last executing test programs: 20.985051045s ago: executing program 0 (id=622): r0 = io_uring_setup(0x516, &(0x7f0000000540)={0x0, 0x7dc6, 0x1, 0x503fa, 0x8100014a}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = epoll_create1(0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000340)={0x90000019}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd0, &(0x7f0000000080)=0x6, 0x4) 20.736167229s ago: executing program 0 (id=627): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @random="b1e912caa381", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40008c0}, 0x24000840) close(r1) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r1, 0x0, r3) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000300)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/159, 0x9f}], 0x1) 20.643672015s ago: executing program 0 (id=628): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x4, 0xfffffffe) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x2e}, 0xffffff00, 0x0, 'wlan0\x00', 'gre0\x00', {0xff}, {}, 0x5e, 0x2, 0xc}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'veth1_to_hsr\x00', {0x7}}}}, {{@uncond, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}, {[0x9, 0x5]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x98, 0x90, {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000400)=0x3) setsockopt$inet_mreq(r4, 0x0, 0x3, &(0x7f0000000440)={@empty, @broadcast}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000480)={0x2314, 0x8, 0x3, 0xf001}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x819830dc6c0dc7ad}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48844}, 0x44850) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000600)={@empty, @multicast1}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000640)={0x0, "3cd9681eb589da2152efcc5cc8a13491"}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001640)={0x2, 0x1, @start={r6, 0x1, "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", "73ca84bc814b75b6663b5a2d5e712c2b16d4f32194ed8f6d5e249c1f05123d16ca292ea22e762c46353e6245ce229d2d3ea1fbed4e97f265435cb21d090d57e75906ac551041cb89a28a813498146cfeae9a18d161f51c28e4d9fafbed994c3b145a228bec332ab936096afc038163ea98e312c8e001f92a294d2e6434324b00f8bfd8dcbfcf057d0abac8649339c6224e319b2558eaf28194fbc71d8d5030c1dc1c7cddc97c178af4fe3963a26a16f8d269a6f0262e903fa6861cf6fa16b635f92e32a75a22b6425b184fb60ba8f2795f938c5b184ca41c23544ec1b3e051fa1fee1c3534fc6f280b7d92c5b85e5338f17de28f0c5922751965c6c01e2c55352fc49118e2f633f898a25c03a4ef3c5f67fa7990e95f0fc93e3633465c0db4e5210733bf0bc84226ddc61fb3551f4e13084c4be9998e69afc8faa84587a68e52e0df209320f33e7c67331611379cfeb2dc4e6aac4a140da55335cef100f3f260ac38e765278578da30af4df8fef53b5a991de0afde29235a4aed032bdba4c12e04c472b230b96b25557cf6f5d6bd38f46f57ddb09c25ecf180366c5d05f75f252b456386c45884e391879fe6dd2f577b2107c3df82a23ad943c0c525acd63dbf4caad9e0208c867e9b745db40ee013cf9bd2c235d12bc9bd7525195149e68fca3ab3e1ed4260d2c53f4a5f293172ef9f224a8342575116d3d386f2f81f4fe43daf7396e995ceb01593df575100210a4ce4464ceeecdfb4a7c888ae4fc247fa3d2f4876509daad9b8b301a9973e19968baa526a9e7748e5aeb7ceb8ed3f5516b96ba1cdd0e4f9bbbeb4ea2b0839c613f5c7a6fe107d4196f4cb89d70bd1da3b727c600becf7bfca74e0ae632d632c1e08349f5a7b52b7f2d7ffcccf530a3c0b0584c8bf0f260a705899ad33d14e79d2ffcf00b2c149221fae81089900022da491fb1cadedf168af8f7b026b047272f50dbf4317c57be08168bd8c838c80296a6cd54392af12ac5c70e3adbdc9a610c0d5a25e72b9e11ab7b0cccad891e659e00b8f73ae8104d7a9d4783e8aac8a0f08defbd6d839d734e166c10767ec7a6134cbbc9e284cbe6edc0ad20de994633647b7a75563bc18250e579bafd55167b756037a17eda710a2220fbf183fbaf8b4c15ad0bca48e9c41c7fc0c01c25d778f13b679c7879e9be770f12c4a94714c928d08374e30d929066ed5247bab4a358efc42b959bee106b0392f97288d7cfb0d3aa26cf6f0f44b078808aa14f4bf3a1711400f675f654494ddcf9d1e80257259501452d0b1589d8fba385241f2ba78ddccb2dfef94d3b5889e86e1981ad19d00df80e065c8f701ff0e02c54af46bf764d2a246a6a83e4af4bbb2180a858282bb840489b6f371d93607a65ee6d9986e683ec59a1511a2734d3f0d2cc2bfaf4f1f4e50626c234ba7f1c82a0ae49c90a4ea353324"}, [0x1, 0x401, 0xffffffffffff291b, 0x10000, 0x8000, 0x3ca6, 0x6, 0x7f, 0xffffffffffffd5bf, 0x800, 0x8000, 0x1, 0x7fff, 0x6, 0x1c, 0x8, 0xc, 0x5, 0x1, 0x3, 0x4, 0x3, 0x2, 0xf, 0x3a5e, 0x8, 0x1000, 0x8, 0x9, 0x2, 0xb3c5, 0x9, 0x6e1a, 0xf2, 0x7f, 0xffffffff, 0x47, 0x4, 0x6, 0x7fff, 0x1, 0x43bd69b2, 0x2, 0x6, 0x4, 0x5, 0x2, 0x1, 0x2e, 0x1, 0x5bcc, 0x5, 0x2, 0x4, 0x5, 0xfffffffffffffffa, 0x4, 0x80, 0x40, 0x7f, 0x8, 0x9, 0x7, 0x7]}) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000002080)={@multicast1, @rand_addr=0x64010102, 0x0, "b731b7b18acd3362c24355f876ad584de2cb181af7006f0385501c258f71e3d0", 0x8, 0x3, 0x2, 0x16d}, 0x3c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f00000020c0)) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002140), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x34, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xbdf}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40085}, 0x801) stat(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r9, r10) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002440)=@IORING_OP_SEND={0x1a, 0x11, 0x0, r7, 0x0, &(0x7f0000002380)="f681815fcfcf766052d86e693969c0828af12387198df909537863928e21e6898922450d1642aca1a4b9c3e3eeb77934be945f589235c280c21a4f335b09ecf994454f66c29a607fc3877bde72aed9c1831066e9f87578b490d367aac0e6be8758fbcb58327915f4bdf7a4a5602c72cdbdd9724c24fc6b34d85fce2a97fc1d43383519577b01f5bd2787b00a6f077779f7e1db7edfbe1a6fac99f345c43d14b2fe", 0xa1, 0x8885, 0x0, {0x0, r11}}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002480)=0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000024c0)=0x0) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002500)={0xffffffffffffffff}, 0x4) kcmp$KCMP_EPOLL_TFD(r12, r13, 0x7, r14, &(0x7f0000002540)={r1, r4, 0x2}) 20.606485627s ago: executing program 0 (id=630): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={0x0}) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x20441, 0x42) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) (async) fallocate(r0, 0x0, 0x0, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 20.320985743s ago: executing program 0 (id=633): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) (async) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) setreuid(0x0, 0xee00) mlockall(0x6) brk(0x689d80000003) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff19, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="92543df7ed72b4c898dc75fc", @ANYRES64, @ANYRESHEX=r1], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000100039044000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fe8000000000000000000000000000aad957a55f6017f1438911d505bf9f44264620bca14ac203777a4f56d361fb6df66e6d4d479baf69236160fca65b466036b9d62a4e2e766efc287328cb2d874cfc4e1cd1ab900ff95c5eda1a77ede67b3f"], 0x5c}}, 0x0) 19.694112509s ago: executing program 0 (id=646): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x8}, 0x8216, 0x6, 0x11002, 0x0, 0x9484, 0x1, 0x400}, 0x0, 0xc, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28000000130a810100000000000000000200"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 19.68019895s ago: executing program 32 (id=646): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x8}, 0x8216, 0x6, 0x11002, 0x0, 0x9484, 0x1, 0x400}, 0x0, 0xc, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28000000130a810100000000000000000200"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 12.902143389s ago: executing program 2 (id=788): r0 = socket(0xa, 0x3, 0x3a) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r3 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900030073797a30000000000900010073797a310000000008000b4000000003640008800c000140000000008000", @ANYRES16=r1, @ANYBLOB="2ab3343a3b440ca2b0aa6063b17008ce2c421c6eea8695ae489d336a1a00edf6eb57f1ec22e5fc254a706c46e1dcf7ccb6b6e3aa342a1ebc5d7cc945cc2d836e6b883fb7e69b4dbe23bd2d8e820ba84ffd257bdf9d79f924f2b79df91959093a3729f54a07d2d011817595c5fcdaccec0e8dc104282bc5f6ba639aab959bff52abfe87fa69bbd297ca04e956eee6407d639a2576b8a6438723f5fc648a002a109ac135763622e48126fea1b145a553", @ANYRES16=r1], 0x92fc}}, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)=0x40000000) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000001940)={{0x1, 0x1, 0x18, r1, {r0}}, './bus\x00'}) close_range(r5, r3, 0x0) pwritev2(r2, 0x0, 0x0, 0x0, 0xc, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r2, &(0x7f00000002c0)="523d08c07fd82e27a4bb37e23c6b4057eb7cbdc89f78a583684a5d18ffc94ec04ce612a8d68869960661", &(0x7f0000000300)=""/9}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001280)={r2, 0x20, &(0x7f0000001240)={&(0x7f0000001080)=""/187, 0xbb, 0x0, &(0x7f0000001140)=""/253, 0xfd}}, 0x10) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001800)={0xffffffffffffffff, 0x9b, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x7, 0xb, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1800000012820000000000000800000003b34d02000000008520ffff000000000100000018360000050000000000000000bbb2001829000004000000010000000000000095000000000000000000000000000000000005b7240830eefe13c1b9b541afa20000"], &(0x7f0000000f00)='syzkaller\x00', 0x9, 0x8f, &(0x7f0000000f40)=""/143, 0x41100, 0x38, '\x00', 0x0, @fallback=0xf7797ae5c946bff2, r2, 0x8, &(0x7f0000001000)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001040)={0x0, 0x0, 0x5, 0xfffffffa}, 0x10, r8, r2, 0x0, &(0x7f0000001840)=[r2, r9], 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet(r7, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000080)=0x6, 0x4) 12.673771122s ago: executing program 2 (id=794): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a80ffffff000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00100000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 12.601199996s ago: executing program 2 (id=795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) fsopen(0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x300, 0x8) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f00000001c0)) 11.797526213s ago: executing program 2 (id=815): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)='i\x00b;12e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00if\x04\xae^\x05\x93;6I\x16M\x9b\xf6$\x87\x02L6\t\xb0h\xf74D\x81t\xbc\xd6\x90xXQ\xaf\x92\x12\xc1\x1c\xd2\xfc\xbf') r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c000000000000000000000000000000000000000000000000fe88000000020000000000000000010100000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000000000000000000000fdff00000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x4c050) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000340)="a905b8eb39e30b953f1d8e49b7288837bb9a45087a7670211a0513f6371b4421772eb395ec602f383f1706c3d88dbfc139ebe49670d726eaeff2f89dece60d78cdebf15972357a6ece58ec0fca0e57f794d27f54a0ab946c2e2cc9b2c4c37ac75b69ddaf2fcdf24de62325b1befa45dc254f81d7923cc50711dbc3213cad1c481bf961d946bd031e9e7796ca666597b90394619d33ce8b407e8231628da24ca0e0258e2986ca387f834841e5cb8272e901ccf871974a", 0xb6}, {&(0x7f0000000240)="7a058951edfe5e820a3f10788784a3e8d67723883b25267381109af2cd74c545ffe39c17875370dc083013187dae67c36e3f93272a334b20b24edf6ddfeabe3ff657d41ee7b210b93d3069a8bb72e64d54cc03c624de7376896000d5fb1c7d8ea4f3a3a6", 0x64}, {&(0x7f0000000140)="89d6242afc9d25f42e85da1d02cc2b", 0xf}, {&(0x7f0000000400)="d0eef00ab499e3946cc4e81a2ae0de2aeb35f50a4d44f2be9849b425d0bb2de5ad564ef488aa7f80d1dba7a0c221ce66588db7871c3e238d935efe182262d3317db633ecdbfb17aac5af5ce9088adc6396e5e73421eea5a6a3506678ffb32c89454f2d91bd1c31c3200a9e1406f46468d579f59a41edd3d9e37ab57ddb43e167c48ac32712d385f1a8861ac589b86d199ca910cb00dfdc2677d4d257adba8eac11a2ace8ef63bd0d1371", 0xaa}, {&(0x7f00000004c0)="cee14a934874e02c0f1729bcf1e6684f96521a9c29f62d4050c9b49c451932343dbdb17208a2a08dc01c279f63d1522f9d8fea484e527eb50c5361c9f9478e798f03", 0x42}], 0x5, 0x2, 0x25000000) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRES32], 0x1, 0x343, &(0x7f0000000bc0)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) rmdir(&(0x7f0000000040)='./control\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setfsuid(0xee00) r4 = syz_clone(0x908091, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0xff03, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x44054}, 0x20000893) sendfile(r6, r7, 0x0, 0xffffffff000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x68c41, 0x0) r9 = eventfd2(0x800, 0x0) move_pages(0x0, 0x10000000, 0xffffffffffffffff, &(0x7f0000000080)=[0x0], 0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x7, 0xb, r8, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r9}]) socket$inet_sctp(0x2, 0x1, 0x84) 11.487405881s ago: executing program 2 (id=819): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60e}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0x80000000}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f00000004c0)}}], 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x2e0, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r9, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004be86a9ba2d0a96a7"], 0x50) syz_io_uring_setup(0xc81, &(0x7f0000000000)={0x0, 0xf2d6, 0x1, 0x2, 0x301, 0x0, r9}, &(0x7f0000000140), &(0x7f00000001c0)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) 11.070965474s ago: executing program 2 (id=826): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x8d8, &(0x7f0000000080), 0x3, 0x42f, &(0x7f0000000940)="$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") fallocate(0xffffffffffffffff, 0x3, 0x6, 0xa4f) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0xfc}, 0xa, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000140)='/:\x00') r1 = open(&(0x7f0000000000)='./file1\x00', 0x135843, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x201005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000016c0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000001700)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf", @ANYBLOB="426eae24f971bec33f81699ae901688dd2ba3baf5ab43343bad395cae91f7650945fd781325add740f7a8b57021a780f7f71366bb8369bf5fe1a0ef404294a490f593c39895aa00d8fad985abec49defb286e7d919724379e2edc3758c8446e4372cea608da5444ec2253590f5ed29272fb23d52f88af14d19900279058e06328c9331ff60196c6c6d3d018cac4586efafba35deef2b7b8cc95a696ed0b63b16f19968fe41262ce212d41272", @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$int_in(r3, 0x5452, 0x0) socket(0x26, 0x80805, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700110005"], 0xfe33) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0xfffffbce, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffff, 0x2}, 0x80, 0x0}, 0x0) sendfile(r0, r6, 0x0, 0x10) 11.000436238s ago: executing program 33 (id=826): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x8d8, &(0x7f0000000080), 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") fallocate(0xffffffffffffffff, 0x3, 0x6, 0xa4f) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0xfc}, 0xa, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000140)='/:\x00') r1 = open(&(0x7f0000000000)='./file1\x00', 0x135843, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x201005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000016c0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000001700)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf", @ANYBLOB="426eae24f971bec33f81699ae901688dd2ba3baf5ab43343bad395cae91f7650945fd781325add740f7a8b57021a780f7f71366bb8369bf5fe1a0ef404294a490f593c39895aa00d8fad985abec49defb286e7d919724379e2edc3758c8446e4372cea608da5444ec2253590f5ed29272fb23d52f88af14d19900279058e06328c9331ff60196c6c6d3d018cac4586efafba35deef2b7b8cc95a696ed0b63b16f19968fe41262ce212d41272", @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$int_in(r3, 0x5452, 0x0) socket(0x26, 0x80805, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700110005"], 0xfe33) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0xfffffbce, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffff, 0x2}, 0x80, 0x0}, 0x0) sendfile(r0, r6, 0x0, 0x10) 2.605065701s ago: executing program 5 (id=976): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400b59527bd7000ffdbdf250a1700ff", @ANYRES32=r1, @ANYBLOB="140002000000000000000000000000000000000108"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffd, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) 2.294703508s ago: executing program 5 (id=982): socket(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c232000, 0x3, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x8887, 0x10000, 0x8, 0x1, 0x80a, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) getxattr(0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r0, 0x0, 0x0, 0x20008050) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r3, 0x1) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a320000000009"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x6c, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x402c040}, 0x20000000) ioctl$TIOCMSET(r2, 0x5418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.980252426s ago: executing program 1 (id=985): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f00000007c0)={[{@uid}, {@overriderock}, {@nojoliet}, {@unhide}, {@nojoliet}, {@nocompress}, {@mode={'mode', 0x3d, 0x10003}}, {@unhide}, {@nojoliet}, {@gid}]}, 0x1, 0x68b, &(0x7f0000000880)="$eJzs3e9vE/cZAPDHlIgok9i0TQghSq+wSSDRYDslKOqbec4ludbxWXdOBa86VJIKEdoNOmnwqrzpNmn7I/p2f8T2F1V7u3dMPtvFkB9OaYkp+nwsuK/vnrvvc4e5R9/EdxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNTaq/V6oxadrLt1MzlYe7XINw9ZPt7ef56bHNJvRG3wJ+bn4+xw1tlfP1t8ZvDXxTg/fHc+5geT+Xj8szO/+OBXJ0+M1z8koWPx8NHje7d3d7cfHBTw84iZJ/kKrafdrMyzzdZ6mmRlnqwsL9evbayVyVrWSctbZT/dTNpF2urnRXK5fSVprKwsJenirXyru77a6qTjmTfea9bry8mHi720VZR599qHi2V7I+t0su56FTNYPIi5MfggfpT1k37a2kySnbu720vTkhwENY4S1JwW1Kw3m41Gs9lYvr5y/Ua9fnLPjPoLYk/E7D+0zNaPfAaHl3diVP+jE1l0YytuRrLvqx2rUUQemwcsHxnX/99eS4etr/bvd7L+j6v82WeLz0VV/y8M3104qP4fkMvxvR7Go3gc9+J27MZubMeDmWd0vK/1SKMbWZSRRxab0armJKM5SazEcixHPT6JjViLMpJYiyw6kUYZt6KMfqTVJ6odRaTRin7kUUQSl6MdVyKJRqzESixFEmksxq3IYyu6sR6r0aq2shN3q+O+dEiO3wU1jhLUPCRI/ef7mt8z59WcyOElPB3XfwAAAOCNVat++j4Y/8/F21VrLeuk9VmnBQAAAPyIqt/8nx9M5gatt6Nm/A8AAABvmlp1jV0tIhbinWFrfCXU+IcAczNOEQAAAPiBqt//XxhMFgatd6K2Z/wPAAAA/MT9beo99ud7p2r//m8UxVztSe/mb2r3W4O41v23hutVk/89HRq0+2vnaqdHG6kmyydH79rp+dro7pfPboJZ9Rrf7kzLo3ZoApMOTiD+Ee8OY969M5zeGS8Z9rKwlnXSxXbe+aARrdbpE/30Zv/Pn9/9S1S7//fu5ula7Nzd3V789IvdO1UuTwZbeXJ/dAPFPfdR3CeX8aIvq/stVNdc7LvHc9WFGKN+F4b91if3/8Rw9RPfY/+/jovDmIsL8fRURCw8v//zgz4biwft/SiLRpXF/HOdHmXPn2VxaRhz6fKl4WSfLJrTsmhOHv+XOhZHyGJpWhZLPzALgFnZmVKFansL/0uc5Y6nun8dl4cxl89VJ9aT5/Y5o9enndHrL1nXx339K64MY66Mgw+qsYN+//lCVf1msMI3B/Zbdpq1wSF868v7f4wzDx89fu/u/dufbX+2/XmzubRcf79ev96MuWo3RhO1B4B9TH/GztSI2vtTRtW//O4rBYvxaXwRu3EnrlZXG1TfONh3qwux87sYfQ3h6sSotfLCqHVh4gkvV6eM6hYmHvRy9NilY/iXAIDjc3FKHT5K/b86Zdy9MPGVwqtTRseTtRwAeDXS4tvaQv+vtaLIep80VlYarf5GmhR5+6OkyFbX0yTr9tOivdHqrqdJr8j7eTvvDBofZ6tpmZRbvV5e9JO1vEh6eZndrJ78nowe/V6mm61uP2uXvU7aKtOknXf7rXY/Wc3KdtLb+n0nKzfSolq57KXtbC1rt/pZ3k3KfKtop4tJUqbpRGC2mnb72Vo2aHaTXpFttopbycd5Z2szTVbTsl1kvX4+3OC4r6y7lheb1WYXZ32wAeA18fDR43u3d3e3H7zCRpya9V4CAJMmqjQAAAAAAAAAAAAAAPCaOo7r/97Axp9+yofu1OuRhsZMGl/9Yfg/f1rwrM9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDX/wMAAP//oSJZGQ==") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xbf0c05eea5422dd9) 1.891411201s ago: executing program 1 (id=987): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_clone(0x800, &(0x7f00000002c0)="63ccbdfff82a43d2845d8640c4a444d518e816b91478c1a01c0cfab83544b63808a3e86ada034fb44412af718156d66af109d89b5ec56e49f53a86b8cdbafbfb3c42a7dd3152c157d574437a5e03a42a62215ddca1978d9d8e060ef80b85adfde02e42822969252418e6116f54570d96d65a86ee9b029792c2ac5cb45a2f00cdb28afc3c03174e9a4c7488151b9f68114dcf25839560247d9af291b96b7458dc359a77d57673eb495c14483b7ec437cead96151fd81256ada04d737c313b088a10c8cfff9296cb74b68f54de2ce1bf591c8ce1c534c8a09a9f9079b0", 0xdc, &(0x7f0000000200), &(0x7f0000000400), &(0x7f0000000740)="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") timer_create(0x1, &(0x7f0000000440)={0x0, 0xe, 0x2, @tid=r0}, &(0x7f0000000480)) mlockall(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000001000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000128850000007600000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) r1 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000240)={@loopback, @dev}, &(0x7f0000000280)=0xc) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000004c0), &(0x7f0000000540)=0x80) epoll_create1(0x0) syz_io_uring_setup(0x2092, &(0x7f0000000180)={0x0, 0x7564, 0x0, 0x3, 0x2b5, 0x0, 0x0}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x100000001, 0x3, 0xffffffff, 0x2627bc41, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x7ff, 0x7, 0x0, 0x8, 0x1, 0x6, 0x1, 0x7f}, 0x0, 0x0) remap_file_pages(&(0x7f000003f000/0x3000)=nil, 0x3000, 0x200000e, 0x1, 0x4000000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.610223667s ago: executing program 5 (id=996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x2a, 0x80000, 0x80000000) r2 = io_uring_setup(0xad5, &(0x7f00000003c0)={0x0, 0xc45e, 0x8, 0x0, 0x1000}) close(r2) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x25dfdbfd, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x20000000) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000000203010100000000000000000400001a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x50) 1.04118422s ago: executing program 3 (id=1008): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x48, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x48}}, 0x20000084) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4082, 0x1054}, {&(0x7f0000001ac0)=""/14, 0xe}, {0x0, 0x18}], 0x3) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x48, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x48}}, 0x20000084) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4082, 0x1054}, {&(0x7f0000001ac0)=""/14, 0xe}, {0x0, 0x18}], 0x3) (async) 990.189023ms ago: executing program 1 (id=1009): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async) r2 = getpid() (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x16000000}, {}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf0000000e0001006e657464657673696d0000000f0002006e657464677673696d30000008008b00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 989.908973ms ago: executing program 1 (id=1010): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00'/14], 0x14}}, 0x4000000) (async) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x8000, 0x800c2) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x9, 0x1000000000000008}, 0x0, 0x32, 0x8001, 0x7, 0x6, 0x6, 0xffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r2, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000600000085000000610000008500000005000000950000000000000024a435ae602655d6ef5d1048380869b7bcb2226a50919110ca93005fca5c3dfed6378e08c4b08e8c405c2f7723dd888f8f847183b06c0d4dd43311b731717be7f425062fa2c8c08dabebfd6ed0f761b5f58f7f4499e0e3c08f793cb64fa1ef0377e8b41fed8b12776060b8fca81316d721a0c2bd86131fafed3118f39a9b6be50e7dee52a0f53d3a43fba2f59429543b0b416d18eb9a4d780f9eb8f0681542cd808d15080f45759d9a", @ANYBLOB="fc53402c8434b19a8ec5a2b930c7cb37d5967b172ee9c8cd8a682e66b22add4232acce4552022e24e6a568116070e224b257b7832f847a2f9311b32cf71f96918013520d00d204dd043074ed4463abf6b4d24a22c82c5d491cefb11766fb97ad8d75f447701b10281e9174c173e4d6b3cb89d8193bf7aa1b0a2faf93e2e5426331a6d8662dc5c4920b54b6d493ce45d44f40a27ba2590f3b1d02bfa07b179e50a414c3732348ec64bf5a55e71f6a2d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socketpair(0x2c, 0x5, 0xa1a, &(0x7f0000000100)) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x8d8, &(0x7f0000000080), 0x3, 0x42f, &(0x7f0000000940)="$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") fallocate(0xffffffffffffffff, 0x3, 0x6, 0xa4f) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x7ffffe, 0x5, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) (async) r7 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5500000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf66e08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5742d75c1b21770e7460e8ae6848fa45a1721c2db", 0xd8}], 0x1}, 0x20000080) (async) sendfile(r7, r7, 0x0, 0x1000000201005) r9 = open(&(0x7f0000000380)='./file1\x00', 0x145142, 0x50) sendfile(r2, r9, 0x0, 0x800000009) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0xd, 0x910, 0x7, 0x3, 0x7}, &(0x7f0000000040)=0x98) (async) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/35, 0x23) syz_emit_ethernet(0x82, &(0x7f0000000780)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaa13810040000800450000700000000000019078ac1e0001ac1414aa0b079078120002282500000000000000002f000000000000ac1e00018303f38917e6ac1414aaac141410ac1e0101ac141421e000000283236affffffffac1414bbe0000002ac1414387f0000017f00000164010101ffffffff000000ef7f2a00fa020195f3cc917582126757cb88d8bcf77a3c9e7645c1f4136f2306827ddd993fb1"], 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r10, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000400)="d2ff03076003008cb89e08f086dd05536a601e52894858cf5fc7f65492b74365131466624be7053f664dc20d6b7be27e2994e1f9e95c", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000000)={r6}) (async) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000002e006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36508f40b0004000b001fffffff300017d34460bc24eab554a705251e850094ff0051f60a84c9f4d4938037e786a6ff000000000e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 942.979806ms ago: executing program 4 (id=1011): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="6401000010000100000000000000004010010000000000000000000000000800000000000000000000000020000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000fcfffffffffffffffdffffffffffffff00000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000000a00100000000000000000001c001700000000002abd7000000000000000000000000000000000004c001400686d61632873686132353629"], 0x164}}, 0x4050) 898.663739ms ago: executing program 4 (id=1012): r0 = io_uring_setup(0x423a, &(0x7f0000000100)={0x0, 0x290e, 0x10, 0x100000, 0x4}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0, 0x2}, 0xd4, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, 0x0, &(0x7f0000000100)) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r3 = syz_open_pts(r1, 0x80080) r4 = dup3(r3, r1, 0x0) ioctl$TCSETS(r4, 0x5432, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000006800090300000000000000000a000000f1ffffff03000b000600030000000000"], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x4d, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[@ANYRES32=r4, @ANYBLOB="1981492aff77a48a67c51235a48bec6a88287b2e9d246c97f7ca733ce9239a49ab14afc561c4701cda0b362c0c18f6fef6c5023ac340aff7f95832bde964cd33366498c080f085dff91d5762d4acdc88a1a9c321b46e68a8865ac99527f6caebca5dd2cd56cb5a9edece9f3e830e9016bdb7c41f3a6e45eda3e3d198f38841aee56bc8096b46ca6b"], 0x24}}, 0x0) shutdown(r4, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x13}], 0x1) fcntl$setstatus(r4, 0x4, 0x6400) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@deltclass={0x3c, 0x29, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xe}, {0xfff1, 0x5}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xb}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040890}, 0x8000) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="24d60beb594a15c3c49ddbdda300"/33, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r8, 0xffffffffffffffff, 0x60000000}, 0xc) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x0, 0x2a615ba5], 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000003"], 0x78}}, 0x0) 714.160059ms ago: executing program 3 (id=1013): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) bind$can_raw(r0, 0x0, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) socket$inet6(0xa, 0x3, 0xfa) unshare(0x68040200) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x120c000, 0x1000, 0x0, 0x7}, 0x20) syz_clone(0x8201000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) 647.923963ms ago: executing program 1 (id=1014): r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x6) ioctl$int_in(r0, 0x5452, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_open_pts(0xffffffffffffffff, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 589.844346ms ago: executing program 6 (id=1015): add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001000)={'syz', 0x1}, &(0x7f0000000000)="cd45f34f96ba409b6769cb012f9704b62e", 0x11, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000e7ffffff0095"], &(0x7f0000000280)='syzkaller\x00', 0xc, 0x0, 0x0, 0x40f00, 0x48, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec7) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) r3 = add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="75a1d70300", 0x5, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="8000260b0a0002000180c200000c00000c000e"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7f00fedbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000002283ff0587e59af8f6cb8856c2fa9a9b9ac5d9b677b5b9117a4ba23b864e242c5ae20822271c4eab1eb869945f06aa79496073"], 0x34}}, 0x400c000) 553.036188ms ago: executing program 1 (id=1016): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x3ff, 0x4}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 527.15079ms ago: executing program 4 (id=1017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000006c0001002abd7000fedbdf2500000000", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) 446.046255ms ago: executing program 6 (id=1018): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xe4, &(0x7f0000000600)=""/228}, 0x94) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) remap_file_pages(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2800005, 0x100, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x1070bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4085}, 0x20040844) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x11, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e20, 0x3, 'ovf\x00', 0x1, 0x2, 0x6a}, 0x2c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000380)={{0x84, @broadcast, 0x4e23, 0x3, 'rr\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0x7, 0x80012d58, 0x12d5c}}, 0x44) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r8, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) syz_open_pts(r8, 0x900) read(0xffffffffffffffff, &(0x7f00000000c0)=""/226, 0xe2) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) write$P9_RATTACH(r5, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x40, 0x1, 0x8}}, 0x14) 445.146164ms ago: executing program 5 (id=1019): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000001000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00100000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 440.547285ms ago: executing program 4 (id=1020): r0 = socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000040900010073797a31000200000900020073787a320000000028000480240001800b0001007470726f78790000140002800800034000000001000000400000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x24000844}, 0x24044000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000001180)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x46}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x40408d0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000380)={0xa4, 0x7, 0x8e, 0x87, 0x3e, 0x4, 0xf, 0x0, 0x3, 0x3, 0x7, 0x6, 0x5, 0x2}, 0xe) setresuid(0xee00, 0xee00, 0x0) capset(&(0x7f0000000080)={0x19980330}, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r4, r4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x2, 0x0, 0x0, r4, 0x0, 0xc0}, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}) setuid(r4) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x14, 0x14, 0x105, 0x70bd2c, 0x25dfdb7b, {0x28, 0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x14800) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x119, 0x487, 0x0, &(0x7f0000000480)) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010101, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 411.934906ms ago: executing program 4 (id=1021): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0xc0, 0x2, 0xbffff010}, {0x6}]}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x5) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x0, 0x80000, 0x81) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8911, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0xffffff52, 0x1, 0x6, 0x1, 0x200, 0x3ff, 0x151}, 0x1c) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x5) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @private=0xa010102, @loopback}}}}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r3, 0x30482000) syz_clone(0x220c1080, 0x0, 0x0, 0x0, 0x0, 0x0) 404.080947ms ago: executing program 6 (id=1022): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="6401000010000100000000000000004010010000000000000000000000000800000000000000000000000000200000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000fcfffffffffffffffdffffffffffffff00000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000000a00100000000000000000001c001700000000002abd7000000000000000000000000000000000004c001400686d61632873686132353629"], 0x164}}, 0x4050) 358.885339ms ago: executing program 5 (id=1023): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 32) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40) (async) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002900)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x26}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (rerun: 32) write$UHID_INPUT(r6, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080)=""/17, &(0x7f0000000100)=0x11) openat$cgroup_ro(r6, &(0x7f0000000180)='net_prio.prioidx\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) 358.227469ms ago: executing program 3 (id=1024): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x168b}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010003904000000000000060000000000", @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r1, &(0x7f0000000180)='(', 0x1, 0x840, &(0x7f00000000c0)={0x11, 0x2, r4, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 262.276015ms ago: executing program 6 (id=1025): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newchain={0x438, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x40c, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x9, 0x4b4, 0xfffffff8, 0x30, 0xd, 0x6ed3, 0xffffffff, 0x7, 0x483, 0x80, 0x6, 0x3, 0x10001, 0xfa13, 0x3, 0x4, 0xfff, 0x18a, 0xa6, 0x4, 0xd, 0x7fffffff, 0x6, 0x100, 0x8, 0x45db, 0x2, 0x0, 0x9, 0x3ff, 0x2, 0x0, 0x4, 0x1000, 0x7, 0x5b53, 0xffffffff, 0x4207, 0x6, 0x0, 0xfffffffa, 0x1, 0x0, 0xe79, 0x800, 0x1, 0x7fff, 0x401, 0x3d82, 0x5, 0xcd, 0x3b1f, 0x8000, 0x9, 0xfffffff9, 0x100, 0x7, 0xfffffffe, 0x5, 0x7fffffff, 0x5e0, 0x10000, 0xe, 0x10, 0xf59, 0xc, 0xffff, 0x5, 0x6, 0xfffffffe, 0x5b80, 0x5, 0x0, 0x2, 0x7, 0x2, 0x9, 0x5, 0x8, 0x3, 0xc8, 0x8, 0x7, 0xa, 0xcc, 0x80000001, 0x8, 0x5, 0x6d, 0x6, 0x5, 0x2, 0x8, 0x7, 0x8b, 0x8000, 0x7fffffff, 0x5, 0x100, 0x80, 0x0, 0x4, 0x3, 0x8, 0x9, 0x38, 0x0, 0xc203, 0x4, 0x61, 0x8, 0x9, 0x9, 0x5, 0xff, 0xfffffff7, 0x9, 0x6003549, 0x4, 0x3, 0x2, 0x9, 0x400, 0x9, 0x6, 0xfffffc01, 0xfffffffe, 0x6, 0x1, 0x7fff, 0x1, 0x4, 0xe2, 0x1, 0xf, 0x6, 0x65, 0x8, 0x80000001, 0x4, 0x9674, 0x6, 0x6, 0x8, 0x293d, 0x8, 0x3123, 0x8001, 0x8001, 0x7, 0x2, 0x5, 0xb, 0x1, 0x200, 0x7, 0x6, 0x40, 0x0, 0xd4d9, 0x59e, 0x1, 0x0, 0xffff, 0x2, 0x1, 0x8, 0x0, 0x7, 0x7ff, 0x5, 0x9, 0x2fe6, 0x9, 0x83, 0xa, 0x3, 0x9000000, 0x2, 0x0, 0xfff, 0x17, 0xd, 0x7, 0x4, 0x4, 0xfffffffe, 0x6, 0x101, 0x5, 0x3, 0x7fffffff, 0x3, 0x9, 0x1e7, 0x3, 0x2, 0x55f, 0x9, 0x8, 0x6, 0x8, 0xd7a, 0x6, 0x2, 0x0, 0x9, 0x10, 0x92, 0x1ff, 0x6, 0x75a, 0x4, 0x82b1, 0x7, 0xa3, 0x3, 0xfffffff8, 0x3, 0x10000, 0x3, 0x8, 0x7, 0x4, 0x80000000, 0x5, 0x2, 0x4, 0x6, 0x0, 0x3, 0x7, 0x0, 0x2, 0x9, 0x4, 0x8, 0x4, 0xf376, 0x5, 0x1, 0x101, 0x4, 0xb37, 0x48000, 0xa, 0x1, 0xc1, 0x0, 0x8, 0x0, 0x3, 0xfffff3e2, 0x4]}]}]}}]}, 0x438}}, 0x44004) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 241.793596ms ago: executing program 3 (id=1026): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000740)={r0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x40040) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000780)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@nojournal_checksum}], [{@subj_role={'subj_role', 0x3d, '!'}}], 0x2c}, 0x84, 0x4aa, &(0x7f0000000c00)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@newchain={0x34, 0x64, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x9, 0xa}, {0xfff2, 0xffe0}, {0xcd1f2f22217a76cb, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x200}]}, 0x34}}, 0x40) gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x23, 0x2, @thr={&(0x7f0000000000)="0f7bbd7d1861f6aaff467d244787894b7871312dbf4abcd7b2e961d06d96d0ce6e1b9720f642e0a5bd79d33793", &(0x7f0000000540)="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"}}, &(0x7f0000bbdffc)) getpriority(0x0, 0xffffffffffffffff) pipe(&(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x408200, 0x0) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000000c0)={0x8, 0x1a, '\x00', [@ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x80}, @generic={0x1, 0xb2, "40e3a7c5b3464aef92afef02c5a3070331788b8f1e78d5efaeab8ad6ed027a60609a60fca8b73d7bdda8ca50946e4bb19451274d759f22673b32e3a5ba8380dadeec488e4ce570f83bdbeba463a51f7b89ecb111e02773f5f506f327501e3cad6051a589bb9f796b6f683d0ecf9a22c845176f29a7dc941eaba3bce4cb7163221e4485b08f0515086665224860fccd64488600128edf760502ab8c2c485d0b309dbf884fe62896b8f34055b7ce4e5695f760"}, @enc_lim={0x4, 0x1, 0x19}, @padn, @jumbo={0xc2, 0x4, 0x81}, @jumbo={0xc2, 0x4, 0x101}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0xe0) 226.039487ms ago: executing program 6 (id=1027): r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x6) ioctl$int_in(r0, 0x5452, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_open_pts(0xffffffffffffffff, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 183.116279ms ago: executing program 6 (id=1028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000000c0)={0x32}, 0x8) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) listen(r2, 0x100101) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0xd4, 0x70, 0x800}, 0x8) (async) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0xd4, 0x70, 0x800}, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000004020000f8ffffffb7030000080000008105000000000000850000000300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000001e40)=""/4101, 0x0, 0xc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000004020000f8ffffffb7030000080000008105000000000000850000000300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000001e40)=""/4101, 0x0, 0xc}, 0x94) accept4(r2, 0x0, 0x0, 0x80800) (async) accept4(r2, 0x0, 0x0, 0x80800) socket$netlink(0x10, 0x3, 0xb) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="010028bd70000300000001000000800008807c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b5400098028000080060001000a00000014000200fe8000000000000000000000000000aa050003000300000028000080060001000a00000014000200fe800000000000000000200500030001000000140002007767300000000000000000000000000008000500010000000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioprio_set$pid(0x1, 0x0, 0x4007) (async) ioprio_set$pid(0x1, 0x0, 0x4007) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xb) 121.866063ms ago: executing program 5 (id=1029): socket$netlink(0x10, 0x3, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000003, &(0x7f00000002c0)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@delalloc}, {@noblock_validity}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000003, &(0x7f00000002c0)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@delalloc}, {@noblock_validity}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 72.046316ms ago: executing program 3 (id=1030): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000006c0001002abd7000fedbdf2500000000", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) 13.558599ms ago: executing program 4 (id=1031): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000480)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 0s ago: executing program 3 (id=1032): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x2021, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x42}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000b00)=r4, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x1d}, @remote, @rand_addr=' \x01\x00', 0x164, 0x4, 0x1000, 0x100, 0x6, 0x2020000, r6}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r2, r1}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x2021, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x42}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000b00)=r4, 0x4) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x1d}, @remote, @rand_addr=' \x01\x00', 0x164, 0x4, 0x1000, 0x100, 0x6, 0x2020000, r6}) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r2, r1}, 0xc) (async) kernel console output (not intermixed with test programs): 063d47090 R08: 0000000000000000 R09: 0000000000000000 [ 66.473887][ T4648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.473936][ T4648] R13: 00007fd065566038 R14: 00007fd065565fa0 R15: 00007ffcf5a486a8 [ 66.473954][ T4648] [ 66.641219][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 66.650346][ T4633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.709945][ T4658] __nla_validate_parse: 15 callbacks suppressed [ 66.709999][ T4658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.416'. [ 66.735516][ T4659] set_capacity_and_notify: 6 callbacks suppressed [ 66.735533][ T4659] loop1: detected capacity change from 0 to 128 [ 66.752922][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 66.823874][ T4656] syz.1.415: attempt to access beyond end of device [ 66.823874][ T4656] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 66.849738][ T4656] syz.1.415: attempt to access beyond end of device [ 66.849738][ T4656] loop1: rw=524288, sector=145, nr_sectors = 312 limit=128 [ 66.865206][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 66.911649][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 66.911667][ T29] audit: type=1400 audit(1769928361.857:508): avc: denied { read } for pid=4661 comm="syz.0.417" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.941346][ T29] audit: type=1400 audit(1769928361.857:509): avc: denied { open } for pid=4661 comm="syz.0.417" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.968491][ T29] audit: type=1400 audit(1769928361.917:510): avc: denied { connect } for pid=4661 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.990509][ T3329] bond1: (slave bond0): failed to get link speed/duplex [ 67.031422][ T29] audit: type=1400 audit(1769928361.957:511): avc: denied { getopt } for pid=4661 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.060493][ T29] audit: type=1400 audit(1769928362.007:512): avc: denied { bind } for pid=4665 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.108153][ T3329] bond1: (slave bond0): failed to get link speed/duplex [ 67.133494][ T4670] process 'syz.1.421' launched '/dev/fd/10' with NULL argv: empty string added [ 67.135775][ T29] audit: type=1400 audit(1769928362.087:513): avc: denied { execute } for pid=4669 comm="syz.1.421" dev="tmpfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.143222][ T4671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.421'. [ 67.189813][ T4670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.421'. [ 67.197382][ T29] audit: type=1400 audit(1769928362.087:514): avc: denied { execute_no_trans } for pid=4669 comm="syz.1.421" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.200578][ T4671] syz.1.421 (4671) used greatest stack depth: 9296 bytes left [ 67.230245][ T2207] bond1: (slave bond0): failed to get link speed/duplex [ 67.279907][ T4682] macvlan1: entered promiscuous mode [ 67.302676][ T29] audit: type=1400 audit(1769928362.247:515): avc: denied { create } for pid=4686 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.322518][ T29] audit: type=1400 audit(1769928362.247:516): avc: denied { write } for pid=4686 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.342855][ T4682] macvlan1: left promiscuous mode [ 67.392896][ T4697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.428'. [ 67.408870][ T29] audit: type=1400 audit(1769928362.307:517): avc: denied { create } for pid=4686 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.465220][ T4700] loop3: detected capacity change from 0 to 128 [ 67.471314][ T4704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.430'. [ 67.514974][ T4700] syz.3.429: attempt to access beyond end of device [ 67.514974][ T4700] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 67.542114][ T4700] syz.3.429: attempt to access beyond end of device [ 67.542114][ T4700] loop3: rw=524288, sector=145, nr_sectors = 320 limit=128 [ 67.555886][ T4706] loop1: detected capacity change from 0 to 1024 [ 67.571033][ T4709] loop4: detected capacity change from 0 to 512 [ 67.581644][ T4709] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.581998][ T4706] EXT4-fs: Ignoring removed bh option [ 67.612396][ T4709] EXT4-fs (loop4): 1 truncate cleaned up [ 67.620939][ T4706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.634049][ T4709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.674635][ T4698] netlink: 'syz.0.427': attribute type 29 has an invalid length. [ 67.683406][ T4698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'. [ 67.698527][ T4709] EXT4-fs (loop4): shut down requested (0) [ 67.711708][ T4706] EXT4-fs error (device loop1): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.1.432: path /90/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 67.768391][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.837497][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.866543][ T4718] netlink: 68 bytes leftover after parsing attributes in process `syz.3.435'. [ 67.919741][ T4723] FAULT_INJECTION: forcing a failure. [ 67.919741][ T4723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.933002][ T4723] CPU: 1 UID: 0 PID: 4723 Comm: syz.4.438 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 67.933104][ T4723] Tainted: [W]=WARN [ 67.933110][ T4723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.933122][ T4723] Call Trace: [ 67.933129][ T4723] [ 67.933138][ T4723] __dump_stack+0x1d/0x30 [ 67.933165][ T4723] dump_stack_lvl+0x95/0xd0 [ 67.933190][ T4723] dump_stack+0x15/0x1b [ 67.933289][ T4723] should_fail_ex+0x263/0x280 [ 67.933319][ T4723] should_fail+0xb/0x20 [ 67.933345][ T4723] should_fail_usercopy+0x1a/0x20 [ 67.933464][ T4723] _copy_from_iter+0xcf/0xea0 [ 67.933483][ T4723] ? __alloc_skb+0x397/0x4b0 [ 67.933510][ T4723] ? __alloc_skb+0x219/0x4b0 [ 67.933541][ T4723] netlink_sendmsg+0x4ae/0x6f0 [ 67.933614][ T4723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.933696][ T4723] ____sys_sendmsg+0x5af/0x600 [ 67.933718][ T4723] ___sys_sendmsg+0x195/0x1e0 [ 67.933753][ T4723] __x64_sys_sendmsg+0xd4/0x160 [ 67.933781][ T4723] x64_sys_call+0x17ba/0x3000 [ 67.933807][ T4723] do_syscall_64+0xc0/0x2a0 [ 67.933907][ T4723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.933982][ T4723] RIP: 0033:0x7fd0652eaeb9 [ 67.933999][ T4723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.934017][ T4723] RSP: 002b:00007fd063d47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.934041][ T4723] RAX: ffffffffffffffda RBX: 00007fd065565fa0 RCX: 00007fd0652eaeb9 [ 67.934058][ T4723] RDX: 00000000000000d0 RSI: 00002000000001c0 RDI: 0000000000000003 [ 67.934074][ T4723] RBP: 00007fd063d47090 R08: 0000000000000000 R09: 0000000000000000 [ 67.934104][ T4723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.934163][ T4723] R13: 00007fd065566038 R14: 00007fd065565fa0 R15: 00007ffcf5a486a8 [ 67.934181][ T4723] [ 68.030193][ T4727] macvlan1: entered promiscuous mode [ 68.033334][ T4727] macvlan1: left promiscuous mode [ 68.245824][ T4739] loop4: detected capacity change from 0 to 128 [ 68.336364][ T4739] syz.4.444: attempt to access beyond end of device [ 68.336364][ T4739] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 68.380463][ T4747] loop2: detected capacity change from 0 to 1024 [ 68.387464][ T4747] EXT4-fs: Ignoring removed bh option [ 68.396094][ T4747] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.420308][ T4747] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #3: block 1: comm syz.2.447: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.434980][ T4747] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.447: Failed to acquire dquot type 0 [ 68.447801][ T4747] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.447: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.465238][ T4747] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.447: Invalid inode bitmap blk 0 in block_group 0 [ 68.478258][ T4747] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 68.487039][ T3329] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.487683][ T4747] EXT4-fs (loop2): 1 orphan inode deleted [ 68.507891][ T4747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.521206][ T4739] syz.4.444: attempt to access beyond end of device [ 68.521206][ T4739] loop4: rw=524288, sector=145, nr_sectors = 328 limit=128 [ 68.535981][ T4757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.451'. [ 68.550783][ T3329] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 68.563149][ T4747] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 68.572636][ T4747] netlink: 96 bytes leftover after parsing attributes in process `syz.2.447'. [ 68.590390][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.599688][ T12] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.615036][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 68.690615][ T4764] macvlan1: entered promiscuous mode [ 68.702179][ T4766] loop0: detected capacity change from 0 to 512 [ 68.708631][ T4764] macvlan1: left promiscuous mode [ 68.725648][ T4766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.745793][ T4766] netlink: 'syz.0.455': attribute type 2 has an invalid length. [ 68.783876][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.823865][ T4772] netlink: 'syz.4.456': attribute type 1 has an invalid length. [ 68.838197][ T4772] bond1: entered promiscuous mode [ 68.840676][ T4774] FAULT_INJECTION: forcing a failure. [ 68.840676][ T4774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.843581][ T4772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.857143][ T4774] CPU: 0 UID: 0 PID: 4774 Comm: syz.3.458 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.857181][ T4774] Tainted: [W]=WARN [ 68.857189][ T4774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.857201][ T4774] Call Trace: [ 68.857209][ T4774] [ 68.857219][ T4774] __dump_stack+0x1d/0x30 [ 68.857246][ T4774] dump_stack_lvl+0x95/0xd0 [ 68.857344][ T4774] dump_stack+0x15/0x1b [ 68.857423][ T4774] should_fail_ex+0x263/0x280 [ 68.857454][ T4774] should_fail+0xb/0x20 [ 68.857483][ T4774] should_fail_usercopy+0x1a/0x20 [ 68.857538][ T4774] _copy_from_iter+0xcf/0xea0 [ 68.857559][ T4774] ? __alloc_skb+0x397/0x4b0 [ 68.857641][ T4774] ? __alloc_skb+0x219/0x4b0 [ 68.857706][ T4774] netlink_sendmsg+0x4ae/0x6f0 [ 68.857730][ T4774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.857750][ T4774] ____sys_sendmsg+0x5af/0x600 [ 68.857773][ T4774] ___sys_sendmsg+0x195/0x1e0 [ 68.857802][ T4774] __x64_sys_sendmsg+0xd4/0x160 [ 68.857873][ T4774] x64_sys_call+0x17ba/0x3000 [ 68.857900][ T4774] do_syscall_64+0xc0/0x2a0 [ 68.857931][ T4774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.858034][ T4774] RIP: 0033:0x7f3924cbaeb9 [ 68.858052][ T4774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.858071][ T4774] RSP: 002b:00007f3923717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.858171][ T4774] RAX: ffffffffffffffda RBX: 00007f3924f35fa0 RCX: 00007f3924cbaeb9 [ 68.858186][ T4774] RDX: 0000000020004804 RSI: 0000200000006040 RDI: 0000000000000005 [ 68.858201][ T4774] RBP: 00007f3923717090 R08: 0000000000000000 R09: 0000000000000000 [ 68.858215][ T4774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.858228][ T4774] R13: 00007f3924f36038 R14: 00007f3924f35fa0 R15: 00007fff3ac12798 [ 68.858248][ T4774] [ 69.193042][ T4806] netlink: 'syz.4.467': attribute type 10 has an invalid length. [ 69.205862][ T4806] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 69.248384][ T4815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.471'. [ 69.258390][ T4806] batman_adv: batadv0: Interface deactivated: dummy0 [ 69.265272][ T4806] batman_adv: batadv0: Removing interface: dummy0 [ 69.280456][ T4806] bridge_slave_0: left allmulticast mode [ 69.286252][ T4806] bridge_slave_0: left promiscuous mode [ 69.291965][ T4806] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.314801][ T4806] bridge_slave_1: left allmulticast mode [ 69.320603][ T4806] bridge_slave_1: left promiscuous mode [ 69.326897][ T4806] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.338294][ T4806] bond0: (slave bond_slave_0): Releasing backup interface [ 69.348393][ T4806] bond0: (slave bond_slave_1): Releasing backup interface [ 69.359911][ T4806] team0: Port device team_slave_0 removed [ 69.368542][ T4806] team0: Port device team_slave_1 removed [ 69.375599][ T4806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.383300][ T4806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.392886][ T4806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.400457][ T4806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.537540][ T4840] loop0: detected capacity change from 0 to 512 [ 69.555265][ T4840] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 69.579940][ T4840] EXT4-fs (loop0): mount failed [ 69.591212][ T4848] loop4: detected capacity change from 0 to 512 [ 69.666029][ T4855] loop2: detected capacity change from 0 to 1024 [ 69.673869][ T4855] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 69.685266][ T4855] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 69.700742][ T4855] JBD2: no valid journal superblock found [ 69.706688][ T4855] EXT4-fs (loop2): Could not load journal inode [ 69.781000][ T4864] FAULT_INJECTION: forcing a failure. [ 69.781000][ T4864] name failslab, interval 1, probability 0, space 0, times 0 [ 69.793839][ T4864] CPU: 0 UID: 0 PID: 4864 Comm: syz.4.486 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 69.793880][ T4864] Tainted: [W]=WARN [ 69.793888][ T4864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.793943][ T4864] Call Trace: [ 69.793951][ T4864] [ 69.793961][ T4864] __dump_stack+0x1d/0x30 [ 69.793993][ T4864] dump_stack_lvl+0x95/0xd0 [ 69.794019][ T4864] dump_stack+0x15/0x1b [ 69.794112][ T4864] should_fail_ex+0x263/0x280 [ 69.794143][ T4864] should_failslab+0x8c/0xb0 [ 69.794165][ T4864] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 69.794300][ T4864] ? __alloc_skb+0x2f0/0x4b0 [ 69.794352][ T4864] __alloc_skb+0x2f0/0x4b0 [ 69.794379][ T4864] ? __alloc_skb+0x219/0x4b0 [ 69.794406][ T4864] netlink_ack+0xfd/0x500 [ 69.794499][ T4864] netlink_rcv_skb+0x192/0x220 [ 69.794536][ T4864] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.794571][ T4864] rtnetlink_rcv+0x1c/0x30 [ 69.794598][ T4864] netlink_unicast+0x5c0/0x690 [ 69.794673][ T4864] netlink_sendmsg+0x5c8/0x6f0 [ 69.794695][ T4864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.794718][ T4864] ____sys_sendmsg+0x5af/0x600 [ 69.794741][ T4864] ___sys_sendmsg+0x195/0x1e0 [ 69.794802][ T4864] __x64_sys_sendmsg+0xd4/0x160 [ 69.794825][ T4864] x64_sys_call+0x17ba/0x3000 [ 69.794853][ T4864] do_syscall_64+0xc0/0x2a0 [ 69.794961][ T4864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.795022][ T4864] RIP: 0033:0x7fd0652eaeb9 [ 69.795040][ T4864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.795058][ T4864] RSP: 002b:00007fd063d47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.795080][ T4864] RAX: ffffffffffffffda RBX: 00007fd065565fa0 RCX: 00007fd0652eaeb9 [ 69.795095][ T4864] RDX: 0000000020004804 RSI: 0000200000006040 RDI: 0000000000000005 [ 69.795132][ T4864] RBP: 00007fd063d47090 R08: 0000000000000000 R09: 0000000000000000 [ 69.795165][ T4864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.795177][ T4864] R13: 00007fd065566038 R14: 00007fd065565fa0 R15: 00007ffcf5a486a8 [ 69.795199][ T4864] [ 70.170529][ T4894] syz.4.493: attempt to access beyond end of device [ 70.170529][ T4894] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 70.192681][ T4894] syz.4.493: attempt to access beyond end of device [ 70.192681][ T4894] loop4: rw=524288, sector=145, nr_sectors = 344 limit=128 [ 70.437711][ T4903] EXT4-fs: Ignoring removed bh option [ 70.474490][ T4903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.495325][ T4903] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.498: Allocating blocks 497-513 which overlap fs metadata [ 70.509628][ T4903] EXT4-fs (loop2): Remounting filesystem read-only [ 70.591809][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.697737][ T4933] syz.4.510: attempt to access beyond end of device [ 70.697737][ T4933] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 70.697811][ T4939] syzkaller0: entered promiscuous mode [ 70.717241][ T4939] syzkaller0: entered allmulticast mode [ 70.747737][ T4933] syz.4.510: attempt to access beyond end of device [ 70.747737][ T4933] loop4: rw=524288, sector=145, nr_sectors = 352 limit=128 [ 70.918912][ T4963] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.957865][ T4963] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.984775][ T4972] FAULT_INJECTION: forcing a failure. [ 70.984775][ T4972] name failslab, interval 1, probability 0, space 0, times 0 [ 70.997814][ T4972] CPU: 0 UID: 0 PID: 4972 Comm: syz.0.522 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 70.997852][ T4972] Tainted: [W]=WARN [ 70.997860][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.997873][ T4972] Call Trace: [ 70.997938][ T4972] [ 70.998016][ T4972] __dump_stack+0x1d/0x30 [ 70.998233][ T4972] dump_stack_lvl+0x95/0xd0 [ 70.998250][ T4972] dump_stack+0x15/0x1b [ 70.998344][ T4972] should_fail_ex+0x263/0x280 [ 70.998366][ T4972] should_failslab+0x8c/0xb0 [ 70.998382][ T4972] kmem_cache_alloc_noprof+0x68/0x490 [ 70.998413][ T4972] ? skb_clone+0x151/0x1f0 [ 70.998427][ T4972] skb_clone+0x151/0x1f0 [ 70.998440][ T4972] __netlink_deliver_tap+0x2c9/0x500 [ 70.998525][ T4972] ? netlink_attachskb+0x2e2/0x660 [ 70.998544][ T4972] netlink_sendskb+0x126/0x150 [ 70.998572][ T4972] netlink_unicast+0x2a2/0x690 [ 70.998627][ T4972] netlink_ack+0x4c8/0x500 [ 70.998649][ T4972] netlink_rcv_skb+0x192/0x220 [ 70.998670][ T4972] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.998695][ T4972] rtnetlink_rcv+0x1c/0x30 [ 70.998730][ T4972] netlink_unicast+0x5c0/0x690 [ 70.998751][ T4972] netlink_sendmsg+0x5c8/0x6f0 [ 70.998765][ T4972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.998779][ T4972] ____sys_sendmsg+0x5af/0x600 [ 70.998794][ T4972] ___sys_sendmsg+0x195/0x1e0 [ 70.998915][ T4972] __x64_sys_sendmsg+0xd4/0x160 [ 70.999014][ T4972] x64_sys_call+0x17ba/0x3000 [ 70.999076][ T4972] do_syscall_64+0xc0/0x2a0 [ 70.999096][ T4972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.999112][ T4972] RIP: 0033:0x7f253f7caeb9 [ 70.999134][ T4972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.999188][ T4972] RSP: 002b:00007f253e227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.999204][ T4972] RAX: ffffffffffffffda RBX: 00007f253fa45fa0 RCX: 00007f253f7caeb9 [ 70.999214][ T4972] RDX: 0000000020004804 RSI: 0000200000006040 RDI: 0000000000000005 [ 70.999223][ T4972] RBP: 00007f253e227090 R08: 0000000000000000 R09: 0000000000000000 [ 70.999232][ T4972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.999279][ T4972] R13: 00007f253fa46038 R14: 00007f253fa45fa0 R15: 00007ffdaa2c9c78 [ 70.999291][ T4972] [ 71.233347][ T4963] bond0: (slave netdevsim1): Releasing backup interface [ 71.250149][ T4963] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.283092][ T2207] net_ratelimit: 29 callbacks suppressed [ 71.283114][ T2207] bond1: (slave bond0): failed to get link speed/duplex [ 71.299174][ T4963] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.358851][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.375094][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.394100][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.402546][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.412861][ T3329] bond1: (slave bond0): failed to get link speed/duplex [ 71.452173][ T4989] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.469127][ T4989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.484530][ T4989] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.500670][ T4989] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 49 (only 1 groups) [ 71.522841][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 71.588660][ T4989] EXT4-fs warning (device loop3): verify_group_input:156: Last group not full [ 71.639304][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 71.655972][ T5003] veth0: entered promiscuous mode [ 71.667034][ T5003] veth0: left promiscuous mode [ 71.695639][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.752842][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 71.788590][ T5014] bond2 (unregistering): Released all slaves [ 71.820420][ T5019] FAULT_INJECTION: forcing a failure. [ 71.820420][ T5019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.833932][ T5019] CPU: 0 UID: 0 PID: 5019 Comm: syz.4.535 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 71.834010][ T5019] Tainted: [W]=WARN [ 71.834017][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.834030][ T5019] Call Trace: [ 71.834037][ T5019] [ 71.834045][ T5019] __dump_stack+0x1d/0x30 [ 71.834073][ T5019] dump_stack_lvl+0x95/0xd0 [ 71.834100][ T5019] dump_stack+0x15/0x1b [ 71.834125][ T5019] should_fail_ex+0x263/0x280 [ 71.834239][ T5019] should_fail+0xb/0x20 [ 71.834280][ T5019] should_fail_usercopy+0x1a/0x20 [ 71.834383][ T5019] _copy_to_user+0x20/0xa0 [ 71.834409][ T5019] simple_read_from_buffer+0xb5/0x130 [ 71.834476][ T5019] proc_fail_nth_read+0x10e/0x150 [ 71.834511][ T5019] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.834552][ T5019] vfs_read+0x1ab/0x7f0 [ 71.834605][ T5019] ? __rcu_read_unlock+0x4e/0x70 [ 71.834640][ T5019] ? __fget_files+0x184/0x1c0 [ 71.834667][ T5019] ? mutex_lock+0x57/0x90 [ 71.834716][ T5019] ksys_read+0xdc/0x1a0 [ 71.834740][ T5019] __x64_sys_read+0x40/0x50 [ 71.834791][ T5019] x64_sys_call+0x2889/0x3000 [ 71.834821][ T5019] do_syscall_64+0xc0/0x2a0 [ 71.834885][ T5019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.834906][ T5019] RIP: 0033:0x7fd0652ab78e [ 71.834925][ T5019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 71.834946][ T5019] RSP: 002b:00007fd063d46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.834972][ T5019] RAX: ffffffffffffffda RBX: 00007fd063d476c0 RCX: 00007fd0652ab78e [ 71.835067][ T5019] RDX: 000000000000000f RSI: 00007fd063d470a0 RDI: 0000000000000004 [ 71.835083][ T5019] RBP: 00007fd063d47090 R08: 0000000000000000 R09: 0000000000000000 [ 71.835098][ T5019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.835113][ T5019] R13: 00007fd065566038 R14: 00007fd065565fa0 R15: 00007ffcf5a486a8 [ 71.835136][ T5019] [ 72.053654][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 72.152233][ T5046] __nla_validate_parse: 17 callbacks suppressed [ 72.152251][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 72.163762][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 72.167699][ T5037] 9p: Could not find request transport: 0x0000000000000009 [ 72.183175][ T5051] tipc: Started in network mode [ 72.188377][ T5051] tipc: Node identity ac1414aa, cluster identity 4711 [ 72.194578][ T5046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 72.210888][ T5051] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 72.218597][ T5051] tipc: Enabled bearer , priority 10 [ 72.231053][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 72.231071][ T29] audit: type=1400 audit(1769928367.177:638): avc: denied { read } for pid=5045 comm="syz.1.545" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.262069][ T29] audit: type=1400 audit(1769928367.177:639): avc: denied { open } for pid=5045 comm="syz.1.545" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.286330][ T5058] set_capacity_and_notify: 4 callbacks suppressed [ 72.286349][ T5058] loop3: detected capacity change from 0 to 1024 [ 72.300982][ T5051] netlink: 32 bytes leftover after parsing attributes in process `syz.2.541'. [ 72.310204][ T5051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.541'. [ 72.314209][ T5058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 72.337891][ T5037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 72.346834][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 72.383140][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 72.454511][ T5058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.550'. [ 72.494637][ T5058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=5058 comm=syz.3.550 [ 72.508355][ T5053] loop0: detected capacity change from 0 to 1024 [ 72.516414][ T29] audit: type=1400 audit(1769928367.467:640): avc: denied { mounton } for pid=5057 comm="syz.3.550" path="/120/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.543597][ T5053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.565961][ T29] audit: type=1400 audit(1769928367.497:641): avc: denied { mount } for pid=5057 comm="syz.3.550" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 72.587854][ T29] audit: type=1400 audit(1769928367.507:642): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 72.590206][ T5053] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 72.620625][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 72.635182][ T5053] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 72.635272][ T5053] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: comm syz.0.548: inode #1: comm syz.0.548: iget: illegal inode # [ 72.635387][ T5053] EXT4-fs (loop0): no journal found [ 72.635442][ T5053] EXT4-fs (loop0): can't get journal size [ 72.635755][ T5053] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 72.635793][ T5053] EXT4-fs (loop0): failed to initialize system zone (-22) [ 72.635818][ T5053] EXT4-fs (loop0): mount failed [ 72.720057][ T5086] loop3: detected capacity change from 0 to 128 [ 72.782668][ T5093] loop2: detected capacity change from 0 to 1024 [ 72.792516][ T5093] EXT4-fs: Ignoring removed orlov option [ 72.801188][ T5093] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 72.876827][ T29] audit: type=1400 audit(1769928367.817:643): avc: denied { watch } for pid=5100 comm="syz.1.565" path="/103" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.955537][ T29] audit: type=1400 audit(1769928367.847:644): avc: denied { map } for pid=5105 comm="syz.1.567" path="socket:[11011]" dev="sockfs" ino=11011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.967612][ T5114] loop0: detected capacity change from 0 to 512 [ 72.978962][ T29] audit: type=1400 audit(1769928367.847:645): avc: denied { accept } for pid=5105 comm="syz.1.567" path="socket:[11011]" dev="sockfs" ino=11011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.009433][ T29] audit: type=1400 audit(1769928367.867:646): avc: denied { getopt } for pid=5107 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.034301][ T5117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 73.041432][ T29] audit: type=1326 audit(1769928367.987:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.2.571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fa20fe5aeb9 code=0x0 [ 73.043359][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 73.093138][ T5117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 73.102185][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 73.113074][ T5114] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.161012][ T5128] xt_l2tp: invalid flags combination: 4 [ 73.170060][ T5114] EXT4-fs (loop0): 1 truncate cleaned up [ 73.177115][ T5114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.202792][ T23] tipc: Node number set to 2886997162 [ 73.256093][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.273379][ T5141] loop4: detected capacity change from 0 to 1024 [ 73.306953][ T5149] loop0: detected capacity change from 0 to 164 [ 73.349257][ T5149] iso9660: Unknown parameter 'iso9660' [ 73.452497][ T5165] SET target dimension over the limit! [ 74.143568][ T5208] FAULT_INJECTION: forcing a failure. [ 74.143568][ T5208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.157289][ T5208] CPU: 1 UID: 0 PID: 5208 Comm: syz.0.596 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 74.157329][ T5208] Tainted: [W]=WARN [ 74.157337][ T5208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.157349][ T5208] Call Trace: [ 74.157356][ T5208] [ 74.157366][ T5208] __dump_stack+0x1d/0x30 [ 74.157397][ T5208] dump_stack_lvl+0x95/0xd0 [ 74.157423][ T5208] dump_stack+0x15/0x1b [ 74.157446][ T5208] should_fail_ex+0x263/0x280 [ 74.157526][ T5208] should_fail+0xb/0x20 [ 74.157602][ T5208] should_fail_usercopy+0x1a/0x20 [ 74.157635][ T5208] _copy_from_user+0x1c/0xb0 [ 74.157661][ T5208] do_ipv6_setsockopt+0x124/0x21d0 [ 74.157729][ T5208] ? _parse_integer+0x27/0x40 [ 74.157761][ T5208] ? kstrtoull+0x111/0x140 [ 74.157790][ T5208] ? __rcu_read_unlock+0x4e/0x70 [ 74.157821][ T5208] ? avc_has_perm_noaudit+0xab/0x130 [ 74.157911][ T5208] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 74.157937][ T5208] ipv6_setsockopt+0x59/0x130 [ 74.157966][ T5208] rawv6_setsockopt+0x1d2/0x410 [ 74.158001][ T5208] sock_common_setsockopt+0x69/0x80 [ 74.158026][ T5208] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 74.158157][ T5208] __sys_setsockopt+0x184/0x200 [ 74.158200][ T5208] __x64_sys_setsockopt+0x64/0x80 [ 74.158234][ T5208] x64_sys_call+0x21d5/0x3000 [ 74.158343][ T5208] do_syscall_64+0xc0/0x2a0 [ 74.158377][ T5208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.158399][ T5208] RIP: 0033:0x7f253f7caeb9 [ 74.158490][ T5208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.158509][ T5208] RSP: 002b:00007f253e227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.158532][ T5208] RAX: ffffffffffffffda RBX: 00007f253fa45fa0 RCX: 00007f253f7caeb9 [ 74.158549][ T5208] RDX: 00000000000000d0 RSI: 0000000000000029 RDI: 0000000000000003 [ 74.158604][ T5208] RBP: 00007f253e227090 R08: 0000000000000004 R09: 0000000000000000 [ 74.158619][ T5208] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 74.158635][ T5208] R13: 00007f253fa46038 R14: 00007f253fa45fa0 R15: 00007ffdaa2c9c78 [ 74.158657][ T5208] [ 74.640817][ T5238] loop4: detected capacity change from 0 to 512 [ 74.659722][ T5238] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.607: iget: bad i_size value: 38620345925642 [ 74.675797][ T5238] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.607: couldn't read orphan inode 15 (err -117) [ 74.695407][ T5243] FAULT_INJECTION: forcing a failure. [ 74.695407][ T5243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.695566][ T5238] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.708788][ T5243] CPU: 0 UID: 0 PID: 5243 Comm: syz.2.609 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 74.708930][ T5243] Tainted: [W]=WARN [ 74.708938][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.708950][ T5243] Call Trace: [ 74.708958][ T5243] [ 74.708967][ T5243] __dump_stack+0x1d/0x30 [ 74.708994][ T5243] dump_stack_lvl+0x95/0xd0 [ 74.709017][ T5243] dump_stack+0x15/0x1b [ 74.709074][ T5243] should_fail_ex+0x263/0x280 [ 74.709115][ T5243] should_fail+0xb/0x20 [ 74.709159][ T5243] should_fail_usercopy+0x1a/0x20 [ 74.709250][ T5243] _copy_from_user+0x1c/0xb0 [ 74.709273][ T5243] copy_from_sockptr+0x48/0x70 [ 74.709307][ T5243] ip6_mroute_setsockopt+0x4fc/0xa80 [ 74.709373][ T5243] do_ipv6_setsockopt+0x21d/0x21d0 [ 74.709402][ T5243] ? _parse_integer+0x27/0x40 [ 74.709463][ T5243] ? kstrtoull+0x111/0x140 [ 74.709498][ T5243] ? __rcu_read_unlock+0x4e/0x70 [ 74.709529][ T5243] ? avc_has_perm_noaudit+0xab/0x130 [ 74.709563][ T5243] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 74.709592][ T5243] ipv6_setsockopt+0x59/0x130 [ 74.709698][ T5243] rawv6_setsockopt+0x1d2/0x410 [ 74.709727][ T5243] sock_common_setsockopt+0x69/0x80 [ 74.709831][ T5243] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 74.709875][ T5243] __sys_setsockopt+0x184/0x200 [ 74.709915][ T5243] __x64_sys_setsockopt+0x64/0x80 [ 74.710057][ T5243] x64_sys_call+0x21d5/0x3000 [ 74.710084][ T5243] do_syscall_64+0xc0/0x2a0 [ 74.710116][ T5243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.710194][ T5243] RIP: 0033:0x7fa20fe5aeb9 [ 74.710213][ T5243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.710232][ T5243] RSP: 002b:00007fa20e8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.710264][ T5243] RAX: ffffffffffffffda RBX: 00007fa2100d5fa0 RCX: 00007fa20fe5aeb9 [ 74.710325][ T5243] RDX: 00000000000000d0 RSI: 0000000000000029 RDI: 0000000000000003 [ 74.710339][ T5243] RBP: 00007fa20e8b7090 R08: 0000000000000004 R09: 0000000000000000 [ 74.710354][ T5243] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 74.710419][ T5243] R13: 00007fa2100d6038 R14: 00007fa2100d5fa0 R15: 00007ffda0cd06e8 [ 74.710439][ T5243] [ 74.851465][ T5253] FAULT_INJECTION: forcing a failure. [ 74.851465][ T5253] name failslab, interval 1, probability 0, space 0, times 0 [ 74.963697][ T5253] CPU: 0 UID: 0 PID: 5253 Comm: syz.2.612 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 74.963734][ T5253] Tainted: [W]=WARN [ 74.963742][ T5253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.963796][ T5253] Call Trace: [ 74.963803][ T5253] [ 74.963811][ T5253] __dump_stack+0x1d/0x30 [ 74.963837][ T5253] dump_stack_lvl+0x95/0xd0 [ 74.963859][ T5253] dump_stack+0x15/0x1b [ 74.963880][ T5253] should_fail_ex+0x263/0x280 [ 74.963989][ T5253] should_failslab+0x8c/0xb0 [ 74.964011][ T5253] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 74.964036][ T5253] ? __alloc_skb+0x2f0/0x4b0 [ 74.964103][ T5253] __alloc_skb+0x2f0/0x4b0 [ 74.964222][ T5253] ? __alloc_skb+0x219/0x4b0 [ 74.964321][ T5253] netlink_alloc_large_skb+0xbf/0xf0 [ 74.964350][ T5253] netlink_sendmsg+0x40c/0x6f0 [ 74.964400][ T5253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.964418][ T5253] ____sys_sendmsg+0x5af/0x600 [ 74.964439][ T5253] ___sys_sendmsg+0x195/0x1e0 [ 74.964466][ T5253] __x64_sys_sendmsg+0xd4/0x160 [ 74.964491][ T5253] x64_sys_call+0x17ba/0x3000 [ 74.964524][ T5253] do_syscall_64+0xc0/0x2a0 [ 74.964553][ T5253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.964589][ T5253] RIP: 0033:0x7fa20fe5aeb9 [ 74.964611][ T5253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.964629][ T5253] RSP: 002b:00007fa20e8b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.964648][ T5253] RAX: ffffffffffffffda RBX: 00007fa2100d5fa0 RCX: 00007fa20fe5aeb9 [ 74.964662][ T5253] RDX: 00000000000000d0 RSI: 00002000000001c0 RDI: 0000000000000003 [ 74.964750][ T5253] RBP: 00007fa20e8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.964764][ T5253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.964777][ T5253] R13: 00007fa2100d6038 R14: 00007fa2100d5fa0 R15: 00007ffda0cd06e8 [ 74.964795][ T5253] [ 75.189274][ T3329] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 75.212222][ T3329] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28 [ 75.225389][ T3329] EXT4-fs (loop4): This should not happen!! Data will be lost [ 75.225389][ T3329] [ 75.235174][ T3329] EXT4-fs (loop4): Total free blocks count 0 [ 75.235196][ T3329] EXT4-fs (loop4): Free/Dirty block details [ 75.235208][ T3329] EXT4-fs (loop4): free_blocks=0 [ 75.235221][ T3329] EXT4-fs (loop4): dirty_blocks=1 [ 75.235237][ T3329] EXT4-fs (loop4): Block reservation details [ 75.235249][ T3329] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 75.239551][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 75.378524][ T5271] loop3: detected capacity change from 0 to 1024 [ 75.385708][ T5271] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.392229][ T5271] EXT4-fs: Ignoring removed oldalloc option [ 75.398199][ T5271] EXT4-fs: Ignoring removed orlov option [ 75.424199][ T5271] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.595441][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 75.695640][ T5288] loop1: detected capacity change from 0 to 512 [ 75.767838][ T5292] wg1 speed is unknown, defaulting to 1000 [ 75.775833][ T5292] wg1 speed is unknown, defaulting to 1000 [ 75.782087][ T5294] FAULT_INJECTION: forcing a failure. [ 75.782087][ T5294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.794406][ T5292] wg1 speed is unknown, defaulting to 1000 [ 75.795504][ T5294] CPU: 0 UID: 0 PID: 5294 Comm: syz.3.623 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.795548][ T5294] Tainted: [W]=WARN [ 75.795556][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.795569][ T5294] Call Trace: [ 75.795576][ T5294] [ 75.795585][ T5294] __dump_stack+0x1d/0x30 [ 75.795613][ T5294] dump_stack_lvl+0x95/0xd0 [ 75.795636][ T5294] dump_stack+0x15/0x1b [ 75.795695][ T5294] should_fail_ex+0x263/0x280 [ 75.795764][ T5294] should_fail+0xb/0x20 [ 75.795793][ T5294] should_fail_usercopy+0x1a/0x20 [ 75.795826][ T5294] _copy_to_user+0x20/0xa0 [ 75.795867][ T5294] simple_read_from_buffer+0xb5/0x130 [ 75.795984][ T5294] proc_fail_nth_read+0x10e/0x150 [ 75.796014][ T5294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.796104][ T5294] vfs_read+0x1ab/0x7f0 [ 75.796193][ T5294] ? __rcu_read_unlock+0x4e/0x70 [ 75.796251][ T5294] ? __fget_files+0x184/0x1c0 [ 75.796275][ T5294] ? mutex_lock+0x57/0x90 [ 75.796299][ T5294] ksys_read+0xdc/0x1a0 [ 75.796393][ T5294] __x64_sys_read+0x40/0x50 [ 75.796413][ T5294] x64_sys_call+0x2889/0x3000 [ 75.796439][ T5294] do_syscall_64+0xc0/0x2a0 [ 75.796493][ T5294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.796521][ T5294] RIP: 0033:0x7f3924c7b78e [ 75.796539][ T5294] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 75.796559][ T5294] RSP: 002b:00007f3923716fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.796581][ T5294] RAX: ffffffffffffffda RBX: 00007f39237176c0 RCX: 00007f3924c7b78e [ 75.796597][ T5294] RDX: 000000000000000f RSI: 00007f39237170a0 RDI: 0000000000000004 [ 75.796610][ T5294] RBP: 00007f3923717090 R08: 0000000000000000 R09: 0000000000000000 [ 75.796625][ T5294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.796673][ T5294] R13: 00007f3924f36038 R14: 00007f3924f35fa0 R15: 00007fff3ac12798 [ 75.796693][ T5294] [ 75.827253][ T5292] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.833873][ T5297] hsr0: entered promiscuous mode [ 75.838358][ T5292] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 75.910706][ T5303] EXT4-fs: Ignoring removed orlov option [ 75.925584][ T5302] ext4: Unknown parameter 'euid' [ 75.984674][ T5292] wg1 speed is unknown, defaulting to 1000 [ 76.039160][ T5292] wg1 speed is unknown, defaulting to 1000 [ 76.046381][ T5292] wg1 speed is unknown, defaulting to 1000 [ 76.051644][ T5303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.052806][ T5292] wg1 speed is unknown, defaulting to 1000 [ 76.080607][ T5292] wg1 speed is unknown, defaulting to 1000 [ 76.140448][ T5302] sctp: [Deprecated]: syz.3.631 (pid 5302) Use of int in max_burst socket option. [ 76.140448][ T5302] Use struct sctp_assoc_value instead [ 76.190781][ T4980] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.195168][ T5320] FAULT_INJECTION: forcing a failure. [ 76.195168][ T5320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.213363][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.1.635 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.213406][ T5320] Tainted: [W]=WARN [ 76.213415][ T5320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.213429][ T5320] Call Trace: [ 76.213437][ T5320] [ 76.213447][ T5320] __dump_stack+0x1d/0x30 [ 76.213477][ T5320] dump_stack_lvl+0x95/0xd0 [ 76.213501][ T5320] dump_stack+0x15/0x1b [ 76.213522][ T5320] should_fail_ex+0x263/0x280 [ 76.213586][ T5320] should_fail+0xb/0x20 [ 76.213678][ T5320] should_fail_usercopy+0x1a/0x20 [ 76.213727][ T5320] _copy_to_user+0x20/0xa0 [ 76.213751][ T5320] simple_read_from_buffer+0xb5/0x130 [ 76.213791][ T5320] proc_fail_nth_read+0x10e/0x150 [ 76.213823][ T5320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.213897][ T5320] vfs_read+0x1ab/0x7f0 [ 76.213915][ T5320] ? current_time+0x188/0x240 [ 76.213939][ T5320] ? __rcu_read_unlock+0x4e/0x70 [ 76.213979][ T5320] ? __fget_files+0x184/0x1c0 [ 76.214005][ T5320] ? mutex_lock+0x57/0x90 [ 76.214101][ T5320] ksys_read+0xdc/0x1a0 [ 76.214122][ T5320] __x64_sys_read+0x40/0x50 [ 76.214141][ T5320] x64_sys_call+0x2889/0x3000 [ 76.214164][ T5320] do_syscall_64+0xc0/0x2a0 [ 76.214244][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.214279][ T5320] RIP: 0033:0x7f15b0afb78e [ 76.214299][ T5320] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.214320][ T5320] RSP: 002b:00007f15af596fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.214410][ T5320] RAX: ffffffffffffffda RBX: 00007f15af5976c0 RCX: 00007f15b0afb78e [ 76.214427][ T5320] RDX: 000000000000000f RSI: 00007f15af5970a0 RDI: 0000000000000005 [ 76.214443][ T5320] RBP: 00007f15af597090 R08: 0000000000000000 R09: 0000000000000000 [ 76.214459][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.214474][ T5320] R13: 00007f15b0db6038 R14: 00007f15b0db5fa0 R15: 00007ffe2d155cd8 [ 76.214495][ T5320] [ 76.453243][ T12] net_ratelimit: 40 callbacks suppressed [ 76.453327][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 76.520431][ T5330] nfs4: Unknown parameter 'dev/net/tun' [ 76.565148][ T5341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8236 sclass=netlink_route_socket pid=5341 comm=syz.1.644 [ 76.583181][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 76.595057][ T5343] FAULT_INJECTION: forcing a failure. [ 76.595057][ T5343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.608403][ T5343] CPU: 1 UID: 0 PID: 5343 Comm: syz.3.645 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.608443][ T5343] Tainted: [W]=WARN [ 76.608451][ T5343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.608466][ T5343] Call Trace: [ 76.608473][ T5343] [ 76.608483][ T5343] __dump_stack+0x1d/0x30 [ 76.608512][ T5343] dump_stack_lvl+0x95/0xd0 [ 76.608570][ T5343] dump_stack+0x15/0x1b [ 76.608593][ T5343] should_fail_ex+0x263/0x280 [ 76.608682][ T5343] should_fail+0xb/0x20 [ 76.608789][ T5343] should_fail_usercopy+0x1a/0x20 [ 76.608820][ T5343] _copy_from_user+0x1c/0xb0 [ 76.608883][ T5343] ___sys_sendmsg+0xc1/0x1e0 [ 76.608916][ T5343] __x64_sys_sendmsg+0xd4/0x160 [ 76.608944][ T5343] x64_sys_call+0x17ba/0x3000 [ 76.609014][ T5343] do_syscall_64+0xc0/0x2a0 [ 76.609080][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.609102][ T5343] RIP: 0033:0x7f3924cbaeb9 [ 76.609119][ T5343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.609138][ T5343] RSP: 002b:00007f3923717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.609231][ T5343] RAX: ffffffffffffffda RBX: 00007f3924f35fa0 RCX: 00007f3924cbaeb9 [ 76.609258][ T5343] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 76.609327][ T5343] RBP: 00007f3923717090 R08: 0000000000000000 R09: 0000000000000000 [ 76.609349][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.609363][ T5343] R13: 00007f3924f36038 R14: 00007f3924f35fa0 R15: 00007fff3ac12798 [ 76.609382][ T5343] [ 76.791895][ T5330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5330 comm=syz.2.640 [ 76.823599][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.862892][ T3329] bond1: (slave bond0): failed to get link speed/duplex [ 76.879901][ T5346] syz.1.656: attempt to access beyond end of device [ 76.879901][ T5346] loop1: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 76.916358][ T5346] syz.1.656: attempt to access beyond end of device [ 76.916358][ T5346] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 76.917567][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.930349][ T5346] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 76.973978][ T5346] syz.1.656: attempt to access beyond end of device [ 76.973978][ T5346] loop1: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 76.998419][ T5346] syz.1.656: attempt to access beyond end of device [ 76.998419][ T5346] loop1: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 77.012955][ T367] bond1: (slave bond0): failed to get link speed/duplex [ 77.019545][ T5346] syz.1.656: attempt to access beyond end of device [ 77.019545][ T5346] loop1: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 77.033935][ T5346] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 77.043568][ T5346] syz.1.656: attempt to access beyond end of device [ 77.043568][ T5346] loop1: rw=2049, sector=226, nr_sectors = 8 limit=128 [ 77.076076][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.094106][ T5346] syz.1.656: attempt to access beyond end of device [ 77.094106][ T5346] loop1: rw=8390657, sector=232, nr_sectors = 2 limit=128 [ 77.107955][ T5346] Buffer I/O error on dev loop1, logical block 116, lost async page write [ 77.121111][ T5346] syz.1.656: attempt to access beyond end of device [ 77.121111][ T5346] loop1: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 77.155846][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.166472][ T5346] syz.1.656: attempt to access beyond end of device [ 77.166472][ T5346] loop1: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 77.180556][ T5346] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 77.189403][ T5346] syz.1.656: attempt to access beyond end of device [ 77.189403][ T5346] loop1: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 77.191634][ T5354] wg1 speed is unknown, defaulting to 1000 [ 77.219075][ T3329] bond1: (slave bond0): failed to get link speed/duplex [ 77.227912][ T5346] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 77.242839][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 77.257782][ T5346] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 77.282599][ T5346] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 77.316251][ T5346] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 77.326426][ T5346] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 77.335229][ T2207] bond1: (slave bond0): failed to get link speed/duplex [ 77.336373][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 77.336403][ T29] audit: type=1400 audit(1769928372.287:766): avc: denied { read } for pid=3040 comm="dhcpcd" name="n26" dev="tmpfs" ino=4384 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.344138][ T5346] Buffer I/O error on dev loop1, logical block 120, lost async page write [ 77.348658][ T29] audit: type=1400 audit(1769928372.287:767): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=4384 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.408357][ T12] bridge_slave_1: left allmulticast mode [ 77.414272][ T12] bridge_slave_1: left promiscuous mode [ 77.420319][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.422427][ T29] audit: type=1400 audit(1769928372.357:768): avc: denied { create } for pid=5385 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.447106][ T29] audit: type=1400 audit(1769928372.357:769): avc: denied { write } for pid=5385 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.466745][ T29] audit: type=1326 audit(1769928372.357:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5385 comm="syz.3.658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3924cbaeb9 code=0x0 [ 77.489893][ T29] audit: type=1400 audit(1769928372.357:771): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=4384 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.514095][ T5391] __nla_validate_parse: 76 callbacks suppressed [ 77.514110][ T5391] netlink: 332 bytes leftover after parsing attributes in process `syz.2.655'. [ 77.530073][ T12] bridge_slave_0: left allmulticast mode [ 77.535986][ T12] bridge_slave_0: left promiscuous mode [ 77.542194][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.553147][ T5378] netlink: 332 bytes leftover after parsing attributes in process `syz.2.655'. [ 77.666840][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.677202][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.687468][ T12] bond0 (unregistering): Released all slaves [ 77.697170][ T5354] chnl_net:caif_netlink_parms(): no params data found [ 77.706932][ T5402] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.663'. [ 77.717918][ T5407] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 77.724569][ T5407] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.732202][ T5407] vhci_hcd vhci_hcd.0: Device attached [ 77.738342][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 77.754675][ T5402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.663'. [ 77.763690][ T5402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.663'. [ 77.779589][ T5402] vlan0: entered promiscuous mode [ 77.791084][ T12] hsr_slave_0: left promiscuous mode [ 77.796756][ T5402] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 77.797081][ T5415] set_capacity_and_notify: 3 callbacks suppressed [ 77.797095][ T5415] loop3: detected capacity change from 0 to 512 [ 77.803471][ T5402] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.803557][ T5402] vhci_hcd vhci_hcd.0: Device attached [ 77.821851][ T5415] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.836368][ T12] hsr_slave_1: left promiscuous mode [ 77.839597][ T29] audit: type=1400 audit(1769928372.777:772): avc: denied { read open } for pid=5420 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.841938][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.867381][ T29] audit: type=1400 audit(1769928372.777:773): avc: denied { getattr } for pid=5420 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.874839][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.910428][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.912713][ T5415] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.667: ea_inode with extended attributes [ 77.918093][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.931645][ T5415] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.667: error while reading EA inode 11 err=-117 [ 77.951084][ T5415] EXT4-fs (loop3): 1 orphan inode deleted [ 77.957457][ T5415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.969974][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 77.970398][ T5402] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 77.983213][ T5402] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 77.990981][ T5402] vhci_hcd vhci_hcd.0: Device attached [ 77.996729][ T12] veth1_macvtap: left promiscuous mode [ 78.014727][ T12] veth0_macvtap: left promiscuous mode [ 78.016344][ T5407] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 78.020390][ T12] veth1_vlan: left promiscuous mode [ 78.026907][ T5407] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.027017][ T5407] vhci_hcd vhci_hcd.0: Device attached [ 78.049610][ T12] veth0_vlan: left promiscuous mode [ 78.058644][ T5424] vhci_hcd: connection closed [ 78.058826][ T5417] vhci_hcd: connection closed [ 78.059326][ T2207] vhci_hcd vhci_hcd.1: stop threads [ 78.073680][ T2207] vhci_hcd vhci_hcd.1: release socket [ 78.073715][ T2207] vhci_hcd vhci_hcd.1: disconnect device [ 78.082829][ T5427] vhci_hcd: connection closed [ 78.092673][ T2207] vhci_hcd vhci_hcd.1: stop threads [ 78.092696][ T2207] vhci_hcd vhci_hcd.1: release socket [ 78.092805][ T2207] vhci_hcd vhci_hcd.1: disconnect device [ 78.100031][ T2207] vhci_hcd vhci_hcd.1: stop threads [ 78.100056][ T2207] vhci_hcd vhci_hcd.1: release socket [ 78.100083][ T2207] vhci_hcd vhci_hcd.1: disconnect device [ 78.110293][ T29] audit: type=1400 audit(1769928373.057:774): avc: denied { add_name } for pid=5416 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.110374][ T29] audit: type=1400 audit(1769928373.057:775): avc: denied { create } for pid=5416 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.167589][ T5408] vhci_hcd: connection closed [ 78.193723][ T3329] vhci_hcd vhci_hcd.1: stop threads [ 78.204117][ T3329] vhci_hcd vhci_hcd.1: release socket [ 78.209593][ T3329] vhci_hcd vhci_hcd.1: disconnect device [ 78.241537][ T12] team0 (unregistering): Port device team_slave_1 removed [ 78.251008][ T12] team0 (unregistering): Port device team_slave_0 removed [ 78.282799][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 78.311376][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.318690][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.326279][ T5354] bridge_slave_0: entered allmulticast mode [ 78.333275][ T5354] bridge_slave_0: entered promiscuous mode [ 78.340321][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.347613][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.354902][ T5354] bridge_slave_1: entered allmulticast mode [ 78.361356][ T5354] bridge_slave_1: entered promiscuous mode [ 78.378288][ T5354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.388950][ T5354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.409762][ T5354] team0: Port device team_slave_0 added [ 78.415527][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 78.424418][ T5354] team0: Port device team_slave_1 added [ 78.441168][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.450327][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.457478][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.483920][ T5354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.497519][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.504622][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.505931][ T5447] loop2: detected capacity change from 0 to 128 [ 78.531289][ T5354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.547812][ T5354] hsr_slave_0: entered promiscuous mode [ 78.566800][ T5447] vfat: Unknown parameter '' [ 78.570805][ T5354] hsr_slave_1: entered promiscuous mode [ 78.580215][ T5354] debugfs: 'hsr0' already exists in 'hsr' [ 78.586017][ T5354] Cannot create hsr debugfs directory [ 78.870941][ T5468] bond2: entered promiscuous mode [ 79.027206][ T12] IPVS: stop unused estimator thread 0... [ 79.094572][ T5479] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.675'. [ 79.265982][ T5500] loop1: detected capacity change from 0 to 512 [ 79.270970][ T5354] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.282172][ T5500] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.291828][ T5500] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #11: block 1: comm syz.1.679: lblock 0 mapped to illegal pblock 1 (length 1) [ 79.313333][ T5500] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.324976][ T5508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.681'. [ 79.329037][ T5354] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.345987][ T5500] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.679: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 79.363345][ T5500] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.679: ea_inode dec ref err=-117 [ 79.401312][ T5500] EXT4-fs (loop1): 1 orphan inode deleted [ 79.413475][ T5513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.682'. [ 79.423656][ T5354] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.423992][ T5500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 79.432248][ T5508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5508 comm=syz.2.681 [ 79.467868][ T5354] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.478389][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.552650][ T5354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.567501][ T5354] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.578584][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.585733][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.611973][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.619155][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.625627][ T5535] SELinux: syz.1.685 (5535) set checkreqprot to 1. This is no longer supported. [ 79.730470][ T5550] FAULT_INJECTION: forcing a failure. [ 79.730470][ T5550] name failslab, interval 1, probability 0, space 0, times 0 [ 79.743222][ T5550] CPU: 0 UID: 0 PID: 5550 Comm: syz.1.688 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.743270][ T5550] Tainted: [W]=WARN [ 79.743334][ T5550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.743349][ T5550] Call Trace: [ 79.743356][ T5550] [ 79.743365][ T5550] __dump_stack+0x1d/0x30 [ 79.743394][ T5550] dump_stack_lvl+0x95/0xd0 [ 79.743420][ T5550] dump_stack+0x15/0x1b [ 79.743445][ T5550] should_fail_ex+0x263/0x280 [ 79.743526][ T5550] should_failslab+0x8c/0xb0 [ 79.743549][ T5550] kmem_cache_alloc_noprof+0x68/0x490 [ 79.743619][ T5550] ? skb_clone+0x151/0x1f0 [ 79.743657][ T5550] skb_clone+0x151/0x1f0 [ 79.743675][ T5550] __netlink_deliver_tap+0x2c9/0x500 [ 79.743771][ T5550] netlink_unicast+0x66b/0x690 [ 79.743808][ T5550] netlink_sendmsg+0x5c8/0x6f0 [ 79.743833][ T5550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.743933][ T5550] ____sys_sendmsg+0x5af/0x600 [ 79.744010][ T5550] ___sys_sendmsg+0x195/0x1e0 [ 79.744062][ T5550] __x64_sys_sendmsg+0xd4/0x160 [ 79.744088][ T5550] x64_sys_call+0x17ba/0x3000 [ 79.744118][ T5550] do_syscall_64+0xc0/0x2a0 [ 79.744161][ T5550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.744186][ T5550] RIP: 0033:0x7f15b0b3aeb9 [ 79.744206][ T5550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.744228][ T5550] RSP: 002b:00007f15af597028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.744296][ T5550] RAX: ffffffffffffffda RBX: 00007f15b0db5fa0 RCX: 00007f15b0b3aeb9 [ 79.744313][ T5550] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 79.744328][ T5550] RBP: 00007f15af597090 R08: 0000000000000000 R09: 0000000000000000 [ 79.744343][ T5550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.744358][ T5550] R13: 00007f15b0db6038 R14: 00007f15b0db5fa0 R15: 00007ffe2d155cd8 [ 79.744448][ T5550] [ 79.775049][ T5354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.800245][ T5539] loop4: detected capacity change from 0 to 8192 [ 79.995018][ T5354] veth0_vlan: entered promiscuous mode [ 80.011557][ T5354] veth1_vlan: entered promiscuous mode [ 80.022056][ T5539] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.052360][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 80.058964][ T5354] veth0_macvtap: entered promiscuous mode [ 80.061453][ T5581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.692'. [ 80.069283][ T5354] veth1_macvtap: entered promiscuous mode [ 80.094935][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.115943][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.132854][ T5480] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.152423][ T5480] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.180699][ T5480] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.198615][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.300051][ T5606] loop4: detected capacity change from 0 to 512 [ 80.311787][ T5606] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.4.701: corrupted xattr block 95: invalid header [ 80.326804][ T5606] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 80.340105][ T5606] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.701: bg 0: block 7: invalid block bitmap [ 80.362500][ T5606] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 80.367446][ T5612] loop3: detected capacity change from 0 to 2048 [ 80.379218][ T5606] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.701: corrupted xattr block 95: invalid header [ 80.397176][ T5606] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 80.407070][ T5606] EXT4-fs (loop4): 1 orphan inode deleted [ 80.413351][ T5606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.437069][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.448997][ T5612] Alternate GPT is invalid, using primary GPT. [ 80.455559][ T5612] loop3: p2 p3 p7 [ 80.627541][ T5628] loop3: detected capacity change from 0 to 1024 [ 80.680676][ T5628] EXT4-fs: Ignoring removed orlov option [ 80.716480][ T5628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.790548][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.814324][ T5614] delete_channel: no stack [ 80.842141][ T5643] loop4: detected capacity change from 0 to 512 [ 80.856073][ T5643] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 80.892102][ T5643] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.903207][ T5643] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 80.912559][ T5643] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 80.922243][ T5643] EXT4-fs (loop4): 1 truncate cleaned up [ 80.938764][ T5643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.966983][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.063837][ T5667] wg1 speed is unknown, defaulting to 1000 [ 81.142625][ T5677] FAULT_INJECTION: forcing a failure. [ 81.142625][ T5677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.156073][ T5677] CPU: 0 UID: 0 PID: 5677 Comm: syz.5.721 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 81.156187][ T5677] Tainted: [W]=WARN [ 81.156196][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.156241][ T5677] Call Trace: [ 81.156249][ T5677] [ 81.156259][ T5677] __dump_stack+0x1d/0x30 [ 81.156289][ T5677] dump_stack_lvl+0x95/0xd0 [ 81.156312][ T5677] dump_stack+0x15/0x1b [ 81.156433][ T5677] should_fail_ex+0x263/0x280 [ 81.156472][ T5677] should_fail+0xb/0x20 [ 81.156502][ T5677] should_fail_usercopy+0x1a/0x20 [ 81.156572][ T5677] _copy_to_user+0x20/0xa0 [ 81.156593][ T5677] simple_read_from_buffer+0xb5/0x130 [ 81.156633][ T5677] proc_fail_nth_read+0x10e/0x150 [ 81.156717][ T5677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.156749][ T5677] vfs_read+0x1ab/0x7f0 [ 81.156771][ T5677] ? __rcu_read_unlock+0x4e/0x70 [ 81.156868][ T5677] ? __fget_files+0x184/0x1c0 [ 81.156902][ T5677] ? mutex_lock+0x57/0x90 [ 81.156997][ T5677] ksys_read+0xdc/0x1a0 [ 81.157021][ T5677] __x64_sys_read+0x40/0x50 [ 81.157041][ T5677] x64_sys_call+0x2889/0x3000 [ 81.157077][ T5677] do_syscall_64+0xc0/0x2a0 [ 81.157107][ T5677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.157128][ T5677] RIP: 0033:0x7f3d231db78e [ 81.157147][ T5677] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.157168][ T5677] RSP: 002b:00007f3d21c76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.157256][ T5677] RAX: ffffffffffffffda RBX: 00007f3d21c776c0 RCX: 00007f3d231db78e [ 81.157274][ T5677] RDX: 000000000000000f RSI: 00007f3d21c770a0 RDI: 0000000000000004 [ 81.157292][ T5677] RBP: 00007f3d21c77090 R08: 0000000000000000 R09: 0000000000000000 [ 81.157304][ T5677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.157316][ T5677] R13: 00007f3d23496038 R14: 00007f3d23495fa0 R15: 00007ffd48109d68 [ 81.157336][ T5677] [ 81.433229][ T5683] netlink: 'syz.5.723': attribute type 5 has an invalid length. [ 81.440425][ T5681] xt_hashlimit: size too large, truncated to 1048576 [ 81.521174][ T5480] net_ratelimit: 32 callbacks suppressed [ 81.521196][ T5480] bond1: (slave bond0): failed to get link speed/duplex [ 81.672937][ T367] bond1: (slave bond0): failed to get link speed/duplex [ 81.683406][ T5710] loop1: detected capacity change from 0 to 512 [ 81.730984][ T5710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.747554][ T5717] xfrm0: entered promiscuous mode [ 81.752656][ T5717] xfrm0: entered allmulticast mode [ 81.771265][ T5710] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.783371][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 81.791976][ T5717] loop5: detected capacity change from 0 to 1024 [ 81.803528][ T5717] EXT4-fs: Ignoring removed i_version option [ 81.813444][ T5717] EXT4-fs: dax option not supported [ 81.847039][ T5710] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.732: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 81.901174][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 82.012854][ T5480] bond1: (slave bond0): failed to get link speed/duplex [ 82.031779][ T5724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5724 comm=syz.3.736 [ 82.075247][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.087734][ T5747] tipc: Enabled bearer , priority 10 [ 82.123541][ T2207] bond1: (slave bond0): failed to get link speed/duplex [ 82.236233][ T5480] bond1: (slave bond0): failed to get link speed/duplex [ 82.352854][ T367] bond1: (slave bond0): failed to get link speed/duplex [ 82.442787][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 82.462964][ T367] bond1: (slave bond0): failed to get link speed/duplex [ 82.526501][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 82.526518][ T29] audit: type=1400 audit(1769928377.477:847): avc: denied { mounton } for pid=5793 comm="syz.5.761" path="/24/file0" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.563334][ T29] audit: type=1400 audit(1769928377.507:848): avc: denied { mount } for pid=5793 comm="syz.5.761" name="/" dev="loop5" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 82.586972][ T29] audit: type=1400 audit(1769928377.537:849): avc: denied { getopt } for pid=5785 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.670862][ T5799] EXT4-fs (loop1): Invalid default hash set in the superblock [ 82.739559][ T29] audit: type=1400 audit(1769928377.687:850): avc: denied { connect } for pid=5807 comm="syz.5.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.763850][ T5808] team0: Device gtp0 is of different type [ 82.797836][ T5810] netlink: 'syz.1.768': attribute type 8 has an invalid length. [ 82.853965][ T29] audit: type=1400 audit(1769928377.797:851): avc: denied { wake_alarm } for pid=5815 comm="syz.4.770" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.876985][ T5821] set_capacity_and_notify: 2 callbacks suppressed [ 82.877005][ T5821] loop1: detected capacity change from 0 to 512 [ 82.914408][ T5825] __nla_validate_parse: 10 callbacks suppressed [ 82.914449][ T5825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'. [ 82.929810][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'. [ 82.942221][ T5821] vfat: Unknown parameter 'noXnumtail' [ 82.942597][ T5828] loop3: detected capacity change from 0 to 512 [ 82.987646][ T2207] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.987733][ T5825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'. [ 82.987763][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'. [ 82.998407][ T5828] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.023911][ T5828] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.033020][ T5828] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 83.050942][ T2207] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.096340][ T2207] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.162459][ T2207] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.231282][ T5857] loop2: detected capacity change from 0 to 512 [ 83.263294][ T5857] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 83.306970][ T5867] wg1 speed is unknown, defaulting to 1000 [ 83.313232][ T5857] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.778: invalid indirect mapped block 2683928664 (level 1) [ 83.345743][ T5857] EXT4-fs (loop2): Remounting filesystem read-only [ 83.355789][ T5857] EXT4-fs (loop2): 1 truncate cleaned up [ 83.377261][ T5877] pimreg: entered allmulticast mode [ 83.418398][ T5857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.452850][ T5877] pimreg: left allmulticast mode [ 83.493362][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.561535][ T5894] loop2: detected capacity change from 0 to 512 [ 83.598531][ T5894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.615553][ T5894] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.637372][ T5890] loop5: detected capacity change from 0 to 8192 [ 83.666670][ T5894] netlink: 84 bytes leftover after parsing attributes in process `syz.2.788'. [ 83.696470][ T5894] netlink: 'syz.2.788': attribute type 21 has an invalid length. [ 83.704440][ T5894] netlink: 132 bytes leftover after parsing attributes in process `syz.2.788'. [ 83.713528][ T5894] netlink: 'syz.2.788': attribute type 1 has an invalid length. [ 83.725703][ T4452] loop5: p1 p2 p3 p4 [ 83.729957][ T4452] loop5: p1 size 262144 extends beyond EOD, truncated [ 83.745114][ T4452] loop5: p2 start 2531787010 is beyond EOD, truncated [ 83.752064][ T4452] loop5: p3 size 100663552 extends beyond EOD, truncated [ 83.798328][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.808822][ T4452] loop5: p4 size 50331648 extends beyond EOD, truncated [ 83.819740][ T5890] loop5: p1 p2 p3 p4 [ 83.824395][ T5890] loop5: p1 size 262144 extends beyond EOD, truncated [ 83.838274][ T5906] syzkaller0: entered promiscuous mode [ 83.840978][ T5890] loop5: p2 start 2531787010 is beyond EOD, [ 83.843960][ T5906] syzkaller0: entered allmulticast mode [ 83.849986][ T5890] truncated [ 83.849996][ T5890] loop5: p3 size 100663552 extends beyond EOD, truncated [ 83.876348][ T52] syzkaller0: tun_net_xmit 48 [ 83.916178][ T5890] loop5: p4 size 50331648 extends beyond EOD, truncated [ 83.946342][ T5898] wg1 speed is unknown, defaulting to 1000 [ 83.949454][ T5906] syzkaller0: tun_net_xmit 1280 [ 83.957902][ T5906] syzkaller0: create flow: hash 27169553 index 1 [ 84.031577][ T29] audit: type=1400 audit(1769928378.977:852): avc: denied { connect } for pid=5921 comm="syz.5.796" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.052225][ T29] audit: type=1400 audit(1769928378.977:853): avc: denied { write } for pid=5921 comm="syz.5.796" path="socket:[13758]" dev="sockfs" ino=13758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.086506][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.109211][ T4457] udevd[4457]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 84.120224][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.121358][ T4452] udevd[4452]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 84.132879][ T5927] loop5: detected capacity change from 0 to 512 [ 84.153942][ T4371] udevd[4371]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 84.168519][ T5925] loop4: detected capacity change from 0 to 2048 [ 84.176050][ T5925] EXT4-fs: Ignoring removed oldalloc option [ 84.185361][ T5927] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.798: corrupted in-inode xattr: e_name out of bounds [ 84.208814][ T5927] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.798: couldn't read orphan inode 15 (err -117) [ 84.213456][ T4452] udevd[4452]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 84.222169][ T4371] udevd[4371]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 84.232166][ T4457] udevd[4457]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 84.251915][ T5927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.266901][ T5925] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 84.276847][ T5925] System zones: 0-7 [ 84.288689][ T5925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.322031][ T5905] syzkaller0: delete flow: hash 27169553 index 1 [ 84.344508][ T5354] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.391615][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.429896][ T3415] hid-generic 0006:06FF:FFFFFF01.0003: unknown main item tag 0x2 [ 84.437857][ T3415] hid-generic 0006:06FF:FFFFFF01.0003: item fetching failed at offset 8/53 [ 84.449924][ T3415] hid-generic 0006:06FF:FFFFFF01.0003: probe with driver hid-generic failed with error -22 [ 84.501865][ T5946] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2581 sclass=netlink_xfrm_socket pid=5946 comm=syz.5.804 [ 84.515605][ T5946] netlink: 72 bytes leftover after parsing attributes in process `syz.5.804'. [ 84.545275][ T5946] netlink: 16 bytes leftover after parsing attributes in process `syz.5.804'. [ 84.645410][ T5966] loop4: detected capacity change from 0 to 512 [ 84.657748][ T5969] loop5: detected capacity change from 0 to 1024 [ 84.688061][ T5966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.698386][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 84.721788][ T5977] loop2: detected capacity change from 0 to 512 [ 84.734169][ T5977] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.750710][ T5969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.765980][ T5966] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.777079][ T5969] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.788609][ T29] audit: type=1400 audit(1769928379.737:854): avc: denied { read } for pid=5963 comm="syz.4.810" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 84.797073][ T5969] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.813: lblock 3 mapped to illegal pblock 3 (length 3) [ 84.830463][ T29] audit: type=1400 audit(1769928379.777:855): avc: denied { read write } for pid=5982 comm="syz.1.816" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.837900][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.855606][ T29] audit: type=1400 audit(1769928379.777:856): avc: denied { open } for pid=5982 comm="syz.1.816" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.878774][ T5969] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 84.901891][ T5969] EXT4-fs (loop5): This should not happen!! Data will be lost [ 84.901891][ T5969] [ 84.931300][ T52] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 84.933020][ T5990] netlink: 'syz.4.817': attribute type 3 has an invalid length. [ 84.953508][ T5990] netlink: 'syz.4.817': attribute type 8 has an invalid length. [ 84.954274][ T52] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 84.961262][ T5990] netlink: 199720 bytes leftover after parsing attributes in process `syz.4.817'. [ 84.982959][ T52] EXT4-fs (loop5): This should not happen!! Data will be lost [ 84.982959][ T52] [ 85.007482][ T5354] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.045969][ T5998] FAULT_INJECTION: forcing a failure. [ 85.045969][ T5998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.059320][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz.5.818 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 85.059383][ T5998] Tainted: [W]=WARN [ 85.059391][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.059400][ T5998] Call Trace: [ 85.059406][ T5998] [ 85.059412][ T5998] __dump_stack+0x1d/0x30 [ 85.059506][ T5998] dump_stack_lvl+0x95/0xd0 [ 85.059522][ T5998] dump_stack+0x15/0x1b [ 85.059535][ T5998] should_fail_ex+0x263/0x280 [ 85.059557][ T5998] should_fail+0xb/0x20 [ 85.059592][ T5998] should_fail_usercopy+0x1a/0x20 [ 85.059614][ T5998] _copy_to_user+0x20/0xa0 [ 85.059628][ T5998] simple_read_from_buffer+0xb5/0x130 [ 85.059692][ T5998] proc_fail_nth_read+0x10e/0x150 [ 85.059711][ T5998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.059729][ T5998] vfs_read+0x1ab/0x7f0 [ 85.059744][ T5998] ? __schedule+0x82d/0xc90 [ 85.059796][ T5998] ? __rcu_read_unlock+0x4e/0x70 [ 85.059831][ T5998] ? __fget_files+0x184/0x1c0 [ 85.059925][ T5998] ? mutex_lock+0x57/0x90 [ 85.059954][ T5998] ksys_read+0xdc/0x1a0 [ 85.059978][ T5998] __x64_sys_read+0x40/0x50 [ 85.060007][ T5998] x64_sys_call+0x2889/0x3000 [ 85.060031][ T5998] do_syscall_64+0xc0/0x2a0 [ 85.060066][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.060087][ T5998] RIP: 0033:0x7f3d231db78e [ 85.060170][ T5998] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 85.060189][ T5998] RSP: 002b:00007f3d21c76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.060213][ T5998] RAX: ffffffffffffffda RBX: 00007f3d21c776c0 RCX: 00007f3d231db78e [ 85.060231][ T5998] RDX: 000000000000000f RSI: 00007f3d21c770a0 RDI: 0000000000000006 [ 85.060252][ T5998] RBP: 00007f3d21c77090 R08: 0000000000000000 R09: 0000000000000000 [ 85.060268][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.060284][ T5998] R13: 00007f3d23496038 R14: 00007f3d23495fa0 R15: 00007ffd48109d68 [ 85.060307][ T5998] [ 85.314868][ T6003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.359511][ T6003] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 85.406268][ T6013] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.825: corrupted in-inode xattr: invalid ea_ino [ 85.423539][ T367] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.433874][ T367] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.444783][ T6013] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.825: couldn't read orphan inode 15 (err -117) [ 85.459926][ T6013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.502657][ T6013] batadv_slave_1: entered promiscuous mode [ 85.512272][ T5354] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.526366][ T367] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.536812][ T367] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.578777][ T6021] batadv_slave_1: left promiscuous mode [ 85.596868][ T367] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.607595][ T367] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.619408][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.648664][ T6034] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 85.655539][ T6034] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.663357][ T6034] vhci_hcd vhci_hcd.0: Device attached [ 85.680016][ T6037] vhci_hcd: connection closed [ 85.680203][ T37] vhci_hcd vhci_hcd.5: stop threads [ 85.690308][ T37] vhci_hcd vhci_hcd.5: release socket [ 85.695838][ T37] vhci_hcd vhci_hcd.5: disconnect device [ 85.698038][ T6017] wg1 speed is unknown, defaulting to 1000 [ 85.714067][ T367] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.724680][ T367] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.798178][ T6017] chnl_net:caif_netlink_parms(): no params data found [ 85.830040][ T6046] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 85.867705][ T367] bridge_slave_1: left allmulticast mode [ 85.873449][ T367] bridge_slave_1: left promiscuous mode [ 85.879133][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.887430][ T367] bridge_slave_0: left allmulticast mode [ 85.893171][ T367] bridge_slave_0: left promiscuous mode [ 85.898833][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.907508][ T367] tipc: Resetting bearer [ 85.940243][ T367] tipc: Disabling bearer [ 86.035068][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.045840][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.055515][ T367] bond0 (unregistering): Released all slaves [ 86.063615][ T367] bond1 (unregistering): Released all slaves [ 86.071776][ T367] bond2 (unregistering): Released all slaves [ 86.087875][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.095532][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.103723][ T6017] bridge_slave_0: entered allmulticast mode [ 86.110483][ T6017] bridge_slave_0: entered promiscuous mode [ 86.117325][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.124470][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.131909][ T6017] bridge_slave_1: entered allmulticast mode [ 86.144451][ T6017] bridge_slave_1: entered promiscuous mode [ 86.168586][ T367] tipc: Disabling bearer [ 86.173763][ T367] tipc: Left network mode [ 86.180752][ T6017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.193312][ T367] hsr_slave_0: left promiscuous mode [ 86.199050][ T367] hsr_slave_1: left promiscuous mode [ 86.205362][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.212924][ T367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.221722][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.229473][ T367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.256626][ T367] veth1_macvtap: left promiscuous mode [ 86.269499][ T367] veth0_macvtap: left promiscuous mode [ 86.275992][ T367] veth1_vlan: left promiscuous mode [ 86.281369][ T367] veth0_vlan: left promiscuous mode [ 86.349820][ T367] team0 (unregistering): Port device team_slave_1 removed [ 86.365995][ T367] team0 (unregistering): Port device team_slave_0 removed [ 86.397072][ T6017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.434427][ T6017] team0: Port device team_slave_0 added [ 86.441199][ T6017] team0: Port device team_slave_1 added [ 86.474637][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.481635][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.508171][ T6017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.557070][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.564492][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.590896][ T6017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.623481][ T52] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.650171][ T6017] hsr_slave_0: entered promiscuous mode [ 86.656610][ T6017] hsr_slave_1: entered promiscuous mode [ 86.698582][ T6017] debugfs: 'hsr0' already exists in 'hsr' [ 86.704424][ T6017] Cannot create hsr debugfs directory [ 86.713086][ T37] net_ratelimit: 26 callbacks suppressed [ 86.713103][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 86.726186][ T52] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.748505][ T52] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.767839][ T52] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.832872][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 86.869197][ T367] IPVS: stop unused estimator thread 0... [ 86.935222][ T6017] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 86.953398][ T6140] FAULT_INJECTION: forcing a failure. [ 86.953398][ T6140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.966627][ T6140] CPU: 1 UID: 0 PID: 6140 Comm: syz.4.847 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.966668][ T6140] Tainted: [W]=WARN [ 86.966677][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.966692][ T6140] Call Trace: [ 86.966701][ T6140] [ 86.966709][ T6140] __dump_stack+0x1d/0x30 [ 86.966735][ T6140] dump_stack_lvl+0x95/0xd0 [ 86.966842][ T6140] dump_stack+0x15/0x1b [ 86.966917][ T6140] should_fail_ex+0x263/0x280 [ 86.966955][ T6140] should_fail+0xb/0x20 [ 86.966985][ T6140] should_fail_usercopy+0x1a/0x20 [ 86.967024][ T6140] _copy_from_user+0x1c/0xb0 [ 86.967112][ T6140] sctp_setsockopt+0x164/0xea0 [ 86.967209][ T6140] sock_common_setsockopt+0x69/0x80 [ 86.967237][ T6140] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 86.967273][ T6140] __sys_setsockopt+0x184/0x200 [ 86.967311][ T6140] __x64_sys_setsockopt+0x64/0x80 [ 86.967349][ T6140] x64_sys_call+0x21d5/0x3000 [ 86.967459][ T6140] do_syscall_64+0xc0/0x2a0 [ 86.967498][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.967525][ T6140] RIP: 0033:0x7fd0652eaeb9 [ 86.967545][ T6140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.967639][ T6140] RSP: 002b:00007fd063d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 86.967665][ T6140] RAX: ffffffffffffffda RBX: 00007fd065566090 RCX: 00007fd0652eaeb9 [ 86.967726][ T6140] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000003 [ 86.967739][ T6140] RBP: 00007fd063d26090 R08: 0000000000000008 R09: 0000000000000000 [ 86.967753][ T6140] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 86.967767][ T6140] R13: 00007fd065566128 R14: 00007fd065566090 R15: 00007ffcf5a486a8 [ 86.967789][ T6140] [ 86.975501][ T6017] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 87.179283][ T6017] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 87.191780][ T6017] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 87.203442][ T2207] bond1: (slave bond0): failed to get link speed/duplex [ 87.371915][ T6017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.385420][ T6017] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.395662][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.402819][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.454347][ T2207] bond1: (slave bond0): failed to get link speed/duplex [ 87.562806][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 87.672804][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 87.725163][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.732369][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.758849][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 87.758864][ T29] audit: type=1326 audit(1769928382.707:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 87.799856][ T6017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.810564][ T6017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.824698][ T29] audit: type=1326 audit(1769928382.737:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 87.848375][ T29] audit: type=1326 audit(1769928382.737:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 87.872122][ T29] audit: type=1326 audit(1769928382.737:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 87.890229][ T6186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.895652][ T29] audit: type=1326 audit(1769928382.737:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 87.931671][ T29] audit: type=1326 audit(1769928382.737:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 87.955263][ T29] audit: type=1326 audit(1769928382.737:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 87.979072][ T29] audit: type=1326 audit(1769928382.737:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 88.002362][ T29] audit: type=1326 audit(1769928382.737:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 88.025951][ T29] audit: type=1326 audit(1769928382.737:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 88.060472][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.062946][ T5480] bond1: (slave bond0): failed to get link speed/duplex [ 88.143001][ T6017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.173243][ T6214] __nla_validate_parse: 13 callbacks suppressed [ 88.173263][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.860'. [ 88.188622][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.860'. [ 88.191857][ T5480] bond1: (slave bond0): failed to get link speed/duplex [ 88.206276][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.860'. [ 88.215463][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.860'. [ 88.254539][ T6222] set_capacity_and_notify: 4 callbacks suppressed [ 88.254562][ T6222] loop5: detected capacity change from 0 to 512 [ 88.297148][ T6222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.318932][ T6222] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.324151][ T367] bond1: (slave bond0): failed to get link speed/duplex [ 88.339497][ T6017] veth0_vlan: entered promiscuous mode [ 88.348262][ T6017] veth1_vlan: entered promiscuous mode [ 88.360987][ T6222] netlink: 36 bytes leftover after parsing attributes in process `syz.5.861'. [ 88.376366][ T6017] veth0_macvtap: entered promiscuous mode [ 88.384217][ T6017] veth1_macvtap: entered promiscuous mode [ 88.394248][ T6235] SELinux: failed to load policy [ 88.400629][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.410309][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.434684][ T367] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.443634][ T3329] bond1: (slave bond0): failed to get link speed/duplex [ 88.453756][ T367] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.468009][ T367] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.477906][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.496757][ T5354] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.560509][ T6245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6245 comm=syz.3.867 [ 88.574881][ T6252] loop6: detected capacity change from 0 to 1024 [ 88.581779][ T6252] EXT4-fs: Ignoring removed bh option [ 88.587939][ T6252] EXT4-fs: inline encryption not supported [ 88.594178][ T6252] /dev/loop6: Can't open blockdev [ 88.656977][ T6258] loop6: detected capacity change from 0 to 1024 [ 88.665137][ T6258] ext4: Unknown parameter './file2' [ 89.042365][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'. [ 89.051646][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 89.061022][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'. [ 89.070045][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 89.095395][ T6291] loop4: detected capacity change from 0 to 512 [ 89.128840][ T6291] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.140675][ T6299] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 89.154752][ T6291] EXT4-fs (loop4): 1 truncate cleaned up [ 89.161091][ T6291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.244214][ T6291] netlink: 'syz.4.881': attribute type 7 has an invalid length. [ 89.252167][ T6291] netlink: 148 bytes leftover after parsing attributes in process `syz.4.881'. [ 89.321631][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.392245][ T6326] loop4: detected capacity change from 0 to 512 [ 89.424444][ T6326] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 89.441885][ T6326] EXT4-fs (loop4): mount failed [ 89.516305][ T6347] program syz.4.900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.557722][ T6353] loop4: detected capacity change from 0 to 256 [ 89.564725][ T6353] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.577825][ T6353] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.773522][ T6355] loop4: detected capacity change from 0 to 256 [ 90.117388][ T6361] loop1: detected capacity change from 0 to 128 [ 90.129905][ T6361] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.142541][ T6361] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.221489][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.329718][ T6381] RDS: rds_bind could not find a transport for ::100:0:3:0:20:0, load rds_tcp or rds_rdma? [ 90.369712][ T6389] syz_tun: entered allmulticast mode [ 90.415489][ T6399] tmpfs: Bad value for 'mode' [ 90.421547][ T6399] random: crng reseeded on system resumption [ 90.431246][ T6399] loop5: detected capacity change from 0 to 128 [ 90.440410][ T6399] EXT4-fs: test_dummy_encryption option not supported [ 90.480006][ T6401] wg1 speed is unknown, defaulting to 1000 [ 90.646479][ T6413] loop3: detected capacity change from 0 to 1024 [ 90.655534][ T6413] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 90.665731][ T6413] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 90.677346][ T6413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.771631][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.095199][ T6465] /dev/loop1: Can't open blockdev [ 91.127787][ T6465] wg1 speed is unknown, defaulting to 1000 [ 91.244580][ T6476] wg1 speed is unknown, defaulting to 1000 [ 91.256954][ T6489] netlink: 'syz.6.930': attribute type 1 has an invalid length. [ 91.301163][ T6482] bond1 (unregistering): Released all slaves [ 91.485506][ T6514] EXT4-fs: Ignoring removed nobh option [ 91.507368][ T6514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.520193][ T6520] EXT4-fs: inline encryption not supported [ 91.525311][ T6514] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.940: Allocating blocks 497-513 which overlap fs metadata [ 91.541641][ T6514] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 91.554319][ T6514] EXT4-fs (loop6): This should not happen!! Data will be lost [ 91.554319][ T6514] [ 91.566769][ T6520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 91.584068][ T6520] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.596206][ T6017] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.618864][ T6520] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.942: lblock 0 mapped to illegal pblock 0 (length 1) [ 91.632688][ T6520] EXT4-fs (loop1): Remounting filesystem read-only [ 91.649551][ T6529] wg1 speed is unknown, defaulting to 1000 [ 91.676099][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 91.724587][ T6446] net_ratelimit: 29 callbacks suppressed [ 91.724606][ T6446] bond1: (slave bond0): failed to get link speed/duplex [ 91.802825][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.843039][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 91.918274][ T6555] lo speed is unknown, defaulting to 1000 [ 91.931913][ T6555] lo speed is unknown, defaulting to 1000 [ 91.945708][ T6555] lo speed is unknown, defaulting to 1000 [ 91.952970][ T6458] bond1: (slave bond0): failed to get link speed/duplex [ 91.972050][ T6555] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 92.001451][ T6555] lo speed is unknown, defaulting to 1000 [ 92.023112][ T6555] lo speed is unknown, defaulting to 1000 [ 92.040367][ T6555] lo speed is unknown, defaulting to 1000 [ 92.047886][ T6555] lo speed is unknown, defaulting to 1000 [ 92.048736][ T6572] sctp: [Deprecated]: syz.1.951 (pid 6572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.048736][ T6572] Use struct sctp_sack_info instead [ 92.064625][ T6555] lo speed is unknown, defaulting to 1000 [ 92.072269][ T6446] bond1: (slave bond0): failed to get link speed/duplex [ 92.146196][ T6576] netlink: 'syz.6.954': attribute type 3 has an invalid length. [ 92.202982][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 92.232631][ T6596] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.248330][ T6600] 9p: Bad value for 'rfdno' [ 92.312829][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 92.434717][ T6446] bond1: (slave bond0): failed to get link speed/duplex [ 92.543113][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 92.635164][ T6637] Alternate GPT is invalid, using primary GPT. [ 92.642859][ T6637] loop3: p1 p2 p3 [ 92.652819][ T6445] bond1: (slave bond0): failed to get link speed/duplex [ 92.755098][ T4452] udevd[4452]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 92.758423][ T4457] udevd[4457]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 92.767213][ T4371] udevd[4371]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 92.775551][ T6446] bond1: (slave bond0): failed to get link speed/duplex [ 92.811900][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 92.811916][ T29] audit: type=1400 audit(1769928387.757:1039): avc: denied { write } for pid=6651 comm="syz.4.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 92.963014][ T6600] syz.6.959 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 92.977520][ T6600] CPU: 0 UID: 0 PID: 6600 Comm: syz.6.959 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.977562][ T6600] Tainted: [W]=WARN [ 92.977570][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.977585][ T6600] Call Trace: [ 92.977594][ T6600] [ 92.977603][ T6600] __dump_stack+0x1d/0x30 [ 92.977644][ T6600] dump_stack_lvl+0x95/0xd0 [ 92.977671][ T6600] dump_stack+0x15/0x1b [ 92.977695][ T6600] dump_header+0x80/0x240 [ 92.977720][ T6600] oom_kill_process+0x295/0x350 [ 92.977830][ T6600] out_of_memory+0x97d/0xb80 [ 92.977860][ T6600] try_charge_memcg+0x62e/0xa10 [ 92.977891][ T6600] obj_cgroup_charge_pages+0x23/0xc0 [ 92.977925][ T6600] __memcg_kmem_charge_page+0x9e/0x170 [ 92.978015][ T6600] __alloc_frozen_pages_noprof+0x18a/0x350 [ 92.978054][ T6600] alloc_pages_mpol+0xb3/0x260 [ 92.978097][ T6600] alloc_pages_noprof+0x8f/0x130 [ 92.978144][ T6600] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 92.978190][ T6600] __kvmalloc_node_noprof+0x471/0x680 [ 92.978272][ T6600] ? ip_set_alloc+0x24/0x30 [ 92.978316][ T6600] ? ip_set_alloc+0x24/0x30 [ 92.978430][ T6600] ip_set_alloc+0x24/0x30 [ 92.978483][ T6600] hash_netiface_create+0x282/0x740 [ 92.978521][ T6600] ? __pfx_hash_netiface_create+0x10/0x10 [ 92.978613][ T6600] ip_set_create+0x3cf/0x970 [ 92.978644][ T6600] ? __nla_parse+0x40/0x60 [ 92.978668][ T6600] nfnetlink_rcv_msg+0x509/0x5d0 [ 92.978720][ T6600] netlink_rcv_skb+0x123/0x220 [ 92.978805][ T6600] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 92.978843][ T6600] nfnetlink_rcv+0x167/0x1720 [ 92.978930][ T6600] ? __kfree_skb+0x109/0x150 [ 92.978991][ T6600] ? nlmon_xmit+0x4f/0x60 [ 92.979030][ T6600] ? consume_skb+0x49/0x140 [ 92.979138][ T6600] ? nlmon_xmit+0x4f/0x60 [ 92.979171][ T6600] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 92.979214][ T6600] ? __dev_queue_xmit+0x139a/0x1f20 [ 92.979250][ T6600] ? __dev_queue_xmit+0x148/0x1f20 [ 92.979351][ T6600] ? ref_tracker_free+0x37d/0x3e0 [ 92.979461][ T6600] ? __netlink_deliver_tap+0x4dc/0x500 [ 92.979502][ T6600] netlink_unicast+0x5c0/0x690 [ 92.979540][ T6600] netlink_sendmsg+0x5c8/0x6f0 [ 92.979567][ T6600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.979647][ T6600] ____sys_sendmsg+0x5af/0x600 [ 92.979675][ T6600] ___sys_sendmsg+0x195/0x1e0 [ 92.979711][ T6600] __x64_sys_sendmsg+0xd4/0x160 [ 92.979740][ T6600] x64_sys_call+0x17ba/0x3000 [ 92.979834][ T6600] do_syscall_64+0xc0/0x2a0 [ 92.979909][ T6600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.979937][ T6600] RIP: 0033:0x7f8e03c5aeb9 [ 92.979958][ T6600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.979981][ T6600] RSP: 002b:00007f8e026b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.980034][ T6600] RAX: ffffffffffffffda RBX: 00007f8e03ed5fa0 RCX: 00007f8e03c5aeb9 [ 92.980053][ T6600] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 92.980077][ T6600] RBP: 00007f8e03cc8c1f R08: 0000000000000000 R09: 0000000000000000 [ 92.980094][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.980109][ T6600] R13: 00007f8e03ed6038 R14: 00007f8e03ed5fa0 R15: 00007ffd2731b528 [ 92.980132][ T6600] [ 92.980140][ T6600] memory: usage 307200kB, limit 307200kB, failcnt 142 [ 93.313985][ T6600] memory+swap: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 93.322079][ T6600] kmem: usage 306980kB, limit 9007199254740988kB, failcnt 0 [ 93.329851][ T6600] Memory cgroup stats for /syz6: [ 93.335313][ T6600] cache 0 [ 93.343474][ T6600] rss 77824 [ 93.346624][ T6600] shmem 0 [ 93.349594][ T6600] mapped_file 0 [ 93.353334][ T6600] dirty 0 [ 93.356309][ T6600] writeback 0 [ 93.359613][ T6600] workingset_refault_anon 53 [ 93.364241][ T6600] workingset_refault_file 0 [ 93.368818][ T6600] swap 65536 [ 93.372109][ T6600] swapcached 118784 [ 93.376038][ T6600] pgpgin 7233 [ 93.379429][ T6600] pgpgout 7202 [ 93.382851][ T6600] pgfault 8777 [ 93.386230][ T6600] pgmajfault 22 [ 93.389787][ T6600] inactive_anon 0 [ 93.393544][ T6600] active_anon 110592 [ 93.397449][ T6600] inactive_file 0 [ 93.401088][ T6600] active_file 0 [ 93.404950][ T6600] unevictable 0 [ 93.408464][ T6600] hierarchical_memory_limit 314572800 [ 93.413938][ T6600] hierarchical_memsw_limit 9223372036854771712 [ 93.420205][ T6600] total_cache 0 [ 93.423733][ T6600] total_rss 77824 [ 93.427375][ T6600] total_shmem 0 [ 93.430858][ T6600] total_mapped_file 0 [ 93.434990][ T6600] total_dirty 0 [ 93.438472][ T6600] total_writeback 0 [ 93.442345][ T6600] total_workingset_refault_anon 53 [ 93.447597][ T6600] total_workingset_refault_file 0 [ 93.452680][ T6600] total_swap 65536 [ 93.456444][ T6600] total_swapcached 118784 [ 93.460781][ T6600] total_pgpgin 7233 [ 93.464625][ T6600] total_pgpgout 7202 [ 93.468528][ T6600] total_pgfault 8777 [ 93.472429][ T6600] total_pgmajfault 22 [ 93.476724][ T6600] total_inactive_anon 0 [ 93.480980][ T6600] total_active_anon 110592 [ 93.485842][ T6600] total_inactive_file 0 [ 93.490188][ T6600] total_active_file 0 [ 93.494296][ T6600] total_unevictable 0 [ 93.498359][ T6600] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.959,pid=6599,uid=0 [ 93.513245][ T6600] Memory cgroup out of memory: Killed process 6599 (syz.6.959) total-vm:94132kB, anon-rss:1204kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 93.569445][ T6600] syz.6.959 (6600) used greatest stack depth: 7432 bytes left [ 93.752225][ T6662] __nla_validate_parse: 20 callbacks suppressed [ 93.752244][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.973'. [ 93.840161][ T6667] tipc: Started in network mode [ 93.845242][ T6667] tipc: Node identity da7e93785858, cluster identity 4711 [ 93.852529][ T6667] tipc: Enabled bearer , priority 0 [ 93.933532][ T6671] tipc: Resetting bearer [ 93.959848][ T6666] tipc: Resetting bearer [ 93.971873][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.5.976'. [ 93.992642][ T6666] tipc: Disabling bearer [ 94.026196][ T6677] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.036756][ T6677] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.074340][ T6679] netlink: 272 bytes leftover after parsing attributes in process `syz.4.979'. [ 94.116921][ T6684] set_capacity_and_notify: 5 callbacks suppressed [ 94.116939][ T6684] loop6: detected capacity change from 0 to 512 [ 94.145676][ T6684] EXT4-fs (loop6): Unsupported encryption level 255 [ 94.149023][ T6677] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.162896][ T6677] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.203881][ T6690] netlink: 24 bytes leftover after parsing attributes in process `syz.5.982'. [ 94.214487][ T6694] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 94.214487][ T6694] program syz.4.984 not setting count and/or reply_len properly [ 94.229893][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.238662][ T6694] bridge0: entered promiscuous mode [ 94.243372][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.246964][ T6694] macvlan3: entered promiscuous mode [ 94.270381][ T6677] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.281124][ T6677] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.351981][ T6677] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.362784][ T6677] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.420623][ T6446] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.429134][ T6446] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.440985][ T6446] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.449356][ T6446] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.461886][ T6443] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.470485][ T6443] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.485643][ T6446] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.494076][ T6446] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.521561][ T6700] loop1: detected capacity change from 0 to 764 [ 94.552010][ T29] audit: type=1400 audit(1769928389.497:1040): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 94.688497][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.992'. [ 94.716499][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.6.993'. [ 94.725596][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.993'. [ 94.737816][ T6443] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.737864][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.6.993'. [ 94.747000][ T6443] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.756133][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.993'. [ 94.765828][ T6443] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.782908][ T6443] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.829053][ T6721] loop3: detected capacity change from 0 to 4096 [ 94.836013][ T6721] EXT4-fs: inline encryption not supported [ 94.865787][ T6721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.921957][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.994101][ T6736] lo speed is unknown, defaulting to 1000 [ 95.027763][ T6739] lo speed is unknown, defaulting to 1000 [ 95.037300][ T6725] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=118 sclass=netlink_xfrm_socket pid=6725 comm=syz.5.996 [ 95.051361][ T29] audit: type=1400 audit(1769928390.007:1041): avc: denied { read } for pid=6724 comm="syz.5.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.082406][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.997'. [ 95.176049][ T29] audit: type=1326 audit(1769928390.127:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.4.1002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0652eaeb9 code=0x0 [ 95.515038][ T6780] loop1: detected capacity change from 0 to 512 [ 95.523716][ T6780] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.571050][ T6780] EXT4-fs (loop1): 1 truncate cleaned up [ 95.624114][ T29] audit: type=1326 audit(1769928390.567:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6790 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 95.648633][ T29] audit: type=1326 audit(1769928390.567:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6790 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 95.672358][ T29] audit: type=1326 audit(1769928390.567:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6790 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 95.696048][ T29] audit: type=1326 audit(1769928390.567:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6790 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 95.726939][ T6780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.759994][ T29] audit: type=1326 audit(1769928390.567:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6790 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 95.783842][ T29] audit: type=1326 audit(1769928390.667:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6790 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd0652eaeb9 code=0x7ffc0000 [ 95.802470][ T6797] lo speed is unknown, defaulting to 1000 [ 95.833435][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.008746][ T6811] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.021009][ T3388] IPVS: starting estimator thread 0... [ 96.057959][ T6805] loop1: detected capacity change from 0 to 8192 [ 96.122833][ T6812] IPVS: using max 2736 ests per chain, 136800 per kthread [ 96.272269][ T6833] loop3: detected capacity change from 0 to 512 [ 96.293452][ T6833] ext4: Unknown parameter 'subj_role' [ 96.322849][ T6833] sctp: [Deprecated]: syz.3.1026 (pid 6833) Use of int in max_burst socket option. [ 96.322849][ T6833] Use struct sctp_assoc_value instead [ 96.344797][ T6840] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 96.382203][ T6841] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 96.478406][ T6849] loop4: detected capacity change from 0 to 128 [ 96.494171][ T6828] ================================================================== [ 96.502395][ T6828] BUG: KCSAN: data-race in __dentry_kill / lookup_fast [ 96.509320][ T6828] [ 96.511667][ T6828] write to 0xffff888107e1cd80 of 4 bytes by task 6805 on cpu 0: [ 96.519585][ T6828] __dentry_kill+0xa8/0x460 [ 96.524213][ T6828] finish_dput+0x2b/0x200 [ 96.528568][ T6828] dput+0x52/0x60 [ 96.532233][ T6828] lookup_one_qstr_excl+0x233/0x250 [ 96.537469][ T6828] filename_create+0x155/0x220 [ 96.542278][ T6828] do_mknodat+0x139/0x4f0 [ 96.546642][ T6828] __x64_sys_mknodat+0x5e/0x70 [ 96.551440][ T6828] x64_sys_call+0x2b33/0x3000 [ 96.556308][ T6828] do_syscall_64+0xc0/0x2a0 [ 96.561023][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.567018][ T6828] [ 96.569348][ T6828] read to 0xffff888107e1cd80 of 4 bytes by task 6828 on cpu 1: [ 96.576938][ T6828] lookup_fast+0xf0/0x320 [ 96.581284][ T6828] path_openat+0x415/0x23c0 [ 96.585805][ T6828] do_filp_open+0x15d/0x280 [ 96.590411][ T6828] do_sys_openat2+0xa6/0x150 [ 96.595017][ T6828] __x64_sys_openat+0xf2/0x120 [ 96.599798][ T6828] x64_sys_call+0x2b07/0x3000 [ 96.604664][ T6828] do_syscall_64+0xc0/0x2a0 [ 96.609187][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.615239][ T6828] [ 96.617664][ T6828] value changed: 0x00040007 -> 0x00004007 [ 96.623483][ T6828] [ 96.625900][ T6828] Reported by Kernel Concurrency Sanitizer on: [ 96.632332][ T6828] CPU: 1 UID: 0 PID: 6828 Comm: syz.1.1016 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.644067][ T6828] Tainted: [W]=WARN [ 96.647871][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.658033][ T6828] ================================================================== [ 96.772875][ T6446] net_ratelimit: 27 callbacks suppressed [ 96.772967][ T6446] bond1: (slave bond0): failed to get link speed/duplex [ 96.902884][ T6443] bond1: (slave bond0): failed to get link speed/duplex [ 97.012815][ T6446] bond1: (slave bond0): failed to get link speed/duplex [ 97.122819][ T6446] bond1: (slave bond0): failed to get link speed/duplex [ 97.232802][ T6443] bond1: (slave bond0): failed to get link speed/duplex [ 97.342823][ T6446] bond1: (slave bond0): failed to get link speed/duplex [ 97.452823][ T6446] bond1: (slave bond0): failed to get link speed/duplex [ 97.572841][ T6443] bond1: (slave bond0): failed to get link speed/duplex [ 97.682840][ T6445] bond1: (slave bond0): failed to get link speed/duplex [ 97.792905][ T6443] bond1: (slave bond0): failed to get link speed/duplex [ 101.802868][ T6443] net_ratelimit: 35 callbacks suppressed [ 101.802889][ T6443] bond1: (slave bond0): failed to get link speed/duplex [ 101.922856][ T6445] bond1: (slave bond0): failed to get link speed/duplex [ 102.032828][ T6443] bond1: (slave bond0): failed to get link speed/duplex [ 102.142865][ T6443] bond1: (slave bond0): failed to get link speed/duplex [ 102.252899][ T6459] bond1: (slave bond0): failed to get link speed/duplex [ 102.362853][ T6459] bond1: (slave bond0): failed to get link speed/duplex [ 102.472826][ T6459] bond1: (slave bond0): failed to get link speed/duplex [ 102.583096][ T6443] bond1: (slave bond0): failed to get link speed/duplex [ 102.692864][ T6459] bond1: (slave bond0): failed to get link speed/duplex [ 102.802906][ T6445] bond1: (slave bond0): failed to get link speed/duplex