last executing test programs: 3m23.10960033s ago: executing program 4 (id=76): unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000002c0)=[{&(0x7f0000002440)='-', 0x1}], 0x1, 0x1) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001600)={0x218, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x1f9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_b, @initial, {0xb, 0x2}}, 0x10001, @default, 0x410, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x2c, 0x9}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x300, 0x0, 0x2, 0x0, {0xfff, 0x2e, 0x0, 0xa, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0xa0}}, @void, @void, @val={0x76, 0x6, {0x8, 0x10, 0xb, 0x4}}, [{0xdd, 0x8f, "de29e33aefe432db9ad2116dbd68cb9bfe8c6521c2a1d4d155482a7bfc9074ea9d3b124f573fd55a8991feff19c8704bd6f4d420b6176568febc2aead4b5b9972c6cf17dd00f03ee0351043ca9632a1b2f1e9ec9ad0c3e53c08d3a6bed53dc93d2cf59e6927bed1735aa741b950a23bb3d875f9bb94c83428794153c948b58a45d4a0a95b81a5a37b2853ac905f6db"}, {0xdd, 0x74, "e8e2dc7b972b2bd7d3be5385262773f9f97002f927dc9474bba27eab1d87782f916718e709ce2033be0f4f6a0d1c3da3112101704a1c72c80260fe4f00fdb05bc60ca8a5c7dccd5eed82a1f267f8bb5924784fe421bc789f75865d9279cd09ff0b67888440bb009d40c40d45fe51697ff748303b"}, {0xdd, 0x6d, "1cd116ed815339556dd03f4c4264d37bc8e95013a71f9c727557311791a447cd67edffe70556fc6c6782994372b1fb0e931248a0ddfb784dd03311f226e2a738521b96110d6638d50271c381151e4894220e61b67872a34be6ac7c7e2fafb9dc0fa8a2f7d0e046a5d055fcc837"}, {0xdd, 0x2d, "008e5ee0f40debaad30c071e2d20cea54212d90cc20a0a5523814ae1a8b04eb9b4fdb97d66b26935169b13a697"}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmmsg(r5, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) splice(r3, 0x0, r4, 0x0, 0xfffd, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0xffffffffffffff15, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000840) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000003e00ea0f00000000000004000000"], 0x18}}, 0x8000) r7 = socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$kcm(r7, 0x0, 0x0) 3m22.969218905s ago: executing program 4 (id=79): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x2000000, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x440) 3m22.761035152s ago: executing program 4 (id=82): socket$kcm(0x21, 0x2, 0x2) socket(0x2, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xf00, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x36}}], 0x1, 0x0) 3m22.744613442s ago: executing program 4 (id=83): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x80, 0x24, 0x200, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x4, 0x28}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080804}, 0x24004004) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x30000001) setsockopt$MRT_TABLE(r7, 0x0, 0xcf, &(0x7f0000000400)=0xffffffff, 0x4) setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, &(0x7f0000000340)={0x6, {{0xa, 0x4e21, 0x1, @mcast1, 0x80000001}}}, 0x88) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r11, 0x6, 0x1f, 0x0, 0x0) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000003ff6)='GPL\x00', 0xffffff7f, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @broadcast, 0x0, 0x0, 'nq\x00', 0x0, 0xff, 0xc}, 0x2c) 3m19.696349169s ago: executing program 4 (id=109): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TCSBRK(r0, 0x5409, 0xffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r6, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r6) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="54e368d5", @ANYRES16=r4, @ANYBLOB="01002dbd700000000000060000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000500000006001600440000000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xefbc) r7 = semget(0x0, 0x2, 0x280) semtimedop(r7, &(0x7f00000000c0)=[{0x1, 0xd, 0x1800}, {0x3, 0x800, 0x1000}, {0x4, 0x5, 0x1800}, {0x1, 0x7, 0x1000}, {0x3, 0x1, 0x800}], 0x5, &(0x7f0000000100)={0x0, 0x3938700}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000040)={0x0, 0x9f3f, 0x20, 0x2, 0x216}, 0x1) 3m19.027366363s ago: executing program 4 (id=121): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m3.967515749s ago: executing program 32 (id=121): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m28.568024667s ago: executing program 0 (id=488): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000, 0x1}], 0x1) 2m28.518891768s ago: executing program 0 (id=489): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000200)={0x0, 'bond0\x00', 0x3}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x24, 0x2d, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="88"]}]}, 0x24}], 0x1}, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f0000000900)=ANY=[], 0x26, 0x7fb, &(0x7f0000001700)="$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") mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='ext2\x00', 0x0, 0x0) 2m28.423563942s ago: executing program 0 (id=490): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x11407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x3000, 0x1, 0x1, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40000040}, 0x0, 0x200, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = dup(0xffffffffffffffff) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000006c0)="f0", 0x1}], 0x1}, 0x40850) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0x4}}, 0x2, 0x7, 0x8001, 0x2, 0x44, 0x3, 0x3}, &(0x7f0000000140)=0x9c) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xd82, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0x3, 0x1, 0x5, 0x400e0a, 0x7b, "2000955680ffff00003700", 0x8, 0x4005}) r4 = socket$netlink(0x10, 0x3, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffffa, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100ffffffff0000000000000000", @ANYRES32=r6, @ANYBLOB="002800000000000008001f0084070000"], 0x28}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) 2m27.646683239s ago: executing program 0 (id=498): r0 = syz_open_dev$loop(&(0x7f0000001380), 0x11, 0x801) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f00000013c0)=0xffffff4b) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000240)='/dev/loop#\x00', 0x515783, &(0x7f0000000040)={@align, {0x4, 0x2, 0x4, 0xf}}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x1}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) sched_setscheduler(r2, 0x3, &(0x7f0000000200)=0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000140)=0x5380) 2m27.457865145s ago: executing program 0 (id=500): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) chroot(&(0x7f00000001c0)='./file1\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc15}, 0x8000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000180), 0xffffffffffffffff) unshare(0x600) r1 = socket$isdn_base(0x22, 0x3, 0x0) bind(r1, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x80) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) socket(0x26, 0x0, 0xffffffa4) 2m27.021555621s ago: executing program 0 (id=507): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r2, 0xc, 0x0, 0x0, 0xb, 0x1, 0x15c2, 0xc6a, 0x9, 0x68376f12ef4e3242, 0x0, 'syz0\x00'}) 2m11.723706935s ago: executing program 33 (id=507): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r2, 0xc, 0x0, 0x0, 0xb, 0x1, 0x15c2, 0xc6a, 0x9, 0x68376f12ef4e3242, 0x0, 'syz0\x00'}) 42.806598074s ago: executing program 5 (id=1361): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000240), 0x2, 0xa41) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x1}, {r0, 0x8634}, {r0}, {0xffffffffffffffff, 0x11}, {r0, 0xc460}, {r0, 0x2}, {r1, 0x91}, {r0, 0x138}], 0x8, &(0x7f0000000300), &(0x7f0000000340), 0x8) 42.788457425s ago: executing program 5 (id=1362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000004000000000a4c000000060a0b0406ebcf590300000000000000000200fffe200004801c0001800b00010072656a6d637400000c00028008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0xc8d}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="48004c060a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 42.685242218s ago: executing program 5 (id=1366): timer_create(0x3, &(0x7f00000000c0)={0x0, 0x21, 0x7, @thr={&(0x7f0000000100)="21508167fae01b930737e8b5558cd5d0c603c9c3155806f757aff8b3296d47764c1da53781015f6186eaa5adf4040f91ba56cfbddd18f8b8bd1dc22443364b42f4f30dc8962dd12fbee0e0a7c63281fc1d2543998dc23920e9ec61ab12d82f077bd290a2032c939c62c84d2089aa5ad6b555e15ec7725feba196af8ef2f603ecd00934f08eae40", &(0x7f0000000000)='\x00 \x00\x00\x00\x00\x00\t'}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_settime(0x1ed5d7403, &(0x7f0000000180)) 42.61538182s ago: executing program 5 (id=1367): r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) r1 = eventfd(0x80000000) ppoll(&(0x7f0000000240)=[{r1, 0x1410}], 0x1, &(0x7f00000002c0), 0x0, 0x0) syz_pidfd_open(r0, 0x0) r2 = syz_pidfd_open(r0, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00000000fb150244b4642fccbc4f2a5c55332899da424cb5"], 0x1) 42.615216871s ago: executing program 5 (id=1368): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='\v\x00\x00\x00syz'], 0x1eb) 42.445471597s ago: executing program 5 (id=1372): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1000007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x7, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x5, 0x8, 0x1, 0x5, 0xfffffff9, 0x3, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x3, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0x103, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x202]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c"], 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 42.445270317s ago: executing program 34 (id=1372): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1000007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x7, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x5, 0x8, 0x1, 0x5, 0xfffffff9, 0x3, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x3, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0x103, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x202]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c"], 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 4.418025696s ago: executing program 7 (id=1791): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty=0x8000000}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) 4.324202379s ago: executing program 7 (id=1792): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000087b8ae8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b7050000080000f2280000000000000095d2b1"], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xe}, 0x94) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000000)=']\x00', 0x34d103, &(0x7f0000000040)={@align=0xffffffffffff0000, {0x5, 0x2e8, 0x4, 0x7fff}}, 0x3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x31e96ab9}) 3.773838338s ago: executing program 1 (id=1806): syz_read_part_table(0x1052, &(0x7f0000000000)="$eJzsz8utwjAUBNBJ8l4iNtACpdACSFRAI1AJe7qgLoSMbD6iAmBxjqwr3/FsHL7qLzmPSdalS9JdW9i1OWTZv63/Sd/6D/s6ShkPr2RIclzU2/wezOqZns/lMtTOLsmq7psp29Mn/ggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv+4WAAD//yW0CyU=") futex(0xffffffffffffffff, 0x0, 0x1000004, 0x0, 0x0, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001200)={0x1ffffc, 0x200000, 0xfffffffc, 0x0, 0x1, 0x16}) r0 = syz_mount_image$ext4(&(0x7f0000001180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f0000001100)={[], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}, 0x1, 0x4da, &(0x7f0000000900)="$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") r1 = creat(&(0x7f0000000100)='./file1\x00', 0xe0) mmap(&(0x7f0000ada000/0x4000)=nil, 0x4000, 0x3000004, 0x20010, r0, 0xfffff000) write$UHID_INPUT(r1, &(0x7f0000004240)={0x8, {"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", 0x1000}}, 0x1006) r2 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x83) openat(r4, &(0x7f0000000040)='.\x00', 0x0, 0xa2) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x4c, 0x0, &(0x7f0000000040)) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000001140)={&(0x7f00000010c0)=""/17, 0x11, 0x1ff, 0xfffffffc}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000011c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001240)=ANY=[@ANYBLOB="341800001e00000026717000000000000a00000012ffb4ef331fa4eb6cdc3f2ea4f51f958d09044128721a223ecf1c2a0a73e84654f12d059fddc0394cd95249694d000000000000bde5a9c6aa7067053c7a891899f0ae3acf2d4068922b7e21a633600afab98c6bf2a71449"], 0x1834}, 0x1, 0x0, 0x0, 0x24000000}, 0x40810) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r9, 0x3ff}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 3.349953653s ago: executing program 7 (id=1808): r0 = syz_open_procfs(0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x277) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 3.13403679s ago: executing program 2 (id=1812): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0xc8d}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x840) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.131668591s ago: executing program 2 (id=1814): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x5, 0x6, 0x2000000000, 0x10, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.075879082s ago: executing program 2 (id=1815): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c42647612d91de4353d68b0fa00", 0x0, 0x8, 0x4000000, 0x7}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f, 0xa7}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) 3.047441314s ago: executing program 2 (id=1818): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f00000004c0)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xcc, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000000000000000000d02000000040000000000000882000000000000006100"], &(0x7f0000000700)=""/4096, 0x36, 0x1000, 0x8}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r2}}, './file0\x00'}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) r4 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) sendfile(r4, r4, 0x0, 0x400) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2088000}, 0x4060804) unshare(0xa280e84fbd9d462d) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) socket$inet6_tcp(0xa, 0x1, 0x0) 2.903116649s ago: executing program 1 (id=1821): prlimit64(0x0, 0x2, &(0x7f00000001c0)={0xf, 0x8a}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) close(0x3) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) move_mount(r3, 0x0, r3, &(0x7f00000000c0)='./file0\x00', 0x22) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049367, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f4, 0x997b, 0x2e, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 1.755023639s ago: executing program 2 (id=1827): r0 = socket(0x400000000010, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x12, 0x3, 0x2) (rerun: 64) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0xf9, 0xe, 0xa, 0x8, 0x0, 0x4, 0x0, 0x5, 0x9, 0x9, 0x5, 0x38, 0x2, 0xb}, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 1.675425232s ago: executing program 1 (id=1828): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0xa, 0x0, 0x8, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x6fffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x8}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x240c8800}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x164) 1.675054092s ago: executing program 3 (id=1829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x200000000000000}, 0x20) 1.609306494s ago: executing program 1 (id=1831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0x7, 0x6, @multicast}, 0x14) 1.608668784s ago: executing program 3 (id=1832): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) unshare(0x41000100) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000001c0)={0x2, {{0xa, 0x4e20, 0x7, @mcast2, 0x2}}, 0x1, 0x1, [{{0xa, 0x4e31, 0x4, @private1, 0x7fffffff}}]}, 0x110) r3 = perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x255, 0xef4, 0x0, 0x4, 0x8, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000180), 0xce, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000180)=@md0, 0xffffffffffffffff, &(0x7f0000000400)={0xa5, 0x8, 0x1, 0x4}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5, 0xffffffffffffffff, 0x2000000}, 0xc) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x0, 0x0, 0x9, 0x1, 0x4, 0x5, 0x1, 0x8}, {0x1, 0x0, 0x6, 0xfffffffffffffff7, 0xe3, 0x7ff, 0x40, 0xb}, {0x3, 0x0, 0x6, 0x3, 0x4, 0x6, 0x5, 0x1}], 0x3, 0x38, 0x1, 0x400}) 1.518520617s ago: executing program 1 (id=1833): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c2100801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080007"], 0x104}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x47a8, 0x0, &(0x7f0000000180), &(0x7f0000000700)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x4f41, 0x4}, 0x4, 0x0, 0x11000, 0x0, 0x6, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) io_setup(0x239f, &(0x7f0000000380)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000080)={0x9ce, 0xf21f96ac, 0x64, 0x3ff, 0xc, "00000000001a00f5ff7d0d00", 0x0, 0xa}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8bc6, 0x6}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x4, 0x6, 0x0, 0x41}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0xd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.203750288s ago: executing program 6 (id=1836): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0xc8d}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x840) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.203407578s ago: executing program 3 (id=1837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="8042000044005cfc5c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000310"], 0x94}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="8042000044005cfc5c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000310"], 0x94}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) 950.016867ms ago: executing program 3 (id=1838): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x1, [0x5]}, &(0x7f0000000400)=0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 949.758897ms ago: executing program 7 (id=1839): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) r0 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = epoll_create(0x1e) epoll_pwait2(r3, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, 0x0, 0x0, 0x20042, 0x1}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x4b, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x2}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_open_dev$sg(0x0, 0x4a38, 0x8000) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffe, 0x0, 0xb4, @scatter={0x0, 0x100000, 0x0}, 0x0, 0x0, 0x2, 0x10023, 0xfffffffd, 0x0}) 857.80576ms ago: executing program 2 (id=1840): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x41, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x10000, 0x23456}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x810, r1, 0x10000000) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x5, 0x6, 0x2000000000, 0x10, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 850.17447ms ago: executing program 3 (id=1841): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xc, 0x4, 0x298, 0xffffffff, 0x0, 0x0, 0x4000000, 0x98, 0xffffffff, 0x200, 0x200, 0x200, 0x98, 0x4, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x35}, 0xff, 0xffffff00, 'ipvlan1\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x21, 0x1, 0x18}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@broadcast, @multicast1, 0x7fffffff, 0xff000000, 'nr0\x00', 'erspan0\x00', {}, {}, 0x62, 0x1, 0x40}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x2, 0xfffffffc, 0x6, {0x7}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffa, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e40)=@newtfilter={0x74, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x2, 0x9, 0xa, 0x1, {0x4, 0x0, 0xd, 0xf, 0x4}, {0x5, 0x0, 0xc7, 0x0, 0x7, 0x7ff}, 0x2cb8dbbb, 0x800, 0x1000}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) r3 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$kcm(r1, 0x0, 0x80) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x3, 0x2, 0x6, 0x6, 0xb, 0x2, 0x41}, @exit], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x17aa, &(0x7f0000000080)={0x0, 0x374e, 0x0, 0x2, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0x7fffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x1f, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r4, 0x22ce, 0x1d, 0x0, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x77288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0x8000008}]}, 0x48}}, 0x0) 849.84676ms ago: executing program 6 (id=1842): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r2 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000200)}, 0x20) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x80c0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x5e, @rand_addr=0x64010101, 0x0, 0x2, 'nq\x00', 0x8, 0xff, 0xb}, 0x2c) r4 = openat(0xffffffffffffff9c, 0x0, 0x20240, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1c1182, 0x9b) sendfile(r5, r4, 0x0, 0x3ffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x2, 0x0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x4, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="85100001fcffffff185000000700"/24], &(0x7f00000003c0)='GPL\x00', 0xfffffffb, 0x15, &(0x7f0000000400)=""/21, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f00000014c0)=[r3, r1, r3, r1, r1, r1, r3], &(0x7f0000001500)=[{0x4, 0x2, 0xd, 0xa}, {0x3, 0x2, 0x10, 0xc}, {0x5, 0x4, 0xf, 0x1}, {0x2, 0x4, 0x4, 0x8}, {0x1, 0x1, 0x9, 0x7}, {0x3, 0x4, 0x3, 0xa}]}, 0x94) r10 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r10, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x2, 0xffe}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@bloom_filter={0x1e, 0xfffffff9, 0x200, 0x7366, 0x0, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x1d, 0x15, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffd540, 0x0, 0x0, 0x0, 0x80000001}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x24}, @map_fd={0x18, 0x9, 0x1, 0x0, r5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x1, 0x0, 0xb, 0x2, 0x50}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x1000, &(0x7f00000004c0)=""/4096, 0x40f00, 0x48, '\x00', r6, @fallback=0xc, r7, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r9, 0x0, &(0x7f00000016c0)=[r10, r3, r11, r3, r3, r1], 0x0, 0x10, 0x101}, 0x94) 757.636794ms ago: executing program 3 (id=1843): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @multicast, @loopback}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b4, &(0x7f0000000280)="$eJzs3b2LY1UUAPDzZvKlFklhJYIPtLBx2dnWJoNkIZhKSaEWuri7IJMg7MKAHxi3srWx9C8QBDv/CRsLe8FWsHPBhSfva5KsL9nJYGb8+P2auXPvOe+e9+bODCly8t7z85Pbadx98OnP0eslcTCMYTxMYhAHUfs81gy/DADg3+xhlsVvWWl9Jdmal6/29lsaALAnm///b/Dd3ksCAPbszbfefv14Mhm9kaa9uDn/4nSav7LPv5brx3fjg5jFnbge/XgUkZ0pxzezLFu00twgXpovTqd55vzdH6rrH/8aUeQfRT8GxdR6/ngyOkpLK/mLvI6nq/2Hef6N6MezDfuPJ6MbDfkx7cTLL67Ufy368eP78WHM4nZRRJH/yh/jyeizozR9Lfvq90/eycvL85PF6bRbxC1lh5f8owEAAAAAAAAAAAAAAAAAAAAA4D/sWtU7pxtF/558quq/c/go/6YdaW2w3p+nzD/rEvxYf6BFFl/X/Xmup2maVYHL/FY814rW1dw1AAAAAAAAAAAAAAAAAAAA/LPc/+jjk1uz2Z17f8ug7gZQv63/otcZrsy8EA0xgzib6S63PKi23XLlOKxjkoitZeRX3Kn49pN33zB4alPWN9/u+uh6T45pX6DCHQf16Tq5lTQ/w27UM736kHy/GtOJc+7V2bSU7XT8Oo1L/Z3vvfNMMVhsiYlkW2Gv/lI+uWomefwuOsVTbUxvV4Pyd6HpbOx0nv/6tyLRrQMAAAAAAAAAAAAAAAAAAPZq+abfhsUHG5J+Gpcf8h+DPVcHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJdj+fn/OwwWVfI5gjtx7/4V3yIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/A38GAAD//9PXYcU=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setuid(0xee01) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xd, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}}, 0x2) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa0, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0xc2e, '\x00', 0x0, r1, 0x2, 0x5, 0x4}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x60100200, 0x0, 0x0, 0x0, 0x0, 0x0) 744.424824ms ago: executing program 6 (id=1844): prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8f}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") ioctl$FS_IOC_GETVERSION(r1, 0xff02, &(0x7f0000000180)) 605.733239ms ago: executing program 7 (id=1845): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xe203, 0x246}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x700, 0x40, 0xfffffffe, 0x40, {{0xb, 0x4, 0x1, 0x24, 0x2c, 0x65, 0x0, 0x1, 0x4, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0x7, 0x61, [@local]}, @cipso={0x86, 0x11, 0x3, [{0x5, 0xb, "af3edb503f654a03ee"}]}]}}}}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xf}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x400}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040044}, 0x24040070) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="700000006d0000012dbd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="0045040000010000080025000200000008002800f8ffffff08001f000100000008000ac261fb30643b8400", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa000008001d004002000008002c00020500000000000000657468315f746f5f62617461647600"], 0x70}}, 0x20000001) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0d030000000000000000130000000c000980080002000000c9"], 0x20}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r9, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000f40)=ANY=[@ANYBLOB="7400b04974af2188935775f587b18e226ce581fb891d405769ee6a23ce0496840200a1f5721596da45b92dc5516a6a691f55649a1c52f7e62eeb7fc1a1e371516510dc19cae0e6ae0c8a0ad43310d665e29343dfcdb80c7f91a9a0aa008ca0add6e08e1bb2ea8939c496791787b8094045b064805d8c8112b6abd9b8958f43518b71761b6115ee62fc3d1eec527dc187430bbc668a4347e2b0dc3d86fb05ac0c9cb03acaee913296432481ae96597dc5cf3867bb5764b6879c145e0a5b9b840a5a589fbfcb15904b10", @ANYRES16=r10, @ANYBLOB="000128bd7000fcdbdf25060000001c0003800800010004000000080001000300000008000200000000800c0007800800020008000000380001802400028008000200df0c00000800010017000000080001001f00000008000400000000000d0001007564703a73797a3200000000"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba000000f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="80000200c988000008001b00"], 0x28}}, 0x800) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x8, 0x0, 0x0, 0x4007, 0x80590, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ac60000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@gettaction={0x90, 0x32, 0x10, 0x70bd28, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x74b}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x1, 0x3, 0x8}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xc1920335b598980a}, 0x34004000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) 450.096265ms ago: executing program 1 (id=1846): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000d00)='./file1\x00', 0x10010c6, &(0x7f00000000c0)={[{@nodelalloc}, {@usrquota}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@init_itable}, {@jqfmt_vfsv1}, {@errors_remount}]}, 0x2, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@generic={0x1, 0xffffffffffff7fff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x15) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x101581, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) fallocate(r1, 0x3, 0x0, 0x7) socket$inet6(0xa, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a004000f8ff4700e438d2fd000000000000000ad4", 0x39}], 0x1) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7b0, &(0x7f0000000f80)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cDY782M/N533rw3z5pBCmDfGk9/5CIORwykydFsfRLZiuiPOFnf7+H6WiFdktjYeOW7pLbPg/W1QjS9JnUwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcyrY1x7FXxmM8OyYD6SHc5H97XViPJb2uAM8k7Zp99V4eh2M0+nZoyf90tWYAQKdciYgNAGCfSVz/AWCfabwP8GB9rdBYon4/52pP35joknv/jYjhevyN+5v1Lf31e3ZfDdfug448SGr3SBqSiBjbg/LHI+L67TM30yU6dB8SoJWr1yLi3Nj41vE/HeG2PrPwtP62i33Gt+SNf9A9n6Tzn39un/9F5LL+P1z7uXX+M9Si7z6LJ/f/3J1N2YE9KLRJOv/7d9OzbQ+b4s+M9WW539TmfAPJ+QulYjq2/TYiJmJgKM1P7VDGxP2f77erf/P87/t3XvsgLT/9/XiP3J3+oc2vmZ2pzjxv3A33rkX8qb9V/Mmj9k/azH9P77KMl/715vvttqXxp/E2lu3xd9bGjYi/tGz/x89BJTs+nzhZOx0mGydFCx9//d5Iu/Kb2//67bSktULjf4FuSNt/ZOf4x5Lm5zUrT1/GFzdGP223bXP8Z26m5W+Ov/X5P5i8WksPZusuz1SrS1MRg8nL29cfe/zaRr6xfxr/xJ9b9/+dzv+0G5/L0htPePix/+63Hz57/J2Vxj+btn+SBfHE9n/6xK2H833tyt9d+0/XUhPZmu3jX/+2v7vbCj7XwQMAAAAAAAAAAAAAAAAAAAAAAACAXcpFxKFIcvlH6Vwun69/h/fvYyRXKleqR86Xlxdno/Zd2WMxkGt81OVo0+ehTmWfh9/IH9uS/3tE/C4i3h06UMvnC+XSbK+DBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDMwTbf/5/6ZqjXtQMAOma41xUAALrO9R8A9p821//B1qsPdLQuAEB31K7/SX+vqwEAdJH3/wFg/3H9BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMNOnzoVp0/lNn5cXyuk+dlLK8vz5UtHZ4uV+fzCciFfKC9dzM+Vy3OlYr5QXmj7h67Wf5XK5YvTsbh8ebJarFQnKyurZxfKy4vVsxcWZuaKZ4sDXYsMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHavsrI6P1MqFZckdk5ceSGqcS1rtl4fDYkXIjEUEZ0qonmUONCbwQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgV+CXAAAA//9aWh+S") 427.351765ms ago: executing program 6 (id=1847): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x0, 0x0) futex(0xfffffffffffffffc, 0xd, 0x1, 0x0, 0x0, 0x200015) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000000)={0x1, 0x1}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) 305.981229ms ago: executing program 6 (id=1848): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xa98, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}}, 0x1c}}, 0x44004) (fail_nth: 4) 60.424918ms ago: executing program 6 (id=1849): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000001c0)={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x9}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x24, 0x6, 0x8857}]}}]}, 0x60}}, 0x44080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a40), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01200000000000000000010000000800010000000000080002000100000008000880040007802c00048005"], 0x58}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f00000000c0)={@random="dfa473846208", @random="cc4a363554da", @val={@void, {0x8100, 0x2, 0x1}}, {@generic={0x8906}}}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) r12 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000340)={r12}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e3, &(0x7f0000000180)={r12, r13}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r14, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000a80)={0x1a8, r15, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x158, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3336af54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9653447}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57214096}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30725010}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52fee1c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fe1bd2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f31dedf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14e1283a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b3f1697}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2201d8d0}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cf6641a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb36be29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d4cc70}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x749b422d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26a06380}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2aade4f5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x298ff884}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2865ca00}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f1fd7e4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62d27395}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x70, r10, 0x108, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 7 (id=1850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x53}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_clone(0x80008000, 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0) move_pages(r0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000006c9cef62e69b000000000000000000292727b996a31c9bd411ca3271e0a944c4ad22b63683fcdc0876b179de6899646fb1716846efe0106a1b956e352961c6a27f99d4e3d32e1a6f1af44a04f3ad4b67c65669b542"], 0x50) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c00070000000000000000000800090000000000070006006468000008000800"], 0x54}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000001400b59540000000ff08df25185e090088b75895fada673b1254fcfb510e5b8d8bbd1ac9c33897fe0e1042b81b529ff031b53415d100b45614a31163b04e745987337e0add60fbe0b54cf6", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x40) kernel console output (not intermixed with test programs): ext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.517050][ T6719] netlink: 'syz.2.850': attribute type 21 has an invalid length. [ 145.697652][ T6736] xfrm1: entered promiscuous mode [ 145.741341][ T6734] loop5: detected capacity change from 0 to 4096 [ 145.755009][ T6732] bond2: left promiscuous mode [ 145.761837][ T6732] macsec1: left promiscuous mode [ 145.768066][ T6732] geneve2: left promiscuous mode [ 145.773454][ T6742] loop6: detected capacity change from 0 to 1024 [ 145.774918][ T6732] vlan0: left promiscuous mode [ 145.784772][ T6732] bond3: left promiscuous mode [ 145.793860][ T1033] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 145.806095][ T6742] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 145.816549][ T6734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.836351][ T6734] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 145.848262][ T6734] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 145.856133][ T6739] lo speed is unknown, defaulting to 1000 [ 145.862483][ T6734] System zones: 0-5 [ 145.874396][ T6749] raw_sendmsg: syz.3.860 forgot to set AF_INET. Fix it! [ 145.894224][ T6734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.940834][ T4268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.955803][ T4667] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 146.099999][ T28] audit: type=1326 audit(1774681891.066:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6762 comm="syz.2.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e96c799 code=0x7ffc0000 [ 146.125473][ T28] audit: type=1326 audit(1774681891.066:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6762 comm="syz.2.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e96c799 code=0x7ffc0000 [ 146.149661][ T28] audit: type=1326 audit(1774681891.086:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6762 comm="syz.2.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e96c799 code=0x7ffc0000 [ 146.173230][ T28] audit: type=1326 audit(1774681891.086:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6762 comm="syz.2.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f991e96c799 code=0x7ffc0000 [ 146.911725][ T6789] __nla_validate_parse: 7 callbacks suppressed [ 146.911745][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 147.414080][ T6805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6805 comm=syz.5.881 [ 147.432334][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.5.881'. [ 147.441376][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.5.881'. [ 147.453940][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.881'. [ 147.495295][ T6807] netlink: 'syz.5.882': attribute type 14 has an invalid length. [ 147.503277][ T6807] netlink: 20 bytes leftover after parsing attributes in process `syz.5.882'. [ 147.561137][ T6812] loop5: detected capacity change from 0 to 1024 [ 147.568986][ T6812] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 147.630125][ T6814] gre1: entered promiscuous mode [ 147.726730][ T6821] loop7: detected capacity change from 0 to 16384 [ 148.034593][ T6844] loop6: detected capacity change from 0 to 1024 [ 148.041467][ T6844] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 148.158011][ T6847] netlink: 64 bytes leftover after parsing attributes in process `syz.6.896'. [ 148.205565][ T6849] netlink: 'syz.6.897': attribute type 7 has an invalid length. [ 148.260793][ T6851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.538467][ T6861] netlink: 'syz.5.902': attribute type 1 has an invalid length. [ 148.575345][ T6861] bond1: entered promiscuous mode [ 148.588858][ T6861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.636910][ T6870] loop5: detected capacity change from 0 to 1024 [ 148.665283][ T6870] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 148.886184][ T6885] netem: invalid attributes len -9 [ 148.891327][ T6885] netem: change failed [ 149.572865][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.2.915'. [ 149.624726][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.2.915'. [ 149.840646][ T6904] loop6: detected capacity change from 0 to 1764 [ 149.847693][ T6904] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 150.689211][ T6928] netlink: 'syz.3.926': attribute type 10 has an invalid length. [ 150.903774][ T6934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.929'. [ 150.939683][ T6930] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.084315][ T6930] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.238674][ T6930] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.280322][ T6947] ------------[ cut here ]------------ [ 151.285946][ T6947] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 151.298097][ T6947] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#0: syz.5.932/6947 [ 151.307726][ T6947] Modules linked in: [ 151.311648][ T6947] CPU: 0 UID: 0 PID: 6947 Comm: syz.5.932 Tainted: G W syzkaller #0 PREEMPT(full) [ 151.322458][ T6947] Tainted: [W]=WARN [ 151.326320][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.336474][ T6947] RIP: 0010:u32_change+0x1463/0x14d0 [ 151.341828][ T6947] Code: 31 ed e9 96 fe ff ff e8 0b fc c1 fc 48 8d 3d 64 33 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 c8 64 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 151.361646][ T6947] RSP: 0018:ffffc900041db5e0 EFLAGS: 00010283 [ 151.367899][ T6947] RAX: ffffffff849764e5 RBX: ffffc900041db7f0 RCX: 0000000000000010 [ 151.375918][ T6947] RDX: ffffffff867e64c8 RSI: 0000000000000020 RDI: ffffffff87209850 [ 151.383936][ T6947] RBP: ffffc900041db6e8 R08: 000188810b68c187 R09: 0000000000000000 [ 151.391948][ T6947] R10: ffff88810b68c100 R11: 0000000000000002 R12: ffff88811abd5800 [ 151.400756][ T6947] R13: 0000000000000001 R14: 0000000000000020 R15: ffff88811abd58c0 [ 151.408780][ T6947] FS: 00007f6d739e76c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 151.417877][ T6947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.424463][ T6947] CR2: 0000200000006040 CR3: 000000010d208000 CR4: 00000000003506f0 [ 151.432491][ T6947] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.440488][ T6947] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 151.448499][ T6947] Call Trace: [ 151.451799][ T6947] [ 151.454739][ T6947] tc_new_tfilter+0xfc0/0x1200 [ 151.459553][ T6947] ? ns_capable+0x7c/0xb0 [ 151.463913][ T6947] ? __pfx_tc_new_tfilter+0x10/0x10 [ 151.469163][ T6947] rtnetlink_rcv_msg+0x64b/0x720 [ 151.474126][ T6947] ? avc_has_perm_noaudit+0xab/0x130 [ 151.479504][ T6947] netlink_rcv_skb+0x123/0x220 [ 151.484285][ T6947] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 151.489837][ T6947] rtnetlink_rcv+0x1c/0x30 [ 151.494305][ T6947] netlink_unicast+0x5c0/0x690 [ 151.499166][ T6947] netlink_sendmsg+0x5c8/0x6f0 [ 151.504058][ T6947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.509463][ T6947] ____sys_sendmsg+0x563/0x5b0 [ 151.514301][ T6947] ___sys_sendmsg+0x195/0x1e0 [ 151.519104][ T6947] __sys_sendmmsg+0x185/0x320 [ 151.523937][ T6947] __x64_sys_sendmmsg+0x57/0x70 [ 151.528875][ T6947] x64_sys_call+0x27aa/0x3020 [ 151.533809][ T6947] do_syscall_64+0x12c/0x370 [ 151.538530][ T6947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.544623][ T6947] RIP: 0033:0x7f6d74f8c799 [ 151.549310][ T6947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.569296][ T6947] RSP: 002b:00007f6d739e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 151.578080][ T6947] RAX: ffffffffffffffda RBX: 00007f6d75205fa0 RCX: 00007f6d74f8c799 [ 151.586066][ T6947] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 151.594031][ T6947] RBP: 00007f6d75022c99 R08: 0000000000000000 R09: 0000000000000000 [ 151.602055][ T6947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.610142][ T6947] R13: 00007f6d75206038 R14: 00007f6d75205fa0 R15: 00007fff0f498678 [ 151.618219][ T6947] [ 151.621243][ T6947] ---[ end trace 0000000000000000 ]--- [ 151.658240][ T6930] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.708715][ T6965] syzkaller0: entered promiscuous mode [ 151.714353][ T6965] syzkaller0: entered allmulticast mode [ 151.734019][ T5832] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.749933][ T5832] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.767592][ T5832] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.783950][ T5832] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.807928][ T6969] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 151.818742][ T6969] netlink: 'syz.5.940': attribute type 1 has an invalid length. [ 151.833455][ T6972] netlink: 277 bytes leftover after parsing attributes in process `syz.2.941'. [ 151.844991][ T6969] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 151.856521][ T6969] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 151.874616][ T28] kauditd_printk_skb: 258 callbacks suppressed [ 151.874629][ T28] audit: type=1400 audit(1774681896.836:1884): avc: denied { name_bind } for pid=6973 comm="syz.2.942" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 151.875864][ T6974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6974 comm=syz.2.942 [ 151.894925][ T6975] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 151.945130][ T6969] bond2: (slave gretap1): making interface the new active one [ 151.953888][ T6969] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 151.968980][ T6969] macvlan2: entered promiscuous mode [ 151.974477][ T6969] macvlan2: entered allmulticast mode [ 151.980636][ T6969] bond2: entered promiscuous mode [ 151.985835][ T6969] gretap1: entered promiscuous mode [ 151.992417][ T6969] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 152.004064][ T6969] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 152.015991][ T6969] bond2: left promiscuous mode [ 152.020893][ T6969] gretap1: left promiscuous mode [ 152.048763][ T6979] netlink: 48 bytes leftover after parsing attributes in process `syz.2.944'. [ 152.103247][ T6981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6981 comm=syz.2.946 [ 152.126178][ T6969] syz.5.940 (6969) used greatest stack depth: 8536 bytes left [ 152.176869][ T6989] loop5: detected capacity change from 0 to 512 [ 152.186780][ T28] audit: type=1326 audit(1774681897.156:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d74f8c799 code=0x7ffc0000 [ 152.210670][ T28] audit: type=1326 audit(1774681897.156:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d74f8c799 code=0x7ffc0000 [ 152.235524][ T28] audit: type=1326 audit(1774681897.156:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d74f8c799 code=0x7ffc0000 [ 152.276564][ T28] audit: type=1326 audit(1774681897.156:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6d74f8c799 code=0x7ffc0000 [ 152.301870][ T28] audit: type=1326 audit(1774681897.156:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d74f8c502 code=0x7ffc0000 [ 152.325499][ T28] audit: type=1326 audit(1774681897.156:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6d74f4cfce code=0x7ffc0000 [ 152.328543][ T6996] veth2: entered allmulticast mode [ 152.349670][ T28] audit: type=1326 audit(1774681897.156:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6d74f8c5c7 code=0x7ffc0000 [ 152.394138][ T28] audit: type=1326 audit(1774681897.156:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d74f4cfce code=0x7ffc0000 [ 152.433293][ T28] audit: type=1326 audit(1774681897.156:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d74f8c42b code=0x7ffc0000 [ 152.457472][ T7000] team0: entered allmulticast mode [ 152.467264][ T7000] team_slave_0: entered allmulticast mode [ 152.475785][ T7000] team_slave_1: entered allmulticast mode [ 152.496182][ T7002] sg_write: data in/out 262111/42 bytes for SCSI command 0x0-- guessing data in; [ 152.496182][ T7002] program syz.5.952 not setting count and/or reply_len properly [ 152.599648][ T7006] netlink: 'syz.3.953': attribute type 30 has an invalid length. [ 152.781715][ T7018] loop6: detected capacity change from 0 to 512 [ 152.848939][ T7018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.862097][ T7018] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.985887][ T5795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.999562][ T7017] loop5: detected capacity change from 0 to 512 [ 153.040060][ T7022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7022 comm=syz.3.959 [ 153.130952][ T7017] EXT4-fs (loop5): 1 orphan inode deleted [ 153.148405][ T7017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.169777][ T7030] loop6: detected capacity change from 0 to 512 [ 153.182969][ T7030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.256030][ T7030] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.962: iget: bad i_size value: 38620345925642 [ 153.283044][ T7030] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.283844][ T7030] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.962: couldn't read orphan inode 15 (err -117) [ 153.293025][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 153.293050][ C0] EXT4-fs (loop6): initial error at time 1774681898: ext4_orphan_get:1391: inode 15 [ 153.293111][ C0] EXT4-fs (loop6): last error at time 1774681898: ext4_orphan_get:1391: inode 15 [ 153.349512][ T7030] loop6: lost filesystem error report for type 5 error -117 [ 153.350082][ T7030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.406272][ T7044] tipc: Failed to remove unknown binding: 66,0,0/0:1810882811/1810882813 [ 153.414802][ T7044] tipc: Failed to remove unknown binding: 66,0,0/0:1810882811/1810882812 [ 153.435650][ T7044] tipc: Failed to remove unknown binding: 66,0,0/0:1810882811/1810882813 [ 153.449355][ T7046] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.962: bg 0: block 5: invalid block bitmap [ 153.465238][ T7044] tipc: Failed to remove unknown binding: 66,0,0/0:1810882811/1810882812 [ 153.480217][ T7046] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 153.480928][ T4268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.492933][ T7046] EXT4-fs (loop6): This should not happen!! Data will be lost [ 153.492933][ T7046] [ 153.518760][ T7046] EXT4-fs (loop6): Total free blocks count 0 [ 153.524891][ T7046] EXT4-fs (loop6): Free/Dirty block details [ 153.531243][ T7046] EXT4-fs (loop6): free_blocks=0 [ 153.536614][ T7046] EXT4-fs (loop6): dirty_blocks=2064 [ 153.542438][ T7046] EXT4-fs (loop6): Block reservation details [ 153.552679][ T7046] EXT4-fs (loop6): i_reserved_data_blocks=2064 [ 153.634270][ T7053] loop5: detected capacity change from 0 to 256 [ 153.675701][ T359] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 8 with error 28 [ 153.732040][ T7053] FAT-fs (loop5): codepage cp860 not found [ 154.385092][ T7062] openvswitch: netlink: Key 23 has unexpected len 4 expected 2 [ 154.807434][ T7072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7072 comm=syz.6.974 [ 154.855226][ T7076] netlink: 52 bytes leftover after parsing attributes in process `syz.3.976'. [ 155.023927][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'. [ 155.206041][ T7100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.213379][ T7100] IPv6: NLM_F_CREATE should be set when creating new route [ 155.248516][ T7103] loop5: detected capacity change from 0 to 2048 [ 155.280828][ T7100] team0: left allmulticast mode [ 155.289712][ T7100] team_slave_0: left allmulticast mode [ 155.295511][ T7100] team_slave_1: left allmulticast mode [ 155.307370][ T7103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.351423][ T7100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.378924][ T7100] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 155.419276][ T7100] geneve1: left allmulticast mode [ 155.424658][ T7100] macsec1: left allmulticast mode [ 155.438193][ T7100] vlan0: left allmulticast mode [ 155.446625][ T7100] bond3: left allmulticast mode [ 155.458627][ T4663] lo speed is unknown, defaulting to 1000 [ 155.465236][ T4663] syU×: Port: 1 Link DOWN [ 155.481524][ T3414] syz1: Port: 1 Link DOWN [ 155.486654][ T6426] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.495735][ T6426] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 59929 - 0 [ 155.504801][ T4663] lo speed is unknown, defaulting to 1000 [ 155.510881][ T6426] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.520622][ T6426] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 59929 - 0 [ 155.530011][ T6426] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.668729][ T7111] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 155.690956][ T6426] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 59929 - 0 [ 155.702972][ T6426] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.768531][ T6426] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 59929 - 0 [ 156.823211][ T4268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.915018][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 156.915034][ T28] audit: type=1400 audit(1774681901.876:1926): avc: denied { read write } for pid=7114 comm="syz.5.986" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 156.944737][ T28] audit: type=1400 audit(1774681901.886:1927): avc: denied { open } for pid=7114 comm="syz.5.986" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 157.747136][ T7072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.979952][ T7125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.987'. [ 158.005501][ T7127] netlink: 40 bytes leftover after parsing attributes in process `syz.3.988'. [ 158.038870][ T7125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.987'. [ 158.051035][ T7127] netlink: 40 bytes leftover after parsing attributes in process `syz.3.988'. [ 158.185461][ T7125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.987'. [ 158.195379][ T7127] netlink: 40 bytes leftover after parsing attributes in process `syz.3.988'. [ 158.206287][ T28] audit: type=1400 audit(1774681903.176:1928): avc: denied { connect } for pid=7136 comm="syz.2.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.301082][ T28] audit: type=1400 audit(1774681903.266:1929): avc: denied { mount } for pid=7140 comm="syz.2.993" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 158.345797][ T28] audit: type=1400 audit(1774681903.266:1930): avc: denied { getopt } for pid=7140 comm="syz.2.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.472592][ T7148] syz.6.996 (7148): /proc/7147/oom_adj is deprecated, please use /proc/7147/oom_score_adj instead. [ 158.513722][ T7150] tipc: Enabling of bearer rejected, failed to enable media [ 158.524410][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 158.546455][ T7152] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 158.563296][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 158.599969][ T7155] netlink: 'syz.5.999': attribute type 7 has an invalid length. [ 158.620362][ T7155] netlink: 'syz.5.999': attribute type 7 has an invalid length. [ 158.621020][ T359] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.637519][ T359] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.646806][ T359] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.655933][ T359] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.704216][ T7158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7158 comm=syz.2.1001 [ 158.859729][ T7168] loop6: detected capacity change from 0 to 1024 [ 158.878415][ T7168] EXT4-fs: inline encryption not supported [ 158.953281][ T7168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 158.965671][ T7168] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.115569][ T6426] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 3: comm kworker/u8:11: lblock 3 mapped to illegal pblock 3 (length 3) [ 159.210241][ T6426] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 159.311597][ T6426] EXT4-fs (loop6): This should not happen!! Data will be lost [ 159.311597][ T6426] [ 159.395550][ T6426] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 159.443262][ T6426] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 159.462687][ T6426] EXT4-fs (loop6): This should not happen!! Data will be lost [ 159.462687][ T6426] [ 159.474442][ T5795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 159.476344][ T7188] netlink: 'syz.2.1011': attribute type 10 has an invalid length. [ 159.496338][ T28] audit: type=1400 audit(1774681904.466:1931): avc: denied { execute } for pid=7162 comm="syz.5.1003" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 159.534725][ T7188] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.552970][ T7188] bond0: (slave team0): Enslaving as an active interface with an up link [ 159.605884][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 159.715667][ T7203] loop6: detected capacity change from 0 to 1024 [ 159.722463][ T7203] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 159.816849][ T7204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7204 comm=syz.3.1015 [ 160.037892][ T7220] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1021'. [ 161.039070][ T28] audit: type=1400 audit(1774681905.946:1932): avc: denied { ioctl } for pid=7237 comm="syz.5.1027" path="socket:[17432]" dev="sockfs" ino=17432 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 161.140543][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.147844][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.457808][ T7256] loop6: detected capacity change from 0 to 1024 [ 161.495005][ T28] audit: type=1400 audit(1774681906.436:1933): avc: denied { mounton } for pid=7253 comm="syz.2.1034" path="/file0" dev="ramfs" ino=17476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=fifo_file permissive=1 [ 161.530140][ T7256] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 161.984162][ T7271] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.048428][ T7275] netlink: 'syz.1.1041': attribute type 5 has an invalid length. [ 162.062790][ T7274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.086202][ T7275] netlink: 'syz.1.1041': attribute type 9 has an invalid length. [ 162.103969][ T7274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.145506][ T7271] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.227065][ T7271] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.297096][ T7274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.316377][ T7274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.337366][ T7271] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.411961][ T359] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.434703][ T359] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.457330][ T359] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.484683][ T359] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.807701][ T7293] lo speed is unknown, defaulting to 1000 [ 162.911988][ T7303] batadv_slave_1: entered promiscuous mode [ 162.918700][ T7302] batadv_slave_1: left promiscuous mode [ 162.955517][ T28] audit: type=1326 audit(1774681907.927:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 162.985023][ T28] audit: type=1326 audit(1774681907.927:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 163.009086][ T28] audit: type=1326 audit(1774681907.927:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 163.043181][ T28] audit: type=1326 audit(1774681907.927:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 163.069760][ T28] audit: type=1326 audit(1774681907.927:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 163.100270][ T7310] loop6: detected capacity change from 0 to 1024 [ 163.111720][ T7310] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 163.148548][ T28] audit: type=1400 audit(1774681908.117:1939): avc: denied { setopt } for pid=7309 comm="syz.6.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 163.193613][ T28] audit: type=1400 audit(1774681908.157:1940): avc: denied { setattr } for pid=7315 comm="syz.3.1054" path="socket:[17739]" dev="sockfs" ino=17739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 163.199722][ T7318] __nla_validate_parse: 8 callbacks suppressed [ 163.199740][ T7318] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1055'. [ 163.234904][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1056'. [ 163.334422][ T28] audit: type=1400 audit(1774681908.297:1941): avc: denied { append } for pid=7324 comm="syz.6.1058" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 163.580755][ T28] audit: type=1400 audit(1774681908.537:1942): avc: denied { remount } for pid=7324 comm="syz.6.1058" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 163.683151][ T28] audit: type=1400 audit(1774681908.627:1943): avc: denied { unmount } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 163.725410][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 163.755845][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 163.867866][ T7364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7364 comm=syz.3.1071 [ 164.647358][ T7420] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1088'. [ 164.656501][ T7420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1088'. [ 164.855444][ T7437] FAULT_INJECTION: forcing a failure. [ 164.855444][ T7437] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 164.869237][ T7437] CPU: 0 UID: 0 PID: 7437 Comm: syz.6.1093 Tainted: G W syzkaller #0 PREEMPT(full) [ 164.869272][ T7437] Tainted: [W]=WARN [ 164.869280][ T7437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.869293][ T7437] Call Trace: [ 164.869298][ T7437] [ 164.869306][ T7437] __dump_stack+0x1d/0x30 [ 164.869339][ T7437] dump_stack_lvl+0x95/0xd0 [ 164.869364][ T7437] dump_stack+0x15/0x1b [ 164.869390][ T7437] should_fail_ex+0x263/0x280 [ 164.869481][ T7437] should_fail_alloc_page+0xf2/0x100 [ 164.869509][ T7437] __alloc_frozen_pages_noprof+0x108/0x360 [ 164.869541][ T7437] alloc_pages_mpol+0xb3/0x260 [ 164.869599][ T7437] folio_alloc_mpol_noprof+0x39/0x80 [ 164.869712][ T7437] shmem_get_folio_gfp+0x3da/0xd60 [ 164.869750][ T7437] shmem_fault+0xf6/0x250 [ 164.869778][ T7437] __do_fault+0xbc/0x200 [ 164.869800][ T7437] handle_mm_fault+0xfab/0x3020 [ 164.869881][ T7437] do_user_addr_fault+0x3fd/0x1050 [ 164.869918][ T7437] exc_page_fault+0x62/0xa0 [ 164.869995][ T7437] asm_exc_page_fault+0x26/0x30 [ 164.870050][ T7437] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 164.870080][ T7437] Code: 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 19 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 164.870100][ T7437] RSP: 0018:ffffc9000426fd90 EFLAGS: 00050206 [ 164.870120][ T7437] RAX: ffff888104ab0ac8 RBX: 0000000000000fd0 RCX: 00000000000005d0 [ 164.870187][ T7437] RDX: 0000000000000000 RSI: ffff88810d623a30 RDI: 000020000001b000 [ 164.870200][ T7437] RBP: ffff88810de4c780 R08: 00000000000005f1 R09: 0000000000000000 [ 164.870215][ T7437] R10: 000188810d623030 R11: 000188810d623fff R12: 000020000001b5d0 [ 164.870231][ T7437] R13: 00007ffffffff000 R14: 000020000001a600 R15: ffff88810d623030 [ 164.870253][ T7437] _copy_to_user+0x7c/0xa0 [ 164.870288][ T7437] store_msg+0x49/0x110 [ 164.870392][ T7437] do_mq_timedreceive+0x5c4/0x6e0 [ 164.870430][ T7437] __x64_sys_mq_timedreceive+0xc6/0x170 [ 164.870522][ T7437] x64_sys_call+0x1ccc/0x3020 [ 164.870580][ T7437] do_syscall_64+0x12c/0x370 [ 164.870716][ T7437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.870737][ T7437] RIP: 0033:0x7f870e4ac799 [ 164.870756][ T7437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.870775][ T7437] RSP: 002b:00007f870cf07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 164.870798][ T7437] RAX: ffffffffffffffda RBX: 00007f870e725fa0 RCX: 00007f870e4ac799 [ 164.870849][ T7437] RDX: 0000000000018ff1 RSI: 000020000001a600 RDI: 0000000000000003 [ 164.870861][ T7437] RBP: 00007f870cf07090 R08: 0000000000000000 R09: 0000000000000000 [ 164.870873][ T7437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.870887][ T7437] R13: 00007f870e726038 R14: 00007f870e725fa0 R15: 00007ffc56a9a358 [ 164.870969][ T7437] [ 164.908801][ T7443] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1094'. [ 165.051543][ T7449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7449 comm=syz.2.1094 [ 165.226864][ T7453] loop5: detected capacity change from 0 to 4096 [ 165.243395][ T7453] ext4: Unknown parameter '' [ 165.251500][ T7445] loop6: detected capacity change from 0 to 32768 [ 165.337229][ T7462] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1100'. [ 165.356977][ T7445] loop6: p1 p3 < p5 p6 > [ 165.504738][ T7467] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1102'. [ 166.625139][ T7475] loop6: detected capacity change from 0 to 1024 [ 166.750686][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 166.765375][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 166.776653][ T3585] udevd[3585]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 166.787817][ T3587] udevd[3587]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 166.800667][ T7475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.862869][ T5795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.960210][ T7478] loop5: detected capacity change from 0 to 164 [ 167.005512][ T7478] rock: directory entry would overflow storage [ 167.014554][ T7478] rock: sig=0x66, size=4, remaining=3 [ 167.506598][ T7494] lo speed is unknown, defaulting to 1000 [ 167.643220][ T7502] tipc: Enabling of bearer rejected, failed to enable media [ 168.679983][ T7549] FAULT_INJECTION: forcing a failure. [ 168.679983][ T7549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.714426][ T7549] CPU: 0 UID: 0 PID: 7549 Comm: syz.6.1123 Tainted: G W syzkaller #0 PREEMPT(full) [ 168.714459][ T7549] Tainted: [W]=WARN [ 168.714466][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.714559][ T7549] Call Trace: [ 168.714565][ T7549] [ 168.714572][ T7549] __dump_stack+0x1d/0x30 [ 168.714603][ T7549] dump_stack_lvl+0x95/0xd0 [ 168.714673][ T7549] dump_stack+0x15/0x1b [ 168.714698][ T7549] should_fail_ex+0x263/0x280 [ 168.714724][ T7549] should_fail+0xb/0x20 [ 168.714807][ T7549] should_fail_usercopy+0x1a/0x20 [ 168.714839][ T7549] _copy_from_user+0x1c/0xb0 [ 168.714913][ T7549] kstrtouint_from_user+0x69/0xf0 [ 168.714943][ T7549] proc_fail_nth_write+0x50/0x160 [ 168.714999][ T7549] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 168.715038][ T7549] vfs_write+0x269/0x9f0 [ 168.715133][ T7549] ? __rcu_read_unlock+0x4e/0x70 [ 168.715154][ T7549] ? __fget_files+0x184/0x1c0 [ 168.715183][ T7549] ? mutex_lock+0x57/0x90 [ 168.715346][ T7549] ksys_write+0xdc/0x1a0 [ 168.715368][ T7549] __x64_sys_write+0x40/0x50 [ 168.715390][ T7549] x64_sys_call+0x27e1/0x3020 [ 168.715499][ T7549] do_syscall_64+0x12c/0x370 [ 168.715524][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.715544][ T7549] RIP: 0033:0x7f870e46cfce [ 168.715559][ T7549] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 168.715653][ T7549] RSP: 002b:00007f870cf06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.715673][ T7549] RAX: ffffffffffffffda RBX: 00007f870cf076c0 RCX: 00007f870e46cfce [ 168.715690][ T7549] RDX: 0000000000000001 RSI: 00007f870cf070a0 RDI: 0000000000000004 [ 168.715705][ T7549] RBP: 00007f870cf07090 R08: 0000000000000000 R09: 0000000000000000 [ 168.715718][ T7549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.715729][ T7549] R13: 00007f870e726038 R14: 00007f870e725fa0 R15: 00007ffc56a9a358 [ 168.715776][ T7549] [ 169.342031][ T7569] 9p: Bad value for 'wfdno' [ 169.437956][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 169.437970][ T28] audit: type=1400 audit(1774681914.407:1946): avc: denied { getopt } for pid=7572 comm="syz.6.1131" lport=36069 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 169.858634][ T28] audit: type=1326 audit(1774681914.827:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7581 comm="syz.6.1135" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f870e4ac799 code=0x0 [ 170.239590][ T7575] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1132'. [ 170.676565][ T28] audit: type=1400 audit(1774681915.647:1948): avc: denied { connect } for pid=7592 comm="syz.1.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.024989][ T28] audit: type=1400 audit(1774681915.847:1949): avc: denied { accept } for pid=7592 comm="syz.1.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.122771][ T28] audit: type=1400 audit(1774681915.847:1950): avc: denied { read } for pid=7592 comm="syz.1.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.189182][ T7603] Invalid logical block size (2) [ 171.346383][ T7607] tipc: Started in network mode [ 171.351315][ T7607] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 171.409386][ T7607] tipc: Enabling of bearer rejected, failed to enable media [ 171.625856][ T7615] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1141'. [ 171.725726][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'. [ 172.179394][ T7640] batman_adv: batadv0: Adding interface: vlan2 [ 172.195293][ T7640] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.346124][ T7640] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 172.361911][ T7642] loop6: detected capacity change from 0 to 512 [ 172.424662][ T7642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.477093][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1155'. [ 172.494167][ T7642] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.539715][ T7653] lo speed is unknown, defaulting to 1000 [ 172.558675][ T5795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.579910][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'. [ 172.588992][ T7658] macvlan0: entered promiscuous mode [ 172.594636][ T7658] netlink: 'syz.3.1157': attribute type 2 has an invalid length. [ 172.602360][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'. [ 172.641640][ T7666] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1160'. [ 172.741393][ T7665] IPv6: Can't replace route, no match found [ 172.781711][ T7658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1157'. [ 172.820517][ T7672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1163'. [ 173.341641][ T7677] set match dimension is over the limit! [ 173.467270][ T7677] netlink: 'syz.1.1162': attribute type 29 has an invalid length. [ 173.475932][ T7677] netlink: 'syz.1.1162': attribute type 29 has an invalid length. [ 173.937264][ T28] audit: type=1400 audit(1774681918.907:1951): avc: denied { mount } for pid=7686 comm="syz.3.1166" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 174.046711][ T7693] netlink: 'syz.6.1165': attribute type 12 has an invalid length. [ 174.071763][ T7693] netlink: 'syz.6.1165': attribute type 29 has an invalid length. [ 174.096791][ T7693] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1165'. [ 174.190226][ T7693] netlink: 'syz.6.1165': attribute type 2 has an invalid length. [ 174.519781][ T28] audit: type=1326 audit(1774681919.487:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d74f8c799 code=0x7ffc0000 [ 175.473035][ T28] audit: type=1326 audit(1774681919.487:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d74f8c799 code=0x7ffc0000 [ 175.496527][ T28] audit: type=1326 audit(1774681919.487:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f6d74f8c799 code=0x7ffc0000 [ 175.543910][ T28] audit: type=1326 audit(1774681919.487:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d74f8c799 code=0x7ffc0000 [ 175.574051][ T28] audit: type=1326 audit(1774681919.487:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d74f8c799 code=0x7ffc0000 [ 175.599580][ T28] audit: type=1326 audit(1774681919.487:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d74f8e007 code=0x7ffc0000 [ 175.643602][ T28] audit: type=1326 audit(1774681919.487:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6d74f4cfce code=0x7ffc0000 [ 175.745380][ T28] audit: type=1326 audit(1774681919.487:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6d74f4cfce code=0x7ffc0000 [ 175.800313][ T28] audit: type=1326 audit(1774681919.487:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6d74f4cfce code=0x7ffc0000 [ 175.824573][ T28] audit: type=1326 audit(1774681919.487:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d74f4cfce code=0x7ffc0000 [ 175.928499][ T7742] netlink: 'syz.2.1183': attribute type 4 has an invalid length. [ 175.945934][ T7746] loop5: detected capacity change from 0 to 256 [ 175.971076][ T7742] netlink: 'syz.2.1183': attribute type 4 has an invalid length. [ 175.981675][ T7746] FAT-fs (loop5): IO charset koi8-ru not found [ 176.007900][ T7750] __nla_validate_parse: 3 callbacks suppressed [ 176.007937][ T7750] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1186'. [ 177.125043][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 178.288409][ T7782] FAULT_INJECTION: forcing a failure. [ 178.288409][ T7782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.346065][ T7782] CPU: 1 UID: 0 PID: 7782 Comm: syz.5.1199 Tainted: G W syzkaller #0 PREEMPT(full) [ 178.346103][ T7782] Tainted: [W]=WARN [ 178.346119][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.346132][ T7782] Call Trace: [ 178.346138][ T7782] [ 178.346144][ T7782] __dump_stack+0x1d/0x30 [ 178.346169][ T7782] dump_stack_lvl+0x95/0xd0 [ 178.346216][ T7782] dump_stack+0x15/0x1b [ 178.346239][ T7782] should_fail_ex+0x263/0x280 [ 178.346268][ T7782] should_fail+0xb/0x20 [ 178.346315][ T7782] should_fail_usercopy+0x1a/0x20 [ 178.346345][ T7782] _copy_from_iter+0xcf/0xea0 [ 178.346378][ T7782] ? __alloc_skb+0x4f6/0x690 [ 178.346441][ T7782] ? __alloc_skb+0x200/0x690 [ 178.346534][ T7782] netlink_sendmsg+0x4ae/0x6f0 [ 178.346573][ T7782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.346610][ T7782] ____sys_sendmsg+0x563/0x5b0 [ 178.346729][ T7782] ___sys_sendmsg+0x195/0x1e0 [ 178.346771][ T7782] __x64_sys_sendmsg+0xd4/0x160 [ 178.346868][ T7782] x64_sys_call+0x194c/0x3020 [ 178.346898][ T7782] do_syscall_64+0x12c/0x370 [ 178.346925][ T7782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.346957][ T7782] RIP: 0033:0x7f6d74f8c799 [ 178.346974][ T7782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.347069][ T7782] RSP: 002b:00007f6d739e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.347092][ T7782] RAX: ffffffffffffffda RBX: 00007f6d75205fa0 RCX: 00007f6d74f8c799 [ 178.347109][ T7782] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000003 [ 178.347125][ T7782] RBP: 00007f6d739e7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.347140][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.347227][ T7782] R13: 00007f6d75206038 R14: 00007f6d75205fa0 R15: 00007fff0f498678 [ 178.347250][ T7782] [ 178.618816][ T7789] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1201'. [ 178.738939][ T7803] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1204'. [ 179.068912][ T7810] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1207'. [ 179.078572][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1207'. [ 179.087774][ T7810] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1207'. [ 179.096966][ T7810] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1207'. [ 179.106100][ T7810] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1207'. [ 179.433343][ T7814] Set syz1 is full, maxelem 0 reached [ 180.020239][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1210'. [ 180.286121][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 180.286137][ T28] audit: type=1400 audit(1774681925.257:1971): avc: denied { write } for pid=7827 comm="syz.6.1214" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 180.363771][ T28] audit: type=1400 audit(1774681925.257:1972): avc: denied { open } for pid=7827 comm="syz.6.1214" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 180.375847][ T7831] loop6: detected capacity change from 0 to 1024 [ 180.431220][ T7831] EXT4-fs: inline encryption not supported [ 180.447387][ T7831] EXT4-fs: Ignoring removed bh option [ 180.453683][ T7829] gtp0: left promiscuous mode [ 180.509351][ T7831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.561133][ T5795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.715811][ T7856] xfrm1: left promiscuous mode [ 181.498101][ T7874] __nla_validate_parse: 9 callbacks suppressed [ 181.498195][ T7874] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1228'. [ 181.556415][ T28] audit: type=1400 audit(1774681926.528:1973): avc: denied { setopt } for pid=7875 comm="syz.1.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.656274][ T7882] loop6: detected capacity change from 0 to 512 [ 181.681020][ T7882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.731545][ T7882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.755770][ T7882] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.875342][ T7882] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.1229: iget: bad i_size value: 2533274857506816 [ 182.070303][ T7895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1234'. [ 182.115139][ T7895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1234'. [ 182.154102][ T5795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.175897][ T7895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1234'. [ 182.257931][ T7904] netlink: 'syz.6.1236': attribute type 29 has an invalid length. [ 182.266412][ T7904] netlink: 'syz.6.1236': attribute type 29 has an invalid length. [ 182.553171][ T7913] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1239'. [ 183.898071][ T7928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7928 comm=syz.1.1243 [ 184.017244][ T7922] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1240'. [ 184.893282][ T7947] lo speed is unknown, defaulting to 1000 [ 185.151020][ T7959] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1251'. [ 185.347233][ T7965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1252'. [ 185.412814][ T7971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7971 comm=syz.6.1257 [ 185.456934][ T7965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1252'. [ 185.509225][ T7965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1252'. [ 186.499286][ T28] audit: type=1400 audit(1774681931.328:1974): avc: denied { read } for pid=7991 comm="syz.1.1263" path="socket:[19248]" dev="sockfs" ino=19248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 186.870887][ T8004] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1267'. [ 188.200365][ T28] audit: type=1400 audit(1774681933.168:1975): avc: denied { read write } for pid=8015 comm="syz.5.1269" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.229925][ T28] audit: type=1400 audit(1774681933.168:1976): avc: denied { open } for pid=8015 comm="syz.5.1269" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.261057][ T28] audit: type=1400 audit(1774681933.168:1977): avc: denied { ioctl } for pid=8015 comm="syz.5.1269" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.289067][ T28] audit: type=1400 audit(1774681933.228:1978): avc: denied { bind } for pid=8012 comm="syz.1.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.299364][ T7971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.311749][ T28] audit: type=1400 audit(1774681933.228:1979): avc: denied { sys_module } for pid=8012 comm="syz.1.1268" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 188.311789][ T28] audit: type=1400 audit(1774681933.228:1980): avc: denied { module_request } for pid=8012 comm="syz.1.1268" kmod="vcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 188.311868][ T28] audit: type=1400 audit(1774681933.228:1981): avc: denied { create } for pid=8012 comm="syz.1.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.311925][ T28] audit: type=1400 audit(1774681933.228:1982): avc: denied { write } for pid=8012 comm="syz.1.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.311952][ T28] audit: type=1400 audit(1774681933.268:1983): avc: denied { create } for pid=8017 comm="syz.3.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 188.534725][ T8022] loop7: detected capacity change from 16384 to 0 [ 188.576223][ T8032] loop6: detected capacity change from 0 to 2048 [ 188.618190][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 188.777249][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1276'. [ 188.786896][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1276'. [ 188.808165][ T8044] vlan3: entered promiscuous mode [ 188.824208][ T8044] syz_tun: entered promiscuous mode [ 188.848754][ T8046] syz_tun: entered allmulticast mode [ 188.857362][ T8046] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 188.867008][ T8046] mroute: pending queue full, dropping entries [ 189.404528][ T8055] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1278'. [ 189.964266][ T8058] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1280'. [ 190.000781][ T8056] loop5: detected capacity change from 0 to 1764 [ 190.009543][ T8056] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 190.948046][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1275'. [ 191.933615][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 191.933635][ T28] audit: type=1400 audit(1774681936.818:2027): avc: denied { create } for pid=8051 comm="syz.5.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.017958][ T8045] syz_tun: left allmulticast mode [ 192.038538][ T28] audit: type=1400 audit(1774681936.848:2028): avc: denied { getopt } for pid=8051 comm="syz.5.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.089691][ T28] audit: type=1400 audit(1774681936.938:2029): avc: denied { firmware_load } for pid=8051 comm="syz.5.1279" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 192.164315][ T28] audit: type=1400 audit(1774681937.098:2030): avc: denied { map_create } for pid=8065 comm="syz.3.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 192.223363][ T28] audit: type=1400 audit(1774681937.098:2031): avc: denied { map_read map_write } for pid=8065 comm="syz.3.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 192.258126][ T28] audit: type=1400 audit(1774681937.178:2032): avc: denied { mount } for pid=8068 comm="syz.1.1282" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 192.337902][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'. [ 192.757220][ T28] audit: type=1400 audit(1774681937.728:2033): avc: denied { create } for pid=8073 comm="syz.5.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.780215][ T28] audit: type=1400 audit(1774681937.728:2034): avc: denied { connect } for pid=8073 comm="syz.5.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.801517][ T28] audit: type=1400 audit(1774681937.728:2035): avc: denied { setopt } for pid=8073 comm="syz.5.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.822298][ T28] audit: type=1400 audit(1774681937.728:2036): avc: denied { create } for pid=8073 comm="syz.5.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.847438][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 192.858591][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'. [ 192.893261][ T8080] netlink: 'syz.2.1285': attribute type 13 has an invalid length. [ 192.901404][ T8080] netlink: 'syz.2.1285': attribute type 12 has an invalid length. [ 192.984614][ T8089] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 193.027087][ T8095] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 193.079338][ T8097] xt_hashlimit: max too large, truncated to 1048576 [ 193.093039][ T8097] xt_hashlimit: Unknown mode mask 20000, kernel too old? [ 193.107177][ T8081] loop5: detected capacity change from 0 to 2048 [ 193.181021][ T8104] loop6: detected capacity change from 0 to 512 [ 193.217694][ T8114] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1294'. [ 193.222840][ T8104] EXT4-fs: Ignoring removed nobh option [ 193.223511][ T8081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.247520][ T8104] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 193.328058][ T8117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1296'. [ 193.381601][ T8116] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8116 comm=syz.1.1296 [ 193.411588][ T8104] EXT4-fs (loop6): 1 truncate cleaned up [ 193.423422][ T8104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.106155][ T4268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.128965][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1292'. [ 194.168501][ T8137] bridge_slave_1 (unregistering): left allmulticast mode [ 194.269425][ T8137] bridge_slave_1 (unregistering): left promiscuous mode [ 194.425922][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.599088][ T5795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.649456][ T8146] lo speed is unknown, defaulting to 1000 [ 194.860487][ T8155] loop5: detected capacity change from 0 to 164 [ 194.872561][ T8155] rock: directory entry would overflow storage [ 194.879829][ T8155] rock: sig=0x66, size=4, remaining=3 [ 194.995255][ T8159] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1306'. [ 195.197310][ T8172] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1313'. [ 195.435671][ T8178] lo speed is unknown, defaulting to 1000 [ 196.002472][ T8186] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1317'. [ 196.090408][ T8186] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1317'. [ 196.614993][ T8211] loop6: detected capacity change from 0 to 1764 [ 196.623490][ T8211] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 197.183980][ T8228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8228 comm=syz.2.1327 [ 197.200549][ T28] kauditd_printk_skb: 170 callbacks suppressed [ 197.201577][ T28] audit: type=1400 audit(1774682198.175:2207): avc: denied { name_bind } for pid=8225 comm="syz.2.1327" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 197.431522][ T8232] loop5: detected capacity change from 0 to 512 [ 197.535772][ T8232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.549439][ T8232] ext4 filesystem being mounted at /175/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.685757][ T4268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.794388][ T28] audit: type=1400 audit(1774682198.545:2208): avc: denied { block_suspend } for pid=8234 comm="syz.3.1330" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 197.818884][ T28] audit: type=1400 audit(1774682198.555:2209): avc: denied { name_bind } for pid=8234 comm="syz.3.1330" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 197.842660][ T28] audit: type=1400 audit(1774682198.555:2210): avc: denied { node_bind } for pid=8234 comm="syz.3.1330" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 197.870604][ T8246] netlink: 'syz.5.1331': attribute type 3 has an invalid length. [ 197.889297][ T28] audit: type=1400 audit(1774682198.865:2211): avc: denied { read write } for pid=8245 comm="syz.5.1331" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 197.923077][ T28] audit: type=1400 audit(1774682198.865:2212): avc: denied { open } for pid=8245 comm="syz.5.1331" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 197.961047][ T8230] loop6: detected capacity change from 0 to 1024 [ 197.968413][ T28] audit: type=1400 audit(1774682198.895:2213): avc: denied { ioctl } for pid=8245 comm="syz.5.1331" path="socket:[20171]" dev="sockfs" ino=20171 ioctlcmd=0x5875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.020534][ T28] audit: type=1400 audit(1774682198.895:2214): avc: denied { write } for pid=8245 comm="syz.5.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 198.063123][ T8230] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 198.070083][ T8252] __nla_validate_parse: 5 callbacks suppressed [ 198.070097][ T8252] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1334'. [ 198.071562][ T8230] System zones: 0-1, 3-36 [ 198.118586][ T8230] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1328: bad orphan inode 134217728 [ 198.131516][ T8230] loop6: lost filesystem error report for type 5 error -117 [ 198.139695][ T8230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.198624][ T5795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.439886][ T28] audit: type=1400 audit(1774682199.385:2215): avc: denied { name_bind } for pid=8269 comm="syz.1.1341" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 198.489520][ T8276] loop6: detected capacity change from 0 to 1764 [ 198.498260][ T8276] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 199.032349][ T8287] infiniband !yz2: set down [ 199.038224][ T8287] infiniband !yz2: added veth0_to_batadv [ 199.051588][ T8287] RDS/IB: !yz2: added [ 199.056690][ T8287] smc: adding ib device !yz2 with port count 1 [ 199.063222][ T8287] smc: ib device !yz2 port 1 has no pnetid [ 199.136330][ T28] audit: type=1400 audit(1774682200.105:2216): avc: denied { relabelfrom } for pid=8284 comm="syz.5.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 199.151394][ T8289] syzkaller0: entered promiscuous mode [ 199.174478][ T8289] syzkaller0: entered allmulticast mode [ 199.190968][ T8293] loop6: detected capacity change from 0 to 512 [ 199.238432][ T8293] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.1345: Failed to acquire dquot type 1 [ 199.260553][ T8293] loop6: lost filesystem error report for type 5 error -5 [ 199.262918][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 199.276484][ C1] EXT4-fs (loop6): last error at time 1774682200: ext4_acquire_dquot:7001 [ 199.286344][ T8293] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.1345: Failed to acquire dquot type 1 [ 199.355146][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1346'. [ 199.374246][ T8293] loop6: lost filesystem error report for type 5 error -5 [ 199.374541][ T8293] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1345: bg 0: block 248: padding at end of block bitmap is not set [ 199.453030][ T8293] loop6: lost filesystem error report for type 5 error -117 [ 199.453192][ T8293] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 199.495586][ T8293] loop6: lost filesystem error report for type 5 error -117 [ 199.496706][ T8293] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.1345: Failed to acquire dquot type 1 [ 199.537009][ T8303] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1349'. [ 199.552993][ T8293] loop6: lost filesystem error report for type 5 error -5 [ 199.553175][ T8293] EXT4-fs (loop6): 1 orphan inode deleted [ 199.573705][ T8293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.590836][ T8293] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.704632][ T8317] lo speed is unknown, defaulting to 1000 [ 199.795800][ T5795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.960598][ T8325] loop6: detected capacity change from 0 to 1024 [ 199.997439][ T8325] EXT4-fs: inline encryption not supported [ 200.015295][ T8325] ext4: Unknown parameter 'noacl' [ 200.344938][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1359'. [ 200.494946][ T8345] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1362'. [ 200.809366][ T8369] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1360'. [ 200.993434][ T5831] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.035741][ T8379] dummy0: entered promiscuous mode [ 201.040974][ T8379] macvtap0: entered promiscuous mode [ 201.056737][ T8379] dummy0: left promiscuous mode [ 201.118187][ T5831] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.177997][ T8370] lo speed is unknown, defaulting to 1000 [ 201.199929][ T5831] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.257418][ T5831] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.471896][ T5831] bridge_slave_1: left allmulticast mode [ 201.498419][ T5831] bridge_slave_1: left promiscuous mode [ 201.515603][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.542037][ T5831] bridge_slave_0: left allmulticast mode [ 201.548920][ T5831] bridge_slave_0: left promiscuous mode [ 201.628117][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.698260][ T5831] bond2 (unregistering): (slave gretap1): Releasing active interface [ 201.708330][ T1033] SELinux: failure in sel_netif_sid_slow(), invalid network interface (87) [ 201.776729][ T8397] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1377'. [ 201.827086][ T8390] No source specified [ 201.832357][ T8390] netlink: 'syz.6.1375': attribute type 2 has an invalid length. [ 201.841176][ T8390] netlink: 'syz.6.1375': attribute type 11 has an invalid length. [ 201.864257][ T8390] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1375'. [ 201.909432][ T5831] dvmrp1 (unregistering): left allmulticast mode [ 201.976358][ T5831] bond2 (unregistering): (slave bridge1): Releasing active interface [ 202.004711][ T8408] xt_hashlimit: max too large, truncated to 1048576 [ 202.011554][ T8408] xt_hashlimit: Unknown mode mask 20000, kernel too old? [ 202.076122][ T5831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.087375][ T5831] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 202.099572][ T5831] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 202.110216][ T5831] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 202.122194][ T5831] bond0 (unregistering): Released all slaves [ 202.131263][ T5831] bond1 (unregistering): Released all slaves [ 202.139712][ T5831] bond2 (unregistering): Released all slaves [ 202.157838][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1385'. [ 202.167557][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1385'. [ 202.187289][ T8417] SELinux: Context Žž is not valid (left unmapped). [ 202.188585][ T8386] lo speed is unknown, defaulting to 1000 [ 202.203918][ T28] kauditd_printk_skb: 180 callbacks suppressed [ 202.203933][ T28] audit: type=1400 audit(1774682203.185:2391): avc: denied { search } for pid=3039 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.255444][ T8370] chnl_net:caif_netlink_parms(): no params data found [ 202.269147][ T28] audit: type=1400 audit(1774682203.185:2392): avc: denied { search } for pid=3039 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.292342][ T28] audit: type=1400 audit(1774682203.185:2393): avc: denied { search } for pid=3039 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.340917][ T28] audit: type=1400 audit(1774682203.185:2394): avc: denied { read } for pid=3039 comm="dhcpcd" name="n38" dev="tmpfs" ino=6262 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 202.372881][ T28] audit: type=1400 audit(1774682203.185:2395): avc: denied { open } for pid=3039 comm="dhcpcd" path="/run/udev/data/n38" dev="tmpfs" ino=6262 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 202.414010][ T28] audit: type=1400 audit(1774682203.185:2396): avc: denied { getattr } for pid=3039 comm="dhcpcd" path="/run/udev/data/n38" dev="tmpfs" ino=6262 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 202.473073][ T28] audit: type=1400 audit(1774682203.185:2397): avc: denied { unlink } for pid=3931 comm="syz-executor" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E9E [ 202.515816][ T28] audit: type=1400 audit(1774682203.305:2398): avc: denied { read open } for pid=8424 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.607777][ T28] audit: type=1400 audit(1774682203.305:2399): avc: denied { getattr } for pid=8424 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.636574][ T28] audit: type=1400 audit(1774682203.325:2400): avc: denied { bind } for pid=8429 comm="syz.2.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.812722][ T5831] hsr_slave_0: left promiscuous mode [ 202.820235][ T5831] hsr_slave_1: left promiscuous mode [ 202.827136][ T5831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.839330][ T5831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.837106][ T5831] team_slave_1 (unregistering): left promiscuous mode [ 203.842806][ T359] smc: removing ib device !yz2 [ 203.848975][ T5831] team0 (unregistering): Port device team_slave_1 removed [ 203.860116][ T5831] team_slave_0 (unregistering): left promiscuous mode [ 203.896179][ T8462] loop6: detected capacity change from 0 to 128 [ 203.904831][ T8462] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 203.938280][ T5831] team0 (unregistering): Port device team_slave_0 removed [ 204.091428][ T8462] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 204.234789][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.258845][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.286439][ T8370] bridge_slave_0: entered allmulticast mode [ 204.317774][ T8370] bridge_slave_0: entered promiscuous mode [ 204.342111][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.369205][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.407501][ T8370] bridge_slave_1: entered allmulticast mode [ 204.433713][ T8370] bridge_slave_1: entered promiscuous mode [ 204.508321][ T8370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.536330][ T8480] __nla_validate_parse: 3 callbacks suppressed [ 204.536347][ T8480] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1399'. [ 204.562001][ T8370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.625463][ T8370] team0: Port device team_slave_0 added [ 204.647379][ T8370] team0: Port device team_slave_1 added [ 204.681140][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.705002][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.737657][ T8370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.752065][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1401'. [ 204.764310][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.772427][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.802090][ T8370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.826576][ T8486] batadv_slave_1: entered promiscuous mode [ 204.835966][ T8492] 9p: Bad value for 'rfdno' [ 204.894896][ T8490] batadv_slave_1 (unregistering): left promiscuous mode [ 204.984803][ T8501] xt_hashlimit: max too large, truncated to 1048576 [ 205.003948][ T8501] xt_hashlimit: Unknown mode mask 20000, kernel too old? [ 205.060994][ T8370] hsr_slave_0: entered promiscuous mode [ 205.075329][ T8370] hsr_slave_1: entered promiscuous mode [ 205.088251][ T8370] debugfs: 'hsr0' already exists in 'hsr' [ 205.097735][ T8370] Cannot create hsr debugfs directory [ 205.253741][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1412'. [ 205.463016][ T5831] IPVS: stop unused estimator thread 0... [ 205.526401][ T8541] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20000 [ 205.534603][ T8541] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20265 [ 205.537969][ T8370] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 205.581294][ T8370] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 205.600393][ T8370] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 205.617522][ T8370] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 205.738869][ T8370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.768850][ T8370] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.795692][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.802931][ T5832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.838735][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.846039][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.887348][ T8370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.007155][ T8370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.015768][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'. [ 206.403506][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1429'. [ 206.464874][ T8370] veth0_vlan: entered promiscuous mode [ 206.483258][ T8370] veth1_vlan: entered promiscuous mode [ 206.524632][ T8370] veth0_macvtap: entered promiscuous mode [ 206.535651][ T8370] veth1_macvtap: entered promiscuous mode [ 206.556035][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.571934][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.596170][ T6426] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.607073][ T6426] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.624251][ T6426] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.666245][ T6426] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.983086][ T8678] dvmrp1: entered allmulticast mode [ 207.080896][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1443'. [ 207.097082][ T8658] loop7: detected capacity change from 0 to 512 [ 207.112745][ T8658] EXT4-fs: Ignoring removed oldalloc option [ 207.131021][ T8658] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 207.160676][ T8658] EXT4-fs (loop7): 1 truncate cleaned up [ 207.182783][ T8658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.217652][ T28] kauditd_printk_skb: 363 callbacks suppressed [ 207.217667][ T28] audit: type=1400 audit(1774682208.195:2764): avc: denied { setopt } for pid=8695 comm="syz.3.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 207.381687][ T28] audit: type=1400 audit(1774682208.235:2765): avc: denied { write } for pid=8695 comm="syz.3.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.556681][ T8702] macvlan0: left promiscuous mode [ 207.563605][ T8702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1445'. [ 207.594026][ T8702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1445'. [ 207.675829][ T8702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1445'. [ 207.677637][ T8370] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.813622][ T28] audit: type=1400 audit(1774682208.795:2766): avc: denied { ioctl } for pid=8710 comm="syz.6.1448" path="socket:[21875]" dev="sockfs" ino=21875 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.866224][ T28] audit: type=1400 audit(1774682208.845:2767): avc: denied { create } for pid=8710 comm="syz.6.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 207.895068][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1448'. [ 208.002673][ T8721] Process accounting resumed [ 208.027884][ T28] audit: type=1326 audit(1774682209.005:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 208.039900][ T8729] xt_hashlimit: max too large, truncated to 1048576 [ 208.059084][ T8729] xt_hashlimit: Unknown mode mask 20000, kernel too old? [ 208.081198][ T28] audit: type=1326 audit(1774682209.005:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 208.128768][ T8731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.136119][ T8731] IPv6: NLM_F_CREATE should be set when creating new route [ 208.162178][ T28] audit: type=1326 audit(1774682209.005:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 208.186615][ T28] audit: type=1326 audit(1774682209.005:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 208.211011][ T28] audit: type=1326 audit(1774682209.005:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 208.235069][ T28] audit: type=1326 audit(1774682209.005:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 208.370188][ T8742] loop6: detected capacity change from 0 to 8192 [ 208.434549][ T8742] loop6: p1 p2 p3 p4 [ 208.438800][ T8742] loop6: p1 size 196608 extends beyond EOD, truncated [ 208.454719][ T8742] loop6: p2 size 150994944 extends beyond EOD, truncated [ 208.465981][ T8742] loop6: p3 size 66846464 extends beyond EOD, truncated [ 208.475141][ T8742] loop6: p4 size 479744 extends beyond EOD, truncated [ 208.510810][ T8755] netlink: 'syz.3.1463': attribute type 1 has an invalid length. [ 208.566350][ T8755] bond1: entered promiscuous mode [ 208.571975][ T8755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.672748][ T8777] tipc: Started in network mode [ 208.683058][ T8777] tipc: Node identity , cluster identity 4711 [ 208.689255][ T8777] tipc: Failed to set node id, please configure manually [ 208.692691][ T8780] xt_hashlimit: max too large, truncated to 1048576 [ 208.697634][ T8777] tipc: Enabling of bearer rejected, failed to enable media [ 208.703960][ T8780] xt_hashlimit: Unknown mode mask 20000, kernel too old? [ 208.745191][ T8782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8782 comm=syz.6.1473 [ 208.760826][ T8782] loop6: detected capacity change from 0 to 512 [ 208.781033][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.801255][ T8787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.814695][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.841794][ T8787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.869563][ T8783] lo speed is unknown, defaulting to 1000 [ 208.895927][ T8799] loop7: detected capacity change from 0 to 128 [ 209.000165][ T8813] tipc: Enabling of bearer rejected, failed to enable media [ 209.042263][ T8819] xt_hashlimit: max too large, truncated to 1048576 [ 209.068538][ T8819] xt_hashlimit: Unknown mode mask 20000, kernel too old? [ 209.204957][ T8833] sock: sock_timestamping_bind_phc: sock not bind to device [ 209.604726][ T8841] __nla_validate_parse: 8 callbacks suppressed [ 209.604819][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1491'. [ 209.655041][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1491'. [ 210.144174][ T8931] xt_hashlimit: max too large, truncated to 1048576 [ 210.163060][ T8931] xt_hashlimit: Unknown mode mask 20000, kernel too old? [ 210.820338][ T8954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1508'. [ 213.499209][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1517'. [ 213.545229][ T8980] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1517'. [ 213.564679][ T28] kauditd_printk_skb: 616 callbacks suppressed [ 213.564693][ T28] audit: type=1400 audit(1774682214.545:3390): avc: denied { shutdown } for pid=8983 comm="syz.2.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.640889][ T8974] loop6: detected capacity change from 0 to 128 [ 213.649323][ T8980] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1517'. [ 213.674168][ T28] audit: type=1326 audit(1774682214.585:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.7.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 213.800693][ T28] audit: type=1326 audit(1774682214.585:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.7.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 213.921589][ T28] audit: type=1326 audit(1774682214.585:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.7.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 214.025334][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'. [ 214.042932][ T28] audit: type=1326 audit(1774682214.585:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.7.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 214.102661][ T8974] lo speed is unknown, defaulting to 1000 [ 214.209497][ T28] audit: type=1326 audit(1774682214.585:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.7.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 214.233476][ T28] audit: type=1326 audit(1774682214.595:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.7.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 214.257139][ T28] audit: type=1326 audit(1774682214.595:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.7.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 214.281086][ T28] audit: type=1326 audit(1774682214.605:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.7.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 214.323525][ T28] audit: type=1326 audit(1774682214.605:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.7.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 214.577192][ T9009] loop7: detected capacity change from 0 to 2048 [ 214.725297][ T9009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.860342][ T9027] bond0: (slave team0): Releasing backup interface [ 214.880513][ T9009] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9009 comm=syz.7.1526 [ 214.895281][ T9009] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9009 comm=syz.7.1526 [ 215.045459][ T9027] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.085618][ T9023] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1526'. [ 215.116941][ T9023] tmpfs: Bad value for 'context' [ 215.380301][ T8370] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.816592][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'. [ 215.826937][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 216.455313][ T9087] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46 sclass=netlink_tcpdiag_socket pid=9087 comm=syz.1.1551 [ 216.659140][ T9096] loop7: detected capacity change from 0 to 164 [ 216.749626][ T9096] isofs_fill_super: root inode is not a directory. Corrupted media? [ 216.793668][ T9099] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 216.801646][ T9099] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 216.909714][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1560'. [ 217.014676][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 217.054614][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1564'. [ 217.091575][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1564'. [ 217.463512][ T9174] lo speed is unknown, defaulting to 1000 [ 217.976013][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1580'. [ 217.995203][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1580'. [ 218.341992][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1594'. [ 218.746828][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 218.746866][ T28] audit: type=1400 audit(1774682219.725:3478): avc: denied { create } for pid=9285 comm="syz.2.1601" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.779213][ T28] audit: type=1400 audit(1774682219.725:3479): avc: denied { write } for pid=9285 comm="syz.2.1601" name="file0" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.804374][ T28] audit: type=1400 audit(1774682219.725:3480): avc: denied { open } for pid=9285 comm="syz.2.1601" path="/315/file0" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.829732][ T28] audit: type=1400 audit(1774682219.725:3481): avc: denied { ioctl } for pid=9285 comm="syz.2.1601" path="/315/file0" dev="tmpfs" ino=1681 ioctlcmd=0x70cf scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.855297][ T28] audit: type=1400 audit(1774682219.735:3482): avc: denied { unlink } for pid=3931 comm="syz-executor" name="file0" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.010245][ T9297] loop6: detected capacity change from 0 to 128 [ 219.016899][ T9297] ext3: Unknown parameter 'audit' [ 219.028062][ T9297] loop6: detected capacity change from 0 to 128 [ 219.039377][ T28] audit: type=1400 audit(1774682220.015:3483): avc: denied { map } for pid=9296 comm="syz.6.1604" path="/170/file0" dev="tmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 220.026808][ T9310] netlink: 'syz.6.1605': attribute type 4 has an invalid length. [ 220.086811][ T28] audit: type=1400 audit(1774682221.065:3484): avc: denied { listen } for pid=9311 comm="syz.1.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 220.185575][ T9314] __nla_validate_parse: 7 callbacks suppressed [ 220.185595][ T9314] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1609'. [ 220.224701][ T9314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1609'. [ 221.232969][ T28] audit: type=1400 audit(1774682222.185:3485): avc: denied { ioctl } for pid=9333 comm="syz.2.1617" path="socket:[23598]" dev="sockfs" ino=23598 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 221.577260][ T9339] loop7: detected capacity change from 0 to 1764 [ 221.632008][ T9339] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 222.210981][ T9340] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 222.301437][ T9344] loop6: detected capacity change from 0 to 512 [ 222.356250][ T9344] EXT4-fs: inline encryption not supported [ 222.364140][ T9344] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 222.373540][ T9344] EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (256 blocks) [ 222.487464][ T28] audit: type=1400 audit(1774682223.415:3486): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 222.524622][ T28] audit: type=1400 audit(1774682223.495:3487): avc: denied { create } for pid=9357 comm="syz.7.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 222.540089][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1623'. [ 222.561613][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1623'. [ 222.581201][ T9359] vlan2: entered promiscuous mode [ 222.587691][ T9359] ip6gretap0: entered promiscuous mode [ 222.950132][ T9376] loop6: detected capacity change from 0 to 4096 [ 223.075470][ T9376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.757443][ T9401] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 223.789106][ T28] kauditd_printk_skb: 212 callbacks suppressed [ 223.789137][ T28] audit: type=1400 audit(1774682224.735:3700): avc: denied { mount } for pid=9400 comm="syz.3.1637" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 223.857341][ T9410] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1640'. [ 223.876357][ T9376] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 223.884145][ T28] audit: type=1400 audit(1774682224.815:3701): avc: denied { write } for pid=9407 comm="syz.7.1641" name="dev" dev="proc" ino=4026532794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 223.884677][ T9410] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1640'. [ 223.954174][ T28] audit: type=1400 audit(1774682224.855:3702): avc: denied { remount } for pid=9367 comm="syz.6.1627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 224.014043][ T9410] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1640'. [ 224.094462][ T28] audit: type=1400 audit(1774682225.075:3703): avc: denied { bind } for pid=9412 comm="syz.2.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.154123][ T28] audit: type=1400 audit(1774682225.095:3704): avc: denied { write } for pid=9412 comm="syz.2.1642" path="socket:[26239]" dev="sockfs" ino=26239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.305580][ T28] audit: type=1400 audit(1774682225.285:3705): avc: denied { map } for pid=9430 comm="syz.3.1647" path="socket:[26254]" dev="sockfs" ino=26254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.306334][ T9437] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1649'. [ 224.440654][ T28] audit: type=1400 audit(1774682225.285:3706): avc: denied { accept } for pid=9430 comm="syz.3.1647" path="socket:[26254]" dev="sockfs" ino=26254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.525603][ T9440] loop7: detected capacity change from 0 to 128 [ 224.532705][ T9440] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 224.631206][ T9442] tipc: Enabling of bearer rejected, failed to enable media [ 224.803891][ T28] audit: type=1400 audit(1774682225.775:3707): avc: denied { setopt } for pid=9449 comm="syz.1.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 224.837605][ T28] audit: type=1400 audit(1774682225.775:3708): avc: denied { connect } for pid=9449 comm="syz.1.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 224.925246][ T9453] debugfs: Bad value for 'uid' [ 224.930190][ T9453] debugfs: Bad value for 'uid' [ 224.944085][ T28] audit: type=1400 audit(1774682225.905:3709): avc: denied { connect } for pid=9452 comm="syz.1.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.063447][ T9459] lo speed is unknown, defaulting to 1000 [ 225.272577][ T9477] loop7: detected capacity change from 0 to 2048 [ 225.359952][ T9477] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 226.528379][ T9510] syzkaller0: entered promiscuous mode [ 226.533903][ T9510] syzkaller0: entered allmulticast mode [ 226.659356][ T5795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.890738][ T9516] team0 (unregistering): Port device team_slave_0 removed [ 227.096183][ T9516] team0 (unregistering): Port device team_slave_1 removed [ 227.199656][ T9522] loop6: detected capacity change from 0 to 1024 [ 227.237694][ T9522] EXT4-fs: inline encryption not supported [ 227.298033][ T9529] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.1679'. [ 227.319380][ T9529] bridge_slave_1: default FDB implementation only supports local addresses [ 227.341071][ T9522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 227.362193][ T9522] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.405137][ T9522] sit0: entered promiscuous mode [ 227.412421][ T9522] netlink: 'syz.6.1676': attribute type 1 has an invalid length. [ 227.421511][ T9522] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1676'. [ 227.481720][ T5795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 227.492513][ T9540] syzkaller0: entered promiscuous mode [ 227.502983][ T9540] syzkaller0: entered allmulticast mode [ 227.587261][ T9544] netlink: 'syz.3.1683': attribute type 8 has an invalid length. [ 227.637276][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1684'. [ 227.651828][ T9549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1683'. [ 227.715546][ T9549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1683'. [ 228.351587][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 228.397721][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 228.667774][ T9581] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1694'. [ 228.757436][ T9587] lo speed is unknown, defaulting to 1000 [ 229.521845][ T9598] loop6: detected capacity change from 0 to 1024 [ 229.529965][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 229.529982][ T28] audit: type=1326 audit(1774682230.505:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9599 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 229.604939][ T9603] audit: audit_backlog=65 > audit_backlog_limit=64 [ 229.611471][ T9603] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 229.611501][ T28] audit: type=1326 audit(1774682230.535:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9599 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 229.641105][ T9603] audit: backlog limit exceeded [ 229.712532][ T28] audit: type=1326 audit(1774682230.535:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9599 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 229.772940][ T28] audit: type=1326 audit(1774682230.535:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9599 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 229.837064][ T28] audit: type=1326 audit(1774682230.535:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9599 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 229.901057][ T28] audit: type=1326 audit(1774682230.535:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9599 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 229.971868][ T28] audit: type=1326 audit(1774682230.545:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9599 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d76dcc799 code=0x7ffc0000 [ 230.066769][ T9612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1705'. [ 230.350099][ T9616] FAULT_INJECTION: forcing a failure. [ 230.350099][ T9616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.381303][ T9616] CPU: 0 UID: 0 PID: 9616 Comm: syz.6.1706 Tainted: G W syzkaller #0 PREEMPT(full) [ 230.381403][ T9616] Tainted: [W]=WARN [ 230.381408][ T9616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.381418][ T9616] Call Trace: [ 230.381425][ T9616] [ 230.381433][ T9616] __dump_stack+0x1d/0x30 [ 230.381460][ T9616] dump_stack_lvl+0x95/0xd0 [ 230.381576][ T9616] dump_stack+0x15/0x1b [ 230.381608][ T9616] should_fail_ex+0x263/0x280 [ 230.381713][ T9616] should_fail+0xb/0x20 [ 230.381734][ T9616] should_fail_usercopy+0x1a/0x20 [ 230.381764][ T9616] _copy_to_user+0x20/0xa0 [ 230.381841][ T9616] simple_read_from_buffer+0xb5/0x130 [ 230.381863][ T9616] proc_fail_nth_read+0x10e/0x150 [ 230.381987][ T9616] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.382021][ T9616] vfs_read+0x1ab/0x7f0 [ 230.382063][ T9616] ? __rcu_read_unlock+0x4e/0x70 [ 230.382088][ T9616] ? __fget_files+0x184/0x1c0 [ 230.382119][ T9616] ? mutex_lock+0x57/0x90 [ 230.382157][ T9616] ksys_read+0xdc/0x1a0 [ 230.382177][ T9616] __x64_sys_read+0x40/0x50 [ 230.382265][ T9616] x64_sys_call+0x2886/0x3020 [ 230.382296][ T9616] do_syscall_64+0x12c/0x370 [ 230.382389][ T9616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.382414][ T9616] RIP: 0033:0x7f870e46cfce [ 230.382432][ T9616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.382484][ T9616] RSP: 002b:00007f870cee5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.382589][ T9616] RAX: ffffffffffffffda RBX: 00007f870cee66c0 RCX: 00007f870e46cfce [ 230.382605][ T9616] RDX: 000000000000000f RSI: 00007f870cee60a0 RDI: 0000000000000004 [ 230.382620][ T9616] RBP: 00007f870cee6090 R08: 0000000000000000 R09: 0000000000000000 [ 230.382635][ T9616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.382649][ T9616] R13: 00007f870e726128 R14: 00007f870e726090 R15: 00007ffc56a9a358 [ 230.382747][ T9616] [ 230.669831][ T9627] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1711'. [ 230.781026][ T9643] loop6: detected capacity change from 0 to 256 [ 230.860955][ T9618] syz.7.1708 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 230.914081][ T9618] CPU: 1 UID: 0 PID: 9618 Comm: syz.7.1708 Tainted: G W syzkaller #0 PREEMPT(full) [ 230.914218][ T9618] Tainted: [W]=WARN [ 230.914227][ T9618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.914252][ T9618] Call Trace: [ 230.914261][ T9618] [ 230.914271][ T9618] __dump_stack+0x1d/0x30 [ 230.914305][ T9618] dump_stack_lvl+0x95/0xd0 [ 230.914363][ T9618] dump_stack+0x15/0x1b [ 230.914389][ T9618] dump_header+0x80/0x240 [ 230.914419][ T9618] oom_kill_process+0x295/0x350 [ 230.914468][ T9618] out_of_memory+0x97d/0xb80 [ 230.914492][ T9618] try_charge_memcg+0x62e/0xa10 [ 230.914540][ T9618] obj_cgroup_charge_pages+0x23/0xc0 [ 230.914615][ T9618] __memcg_kmem_charge_page+0x9e/0x170 [ 230.914653][ T9618] __alloc_frozen_pages_noprof+0x18a/0x360 [ 230.914721][ T9618] alloc_pages_mpol+0xb3/0x260 [ 230.914808][ T9618] alloc_pages_noprof+0x8f/0x130 [ 230.914884][ T9618] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 230.914926][ T9618] __kvmalloc_node_noprof+0x3d4/0x650 [ 230.915013][ T9618] ? ip_set_alloc+0x24/0x30 [ 230.915044][ T9618] ? ip_set_alloc+0x24/0x30 [ 230.915152][ T9618] ? __kmalloc_cache_noprof+0x18a/0x410 [ 230.915245][ T9618] ip_set_alloc+0x24/0x30 [ 230.915279][ T9618] hash_netiface_create+0x282/0x740 [ 230.915318][ T9618] ? __pfx_hash_netiface_create+0x10/0x10 [ 230.915361][ T9618] ip_set_create+0x3cf/0x970 [ 230.915404][ T9618] ? __nla_parse+0x40/0x60 [ 230.915437][ T9618] nfnetlink_rcv_msg+0x509/0x5d0 [ 230.915603][ T9618] netlink_rcv_skb+0x123/0x220 [ 230.915642][ T9618] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 230.915683][ T9618] nfnetlink_rcv+0x167/0x1720 [ 230.915726][ T9618] ? __kfree_skb+0x109/0x150 [ 230.915824][ T9618] ? nlmon_xmit+0x4f/0x60 [ 230.915849][ T9618] ? consume_skb+0x4b/0x160 [ 230.915884][ T9618] ? nlmon_xmit+0x4f/0x60 [ 230.915911][ T9618] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 230.915955][ T9618] ? __dev_queue_xmit+0x136c/0x1f20 [ 230.915988][ T9618] ? __dev_queue_xmit+0x148/0x1f20 [ 230.916032][ T9618] ? ref_tracker_free+0x37d/0x3e0 [ 230.916068][ T9618] ? __netlink_deliver_tap+0x4dc/0x500 [ 230.916117][ T9618] netlink_unicast+0x5c0/0x690 [ 230.916165][ T9618] netlink_sendmsg+0x5c8/0x6f0 [ 230.916203][ T9618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.916250][ T9618] ____sys_sendmsg+0x563/0x5b0 [ 230.916318][ T9618] ___sys_sendmsg+0x195/0x1e0 [ 230.916362][ T9618] __x64_sys_sendmsg+0xd4/0x160 [ 230.916402][ T9618] x64_sys_call+0x194c/0x3020 [ 230.916467][ T9618] do_syscall_64+0x12c/0x370 [ 230.916551][ T9618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.916637][ T9618] RIP: 0033:0x7f27323bc799 [ 230.916708][ T9618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.916727][ T9618] RSP: 002b:00007f2730e17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.916808][ T9618] RAX: ffffffffffffffda RBX: 00007f2732635fa0 RCX: 00007f27323bc799 [ 230.916903][ T9618] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 230.916920][ T9618] RBP: 00007f2732452c99 R08: 0000000000000000 R09: 0000000000000000 [ 230.916937][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.917022][ T9618] R13: 00007f2732636038 R14: 00007f2732635fa0 R15: 00007fff591a97c8 [ 230.917043][ T9618] [ 230.917319][ T9618] memory: usage 282752kB, limit 307200kB, failcnt 489 [ 231.014835][ T9643] FAT-fs (loop6): Directory bread(block 64) failed [ 231.068459][ T9618] memory+swap: usage 270264kB, limit 9007199254740988kB, failcnt 0 [ 231.108572][ T9643] FAT-fs (loop6): Directory bread(block 65) failed [ 231.286637][ T9618] kmem: usage 138696kB, limit 9007199254740988kB, failcnt 0 [ 231.335867][ T9643] FAT-fs (loop6): Directory bread(block 66) failed [ 231.337070][ T9618] Memory cgroup stats for /syz7: [ 231.342545][ T9643] FAT-fs (loop6): Directory bread(block 67) failed [ 231.346573][ T9618] cache 2342912 [ 231.362922][ T9648] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 231.402972][ T9643] FAT-fs (loop6): Directory bread(block 68) failed [ 231.409833][ T9643] FAT-fs (loop6): Directory bread(block 69) failed [ 231.416658][ T9643] FAT-fs (loop6): Directory bread(block 70) failed [ 231.423440][ T9643] FAT-fs (loop6): Directory bread(block 71) failed [ 231.430184][ T9643] FAT-fs (loop6): Directory bread(block 72) failed [ 231.437478][ T9618] rss 45056 [ 231.440858][ T9618] shmem 2342912 [ 231.444757][ T9618] mapped_file 0 [ 231.448381][ T9618] dirty 0 [ 231.451493][ T9618] writeback 0 [ 231.461302][ T9618] workingset_refault_anon 28 [ 231.466362][ T9618] workingset_refault_file 0 [ 231.471023][ T9643] FAT-fs (loop6): Directory bread(block 73) failed [ 231.478152][ T9618] swap 12226560 [ 231.481700][ T9618] swapcached 12300288 [ 231.486262][ T9618] pgpgin 30415 [ 231.489819][ T9618] pgpgout 29825 [ 231.493526][ T9618] pgfault 25465 [ 231.497127][ T9618] pgmajfault 9 [ 231.500647][ T9618] inactive_anon 282624 [ 231.506717][ T9618] active_anon 2129920 [ 231.511295][ T9618] inactive_file 0 [ 231.515737][ T9618] active_file 0 [ 231.526761][ T9618] unevictable 0 [ 231.536656][ T9618] hierarchical_memory_limit 314572800 [ 231.542399][ T9618] hierarchical_memsw_limit 9223372036854771712 [ 231.550310][ T9618] total_cache 2342912 [ 231.555771][ T9618] total_rss 45056 [ 231.559780][ T9618] total_shmem 2342912 [ 231.565165][ T9618] total_mapped_file 0 [ 231.569177][ T9618] total_dirty 0 [ 231.572630][ T9618] total_writeback 0 [ 231.577898][ T9618] total_workingset_refault_anon 28 [ 231.584444][ T9618] total_workingset_refault_file 0 [ 231.589560][ T9618] total_swap 12226560 [ 231.594889][ T9618] total_swapcached 12300288 [ 231.599417][ T9618] total_pgpgin 30415 [ 231.604647][ T9618] total_pgpgout 29825 [ 231.608735][ T9618] total_pgfault 25465 [ 231.612775][ T9618] total_pgmajfault 9 [ 231.618046][ T9618] total_inactive_anon 282624 [ 231.626217][ T9618] total_active_anon 2129920 [ 231.631256][ T9618] total_inactive_file 0 [ 231.635833][ T9618] total_active_file 0 [ 231.640212][ T9618] total_unevictable 0 [ 231.644904][ T9618] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1708,pid=9617,uid=0 [ 231.659786][ T9618] Memory cgroup out of memory: Killed process 9618 (syz.7.1708) total-vm:94296kB, anon-rss:1352kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 231.732231][ T9618] syz.7.1708 (9618) used greatest stack depth: 7280 bytes left [ 231.776455][ T9659] vlan1: entered promiscuous mode [ 231.781991][ T9659] vlan1: entered allmulticast mode [ 231.788417][ T9659] hsr_slave_1: entered allmulticast mode [ 233.308663][ T9692] __nla_validate_parse: 3 callbacks suppressed [ 233.308679][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1729'. [ 233.615074][ T9692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.290743][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1732'. [ 234.305858][ T9701] bond_slave_0: entered promiscuous mode [ 234.311511][ T9701] bond_slave_1: entered promiscuous mode [ 234.318490][ T9701] vlan2: entered promiscuous mode [ 234.324711][ T9701] bond0: entered promiscuous mode [ 234.721053][ T9711] loop7: detected capacity change from 0 to 128 [ 234.764146][ T28] kauditd_printk_skb: 180 callbacks suppressed [ 234.764160][ T28] audit: type=1400 audit(1774682235.745:3921): avc: denied { read append } for pid=9716 comm="syz.7.1737" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 234.800461][ T28] audit: type=1400 audit(1774682235.745:3922): avc: denied { open } for pid=9716 comm="syz.7.1737" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 234.827740][ T28] audit: type=1400 audit(1774682235.775:3923): avc: denied { map } for pid=9716 comm="syz.7.1737" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 234.856935][ T28] audit: type=1400 audit(1774682235.775:3924): avc: denied { write execute } for pid=9716 comm="syz.7.1737" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 235.061878][ T28] audit: type=1400 audit(1774682236.035:3925): avc: denied { remount } for pid=9734 comm="syz.3.1743" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 235.139131][ T9740] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1745'. [ 235.151305][ T9740] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1745'. [ 235.161814][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'. [ 235.181923][ T28] audit: type=1326 audit(1774682236.155:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd87ac799 code=0x7ffc0000 [ 235.211783][ T9746] loop7: detected capacity change from 0 to 128 [ 235.244174][ T28] audit: type=1326 audit(1774682236.155:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd87ac799 code=0x7ffc0000 [ 235.296063][ T28] audit: type=1326 audit(1774682236.155:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcd87ac799 code=0x7ffc0000 [ 235.335371][ T28] audit: type=1326 audit(1774682236.155:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd87ac799 code=0x7ffc0000 [ 235.360289][ T28] audit: type=1326 audit(1774682236.155:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd87ac799 code=0x7ffc0000 [ 235.385779][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1749'. [ 235.401820][ T9754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'. [ 235.419221][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1746'. [ 235.419719][ T9754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'. [ 235.707442][ T9764] netlink: 'syz.6.1751': attribute type 27 has an invalid length. [ 235.738776][ T9764] sit0: left promiscuous mode [ 235.842373][ T9764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.854309][ T9764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.879919][ T9764] macvlan2: left allmulticast mode [ 235.887790][ T8900] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.897671][ T8900] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.907778][ T8900] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.953431][ T9778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1754'. [ 235.968122][ T8900] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.027140][ T9787] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 236.066612][ T9791] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 236.411081][ T9817] netlink: 'syz.2.1768': attribute type 5 has an invalid length. [ 236.487368][ T9817] ip6erspan0: entered promiscuous mode [ 236.717937][ T9825] Cannot find set identified by id 3 to match [ 237.129422][ T9836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62057 sclass=netlink_route_socket pid=9836 comm=syz.3.1778 [ 237.177874][ T9838] loop6: detected capacity change from 0 to 1024 [ 237.221539][ T9838] EXT4-fs: Ignoring removed bh option [ 237.257701][ T9838] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 237.444160][ T9856] futex_wake_op: syz.2.1783 tries to shift op by -1; fix this program [ 237.556835][ T9862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.190181][ T9897] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 239.190181][ T9897] program syz.6.1795 not setting count and/or reply_len properly [ 239.378125][ T9909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=9909 comm=syz.1.1797 [ 239.429510][ T9909] __nla_validate_parse: 17 callbacks suppressed [ 239.429527][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 239.546100][ T9929] loop6: detected capacity change from 0 to 1764 [ 239.553464][ T9929] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 239.985371][ T28] kauditd_printk_skb: 156 callbacks suppressed [ 239.985383][ T28] audit: type=1400 audit(1774682240.965:4087): avc: denied { mounton } for pid=9945 comm="syz.2.1810" path="/366/file0" dev="tmpfs" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 240.014731][ T28] audit: type=1400 audit(1774682240.965:4088): avc: denied { mount } for pid=9945 comm="syz.2.1810" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 240.053608][ T9949] tipc: Enabling of bearer rejected, failed to enable media [ 240.064462][ T9949] netlink: 'syz.2.1811': attribute type 93 has an invalid length. [ 240.536678][ T9989] SET target dimension over the limit! [ 240.741514][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1822'. [ 240.870100][ T9998] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1820'. [ 240.937287][ T9990] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1820'. [ 241.273110][ T9974] mmap: syz.1.1821 (9974): VmData 17448960 exceed data ulimit 15. Update limits or use boot option ignore_rlimit_data. [ 241.516761][T10053] netlink: 'syz.6.1826': attribute type 3 has an invalid length. [ 241.524926][T10053] netlink: 'syz.6.1826': attribute type 1 has an invalid length. [ 241.538849][T10053] netlink: 191376 bytes leftover after parsing attributes in process `syz.6.1826'. [ 241.625587][ T28] audit: type=1400 audit(1774682242.605:4089): avc: denied { read } for pid=10067 comm="syz.6.1830" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 241.666755][T10068] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1830'. [ 241.678079][ T28] audit: type=1400 audit(1774682242.605:4090): avc: denied { open } for pid=10067 comm="syz.6.1830" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 241.717472][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1830'. [ 242.114818][T10100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1837'. [ 242.125367][T10100] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1837'. [ 242.186973][T10100] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 242.416673][ T28] audit: type=1326 audit(1774682243.385:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 242.457211][T10114] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:0 [ 242.491108][ T28] audit: type=1326 audit(1774682243.385:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 242.546999][ T28] audit: type=1326 audit(1774682243.385:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 242.570663][ T28] audit: type=1326 audit(1774682243.385:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 242.619851][T10125] loop6: detected capacity change from 0 to 512 [ 242.631818][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1843'. [ 242.656034][T10127] xt_policy: output policy not valid in PREROUTING and INPUT [ 242.670359][T10125] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.704029][ T28] audit: type=1326 audit(1774682243.385:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 242.726347][T10128] lo speed is unknown, defaulting to 1000 [ 242.729179][ T28] audit: type=1326 audit(1774682243.385:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27323bc799 code=0x7ffc0000 [ 242.764111][T10125] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.813498][T10132] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.821006][T10132] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.834572][ T5795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.934491][T10143] netlink: 'syz.1.1846': attribute type 64 has an invalid length. [ 242.946792][T10142] FAULT_INJECTION: forcing a failure. [ 242.946792][T10142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.973786][T10142] CPU: 0 UID: 0 PID: 10142 Comm: syz.6.1848 Tainted: G W syzkaller #0 PREEMPT(full) [ 242.973825][T10142] Tainted: [W]=WARN [ 242.973832][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.973856][T10142] Call Trace: [ 242.973863][T10142] [ 242.973888][T10142] __dump_stack+0x1d/0x30 [ 242.973924][T10142] dump_stack_lvl+0x95/0xd0 [ 242.973949][T10142] dump_stack+0x15/0x1b [ 242.973973][T10142] should_fail_ex+0x263/0x280 [ 242.974002][T10142] should_fail+0xb/0x20 [ 242.974053][T10142] should_fail_usercopy+0x1a/0x20 [ 242.974083][T10142] _copy_from_iter+0xcf/0xea0 [ 242.974115][T10142] ? __alloc_skb+0x4f6/0x690 [ 242.974166][T10142] ? __alloc_skb+0x200/0x690 [ 242.974219][T10142] netlink_sendmsg+0x4ae/0x6f0 [ 242.974256][T10142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.974293][T10142] ____sys_sendmsg+0x563/0x5b0 [ 242.974376][T10142] ___sys_sendmsg+0x195/0x1e0 [ 242.974428][T10142] __x64_sys_sendmsg+0xd4/0x160 [ 242.974467][T10142] x64_sys_call+0x194c/0x3020 [ 242.974493][T10142] do_syscall_64+0x12c/0x370 [ 242.974594][T10142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.974727][T10142] RIP: 0033:0x7f870e4ac799 [ 242.974796][T10142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.974816][T10142] RSP: 002b:00007f870cf07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.974902][T10142] RAX: ffffffffffffffda RBX: 00007f870e725fa0 RCX: 00007f870e4ac799 [ 242.974935][T10142] RDX: 0000000000044004 RSI: 0000200000000400 RDI: 0000000000000004 [ 242.974950][T10142] RBP: 00007f870cf07090 R08: 0000000000000000 R09: 0000000000000000 [ 242.974965][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.974978][T10142] R13: 00007f870e726038 R14: 00007f870e725fa0 R15: 00007ffc56a9a358 [ 242.974999][T10142] [ 243.215024][T10138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.229989][T10138] batman_adv: batadv0: Removing interface: vlan2 [ 243.248075][ T8912] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.269897][T10147] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 243.280345][T10149] ================================================================== [ 243.288447][T10149] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 243.296008][T10149] [ 243.298325][T10149] read-write to 0xffff888237d26668 of 1 bytes by task 10151 on cpu 1: [ 243.306469][T10149] folio_add_lru+0xa4/0x1e0 [ 243.310980][T10149] shmem_get_folio_gfp+0x7b0/0xd60 [ 243.316092][T10149] shmem_write_begin+0xfc/0x1f0 [ 243.320957][T10149] generic_perform_write+0x183/0x490 [ 243.326253][T10149] shmem_file_write_iter+0xc5/0xf0 [ 243.331379][T10149] __kernel_write_iter+0x319/0x590 [ 243.336515][T10149] __kernel_write+0x99/0xc0 [ 243.341036][T10149] dump_emit+0x5ff/0x720 [ 243.345545][T10149] elf_core_dump+0x1a66/0x2330 [ 243.350316][T10149] coredump_write+0xacc/0xdd0 [ 243.355006][T10149] vfs_coredump+0x26c7/0x3130 [ 243.359770][T10149] get_signal+0xd80/0xf60 [ 243.364105][T10149] arch_do_signal_or_restart+0x96/0x450 [ 243.369680][T10149] irqentry_exit+0xf7/0x520 [ 243.374441][T10149] asm_exc_page_fault+0x26/0x30 [ 243.379285][T10149] [ 243.381603][T10149] read to 0xffff888237d26668 of 1 bytes by task 10149 on cpu 0: [ 243.389218][T10149] __lru_add_drain_all+0x17e/0x450 [ 243.394343][T10149] lru_cache_disable+0x1f/0x30 [ 243.399113][T10149] __se_sys_move_pages+0x2c0/0x1420 [ 243.404325][T10149] __x64_sys_move_pages+0x78/0x90 [ 243.409350][T10149] x64_sys_call+0x1d35/0x3020 [ 243.414036][T10149] do_syscall_64+0x12c/0x370 [ 243.418636][T10149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.424528][T10149] [ 243.426840][T10149] value changed: 0x03 -> 0x00 [ 243.431936][T10149] [ 243.434246][T10149] Reported by Kernel Concurrency Sanitizer on: [ 243.440493][T10149] CPU: 0 UID: 0 PID: 10149 Comm: syz.7.1850 Tainted: G W syzkaller #0 PREEMPT(full) [ 243.451429][T10149] Tainted: [W]=WARN [ 243.455309][T10149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.465354][T10149] ================================================================== [ 243.531149][ T8912] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.540822][ T8912] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.552911][ T8912] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0