.952696][ T5082] ip6gre1: left allmulticast mode [ 58.978108][ T5111] option changes via remount are deprecated (pid=5106 comm=syz.0.524) [ 58.986106][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.986671][ T29] audit: type=1400 audit(1769853737.080:1394): avc: denied { remount } for pid=5106 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.995599][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.024491][ T3329] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.036279][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.056664][ T5115] SET target dimension over the limit! [ 59.069233][ T3329] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.197225][ T29] audit: type=1400 audit(1769853737.300:1395): avc: denied { mount } for pid=5128 comm="syz.3.532" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.219141][ T29] audit: type=1400 audit(1769853737.300:1396): avc: denied { mounton } for pid=5128 comm="syz.3.532" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 59.239910][ T5133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'. [ 59.254490][ T5133] hsr_slave_0: left promiscuous mode [ 59.260719][ T5133] hsr_slave_1: left promiscuous mode [ 59.376065][ T5140] bond2: option lacp_rate: invalid value (67) [ 59.383350][ T5140] bond2 (unregistering): Released all slaves [ 59.457388][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.495374][ T5145] gre0: entered promiscuous mode [ 59.496355][ T5146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 59.534354][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.580935][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.655323][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.718096][ T5161] syzkaller0: entered promiscuous mode [ 59.723756][ T5161] syzkaller0: entered allmulticast mode [ 59.731923][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.544'. [ 59.750898][ T5147] chnl_net:caif_netlink_parms(): no params data found [ 59.817854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.862371][ T5181] loop0: detected capacity change from 0 to 764 [ 59.880926][ T5181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.550'. [ 59.914889][ T12] bridge_slave_1: left allmulticast mode [ 59.920711][ T12] bridge_slave_1: left promiscuous mode [ 59.926433][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.970163][ T5191] loop4: detected capacity change from 0 to 1024 [ 59.999007][ T12] bridge_slave_0: left promiscuous mode [ 60.004938][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.013824][ T5191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.042678][ T12] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 60.122234][ T12] batman_adv: batadv0: Removing interface: ip6gretap1 [ 60.159390][ T12] bond2 (unregistering): (slave geneve2): Releasing active interface [ 60.219828][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.228680][ T12] bond_slave_0: left promiscuous mode [ 60.234490][ T5205] loop5: detected capacity change from 0 to 512 [ 60.241056][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.249798][ T5205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.258758][ T12] bond_slave_1: left promiscuous mode [ 60.264822][ T12] bond0 (unregistering): Released all slaves [ 60.273011][ T5205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.273769][ T12] bond1 (unregistering): Released all slaves [ 60.287821][ T5205] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.294483][ T12] bond2 (unregistering): Released all slaves [ 60.317271][ T5204] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.324445][ T5204] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.337740][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.344813][ T5147] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.353740][ T5147] bridge_slave_0: entered allmulticast mode [ 60.360568][ T5147] bridge_slave_0: entered promiscuous mode [ 60.367091][ T12] tipc: Left network mode [ 60.367386][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.378552][ T5147] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.385823][ T5147] bridge_slave_1: entered allmulticast mode [ 60.386477][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.392254][ T5147] bridge_slave_1: entered promiscuous mode [ 60.416714][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.448204][ T5213] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 60.461164][ T5209] vlan2: entered promiscuous mode [ 60.535753][ T5147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.562092][ T5147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.571324][ T5223] loop4: detected capacity change from 0 to 512 [ 60.587146][ T12] hsr_slave_0: left promiscuous mode [ 60.596804][ T5223] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 60.611269][ T12] hsr_slave_1: left promiscuous mode [ 60.616942][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.624481][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.635855][ T5223] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: inode #2: comm syz.4.565: casefold flag without casefold feature [ 60.658085][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.665552][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.686209][ T5223] EXT4-fs (loop4): no journal found [ 60.721350][ T12] veth1_macvtap: left promiscuous mode [ 60.726994][ T12] veth1_vlan: left promiscuous mode [ 60.757565][ T12] veth0_vlan: left promiscuous mode [ 60.911087][ T12] team0 (unregistering): Port device team_slave_1 removed [ 60.940732][ T12] team0 (unregistering): Port device team_slave_0 removed [ 61.042079][ T5147] team0: Port device team_slave_0 added [ 61.062213][ T5147] team0: Port device team_slave_1 added [ 61.089188][ T5262] netlink: 'syz.4.574': attribute type 6 has an invalid length. [ 61.187098][ T5147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.194123][ T5147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.220309][ T5147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.241862][ T5147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.248991][ T5147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.274979][ T5147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.290992][ T5276] loop4: detected capacity change from 0 to 512 [ 61.341950][ T5147] hsr_slave_0: entered promiscuous mode [ 61.354679][ T5147] hsr_slave_1: entered promiscuous mode [ 61.387250][ T5280] dummy0: entered promiscuous mode [ 61.397535][ T5280] vlan4: entered promiscuous mode [ 61.499340][ T5286] netlink: 92 bytes leftover after parsing attributes in process `syz.4.581'. [ 61.508404][ T5286] netlink: 92 bytes leftover after parsing attributes in process `syz.4.581'. [ 61.541654][ T5288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.582'. [ 63.698560][ T5305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.700794][ T5305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.711429][ T5242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.757237][ T5309] netlink: 'syz.4.589': attribute type 4 has an invalid length. [ 63.758875][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 63.758926][ T29] audit: type=1326 audit(1769853741.870:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.5.590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f649c51aeb9 code=0x0 [ 63.831066][ T5305] vlan2: left allmulticast mode [ 63.841440][ T5147] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 63.859594][ T5147] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 63.869410][ T31] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.878874][ T5147] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 63.893231][ T31] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.905444][ T31] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.914838][ T5147] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 63.933313][ T5326] FAULT_INJECTION: forcing a failure. [ 63.933313][ T5326] name failslab, interval 1, probability 0, space 0, times 0 [ 63.946099][ T5326] CPU: 1 UID: 0 PID: 5326 Comm: syz.0.595 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.946223][ T5326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.946234][ T5326] Call Trace: [ 63.946241][ T5326] [ 63.946250][ T5326] __dump_stack+0x1d/0x30 [ 63.946275][ T5326] dump_stack_lvl+0x95/0xd0 [ 63.946326][ T5326] dump_stack+0x15/0x1b [ 63.946345][ T5326] should_fail_ex+0x263/0x280 [ 63.946373][ T5326] ? __pfx_sock_alloc_inode+0x10/0x10 [ 63.946473][ T5326] should_failslab+0x8c/0xb0 [ 63.946497][ T5326] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 63.946581][ T5326] ? sock_alloc_inode+0x34/0xa0 [ 63.946631][ T5326] ? __pfx_sock_alloc_inode+0x10/0x10 [ 63.946655][ T5326] sock_alloc_inode+0x34/0xa0 [ 63.946684][ T5326] alloc_inode+0x40/0x170 [ 63.946776][ T5326] __sock_create+0x120/0x580 [ 63.946802][ T5326] ? _get_random_bytes+0x182/0x1b0 [ 63.946831][ T5326] sock_create_kern+0x38/0x50 [ 63.946855][ T5326] udp_sock_create6+0x68/0x3e0 [ 63.946983][ T5326] rxrpc_lookup_local+0x835/0xcc0 [ 63.947014][ T5326] rxrpc_sendmsg+0x2f3/0x590 [ 63.947037][ T5326] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 63.947061][ T5326] ____sys_sendmsg+0x5af/0x600 [ 63.947156][ T5326] ___sys_sendmsg+0x195/0x1e0 [ 63.947185][ T5326] __x64_sys_sendmsg+0xd4/0x160 [ 63.947250][ T5326] x64_sys_call+0x17ba/0x3000 [ 63.947314][ T5326] do_syscall_64+0xc0/0x2a0 [ 63.947398][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.947421][ T5326] RIP: 0033:0x7fc3688daeb9 [ 63.947440][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.947456][ T5326] RSP: 002b:00007fc367337028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.947474][ T5326] RAX: ffffffffffffffda RBX: 00007fc368b55fa0 RCX: 00007fc3688daeb9 [ 63.947490][ T5326] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 63.947503][ T5326] RBP: 00007fc367337090 R08: 0000000000000000 R09: 0000000000000000 [ 63.947515][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.947526][ T5326] R13: 00007fc368b56038 R14: 00007fc368b55fa0 R15: 00007ffc4ef96ee8 [ 63.947543][ T5326] [ 64.165922][ T5326] socket: no more sockets [ 64.176786][ T31] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.236827][ T5344] program syz.4.599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.251817][ T5147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.277006][ T5147] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.294868][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.302210][ T3329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.320156][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.327358][ T3329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.372484][ T29] audit: type=1400 audit(1769853742.481:1425): avc: denied { create } for pid=5357 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.414391][ T29] audit: type=1400 audit(1769853742.511:1426): avc: denied { bind } for pid=5357 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.486087][ T5147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.495786][ T5371] loop6: detected capacity change from 0 to 7 [ 64.503213][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 64.512854][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.521393][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 64.531021][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.539257][ T5371] loop6: unable to read partition table [ 64.545045][ T5371] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 64.560386][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 64.569996][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.578903][ T5376] delete_channel: no stack [ 64.597117][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 64.606737][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.624074][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 64.633804][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.642162][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 64.651862][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.661205][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 64.670887][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.760193][ T5401] netlink: 'syz.5.613': attribute type 1 has an invalid length. [ 64.768068][ T5401] netlink: 'syz.5.613': attribute type 4 has an invalid length. [ 64.775800][ T5401] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.613'. [ 64.887094][ T29] audit: type=1400 audit(1769853742.991:1427): avc: denied { write } for pid=5416 comm="syz.2.617" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.899737][ T5417] tmpfs: Bad value for 'mpol' [ 64.907380][ T29] audit: type=1400 audit(1769853742.991:1428): avc: denied { read } for pid=5416 comm="syz.2.617" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.908408][ T5147] veth0_vlan: entered promiscuous mode [ 64.940372][ T29] audit: type=1326 audit(1769853743.001:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a7baeb9 code=0x7ffc0000 [ 64.964018][ T29] audit: type=1326 audit(1769853743.001:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2e5a7baeb9 code=0x7ffc0000 [ 64.987315][ T29] audit: type=1400 audit(1769853743.001:1431): avc: denied { watch watch_reads } for pid=5416 comm="syz.2.617" path="/proc/357/task" dev="proc" ino=12472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 65.011334][ T29] audit: type=1326 audit(1769853743.001:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a7baeb9 code=0x7ffc0000 [ 65.034833][ T29] audit: type=1326 audit(1769853743.001:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2e5a7baeb9 code=0x7ffc0000 [ 65.064064][ T5421] FAULT_INJECTION: forcing a failure. [ 65.064064][ T5421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.077206][ T5421] CPU: 0 UID: 0 PID: 5421 Comm: syz.0.619 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.077301][ T5421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.077309][ T5421] Call Trace: [ 65.077314][ T5421] [ 65.077319][ T5421] __dump_stack+0x1d/0x30 [ 65.077413][ T5421] dump_stack_lvl+0x95/0xd0 [ 65.077425][ T5421] dump_stack+0x15/0x1b [ 65.077437][ T5421] should_fail_ex+0x263/0x280 [ 65.077455][ T5421] should_fail+0xb/0x20 [ 65.077538][ T5421] should_fail_usercopy+0x1a/0x20 [ 65.077557][ T5421] _copy_from_user+0x1c/0xb0 [ 65.077642][ T5421] ip6_tnl_siocdevprivate+0x139/0xb30 [ 65.077667][ T5421] dev_ifsioc+0x923/0xf60 [ 65.077681][ T5421] ? __mutex_lock_slowpath+0xa/0x10 [ 65.077696][ T5421] dev_ioctl+0x78c/0x960 [ 65.077708][ T5421] sock_ioctl+0x593/0x610 [ 65.077785][ T5421] ? __pfx_sock_ioctl+0x10/0x10 [ 65.077798][ T5421] __se_sys_ioctl+0xce/0x140 [ 65.077871][ T5421] __x64_sys_ioctl+0x43/0x50 [ 65.077888][ T5421] x64_sys_call+0x14b0/0x3000 [ 65.077903][ T5421] do_syscall_64+0xc0/0x2a0 [ 65.077932][ T5421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.077978][ T5421] RIP: 0033:0x7fc3688daeb9 [ 65.077988][ T5421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.077999][ T5421] RSP: 002b:00007fc367337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.078035][ T5421] RAX: ffffffffffffffda RBX: 00007fc368b55fa0 RCX: 00007fc3688daeb9 [ 65.078043][ T5421] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 65.078051][ T5421] RBP: 00007fc367337090 R08: 0000000000000000 R09: 0000000000000000 [ 65.078072][ T5421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.078147][ T5421] R13: 00007fc368b56038 R14: 00007fc368b55fa0 R15: 00007ffc4ef96ee8 [ 65.078158][ T5421] [ 65.080225][ T5147] veth1_vlan: entered promiscuous mode [ 65.188361][ T5438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.253222][ T5147] veth0_macvtap: entered promiscuous mode [ 65.287307][ T5438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.301974][ T5147] veth1_macvtap: entered promiscuous mode [ 65.354484][ T5147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.363551][ T5147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.393743][ T5450] tipc: Started in network mode [ 65.398762][ T5450] tipc: Node identity a6744335c794, cluster identity 4711 [ 65.405948][ T5450] tipc: Enabled bearer , priority 0 [ 65.419801][ T41] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.430383][ T5450] syzkaller0: entered promiscuous mode [ 65.433433][ T5461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.627'. [ 65.435871][ T5450] syzkaller0: entered allmulticast mode [ 65.466580][ T41] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.476528][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.488770][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.502118][ T5450] tipc: Resetting bearer [ 65.527578][ T5448] tipc: Resetting bearer [ 65.535877][ T5448] tipc: Disabling bearer [ 65.573519][ T5474] loop6: detected capacity change from 0 to 128 [ 65.580697][ T5474] EXT4-fs: test_dummy_encryption option not supported [ 65.615855][ T5477] tmpfs: Bad value for 'mpol' [ 65.622769][ T5479] loop5: detected capacity change from 0 to 256 [ 65.632214][ T5479] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.646999][ T5479] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.700137][ T5481] netlink: 'syz.5.632': attribute type 4 has an invalid length. [ 65.830664][ T5499] netlink: 40 bytes leftover after parsing attributes in process `syz.5.639'. [ 65.831454][ T5497] FAULT_INJECTION: forcing a failure. [ 65.831454][ T5497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.842634][ T5499] ipip0: entered promiscuous mode [ 65.852708][ T5497] CPU: 1 UID: 0 PID: 5497 Comm: syz.6.638 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.852736][ T5497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.852749][ T5497] Call Trace: [ 65.852756][ T5497] [ 65.852765][ T5497] __dump_stack+0x1d/0x30 [ 65.852872][ T5497] dump_stack_lvl+0x95/0xd0 [ 65.852924][ T5497] dump_stack+0x15/0x1b [ 65.852945][ T5497] should_fail_ex+0x263/0x280 [ 65.852977][ T5497] should_fail+0xb/0x20 [ 65.853050][ T5497] should_fail_usercopy+0x1a/0x20 [ 65.853083][ T5497] copy_folio_from_iter_atomic+0x269/0x1170 [ 65.853183][ T5497] ? shmem_write_begin+0xfc/0x1f0 [ 65.853213][ T5497] ? shmem_write_begin+0x135/0x1f0 [ 65.853243][ T5497] generic_perform_write+0x2c1/0x490 [ 65.853278][ T5497] shmem_file_write_iter+0xc5/0xf0 [ 65.853320][ T5497] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 65.853433][ T5497] vfs_write+0x5a6/0x9f0 [ 65.853457][ T5497] ksys_write+0xdc/0x1a0 [ 65.853479][ T5497] __x64_sys_write+0x40/0x50 [ 65.853499][ T5497] x64_sys_call+0x2847/0x3000 [ 65.853643][ T5497] do_syscall_64+0xc0/0x2a0 [ 65.853674][ T5497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.853778][ T5497] RIP: 0033:0x7f23a16bb78e [ 65.853796][ T5497] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.853814][ T5497] RSP: 002b:00007f23a0156da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 65.853835][ T5497] RAX: ffffffffffffffda RBX: 00007f23a01576c0 RCX: 00007f23a16bb78e [ 65.853850][ T5497] RDX: 0000000000040000 RSI: 00007f2397d37000 RDI: 0000000000000005 [ 65.853863][ T5497] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.853923][ T5497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 65.853936][ T5497] R13: 00007f23a0156ee0 R14: 00007f23a0156ea0 R15: 00007f2397d37000 [ 65.853956][ T5497] [ 65.874555][ T5501] loop0: detected capacity change from 0 to 512 [ 65.878055][ T5499] ipip0: entered allmulticast mode [ 65.893705][ T5497] loop6: detected capacity change from 0 to 512 [ 65.955341][ T5499] syzkaller0: entered promiscuous mode [ 66.032860][ T5497] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 66.039111][ T5499] syzkaller0: entered allmulticast mode [ 66.077998][ T5501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 66.082619][ T5497] EXT4-fs (loop6): invalid journal inode [ 66.087409][ T5501] ext4 filesystem being mounted at /120/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.100039][ T5497] EXT4-fs (loop6): can't get journal size [ 66.136457][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 66.146080][ T5497] EXT4-fs (loop6): 1 truncate cleaned up [ 66.163659][ T5497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.268599][ T5525] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 66.314066][ T5147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.327307][ T5527] netlink: 7 bytes leftover after parsing attributes in process `syz.5.647'. [ 66.344723][ T5527] netlink: 7 bytes leftover after parsing attributes in process `syz.5.647'. [ 66.453464][ T5541] wireguard1: entered promiscuous mode [ 66.459034][ T5541] wireguard1: entered allmulticast mode [ 66.523524][ T5515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'. [ 66.720876][ T5564] netlink: 'syz.5.659': attribute type 10 has an invalid length. [ 66.732594][ T5564] team0: Port device vxcan1 added [ 66.768589][ T5566] loop4: detected capacity change from 0 to 128 [ 66.813739][ T5568] netlink: 28 bytes leftover after parsing attributes in process `syz.5.661'. [ 66.822805][ T5568] netlink: 28 bytes leftover after parsing attributes in process `syz.5.661'. [ 66.862816][ T5571] netlink: 28 bytes leftover after parsing attributes in process `syz.5.661'. [ 66.871933][ T5571] netlink: 28 bytes leftover after parsing attributes in process `syz.5.661'. [ 66.906621][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 66.915622][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 66.928090][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 66.956799][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 67.158250][ T5586] loop4: detected capacity change from 0 to 512 [ 67.213917][ T5586] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.237188][ T5586] EXT4-fs (loop4): 1 truncate cleaned up [ 67.243517][ T5586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.273877][ T5599] loop2: detected capacity change from 0 to 2368 [ 67.353712][ T5599] iso9660: Unknown parameter 'X-' [ 67.360620][ T3311] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 67.402387][ T5607] loop5: detected capacity change from 0 to 1024 [ 67.452137][ T3311] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 67.464142][ T5607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.511002][ T5615] xt_TPROXY: Can be used only with -p tcp or -p udp [ 67.511537][ T5607] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 67.537288][ T3311] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 67.556383][ T5607] EXT4-fs (loop5): Remounting filesystem read-only [ 67.614391][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.701736][ T5629] loop5: detected capacity change from 0 to 512 [ 67.815739][ T5635] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 67.826984][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 67.843853][ T5635] EXT4-fs (loop0): invalid journal inode [ 67.859770][ T5635] EXT4-fs (loop0): can't get journal size [ 67.886998][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.887292][ T5629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.909692][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 67.962368][ T5629] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.966917][ T5635] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 67.988842][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 68.058511][ T5635] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.076684][ T5629] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.684: corrupted inode contents [ 68.106426][ T5635] EXT4-fs (loop0): 1 truncate cleaned up [ 68.113142][ T5635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.134007][ T5629] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #2: comm syz.5.684: mark_inode_dirty error [ 68.196558][ T5629] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.684: corrupted inode contents [ 68.232735][ T5629] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.684: mark_inode_dirty error [ 68.257659][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 68.270303][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.351585][ T5652] netlink: 'syz.5.693': attribute type 3 has an invalid length. [ 68.392141][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.417609][ T41] bridge_slave_1: left allmulticast mode [ 68.423408][ T41] bridge_slave_1: left promiscuous mode [ 68.429428][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.449181][ T41] bridge_slave_0: left allmulticast mode [ 68.454860][ T41] bridge_slave_0: left promiscuous mode [ 68.460706][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.673736][ T41] bond1 (unregistering): (slave bridge1): Releasing active interface [ 68.766201][ T29] kauditd_printk_skb: 879 callbacks suppressed [ 68.766217][ T29] audit: type=1326 audit(1769853746.871:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f649c4bc2d9 code=0x7ffc0000 [ 68.795992][ T29] audit: type=1326 audit(1769853746.871:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f649c514cd7 code=0x7ffc0000 [ 68.796249][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 68.819232][ T29] audit: type=1326 audit(1769853746.871:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f649c4bc2d9 code=0x7ffc0000 [ 68.876443][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.916814][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.945807][ T41] bond0 (unregistering): Released all slaves [ 68.967625][ T41] bond1 (unregistering): Released all slaves [ 69.004607][ T41] bond2 (unregistering): Released all slaves [ 69.016724][ T41] bond3 (unregistering): Released all slaves [ 69.038377][ T29] audit: type=1326 audit(1769853746.961:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f649c514cd7 code=0x7ffc0000 [ 69.061755][ T29] audit: type=1326 audit(1769853746.961:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f649c4bc2d9 code=0x7ffc0000 [ 69.085010][ T29] audit: type=1326 audit(1769853746.961:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f649c514cd7 code=0x7ffc0000 [ 69.108503][ T29] audit: type=1326 audit(1769853746.961:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f649c4bc2d9 code=0x7ffc0000 [ 69.131789][ T29] audit: type=1326 audit(1769853746.961:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f649c514cd7 code=0x7ffc0000 [ 69.155377][ T29] audit: type=1326 audit(1769853746.961:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f649c4bc2d9 code=0x7ffc0000 [ 69.178766][ T29] audit: type=1326 audit(1769853746.961:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f649c514cd7 code=0x7ffc0000 [ 69.370477][ T5668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.452969][ T5643] chnl_net:caif_netlink_parms(): no params data found [ 69.592620][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.611093][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.662333][ T5704] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 69.713075][ T5710] netlink: 'syz.2.703': attribute type 10 has an invalid length. [ 69.764071][ T41] team0 (unregistering): Port device team_slave_1 removed [ 69.774370][ T5709] set_capacity_and_notify: 2 callbacks suppressed [ 69.774384][ T5709] loop2: detected capacity change from 0 to 128 [ 69.796506][ T41] team0 (unregistering): Port device team_slave_0 removed [ 69.902733][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.910026][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.926648][ T5643] bridge_slave_0: entered allmulticast mode [ 69.941015][ T5643] bridge_slave_0: entered promiscuous mode [ 69.988283][ T5710] dummy0: entered allmulticast mode [ 69.994341][ T5710] bridge0: port 3(dummy0) entered blocking state [ 70.000851][ T5710] bridge0: port 3(dummy0) entered disabled state [ 70.017723][ T5716] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 70.020910][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.036540][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.055137][ T5643] bridge_slave_1: entered allmulticast mode [ 70.065461][ T5643] bridge_slave_1: entered promiscuous mode [ 70.111681][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.149134][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.197192][ T5737] loop6: detected capacity change from 0 to 128 [ 70.199481][ T5643] team0: Port device team_slave_0 added [ 70.225092][ T5643] team0: Port device team_slave_1 added [ 70.277092][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.284113][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.310480][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.361296][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.368329][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.394392][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.407674][ T5749] loop6: detected capacity change from 0 to 512 [ 70.414446][ T5749] EXT4-fs: Ignoring removed bh option [ 70.427656][ T5749] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 70.451642][ T5749] EXT4-fs (loop6): 1 truncate cleaned up [ 70.477414][ T5749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.478607][ T5643] hsr_slave_0: entered promiscuous mode [ 70.509772][ T5643] hsr_slave_1: entered promiscuous mode [ 70.519543][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 70.525292][ T5643] Cannot create hsr debugfs directory [ 70.534053][ T5749] __nla_validate_parse: 4 callbacks suppressed [ 70.534107][ T5749] netlink: 16 bytes leftover after parsing attributes in process `syz.6.713'. [ 70.626069][ T5147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.757750][ T5775] netlink: 15 bytes leftover after parsing attributes in process `syz.6.715'. [ 70.818150][ T5643] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 70.842085][ T5643] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 70.871313][ T5643] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 70.896124][ T5643] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 70.971613][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.008181][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.027866][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.034946][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.065801][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.072965][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.084326][ T5805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.717'. [ 71.106343][ T5807] loop2: detected capacity change from 0 to 128 [ 71.215033][ T5813] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.247865][ T5781] xt_hashlimit: size too large, truncated to 1048576 [ 71.277150][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.285268][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.726'. [ 71.343105][ T5827] loop6: detected capacity change from 0 to 512 [ 71.350390][ T5827] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 71.606674][ T5834] xt_hashlimit: overflow, try lower: 3/0 [ 71.635156][ T5851] loop5: detected capacity change from 0 to 128 [ 71.674598][ T5859] netlink: 'syz.2.733': attribute type 6 has an invalid length. [ 71.716782][ T5643] veth0_vlan: entered promiscuous mode [ 71.731212][ T5643] veth1_vlan: entered promiscuous mode [ 71.748432][ T5861] vlan2: entered promiscuous mode [ 71.753898][ T5861] dummy0: entered promiscuous mode [ 71.774922][ T5643] veth0_macvtap: entered promiscuous mode [ 71.791180][ T5643] veth1_macvtap: entered promiscuous mode [ 71.802532][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.821869][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.830774][ T5865] syzkaller0: entered promiscuous mode [ 71.836772][ T5865] syzkaller0: entered allmulticast mode [ 71.858988][ T3430] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.868374][ T3430] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.872988][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 71.889265][ T3430] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.912942][ T3430] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.924938][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'. [ 71.963932][ T5880] tmpfs: Unknown parameter '01777777777777777777777' [ 71.970785][ T5881] loop0: detected capacity change from 0 to 512 [ 71.984546][ T5881] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 71.988758][ T5883] loop5: detected capacity change from 0 to 128 [ 72.009298][ T5881] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: comm syz.0.742: inode #1792: comm syz.0.742: iget: illegal inode # [ 72.022934][ T5881] EXT4-fs (loop0): Remounting filesystem read-only [ 72.029562][ T5881] EXT4-fs (loop0): no journal found [ 72.034864][ T5881] EXT4-fs (loop0): can't get journal size [ 72.051582][ T5888] loop6: detected capacity change from 0 to 7 [ 72.063198][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.069895][ T5881] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 72.072904][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 72.083167][ T5881] EXT4-fs (loop0): failed to initialize system zone (-22) [ 72.092145][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.106857][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 72.115171][ T5888] loop6: unable to read partition table [ 72.121005][ T5888] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 72.133722][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.143521][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 72.156261][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.165952][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 72.174066][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.183653][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 72.185763][ T5881] EXT4-fs (loop0): mount failed [ 72.196865][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.206475][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 72.215949][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.225551][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 72.281937][ T5897] syzkaller0: entered promiscuous mode [ 72.287508][ T5897] syzkaller0: entered allmulticast mode [ 72.296815][ T5881] loop0: detected capacity change from 0 to 256 [ 72.309392][ T5902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.745'. [ 72.347750][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 72.396880][ T5909] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.2.752: corrupted xattr block 95: invalid header [ 72.398711][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'. [ 72.420072][ T5891] xt_hashlimit: size too large, truncated to 1048576 [ 72.444073][ T5909] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.752: bg 0: block 7: invalid block bitmap [ 72.461846][ T5909] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 72.470928][ T5909] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.752: corrupted xattr block 95: invalid header [ 72.484848][ T5909] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 72.494286][ T5909] EXT4-fs (loop2): 1 orphan inode deleted [ 72.500621][ T5909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.550859][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.754'. [ 72.563500][ T5915] vlan2: entered allmulticast mode [ 72.574622][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.929258][ T5935] netlink: 'syz.0.762': attribute type 4 has an invalid length. [ 72.973474][ T5943] FAULT_INJECTION: forcing a failure. [ 72.973474][ T5943] name failslab, interval 1, probability 0, space 0, times 0 [ 72.986234][ T5943] CPU: 1 UID: 0 PID: 5943 Comm: syz.2.766 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.986260][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.986322][ T5943] Call Trace: [ 72.986329][ T5943] [ 72.986336][ T5943] __dump_stack+0x1d/0x30 [ 72.986360][ T5943] dump_stack_lvl+0x95/0xd0 [ 72.986493][ T5943] dump_stack+0x15/0x1b [ 72.986513][ T5943] should_fail_ex+0x263/0x280 [ 72.986542][ T5943] should_failslab+0x8c/0xb0 [ 72.986565][ T5943] __kmalloc_noprof+0xb8/0x580 [ 72.986663][ T5943] ? io_cache_alloc_new+0x2a/0xb0 [ 72.986684][ T5943] io_cache_alloc_new+0x2a/0xb0 [ 72.986702][ T5943] __io_prep_rw+0x118/0x710 [ 72.986725][ T5943] ? __rcu_read_unlock+0x4e/0x70 [ 72.986764][ T5943] io_prep_rwv+0x33/0x260 [ 72.986791][ T5943] io_prep_readv+0x1f/0x30 [ 72.986815][ T5943] io_submit_sqes+0x70e/0x11b0 [ 72.986927][ T5943] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 72.986952][ T5943] ? __rcu_read_unlock+0x4e/0x70 [ 72.986979][ T5943] ? get_pid_task+0x96/0xd0 [ 72.987043][ T5943] ? proc_fail_nth_write+0x13b/0x160 [ 72.987071][ T5943] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 72.987099][ T5943] ? vfs_write+0x86e/0x9f0 [ 72.987161][ T5943] ? __rcu_read_unlock+0x4e/0x70 [ 72.987227][ T5943] ? __fget_files+0x184/0x1c0 [ 72.987249][ T5943] ? mutex_lock+0x57/0x90 [ 72.987272][ T5943] ? mutex_unlock+0x4e/0x90 [ 72.987296][ T5943] ? fput+0x8f/0xc0 [ 72.987367][ T5943] __x64_sys_io_uring_enter+0x78/0x90 [ 72.987396][ T5943] x64_sys_call+0x27e4/0x3000 [ 72.987444][ T5943] do_syscall_64+0xc0/0x2a0 [ 72.987472][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.987493][ T5943] RIP: 0033:0x7f2e5a7baeb9 [ 72.987509][ T5943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.987641][ T5943] RSP: 002b:00007f2e59217028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 72.987660][ T5943] RAX: ffffffffffffffda RBX: 00007f2e5aa35fa0 RCX: 00007f2e5a7baeb9 [ 72.987673][ T5943] RDX: 0000000000000000 RSI: 00000000100847c0 RDI: 0000000000000005 [ 72.987695][ T5943] RBP: 00007f2e59217090 R08: 0000000000000000 R09: 0000000000000000 [ 72.987709][ T5943] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 72.987754][ T5943] R13: 00007f2e5aa36038 R14: 00007f2e5aa35fa0 R15: 00007ffc5910e088 [ 72.987772][ T5943] [ 73.125239][ T5952] netlink: 'syz.5.769': attribute type 3 has an invalid length. [ 73.224601][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.249410][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.257348][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.266953][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.287416][ T3300] loop6: unable to read partition table [ 73.296846][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.306473][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.328987][ T5962] syzkaller0: entered promiscuous mode [ 73.333798][ T5957] loop6: unable to read partition table [ 73.334492][ T5962] syzkaller0: entered allmulticast mode [ 73.359537][ T5957] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 73.643450][ T5992] FAULT_INJECTION: forcing a failure. [ 73.643450][ T5992] name failslab, interval 1, probability 0, space 0, times 0 [ 73.656501][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.786 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.656526][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.656540][ T5992] Call Trace: [ 73.656546][ T5992] [ 73.656574][ T5992] __dump_stack+0x1d/0x30 [ 73.656609][ T5992] dump_stack_lvl+0x95/0xd0 [ 73.656692][ T5992] dump_stack+0x15/0x1b [ 73.656709][ T5992] should_fail_ex+0x263/0x280 [ 73.656738][ T5992] should_failslab+0x8c/0xb0 [ 73.656837][ T5992] __kvmalloc_node_noprof+0x148/0x680 [ 73.656863][ T5992] ? alloc_netdev_mqs+0xa5/0xa40 [ 73.656881][ T5992] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 73.656978][ T5992] alloc_netdev_mqs+0xa5/0xa40 [ 73.657020][ T5992] ip6_tnl_locate+0x37e/0x4a0 [ 73.657073][ T5992] ip6_tnl_siocdevprivate+0x717/0xb30 [ 73.657098][ T5992] dev_ifsioc+0x923/0xf60 [ 73.657117][ T5992] dev_ioctl+0x78c/0x960 [ 73.657187][ T5992] sock_ioctl+0x593/0x610 [ 73.657213][ T5992] ? __pfx_sock_ioctl+0x10/0x10 [ 73.657233][ T5992] __se_sys_ioctl+0xce/0x140 [ 73.657328][ T5992] __x64_sys_ioctl+0x43/0x50 [ 73.657354][ T5992] x64_sys_call+0x14b0/0x3000 [ 73.657393][ T5992] do_syscall_64+0xc0/0x2a0 [ 73.657419][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.657439][ T5992] RIP: 0033:0x7fc3688daeb9 [ 73.657484][ T5992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.657576][ T5992] RSP: 002b:00007fc367337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.657602][ T5992] RAX: ffffffffffffffda RBX: 00007fc368b55fa0 RCX: 00007fc3688daeb9 [ 73.657614][ T5992] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 73.657626][ T5992] RBP: 00007fc367337090 R08: 0000000000000000 R09: 0000000000000000 [ 73.657647][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.657657][ T5992] R13: 00007fc368b56038 R14: 00007fc368b55fa0 R15: 00007ffc4ef96ee8 [ 73.657672][ T5992] [ 73.714271][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.893763][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.911418][ T5993] netlink: 'syz.6.785': attribute type 7 has an invalid length. [ 73.919162][ T5993] netlink: 'syz.6.785': attribute type 8 has an invalid length. [ 73.992956][ T29] kauditd_printk_skb: 8008 callbacks suppressed [ 73.992970][ T29] audit: type=1326 audit(1769856330.094:10331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.0.788" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3688daeb9 code=0x0 [ 74.312412][ T6006] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 74.320204][ T6006] netlink: 'syz.2.791': attribute type 2 has an invalid length. [ 74.361210][ T6012] usb usb1: usbfs: process 6012 (syz.2.793) did not claim interface 0 before use [ 74.488669][ T6019] Cannot find add_set index 3 as target [ 74.519970][ T6029] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.693048][ T6036] bond2: option ad_user_port_key: invalid value (1136) [ 74.700526][ T6036] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 74.710420][ T6036] bond2 (unregistering): Released all slaves [ 74.722646][ T6048] netlink: 'syz.2.806': attribute type 4 has an invalid length. [ 74.825375][ T6060] set_capacity_and_notify: 6 callbacks suppressed [ 74.825395][ T6060] loop5: detected capacity change from 0 to 512 [ 74.894982][ T29] audit: type=1326 audit(1769856330.975:10332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 74.913940][ T6060] EXT4-fs: Invalid want_extra_isize 91 [ 74.918653][ T29] audit: type=1326 audit(1769856330.975:10333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 74.947532][ T29] audit: type=1326 audit(1769856330.975:10334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 74.971237][ T29] audit: type=1326 audit(1769856330.975:10335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 74.983022][ T6079] loop2: detected capacity change from 0 to 128 [ 74.995122][ T29] audit: type=1326 audit(1769856330.975:10336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 75.025547][ T29] audit: type=1326 audit(1769856330.975:10337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 75.048914][ T29] audit: type=1326 audit(1769856330.975:10338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 75.072384][ T29] audit: type=1326 audit(1769856330.975:10339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 75.095939][ T29] audit: type=1326 audit(1769856330.975:10340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3688daeb9 code=0x7ffc0000 [ 75.176698][ T6086] FAULT_INJECTION: forcing a failure. [ 75.176698][ T6086] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 75.190003][ T6086] CPU: 1 UID: 0 PID: 6086 Comm: syz.2.820 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.190070][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.190082][ T6086] Call Trace: [ 75.190089][ T6086] [ 75.190098][ T6086] __dump_stack+0x1d/0x30 [ 75.190126][ T6086] dump_stack_lvl+0x95/0xd0 [ 75.190194][ T6086] dump_stack+0x15/0x1b [ 75.190337][ T6086] should_fail_ex+0x263/0x280 [ 75.190371][ T6086] should_fail_alloc_page+0xf2/0x100 [ 75.190399][ T6086] __alloc_frozen_pages_noprof+0x108/0x350 [ 75.190476][ T6086] alloc_pages_mpol+0xb3/0x260 [ 75.190518][ T6086] folio_alloc_mpol_noprof+0x39/0x80 [ 75.190551][ T6086] shmem_get_folio_gfp+0x3da/0xd60 [ 75.190648][ T6086] shmem_write_begin+0xfc/0x1f0 [ 75.190685][ T6086] generic_perform_write+0x183/0x490 [ 75.190716][ T6086] shmem_file_write_iter+0xc5/0xf0 [ 75.190755][ T6086] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 75.190792][ T6086] vfs_write+0x5a6/0x9f0 [ 75.190817][ T6086] ksys_write+0xdc/0x1a0 [ 75.190842][ T6086] __x64_sys_write+0x40/0x50 [ 75.190938][ T6086] x64_sys_call+0x2847/0x3000 [ 75.190964][ T6086] do_syscall_64+0xc0/0x2a0 [ 75.190995][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.191016][ T6086] RIP: 0033:0x7f2e5a77b78e [ 75.191036][ T6086] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 75.191056][ T6086] RSP: 002b:00007f2e59216da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.191087][ T6086] RAX: ffffffffffffffda RBX: 00007f2e592176c0 RCX: 00007f2e5a77b78e [ 75.191104][ T6086] RDX: 0000000000040000 RSI: 00007f2e50df7000 RDI: 0000000000000005 [ 75.191131][ T6086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.191164][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 75.191175][ T6086] R13: 00007f2e59216ee0 R14: 00007f2e59216ea0 R15: 00007f2e50df7000 [ 75.191193][ T6086] [ 75.405255][ T6088] loop0: detected capacity change from 0 to 512 [ 75.419719][ T6096] netlink: 'syz.6.827': attribute type 10 has an invalid length. [ 75.461000][ T6096] team0: Port device geneve1 added [ 75.496189][ T6088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.514653][ T6105] loop5: detected capacity change from 0 to 512 [ 75.525121][ T6088] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.568656][ T6105] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.582910][ T6105] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 75.591417][ T6105] System zones: 1-12 [ 75.595885][ T6105] EXT4-fs (loop5): 1 truncate cleaned up [ 75.602602][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.605312][ T6105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.630797][ T6109] ------------[ cut here ]------------ [ 75.636359][ T6109] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 75.661322][ T6109] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.7.824/6109 [ 75.672461][ T6109] Modules linked in: [ 75.676463][ T6109] CPU: 0 UID: 0 PID: 6109 Comm: syz.7.824 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.686314][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.696456][ T6109] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 75.702750][ T6109] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 75.722437][ T6109] RSP: 0018:ffffc90008b5b388 EFLAGS: 00010246 [ 75.728728][ T6109] RAX: ffff88810b345d10 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 75.736830][ T6109] RDX: ffffffff867f0735 RSI: ffffffff866bb4e7 RDI: ffffffff86fb97b0 [ 75.744903][ T6109] RBP: ffff88811aa8e270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 75.753042][ T6109] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811aa8e230 [ 75.761187][ T6109] R13: 00000000ffffdfcc R14: ffff88811aa8e27c R15: ffff88811aa8e268 [ 75.769313][ T6109] FS: 00007fb68d5566c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 75.778639][ T6109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.785342][ T6109] CR2: 00007f649c5040c0 CR3: 000000011b7ca000 CR4: 00000000003506f0 [ 75.793337][ T6109] Call Trace: [ 75.796856][ T6109] [ 75.799892][ T6109] reg_set_min_max+0x1c8/0x260 [ 75.804686][ T6109] check_cond_jmp_op+0x13bd/0x1a80 [ 75.809846][ T6109] do_check+0x440c/0x9060 [ 75.814208][ T6109] do_check_common+0xd0f/0x1630 [ 75.819271][ T6109] bpf_check+0x2f6d/0xc7e0 [ 75.823749][ T6109] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 75.829928][ T6109] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 75.835753][ T6109] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 75.841659][ T6109] ? css_rstat_updated+0xbb/0x280 [ 75.846844][ T6109] ? try_charge_memcg+0x215/0xa10 [ 75.851913][ T6109] ? pcpu_block_refresh_hint+0x10b/0x170 [ 75.857762][ T6109] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 75.864131][ T6109] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 75.870548][ T6109] ? css_rstat_updated+0xbb/0x280 [ 75.875630][ T6109] ? mod_memcg_state+0x182/0x260 [ 75.880563][ T6109] ? __rcu_read_unlock+0x4e/0x70 [ 75.885527][ T6109] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 75.891584][ T6109] ? pcpu_alloc_noprof+0xb08/0x1010 [ 75.896846][ T6109] ? should_fail_ex+0x30/0x280 [ 75.901698][ T6109] ? __kmalloc_noprof+0x2a3/0x580 [ 75.906745][ T6109] ? security_bpf_prog_load+0x60/0x140 [ 75.912256][ T6109] ? selinux_bpf_prog_load+0xac/0xd0 [ 75.917578][ T6109] ? security_bpf_prog_load+0x9e/0x140 [ 75.923089][ T6109] bpf_prog_load+0xf76/0x1140 [ 75.927830][ T6109] ? security_bpf+0x2b/0x90 [ 75.932403][ T6109] __sys_bpf+0x469/0x7b0 [ 75.936716][ T6109] __x64_sys_bpf+0x41/0x50 [ 75.941326][ T6109] x64_sys_call+0x28e1/0x3000 [ 75.946071][ T6109] do_syscall_64+0xc0/0x2a0 [ 75.950633][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.956584][ T6109] RIP: 0033:0x7fb68eb1aeb9 [ 75.961015][ T6109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.981125][ T6109] RSP: 002b:00007fb68d556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.989609][ T6109] RAX: ffffffffffffffda RBX: 00007fb68ed96090 RCX: 00007fb68eb1aeb9 [ 75.997720][ T6109] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 76.005802][ T6109] RBP: 00007fb68eb88c1f R08: 0000000000000000 R09: 0000000000000000 [ 76.013940][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.021949][ T6109] R13: 00007fb68ed96128 R14: 00007fb68ed96090 R15: 00007ffc68f4bdd8 [ 76.030109][ T6109] [ 76.033179][ T6109] ---[ end trace 0000000000000000 ]--- [ 76.039226][ T6119] wireguard0: entered promiscuous mode [ 76.044799][ T6119] wireguard0: entered allmulticast mode [ 76.051471][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.124391][ T6131] loop7: detected capacity change from 0 to 256 [ 76.173477][ T6133] xt_hashlimit: size too large, truncated to 1048576 [ 76.242799][ T6127] loop5: detected capacity change from 0 to 8192 [ 76.255993][ T6127] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.309963][ T6144] netlink: 'syz.7.842': attribute type 10 has an invalid length. [ 76.314581][ T6147] loop0: detected capacity change from 0 to 512 [ 76.341586][ T6147] EXT4-fs: Ignoring removed bh option [ 76.369984][ T6147] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.376486][ T6144] team0: Device vxcan1 is of different type [ 76.405435][ T6147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.419369][ T6147] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.453014][ T6156] loop2: detected capacity change from 0 to 764 [ 76.459734][ T6156] iso9660: Bad value for 'map' [ 76.525407][ T6168] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.843: iget: bad i_size value: 2533274857506816 [ 76.551035][ T6173] __nla_validate_parse: 13 callbacks suppressed [ 76.551053][ T6173] netlink: 68 bytes leftover after parsing attributes in process `syz.6.848'. [ 76.587387][ T6178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6178 comm=syz.5.849 [ 76.710789][ T6198] tipc: Enabled bearer , priority 0 [ 76.722036][ T6198] syzkaller0: entered promiscuous mode [ 76.727567][ T6198] syzkaller0: entered allmulticast mode [ 76.741619][ T6198] tipc: Resetting bearer [ 76.751179][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz.5.858'. [ 76.761685][ T6197] tipc: Resetting bearer [ 76.774339][ T6197] tipc: Disabling bearer [ 76.899225][ T6227] loop5: detected capacity change from 0 to 512 [ 76.953461][ T6227] EXT4-fs: Ignoring removed nobh option [ 76.970318][ T6227] EXT4-fs (loop5): SIPHASH is not a valid default hash value [ 76.982649][ T6243] netlink: 'syz.6.869': attribute type 10 has an invalid length. [ 76.999921][ T6243] team0: Port device dummy0 added [ 77.026307][ T6243] team0: Port device dummy0 removed [ 77.033878][ T6247] netlink: 56 bytes leftover after parsing attributes in process `syz.2.868'. [ 77.060672][ T6243] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.095574][ T6255] xt_TPROXY: Can be used only with -p tcp or -p udp [ 77.144910][ T6263] netlink: 16 bytes leftover after parsing attributes in process `syz.6.871'. [ 77.195520][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.234998][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.876'. [ 77.362893][ T6300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.884'. [ 77.371923][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'. [ 77.406864][ T6302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.422273][ T6302] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 77.505145][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 77.513972][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 77.527702][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 77.541402][ T6323] FAULT_INJECTION: forcing a failure. [ 77.541402][ T6323] name failslab, interval 1, probability 0, space 0, times 0 [ 77.542491][ T6320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.554059][ T6323] CPU: 0 UID: 0 PID: 6323 Comm: syz.6.890 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.554196][ T6323] Tainted: [W]=WARN [ 77.554203][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.554215][ T6323] Call Trace: [ 77.554223][ T6323] [ 77.554233][ T6323] __dump_stack+0x1d/0x30 [ 77.554260][ T6323] dump_stack_lvl+0x95/0xd0 [ 77.554312][ T6323] dump_stack+0x15/0x1b [ 77.554333][ T6323] should_fail_ex+0x263/0x280 [ 77.554364][ T6323] should_failslab+0x8c/0xb0 [ 77.554386][ T6323] __kmalloc_cache_noprof+0x64/0x4a0 [ 77.554456][ T6323] ? genl_start+0x117/0x390 [ 77.554556][ T6323] genl_start+0x117/0x390 [ 77.554583][ T6323] __netlink_dump_start+0x334/0x520 [ 77.554618][ T6323] genl_family_rcv_msg_dumpit+0x1a5/0x210 [ 77.554669][ T6323] ? __pfx_genl_start+0x10/0x10 [ 77.554763][ T6323] ? __pfx_genl_dumpit+0x10/0x10 [ 77.554786][ T6323] ? __pfx_genl_done+0x10/0x10 [ 77.554814][ T6323] genl_rcv_msg+0x400/0x470 [ 77.554840][ T6323] ? __pfx_nl802154_dump_llsec_dev+0x10/0x10 [ 77.554866][ T6323] netlink_rcv_skb+0x123/0x220 [ 77.554973][ T6323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 77.555068][ T6323] genl_rcv+0x28/0x40 [ 77.555091][ T6323] netlink_unicast+0x5c0/0x690 [ 77.555154][ T6323] netlink_sendmsg+0x5c8/0x6f0 [ 77.555183][ T6323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.555204][ T6323] ____sys_sendmsg+0x5af/0x600 [ 77.555228][ T6323] ___sys_sendmsg+0x195/0x1e0 [ 77.555259][ T6323] __x64_sys_sendmsg+0xd4/0x160 [ 77.555294][ T6323] x64_sys_call+0x17ba/0x3000 [ 77.555320][ T6323] do_syscall_64+0xc0/0x2a0 [ 77.555425][ T6323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.555448][ T6323] RIP: 0033:0x7f23a16faeb9 [ 77.555474][ T6323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.555492][ T6323] RSP: 002b:00007f23a0157028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.555513][ T6323] RAX: ffffffffffffffda RBX: 00007f23a1975fa0 RCX: 00007f23a16faeb9 [ 77.555535][ T6323] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000004 [ 77.555601][ T6323] RBP: 00007f23a0157090 R08: 0000000000000000 R09: 0000000000000000 [ 77.555615][ T6323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.555628][ T6323] R13: 00007f23a1976038 R14: 00007f23a1975fa0 R15: 00007ffd3e05fb58 [ 77.555648][ T6323] [ 77.565496][ T6319] loop7: detected capacity change from 0 to 512 [ 77.670490][ T48] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.858214][ T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.867639][ T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.881256][ T6341] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 77.885084][ T6319] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.898763][ T6341] EXT4-fs (loop6): invalid journal inode [ 77.907814][ T6341] EXT4-fs (loop6): can't get journal size [ 77.913695][ T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.916525][ T6319] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.923376][ T6341] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 77.941184][ T6341] EXT4-fs (loop6): orphan cleanup on readonly fs [ 77.951166][ T6341] EXT4-fs (loop6): 1 truncate cleaned up [ 77.963984][ T6341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.969914][ T6319] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #2: comm syz.7.889: corrupted inode contents [ 77.998033][ T6319] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #2: comm syz.7.889: mark_inode_dirty error [ 78.012551][ T6355] validate_nla: 4 callbacks suppressed [ 78.012565][ T6355] netlink: 'syz.0.896': attribute type 3 has an invalid length. [ 78.068662][ T6319] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #2: comm syz.7.889: corrupted inode contents [ 78.086152][ T6361] EXT4-fs: dax option not supported [ 78.121871][ T5147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.132970][ T6319] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.889: mark_inode_dirty error [ 78.188349][ T6374] tipc: Enabling of bearer rejected, failed to enable media [ 78.203070][ T6375] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.212170][ T6375] EXT4-fs (loop5): filesystem is read-only [ 78.249367][ T5643] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.272812][ T6383] FAULT_INJECTION: forcing a failure. [ 78.272812][ T6383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.283268][ T6375] bridge_slave_0: default FDB implementation only supports local addresses [ 78.286114][ T6383] CPU: 0 UID: 0 PID: 6383 Comm: syz.0.908 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.286148][ T6383] Tainted: [W]=WARN [ 78.286286][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.286320][ T6383] Call Trace: [ 78.286328][ T6383] [ 78.286337][ T6383] __dump_stack+0x1d/0x30 [ 78.286363][ T6383] dump_stack_lvl+0x95/0xd0 [ 78.286386][ T6383] dump_stack+0x15/0x1b [ 78.286437][ T6383] should_fail_ex+0x263/0x280 [ 78.286470][ T6383] should_fail+0xb/0x20 [ 78.286498][ T6383] should_fail_usercopy+0x1a/0x20 [ 78.286592][ T6383] _copy_from_user+0x1c/0xb0 [ 78.286672][ T6383] rds_setsockopt+0x4e6/0xa30 [ 78.286758][ T6383] ? __pfx_rds_setsockopt+0x10/0x10 [ 78.286849][ T6383] __sys_setsockopt+0x184/0x200 [ 78.286884][ T6383] __x64_sys_setsockopt+0x64/0x80 [ 78.286917][ T6383] x64_sys_call+0x21d5/0x3000 [ 78.286978][ T6383] do_syscall_64+0xc0/0x2a0 [ 78.287010][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.287033][ T6383] RIP: 0033:0x7fc3688daeb9 [ 78.287050][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.287131][ T6383] RSP: 002b:00007fc367337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.287229][ T6383] RAX: ffffffffffffffda RBX: 00007fc368b55fa0 RCX: 00007fc3688daeb9 [ 78.287245][ T6383] RDX: 0000000000000006 RSI: 0000000000000114 RDI: 0000000000000003 [ 78.287258][ T6383] RBP: 00007fc367337090 R08: 0000000000000004 R09: 0000000000000000 [ 78.287272][ T6383] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000001 [ 78.287286][ T6383] R13: 00007fc368b56038 R14: 00007fc368b55fa0 R15: 00007ffc4ef96ee8 [ 78.287370][ T6383] [ 78.292795][ T6385] Invalid logical block size (8) [ 78.326050][ T6375] ip6t_srh: unknown srh match flags 4000 [ 78.499554][ T6385] EXT4-fs (loop2): 1 truncate cleaned up [ 78.519694][ T6385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.605747][ T6385] netlink: 'syz.2.909': attribute type 4 has an invalid length. [ 78.690932][ T6403] tipc: Started in network mode [ 78.695900][ T6403] tipc: Node identity c2631a404972, cluster identity 4711 [ 78.703039][ T6403] tipc: Enabled bearer , priority 0 [ 78.716659][ T6403] syzkaller0: entered promiscuous mode [ 78.717274][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.722220][ T6403] syzkaller0: entered allmulticast mode [ 78.739593][ T6403] tipc: Resetting bearer [ 78.756230][ T6402] tipc: Resetting bearer [ 78.771806][ T6402] tipc: Disabling bearer [ 78.800489][ T6410] SET target dimension over the limit! [ 78.885800][ T6422] tipc: Enabled bearer , priority 0 [ 78.904210][ T6422] syzkaller0: entered promiscuous mode [ 78.909765][ T6422] syzkaller0: entered allmulticast mode [ 78.929692][ T6422] tipc: Resetting bearer [ 78.936675][ T6421] tipc: Resetting bearer [ 79.042500][ T6434] FAULT_INJECTION: forcing a failure. [ 79.042500][ T6434] name failslab, interval 1, probability 0, space 0, times 0 [ 79.055287][ T6434] CPU: 0 UID: 0 PID: 6434 Comm: syz.7.927 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.055318][ T6434] Tainted: [W]=WARN [ 79.055324][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.055386][ T6434] Call Trace: [ 79.055394][ T6434] [ 79.055403][ T6434] __dump_stack+0x1d/0x30 [ 79.055430][ T6434] dump_stack_lvl+0x95/0xd0 [ 79.055452][ T6434] dump_stack+0x15/0x1b [ 79.055478][ T6434] should_fail_ex+0x263/0x280 [ 79.055507][ T6434] should_failslab+0x8c/0xb0 [ 79.055533][ T6434] __kmalloc_noprof+0xb8/0x580 [ 79.055621][ T6434] ? ___neigh_create+0x4c9/0x1290 [ 79.055646][ T6434] ___neigh_create+0x4c9/0x1290 [ 79.055675][ T6434] __neigh_create+0x54/0x70 [ 79.055698][ T6434] ip6_neigh_lookup+0x2a5/0x400 [ 79.055774][ T6434] ip6_dst_neigh_lookup+0x8a/0xb0 [ 79.055803][ T6434] addr_resolve+0xb1f/0xef0 [ 79.055833][ T6434] ? rdma_resolve_ip+0x4d/0x4b0 [ 79.055867][ T6434] rdma_resolve_ip+0x2d8/0x4b0 [ 79.055967][ T6434] ? __pfx_addr_handler+0x10/0x10 [ 79.055995][ T6434] rdma_resolve_addr+0x544/0x1350 [ 79.056022][ T6434] ? terminate_walk+0x1e6/0x210 [ 79.056048][ T6434] ? path_openat+0x1d94/0x23c0 [ 79.056115][ T6434] ucma_resolve_ip+0x283/0x370 [ 79.056151][ T6434] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 79.056185][ T6434] ucma_write+0x1c9/0x260 [ 79.056226][ T6434] vfs_writev+0x42b/0x900 [ 79.056255][ T6434] ? __pfx_ucma_write+0x10/0x10 [ 79.056295][ T6434] do_writev+0xe9/0x210 [ 79.056373][ T6434] __x64_sys_writev+0x45/0x50 [ 79.056399][ T6434] x64_sys_call+0x1ba5/0x3000 [ 79.056496][ T6434] do_syscall_64+0xc0/0x2a0 [ 79.056530][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.056553][ T6434] RIP: 0033:0x7fb68eb1aeb9 [ 79.056572][ T6434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.056592][ T6434] RSP: 002b:00007fb68d577028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 79.056626][ T6434] RAX: ffffffffffffffda RBX: 00007fb68ed95fa0 RCX: 00007fb68eb1aeb9 [ 79.056709][ T6434] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000d [ 79.056725][ T6434] RBP: 00007fb68d577090 R08: 0000000000000000 R09: 0000000000000000 [ 79.056780][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.056791][ T6434] R13: 00007fb68ed96038 R14: 00007fb68ed95fa0 R15: 00007ffc68f4bdd8 [ 79.056811][ T6434] [ 79.337262][ T6421] tipc: Disabling bearer [ 79.397206][ T6446] syzkaller0: entered allmulticast mode [ 79.403785][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 79.403879][ T29] audit: type=1400 audit(1769856335.505:10422): avc: denied { ioctl } for pid=6445 comm="syz.7.932" path="socket:[15605]" dev="sockfs" ino=15605 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 79.453424][ T6448] vlan3: entered promiscuous mode [ 79.458583][ T6448] dummy0: entered promiscuous mode [ 79.467381][ T29] audit: type=1400 audit(1769856335.575:10423): avc: denied { map } for pid=6451 comm="syz.5.933" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.491626][ T29] audit: type=1400 audit(1769856335.575:10424): avc: denied { execute } for pid=6451 comm="syz.5.933" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.537198][ T6452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.601253][ T6463] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 79.624331][ T6463] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff1b) [ 79.665623][ T29] audit: type=1400 audit(1769856335.765:10425): avc: denied { setattr } for pid=6469 comm="syz.6.941" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 79.753020][ T6479] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 79.760191][ T6479] syzkaller0: linktype set to 4 [ 79.832316][ T6493] FAULT_INJECTION: forcing a failure. [ 79.832316][ T6493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.845521][ T6493] CPU: 0 UID: 0 PID: 6493 Comm: syz.0.950 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.845629][ T6493] Tainted: [W]=WARN [ 79.845636][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.845650][ T6493] Call Trace: [ 79.845658][ T6493] [ 79.845666][ T6493] __dump_stack+0x1d/0x30 [ 79.845693][ T6493] dump_stack_lvl+0x95/0xd0 [ 79.845787][ T6493] dump_stack+0x15/0x1b [ 79.845810][ T6493] should_fail_ex+0x263/0x280 [ 79.845915][ T6493] should_fail+0xb/0x20 [ 79.845946][ T6493] should_fail_usercopy+0x1a/0x20 [ 79.845982][ T6493] _copy_to_user+0x20/0xa0 [ 79.846005][ T6493] simple_read_from_buffer+0xb5/0x130 [ 79.846077][ T6493] proc_fail_nth_read+0x10e/0x150 [ 79.846102][ T6493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.846164][ T6493] vfs_read+0x1ab/0x7f0 [ 79.846182][ T6493] ? __rcu_read_unlock+0x4e/0x70 [ 79.846209][ T6493] ? __fget_files+0x184/0x1c0 [ 79.846265][ T6493] ? mutex_lock+0x57/0x90 [ 79.846318][ T6493] ksys_read+0xdc/0x1a0 [ 79.846336][ T6493] __x64_sys_read+0x40/0x50 [ 79.846385][ T6493] x64_sys_call+0x2889/0x3000 [ 79.846412][ T6493] do_syscall_64+0xc0/0x2a0 [ 79.846492][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.846571][ T6493] RIP: 0033:0x7fc36889b78e [ 79.846588][ T6493] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.846612][ T6493] RSP: 002b:00007fc367336fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.846635][ T6493] RAX: ffffffffffffffda RBX: 00007fc3673376c0 RCX: 00007fc36889b78e [ 79.846715][ T6493] RDX: 000000000000000f RSI: 00007fc3673370a0 RDI: 0000000000000005 [ 79.846728][ T6493] RBP: 00007fc367337090 R08: 0000000000000000 R09: 0000000000000000 [ 79.846740][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.846752][ T6493] R13: 00007fc368b56038 R14: 00007fc368b55fa0 R15: 00007ffc4ef96ee8 [ 79.846773][ T6493] [ 80.073817][ T6499] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.124284][ T29] audit: type=1400 audit(1769856336.226:10426): avc: denied { getopt } for pid=6498 comm="syz.2.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.156238][ T6499] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.223004][ T6518] set_capacity_and_notify: 8 callbacks suppressed [ 80.223016][ T6518] loop6: detected capacity change from 0 to 1024 [ 80.236299][ T6518] EXT4-fs: Ignoring removed bh option [ 80.248631][ T6499] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.280122][ T6518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.285870][ T6524] sctp: [Deprecated]: syz.7.964 (pid 6524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.285870][ T6524] Use struct sctp_sack_info instead [ 80.314944][ T6518] EXT4-fs (loop6): shut down requested (0) [ 80.322231][ T29] audit: type=1400 audit(1769856336.426:10427): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 80.344442][ T29] audit: type=1400 audit(1769856336.426:10428): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.366499][ T29] audit: type=1400 audit(1769856336.426:10429): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.388397][ T29] audit: type=1400 audit(1769856336.426:10430): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.409833][ T29] audit: type=1400 audit(1769856336.426:10431): avc: denied { create } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.441866][ T6499] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.453179][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.478971][ T3300] ================================================================== [ 80.487085][ T3300] BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink [ 80.494217][ T3300] [ 80.496537][ T3300] write to 0xffff8881053e83dc of 4 bytes by task 3304 on cpu 0: [ 80.502867][ T6535] netlink: 'syz.7.968': attribute type 1 has an invalid length. [ 80.504157][ T3300] simple_unlink+0x54/0x80 [ 80.504191][ T3300] shmem_unlink+0x12d/0x140 [ 80.520794][ T3300] vfs_unlink+0x28b/0x440 [ 80.525121][ T3300] do_unlinkat+0x1e2/0x4b0 [ 80.529542][ T3300] __x64_sys_unlink+0x2e/0x40 [ 80.530532][ T6535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.534221][ T3300] x64_sys_call+0x2f48/0x3000 [ 80.534252][ T3300] do_syscall_64+0xc0/0x2a0 [ 80.534279][ T3300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.534300][ T3300] [ 80.534307][ T3300] read to 0xffff8881053e83dc of 4 bytes by task 3300 on cpu 1: [ 80.565967][ T3300] fill_mg_cmtime+0x5b/0x260 [ 80.570591][ T3300] generic_fillattr+0x24a/0x340 [ 80.575431][ T3300] shmem_getattr+0x181/0x200 [ 80.580019][ T3300] vfs_getattr_nosec+0x146/0x1e0 [ 80.584949][ T3300] vfs_getattr+0x48/0x60 [ 80.589189][ T3300] vfs_statx_path+0x28/0x140 [ 80.593780][ T3300] vfs_statx+0xc4/0x170 [ 80.597929][ T3300] vfs_fstatat+0x115/0x170 [ 80.602339][ T3300] __se_sys_newfstatat+0x55/0x3e0 [ 80.607382][ T3300] __x64_sys_newfstatat+0x55/0x70 [ 80.612485][ T3300] x64_sys_call+0x111f/0x3000 [ 80.617155][ T3300] do_syscall_64+0xc0/0x2a0 [ 80.621652][ T3300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.627541][ T3300] [ 80.629855][ T3300] value changed: 0x22eedca8 -> 0x239c04cb [ 80.635640][ T3300] [ 80.638069][ T3300] Reported by Kernel Concurrency Sanitizer on: [ 80.644293][ T3300] CPU: 1 UID: 0 PID: 3300 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.655324][ T3300] Tainted: [W]=WARN [ 80.659201][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.669245][ T3300] ================================================================== [ 80.700522][ T5147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.726635][ T6539] loop5: detected capacity change from 0 to 1024 [ 80.735564][ T6539] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 80.745463][ T6539] EXT4-fs (loop5): group descriptors corrupted! [ 80.772034][ T6537] bond1: (slave gretap1): making interface the new active one [ 80.781292][ T6537] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 80.804156][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.815651][ T3464] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.823976][ T3464] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.835256][ T3464] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0