last executing test programs: 1m4.110016916s ago: executing program 3 (id=320): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x80c0, &(0x7f0000000100)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b508352ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c2e4a4b5ba0d68cc15c5"], 0x0, 0x261, &(0x7f00000044c0)="$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") 1m4.04668865s ago: executing program 3 (id=323): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) 1m3.86963038s ago: executing program 3 (id=328): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) unshare(0x600) r0 = socket$caif_stream(0x25, 0x1, 0x5) recvmmsg(r0, &(0x7f0000008600)=[{{&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/137, 0x89}, {&(0x7f0000000940)=""/187, 0xbb}, {&(0x7f0000000a00)=""/185, 0xb9}, {&(0x7f00000042c0)=""/4096, 0x1000}], 0x7, &(0x7f0000000140)=""/26, 0x1a}, 0x2}, {{&(0x7f0000000ac0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b40)=""/48, 0xfffffffffffffcb6}, {&(0x7f0000000b80)=""/157, 0x9d}, {&(0x7f0000000c40)=""/79, 0x4f}], 0x3, &(0x7f0000000d00)=""/213, 0xd5}, 0xf}, {{&(0x7f0000000e00)=@pptp, 0x80, &(0x7f0000001400)=[{&(0x7f0000000e80)=""/167, 0xa7}, {&(0x7f0000000f40)=""/223, 0xdf}, {&(0x7f0000001040)=""/62, 0x3e}, {&(0x7f0000001080)=""/203, 0xcb}, {&(0x7f0000001180)=""/236, 0xec}, {&(0x7f0000001280)=""/17, 0x11}, {&(0x7f00000012c0)=""/86, 0x56}, {&(0x7f0000001340)=""/39, 0x27}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f0000001380)=""/113, 0x71}], 0xa}}, {{&(0x7f0000003500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003580)=""/77, 0x4d}, {&(0x7f0000003600)=""/66, 0x42}, {&(0x7f0000003680)}, {&(0x7f00000036c0)=""/226, 0xe2}, {&(0x7f00000037c0)=""/149, 0x95}, {&(0x7f0000003880)=""/85, 0x55}, {&(0x7f0000003900)=""/150, 0x96}, {&(0x7f00000039c0)=""/93, 0x5d}, {&(0x7f0000003a40)=""/74, 0x4a}, {&(0x7f0000003ac0)=""/114, 0x72}], 0xa}, 0x9}, {{&(0x7f0000003c00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000082c0)=[{&(0x7f0000003c80)=""/220, 0xdc}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/237, 0xed}, {&(0x7f0000003e80)=""/155, 0x9b}, {&(0x7f00000072c0)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/209, 0xd1}, {&(0x7f0000004040)=""/35, 0x23}, {&(0x7f0000004080)=""/188, 0xbc}, {&(0x7f0000004140)=""/182, 0xb6}], 0x9, &(0x7f0000008380)=""/168, 0xa8}, 0x100}, {{&(0x7f0000004200)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000008540)=[{&(0x7f0000008440)=""/198, 0xc6}], 0x1, &(0x7f0000008580)=""/93, 0x5d}, 0x7}], 0x6, 0x40012001, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1cb041, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/42, 0x2a) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000080)={[{@fat=@errors_continue}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x32}}, {@fat=@flush}]}, 0x1, 0x29e, &(0x7f0000000680)="$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") getdents64(r4, 0xfffffffffffffffe, 0x29) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1m3.706511209s ago: executing program 3 (id=335): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) r0 = syz_io_uring_setup(0x1a0, &(0x7f0000000380)={0x0, 0x60d0, 0x1, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000084000000000000000000007ea5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000280)=""/228, &(0x7f0000000180)=0xe4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fallocate(0xffffffffffffffff, 0x10, 0x40000, 0x9) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=r5) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @random="ec5b4e1c05ff", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090affa7e8600006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1m3.082309896s ago: executing program 3 (id=355): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000100)='\x00\x00', 0x12}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r3, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x50}}, 0x4040000) 1m3.029644729s ago: executing program 4 (id=357): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) (async) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) 1m2.918048256s ago: executing program 4 (id=361): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0xfffffff9, 0x4, 0x1, 0x8, 0x4]}, &(0x7f00000000c0)=0x54) 1m2.84173696s ago: executing program 3 (id=362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073080000000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) socket$kcm(0x11, 0xa, 0x300) r1 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x2000000, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1m2.808452462s ago: executing program 4 (id=364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) syz_io_uring_setup(0x69ff, &(0x7f0000000200)={0x0, 0xb137, 0x4000, 0x1, 0xb5}, &(0x7f0000000280)=0x0, &(0x7f0000000300)) r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x11, &(0x7f00000003c0)={0x3d, 0x2c, 0x2}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_SPLICE={0x1e, 0x42, 0x0, @fd=r0, 0x8, {0x0, r0}, 0x7, 0x8, 0x0, {0x0, 0x0, r2}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) keyctl$assume_authority(0x10, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2048c5, &(0x7f0000000980)=ANY=[@ANYBLOB="636865636b3d6e6f726d616c2c73686f72746e616d653d77696e6e742c757466383d302c726f6469722c756e695f786c6174653d312c73686f72746e616d653d6d697865642c71756965742c74696d655f6f66667365743d3078303030303030303030303030303263382c73686f77657865632c73686f72746e616d653d6c6f7765722c757365667265652c6e6f6e756d7461696c3d302c646f733178666c6f7070792c66736e616d653d73686f72746e616d653d6c6f7765722c657569643de875", @ANYRESDEC=0x0, @ANYBLOB=',measure,euid=', @ANYRESDEC=0x0, @ANYBLOB=',seclabel,\x00'], 0x0, 0x2bf, &(0x7f0000002880)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) 1m2.770884464s ago: executing program 32 (id=362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073080000000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) socket$kcm(0x11, 0xa, 0x300) r1 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x2000000, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1m2.738718236s ago: executing program 4 (id=366): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000003, &(0x7f0000000380)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@delalloc}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$eJzs3MtvG8UfAPDvbpr219cvoZRHH0CgICIeSZMW6IELCKRekJDgUI4hTavStEFNkGgV0RShckT9C4AjEn8BJ7gg4ATiCneEVKFcCBzQorV3U+PYwU7sOsWfj7TxzO6sd77eHXt2xk4AfWsk/5NE7ImInyJiKCIG6guMVB9Wlhen/1henE4iy177Lcl3i9+XF6fLoknxuLvIjKYR6QdJHGpw3PnLV85Pzc7OXCry4wsX3h6fv3zl6XMXps7OnJ25OHnixPFjE889O/lMR+Lcm9f14Htzhw+cfOPGK9Onbrz57ed5ffcU22vjqBre9DFHYmT1Nan32KaffWvZW5NOtvWwIrQlb+v56RqstP+hGIhbJ28oXn6/p5UDuirLsmzHmrWrPYClDPgPS6LXNQB6o/ygz+9/y+U2dj967uYL1RugPO6VYqlu2RZpUWaw7v62k0Yi4tTSnx/nSzQchwAA6Kwv8/7PU436f2ncW1Pu/8Xc0HBE3BUR+yLi7ojYHxH3RFTK3hcR97d5/JG6/Nr+zw87NxRYi/L+3/PF3NY/+39l7y+GB4rc3kr8g8mZc7MzR4vXZDQGd+T5iXWO8dVLP37UbFtt/y9fVgZjuuwLFvX4dVvdAN3pqYWpzcRc6+a1yhjg1bXxJ6szAUlEHIiIgxt4/vx6OffEZ4ebbV8T//JiXfzr6MA8U/ZpxOPV878UdfGXkvXnJ8f/F7MzR8fLq2Kt776//mqz428q/g7Iz/+uhtf/avzDSe187Xz7x7j+84dN72n+Pf7G1//25PVKenux7t2phYVLExHbk6W16ydv7Vvmy/J5/KNHGrf/fRF/fVLsdygi8ov4gYh4MCIeKur+cEQ8EhFH1on/mxcffWvj8XdXHv/pts5/+4mB819/0ez4rZ3/45XUaLGmlfe/Viu4mdcOAAAA7hRp5TvwSTq2mk7TsbHqd/j3x650dm5+4ckzc+9cPF39rvxwDKblSNdQzXjoRDHWV+Yn6/LHKuPGWZZlOyv5sem52W7NqQOt2d2k/ed+Geh17YCua2serdkv2oA7kt9rQv/S/qF/af/Qv7R/6F+N2v/ViJV1d7rWteoAt5HPf+hf2j/0L+0f+pf2D31pM7/rXy+x72Rrhct/QNilatwBiYGtUY22E5FuiWpsLJFujWpUEzsiotXCV29bS+nxGxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECH/B0AAP//tNHo8Q==") r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$setregs(0xd, r3, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r3, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc}) setresuid(0x0, 0xee00, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000240)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x4210, &(0x7f00000002c0)={0x0, 0xf7f0, 0x8, 0x1, 0x1b3, 0x0, r2}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 1m2.557633326s ago: executing program 4 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0xd, 0xc, 0x5f, 0x7fffffff, 0xb}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000106fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="30200208000000001c0012800b0001006d616373656300000c000280050003000904"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) futex(&(0x7f0000000000)=0x2, 0xc, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0x1, 0x1) 1m2.109386142s ago: executing program 4 (id=374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff4, 0x3}, {0xb}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) setreuid(0xee01, 0xffffffffffffffff) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffffb]}, 0x8, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000200)=0x8) wait4(r1, 0x0, 0x8, 0x0) ioprio_set$uid(0x3, 0xee01, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000004100)=@raw={'raw\x00', 0x8, 0x3, 0x12f0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1220, 0xffffffff, 0xffffffff, 0x1220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [0x0, 0x62, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x2c, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x130, 0x1}}}, {{@ipv6={@remote, @remote, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'sit0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1150, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0xfffffffe, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x204}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0xe060, 0x1, 0x9, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1350) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) 1m2.094198713s ago: executing program 33 (id=374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff4, 0x3}, {0xb}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) setreuid(0xee01, 0xffffffffffffffff) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffffb]}, 0x8, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000200)=0x8) wait4(r1, 0x0, 0x8, 0x0) ioprio_set$uid(0x3, 0xee01, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000004100)=@raw={'raw\x00', 0x8, 0x3, 0x12f0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1220, 0xffffffff, 0xffffffff, 0x1220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [0x0, 0x62, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x2c, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x130, 0x1}}}, {{@ipv6={@remote, @remote, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'sit0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1150, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0xfffffffe, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x204}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0xe060, 0x1, 0x9, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1350) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) 7.405770969s ago: executing program 2 (id=1238): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$BTRFS_IOC_START_SYNC(r0, 0x402c542c, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) socket$nl_route(0x10, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001d80)=""/4096, 0x1000}, {0x0}], 0x3) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r4, 0xfffffffffffffffe) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x800, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x40480c1}, 0x24000800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0xfff1, 0x3, 0xe0f, 0x0, 0xff, 0xcf, 0x800}, 0xc) 6.620285285s ago: executing program 2 (id=1251): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40c40, 0x1b2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x530, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x48}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4041) r4 = mq_open(&(0x7f0000000280)='\\^*#\x00', 0x40, 0x2, &(0x7f00000002c0)={0x9, 0x8, 0x4, 0x9}) mq_getsetattr(r4, &(0x7f0000000300)={0x6, 0x5, 0xfffe0000000000, 0x3}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x200001, 0x1) r6 = openat(r5, &(0x7f0000000380)='./file0\x00', 0x80000, 0x80) write$sndseq(r6, &(0x7f00000003c0)=[{0x9, 0x9, 0x10, 0x4, @tick=0x2, {0x4, 0x7}, {0x0, 0x2}, @connect={{0x7f, 0x6}, {0x2, 0xff}}}], 0x1c) io_setup(0x3, &(0x7f0000000400)) r7 = creat(&(0x7f0000000440)='./file0\x00', 0x80) ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f0000000480)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x280000) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000540)={0x0, 0x1, 0x3, 0x6}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f0000000580)={0x4, r5, 'id1\x00'}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r9, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xeb7cd9e047c77e3e}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x88, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x88}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000000780)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001780)={r10, 0x5}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000002780)={'pim6reg\x00', @random="68b20b2f990e"}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000027c0)) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f00000032c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003280)={&(0x7f0000002880)={0x9d0, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x1cc, 0x7f, [@preq={0x82, 0x3b, {{}, 0x9, 0xe0, 0x8, @device_b, 0x3, @void, 0x5, 0xda0000, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0xffffff38}, {{0x1, 0x0, 0x1}, @device_b, 0xffffff7f}, {{0x0, 0x0, 0x1}, @device_a, 0x3d3}]}}, @supported_rates={0x1, 0x3, [{0x16}, {0x3}, {0x30}]}, @random={0x3, 0xed, "cc30e0e637e35421d131228ca5f9ff4b3382ddcd09d6f0ac31f9e5a69f7ee0bf872c5508e8d3d6fb00cefc661f97e75c4745ed087e9736dc1e072bc9fae68e44be0b9e803a7c39f7664f27467e280baf30fcc4af7bf19148f6345c0fdf75aea3cba819893ca233bb17eed9cac172bffcbc296ca0fac52a5558cdb687ddaf8ad4bb5479ed81dca167b0c1b9044abaf117f58a268a38fa843542f4798a3c50e9ca550a489ab3868f3373afe64942d7a04f83c8bbc8df790c54e62dfbb0826409db61d8eae58687b9c7886b4a8878a6adf1dbcafae3306ace55e664f65bfa469aa327645036602da84e378a3cf6b3"}, @rann={0x7e, 0x15, {{}, 0xa0, 0x70, @device_b, 0x7ff, 0x8, 0x7f9c}}, @dsss={0x3, 0x1, 0x34}, @preq={0x82, 0x72, {{}, 0x9, 0x72, 0x2, @device_a, 0xd, @void, 0x7fff, 0x30000000, 0x8, [{{0x0, 0x0, 0x1}, @device_b, 0x5e}, {{}, @device_a, 0x339}, {{0x1}, @broadcast}, {{}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @broadcast, 0x401}, {{0x0, 0x0, 0x1}, @device_a, 0x40}, {{}, @broadcast, 0x101c}, {{0x0, 0x0, 0x1}, @device_a, 0x8}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x7, 0x48}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x4a9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x7ffa}, @device_a, @device_b, @initial, {0x5, 0x9}, @value=@ver_80211n={0x0, 0x7, 0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x725, @default, 0x2000, @void, @void, @void, @void, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x1, 0xcc, 0x9}}, @void, @val={0x3c, 0x4, {0x0, 0x1, 0x6c, 0x4}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x8e, "3c9f9baf00f725bf5d5d1f8603bc1e6ce72750af111a64d5dcd08d90ab9c50b76b1a2797bf5114744f7d9cd6609d8a73f21d780dadf0d0418b72c0fc27f244aca38d32290e8f3475ffecd0379911dcc6ee59d753faec9c326f56fa3ae9ca9ff40516147c8ff715b0b3c1a4fb7ff0e7676f1bdb2d48988e872c2437204524f18b3b04f7846084449ef8405cc6fa3a"}, {0xdd, 0xa0, "4410e4d6370bc2c00c022901e2ad1b15090edf4fce00045d70a32fcd85ae83ce3bc65f03527726aa6fe9719bb57f5d54356925083a6f97494eba90c27729c974e43a4d7a707607d74a5e24dea11773d987a6fd92de6ce4cc65b868a38bdf962847586151d06a1142472252b7b336ff8a0535d417cefcfa7a6d41b51e10514806e5b57249fa2b9d0327c6f61f8f39caec25e1c7756fa91296cb9d27dff5b14a42"}, {0xdd, 0x34, "984198ed5724158576557300c19145512e0e30d6be54b140ef09fc283064b45f8d5b2c96d85b84ed5a40ceaebed0b46ada203e98"}, {0xdd, 0xc3, "a909c494526bdb1b60464a557b5700fab74cf75ece9d875041c13a3a36f21e0490b16b374c4ab42d3e77fde2e2eb661ea4c3461ce5ff2a434cfea49c865c230be8416e2dfca7264e7d7d59d5cfcd8ef5b0e6cb267578988d03f344e4f8356663d603f947351e4e59f7b7bda4f839841b1a838346f3a7fd8c41a87fc024c22ef17244d484261629d5aa668355182b22df5e36828efac45b72e25e510431ef0cbf995fa5e1c5905f9c920afa95f0b4a6182e2cb29b6f5b885cc6af028b46718f361cd736"}, {0xdd, 0x26, "8a6bc50837b3c60516c6084069bcff3b34091d2617edea756af6711d923bdabe0665cb3b2ee5"}, {0xdd, 0x83, "c7094a1f8d38c8cc14b457b31a89f3f7e188aa78adb6d50f80c6853ff51b69913b3346597b006d9373dbb15abfa5f9f4d65a54d66b51ec1695fd31927bc5a9b31b2c82f618dad97cde3ccdab72e1cebc9db8b6a00d0a3fd77d3e399ad60cdc575ef4b3e1623313bba2de7493098890718975a1ce33959153c5d69c82cb101d6d87a8fa"}, {0xdd, 0xd0, "3916d2b97cfc5b9d39964b155563924a38b7e16278b3428030c557f254f2f0992f250825796688b388cf51ade4e5055c358abb7535d577afa1d87d5a4fde0335faf985a4cc7a91df3e6e36dba5557b105496d6d736250a6391d0b315beeeaa8c74fb88fda4751b7f2cbd7e699320ffe54694955bed90282f3198bcad245392c5dff3db7c9937285f8dc2bbe51a9c68941e7d3e5eae82511eb1baee0017e34399dcb6d7f6352e528ce606b81a28f8a3be12f6170b1c494816ca0f7a4db0c7d62ce33168c30c62693a1a5af40a367f1e49"}, {0xdd, 0xb8, "6b97fa414a3d52a9f8f9844fccdbf342585f7732dab6640067b84734ce0e2e1be928ca0f61888b29d56dff9dd11ce1958711d7b9be2e21fd39143241cf3766544ab65fde4703583b0f5c714892747b04e007153a9ea43bad996182ef97bf7da2857e4e3655417e8038790a5b7df4c38eaeb919cead1604af80549613228354f03d617173cb645a89ba5feb49220ee0d87e56f64acc918242f8ea4214c1b549a6ef81fa8d46a10b1cb5ec221bc341b877f4acf2c2183cf031"}]}}, @NL80211_ATTR_BEACON_TAIL={0x2f, 0xf, [@mic={0x8c, 0x10, {0x378, "b60cc41c7b43", @short="c3ade7d7c537c9d0"}}, @peer_mgmt={0x75, 0x14, {0x1, 0x638, @void, @void, @val="a2943248fca3f1f181e940e1643f2ac4"}}, @erp={0x2a, 0x1, {0x0, 0x1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1ba, 0x7f, [@chsw_timing={0x68, 0x4, {0x7, 0x9}}, @fast_bss_trans={0x37, 0xb8, {0x2, 0x5, "0acd43e87009555fe67dabd85089e8b2", "8d9d6271494e802f2c0c1a4c16a222f62940ad04a110f1af6a7c876af2ba3d7a", "f50230607ac4b50252625c171987d7c7c7caf32106ad9fecd1ba9a2a308529eb", [{0x3, 0xd, "0d6d39bd0eac61af6fde1df135"}, {0x4, 0x16, "91e87597ebdadc44e6bd6e20560aad1516f3b9009af1"}, {0x1, 0x13, "63f1ba4b80fa573c131baa215260080e664b3c"}, {0x3, 0x10, "6b9d5a9361fd96b4e2554494ab452155"}, {0x2, 0x16, "cb3e73887701ce4b3965563d6ea5eb72b182880ec596"}]}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0xe3, {0x94, 0x4, "f0b670d035f03020f237b53f17dbb352", "e179a1250cc03f64f25a98788d27178bfe3b18d0ac9645820433bb5075ea2883", "665484ff4e754ba828813a1d38737e00ae990a76fe36587bac4b19b5acb8d87b", [{0x1, 0x19, "85e228e96052f0a06120a37ebccd6642ab02ea43580d17d7c2"}, {0x2, 0x28, "11049dbecc4f6584aafcded04a666b371cb63f81d619da719cc18943ed6f8c60ef94962b320bf66f"}, {0x1, 0x27, "a03ba0170e79bf670be783c3d3d472c0d4f6e0828635d4403271a8715e382fddd559e8d9c9a30a"}, {0x1, 0x21, "31d503c436460cf7eb7c24f4906475558759c1ab0394d7ff0ef43cc502f756b59c"}]}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x9c}}]}, @NL80211_ATTR_BEACON_HEAD={0x128, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7}, @broadcast, @broadcast, @from_mac=@broadcast, {0xd, 0xb}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x5, @random=0xb2c, 0x280, @void, @val, @val={0x3, 0x1, 0x31}, @val={0x4, 0x6, {0xe, 0x2, 0xf1, 0x1}}, @val={0x6, 0x2, 0x7fff}, @void, @val={0x25, 0x3, {0x1, 0x7c, 0x1a}}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xd9, "e63270f4438895082597464896f4552fa1085318e717af8220615445d468439236332171fb47b167a322577ec8dbc7de1b5daa3a114de10fa479e8c7400b57a43e523a137174b86ceeae84fc6ab09fbc6a3d52fe346b9f46424ecd822cb9190361a08012a08d98df51da1312bcd75de6becd3abff0c8ffc6062569ce4fc1ea4ad6d47c900f4beb6cd362531b6b8e490f6cd0b4ce3ea5e8b7e49755df0056091bf7df97546435791ee991ccce618bc6b84c1f046c6d24689be7d1d1f7e060fe2389cf48ac2d930d334aa383845ea7a6185ae9d8d65e67b0a771"}]}}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x7}, 0x4, 0xe2, @device_b, 0x7fffffff, 0x9, 0x9}}]}]}, 0x9d0}, 0x1, 0x0, 0x0, 0x8041}, 0x4000041) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000003480)={0x15, 0x2, &(0x7f0000003300)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x0, 0xd, 0x2, 0x1, 0x76, 0xffffffffffffffff}], &(0x7f0000003340)='GPL\x00', 0x4, 0x16, &(0x7f0000003380)=""/22, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f00000033c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000003400)={0x4, 0x10, 0xb6a8}, 0x10, 0xffffffffffffffff, r7, 0x0, &(0x7f0000003440)=[r9, r7, r7, r9, r9, r5], 0x0, 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000003540)=r12, 0x4) ioctl$TIOCGISO7816(r6, 0x80285442, &(0x7f0000003580)) bpf$MAP_CREATE(0x0, &(0x7f0000003680)=@bloom_filter={0x1e, 0x5, 0x1ff, 0x1, 0x420, r5, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) 6.513514811s ago: executing program 2 (id=1254): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0xd, 0xc, 0x5f, 0x7fffffff, 0xb}) 6.409758287s ago: executing program 2 (id=1256): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x40080d2}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@struct={0x4, 0x2, 0x0, 0x4, 0x1, 0xfffffffd, [{0xa, 0x2, 0x20}, {0x1, 0x5, 0x4}]}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x5f, 0x61, 0x0, 0x61]}}, 0x0, 0x48}, 0x28) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r4, @ANYRESDEC=r5, @ANYRES16=r4, @ANYRESHEX=r6], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) 6.061141357s ago: executing program 2 (id=1261): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = socket(0x400000000010, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newtaction={0xbc, 0x30, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{0xa8, 0x1, [@m_ct={0xa4, 0x13, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x3c8}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8}, @TCA_CT_MARK={0x8, 0x5, 0x4}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_ZONE={0x6, 0x4, 0x100}, @TCA_CT_LABELS={0x14, 0x7, "280a6ec89a31ef3e8d4a451072ef6fff"}]}, {0x3f, 0x6, "706782fde47d532d3bcef645f285efc45350f08ac16a9a461d9958be1163676340cb266a5f4e79f16c055c9b834402d1b58ada13160741d4a3eb3e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xbc}}, 0x0) (async) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ppoll(&(0x7f00000000c0), 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={[0x8000000000000001]}, 0x8) setns(r3, 0x66020000) (async) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0x9, {"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", 0x1028}}, 0xfffffd00) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_SET_TIME(r6, 0x40187014, &(0x7f0000000080)={0x2a, 0x29, 0x16, 0x4014, 0xa, 0xf1, 0x4, 0x82}) (async, rerun: 32) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 32) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 5.3337589s ago: executing program 2 (id=1268): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 1.685873712s ago: executing program 5 (id=1319): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fedbdf2513000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x24004000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xfce1) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TCFLSH(r1, 0x540b, 0x1) 1.684370492s ago: executing program 5 (id=1320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 1.638368205s ago: executing program 5 (id=1322): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f0000000300)={r1, 0x10, 0x4}, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x18000000000002a0, 0xf0, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000240)=0x468, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000140)=""/41, &(0x7f0000000080)=0x29) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fchmod(r5, 0x7) syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000380)=""/85, 0x55}) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2007, @fd_index=0x3, 0xffffffffffffff51, 0x2, 0xf, 0x1, 0x1, {0x1}}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f00000005c0)="df76ef3757e3b4d1c0ec0616a708f33cc6c90594d474dbab65b93b72455c50754064697ecb5289b182f2dbe1742461cdbce61332a408c7fe2eb2c9078f6d0fe5a82a5a7eec9625b044d543e6638e6d843e320eb8541173f16e28257185f5f4b28309d02cef7dbb3b199ed45ac46057d94bfb6404a5a5e7962aa314e95bfee1490b55ee8ae4c013991011ad9f9009f95a4dbf264c116656dc6d185d7cc85b5488f1a81fc9e9df41d16e79b9069e988f2861d499d044522ab980e9674d44") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x2058, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000950100000000000811526ac11808ab50bbdd6f2428e9a4ddf9ace0754323fcefb538184dec"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.585384248s ago: executing program 1 (id=1323): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) shutdown(0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70ad22, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, 0x11413, 0x1922b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f00000000c0)=0x2, 0x4) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x2d, 0x20040040) (async) recvmmsg(r7, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) dup3(r0, 0xffffffffffffffff, 0x80000) (async) r9 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) close(r9) (async) fcntl$setstatus(r9, 0x4, 0x2c00) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r10, &(0x7f0000000b40)={@val={0x0, 0x5}, @val={0x2, 0x80, 0x2, 0x5, 0x9, 0x3}, @llc={@llc={0x7e, 0xe, '&', "ee5169132ae3a23a0f838d3e4a218f7970f190660325f07dce8326062c25446904f322a1036826984ed6a7ab020ab09056afb1468228ddf2b0619caca9c23a602c32d0010770304e428bd79b5c205489cdc7ba1f770a45f5004a6bd8ab515aa7cb3b6451235534658a56ce4d632f9e96ee58291c31c08c583f83a790ea370a5d10435f2e04604a7acb4a1547500c399e20671592ab63866e5bf28405259f41283e8f49521f7e0db0e67718354aad2ee3d8610ec6fcd9"}}}, 0xc7) (async) fremovexattr(r6, &(0x7f0000000080)=@random={'system.', 'GPL\x00'}) 1.448986416s ago: executing program 1 (id=1325): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x40080d2}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@struct={0x4, 0x2, 0x0, 0x4, 0x1, 0xfffffffd, [{0xa, 0x2, 0x20}, {0x1, 0x5, 0x4}]}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x5f, 0x61, 0x0, 0x61]}}, 0x0, 0x48}, 0x28) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r4, @ANYRESDEC=r5, @ANYRES16=r4, @ANYRESHEX=r6], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) 1.448383366s ago: executing program 6 (id=1326): r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb1c7}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES8=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002", @ANYRES64=r0, @ANYBLOB="b4"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x19) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x7, 0x1000003, 0x10}, 0xc) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000240)='syzkaller0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000040)='e$*\x11\x99x:\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb') r5 = fsmount(r3, 0x0, 0x8) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.336092292s ago: executing program 6 (id=1328): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x20, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000002c0)=""/254) msgget$private(0x0, 0x7ac) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x11, 0xffffffffffffffff, 0xc266c000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0xffffffffffffffff, 0x2, {0x0, 0x0, 0x3}, {0x1, 0xff}, 0x2, 0xff}], 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.335532752s ago: executing program 5 (id=1329): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb6100180000"], &(0x7f00000004c0)=""/212, 0xbc, 0xd4, 0x1, 0xfffffffc, 0x10000, @value=r1}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="2101000000000000140012800b0001006272696467650000240002800a00010014fd"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x20) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_GETMODE(r5, 0x5601, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{0x3, 0xe, 0x2, 0x5}, {0x6, 0x0, 0x9, 0x3}, {0xfffe, 0x46, 0x6}, {0x5328, 0x40, 0xd, 0x2}, {0x4, 0x6, 0x8, 0xc7}, {0x1, 0x3, 0xf2, 0x82}]}) ioctl$GIO_SCRNMAP(r0, 0x4b49, &(0x7f0000002f40)=""/4107) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = dup(r7) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x9, 0x5, 0xa, 0x19, "32d21ca6469ee8b9936d70c838bea966b95980ba1ae132bf627279f89f0c52d5cdf1485b7b9b6b3ff5dddb1304b98c8f26e61583835c6badf3bdcd2c1460881c", "246f7b8c6832a8424462ea1b5a1c904b95d7e2ff0d616aa324917a8c2abe1617", [0x29, 0x200]}) setsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f00000000c0), 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1440134}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r9, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0xf}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'lo\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) 1.300408614s ago: executing program 6 (id=1331): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = fcntl$dupfd(r6, 0x406, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) accept4$vsock_stream(r7, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x7) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x0) 1.286388035s ago: executing program 1 (id=1332): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000001c0)=0x0) ftruncate(r2, 0x81fe) io_submit(r7, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000, 0xa00}]) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x26}, 0x0, 0xfffffd59, 0x0, 0x0, 0x0, {r2}}, 0x58) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}]}, 0x34}}, 0x8080) io_setup(0x8, &(0x7f0000000600)) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r11 = fsmount(r0, 0x0, 0x0) fchdir(r11) open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) 1.229828839s ago: executing program 0 (id=1333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 1.229013299s ago: executing program 5 (id=1334): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e9ffffff00"/25], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000002700000000000000000200"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000340)=@raw=[@generic={0x9, 0x1, 0xb, 0x8, 0x10000}, @printk={@llx}, @call={0x85, 0x0, 0x0, 0x26}, @call={0x85, 0x0, 0x0, 0xb4}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x2, {{0xa, 0x4e24, 0x0, @mcast1, 0x100}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000000c0)={0x21, {{0xa, 0x4e23, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) connect$qrtr(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000202"], 0x0, 0x2e, 0x0, 0x1}, 0x28) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCCONS(r6, 0x541d) r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_type(r7, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x73, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000030000001492db1fcf8d9c8058220b07a3006574683a6261746164763000"/49], 0x28}}, 0x80) 1.135706104s ago: executing program 0 (id=1335): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg$sock(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) shmget(0x0, 0x3000, 0x1, &(0x7f0000002000/0x3000)=nil) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x4, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 1.104319576s ago: executing program 0 (id=1336): unshare(0x6a040000) r0 = inotify_init1(0x80000) r1 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006b0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100800000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c0000001000f00300efffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b00010067656665766500000c0002800600050000000000"], 0x3c}}, 0x404c840) read(r0, 0x0, 0x0) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xc, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="14"], &(0x7f0000001300), 0x600) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_NEW(r6, 0xfffffffffffffffc, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x300, 0x0) unshare(0x48020000) 981.643603ms ago: executing program 1 (id=1337): msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x25) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) msgsnd(0x0, 0x0, 0x0, 0x8fa2496c381b7ad5) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r4) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="33032b80000000dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x5, 0x19, '&'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r6, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x40081) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) r12 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0x7, 0x1, '.^\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20048000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x4) 846.038621ms ago: executing program 6 (id=1338): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x69ff, &(0x7f0000000200)={0x0, 0xb137, 0x4000, 0x1, 0xb5}, &(0x7f0000000280)=0x0, &(0x7f0000000300)) gettid() syz_io_uring_submit(r2, 0x0, &(0x7f0000000380)=@IORING_OP_SPLICE={0x1e, 0x42, 0x0, @fd=r0, 0x8, {0x0, r0}, 0x7, 0x8}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) keyctl$assume_authority(0x10, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000480)=0x2, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2048c5, &(0x7f0000000980)=ANY=[@ANYBLOB="636865636b3d6e6f726d616c2c73686f72746e616d653d77696e6e742c757466383d302c726f6469722c756e695f786c6174653d312c73686f72746e616d653d6d697865642c71756965742c74696d655f6f66667365743d3078303030303030303030303030303263382c73686f77657865632c73686f72746e616d653d6c6f7765722c757365667265652c6e6f6e756d7461696c3d302c646f733178666c6f7070792c66736e616d653d73686f72746e616d653d6c6f7765722c657569643de875", @ANYRESDEC=0x0, @ANYBLOB=',measure,euid=', @ANYRESDEC=0x0, @ANYBLOB=',seclabel,\x00'], 0x0, 0x2bf, &(0x7f0000002880)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) 759.214326ms ago: executing program 6 (id=1339): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) finit_module(0xffffffffffffffff, 0x0, 0x2) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f00000000c0)=0xfffffffd) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88220a2a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169aef145fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe6ffff000000000000bd6276fd8bb67eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x9, 0x3, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000140)={0x0, 0x6}) r1 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 712.308249ms ago: executing program 5 (id=1340): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x21000e, &(0x7f0000000140), 0x1, 0x553, &(0x7f0000000d00)="$eJzs3c1vI2cZAPBnnGSbdFOyBQ6lUsuKFu1WsM6moW3Eoe0KxK0CtNyXKPFGUZx4FTvt2qqqVBw4IiFEK3HixAWJPwAJ9U9AlSrROwIEqmALBw7AoBmP98M7zsZaO97Gv58063fe+Xie116P3/nITABT63xEvB4RMxHxQkQsFfWVYojD7pDN9+mttzeyIZty9e9JJEVdRF687Wyx2Hz3pVSz3dlZr9dr+8X4cmv3xnKz3bm0vbu+Vduq7a2urry89sraS2uXyxbfGradWbte/fZffv6TX33n1d99/a0/XvvbxXeypL9VTC/aMXIf5//OZe/FbbMRsT+OYBMwU7RnbtKJAABwLFkf//MR8ZW8/78UM3lvLtffpZs/+ewAAACAUUhfW4z/JBFp2tu9TwEAAIBT5rWIWIykUi2uBViMSqVa7V7D+8V4vFJvNFtfu9442NvMpuVXelaub9drl4tras/FXJKNr+TlO+Mv9o2vRsSTEfGzpYV8vLrRqG9O+NgHAAAATIuzffv//zrs7v8DAAAAp8y5IeevjCkPAAAAYHyK/f+Z/vpkArkAAAAA4zHs+X8AAADgM+V7b7yRDWnv+debb7YPdhpvXtqsNXequwcb1Y3G/o3qVqOxld+zb/dB66s3Gje+EXsHN5dbtWZrudnuXNttHOy1rm17fiAAAABMypNf/uDjJCIOv7mQD5kzUfbHAAXXCsCpMdStPP48vjyAkzfoZx44/WYnnQAwOYfDL3J+HHkAE3PPrT5KOgV3X7xzzzGD348vJwAAYLQufCmJsvP/+ZP+J50cMFYe5QHTy/l/mF5Dnv//cFx5ACdvTg8Apt6DHvVRevOOhQHn/8+UzZymR64LAAAYu8V8SCrV4lzgYlQq1WrEE/mf+s8l17frtcsR8bmI+MPS3GPZ+Eq+ZOLxgAAAAAAAAAAAAAAAAAAAAAAAAABwTGmaRAoAAACcahGVv8Zs9/lfF5aeX+w/PnAm+fdSFI/0eusXV9+7uTTf2l/J6v9xu771/tX3bq63WvsvTuIIBgAAANCvt5+ev65MOhsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATptPb7290RtOMu4nV+K7ca4s/mzM56/zMRcRj/8zidm7lksiYmYE8Q/fjYinyuInWVpxrsiiP34lIhZGH3/uzpTb8Z9J07Q0/tkRxIdp9sGViHi97PtfifPxWL79iZLv/2wxPKxPruRf8tL4ve3fzIDt3xPHjPH0R79ZHhj/3YinZ8u3f734yYD4z5WtsORN+eEPOp37Krsrj/SXERdKf3+Se2Itt3ZvLDfbnUvbu+tbta3a3urqystrr6y9tHZ5+fp2vVb8W9rGnz7z2//1Vf037crbH/fH/3F0P5Yj2/98Vrhrix1pf5gi2Ec3b33h/uq8gVn8i8+Vf/5PHRE/+z/x1eJ3IJt+oVc+7Jbv9uyvP3y2NLEi/uaA9/9Bn//FQSvt88L3f/SnY84KAJyAZruzs16v1/aPVVgYZuZ2ZydNI3o176dpOuTiIysM39LpK/R6d2MLMf+otPQRKGR960cgjUGFURzZAgAAHjV3Ov3HXuSdsSYEAAAAAAAAAAAAAAAAAAAAU6jZjsrR9wNL04iHu51Yf8zDyTQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBI/w8AAP//qXLPzg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffefffffff7ffffc]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe14f, 0x8, 0x1, 0x4000032f, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000400)=""/203, 0xcb}], 0x1}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8b19, &(0x7f0000000000)) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) sendmmsg$inet6(r5, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000051) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="95000000a4fc", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008001e00feffffff"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000009}, 0xc880) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) 657.626352ms ago: executing program 6 (id=1341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@ccm_128={{0x304}, "f002ad8c789ed466", "57e95eb060e75664246a4cca184b4098", "57f5041c", "dd80254a4c771b8a"}, 0x28) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000000200)="000bda", 0x3) sendfile(r3, r1, 0x0, 0x40001) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000240)={0x248, @time={0x47a, 0x6a}, 0x0, {0x8}, 0x4, 0x1, 0x5}) sendfile(r3, r2, 0x0, 0x7ffff000) 212.870488ms ago: executing program 0 (id=1342): prctl$PR_SET_IO_FLUSHER(0x39, 0x686) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, '\x00v\"P\xcf\x00'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) 186.598109ms ago: executing program 0 (id=1343): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x40080d2}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@struct={0x4, 0x2, 0x0, 0x4, 0x1, 0xfffffffd, [{0xa, 0x2, 0x20}, {0x1, 0x5, 0x4}]}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x5f, 0x61, 0x0, 0x61]}}, 0x0, 0x48}, 0x28) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r4, @ANYRESDEC=r5, @ANYRES16=r4, @ANYRESHEX=r6], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) 105.357504ms ago: executing program 1 (id=1344): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r1}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r3 = accept$unix(r2, 0x0, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f00000000c0)) r4 = socket$inet(0x2, 0x6, 0x1000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100)=0x52, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140), 0x4) connect$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x20, @any, 0x1}, 0xe) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f00000001c0)={0x80fd, 0x1}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000200)) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000240)) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000280), 0x4) flistxattr(r0, &(0x7f00000002c0)=""/45, 0x2d) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000300)={0x1, [0x0]}) io_setup(0x2, &(0x7f0000000340)=0x0) r6 = accept4$llc(r2, &(0x7f0000000480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000004c0)=0x10, 0x180000) io_submit(r5, 0x5, &(0x7f00000008c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000380)="975a0f151ddd5a64becf2508ba95ee655774c0802659d615f3450c7ba8f5a3c451c77582d3c1b84a224333a885312f40a4d48a68e1d36e32742203e0d721cee078aaabb63d41bc4ea81e93a5a88017caea1386386b7638099642927442516b85addf515afc2f33e1bafd43df6a87aef4118a6964dfc34c8beceabbfdc2a5fabd7c6bcb37f3f448df639f9b249ed5bb81ea", 0x91, 0xc, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x5, r6, &(0x7f0000000500)="f554078e6a5a8e285b88e81130304d057c64fc159afc7345593d154908f619a2bd6dfb7c538ec66baf40b96461b470403460d6159219868d36a18156be0fc8c7b0b0cec21f3ce42cb6040f2b1d50f52dff4352e57df0cd85413cdeb203407f840f12689591635612739198336f719b0dcc2255170c40eae4fdd973c58cc0a89490a6d49a00ec7823af424656a5f20afd34188d784a2a77acee639e23b8052781a172ccd1f3cbfb363aae7795ae7db9a0310b54643fecfcc3416b92cbab46d3a01d181f6e622abf663f98f8794b3ac0b41fcd4b6ab629af4e19d45b6a70ac0a9a59", 0xe1, 0x0, 0x0, 0x1, r2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0xd4d5, r3, &(0x7f0000000640)="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", 0xff, 0x3, 0x0, 0x3, r2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4, r1, &(0x7f0000000780)="56f23ed6cb21f86601cd3d9e309731df4c6e4a86cd8d999d51e8a9795351c3b6a9f444aecbedf51e0c2ac14a", 0x2c, 0x6, 0x0, 0x4, r2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8d9, r4, &(0x7f0000000800)="698aa8b3c6c4d93e46733dc3a3312255b9eff84ed396b13968b9568ca74b72d59fb05fc254c5100765b8c17978f2e5bbe20ab32da5f60d586878532be616ae9d4f9693dc72861db297c0b2e2c892564ed1e266fa7842f0adc2af4d79f91c52171aebcad5a26b087579d2732442829a", 0x6f, 0xfffffffffffffffa, 0x0, 0x1, r2}]) close(r6) r7 = accept4$inet(r4, &(0x7f0000000900)={0x2, 0x0, @dev}, &(0x7f0000000940)=0x10, 0x80800) getsockopt$IP_SET_OP_VERSION(r7, 0x1, 0x53, &(0x7f0000000980), &(0x7f00000009c0)=0x8) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000a00)={0x0, 0x1}, 0x8) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0xd00a080}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x88, 0x2, 0x6, 0x201, 0x0, 0x0, {0x9, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4f3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x67}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9d}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xf8063b2cdcf20da6}, 0x0) recvmmsg$unix(r3, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/63, 0x3f}, {&(0x7f0000000c00)=""/190, 0xbe}], 0x2, &(0x7f0000000d00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000d40)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000dc0)=""/151, 0x97}, {&(0x7f0000000e80)=""/215, 0xd7}], 0x2, &(0x7f0000000fc0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/111, 0x6f}, {&(0x7f00000021c0)=""/131, 0x83}, {&(0x7f0000002280)=""/43, 0x2b}, {&(0x7f00000022c0)=""/180, 0xb4}, {&(0x7f0000002380)=""/206, 0xce}], 0x6}}, {{&(0x7f0000002500), 0x6e, &(0x7f0000003880)=[{&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/251, 0xfb}, {&(0x7f0000003680)=""/51, 0x33}, {&(0x7f00000036c0)=""/86, 0x56}, {&(0x7f0000003740)=""/206, 0xce}, {&(0x7f0000003840)}], 0x6, &(0x7f0000003900)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000003940)=""/119, 0x77}, {&(0x7f00000039c0)=""/174, 0xae}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/32, 0x20}, {&(0x7f0000004ac0)=""/12, 0xc}, {&(0x7f0000004b00)=""/2, 0x2}, {&(0x7f0000004b40)=""/251, 0xfb}, {&(0x7f0000004c40)=""/123, 0x7b}], 0x8, &(0x7f0000004d40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{&(0x7f0000004ec0)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000004f40)=""/154, 0x9a}, {&(0x7f0000005000)=""/56, 0x38}], 0x2, &(0x7f0000005080)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000005180), 0x6e, &(0x7f0000005200), 0x0, &(0x7f0000005240)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000005380), 0x6e, &(0x7f0000007780)=[{&(0x7f0000005400)=""/46, 0x2e}, {&(0x7f0000005440)=""/112, 0x70}, {&(0x7f00000054c0)=""/120, 0x78}, {&(0x7f0000005540)=""/4096, 0x1000}, {&(0x7f0000006540)=""/46, 0x2e}, {&(0x7f0000006580)=""/4096, 0x1000}, {&(0x7f0000007580)=""/80, 0x50}, {&(0x7f0000007600)=""/246, 0xf6}, {&(0x7f0000007700)=""/89, 0x59}], 0x9, &(0x7f0000007840)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}], 0x8, 0x40, 0x0) socket$kcm(0x29, 0x0, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007b40), r9) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000007c00)={&(0x7f0000007b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007bc0)={&(0x7f0000007b80)={0x20, r11, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40051}, 0x20004020) 59.795077ms ago: executing program 0 (id=1345): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x2, 0xf0, 0x6a, 0x8}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) r4 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x11100, 0x3, 0x17d}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000002580)=[{&(0x7f0000000040)="8d48fdff", 0x4}, {0x0}], 0x2}) io_uring_enter(r4, 0x4d10, 0x2, 0x2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r8, 0x3, r2, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r8, 0x3, r0, 0x7}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4000, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000, 0x4000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x80000}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x1, 0xfffffffc, 0x200}, {0x5, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x5, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x100000, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 0s ago: executing program 1 (id=1346): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4854}, 0x4004080) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c000000190a01040000000097c979cc70d9ea3900000000020000000900de95064cc704e8d400000900010073797a3000000000"], 0x2c}}, 0x8004) bpf$ENABLE_STATS(0x20, 0x0, 0x0) fchdir(r0) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) readv(r1, &(0x7f0000002080)=[{0x0}, {0x0}, {&(0x7f0000000bc0)=""/54, 0x36}, {0x0}, {0x0}], 0x5) kernel console output (not intermixed with test programs): ][ T5551] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 70.887258][ T29] audit: type=1400 audit(1770657407.942:1405): avc: denied { write } for pid=5544 comm="syz.5.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.907068][ T29] audit: type=1400 audit(1770657407.942:1406): avc: denied { ioctl } for pid=5544 comm="syz.5.550" path="socket:[13485]" dev="sockfs" ino=13485 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.932084][ T29] audit: type=1400 audit(1770657407.942:1407): avc: denied { append } for pid=5544 comm="syz.5.550" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 70.955795][ T29] audit: type=1400 audit(1770657407.942:1408): avc: denied { map } for pid=5544 comm="syz.5.550" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 70.979900][ T29] audit: type=1400 audit(1770657407.942:1409): avc: denied { execute } for pid=5544 comm="syz.5.550" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.104667][ T5556] vxcan0: tx address claim with different name [ 71.143467][ T5558] syz_tun: entered allmulticast mode [ 71.150639][ T5557] syz_tun: left allmulticast mode [ 71.192696][ T5563] xfrm0: entered promiscuous mode [ 71.197856][ T5563] xfrm0: entered allmulticast mode [ 71.232273][ T5569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=5569 comm=syz.6.556 [ 71.374809][ T5575] EXT4-fs error (device loop5): __ext4_fill_super:5553: inode #2: comm syz.5.558: unexpected EA_INODE flag [ 71.432863][ T5575] EXT4-fs (loop5): get root inode failed [ 71.438604][ T5575] EXT4-fs (loop5): mount failed [ 71.507527][ T5585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5585 comm=syz.1.561 [ 72.090360][ T29] audit: type=1400 audit(1770657409.138:1410): avc: denied { read } for pid=5604 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.227949][ T29] audit: type=1400 audit(1770657409.276:1411): avc: denied { bind } for pid=5604 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.347732][ T5629] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 72.462456][ T5638] __nla_validate_parse: 10 callbacks suppressed [ 72.462475][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 72.520364][ T5641] EXT4-fs: Ignoring removed nobh option [ 72.573511][ T5645] set_capacity_and_notify: 5 callbacks suppressed [ 72.573528][ T5645] loop1: detected capacity change from 0 to 512 [ 72.614573][ T5641] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.649464][ T5646] Non-string source [ 72.667161][ T5645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.690770][ T5641] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.710839][ T5645] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.780891][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.885479][ T4778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.929229][ T29] audit: type=1400 audit(1770657409.963:1412): avc: denied { create } for pid=5654 comm="syz.1.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 72.987382][ T5660] netlink: 399 bytes leftover after parsing attributes in process `syz.1.577'. [ 72.996456][ T5660] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 73.045941][ T5664] Non-string source [ 73.051441][ T5666] Non-string source [ 73.144281][ T29] audit: type=1400 audit(1770657410.179:1413): avc: denied { connect } for pid=5676 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.270137][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 73.279026][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 73.508718][ T5701] xt_TCPMSS: Only works on TCP SYN packets [ 73.562851][ T5703] syz_tun: entered allmulticast mode [ 73.575212][ T5702] syz_tun: left allmulticast mode [ 73.657193][ T5707] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 73.773747][ T5719] loop1: detected capacity change from 0 to 1024 [ 73.795185][ T5719] EXT4-fs: inline encryption not supported [ 73.811574][ T5719] EXT4-fs: Ignoring removed bh option [ 73.829690][ T5719] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.861103][ T5719] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.876455][ T5719] EXT4-fs error (device loop1): ext4_quota_enable:7177: comm syz.1.599: inode #2304: comm syz.1.599: iget: illegal inode # [ 73.900520][ T5719] EXT4-fs (loop1): Remounting filesystem read-only [ 73.907096][ T5719] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 73.928552][ T5719] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 73.937769][ T5719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.001251][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.041162][ T5740] loop1: detected capacity change from 0 to 1024 [ 74.047942][ T5740] EXT4-fs: Ignoring removed orlov option [ 74.069972][ T5740] EXT4-fs: Ignoring removed bh option [ 74.093575][ T5740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.106299][ T5749] netlink: 'syz.6.604': attribute type 29 has an invalid length. [ 74.135004][ T5749] netlink: 'syz.6.604': attribute type 29 has an invalid length. [ 74.163475][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.181874][ T5749] netlink: 508 bytes leftover after parsing attributes in process `syz.6.604'. [ 74.288086][ T5774] loop6: detected capacity change from 0 to 512 [ 74.303864][ T5774] EXT4-fs: inline encryption not supported [ 74.358830][ T5774] EXT4-fs (loop6): 1 orphan inode deleted [ 74.381236][ T3457] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 74.399075][ T5774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.428707][ T5774] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.450906][ T5786] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 74.460834][ T4778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.524285][ T5801] loop5: detected capacity change from 0 to 7 [ 74.579345][ T5809] syz_tun: entered allmulticast mode [ 74.585503][ T5808] syz_tun: left allmulticast mode [ 74.676833][ T5820] loop1: detected capacity change from 0 to 128 [ 74.866854][ T5854] loop5: detected capacity change from 0 to 128 [ 74.879148][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 74.889153][ T5854] FAT-fs (loop5): bogus number of reserved sectors [ 74.895904][ T5854] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 74.907076][ T5854] FAT-fs (loop5): Can't find a valid FAT filesystem [ 75.054292][ T5879] syz_tun: entered allmulticast mode [ 75.061810][ T5878] syz_tun: left allmulticast mode [ 75.100565][ T5881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.633'. [ 75.110243][ T5877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 75.178631][ T5885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.187446][ T5887] loop6: detected capacity change from 0 to 512 [ 75.194471][ T5887] ext3: Unknown parameter 'noacl' [ 75.227439][ T5892] netlink: 48 bytes leftover after parsing attributes in process `syz.1.636'. [ 75.239513][ T5892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10457 sclass=netlink_route_socket pid=5892 comm=syz.1.636 [ 75.255287][ T5892] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000 [ 75.439908][ T5917] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.642'. [ 75.452999][ T5919] vxcan0: tx address claim with different name [ 75.584655][ T5930] binfmt_misc: register: failed to install interpreter file ./file1 [ 75.685128][ T5956] netlink: 'syz.0.650': attribute type 3 has an invalid length. [ 75.848510][ T5984] vxcan0: tx address claim with different name [ 75.923024][ T5999] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 75.959071][ T5999] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.978110][ T5999] veth5: entered promiscuous mode [ 75.988364][ T5999] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 76.046828][ T6011] netlink: 'syz.5.666': attribute type 4 has an invalid length. [ 76.150657][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 76.150672][ T29] audit: type=1400 audit(1770657413.130:1785): avc: denied { ioctl } for pid=6029 comm="syz.6.671" path="socket:[14249]" dev="sockfs" ino=14249 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 76.245774][ T6044] vxcan0: tx address claim with different name [ 76.261390][ T6048] loop6: detected capacity change from 0 to 1024 [ 76.264063][ T29] audit: type=1326 audit(1770657413.238:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b83acaeb9 code=0x7ffc0000 [ 76.272638][ T6048] EXT4-fs: Ignoring removed orlov option [ 76.306149][ T6048] EXT4-fs: Ignoring removed bh option [ 76.335152][ T29] audit: type=1326 audit(1770657413.258:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0b83acaeb9 code=0x7ffc0000 [ 76.358630][ T29] audit: type=1326 audit(1770657413.297:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b83acaeb9 code=0x7ffc0000 [ 76.381970][ T29] audit: type=1326 audit(1770657413.297:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b83acaeb9 code=0x7ffc0000 [ 76.408842][ T6048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.486213][ T6061] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 76.486583][ T6052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.566753][ T6079] loop5: detected capacity change from 0 to 7 [ 76.619162][ T29] audit: type=1326 audit(1770657413.593:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.5.679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b83acaeb9 code=0x0 [ 76.839311][ T6113] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 76.850347][ T6113] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 76.860570][ T6113] EXT4-fs (loop1): invalid journal inode [ 76.866372][ T6113] EXT4-fs (loop1): can't get journal size [ 76.874751][ T6113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.911139][ T6113] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 76.917760][ T6113] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.925454][ T6113] vhci_hcd vhci_hcd.0: Device attached [ 76.953116][ T6118] vhci_hcd: connection closed [ 76.953395][ T5847] vhci_hcd vhci_hcd.1: stop threads [ 76.963361][ T5847] vhci_hcd vhci_hcd.1: release socket [ 76.968853][ T5847] vhci_hcd vhci_hcd.1: disconnect device [ 77.261155][ T6137] FAULT_INJECTION: forcing a failure. [ 77.261155][ T6137] name failslab, interval 1, probability 0, space 0, times 1 [ 77.273938][ T6137] CPU: 1 UID: 0 PID: 6137 Comm: syz.0.683 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.273964][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.273984][ T6137] Call Trace: [ 77.273995][ T6137] [ 77.274004][ T6137] __dump_stack+0x1d/0x30 [ 77.274089][ T6137] dump_stack_lvl+0x95/0xd0 [ 77.274115][ T6137] dump_stack+0x15/0x1b [ 77.274139][ T6137] should_fail_ex+0x263/0x280 [ 77.274207][ T6137] should_failslab+0x8c/0xb0 [ 77.274234][ T6137] __kmalloc_cache_noprof+0x64/0x4a0 [ 77.274356][ T6137] ? syslog_print_all+0x79/0x3c0 [ 77.274389][ T6137] syslog_print_all+0x79/0x3c0 [ 77.274420][ T6137] ? avc_has_perm+0x101/0x190 [ 77.274473][ T6137] do_syslog+0x2fd/0x7f0 [ 77.274499][ T6137] ? ksys_write+0x194/0x1a0 [ 77.274521][ T6137] __x64_sys_syslog+0x41/0x50 [ 77.274547][ T6137] x64_sys_call+0x27ce/0x3000 [ 77.274635][ T6137] do_syscall_64+0xc0/0x2a0 [ 77.274671][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.274756][ T6137] RIP: 0033:0x7f0f2e53aeb9 [ 77.274774][ T6137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.274794][ T6137] RSP: 002b:00007f0f2cf97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 77.274892][ T6137] RAX: ffffffffffffffda RBX: 00007f0f2e7b5fa0 RCX: 00007f0f2e53aeb9 [ 77.274909][ T6137] RDX: b12288e90d7c8384 RSI: 0000200000000000 RDI: 0000000000000004 [ 77.274925][ T6137] RBP: 00007f0f2cf97090 R08: 0000000000000000 R09: 0000000000000000 [ 77.274939][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.274950][ T6137] R13: 00007f0f2e7b6038 R14: 00007f0f2e7b5fa0 R15: 00007ffecea51388 [ 77.275026][ T6137] [ 77.453394][ T4778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.495752][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.506371][ T29] audit: type=1400 audit(1770657414.471:1791): avc: denied { write } for pid=6138 comm="syz.6.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.530146][ T6139] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.543496][ T6139] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 77.553048][ T6139] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 77.562530][ T6139] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.684: Failed to acquire dquot type 1 [ 77.582528][ T6139] EXT4-fs (loop6): 1 truncate cleaned up [ 77.588790][ T6139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 77.631911][ T4778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 77.663657][ T29] audit: type=1400 audit(1770657414.619:1792): avc: denied { create } for pid=6150 comm="syz.1.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 77.705103][ T6157] set_capacity_and_notify: 2 callbacks suppressed [ 77.705120][ T6157] loop1: detected capacity change from 0 to 128 [ 77.772704][ T6162] loop5: detected capacity change from 0 to 7 [ 78.305655][ T6169] __nla_validate_parse: 3 callbacks suppressed [ 78.305670][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 78.325753][ T6169] team1: entered promiscuous mode [ 78.330805][ T6169] team1: entered allmulticast mode [ 78.336310][ T6169] 8021q: adding VLAN 0 to HW filter on device team1 [ 79.693364][ T6088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 79.771858][ T6201] xt_addrtype: ipv6 does not support BROADCAST matching [ 79.793278][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.706'. [ 79.830145][ T6203] netlink: 20 bytes leftover after parsing attributes in process `syz.6.707'. [ 79.839743][ T6205] 8021q: VLANs not supported on ip6_vti0 [ 79.849016][ T6210] FAULT_INJECTION: forcing a failure. [ 79.849016][ T6210] name failslab, interval 1, probability 0, space 0, times 0 [ 79.861716][ T6210] CPU: 0 UID: 0 PID: 6210 Comm: syz.5.708 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.861747][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.861826][ T6210] Call Trace: [ 79.861834][ T6210] [ 79.861843][ T6210] __dump_stack+0x1d/0x30 [ 79.861957][ T6210] dump_stack_lvl+0x95/0xd0 [ 79.861986][ T6210] dump_stack+0x15/0x1b [ 79.862012][ T6210] should_fail_ex+0x263/0x280 [ 79.862091][ T6210] should_failslab+0x8c/0xb0 [ 79.862175][ T6210] kmem_cache_alloc_noprof+0x68/0x490 [ 79.862205][ T6210] ? __anon_vma_prepare+0x70/0x2f0 [ 79.862244][ T6210] __anon_vma_prepare+0x70/0x2f0 [ 79.862298][ T6210] handle_mm_fault+0x22a4/0x3030 [ 79.862350][ T6210] do_user_addr_fault+0x3fd/0x1050 [ 79.862388][ T6210] exc_page_fault+0x62/0xa0 [ 79.862478][ T6210] asm_exc_page_fault+0x26/0x30 [ 79.862500][ T6210] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 79.862602][ T6210] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 79.862619][ T6210] RSP: 0018:ffffc900044e7cf0 EFLAGS: 00050202 [ 79.862635][ T6210] RAX: ffff88811abd0a90 RBX: 00000000000000e1 RCX: 00000000000000e1 [ 79.862649][ T6210] RDX: 0000000000000000 RSI: ffff88810ad20800 RDI: 0000200000000000 [ 79.862711][ T6210] RBP: 0000000000000000 R08: 00000000000007b0 R09: 0000000000000000 [ 79.862727][ T6210] R10: 000188810ad20800 R11: 000188810ad208e0 R12: 00002000000000e1 [ 79.862742][ T6210] R13: 00007ffffffff000 R14: 0000200000000000 R15: ffff88810ad20800 [ 79.862765][ T6210] _copy_to_user+0x7c/0xa0 [ 79.862844][ T6210] syslog_print_all+0x1e6/0x3c0 [ 79.862876][ T6210] do_syslog+0x2fd/0x7f0 [ 79.862910][ T6210] ? ksys_write+0x194/0x1a0 [ 79.862936][ T6210] __x64_sys_syslog+0x41/0x50 [ 79.862977][ T6210] x64_sys_call+0x27ce/0x3000 [ 79.863010][ T6210] do_syscall_64+0xc0/0x2a0 [ 79.863041][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.863069][ T6210] RIP: 0033:0x7f0b83acaeb9 [ 79.863093][ T6210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.863115][ T6210] RSP: 002b:00007f0b82527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 79.863139][ T6210] RAX: ffffffffffffffda RBX: 00007f0b83d45fa0 RCX: 00007f0b83acaeb9 [ 79.863157][ T6210] RDX: b12288e90d7c8384 RSI: 0000200000000000 RDI: 0000000000000004 [ 79.863174][ T6210] RBP: 00007f0b82527090 R08: 0000000000000000 R09: 0000000000000000 [ 79.863190][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.863272][ T6210] R13: 00007f0b83d46038 R14: 00007f0b83d45fa0 R15: 00007ffdc394b588 [ 79.863298][ T6210] [ 80.215640][ T6230] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 80.342730][ T6245] loop5: detected capacity change from 0 to 512 [ 80.357497][ T6245] EXT4-fs: inline encryption not supported [ 80.386546][ T3483] IPVS: starting estimator thread 0... [ 80.403896][ T6245] EXT4-fs (loop5): 1 orphan inode deleted [ 80.414674][ T6245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.431483][ T37] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 80.444812][ T6245] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.468837][ T4747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.478189][ T6250] IPVS: using max 2208 ests per chain, 110400 per kthread [ 80.539291][ T6270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.718'. [ 80.548315][ T6270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.718'. [ 80.557668][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.718'. [ 80.566648][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.718'. [ 80.587711][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz.5.719'. [ 80.744489][ T6282] FAULT_INJECTION: forcing a failure. [ 80.744489][ T6282] name failslab, interval 1, probability 0, space 0, times 0 [ 80.757183][ T6282] CPU: 1 UID: 0 PID: 6282 Comm: syz.1.722 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.757214][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.757262][ T6282] Call Trace: [ 80.757270][ T6282] [ 80.757280][ T6282] __dump_stack+0x1d/0x30 [ 80.757307][ T6282] dump_stack_lvl+0x95/0xd0 [ 80.757335][ T6282] dump_stack+0x15/0x1b [ 80.757455][ T6282] should_fail_ex+0x263/0x280 [ 80.757487][ T6282] should_failslab+0x8c/0xb0 [ 80.757510][ T6282] kmem_cache_alloc_noprof+0x68/0x490 [ 80.757540][ T6282] ? __anon_vma_prepare+0xcd/0x2f0 [ 80.757597][ T6282] __anon_vma_prepare+0xcd/0x2f0 [ 80.757630][ T6282] handle_mm_fault+0x22a4/0x3030 [ 80.757687][ T6282] do_user_addr_fault+0x3fd/0x1050 [ 80.757791][ T6282] exc_page_fault+0x62/0xa0 [ 80.757881][ T6282] asm_exc_page_fault+0x26/0x30 [ 80.757908][ T6282] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 80.757934][ T6282] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 80.757975][ T6282] RSP: 0018:ffffc900045a7cf0 EFLAGS: 00050202 [ 80.757996][ T6282] RAX: ffff88811abd3c10 RBX: 00000000000000e1 RCX: 00000000000000e1 [ 80.758072][ T6282] RDX: 0000000000000000 RSI: ffff888109c28800 RDI: 0000200000000000 [ 80.758120][ T6282] RBP: 0000000000000000 R08: 000000000000004e R09: 0000000000000000 [ 80.758203][ T6282] R10: 0001888109c28800 R11: 0001888109c288e0 R12: 00002000000000e1 [ 80.758216][ T6282] R13: 00007ffffffff000 R14: 0000200000000000 R15: ffff888109c28800 [ 80.758238][ T6282] _copy_to_user+0x7c/0xa0 [ 80.758265][ T6282] syslog_print_all+0x1e6/0x3c0 [ 80.758382][ T6282] do_syslog+0x2fd/0x7f0 [ 80.758412][ T6282] ? ksys_write+0x194/0x1a0 [ 80.758438][ T6282] __x64_sys_syslog+0x41/0x50 [ 80.758488][ T6282] x64_sys_call+0x27ce/0x3000 [ 80.758521][ T6282] do_syscall_64+0xc0/0x2a0 [ 80.758560][ T6282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.758585][ T6282] RIP: 0033:0x7f815eceaeb9 [ 80.758643][ T6282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.758713][ T6282] RSP: 002b:00007f815d747028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 80.758733][ T6282] RAX: ffffffffffffffda RBX: 00007f815ef65fa0 RCX: 00007f815eceaeb9 [ 80.758747][ T6282] RDX: b12288e90d7c8384 RSI: 0000200000000000 RDI: 0000000000000004 [ 80.758783][ T6282] RBP: 00007f815d747090 R08: 0000000000000000 R09: 0000000000000000 [ 80.758799][ T6282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.758815][ T6282] R13: 00007f815ef66038 R14: 00007f815ef65fa0 R15: 00007ffec25529d8 [ 80.758836][ T6282] [ 81.059897][ T6285] loop1: detected capacity change from 0 to 1024 [ 81.074341][ T6285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.184950][ T6290] netlink: 20 bytes leftover after parsing attributes in process `syz.5.725'. [ 81.201800][ T6288] loop6: detected capacity change from 0 to 2048 [ 81.259587][ T4740] Alternate GPT is invalid, using primary GPT. [ 81.265888][ T4740] loop6: p1 p2 p3 [ 81.269667][ T4740] loop6: partition table partially beyond EOD, truncated [ 81.294688][ T6288] Alternate GPT is invalid, using primary GPT. [ 81.301203][ T6288] loop6: p1 p2 p3 [ 81.305094][ T6288] loop6: partition table partially beyond EOD, truncated [ 81.332468][ T3000] Alternate GPT is invalid, using primary GPT. [ 81.339077][ T3000] loop6: p1 p2 p3 [ 81.342897][ T3000] loop6: partition table partially beyond EOD, truncated [ 81.633693][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.773042][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 81.773057][ T29] audit: type=1326 audit(1770657418.690:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b83acaeb9 code=0x7ffc0000 [ 81.802728][ T29] audit: type=1326 audit(1770657418.690:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b83acaeb9 code=0x7ffc0000 [ 81.826175][ T29] audit: type=1326 audit(1770657418.690:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b83acaeb9 code=0x7ffc0000 [ 81.849437][ T29] audit: type=1326 audit(1770657418.690:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b83acaeb9 code=0x7ffc0000 [ 81.872808][ T29] audit: type=1326 audit(1770657418.690:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b83acaeb9 code=0x7ffc0000 [ 81.896150][ T29] audit: type=1326 audit(1770657418.690:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0b83acaeb9 code=0x7ffc0000 [ 81.919324][ T29] audit: type=1326 audit(1770657418.690:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b83acaeb9 code=0x7ffc0000 [ 81.942747][ T29] audit: type=1326 audit(1770657418.690:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b83acaeb9 code=0x7ffc0000 [ 81.966084][ T29] audit: type=1326 audit(1770657418.690:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b83acaeb9 code=0x7ffc0000 [ 81.989435][ T29] audit: type=1326 audit(1770657418.690:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b83acaeb9 code=0x7ffc0000 [ 82.119588][ T6321] loop6: detected capacity change from 0 to 512 [ 82.147581][ T6321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.174252][ T6321] EXT4-fs warning (device loop6): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop6. [ 82.177708][ T6322] FAULT_INJECTION: forcing a failure. [ 82.177708][ T6322] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 82.198768][ T6322] CPU: 1 UID: 0 PID: 6322 Comm: syz.2.733 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.198798][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.198812][ T6322] Call Trace: [ 82.198821][ T6322] [ 82.198831][ T6322] __dump_stack+0x1d/0x30 [ 82.198860][ T6322] dump_stack_lvl+0x95/0xd0 [ 82.199008][ T6322] dump_stack+0x15/0x1b [ 82.199042][ T6322] should_fail_ex+0x263/0x280 [ 82.199126][ T6322] should_fail_alloc_page+0xf2/0x100 [ 82.199155][ T6322] __alloc_frozen_pages_noprof+0x108/0x350 [ 82.199214][ T6322] alloc_pages_mpol+0xb3/0x260 [ 82.199273][ T6322] vma_alloc_folio_noprof+0x1a9/0x300 [ 82.199308][ T6322] handle_mm_fault+0xdfc/0x3030 [ 82.199353][ T6322] do_user_addr_fault+0x3fd/0x1050 [ 82.199427][ T6322] exc_page_fault+0x62/0xa0 [ 82.199457][ T6322] asm_exc_page_fault+0x26/0x30 [ 82.199477][ T6322] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 82.199570][ T6322] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 82.199604][ T6322] RSP: 0018:ffffc9000c237cf0 EFLAGS: 00050202 [ 82.199644][ T6322] RAX: ffff8881285b3c10 RBX: 00000000000000e1 RCX: 00000000000000e1 [ 82.199661][ T6322] RDX: 0000000000000000 RSI: ffff88810ad32800 RDI: 0000200000000000 [ 82.199679][ T6322] RBP: 0000000000000000 R08: 0000000000000249 R09: 0000000000000000 [ 82.199695][ T6322] R10: 000188810ad32800 R11: 000188810ad328e0 R12: 00002000000000e1 [ 82.199786][ T6322] R13: 00007ffffffff000 R14: 0000200000000000 R15: ffff88810ad32800 [ 82.199812][ T6322] _copy_to_user+0x7c/0xa0 [ 82.199838][ T6322] syslog_print_all+0x1e6/0x3c0 [ 82.199937][ T6322] do_syslog+0x2fd/0x7f0 [ 82.199976][ T6322] ? ksys_write+0x194/0x1a0 [ 82.200000][ T6322] __x64_sys_syslog+0x41/0x50 [ 82.200091][ T6322] x64_sys_call+0x27ce/0x3000 [ 82.200117][ T6322] do_syscall_64+0xc0/0x2a0 [ 82.200162][ T6322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.200181][ T6322] RIP: 0033:0x7f79ba37aeb9 [ 82.200195][ T6322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.200211][ T6322] RSP: 002b:00007f79b8dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 82.200231][ T6322] RAX: ffffffffffffffda RBX: 00007f79ba5f5fa0 RCX: 00007f79ba37aeb9 [ 82.200249][ T6322] RDX: b12288e90d7c8384 RSI: 0000200000000000 RDI: 0000000000000004 [ 82.200265][ T6322] RBP: 00007f79b8dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.200279][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.200293][ T6322] R13: 00007f79ba5f6038 R14: 00007f79ba5f5fa0 R15: 00007fff778bf638 [ 82.200313][ T6322] [ 82.512640][ T6335] dummy0: entered promiscuous mode [ 82.518665][ T6335] bond0: entered promiscuous mode [ 82.523857][ T6335] bond_slave_0: entered promiscuous mode [ 82.530108][ T6335] bond_slave_1: entered promiscuous mode [ 82.537756][ T6335] hsr1: entered allmulticast mode [ 82.543013][ T6335] dummy0: entered allmulticast mode [ 82.548263][ T6335] bond0: entered allmulticast mode [ 82.553710][ T6335] bond_slave_0: entered allmulticast mode [ 82.559694][ T6335] bond_slave_1: entered allmulticast mode [ 82.575064][ T6332] team0: Device gtp0 is up. Set it down before adding it as a team port [ 82.594104][ T6331] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20003 [ 82.675268][ T6345] netlink: 20 bytes leftover after parsing attributes in process `syz.5.741'. [ 82.719206][ T6349] netlink: 'syz.5.743': attribute type 1 has an invalid length. [ 82.948985][ T6361] FAULT_INJECTION: forcing a failure. [ 82.948985][ T6361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 82.962387][ T6361] CPU: 1 UID: 0 PID: 6361 Comm: syz.0.747 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.962415][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.962429][ T6361] Call Trace: [ 82.962436][ T6361] [ 82.962443][ T6361] __dump_stack+0x1d/0x30 [ 82.962476][ T6361] dump_stack_lvl+0x95/0xd0 [ 82.962543][ T6361] dump_stack+0x15/0x1b [ 82.962570][ T6361] should_fail_ex+0x263/0x280 [ 82.962610][ T6361] should_fail_alloc_page+0xf2/0x100 [ 82.962644][ T6361] __alloc_frozen_pages_noprof+0x108/0x350 [ 82.962708][ T6361] alloc_pages_mpol+0xb3/0x260 [ 82.962818][ T6361] alloc_pages_noprof+0x8f/0x130 [ 82.962851][ T6361] pte_alloc_one+0x1e/0xd0 [ 82.962954][ T6361] __do_fault+0x7b/0x200 [ 82.962981][ T6361] handle_mm_fault+0x17f5/0x3030 [ 82.963069][ T6361] do_user_addr_fault+0x3fd/0x1050 [ 82.963108][ T6361] exc_page_fault+0x62/0xa0 [ 82.963168][ T6361] asm_exc_page_fault+0x26/0x30 [ 82.963189][ T6361] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 82.963210][ T6361] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 82.963228][ T6361] RSP: 0018:ffffc9000c217cf0 EFLAGS: 00050202 [ 82.963328][ T6361] RAX: 372020205b3e363c RBX: 000000000000003a RCX: 000000000000003a [ 82.963346][ T6361] RDX: 0000000000000000 RSI: ffff88810ad30000 RDI: 0000200000000000 [ 82.963363][ T6361] RBP: 0000000000000000 R08: 0000000000000040 R09: 0000000000000000 [ 82.963379][ T6361] R10: 000188810ad30000 R11: 000188810ad30039 R12: 000020000000003a [ 82.963397][ T6361] R13: 00007ffffffff000 R14: 0000200000000000 R15: ffff88810ad30000 [ 82.963418][ T6361] _copy_to_user+0x7c/0xa0 [ 82.963498][ T6361] syslog_print_all+0x1e6/0x3c0 [ 82.963542][ T6361] do_syslog+0x2fd/0x7f0 [ 82.963570][ T6361] ? finish_task_switch+0x79/0x280 [ 82.963663][ T6361] __x64_sys_syslog+0x41/0x50 [ 82.963690][ T6361] x64_sys_call+0x27ce/0x3000 [ 82.963720][ T6361] do_syscall_64+0xc0/0x2a0 [ 82.963763][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.963791][ T6361] RIP: 0033:0x7f0f2e53aeb9 [ 82.963826][ T6361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.963849][ T6361] RSP: 002b:00007f0f2cf97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 82.963879][ T6361] RAX: ffffffffffffffda RBX: 00007f0f2e7b5fa0 RCX: 00007f0f2e53aeb9 [ 82.963893][ T6361] RDX: b12288e90d7c8384 RSI: 0000200000000000 RDI: 0000000000000004 [ 82.963906][ T6361] RBP: 00007f0f2cf97090 R08: 0000000000000000 R09: 0000000000000000 [ 82.963918][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.963946][ T6361] R13: 00007f0f2e7b6038 R14: 00007f0f2e7b5fa0 R15: 00007ffecea51388 [ 82.963966][ T6361] [ 83.376326][ T6370] __nla_validate_parse: 2 callbacks suppressed [ 83.376397][ T6370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'. [ 83.492229][ T6380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.755'. [ 83.553240][ T6383] loop1: detected capacity change from 0 to 512 [ 83.572830][ T6383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.587495][ T6383] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.616121][ T6383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.756'. [ 83.648580][ T6383] netlink: 'syz.1.756': attribute type 21 has an invalid length. [ 83.656440][ T6383] netlink: 156 bytes leftover after parsing attributes in process `syz.1.756'. [ 83.667701][ T6396] netlink: 'syz.0.760': attribute type 1 has an invalid length. [ 83.705450][ T6396] 8021q: adding VLAN 0 to HW filter on device bond3 [ 83.717064][ T6396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.760'. [ 83.752957][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 83.773870][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.784123][ T6404] FAULT_INJECTION: forcing a failure. [ 83.784123][ T6404] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.797326][ T6404] CPU: 0 UID: 0 PID: 6404 Comm: syz.5.762 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.797355][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.797367][ T6404] Call Trace: [ 83.797373][ T6404] [ 83.797380][ T6404] __dump_stack+0x1d/0x30 [ 83.797403][ T6404] dump_stack_lvl+0x95/0xd0 [ 83.797424][ T6404] dump_stack+0x15/0x1b [ 83.797492][ T6404] should_fail_ex+0x263/0x280 [ 83.797529][ T6404] should_fail+0xb/0x20 [ 83.797555][ T6404] should_fail_usercopy+0x1a/0x20 [ 83.797637][ T6404] _copy_to_user+0x20/0xa0 [ 83.797662][ T6404] simple_read_from_buffer+0xb5/0x130 [ 83.797756][ T6404] proc_fail_nth_read+0x10e/0x150 [ 83.797834][ T6404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.797864][ T6404] vfs_read+0x1ab/0x7f0 [ 83.797881][ T6404] ? __rcu_read_unlock+0x4e/0x70 [ 83.797914][ T6404] ? __fget_files+0x184/0x1c0 [ 83.797988][ T6404] ? mutex_lock+0x57/0x90 [ 83.798012][ T6404] ksys_read+0xdc/0x1a0 [ 83.798036][ T6404] __x64_sys_read+0x40/0x50 [ 83.798058][ T6404] x64_sys_call+0x2889/0x3000 [ 83.798195][ T6404] do_syscall_64+0xc0/0x2a0 [ 83.798230][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.798252][ T6404] RIP: 0033:0x7f0b83a8b78e [ 83.798271][ T6404] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.798291][ T6404] RSP: 002b:00007f0b82526fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.798314][ T6404] RAX: ffffffffffffffda RBX: 00007f0b825276c0 RCX: 00007f0b83a8b78e [ 83.798450][ T6404] RDX: 000000000000000f RSI: 00007f0b825270a0 RDI: 0000000000000004 [ 83.798472][ T6404] RBP: 00007f0b82527090 R08: 0000000000000000 R09: 0000000000000000 [ 83.798488][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.798501][ T6404] R13: 00007f0b83d46038 R14: 00007f0b83d45fa0 R15: 00007ffdc394b588 [ 83.798519][ T6404] [ 84.006443][ T6406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 84.078430][ T6415] vxcan0: tx address claim with different name [ 84.187633][ T6421] loop1: detected capacity change from 0 to 512 [ 84.226230][ T6421] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.267290][ T6421] EXT4-fs (loop1): 1 orphan inode deleted [ 84.273112][ T6421] EXT4-fs (loop1): 1 truncate cleaned up [ 84.299799][ T6421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.838163][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 85.172167][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.285430][ T6454] syz_tun: entered allmulticast mode [ 85.302708][ T6453] syz_tun: left allmulticast mode [ 85.559773][ T6465] macsec0: entered promiscuous mode [ 85.565306][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 85.588331][ T6465] macsec0 (unregistering): left promiscuous mode [ 86.314533][ T6495] netlink: 'syz.2.794': attribute type 6 has an invalid length. [ 86.356461][ T6500] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 86.405525][ T6504] vxcan0: tx address claim with different name [ 86.413759][ T6506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.440457][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.792'. [ 86.465851][ T6506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.604257][ T6506] raw_sendmsg: syz.0.793 forgot to set AF_INET. Fix it! [ 87.220852][ T6523] loop1: detected capacity change from 0 to 512 [ 87.240637][ T6523] EXT4-fs (loop1): bad s_want_extra_isize: 65535 [ 87.369258][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 87.369276][ T29] audit: type=1400 audit(1770657424.231:1971): avc: denied { recv } for pid=6419 comm="syz.6.767" saddr=10.128.0.163 src=30036 daddr=10.128.0.142 dest=40500 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 87.444448][ T6538] loop1: detected capacity change from 0 to 2048 [ 87.490362][ T6538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.534736][ T6538] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.572448][ T29] audit: type=1400 audit(1770657424.440:1972): avc: denied { create } for pid=6536 comm="syz.1.807" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 87.596835][ T6538] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.807: bg 0: block 345: padding at end of block bitmap is not set [ 87.725872][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.839304][ T6552] netlink: 'syz.2.813': attribute type 6 has an invalid length. [ 87.870977][ T29] audit: type=1400 audit(1770657424.728:1973): avc: denied { getopt } for pid=6550 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.944374][ T6557] loop1: detected capacity change from 0 to 1024 [ 87.994507][ T6557] EXT4-fs: Ignoring removed orlov option [ 88.036205][ T6557] EXT4-fs: Ignoring removed bh option [ 88.079181][ T6557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.322694][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.391447][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.399309][ T29] audit: type=1326 audit(1770657425.234:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 88.423079][ T29] audit: type=1326 audit(1770657425.234:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 88.446638][ T29] audit: type=1326 audit(1770657425.234:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 88.469884][ T29] audit: type=1326 audit(1770657425.234:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 88.493439][ T29] audit: type=1326 audit(1770657425.234:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 88.516931][ T29] audit: type=1326 audit(1770657425.234:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 88.540266][ T29] audit: type=1326 audit(1770657425.234:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 88.685705][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.740141][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.852041][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.022301][ T6590] netlink: 'syz.6.823': attribute type 1 has an invalid length. [ 89.043966][ T6590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.956392][ T6613] loop6: detected capacity change from 0 to 512 [ 89.965499][ T6613] EXT4-fs: dax option not supported [ 90.142342][ T6620] __nla_validate_parse: 5 callbacks suppressed [ 90.142358][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.833'. [ 90.157427][ T6620] netlink: 'syz.5.833': attribute type 26 has an invalid length. [ 90.160774][ T6622] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 90.165195][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.833'. [ 90.390934][ T6630] netlink: 72 bytes leftover after parsing attributes in process `syz.0.835'. [ 90.414631][ T6630] netlink: 'syz.0.835': attribute type 13 has an invalid length. [ 90.549098][ T6597] loop1: detected capacity change from 0 to 512 [ 90.601402][ T6597] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.825: inode has both inline data and extents flags [ 90.622944][ T6597] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.825: couldn't read orphan inode 15 (err -117) [ 90.643630][ T6597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.665599][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.673236][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.694500][ T6630] batman_adv: batadv0: Interface deactivated: dummy0 [ 90.710483][ T6597] program syz.1.825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.761358][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.774320][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.017623][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.259728][ T6655] xfrm0: left promiscuous mode [ 91.265107][ T6655] xfrm0: left allmulticast mode [ 91.295428][ T5850] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.316410][ T5850] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.382939][ T5850] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.401662][ T5850] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.493506][ T6698] loop5: detected capacity change from 0 to 512 [ 91.509318][ T6698] EXT4-fs: Ignoring removed i_version option [ 91.524964][ T6698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.550523][ T4747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.569203][ T6687] netlink: 32 bytes leftover after parsing attributes in process `syz.6.846'. [ 91.622784][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'. [ 91.631925][ T6707] netlink: 'syz.2.855': attribute type 2 has an invalid length. [ 91.639639][ T6707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.855'. [ 91.653154][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 91.662071][ T6712] netlink: 'syz.1.854': attribute type 26 has an invalid length. [ 91.670063][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 91.707119][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 91.716143][ T6712] netlink: 'syz.1.854': attribute type 26 has an invalid length. [ 91.723953][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 92.084997][ T6741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6741 comm=syz.1.866 [ 92.193131][ T6755] tipc: Started in network mode [ 92.198216][ T6755] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 92.216327][ T6755] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 92.224557][ T6755] tipc: Enabled bearer , priority 10 [ 92.225246][ T6757] netlink: 'syz.0.873': attribute type 2 has an invalid length. [ 92.238456][ T6757] netlink: 'syz.0.873': attribute type 8 has an invalid length. [ 92.609317][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 92.609352][ T29] audit: type=1400 audit(1770657429.439:2047): avc: denied { ioctl } for pid=6772 comm="syz.2.877" path="socket:[17468]" dev="sockfs" ino=17468 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.610038][ T6773] vxcan0: tx address claim with different name [ 92.615798][ T29] audit: type=1400 audit(1770657429.439:2048): avc: denied { bind } for pid=6772 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.665750][ T29] audit: type=1400 audit(1770657429.439:2049): avc: denied { write } for pid=6772 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.739696][ T29] audit: type=1400 audit(1770657429.539:2050): avc: denied { execute } for pid=6774 comm="syz.0.878" name="sg#" dev="devtmpfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 92.761950][ T29] audit: type=1400 audit(1770657429.539:2051): avc: denied { execute_no_trans } for pid=6774 comm="syz.0.878" path="/dev/sg#" dev="devtmpfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 92.816332][ T29] audit: type=1326 audit(1770657429.648:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba37aeb9 code=0x7ffc0000 [ 92.844783][ T29] audit: type=1326 audit(1770657429.678:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f79ba37aeb9 code=0x7ffc0000 [ 92.868248][ T29] audit: type=1326 audit(1770657429.678:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba37aeb9 code=0x7ffc0000 [ 92.891779][ T29] audit: type=1326 audit(1770657429.678:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f79ba37aeb9 code=0x7ffc0000 [ 92.915768][ T29] audit: type=1326 audit(1770657429.678:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba37aeb9 code=0x7ffc0000 [ 92.948358][ T6784] ref_ctr increment failed for inode: 0x44a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811c3921c0 [ 93.026522][ T6792] loop5: detected capacity change from 0 to 7 [ 93.112694][ T6800] loop5: detected capacity change from 0 to 1024 [ 93.119676][ T6800] EXT4-fs: Ignoring removed bh option [ 93.125249][ T6800] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.150116][ T6800] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 93.176092][ T6800] System zones: 0-1, 3-36 [ 93.185023][ T6800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.257982][ T4747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.356399][ T9] tipc: Node number set to 1 [ 93.398729][ T6815] tc_dump_action: action bad kind [ 93.609884][ T6847] 9p: Bad value for 'wfdno' [ 93.971509][ T6898] team0: Device gtp1 is up. Set it down before adding it as a team port [ 93.998014][ T6900] tipc: Started in network mode [ 94.003067][ T6900] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 94.003939][ T6907] loop5: detected capacity change from 0 to 7 [ 94.028743][ T6900] tipc: Enabled bearer , priority 10 [ 94.115104][ T6918] netlink: 'syz.2.910': attribute type 83 has an invalid length. [ 94.474453][ T6925] loop1: detected capacity change from 0 to 256 [ 94.502745][ T6925] FAT-fs (loop1): Directory bread(block 64) failed [ 94.509479][ T6925] FAT-fs (loop1): Directory bread(block 65) failed [ 94.517312][ T6925] FAT-fs (loop1): Directory bread(block 66) failed [ 94.524096][ T6925] FAT-fs (loop1): Directory bread(block 67) failed [ 94.530875][ T6925] FAT-fs (loop1): Directory bread(block 68) failed [ 94.537926][ T6925] FAT-fs (loop1): Directory bread(block 69) failed [ 94.545342][ T6925] FAT-fs (loop1): Directory bread(block 70) failed [ 94.552263][ T6925] FAT-fs (loop1): Directory bread(block 71) failed [ 94.559124][ T6925] FAT-fs (loop1): Directory bread(block 72) failed [ 94.560490][ T6927] vlan2: entered allmulticast mode [ 94.565871][ T6925] FAT-fs (loop1): Directory bread(block 73) failed [ 94.570957][ T6927] vlan1: entered allmulticast mode [ 94.570977][ T6927] veth0_vlan: entered allmulticast mode [ 94.717194][ T6939] loop5: detected capacity change from 0 to 1024 [ 94.770964][ T6939] EXT4-fs: Ignoring removed orlov option [ 94.776947][ T6939] EXT4-fs: Ignoring removed bh option [ 94.808867][ T6939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.044320][ T3393] tipc: Node number set to 4269801494 [ 95.053828][ T6971] ieee802154 phy0 wpan0: encryption failed: -126 [ 95.072665][ T6969] tipc: Can't bind to reserved service type 3 [ 95.090391][ T6969] loop1: detected capacity change from 0 to 2048 [ 95.196932][ T4740] Alternate GPT is invalid, using primary GPT. [ 95.203493][ T4740] loop1: p1 p2 p3 [ 95.207409][ T4740] loop1: partition table partially beyond EOD, truncated [ 95.237388][ T6969] Alternate GPT is invalid, using primary GPT. [ 95.243799][ T6969] loop1: p1 p2 p3 [ 95.247591][ T6969] loop1: partition table partially beyond EOD, truncated [ 95.388942][ T6999] loop1: detected capacity change from 0 to 512 [ 95.405008][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 95.405375][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 95.426716][ T4740] udevd[4740]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 95.467872][ T6999] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 95.516142][ T6999] EXT4-fs (loop1): orphan cleanup on readonly fs [ 95.545116][ T6999] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.929: corrupted inode contents [ 95.579908][ T7002] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 95.588261][ T6997] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 95.611421][ T4740] udevd[4740]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 95.622495][ T6999] EXT4-fs (loop1): Remounting filesystem read-only [ 95.629058][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 95.642492][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 95.660324][ T6999] EXT4-fs (loop1): 1 truncate cleaned up [ 95.666224][ T57] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 95.677417][ T57] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 95.697380][ T57] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 95.708328][ T6999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.800063][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.814729][ T7007] __nla_validate_parse: 10 callbacks suppressed [ 95.814766][ T7007] netlink: 20 bytes leftover after parsing attributes in process `syz.0.931'. [ 95.846303][ T7011] netlink: 52 bytes leftover after parsing attributes in process `syz.1.933'. [ 95.861485][ T7011] ip6gre1: entered promiscuous mode [ 95.866800][ T7011] ip6gre1: entered allmulticast mode [ 95.882953][ T7009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.932'. [ 95.906553][ T7013] FAULT_INJECTION: forcing a failure. [ 95.906553][ T7013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.919989][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.6.934 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.920026][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.920052][ T7013] Call Trace: [ 95.920060][ T7013] [ 95.920069][ T7013] __dump_stack+0x1d/0x30 [ 95.920100][ T7013] dump_stack_lvl+0x95/0xd0 [ 95.920201][ T7013] dump_stack+0x15/0x1b [ 95.920222][ T7013] should_fail_ex+0x263/0x280 [ 95.920264][ T7013] should_fail+0xb/0x20 [ 95.920297][ T7013] should_fail_usercopy+0x1a/0x20 [ 95.920358][ T7013] _copy_from_user+0x1c/0xb0 [ 95.920393][ T7013] ___sys_sendmsg+0xc1/0x1e0 [ 95.920430][ T7013] __x64_sys_sendmsg+0xd4/0x160 [ 95.920456][ T7013] x64_sys_call+0x17ba/0x3000 [ 95.920487][ T7013] do_syscall_64+0xc0/0x2a0 [ 95.920549][ T7013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.920577][ T7013] RIP: 0033:0x7f69a090aeb9 [ 95.920629][ T7013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.920647][ T7013] RSP: 002b:00007f699f367028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.920674][ T7013] RAX: ffffffffffffffda RBX: 00007f69a0b85fa0 RCX: 00007f69a090aeb9 [ 95.920756][ T7013] RDX: 0000000004000050 RSI: 00002000000001c0 RDI: 0000000000000004 [ 95.920773][ T7013] RBP: 00007f699f367090 R08: 0000000000000000 R09: 0000000000000000 [ 95.920839][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.920851][ T7013] R13: 00007f69a0b86038 R14: 00007f69a0b85fa0 R15: 00007ffc0100b748 [ 95.920919][ T7013] [ 96.090068][ T7014] loop1: detected capacity change from 0 to 128 [ 96.096704][ T7014] msdos: Unknown parameter '' [ 96.150894][ T7016] bridge_slave_1: left allmulticast mode [ 96.156611][ T7016] bridge_slave_1: left promiscuous mode [ 96.162483][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.190233][ T7016] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 96.351144][ T4747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.362246][ T7020] netlink: 72 bytes leftover after parsing attributes in process `syz.6.936'. [ 96.412606][ T7020] netlink: 'syz.6.936': attribute type 13 has an invalid length. [ 96.461892][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.546583][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.559097][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.573050][ T7032] netlink: 'syz.0.940': attribute type 32 has an invalid length. [ 96.580898][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 96.611379][ T7037] loop5: detected capacity change from 0 to 7 [ 96.657719][ T7032] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 96.667049][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.710830][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.725317][ T7040] netlink: 16 bytes leftover after parsing attributes in process `syz.5.942'. [ 96.745125][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.768245][ T7044] tmpfs: Unknown parameter '.r' [ 96.775069][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.839490][ T7052] loop6: detected capacity change from 0 to 1024 [ 96.874018][ T7052] EXT4-fs: Ignoring removed orlov option [ 96.902113][ T7057] loop5: detected capacity change from 0 to 512 [ 96.902418][ T7052] EXT4-fs: Ignoring removed bh option [ 96.914551][ T7057] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 96.966549][ T7052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.190083][ T7075] loop5: detected capacity change from 0 to 1024 [ 97.249273][ T7075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.354485][ T4747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.453774][ T7100] loop1: detected capacity change from 0 to 512 [ 97.488207][ T7100] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.510530][ T7100] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.532196][ T7100] EXT4-fs (loop1): 1 truncate cleaned up [ 97.564938][ T7100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.626735][ T7100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.960'. [ 97.685585][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 97.685604][ T29] audit: type=1400 audit(1770657434.497:2395): avc: denied { execute } for pid=7118 comm="syz.0.965" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 97.758994][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.854032][ T29] audit: type=1400 audit(1770657434.656:2396): avc: denied { accept } for pid=7134 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.882621][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.970'. [ 97.905181][ T7137] loop5: detected capacity change from 0 to 764 [ 97.930931][ T7137] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 98.088550][ T7147] netlink: 68 bytes leftover after parsing attributes in process `syz.5.974'. [ 98.128683][ T7147] loop5: detected capacity change from 0 to 2048 [ 98.189017][ T7147] Alternate GPT is invalid, using primary GPT. [ 98.195424][ T7147] loop5: p1 p2 p3 [ 98.199274][ T7147] loop5: partition table partially beyond EOD, truncated [ 98.309388][ T4778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.340779][ T29] audit: type=1400 audit(1770657435.155:2397): avc: denied { ioctl } for pid=7150 comm="syz.5.975" path="socket:[18082]" dev="sockfs" ino=18082 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.407329][ T7157] vxcan0: tx address claim with different name [ 98.468379][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.978'. [ 98.488051][ T57] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.521267][ T7164] xt_TCPMSS: Only works on TCP SYN packets [ 98.548484][ T57] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.557260][ T57] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.625668][ T57] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.697226][ T7175] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 98.758863][ T7175] JBD2: no valid journal superblock found [ 98.764733][ T7175] EXT4-fs (loop1): Could not load journal inode [ 98.913384][ T29] audit: type=1400 audit(1770657435.723:2398): avc: denied { write } for pid=7199 comm="syz.1.989" lport=43210 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 99.013719][ T7206] netlink: 'syz.2.991': attribute type 5 has an invalid length. [ 99.077568][ T29] audit: type=1400 audit(1770657435.882:2399): avc: denied { override_creds } for pid=7220 comm="syz.1.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.151733][ T7226] pim6reg: tun_chr_ioctl cmd 1074025680 [ 99.163361][ T29] audit: type=1400 audit(1770657435.972:2400): avc: denied { mounton } for pid=7218 comm="syz.2.995" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 99.212984][ T7234] syz.2.995 (7234): /proc/7234/oom_adj is deprecated, please use /proc/7234/oom_score_adj instead. [ 99.352166][ T29] audit: type=1326 audit(1770657436.151:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 99.388652][ T7245] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 99.403030][ T29] audit: type=1326 audit(1770657436.161:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 99.426678][ T29] audit: type=1326 audit(1770657436.211:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 99.502308][ T29] audit: type=1326 audit(1770657436.301:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 99.654865][ T7263] netlink: 'syz.0.1003': attribute type 10 has an invalid length. [ 99.663086][ T7262] netlink: 'syz.0.1003': attribute type 10 has an invalid length. [ 99.680637][ T7264] bond2: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 99.702916][ T7264] bond2 (unregistering): Released all slaves [ 99.817554][ T7272] vfat: Unknown parameter 'ÿ' [ 99.868573][ T7280] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.988074][ T7226] 9pnet_fd: p9_fd_create_tcp (7226): problem connecting socket to 127.0.0.1 [ 100.257476][ T7321] set_capacity_and_notify: 5 callbacks suppressed [ 100.257543][ T7321] loop6: detected capacity change from 0 to 1024 [ 100.285409][ T7321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.321375][ T7321] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.342098][ T7329] syz.2.1023: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 100.356894][ T7329] CPU: 1 UID: 0 PID: 7329 Comm: syz.2.1023 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.356925][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.356938][ T7329] Call Trace: [ 100.356945][ T7329] [ 100.357017][ T7329] __dump_stack+0x1d/0x30 [ 100.357046][ T7329] dump_stack_lvl+0x95/0xd0 [ 100.357075][ T7329] dump_stack+0x15/0x1b [ 100.357097][ T7329] warn_alloc+0x145/0x1c0 [ 100.357217][ T7329] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 100.357256][ T7329] ? __futex_wait+0x1fd/0x260 [ 100.357286][ T7329] ? __pfx_futex_wake_mark+0x10/0x10 [ 100.357400][ T7329] ? __rcu_read_unlock+0x4e/0x70 [ 100.357447][ T7329] ? avc_has_perm_noaudit+0xab/0x130 [ 100.357514][ T7329] ? should_fail_ex+0x30/0x280 [ 100.357563][ T7329] ? should_failslab+0x8c/0xb0 [ 100.357615][ T7329] vmalloc_user_noprof+0x7d/0xb0 [ 100.357707][ T7329] ? xskq_create+0x80/0xe0 [ 100.357747][ T7329] xskq_create+0x80/0xe0 [ 100.357796][ T7329] xsk_init_queue+0x91/0xe0 [ 100.357835][ T7329] xsk_setsockopt+0x3f5/0x640 [ 100.357932][ T7329] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.357962][ T7329] __sys_setsockopt+0x184/0x200 [ 100.357998][ T7329] __x64_sys_setsockopt+0x64/0x80 [ 100.358099][ T7329] x64_sys_call+0x21d5/0x3000 [ 100.358133][ T7329] do_syscall_64+0xc0/0x2a0 [ 100.358176][ T7329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.358203][ T7329] RIP: 0033:0x7f79ba37aeb9 [ 100.358244][ T7329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.358267][ T7329] RSP: 002b:00007f79b8dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.358322][ T7329] RAX: ffffffffffffffda RBX: 00007f79ba5f5fa0 RCX: 00007f79ba37aeb9 [ 100.358341][ T7329] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 100.358358][ T7329] RBP: 00007f79ba3e8c1f R08: 0000000000000004 R09: 0000000000000000 [ 100.358393][ T7329] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.358416][ T7329] R13: 00007f79ba5f6038 R14: 00007f79ba5f5fa0 R15: 00007fff778bf638 [ 100.358442][ T7329] [ 100.358449][ T7329] Mem-Info: [ 100.566343][ T7321] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 100.569097][ T7329] active_anon:34873 inactive_anon:0 isolated_anon:0 [ 100.569097][ T7329] active_file:26013 inactive_file:2593 isolated_file:0 [ 100.569097][ T7329] unevictable:0 dirty:222 writeback:0 [ 100.569097][ T7329] slab_reclaimable:3532 slab_unreclaimable:73940 [ 100.569097][ T7329] mapped:34012 shmem:26390 pagetables:1614 [ 100.569097][ T7329] sec_pagetables:0 bounce:0 [ 100.569097][ T7329] kernel_misc_reclaimable:0 [ 100.569097][ T7329] free:1792290 free_pcp:8921 free_cma:0 [ 100.572582][ T7321] System zones: [ 100.580381][ T7329] Node 0 active_anon:139492kB inactive_anon:0kB active_file:104052kB inactive_file:10372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136048kB dirty:888kB writeback:0kB shmem:105560kB kernel_stack:4384kB pagetables:6456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 100.626483][ T7321] 0-1 [ 100.628971][ T7329] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.657025][ T7321] , 3-36 [ 100.659209][ T7329] lowmem_reserve[]: 0 2879 7858 7858 [ 100.659242][ T7329] Node 0 DMA32 free:2944744kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948376kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 100.689602][ T7321] [ 100.692368][ T7329] lowmem_reserve[]: 0 [ 100.709975][ T7321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.729667][ T7329] 0 4978 4978 [ 100.729700][ T7329] Node 0 Normal free:4209056kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:139492kB inactive_anon:0kB active_file:104052kB inactive_file:10372kB unevictable:0kB writepending:888kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:32028kB local_pcp:7036kB free_cma:0kB [ 100.785105][ T7329] lowmem_reserve[]: 0 0 0 0 [ 100.789789][ T7329] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 100.802952][ T7329] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 1*32kB (M) 2*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944744kB [ 100.819311][ T7329] Node 0 Normal: 46*4kB (UE) 679*8kB (UME) 442*16kB (UME) 336*32kB (UM) 152*64kB (UME) 60*128kB (UME) 66*256kB (UME) 70*512kB (UM) 51*1024kB (UME) 30*2048kB (UM) 977*4096kB (UM) = 4209040kB [ 100.838617][ T7329] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 100.847996][ T7329] 55922 total pagecache pages [ 100.852695][ T7329] 6 pages in swap cache [ 100.856948][ T7329] Free swap = 124860kB [ 100.861191][ T7329] Total swap = 124996kB [ 100.865366][ T7329] 2097051 pages RAM [ 100.869233][ T7329] 0 pages HighMem/MovableOnly [ 100.873934][ T7329] 81557 pages reserved [ 100.957251][ T7321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.023328][ T7351] loop6: detected capacity change from 0 to 512 [ 101.042740][ T7351] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 101.083566][ T7351] EXT4-fs (loop6): 1 truncate cleaned up [ 101.108554][ T7351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.189473][ T4778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.241941][ T7364] loop5: detected capacity change from 0 to 1024 [ 101.260116][ T7365] loop1: detected capacity change from 0 to 512 [ 101.266625][ T7368] loop6: detected capacity change from 0 to 128 [ 101.305838][ T7364] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 101.336917][ T7365] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 101.348600][ T7368] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.377215][ T7365] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 101.388179][ T7365] EXT4-fs (loop1): group descriptors corrupted! [ 101.397832][ T7364] JBD2: no valid journal superblock found [ 101.403598][ T7364] EXT4-fs (loop5): Could not load journal inode [ 101.415196][ T7368] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.482388][ T7378] __nla_validate_parse: 14 callbacks suppressed [ 101.482406][ T7378] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1035'. [ 101.506469][ T7368] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 101.579670][ T4778] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.611417][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 101.620448][ T7388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1036'. [ 101.658873][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 101.658909][ T64] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.668050][ T7388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1036'. [ 101.699231][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1037'. [ 101.708165][ T64] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.720514][ T64] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.748196][ T64] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.907424][ T7415] loop6: detected capacity change from 0 to 512 [ 101.929420][ T7415] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 101.967953][ T7415] EXT4-fs (loop6): 1 truncate cleaned up [ 101.989990][ T7424] xt_CT: No such helper "netbios-ns" [ 102.004890][ T7415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.154491][ T7451] netlink: 'syz.2.1048': attribute type 11 has an invalid length. [ 102.162493][ T7451] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1048'. [ 102.431036][ T7470] loop5: detected capacity change from 0 to 8192 [ 102.581467][ T4778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.642116][ T7496] FAULT_INJECTION: forcing a failure. [ 102.642116][ T7496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.655334][ T7496] CPU: 0 UID: 0 PID: 7496 Comm: syz.6.1055 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.655369][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.655387][ T7496] Call Trace: [ 102.655396][ T7496] [ 102.655407][ T7496] __dump_stack+0x1d/0x30 [ 102.655475][ T7496] dump_stack_lvl+0x95/0xd0 [ 102.655580][ T7496] dump_stack+0x15/0x1b [ 102.655607][ T7496] should_fail_ex+0x263/0x280 [ 102.655641][ T7496] should_fail+0xb/0x20 [ 102.655673][ T7496] should_fail_usercopy+0x1a/0x20 [ 102.655732][ T7496] _copy_to_user+0x20/0xa0 [ 102.655754][ T7496] simple_read_from_buffer+0xb5/0x130 [ 102.655923][ T7496] proc_fail_nth_read+0x10e/0x150 [ 102.655995][ T7496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.656074][ T7496] vfs_read+0x1ab/0x7f0 [ 102.656093][ T7496] ? __rcu_read_unlock+0x4e/0x70 [ 102.656152][ T7496] ? __fget_files+0x184/0x1c0 [ 102.656182][ T7496] ? mutex_lock+0x57/0x90 [ 102.656219][ T7496] ksys_read+0xdc/0x1a0 [ 102.656245][ T7496] __x64_sys_read+0x40/0x50 [ 102.656269][ T7496] x64_sys_call+0x2889/0x3000 [ 102.656364][ T7496] do_syscall_64+0xc0/0x2a0 [ 102.656402][ T7496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.656532][ T7496] RIP: 0033:0x7f69a08cb78e [ 102.656553][ T7496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.656616][ T7496] RSP: 002b:00007f699f366fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.656641][ T7496] RAX: ffffffffffffffda RBX: 00007f699f3676c0 RCX: 00007f69a08cb78e [ 102.656660][ T7496] RDX: 000000000000000f RSI: 00007f699f3670a0 RDI: 0000000000000005 [ 102.656676][ T7496] RBP: 00007f699f367090 R08: 0000000000000000 R09: 0000000000000000 [ 102.656689][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.656701][ T7496] R13: 00007f69a0b86038 R14: 00007f69a0b85fa0 R15: 00007ffc0100b748 [ 102.656759][ T7496] [ 102.774189][ T7505] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 103.267147][ T7517] vhci_hcd vhci_hcd.3: invalid port number 128 [ 103.283386][ T7517] vhci_hcd vhci_hcd.3: invalid port number 128 [ 103.390715][ T7529] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1063'. [ 103.398362][ T7531] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 103.400096][ T7529] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 103.485179][ T7531] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 103.491814][ T7537] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1067'. [ 103.806901][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 103.806965][ T29] audit: type=1400 audit(1770657440.598:2476): avc: denied { setattr } for pid=7549 comm="syz.1.1071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 104.168983][ T7563] loop5: detected capacity change from 0 to 512 [ 104.256279][ T7563] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 104.325766][ T7569] loop1: detected capacity change from 0 to 128 [ 104.345179][ T7563] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 104.356178][ T7563] EXT4-fs (loop5): group descriptors corrupted! [ 104.567313][ T7589] vxcan0: tx address claim with different name [ 104.581827][ T7590] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.620615][ T7594] loop5: detected capacity change from 0 to 512 [ 104.690567][ T29] audit: type=1326 audit(1770657441.486:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba37aeb9 code=0x7ffc0000 [ 104.714664][ T29] audit: type=1326 audit(1770657441.486:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba37aeb9 code=0x7ffc0000 [ 104.738186][ T29] audit: type=1326 audit(1770657441.486:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba37aeb9 code=0x7ffc0000 [ 104.761811][ T29] audit: type=1326 audit(1770657441.486:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f79ba37aeb9 code=0x7ffc0000 [ 104.785427][ T29] audit: type=1326 audit(1770657441.486:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba37aeb9 code=0x7ffc0000 [ 104.807000][ T7594] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.809791][ T29] audit: type=1326 audit(1770657441.486:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba37aeb9 code=0x7ffc0000 [ 104.841995][ T29] audit: type=1326 audit(1770657441.486:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba37aeb9 code=0x7ffc0000 [ 104.865554][ T29] audit: type=1326 audit(1770657441.486:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba37aeb9 code=0x7ffc0000 [ 104.893050][ T29] audit: type=1326 audit(1770657441.486:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba37aeb9 code=0x7ffc0000 [ 104.960372][ T7609] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.050528][ T7620] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.277094][ T7654] FAULT_INJECTION: forcing a failure. [ 105.277094][ T7654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.290325][ T7654] CPU: 1 UID: 0 PID: 7654 Comm: syz.6.1103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.290511][ T7654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.290529][ T7654] Call Trace: [ 105.290593][ T7654] [ 105.290603][ T7654] __dump_stack+0x1d/0x30 [ 105.290655][ T7654] dump_stack_lvl+0x95/0xd0 [ 105.290694][ T7654] dump_stack+0x15/0x1b [ 105.290720][ T7654] should_fail_ex+0x263/0x280 [ 105.290768][ T7654] should_fail+0xb/0x20 [ 105.290859][ T7654] should_fail_usercopy+0x1a/0x20 [ 105.290895][ T7654] _copy_from_user+0x1c/0xb0 [ 105.290917][ T7654] snd_seq_ioctl+0x125/0x2f0 [ 105.290952][ T7654] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 105.290993][ T7654] __se_sys_ioctl+0xce/0x140 [ 105.291031][ T7654] __x64_sys_ioctl+0x43/0x50 [ 105.291062][ T7654] x64_sys_call+0x14b0/0x3000 [ 105.291166][ T7654] do_syscall_64+0xc0/0x2a0 [ 105.291205][ T7654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.291234][ T7654] RIP: 0033:0x7f69a090aeb9 [ 105.291253][ T7654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.291286][ T7654] RSP: 002b:00007f699f367028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.291310][ T7654] RAX: ffffffffffffffda RBX: 00007f69a0b85fa0 RCX: 00007f69a090aeb9 [ 105.291328][ T7654] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000005 [ 105.291365][ T7654] RBP: 00007f699f367090 R08: 0000000000000000 R09: 0000000000000000 [ 105.291378][ T7654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.291391][ T7654] R13: 00007f69a0b86038 R14: 00007f69a0b85fa0 R15: 00007ffc0100b748 [ 105.291488][ T7654] [ 105.533695][ T7669] loop5: detected capacity change from 0 to 128 [ 105.558791][ T7669] FAT-fs (loop5): bogus number of reserved sectors [ 105.565508][ T7669] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 105.574935][ T7669] FAT-fs (loop5): Can't find a valid FAT filesystem [ 105.642093][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1107'. [ 105.743120][ T7692] netlink: 'syz.5.1109': attribute type 1 has an invalid length. [ 105.793419][ T7692] veth5: entered promiscuous mode [ 105.943076][ T7710] FAULT_INJECTION: forcing a failure. [ 105.943076][ T7710] name failslab, interval 1, probability 0, space 0, times 0 [ 105.955798][ T7710] CPU: 1 UID: 0 PID: 7710 Comm: syz.5.1117 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.955831][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.955848][ T7710] Call Trace: [ 105.955856][ T7710] [ 105.955865][ T7710] __dump_stack+0x1d/0x30 [ 105.955973][ T7710] dump_stack_lvl+0x95/0xd0 [ 105.955996][ T7710] dump_stack+0x15/0x1b [ 105.956020][ T7710] should_fail_ex+0x263/0x280 [ 105.956185][ T7710] should_failslab+0x8c/0xb0 [ 105.956294][ T7710] __kvmalloc_node_noprof+0x148/0x680 [ 105.956369][ T7710] ? snd_seq_pool_init+0x55/0x210 [ 105.956407][ T7710] snd_seq_pool_init+0x55/0x210 [ 105.956439][ T7710] snd_seq_ioctl_set_client_pool+0x17f/0x310 [ 105.956471][ T7710] snd_seq_ioctl+0x177/0x2f0 [ 105.956568][ T7710] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 105.956597][ T7710] __se_sys_ioctl+0xce/0x140 [ 105.956655][ T7710] __x64_sys_ioctl+0x43/0x50 [ 105.956693][ T7710] x64_sys_call+0x14b0/0x3000 [ 105.956798][ T7710] do_syscall_64+0xc0/0x2a0 [ 105.956898][ T7710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.956920][ T7710] RIP: 0033:0x7f0b83acaeb9 [ 105.956941][ T7710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.956971][ T7710] RSP: 002b:00007f0b82527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.957029][ T7710] RAX: ffffffffffffffda RBX: 00007f0b83d45fa0 RCX: 00007f0b83acaeb9 [ 105.957043][ T7710] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000005 [ 105.957090][ T7710] RBP: 00007f0b82527090 R08: 0000000000000000 R09: 0000000000000000 [ 105.957107][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.957124][ T7710] R13: 00007f0b83d46038 R14: 00007f0b83d45fa0 R15: 00007ffdc394b588 [ 105.957152][ T7710] [ 106.255130][ T7720] vxcan0: tx address claim with different name [ 106.276193][ T7723] loop5: detected capacity change from 0 to 512 [ 106.292824][ T7723] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1121: iget: bad i_size value: 38620345925642 [ 106.308870][ T7723] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1121: couldn't read orphan inode 15 (err -117) [ 106.321942][ T7723] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.359846][ T4747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 106.403560][ T7731] tipc: Invalid UDP bearer configuration [ 106.403576][ T7731] tipc: Enabling of bearer rejected, failed to enable media [ 106.443000][ T7733] loop5: detected capacity change from 0 to 764 [ 106.561156][ T7749] __nla_validate_parse: 6 callbacks suppressed [ 106.561177][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1131'. [ 106.579412][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'. [ 106.589713][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'. [ 106.622170][ T7753] FAULT_INJECTION: forcing a failure. [ 106.622170][ T7753] name failslab, interval 1, probability 0, space 0, times 0 [ 106.634922][ T7753] CPU: 1 UID: 0 PID: 7753 Comm: syz.5.1132 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.634957][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.634975][ T7753] Call Trace: [ 106.634984][ T7753] [ 106.634994][ T7753] __dump_stack+0x1d/0x30 [ 106.635027][ T7753] dump_stack_lvl+0x95/0xd0 [ 106.635059][ T7753] dump_stack+0x15/0x1b [ 106.635146][ T7753] should_fail_ex+0x263/0x280 [ 106.635181][ T7753] should_failslab+0x8c/0xb0 [ 106.635212][ T7753] __kmalloc_cache_noprof+0x64/0x4a0 [ 106.635242][ T7753] ? snd_seq_pool_new+0x32/0xe0 [ 106.635327][ T7753] ? snd_seq_pool_init+0x55/0x210 [ 106.635452][ T7753] snd_seq_pool_new+0x32/0xe0 [ 106.635484][ T7753] snd_seq_fifo_resize+0x4b/0x1c0 [ 106.635531][ T7753] snd_seq_ioctl_set_client_pool+0x24c/0x310 [ 106.635564][ T7753] snd_seq_ioctl+0x177/0x2f0 [ 106.635697][ T7753] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 106.635769][ T7753] __se_sys_ioctl+0xce/0x140 [ 106.635807][ T7753] __x64_sys_ioctl+0x43/0x50 [ 106.635842][ T7753] x64_sys_call+0x14b0/0x3000 [ 106.635881][ T7753] do_syscall_64+0xc0/0x2a0 [ 106.636068][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.636097][ T7753] RIP: 0033:0x7f0b83acaeb9 [ 106.636115][ T7753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.636209][ T7753] RSP: 002b:00007f0b82527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.636230][ T7753] RAX: ffffffffffffffda RBX: 00007f0b83d45fa0 RCX: 00007f0b83acaeb9 [ 106.636245][ T7753] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000005 [ 106.636258][ T7753] RBP: 00007f0b82527090 R08: 0000000000000000 R09: 0000000000000000 [ 106.636272][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.636336][ T7753] R13: 00007f0b83d46038 R14: 00007f0b83d45fa0 R15: 00007ffdc394b588 [ 106.636361][ T7753] [ 106.969330][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1136'. [ 107.091896][ T7781] loop1: detected capacity change from 0 to 1024 [ 107.098898][ T7781] EXT4-fs: Ignoring removed orlov option [ 107.141340][ T7781] EXT4-fs: Ignoring removed bh option [ 107.162964][ T7781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.367837][ T7787] bond2: entered allmulticast mode [ 107.381988][ T7787] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.517229][ T7792] wireguard0: entered allmulticast mode [ 107.531077][ T7794] FAULT_INJECTION: forcing a failure. [ 107.531077][ T7794] name failslab, interval 1, probability 0, space 0, times 0 [ 107.543832][ T7794] CPU: 0 UID: 0 PID: 7794 Comm: syz.0.1146 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.543868][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.543885][ T7794] Call Trace: [ 107.543893][ T7794] [ 107.543904][ T7794] __dump_stack+0x1d/0x30 [ 107.543929][ T7794] dump_stack_lvl+0x95/0xd0 [ 107.544024][ T7794] dump_stack+0x15/0x1b [ 107.544051][ T7794] should_fail_ex+0x263/0x280 [ 107.544092][ T7794] should_failslab+0x8c/0xb0 [ 107.544116][ T7794] __kvmalloc_node_noprof+0x148/0x680 [ 107.544196][ T7794] ? snd_seq_pool_init+0x55/0x210 [ 107.544231][ T7794] snd_seq_pool_init+0x55/0x210 [ 107.544257][ T7794] snd_seq_fifo_resize+0x71/0x1c0 [ 107.544310][ T7794] snd_seq_ioctl_set_client_pool+0x24c/0x310 [ 107.544339][ T7794] snd_seq_ioctl+0x177/0x2f0 [ 107.544370][ T7794] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 107.544461][ T7794] __se_sys_ioctl+0xce/0x140 [ 107.544508][ T7794] __x64_sys_ioctl+0x43/0x50 [ 107.544540][ T7794] x64_sys_call+0x14b0/0x3000 [ 107.544624][ T7794] do_syscall_64+0xc0/0x2a0 [ 107.544659][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.544687][ T7794] RIP: 0033:0x7f0f2e53aeb9 [ 107.544850][ T7794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.544872][ T7794] RSP: 002b:00007f0f2cf97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.544898][ T7794] RAX: ffffffffffffffda RBX: 00007f0f2e7b5fa0 RCX: 00007f0f2e53aeb9 [ 107.544937][ T7794] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000005 [ 107.544954][ T7794] RBP: 00007f0f2cf97090 R08: 0000000000000000 R09: 0000000000000000 [ 107.544971][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.544986][ T7794] R13: 00007f0f2e7b6038 R14: 00007f0f2e7b5fa0 R15: 00007ffecea51388 [ 107.545012][ T7794] [ 107.607107][ T7799] loop6: detected capacity change from 0 to 512 [ 108.141900][ T7811] loop6: detected capacity change from 0 to 1024 [ 108.146324][ T7811] EXT4-fs: Ignoring removed bh option [ 108.265025][ T7811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.295723][ T7828] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1153'. [ 108.307597][ T7830] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.1154'. [ 108.327626][ T7811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.472270][ T7811] netlink: 'syz.6.1152': attribute type 13 has an invalid length. [ 108.594894][ T7836] loop6: detected capacity change from 0 to 512 [ 108.661402][ T7842] loop6: detected capacity change from 0 to 512 [ 108.677230][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.693587][ T7845] loop5: detected capacity change from 0 to 7 [ 108.695419][ T7842] EXT4-fs: Ignoring removed bh option [ 108.705334][ T7842] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.727313][ T7842] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 108.751274][ T7842] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 108.765105][ T7842] EXT4-fs (loop6): orphan cleanup on readonly fs [ 108.785307][ T7842] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1162: Failed to acquire dquot type 1 [ 108.805334][ T7842] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1162: Invalid block bitmap block 0 in block_group 0 [ 108.828420][ T7842] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1162: Invalid block bitmap block 0 in block_group 0 [ 108.836690][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 108.836810][ T29] audit: type=1400 audit(1770657445.607:2714): avc: denied { ioctl } for pid=7841 comm="syz.2.1161" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 108.900272][ T7842] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1162: Invalid block bitmap block 0 in block_group 0 [ 108.944934][ T7842] Quota error (device loop6): write_blk: dquota write failed [ 108.946953][ T29] audit: type=1400 audit(1770657445.727:2715): avc: denied { create } for pid=7854 comm="syz.2.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.952394][ T7842] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 108.983012][ T7842] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1162: Failed to acquire dquot type 1 [ 108.985624][ T7856] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 108.995997][ T7842] Quota error (device loop6): write_blk: dquota write failed [ 109.009463][ T7842] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 109.019466][ T7842] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1162: Failed to acquire dquot type 1 [ 109.042137][ T29] audit: type=1400 audit(1770657445.757:2716): avc: denied { setopt } for pid=7854 comm="syz.2.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.042937][ T7842] EXT4-fs (loop6): 1 orphan inode deleted [ 109.062056][ T29] audit: type=1400 audit(1770657445.757:2717): avc: denied { write } for pid=7854 comm="syz.2.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.072499][ T7856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.087449][ T29] audit: type=1400 audit(1770657445.807:2718): avc: denied { read write } for pid=7852 comm="syz.1.1164" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 109.118481][ T29] audit: type=1400 audit(1770657445.807:2719): avc: denied { open } for pid=7852 comm="syz.1.1164" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 109.145601][ T7842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.160151][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 109.169124][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'. [ 109.187494][ T7859] gretap0: entered promiscuous mode [ 109.192840][ T7859] macsec1: entered promiscuous mode [ 109.198240][ T7859] macsec1: entered allmulticast mode [ 109.203569][ T7859] gretap0: entered allmulticast mode [ 109.245649][ T7861] loop5: detected capacity change from 0 to 8192 [ 109.270436][ T7861] bio_check_eod: 60 callbacks suppressed [ 109.270452][ T7861] syz.5.1157: attempt to access beyond end of device [ 109.270452][ T7861] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 109.290166][ T7861] Buffer I/O error on dev loop5, logical block 57847, async page read [ 109.298732][ T7861] syz.5.1157: attempt to access beyond end of device [ 109.298732][ T7861] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 109.312726][ T7861] Buffer I/O error on dev loop5, logical block 57847, async page read [ 109.325036][ T7865] xt_TCPMSS: Only works on TCP SYN packets [ 109.325495][ T7861] syz.5.1157: attempt to access beyond end of device [ 109.325495][ T7861] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 109.344898][ T7861] Buffer I/O error on dev loop5, logical block 57847, async page read [ 109.412327][ T4778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.461751][ T7875] EXT4-fs: Ignoring removed orlov option [ 109.485095][ T7875] EXT4-fs: Ignoring removed bh option [ 109.508737][ T7877] netlink: 'syz.6.1172': attribute type 1 has an invalid length. [ 109.532562][ T7875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.561590][ T7891] netlink: 'syz.2.1177': attribute type 18 has an invalid length. [ 109.569537][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 109.583997][ T37] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.599773][ T7891] netlink: 'syz.2.1177': attribute type 18 has an invalid length. [ 109.607676][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 109.617376][ T37] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.628790][ T37] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.671434][ T37] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.171098][ T7928] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 110.181184][ T7928] FAT-fs (loop5): Filesystem has been set read-only [ 110.533612][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.600390][ T7940] set_capacity_and_notify: 3 callbacks suppressed [ 110.600413][ T7940] loop1: detected capacity change from 0 to 8192 [ 110.657825][ T4740] loop1: p1 p2 p4 [ 110.663605][ T4740] loop1: p4 size 262912 extends beyond EOD, truncated [ 110.673515][ T7940] loop1: p1 p2 p4 [ 110.679142][ T7940] loop1: p4 size 262912 extends beyond EOD, truncated [ 110.721079][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 110.721111][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 110.734168][ T4740] udevd[4740]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 110.783653][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 110.791865][ T4740] udevd[4740]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 112.485542][ T7879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.582697][ T7966] netlink: 'syz.1.1199': attribute type 322 has an invalid length. [ 112.602571][ T7969] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1195'. [ 112.612136][ T7963] bridge0: entered allmulticast mode [ 112.622917][ T7966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1199'. [ 112.635640][ T7963] bridge_slave_0: left allmulticast mode [ 112.642847][ T7963] bridge_slave_0: left promiscuous mode [ 112.651982][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.858132][ T7990] netlink: 'syz.2.1203': attribute type 4 has an invalid length. [ 112.884348][ T7995] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 112.934574][ T7957] loop5: detected capacity change from 0 to 2048 [ 113.001724][ T4740] loop5: p1 p2 p3 p4 [ 113.006660][ T4740] loop5: p2 start 117440512 is beyond EOD, truncated [ 113.027532][ T4740] loop5: p4 size 589824 extends beyond EOD, truncated [ 113.040893][ T7957] loop5: p1 p2 p3 p4 [ 113.046852][ T7957] loop5: p2 start 117440512 is beyond EOD, truncated [ 113.111075][ T7957] loop5: p4 size 589824 extends beyond EOD, truncated [ 113.265513][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1209'. [ 113.284097][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 113.326677][ T8031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1211'. [ 113.336195][ T8028] 8021q: adding VLAN 0 to HW filter on device bond5 [ 113.355655][ T8034] batman_adv: batadv0: Removing interface: dummy0 [ 113.366265][ T8034] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 113.376572][ T8031] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 113.410559][ T8037] loop6: detected capacity change from 0 to 512 [ 113.414520][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1211'. [ 113.430377][ T8031] loop1: detected capacity change from 0 to 512 [ 113.452140][ T8037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.470741][ T8037] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.483142][ T8037] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.1213: corrupted xattr block 32: bad e_name length [ 113.496951][ T8037] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 113.506485][ T8037] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.1213: corrupted xattr block 32: bad e_name length [ 113.522134][ T8037] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 113.532754][ T8037] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #15: comm syz.6.1213: corrupted xattr block 32: bad e_name length [ 113.533034][ T8045] xt_TCPMSS: Only works on TCP SYN packets [ 113.548426][ T8037] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 113.603071][ T4778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.731598][ T8054] bond3: peer notification delay (315) is not a multiple of miimon (100), value rounded to 300 ms [ 113.954231][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 113.954325][ T29] audit: type=1400 audit(1770657450.730:2854): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.985063][ T29] audit: type=1400 audit(1770657450.730:2855): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.009419][ T29] audit: type=1400 audit(1770657450.759:2856): avc: denied { create } for pid=8065 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.029123][ T29] audit: type=1400 audit(1770657450.759:2857): avc: denied { connect } for pid=8065 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.048908][ T29] audit: type=1400 audit(1770657450.759:2858): avc: denied { write } for pid=8065 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.068452][ T29] audit: type=1400 audit(1770657451.785:2859): avc: denied { tracepoint } for pid=8065 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 114.100434][ T29] audit: type=1400 audit(1770657451.875:2860): avc: denied { ioctl } for pid=4747 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.165356][ T29] audit: type=1400 audit(1770657451.945:2861): avc: denied { write } for pid=8071 comm="syz.2.1222" name="anycast6" dev="proc" ino=4026532577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 114.210621][ T29] audit: type=1400 audit(1770657451.985:2862): avc: denied { read } for pid=8076 comm="syz.2.1224" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.233770][ T29] audit: type=1400 audit(1770657451.985:2863): avc: denied { open } for pid=8076 comm="syz.2.1224" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.284140][ T8081] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 114.375182][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1226'. [ 114.393764][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1226'. [ 114.515801][ T8094] loop5: detected capacity change from 0 to 512 [ 114.537924][ T8094] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 114.564837][ T8094] EXT4-fs (loop5): 1 truncate cleaned up [ 114.577870][ T8094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.674086][ T4747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.780015][ T8119] netlink: 'syz.2.1238': attribute type 27 has an invalid length. [ 114.794638][ T8120] netlink: 'syz.6.1234': attribute type 9 has an invalid length. [ 114.802590][ T8120] netlink: 'syz.6.1234': attribute type 6 has an invalid length. [ 114.810383][ T8120] netlink: 'syz.6.1234': attribute type 7 has an invalid length. [ 114.818173][ T8120] netlink: 'syz.6.1234': attribute type 8 has an invalid length. [ 114.854107][ T8129] loop6: detected capacity change from 0 to 164 [ 114.864780][ T8129] Unable to read rock-ridge attributes [ 114.870397][ T8129] isofs_fill_super: root inode is not a directory. Corrupted media? [ 114.890701][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1234'. [ 114.944043][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.951925][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.043192][ T8141] loop1: detected capacity change from 0 to 736 [ 115.076569][ T8141] iso9660: Unknown parameter 'ui>ý0x0000000000000000' [ 115.190263][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.205020][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.238031][ T8119] ipvlan0: left promiscuous mode [ 115.256381][ T8119] hsr1: left allmulticast mode [ 115.261290][ T8119] dummy0: left allmulticast mode [ 115.266354][ T8119] bond0: left allmulticast mode [ 115.271305][ T8119] bond_slave_0: left allmulticast mode [ 115.277162][ T8119] bond_slave_1: left allmulticast mode [ 115.286758][ T8119] wireguard0: left allmulticast mode [ 115.293863][ T8119] gretap0: left allmulticast mode [ 115.299027][ T8119] macsec1: left promiscuous mode [ 115.304524][ T8119] macsec1: left allmulticast mode [ 115.309915][ T8155] loop6: detected capacity change from 0 to 1024 [ 115.318772][ T8155] EXT4-fs: Ignoring removed orlov option [ 115.334291][ T8128] gretap0: left promiscuous mode [ 115.339754][ T8155] EXT4-fs: Ignoring removed oldalloc option [ 115.347236][ T8155] EXT4-fs (loop6): invalid first ino: 0 [ 115.369177][ T8128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.391366][ T8128] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.404832][ T8128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.424803][ T8132] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 115.496717][ T6651] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 115.532671][ T6651] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 115.591800][ T64] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.600894][ T64] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.614003][ T64] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.622981][ T64] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.635832][ T64] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.644911][ T64] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.680533][ T64] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.689581][ T64] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.707327][ T8185] netlink: 'syz.0.1255': attribute type 10 has an invalid length. [ 115.730352][ T8188] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1253'. [ 116.152616][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 116.271935][ T8203] loop5: detected capacity change from 0 to 512 [ 116.295618][ T8208] ..0ªî{X¹¦: renamed from gretap0 [ 116.311122][ T8203] EXT4-fs: Ignoring removed nobh option [ 116.329063][ T8208] ..0ªî{X¹¦: entered allmulticast mode [ 116.367931][ T8203] EXT4-fs (loop5): orphan cleanup on readonly fs [ 116.379585][ T8208] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 116.413181][ T8216] loop1: detected capacity change from 0 to 1024 [ 116.422536][ T8203] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.1262: EA inode hash validation failed [ 116.471836][ T8216] EXT4-fs: Ignoring removed orlov option [ 116.502428][ T8203] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 116.522541][ T8216] EXT4-fs: Ignoring removed bh option [ 116.567079][ T8216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.580658][ T8203] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.1262: corrupted inode contents [ 116.629248][ T8220] geneve0: entered promiscuous mode [ 116.646904][ T3457] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.658700][ T8226] 8021q: VLANs not supported on sit0 [ 116.665179][ T8203] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.1262: mark_inode_dirty error [ 116.808189][ T3457] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.821287][ T8203] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.1262: corrupted inode contents [ 116.834495][ T3457] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.852626][ T8203] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.1262: mark_inode_dirty error [ 116.865083][ T8203] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.1262: mark inode dirty (error -117) [ 116.877886][ T8203] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 117.102037][ T3457] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.198270][ T64] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 117.206272][ T64] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 117.247756][ T8203] EXT4-fs (loop5): 1 orphan inode deleted [ 117.278982][ T8203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 117.322769][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 117.342041][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.401782][ T4747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.430870][ T8244] loop1: detected capacity change from 0 to 512 [ 117.456622][ T8244] EXT4-fs: Ignoring removed i_version option [ 117.481871][ T8244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.554139][ T8261] geneve2: entered promiscuous mode [ 117.560256][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.592664][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.601582][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.611465][ T8261] loop6: detected capacity change from 0 to 2048 [ 117.637169][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.671113][ T8261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.759982][ T4778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.816816][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.826663][ T8289] loop6: detected capacity change from 0 to 1024 [ 117.844166][ T8289] EXT4-fs: Ignoring removed orlov option [ 117.850189][ T8289] EXT4-fs: Ignoring removed bh option [ 117.891767][ T8289] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.070238][ T8312] Falling back ldisc for ttyS3. [ 118.076462][ T8300] __nla_validate_parse: 3 callbacks suppressed [ 118.076560][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1283'. [ 118.444277][ T8330] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1288'. [ 118.619685][ T8335] ipvlan0: entered promiscuous mode [ 118.620752][ T8334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1290'. [ 118.699856][ T4778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.758385][ T3457] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.767474][ T3457] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.776885][ T3457] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.785950][ T3457] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.861601][ T8352] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1297'. [ 118.870819][ T8352] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 119.122871][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 119.122961][ T29] audit: type=1326 audit(1770657456.905:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 119.196484][ T29] audit: type=1326 audit(1770657456.935:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 119.209542][ T8367] loop1: detected capacity change from 0 to 1024 [ 119.220041][ T29] audit: type=1326 audit(1770657456.935:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 119.249802][ T29] audit: type=1326 audit(1770657456.935:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 119.254650][ T8367] EXT4-fs: Ignoring removed orlov option [ 119.273357][ T29] audit: type=1400 audit(1770657456.975:3137): avc: denied { shutdown } for pid=8363 comm="syz.5.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.300146][ T29] audit: type=1400 audit(1770657456.975:3138): avc: denied { ioctl } for pid=8363 comm="syz.5.1302" path="socket:[21864]" dev="sockfs" ino=21864 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.303575][ T8367] EXT4-fs: Ignoring removed bh option [ 119.363625][ T8367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.376340][ T29] audit: type=1326 audit(1770657457.005:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 119.399792][ T29] audit: type=1326 audit(1770657457.005:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0f2e53ac22 code=0x7ffc0000 [ 119.513772][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 119.547363][ T29] audit: type=1326 audit(1770657457.255:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 119.570870][ T29] audit: type=1326 audit(1770657457.255:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2e53aeb9 code=0x7ffc0000 [ 119.599588][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'. [ 119.599684][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'. [ 119.751759][ T8387] pimreg3: entered allmulticast mode [ 119.853090][ T8387] loop6: detected capacity change from 0 to 1024 [ 119.871851][ T8387] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.878384][ T8387] EXT4-fs: Ignoring removed oldalloc option [ 119.884382][ T8387] EXT4-fs: Ignoring removed orlov option [ 119.937536][ T8387] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.998448][ T8387] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1308'. [ 120.007636][ T8387] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 120.075778][ T8400] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1308'. [ 120.105614][ T4778] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 120.163780][ T8405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1313'. [ 120.190380][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.255027][ T8411] @ÿ: renamed from bond_slave_0 [ 120.571251][ T8457] bond0: option lp_interval: invalid value (0) [ 120.577575][ T8457] bond0: option lp_interval: allowed values 1 - 2147483647 [ 120.839183][ T8482] bridge2: entered promiscuous mode [ 120.905997][ T8488] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.916396][ T8488] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.974340][ T8488] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.984816][ T8488] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.042502][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 121.063907][ T8488] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.074295][ T8488] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.154371][ T8488] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.164844][ T8488] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.229894][ T12] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.238310][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.256726][ T12] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.265021][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.280997][ T12] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.289315][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.300014][ T12] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.308263][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.335453][ T8535] loop6: detected capacity change from 0 to 128 [ 121.342301][ T8535] vfat: Unknown parameter 'fsname' [ 121.425580][ T8538] vhci_hcd vhci_hcd.3: default hub control req: 010b v0000 i0000 l0 [ 121.468370][ T8540] loop5: detected capacity change from 0 to 512 [ 121.475527][ T8540] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.485478][ T8540] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 121.497349][ T8540] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 121.507410][ T8540] System zones: 0-2, 18-18, 34-34 [ 121.513415][ T8540] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1340: bad orphan inode 15 [ 121.523811][ T8540] ext4_test_bit(bit=14, block=18) = 1 [ 121.529244][ T8540] is_bad_inode(inode)=0 [ 121.533478][ T8540] NEXT_ORPHAN(inode)=2264924160 [ 121.538373][ T8540] max_ino=32 [ 121.541596][ T8540] i_nlink=0 [ 121.545092][ T8540] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.1340: corrupted inode contents [ 121.557368][ T8540] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.1340: mark_inode_dirty error [ 121.569322][ T8540] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.1340: corrupted inode contents [ 121.581509][ T8540] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.1340: mark_inode_dirty error [ 121.594904][ T8540] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.1340: mark inode dirty (error -117) [ 121.619390][ T8551] loop6: detected capacity change from 0 to 128 [ 121.623569][ T8540] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 121.653597][ T8540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.668038][ T8540] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1340: bg 0: block 80: padding at end of block bitmap is not set [ 122.197712][ T3457] ================================================================== [ 122.205952][ T3457] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 122.215458][ T3457] [ 122.217805][ T3457] write to 0xffff8881508c8044 of 21 bytes by task 8543 on cpu 1: [ 122.225548][ T3457] copy_folio_from_iter_atomic+0x75f/0x1170 [ 122.231480][ T3457] generic_perform_write+0x2c1/0x490 [ 122.236816][ T3457] __generic_file_write_iter+0x9e/0x120 [ 122.242409][ T3457] generic_file_write_iter+0x8d/0x310 [ 122.247841][ T3457] iter_file_splice_write+0x6bc/0xa80 [ 122.253241][ T3457] direct_splice_actor+0x156/0x2a0 [ 122.258397][ T3457] splice_direct_to_actor+0x311/0x670 [ 122.263809][ T3457] do_splice_direct+0x119/0x1a0 [ 122.268702][ T3457] do_sendfile+0x382/0x650 [ 122.273161][ T3457] __x64_sys_sendfile64+0x105/0x150 [ 122.278390][ T3457] x64_sys_call+0x2db1/0x3000 [ 122.283107][ T3457] do_syscall_64+0xc0/0x2a0 [ 122.287649][ T3457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.293580][ T3457] [ 122.296025][ T3457] read to 0xffff8881508c8000 of 2048 bytes by task 3457 on cpu 0: [ 122.303867][ T3457] copy_folio_from_iter_atomic+0x75f/0x1170 [ 122.309805][ T3457] generic_perform_write+0x2c1/0x490 [ 122.315124][ T3457] shmem_file_write_iter+0xc5/0xf0 [ 122.320287][ T3457] lo_rw_aio+0x67d/0x730 [ 122.324572][ T3457] loop_process_work+0x56c/0xac0 [ 122.329540][ T3457] loop_workfn+0x31/0x40 [ 122.333813][ T3457] process_scheduled_works+0x4cd/0x9d0 [ 122.339304][ T3457] worker_thread+0x6bc/0x8b0 [ 122.343935][ T3457] kthread+0x488/0x510 [ 122.348040][ T3457] ret_from_fork+0x148/0x280 [ 122.352665][ T3457] ret_from_fork_asm+0x1a/0x30 [ 122.357465][ T3457] [ 122.359803][ T3457] Reported by Kernel Concurrency Sanitizer on: [ 122.365983][ T3457] CPU: 0 UID: 0 PID: 3457 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.375913][ T3457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.385999][ T3457] Workqueue: loop6 loop_workfn [ 122.390803][ T3457] ================================================================== [ 122.521623][ T4747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.432537][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!