last executing test programs: 1m59.565058219s ago: executing program 4 (id=174): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0xffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu~00||!') write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x1, {0xa, 0x4e24, 0x5c, @mcast2, 0x6f}}}, 0x38) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0x0, 0x7, 0x6, 0x5}, {0x1, 0xc8, 0xb, 0x10}, {0xee14, 0x3, 0x1, 0x4}, {0x401, 0x5, 0x9, 0x9}, {0xf502, 0x9, 0x81, 0x7}, {0xa993, 0x0, 0x8, 0x41e3}, {0x8, 0xc7, 0x1, 0x400}]}) 1m59.405904865s ago: executing program 4 (id=180): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8", 0x2}], 0x1, 0x0, 0x0, 0xa000000}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d00)="31ce", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817", 0xdb}], 0x1}}], 0x3, 0x2090) 1m58.531362479s ago: executing program 4 (id=190): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0xffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu~00||!') write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x1, {0xa, 0x4e24, 0x5c, @mcast2, 0x6f}}}, 0x38) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0x0, 0x7, 0x6, 0x5}, {0x1, 0xc8, 0xb, 0x10}, {0xee14, 0x3, 0x1, 0x4}, {0x401, 0x5, 0x9, 0x9}, {0xf502, 0x9, 0x81, 0x7}, {0xa993, 0x0, 0x8, 0x41e3}, {0x8, 0xc7, 0x1, 0x400}]}) 1m58.251984315s ago: executing program 4 (id=193): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@grpquota}]}, 0x4, 0x4fb, &(0x7f0000000900)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x840, 0x0) mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 1m57.817623748s ago: executing program 4 (id=198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0x5, 0xfff8, 0x4802}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m55.739478854s ago: executing program 4 (id=212): socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0xb5, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @remote, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4040043) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0x2, 0x3}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x40081) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff}, 0x9c) write$P9_RREAD(r5, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0xec1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000100)=0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$kcm(0xa, 0x546ed7d3482059e5, 0x88) 1m55.738390025s ago: executing program 32 (id=212): socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0xb5, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @remote, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4040043) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0x2, 0x3}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x40081) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff}, 0x9c) write$P9_RREAD(r5, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0xec1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000100)=0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$kcm(0xa, 0x546ed7d3482059e5, 0x88) 2.366182698s ago: executing program 1 (id=2295): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x48202, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8000, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0xb00, 0xc, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x3f420f00, 0x0, 0x9, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x1000, 0x3, 0xfffffffffffffffe, 0x3, 0x0, 0x7, 0x80000000000}) 2.30944762s ago: executing program 1 (id=2296): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) timer_create(0x3, &(0x7f0000000ac0)={0x0, 0x2c, 0x2, @thr={&(0x7f0000000a80)="2c518affd65fe0d69491ddc44c921d0c43832451cc4aac31ecc21760634ad8ea5ad039cfe3", &(0x7f0000000cc0)="32904ed133fec642863fa79021ef40df13de6b7161878a2b44bcd9012e1f62860a9bf7afbf923230e86f02bb3376a79a14f0b6efc60e0f1a9701646c3ef4a5032ff28bcae64cdcbb1e30640c7e11c79a5e476e9047ed1d022e51ef9d791b1fee7fe80a086146aff39fc1f7a1f06d4100871c584a402bf2c39dd3cecd3cf7820d4fbd3e389afbfe5bc01b70c6fc32effedb6279a6f96f7c7a49edf598b8cc6d3aeb1794afe3949cc5dc8b1197230f33d57e8cbe6f902cc60ddebdf1f1d38fc7bb044089d4b3bf08b65f0cd87e4196c2b19fefb3a311e9a55766db7e98644fd336a46c180ff0"}}, &(0x7f0000000dc0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x700, 0x7, 0x95, 0x28f, {{0xa, 0x4, 0x3, 0x30, 0x28, 0x6a, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_prespec={0x44, 0x14, 0xa0, 0x3, 0xa, [{@remote, 0x83d7}, {@empty, 0x3ef}]}]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1f, 0x13, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x200, 0x0, 0x0, 0x40f00, 0x50, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x6, 0xc31, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000980)=[r5], &(0x7f00000009c0)=[{0x1, 0x2, 0x8, 0xa}, {0x2, 0x3, 0x9, 0x5}, {0x3, 0x5, 0x10, 0xa}, {0x2, 0x3, 0x3, 0x6}, {0x5, 0x1, 0x1, 0x5}, {0x0, 0x2, 0x7, 0xa}, {0x4, 0x3, 0xf, 0x9610b21db2149b46}, {0x101, 0x1, 0x5, 0xa}, {0x2, 0x5, 0x1, 0x4}], 0x10, 0x8000}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) 1.700389575s ago: executing program 5 (id=2309): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a4ff00001c000000000000000100000002000000", @ANYRESHEX], 0xe0, 0x4000000}}], 0x2, 0x800) 1.60547573s ago: executing program 5 (id=2311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000300000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) 1.60430178s ago: executing program 5 (id=2313): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x16, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10300}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 1.53961712s ago: executing program 5 (id=2315): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64=r0], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x30, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r12 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r12, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x8, 0x3a, 'autofs\x00', 0x3a, 'fd', 0x3a, './file0', 0x3a, [0xf5bc7ff697fb4b68, 0x46, 0xc, 0x4f, 0x43]}, 0x35) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) 1.495669283s ago: executing program 1 (id=2317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000030a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001"], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.421082851s ago: executing program 1 (id=2319): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0xffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000000)='cpu~00||!') timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) 1.131124066s ago: executing program 2 (id=2326): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.082782089s ago: executing program 3 (id=2327): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000003", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) 1.082391689s ago: executing program 3 (id=2328): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x7b, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188080000003772cc9f1ba1f848430000005e140602000000040e000a000d000000663df4ce571c", 0x2e}], 0x1, 0x0, 0x0, 0x2400}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_io_uring_setup(0x231, &(0x7f0000002200)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000020c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2}) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0xfffffffffffffff0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 1.081409028s ago: executing program 2 (id=2329): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x1b0, 0x1b0, 0xffffffff, 0x1b0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x178, 0x1b0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@unspec=@limit={{0x48}, {0x5, 0xb8e, 0x3, 0x80000000, 0x7f, 0x0, 0x5}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2800c054}, 0x0) 953.569099ms ago: executing program 2 (id=2330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x500, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x0) 953.332009ms ago: executing program 3 (id=2331): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000001000004010000000000000202000000000000000000000000000003000000000200000001000000010000000000000000000010"], 0x0, 0x56}, 0x28) 953.014159ms ago: executing program 3 (id=2332): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x26, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_enter(0xffffffffffffffff, 0x47b8, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c00000000000090010000000100000020100400", @ANYRES32, @ANYBLOB="0004000000000000000000000004000000000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="01000000000000000400"/28], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 935.804896ms ago: executing program 2 (id=2333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0x5, 0xfff8, 0x48020000}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 910.674812ms ago: executing program 2 (id=2334): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100020, 0x3, 0x0, 0x0, 0x5}, 0x0, 0xf7ffffffffffffff, r0, 0x0) exit(0xffff) close(0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) setresuid(0x0, 0xee01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo\x00') openat$cgroup_ro(r1, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) 620.567537ms ago: executing program 5 (id=2335): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x181}}, './file0\x00'}) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000040)={{0x2, 0x1, 0x3, 0x400, 0x1, 0x7}, 0x203, [0x10000, 0x4, 0xd, 0x4, 0x8, 0x401, 0x6, 0xf12, 0x4, 0x5, 0x3, 0x400, 0xe, 0x0, 0x7fffffff, 0x9, 0x6, 0xfff, 0x694e, 0x9, 0x1, 0x9, 0x6, 0xffff45fd, 0xf87, 0x9, 0x10000, 0x3, 0x0, 0x1, 0x10, 0x5, 0xffff70d5, 0x5, 0xe, 0x39, 0x7, 0x7ff, 0x6, 0x8, 0x4b, 0xf, 0x4f01527f, 0x6, 0x5, 0x505d, 0x7fff, 0xfffffffc, 0x2, 0x1, 0x8, 0x3, 0x38df, 0x2, 0x5, 0x6, 0x85, 0x1ff, 0xfffffff8, 0x2, 0xe099, 0xdd, 0x0, 0x9, 0x8, 0x1, 0x0, 0x80, 0x1ff, 0xfffffffe, 0x0, 0x3, 0xffff, 0x1ff, 0x6, 0xff, 0x9, 0x9b, 0xbf, 0x401, 0x7, 0x8, 0x2, 0x1, 0x7, 0xd, 0x8, 0x2, 0xd, 0x6, 0x9, 0x8, 0x444, 0x1000, 0x1000, 0x81, 0x0, 0xffffffff, 0xfffffffa, 0xe, 0x3, 0x80000000, 0xffffdf1b, 0x10000, 0x7fff, 0x2, 0x1, 0x9, 0x8, 0x800, 0x80, 0x40, 0x3, 0xffffffff, 0xff, 0x3, 0x9, 0x200000, 0x9, 0x3, 0x8, 0x1, 0x9, 0x9, 0xfffffffb, 0x7, 0xd, 0x100, 0x7, 0x80000001, 0x4, 0x4, 0x400, 0x8, 0x2, 0x1, 0x81, 0x2, 0xbdc, 0x0, 0x9, 0x3, 0x7, 0x2, 0x7, 0x3b, 0x8, 0xb5a, 0x8, 0x3, 0x10000, 0x8, 0x1, 0x53, 0x9, 0x0, 0xbd, 0x4, 0x1ff, 0xfffffffd, 0x10, 0x800, 0x5, 0x3, 0x1, 0x8, 0xf, 0x1, 0xe8, 0xffffffff, 0x6, 0xffffffff, 0x10, 0x6, 0x5, 0x8, 0xfffffffd, 0x6, 0x4, 0x4, 0x100, 0x9, 0x9, 0x58, 0x1, 0x9, 0x1000, 0x4, 0x4, 0x8, 0x9, 0x3, 0x3, 0x5, 0x3, 0x1, 0x2, 0x1, 0x9, 0x7fff, 0xf9f4, 0x9c6, 0xb0, 0x200, 0x0, 0x0, 0x8, 0x401, 0x35, 0x7, 0x3ff, 0x8, 0x7, 0x7, 0x8, 0x4, 0x0, 0xfffffbff, 0xb9ff, 0x5, 0x0, 0x9, 0x5080, 0x1, 0x8000, 0x7f, 0x1, 0x200, 0x0, 0x3, 0x10000, 0x2, 0x800, 0x6, 0x9a, 0x9, 0x2, 0x8, 0xaa, 0x7f, 0x7, 0x6a25d63a, 0xeca5, 0x2, 0x1, 0x6, 0x3, 0x5, 0x8001, 0x6, 0xfffffffd, 0x4, 0x7b2fd93c, 0x5, 0x101, 0x9, 0x195309f0, 0x7, 0x4, 0xb, 0x1, 0xa9, 0xe, 0xaa9, 0x1, 0xfffff4c0, 0x8, 0x1, 0x0, 0x4, 0x3, 0x6270, 0x5, 0x2, 0x5, 0x0, 0x4, 0xa, 0x5, 0x5, 0x0, 0x8, 0x7fffffff, 0xb, 0x2, 0x9, 0x9, 0x7, 0x5, 0x10000, 0x10, 0x8, 0x6, 0x6, 0x3ff, 0x4, 0x18c9, 0x1, 0x6, 0x1, 0xb01, 0x1, 0x800, 0x1, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x7f, 0x7, 0x3, 0xa6, 0x4640, 0xa5e, 0xf, 0x280000, 0x40, 0x9, 0x7f, 0x9, 0x37b5, 0x401, 0x3, 0x4, 0xffff, 0x3, 0x400, 0x2, 0x9, 0x7, 0x0, 0x80000001, 0xdb2, 0x2, 0x8, 0x7fffffff, 0xe79, 0x5, 0xfffffffc, 0x1, 0xffffffff, 0x2, 0x6ccd, 0x62, 0x6, 0x1, 0xc, 0x3, 0x0, 0x4a, 0x2, 0xfffffffa, 0x1ff, 0x5, 0x2, 0x9, 0xe, 0x7, 0xd8c, 0x7, 0x4, 0x7, 0x4, 0x8, 0x8, 0xf8, 0x7, 0x80000000, 0xb, 0x7, 0x6f1, 0x4, 0x1, 0xf7b3, 0x9, 0x8, 0xecf5, 0x8, 0x7ff, 0x10001, 0x5, 0x7, 0x81, 0x80000001, 0x2, 0x5, 0x7, 0xb607, 0x7, 0x7fff, 0x0, 0x505, 0x7fff, 0x175, 0x82, 0x7f, 0x5, 0x8000, 0x2, 0x3, 0x3, 0x80, 0xe, 0x6, 0x2, 0x10001, 0xfffffffd, 0x7f, 0x40, 0xdbf7, 0x4, 0x548d, 0x6, 0x9, 0x3ff, 0x9, 0xffffffff, 0x81, 0x1, 0x8, 0x7f85, 0xff, 0x9, 0x1, 0x63, 0x6, 0x48000000, 0x2, 0x7, 0xfbfe, 0x5, 0x6, 0x3, 0x3, 0x7, 0xf, 0x66, 0x1, 0x1000, 0x4, 0xfffffffa, 0x2, 0x3, 0x2844, 0x14, 0xfff, 0x0, 0x3, 0x3, 0x1, 0x1, 0xadb, 0xfffffffd, 0x7, 0x0, 0x7, 0x1, 0x6f2dd962, 0x82c2, 0x17f2, 0x9, 0x3, 0x5, 0x3, 0x9, 0x8, 0x6, 0x1, 0xfffffff7, 0x3, 0xf, 0x8, 0x9, 0x8, 0x80000001, 0xb, 0xde7, 0x6, 0x2, 0xc3, 0x9, 0x101, 0x3, 0x9edd, 0xd, 0xd, 0x1, 0x8, 0x5, 0x8, 0xc6f, 0x9, 0x5, 0x1, 0x5, 0x12, 0x0, 0x5, 0x3, 0x3, 0x8, 0x7, 0x8, 0x7, 0xb6c, 0x6, 0x0, 0x3, 0xec, 0x0, 0x2, 0x7, 0x2, 0x5, 0xe, 0x2, 0xf, 0x3cbe, 0x5, 0xdb0d, 0x0, 0x8, 0x3, 0x6355, 0x5, 0x2, 0x5, 0xffffffff, 0x9, 0x1000, 0x6, 0x0, 0x5, 0x0, 0x6, 0x80000001, 0x1, 0x4, 0x2, 0x80, 0x33c8, 0x9, 0x6, 0x4, 0x8, 0x4, 0x9, 0x3, 0xfffffffd, 0x2, 0x2, 0x2, 0x3, 0x23f, 0x2, 0x7, 0x4, 0x2, 0x800, 0x69a4, 0x427, 0x8e, 0x7fff, 0xa1, 0x1ff, 0x8, 0x6, 0x2800000, 0x9, 0x2, 0x8000, 0x5, 0x101, 0x7, 0xe00, 0x259, 0x3, 0x7, 0xcfa4, 0x7fff, 0x4, 0x8, 0x5, 0x7, 0x7f, 0x0, 0xfffffffe, 0x6, 0xfffffffa, 0x9, 0x7, 0x200, 0xba4, 0xbb, 0x7, 0x6, 0xb, 0x48d, 0xfff, 0x7fe, 0x1, 0x9, 0x1, 0xce0, 0x238, 0xc, 0xc000, 0x5b6, 0x64b800, 0x3, 0x9, 0x6, 0xfffffff8, 0xfffffffb, 0xbb, 0x0, 0x2, 0x5, 0x0, 0x3ff, 0x81, 0x8001, 0x40, 0x1, 0x80000001, 0x400, 0x2, 0x8, 0x100000, 0x1, 0x3, 0xac8, 0x1, 0x1, 0xffff, 0xd9, 0x3, 0x9cb5, 0x3, 0x800, 0xfffff800, 0x1, 0x5, 0x3, 0x5, 0x3, 0x5, 0x3, 0x9, 0x4, 0x7, 0x10001, 0xc, 0x3, 0x4, 0x7, 0x8, 0x1, 0x5, 0x4, 0x3, 0x5, 0x1, 0x5, 0xfffffffe, 0x5, 0x99, 0x2, 0x1, 0xff4, 0xffffffff, 0x90, 0x8, 0xff, 0x800, 0xc82, 0x7, 0xff, 0x4, 0x4, 0x5, 0x2, 0x3, 0x9, 0x200, 0x9, 0x8, 0x341, 0x6, 0x9, 0x1, 0x7, 0x27f4, 0x2c, 0x9, 0x1, 0x8, 0x6, 0x7, 0x2, 0xd, 0x45e, 0x0, 0x1, 0x8, 0x2, 0x8, 0xf35, 0x9, 0x7fff, 0x4, 0x1200, 0x4, 0x101, 0x0, 0x101, 0x2, 0x6d539938, 0x81, 0xffffffff, 0x8000, 0x40, 0x1, 0x401, 0x1000, 0x2, 0x1ff, 0x4, 0x1, 0x3, 0x9, 0x1b3, 0x0, 0x4, 0x2, 0xffffffff, 0x20000, 0x8c, 0x1, 0x3, 0x5, 0x2, 0x7f, 0x7, 0x3c, 0xda, 0xffff, 0x2, 0x80000001, 0x1, 0x2, 0x7, 0x10, 0x80000000, 0x4, 0x5, 0x0, 0x800, 0x3, 0x0, 0x7, 0x7fff, 0x9899, 0x1000, 0x5, 0x1, 0x9, 0x6, 0x101, 0x80000001, 0x1, 0x0, 0x9, 0x0, 0x2, 0x5, 0x4, 0xa28b, 0x10000, 0x582, 0x8, 0x600000, 0xfffffffb, 0x0, 0xf7eec03b, 0x1, 0x2, 0x7fff, 0x6, 0x4, 0x4, 0xb3, 0x4, 0xab, 0x8, 0x9, 0xb, 0x3, 0x4, 0x1ff, 0x6, 0x4, 0xb, 0x12, 0x3, 0x6, 0x5, 0x564, 0x1, 0x100, 0xe3, 0x7, 0x6, 0x5, 0x4, 0x2, 0x6, 0xfffffffd, 0x9, 0x9, 0x4, 0x10000, 0x3, 0x41a, 0x5, 0x9, 0x7, 0x8, 0x6, 0xe, 0x0, 0xfffffff8, 0x9, 0x7, 0xcb5c, 0x4, 0x3ff, 0x0, 0x3, 0xa4, 0x10000, 0x80, 0x3, 0x80, 0x9, 0x0, 0x3, 0x7, 0x9, 0x9, 0x2cc5, 0x5, 0x4, 0xd, 0x640e, 0x2, 0x10000, 0x8, 0xe, 0x10001, 0x4, 0xffffffff, 0x8, 0x800, 0x0, 0x4, 0x3, 0x9, 0xa, 0xba3, 0x64, 0x400, 0x9, 0x3, 0x5, 0x3, 0x9, 0x101, 0xac7, 0x99, 0x200, 0x9, 0x6, 0x1, 0x9, 0x8001, 0xe, 0xb9, 0x6, 0x0, 0x65, 0xe, 0x5, 0x8, 0x555, 0x4, 0x1, 0xffff, 0x9, 0x7, 0x47b, 0x8, 0x0, 0x0, 0x7, 0x58, 0x5041, 0x67, 0x9, 0x0, 0x7ff, 0x6, 0x5, 0x9, 0x2, 0x919a, 0x9, 0x2ef, 0x9, 0x8000000, 0xd8eb, 0x0, 0x4, 0x18, 0x1, 0x0, 0xb22c889, 0x1, 0x9, 0xfffffffe, 0x800, 0xf, 0xb, 0x1ac, 0x8, 0xe, 0x5, 0xc000, 0x3ff, 0x6, 0x9, 0x5, 0x47, 0x4d0b, 0x5, 0x1, 0x401, 0x3, 0x4, 0x3, 0x0, 0xb1a, 0x3, 0x40, 0x5, 0x4, 0x7, 0xe, 0x46e, 0x6, 0x7, 0xa, 0x1, 0x5, 0x8, 0x3, 0x475, 0x10, 0x7ff, 0x9, 0x3, 0x8, 0x1, 0xbfa7, 0x8, 0x0, 0xffff5d49, 0x8, 0x4, 0x0, 0x24310000, 0x1, 0xdb, 0x7fd, 0x4, 0x50, 0xff, 0x9, 0x10, 0x1, 0x0, 0x10001, 0x2, 0x9, 0x7, 0xff, 0x7ff, 0x1, 0x7, 0x4, 0xd6d, 0x99, 0x6, 0x9, 0xedcd, 0xcdd, 0x800, 0xd, 0x8, 0x7f, 0x3, 0x800, 0xfffffff4, 0x81, 0xe, 0xbcbc, 0x78000, 0x200, 0x4, 0x7fffffff, 0x1ff, 0x4, 0xfffffff7]}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000001080)) r1 = fsmount(r0, 0x0, 0xfa) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r1, 0xfccc2000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setxattr$security_evm(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100), &(0x7f0000001140)=@v1={0x2, "0e4804"}, 0x4, 0x2) r3 = getpgrp(0x0) r4 = syz_open_procfs(r3, &(0x7f0000001180)='net/netstat\x00') socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000011c0)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x3, 0xd, 0xf78f, 0x9, 0x3ff}, &(0x7f0000001280)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000012c0)={0x72, 0x0, 0x7, 0x5, r5}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r6, 0x6e20ee70877dcb93, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, r6, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r8 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_icreq_pdu(r8, &(0x7f0000001580)={{0x0, 0x5, 0x80, 0x4}, 0x0, 0x0, 0x3, 0x4}, 0x80, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001600), r1) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001680), r4) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r9, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20040015) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000001780)={0xb3a, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r10, &(0x7f00000125c0)={&(0x7f0000012500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000012580)={&(0x7f0000012540)={0x1c, r9, 0x8, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20800}, 0x1) openat(r4, &(0x7f0000012600)='./file0\x00', 0x640003, 0x8) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000012640)={'syzkaller1\x00', {0x2, 0x4e22, @local}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r11, &(0x7f0000012780)={&(0x7f0000012680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000012740)={&(0x7f00000126c0)={0x70, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x6e}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x75}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4451) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) 613.005335ms ago: executing program 5 (id=2336): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000002040)='./file0\x00', 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @empty, 0x8000a}, 0x1c, 0x0}}], 0x1, 0x200880c0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xff000000}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0xe, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r6, 0x1, 0x0, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) sendfile(r5, r4, 0x0, 0x3ffff) 522.433381ms ago: executing program 1 (id=2337): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c0000001000370400e4ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700fc020000000000000000000000000000040012000800", @ANYRES32=r4], 0x6c}}, 0x0) 429.368337ms ago: executing program 1 (id=2338): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xb1, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa1081004e0086dd641976df00773201fe880000000000000000000000000001fc010000000000000000000000000001d212103a4a172bfb3434879bedf1343ec77830f62d28ea9e9814263f219f5654ee632321b3d34996caabc848439cf4aa16467ea5f65bca2730bd61cb7d7236f57968696578b3de7a19323ec5748f0457db75235110cd97afd1be96f7a24d750808e984b7f4f009bd1d52ab641ace6be6c9eb6519890a1e56f67f428c818906af720db22517404d2e5025b43db8b8f5c907ce038f560b0719e46d0ec235a6650a4ff22d2fb0493018b72510c09e6a5aec741099a900e5ce4a4beeb2b0bd42"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0x8, 0xfff1}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r11 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x4004, @fd=r14, 0x0, 0x8, 0x400, 0x4}) io_uring_enter(r11, 0x47bc, 0xf5, 0x0, 0x0, 0x0) r15 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r15, 0x0, 0x80, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000500, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000100000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000004000000000000000000000000000000000000000000000000000002eb65d05000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000fcffffff00000000"]}, 0x108) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 181.165659ms ago: executing program 0 (id=2344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000f1000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 121.59162ms ago: executing program 0 (id=2345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xf0ffffffffffffff) 121.11134ms ago: executing program 0 (id=2346): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000b13000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000878000/0x2000)=nil) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003db000/0x4000)=nil) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0x26}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) ustat(0x11, &(0x7f00000000c0)) migrate_pages(r0, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x80) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="1000", 0x2}], 0x1) r1 = io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x8004) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe}, 0x20}, 0x1, 0xffffffea}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) 120.421609ms ago: executing program 0 (id=2347): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x218408, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="796f44288119253de8d577fa38a20b66a6ed4d45ff8d614b7ca3c66946ad5848af4308f5ae16bb44565ff14708d334c741164f253fe5c7f7d1c6594372dae01dde19566860", @ANYBLOB="053a62a47e3769c98545f31ed50a8487aa1cc4c6279b5b6c64dc24e9bbc2ae06c1a0c947ee9366f02ff80a095d986e45f4e7d447bb7419f0e7c56bc0c8b383f7b71f91e50a648ebab649d0e9982c385bf66671d61bdaf9a8b7cdf67a11e2c78b50a18afebb2cd5e9", @ANYBLOB="f6105f21e4c1172a996659029fe6473ac55a42ded1ab167f78dc7c601ad60313abcdf2e8a9f66b673d2fbceb26f32fca64d72e40dff6d84db34991d5e7a5e9417620e264adb08dc0ad4a1e54a2688cc36d2bbd473a1c229f71f1aac0e1cf41307d1eb476b78b69988f42e8c1b10d17bccb8719ef18e3186ce1f849de31e9773726b8205c2128", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16=0x0], 0x4, 0x25c, &(0x7f0000000000)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080), 0x8101000000000006}, 0x205, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 95.606935ms ago: executing program 3 (id=2348): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000080)={[{@nogrpid}, {}, {@usrjquota}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@abort}, {@oldalloc}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x6207}}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x8, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x106, 0x0, 0x0, 0x3}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) 86.421784ms ago: executing program 0 (id=2349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000600), 0x44b, r0}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@dioread_nolock}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8H7nZO7k3O/ebe7+m5OTckgKE1kf1TiHg5Ir5JIg5GRJKvG4185cTadqv3r85mSxKNxqd/Jc3tsnrrtVrP259XXoqI376KOF7Y2G5teWWhVC6ni3l9sl65NFlbXjlxoVKaT+fTi9MzM6fenpl+7913+hbrG2f/+f6T2x+e+vro6ne/3D10M4nTcSBf1x7HE7jWXpmIifw9GYvTj2w41YfGdoJd+f/JgPeD7RnJ83wssj7gYIzkWQ/8/30ZEQ1gSCXyH4ZUaxzQurbv03Xwc+PeB2sXQBvjH137bCT2NK+N9q0mD10ZZde7431oP2vj1z9v3cyW6N/nEABbunY9Ik6Ojm7s/5K8/9u+kz1s82gb+j94dm5n4583O41/Cuvjn+gw/tnfIXe3Y+v8L9ztQzNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq59/JctWfutsWC+H3dHdz/8nLlSvfQkMbe7dz3ilY7j32T9+Ccdjn/2fpztsY0j6a3Xuq3bOv6nq/FTxOsdj/+DGa1k8/nJyeb5MNk6Kzb6+8aR37u1P+j4s+O/b/P4x5P2+dra47fx455/027rHoo/ej//dyWfNcut+ccrpXp9cSpiV/LxxsenHzy3VW9tn8V/7Ojm/V+n839vRHzeY/w3Dv/8ak/xD+j4zz3W8X/8wp2PvvihW/u99X9vNUvH8kd66f963cEnee8AAAAAAABgpylExIFICsX1cqFQLK7d33E49hXK1Vr9+Pnq0sW5aH5XdjzGCq2Z7oNt90NM5ffDturTj9RnIuJQRHw7srdZL85Wy3ODDh4AAAAAAAAAAAAAAAAAAAB2iP1dvv+f+WNk0HsHPHV+8huG15b5349fegJ2JH//YXjJfxhe8h+Gl/yH4SX/YXjJfxhe8h+Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACAvjp75ky2NFbvX53N6nOXl5cWqpdPzKW1hWJlabY4W128VJyvVufLaXG2Wtnq9crV6qWp6Vi6MllPa/XJ2vLKuUp16WL93IVKaT49l449k6gAAAAAAAAAAAAAAAAAAADg+VJbXlkolcvpooLCtgqjO2M3FPpcGHTPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//xVY3tw==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getdents(r3, &(0x7f0000000040)=""/48, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r7, 0x62a1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0fa0000", @ANYRES16=r8, @ANYBLOB="375e27bd7000fedbdf25140000001c0007800c00030000000000000000000c0004000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.53123ms ago: executing program 2 (id=2350): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x9189}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$inet(0x2, 0x2, 0x9) 295.5µs ago: executing program 0 (id=2351): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x2000000000000216, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000000855d6e43324ebe0000000f00000018010000646c6c240000000000000000e652d44400000000bfa1000000000000070100ffffffb702000008000000b7030000000000008500000006000000940000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) (async) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x880) 0s ago: executing program 3 (id=2352): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) (fail_nth: 2) kernel console output (not intermixed with test programs): : entered allmulticast mode [ 52.420225][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.645102][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.652298][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.659715][ T4182] bridge_slave_0: entered allmulticast mode [ 52.666557][ T4182] bridge_slave_0: entered promiscuous mode [ 52.673763][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.681124][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.689103][ T4182] bridge_slave_1: entered allmulticast mode [ 52.695728][ T4182] bridge_slave_1: entered promiscuous mode [ 52.714344][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.724997][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.749783][ T4182] team0: Port device team_slave_0 added [ 52.766640][ T4182] team0: Port device team_slave_1 added [ 52.790021][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.797585][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.824262][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.840821][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.882523][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.938293][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.955054][ T4303] loop3: detected capacity change from 0 to 128 [ 53.007266][ T4306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.236'. [ 53.040523][ T4182] hsr_slave_0: entered promiscuous mode [ 53.058153][ T4182] hsr_slave_1: entered promiscuous mode [ 53.065533][ T4312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'. [ 53.075767][ T4182] debugfs: 'hsr0' already exists in 'hsr' [ 53.092673][ T4182] Cannot create hsr debugfs directory [ 53.165328][ T4317] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 53.245371][ T4317] bond1 (unregistering): Released all slaves [ 53.267087][ T4306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 53.441773][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 53.441790][ T28] audit: type=1400 audit(1772480536.904:277): avc: denied { getattr } for pid=4346 comm="syz.2.244" path="socket:[7873]" dev="sockfs" ino=7873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 53.485262][ T4182] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 53.506381][ T4182] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.530973][ T4182] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.656061][ T4182] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 53.724551][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.731883][ T4182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.166839][ T4365] ipvlan2: entered allmulticast mode [ 54.173385][ T4365] dummy0: entered allmulticast mode [ 54.553171][ T4372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 56.721925][ T942] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.734976][ T28] audit: type=1400 audit(1772480540.194:278): avc: denied { write } for pid=4376 comm="syz.0.250" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.763959][ T4377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.250'. [ 56.777624][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.791207][ T28] audit: type=1400 audit(1772480540.254:279): avc: denied { create } for pid=4378 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.810683][ T4377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.250'. [ 56.882912][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.913456][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.924608][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.941096][ T942] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.948435][ T942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.957733][ T942] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.964813][ T942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.059762][ T4394] loop3: detected capacity change from 0 to 1024 [ 57.067095][ T4394] EXT4-fs: inline encryption not supported [ 57.154463][ T4394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.473871][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.103444][ T4427] loop1: detected capacity change from 0 to 512 [ 58.135595][ T4427] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 58.196505][ T4182] veth0_vlan: entered promiscuous mode [ 58.205200][ T4427] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 58.228307][ T4182] veth1_vlan: entered promiscuous mode [ 58.241932][ T4427] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.261: bad orphan inode 4 [ 58.292620][ T4427] loop1: lost filesystem error report for type 5 error -117 [ 58.292789][ T4427] EXT4-fs (loop1): 1 orphan inode deleted [ 58.300356][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 58.300380][ C1] EXT4-fs (loop1): initial error at time 1772480541: ext4_orphan_get:1417 [ 58.300415][ C1] EXT4-fs (loop1): last error at time 1772480541: ext4_orphan_get:1417 [ 58.331401][ T4182] veth0_macvtap: entered promiscuous mode [ 58.348888][ T4182] veth1_macvtap: entered promiscuous mode [ 58.385645][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.420885][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.449152][ T309] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.480599][ T309] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.492091][ T4427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.514812][ T4434] loop2: detected capacity change from 0 to 1024 [ 58.526984][ T309] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.659890][ T4434] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 58.825712][ T4437] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 4: comm syz.1.261: lblock 0 mapped to illegal pblock 4 (length 1) [ 58.867521][ T4434] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 58.877347][ T4434] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 58.915874][ T4434] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #5: comm syz.2.262: unexpected bad inode w/o EXT4_IGET_BAD [ 58.934632][ T309] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.974718][ T4434] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 58.974847][ T4434] EXT4-fs (loop2): no journal found [ 58.983973][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 58.983993][ C0] EXT4-fs (loop2): initial error at time 1772480542: ext4_get_journal_inode:5863: inode 5 [ 58.984025][ C0] EXT4-fs (loop2): last error at time 1772480542: ext4_get_journal_inode:5863: inode 5 [ 59.033406][ T28] audit: type=1400 audit(1772480542.484:280): avc: denied { create } for pid=4440 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.053680][ T28] audit: type=1400 audit(1772480542.494:281): avc: denied { setopt } for pid=4440 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.067446][ T4434] EXT4-fs (loop2): can't get journal size [ 59.075890][ T28] audit: type=1400 audit(1772480542.494:282): avc: denied { watch watch_reads } for pid=4440 comm="syz.0.264" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 59.080248][ T4434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.103341][ T28] audit: type=1400 audit(1772480542.494:283): avc: denied { name_bind } for pid=4440 comm="syz.0.264" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 59.137722][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.193773][ T28] audit: type=1326 audit(1772480542.654:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42f2dc799 code=0x7ffc0000 [ 59.203939][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.230422][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.237827][ T28] audit: type=1326 audit(1772480542.654:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42f2dc799 code=0x7ffc0000 [ 59.271458][ T28] audit: type=1326 audit(1772480542.684:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe42f2dc799 code=0x7ffc0000 [ 59.296605][ T28] audit: type=1326 audit(1772480542.684:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42f2dc799 code=0x7ffc0000 [ 59.373069][ T4454] netlink: 28 bytes leftover after parsing attributes in process `syz.5.214'. [ 59.380098][ T28] audit: type=1326 audit(1772480542.684:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42f2dc799 code=0x7ffc0000 [ 59.405941][ T28] audit: type=1326 audit(1772480542.684:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe42f2dc799 code=0x7ffc0000 [ 59.481322][ T4450] No such timeout policy "syz0" [ 59.508766][ T4465] xt_hashlimit: size too large, truncated to 1048576 [ 59.565962][ T4467] loop1: detected capacity change from 0 to 2048 [ 59.589265][ T4467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.695912][ T4467] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.271: bg 0: block 234: padding at end of block bitmap is not set [ 59.717312][ T4467] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 984 with error 28 [ 59.730152][ T4467] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.730152][ T4467] [ 59.740117][ T4467] EXT4-fs (loop1): Total free blocks count 0 [ 59.746297][ T4467] EXT4-fs (loop1): Free/Dirty block details [ 59.752440][ T4467] EXT4-fs (loop1): free_blocks=0 [ 59.757508][ T4467] EXT4-fs (loop1): dirty_blocks=992 [ 59.762797][ T4467] EXT4-fs (loop1): Block reservation details [ 59.769156][ T4467] EXT4-fs (loop1): i_reserved_data_blocks=62 [ 59.840769][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.927688][ T4494] netlink: 'syz.1.278': attribute type 16 has an invalid length. [ 59.945789][ T4494] netlink: 'syz.1.278': attribute type 17 has an invalid length. [ 59.982923][ T4491] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.995609][ T4499] loop0: detected capacity change from 0 to 512 [ 60.004571][ T4499] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.280: inode has both inline data and extents flags [ 60.019923][ T4491] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.049708][ T4499] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.057456][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 60.073066][ C1] EXT4-fs (loop0): initial error at time 1772480543: ext4_orphan_get:1391: inode 15 [ 60.077431][ T4499] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.280: couldn't read orphan inode 15 (err -117) [ 60.082496][ C1] EXT4-fs (loop0): last error at time 1772480543: ext4_orphan_get:1391: inode 15 [ 60.120588][ T4499] loop0: lost filesystem error report for type 5 error -117 [ 60.121236][ T4499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.161023][ T4494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.278483][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.401891][ T4512] loop0: detected capacity change from 0 to 1024 [ 60.408674][ T4512] EXT4-fs: Ignoring removed oldalloc option [ 60.427551][ T4512] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 60.750679][ T4529] loop0: detected capacity change from 0 to 8192 [ 60.768524][ T4531] netlink: 20 bytes leftover after parsing attributes in process `syz.5.292'. [ 60.787453][ T4531] netlink: 20 bytes leftover after parsing attributes in process `syz.5.292'. [ 60.818775][ T3690] loop0: p2 p3 p4 [ 60.827643][ T3690] loop0: p2 size 9435648 extends beyond EOD, truncated [ 60.835610][ T3690] loop0: p3 start 67174144 is beyond EOD, truncated [ 60.854086][ T3690] loop0: p4 size 50331904 extends beyond EOD, truncated [ 60.881598][ T4529] loop0: p2 p3 p4 [ 60.887652][ T4529] loop0: p2 size 9435648 extends beyond EOD, truncated [ 60.909137][ T4529] loop0: p3 start 67174144 is beyond EOD, truncated [ 60.928137][ T4529] loop0: p4 size 50331904 extends beyond EOD, truncated [ 60.974140][ T4528] loop2: detected capacity change from 0 to 512 [ 61.033989][ T4538] loop3: detected capacity change from 0 to 2048 [ 61.075085][ T4540] netlink: 12 bytes leftover after parsing attributes in process `syz.5.296'. [ 61.079526][ T4528] EXT4-fs (loop2): 1 truncate cleaned up [ 61.126497][ T4538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.141685][ T4528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.233226][ T4546] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 61.302805][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.559467][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.653933][ T4565] xt_hashlimit: size too large, truncated to 1048576 [ 61.830558][ T4571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 61.994249][ T4579] netlink: 16 bytes leftover after parsing attributes in process `syz.5.308'. [ 62.008483][ T4579] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 62.035022][ T4581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'. [ 62.055061][ T4581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'. [ 62.417862][ T4596] loop2: detected capacity change from 0 to 512 [ 62.519201][ T4596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.551114][ T4596] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.619834][ T4593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.828273][ T4601] netlink: 'syz.2.314': attribute type 13 has an invalid length. [ 63.298527][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.405575][ T4624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.318'. [ 63.560055][ T4639] loop2: detected capacity change from 0 to 1024 [ 63.597426][ T4639] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (19050!=35945) [ 63.617347][ T4639] EXT4-fs (loop2): group descriptors corrupted! [ 64.423634][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 64.423649][ T28] audit: type=1400 audit(1772480547.884:312): avc: denied { create } for pid=4657 comm="dhcpcd-run-hook" name="resolv.conf.eth3.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.547404][ T28] audit: type=1400 audit(1772480547.914:313): avc: denied { write } for pid=4657 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=2573 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.607598][ T28] audit: type=1400 audit(1772480547.914:314): avc: denied { append } for pid=4657 comm="dhcpcd-run-hook" name="resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=2573 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.691904][ T28] audit: type=1400 audit(1772480547.994:315): avc: denied { name_connect } for pid=4673 comm="syz.1.329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 64.953042][ T4708] netlink: 'syz.3.336': attribute type 10 has an invalid length. [ 65.035235][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 65.089625][ T4708] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 65.121846][ T4700] can0: slcan on ttyS3. [ 65.137259][ T4653] syz.2.326 (4653) used greatest stack depth: 8760 bytes left [ 65.150143][ T4721] loop1: detected capacity change from 0 to 128 [ 65.169258][ T28] audit: type=1326 audit(1772480548.634:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29350c799 code=0x7ffc0000 [ 65.217740][ T28] audit: type=1326 audit(1772480548.634:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7ff29350c799 code=0x7ffc0000 [ 65.260882][ T4712] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.287810][ T4708] can0 (unregistered): slcan off ttyS3. [ 65.293528][ T28] audit: type=1326 audit(1772480548.664:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29350c799 code=0x7ffc0000 [ 65.319973][ T4700] can0: slcan on ttyS3. [ 65.325665][ T28] audit: type=1326 audit(1772480548.664:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff29350c799 code=0x7ffc0000 [ 65.354021][ T28] audit: type=1326 audit(1772480548.664:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29350c799 code=0x7ffc0000 [ 65.387606][ T28] audit: type=1326 audit(1772480548.664:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff29350c799 code=0x7ffc0000 [ 65.519330][ T4738] loop1: detected capacity change from 0 to 512 [ 65.531760][ T4738] EXT4-fs: Ignoring removed nobh option [ 65.581217][ T4699] can0 (unregistered): slcan off ttyS3. [ 65.646623][ T4738] EXT4-fs (loop1): 1 orphan inode deleted [ 65.679758][ T4738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.224700][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.812669][ T4769] can0: slcan on ttyS3. [ 66.897610][ T4772] can0 (unregistered): slcan off ttyS3. [ 66.913475][ T4774] can0: slcan on ttyS3. [ 66.917838][ T4777] syzkaller0: entered promiscuous mode [ 66.923338][ T4777] syzkaller0: entered allmulticast mode [ 66.998350][ T4768] can0 (unregistered): slcan off ttyS3. [ 67.090476][ T4781] Cannot find del_set index 1 as target [ 67.220945][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.355'. [ 67.302779][ T4783] syzkaller0: entered promiscuous mode [ 67.308544][ T4783] syzkaller0: entered allmulticast mode [ 67.385239][ T4803] loop2: detected capacity change from 0 to 164 [ 67.475373][ T4809] loop5: detected capacity change from 0 to 512 [ 67.603806][ T4809] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 67.696576][ T4803] loop2: detected capacity change from 0 to 128 [ 67.811330][ T4809] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 67.879124][ T4809] EXT4-fs (loop5): orphan cleanup on readonly fs [ 67.949504][ T4809] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.364: bad orphan inode 3 [ 67.976907][ T4809] loop5: lost filesystem error report for type 5 error -117 [ 67.977390][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 67.991282][ C0] EXT4-fs (loop5): initial error at time 1772480551: ext4_orphan_get:1417 [ 67.999839][ C0] EXT4-fs (loop5): last error at time 1772480551: ext4_orphan_get:1417 [ 68.012063][ T4809] EXT4-fs (loop5): Remounting filesystem read-only [ 68.019174][ T4809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 68.037509][ T4809] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.364: dx entry: limit 0 != root limit 125 [ 68.060962][ T4809] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.364: Corrupt directory, running e2fsck is recommended [ 68.084634][ T4809] netlink: 'syz.5.364': attribute type 3 has an invalid length. [ 68.092548][ T4809] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.364'. [ 68.102083][ T4809] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.364: dx entry: limit 0 != root limit 125 [ 68.126482][ T4809] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.364: Corrupt directory, running e2fsck is recommended [ 68.218762][ T4824] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 68.221535][ T4824] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.364: dx entry: limit 0 != root limit 125 [ 68.329676][ T4824] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.364: Corrupt directory, running e2fsck is recommended [ 68.381662][ T4830] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 68.449095][ T4828] loop1: detected capacity change from 0 to 512 [ 68.477731][ T4828] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.498736][ T4828] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.370: bg 0: block 127: padding at end of block bitmap is not set [ 68.513474][ T4828] loop1: lost filesystem error report for type 5 error -117 [ 68.513750][ T4828] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 68.521122][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 68.521146][ C0] EXT4-fs (loop1): initial error at time 1772480551: ext4_validate_block_bitmap:441 [ 68.521167][ C0] EXT4-fs (loop1): last error at time 1772480551: ext4_validate_block_bitmap:441 [ 68.564289][ T4828] loop1: lost filesystem error report for type 5 error -117 [ 68.584388][ T4828] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.370: attempt to clear invalid blocks 983260 len 1 [ 68.605280][ T4828] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.605780][ T4182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 68.625216][ T4828] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.370: Invalid inode table block 0 in block_group 0 [ 68.638233][ T4828] loop1: lost filesystem error report for type 5 error -117 [ 68.638540][ T4828] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 68.658677][ T4845] tipc: Started in network mode [ 68.663708][ T4845] tipc: Node identity ac1414aa, cluster identity 4711 [ 68.690948][ T4828] loop1: lost filesystem error report for type 5 error -117 [ 68.709706][ T4828] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 68.722212][ T4849] Cannot find del_set index 0 as target [ 68.731911][ T4845] tipc: Enabled bearer , priority 10 [ 68.747476][ T4828] loop1: lost filesystem error report for type 5 error -117 [ 68.751023][ T4828] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.370: Invalid inode table block 0 in block_group 0 [ 68.777408][ T4828] loop1: lost filesystem error report for type 5 error -117 [ 68.777607][ T4828] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 68.808683][ T4828] loop1: lost filesystem error report for type 5 error -117 [ 68.808889][ T4828] EXT4-fs error (device loop1): ext4_truncate:4587: inode #11: comm syz.1.370: mark_inode_dirty error [ 68.827831][ T4828] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.837344][ T4828] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 68.841004][ T4856] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 68.848047][ T4828] loop1: lost filesystem error report for type 5 error -117 [ 68.856429][ T4856] syzkaller1: Refused to change device type [ 68.878653][ T4857] loop2: detected capacity change from 0 to 512 [ 68.885111][ T4828] EXT4-fs (loop1): 1 truncate cleaned up [ 68.896697][ T4828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.932910][ T4857] EXT4-fs (loop2): 1 truncate cleaned up [ 68.965461][ T4857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.992121][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.022516][ T4862] netlink: 'syz.0.383': attribute type 5 has an invalid length. [ 69.223891][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.293455][ T4872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.384'. [ 69.375160][ T4872] xt_recent: Unsupported userspace flags (000000b1) [ 69.448313][ T4874] netlink: 'syz.1.385': attribute type 10 has an invalid length. [ 69.461658][ T4874] bridge0: port 3(netdevsim1) entered blocking state [ 69.487010][ T4877] loop3: detected capacity change from 0 to 256 [ 69.553822][ T4874] bridge0: port 3(netdevsim1) entered disabled state [ 69.620840][ T4877] FAT-fs (loop3): Directory bread(block 64) failed [ 69.643144][ T4874] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 69.666444][ T4877] FAT-fs (loop3): Directory bread(block 65) failed [ 69.687152][ T4874] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 69.702239][ T4877] FAT-fs (loop3): Directory bread(block 66) failed [ 69.724404][ T4877] FAT-fs (loop3): Directory bread(block 67) failed [ 69.727729][ T9] tipc: Node number set to 2886997162 [ 69.731235][ T4877] FAT-fs (loop3): Directory bread(block 68) failed [ 69.743909][ T4877] FAT-fs (loop3): Directory bread(block 69) failed [ 69.751339][ T4877] FAT-fs (loop3): Directory bread(block 70) failed [ 69.758010][ T4877] FAT-fs (loop3): Directory bread(block 71) failed [ 69.765276][ T4877] FAT-fs (loop3): Directory bread(block 72) failed [ 69.771972][ T4877] FAT-fs (loop3): Directory bread(block 73) failed [ 69.807713][ T4877] syz.3.388: attempt to access beyond end of device [ 69.807713][ T4877] loop3: rw=8912896, sector=1736, nr_sectors = 32 limit=256 [ 69.826652][ T4877] syz.3.388: attempt to access beyond end of device [ 69.826652][ T4877] loop3: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 69.890551][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 69.890569][ T28] audit: type=1400 audit(1772480553.354:355): avc: denied { mounton } for pid=4875 comm="syz.3.388" path="/89/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 69.985439][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 70.036376][ T4897] loop3: detected capacity change from 0 to 1024 [ 70.053676][ T4897] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 70.054653][ T4901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.395'. [ 70.063189][ T4897] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 70.088604][ T4901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.395'. [ 70.097650][ T4897] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.393: Failed to acquire dquot type 0 [ 70.139378][ T28] audit: type=1400 audit(1772480553.534:356): avc: denied { name_bind } for pid=4900 comm="syz.2.396" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.195732][ T4897] loop3: lost filesystem error report for type 5 error -117 [ 70.197730][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 70.209467][ T4901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.395'. [ 70.211719][ C1] EXT4-fs (loop3): initial error at time 1772480553: ext4_acquire_dquot:7001 [ 70.230039][ C1] EXT4-fs (loop3): last error at time 1772480553: ext4_acquire_dquot:7001 [ 70.247045][ T4897] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 70.284127][ T4901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.395'. [ 70.336570][ T4904] loop1: detected capacity change from 0 to 1024 [ 70.344969][ T4897] EXT4-fs (loop3): 1 truncate cleaned up [ 70.348282][ T4904] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.352683][ T4897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.389032][ T4904] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c018, mo2=0002] [ 70.402467][ T4904] System zones: 0-1, 3-36 [ 70.410453][ T4904] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.394: bad orphan inode 134217728 [ 70.421747][ T4904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.434317][ T4901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.395'. [ 70.435157][ T4904] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.447981][ T4897] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.462642][ T4901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.395'. [ 70.531155][ T4920] IPVS: Error connecting to the multicast addr [ 70.542168][ T28] audit: type=1400 audit(1772480553.954:357): avc: denied { create } for pid=4896 comm="syz.1.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.877311][ T28] audit: type=1400 audit(1772480553.954:358): avc: denied { ioctl } for pid=4896 comm="syz.1.394" path="socket:[9749]" dev="sockfs" ino=9749 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.914456][ T28] audit: type=1400 audit(1772480554.284:359): avc: denied { read } for pid=4925 comm="syz.3.403" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.940226][ T28] audit: type=1400 audit(1772480554.284:360): avc: denied { open } for pid=4925 comm="syz.3.403" path="/dev/input/event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.965007][ T28] audit: type=1400 audit(1772480554.284:361): avc: denied { ioctl } for pid=4925 comm="syz.3.403" path="/dev/input/event3" dev="devtmpfs" ino=246 ioctlcmd=0x4507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.045842][ T4941] loop3: detected capacity change from 0 to 2048 [ 71.140940][ T4941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.159272][ T4946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.406'. [ 71.162976][ T4941] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 71.207628][ T28] audit: type=1400 audit(1772480554.624:362): avc: denied { add_name } for pid=4940 comm="syz.3.408" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.286703][ T4952] loop1: detected capacity change from 0 to 512 [ 71.310826][ T4952] EXT4-fs (loop1): Invalid default hash set in the superblock [ 71.403395][ T4952] loop1: detected capacity change from 0 to 128 [ 71.444778][ T4952] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.707078][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.775343][ T4958] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.803793][ T4958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.816479][ T4958] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.932980][ T4182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.012912][ T4988] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 72.027867][ T4415] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.051714][ T4988] FAT-fs (loop0): Filesystem has been set read-only [ 72.069481][ T4991] EXT4-fs: Ignoring removed nobh option [ 72.098920][ T4991] /dev/loop5: Can't open blockdev [ 72.197541][ T5004] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 72.209047][ T5008] netlink: 'syz.3.421': attribute type 13 has an invalid length. [ 72.229689][ T5004] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 72.246034][ T5008] gretap0: refused to change device tx_queue_len [ 72.256042][ T5004] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 72.266710][ T5004] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: inode #5: comm syz.1.423: unexpected bad inode w/o EXT4_IGET_BAD [ 72.274091][ T5008] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 72.281671][ T5004] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 72.301529][ T5004] EXT4-fs (loop1): no journal found [ 72.310943][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 72.310968][ C0] EXT4-fs (loop1): initial error at time 1772480555: ext4_get_journal_inode:5863: inode 5 [ 72.310998][ C0] EXT4-fs (loop1): last error at time 1772480555: ext4_get_journal_inode:5863: inode 5 [ 72.365274][ T5004] EXT4-fs (loop1): can't get journal size [ 72.373168][ T5004] EXT4-fs (loop1): failed to initialize system zone (-117) [ 72.380666][ T5004] EXT4-fs (loop1): mount failed [ 72.444239][ T5030] tipc: Enabling of bearer rejected, already enabled [ 72.620736][ T5042] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5042 comm=syz.2.432 [ 72.639764][ T5048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.434'. [ 72.649073][ T5048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.434'. [ 72.848549][ T5056] ip6gre1: entered promiscuous mode [ 72.885641][ T5056] ip6gre1: entered allmulticast mode [ 74.415572][ T5105] syzkaller0: entered promiscuous mode [ 74.441833][ T5105] syzkaller0: entered allmulticast mode [ 74.910135][ T28] kauditd_printk_skb: 198 callbacks suppressed [ 74.910153][ T28] audit: type=1400 audit(1772480558.374:561): avc: denied { create } for pid=5148 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 74.946114][ T28] audit: type=1400 audit(1772480558.404:562): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.997931][ T28] audit: type=1400 audit(1772480558.404:563): avc: denied { create } for pid=5146 comm="syz.5.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 75.018710][ T28] audit: type=1400 audit(1772480558.404:564): avc: denied { create } for pid=5146 comm="syz.5.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 75.039310][ T28] audit: type=1400 audit(1772480558.404:565): avc: denied { open } for pid=5146 comm="syz.5.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 75.041851][ T5153] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 75.058751][ T28] audit: type=1400 audit(1772480558.404:566): avc: denied { open } for pid=5146 comm="syz.5.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 75.087774][ T28] audit: type=1400 audit(1772480558.414:567): avc: denied { execmem } for pid=5150 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 75.106881][ T28] audit: type=1400 audit(1772480558.434:568): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.131466][ T28] audit: type=1400 audit(1772480558.444:569): avc: denied { read write } for pid=4182 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.155715][ T28] audit: type=1400 audit(1772480558.464:570): avc: denied { create } for pid=5154 comm="syz.5.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 75.176510][ T5153] bond1 (unregistering): Released all slaves [ 75.209319][ T5157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.472'. [ 75.227669][ T5159] netlink: 'syz.0.475': attribute type 12 has an invalid length. [ 75.438447][ T5183] ipvlan2: entered allmulticast mode [ 75.454004][ T5183] dummy0: entered allmulticast mode [ 76.544678][ T5220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 76.956291][ T5230] No such timeout policy "syz0" [ 77.797452][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 78.515540][ T5251] team_slave_0: entered promiscuous mode [ 78.521263][ T5251] team_slave_1: entered promiscuous mode [ 78.537247][ T5251] macvtap1: entered promiscuous mode [ 78.557378][ T5251] team0: entered promiscuous mode [ 78.563310][ T5251] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 78.577604][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.658642][ T5257] bond3: option fail_over_mac: invalid value (127) [ 78.678585][ T5257] bond3 (unregistering): Released all slaves [ 79.965693][ T28] kauditd_printk_skb: 266 callbacks suppressed [ 79.965705][ T28] audit: type=1400 audit(1772480563.424:837): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.997230][ T28] audit: type=1400 audit(1772480563.434:838): avc: denied { name_bind } for pid=5302 comm="syz.3.527" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 80.025182][ T28] audit: type=1400 audit(1772480563.444:839): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.052088][ T28] audit: type=1400 audit(1772480563.474:840): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.089796][ T28] audit: type=1400 audit(1772480563.474:841): avc: denied { create } for pid=5308 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 80.110320][ T28] audit: type=1400 audit(1772480563.474:842): avc: denied { open } for pid=5308 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 80.129877][ T28] audit: type=1400 audit(1772480563.474:843): avc: denied { prog_load } for pid=5308 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.158301][ T28] audit: type=1400 audit(1772480563.474:844): avc: denied { map_create } for pid=5308 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.197416][ T28] audit: type=1400 audit(1772480563.474:845): avc: denied { create } for pid=5308 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 80.225706][ T28] audit: type=1400 audit(1772480563.474:846): avc: denied { module_request } for pid=5308 comm="syz.3.529" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 80.418796][ T5331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'. [ 80.597915][ T3583] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.762020][ T5359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.549'. [ 80.807466][ T5359] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 81.249542][ T5375] team_slave_0: entered promiscuous mode [ 81.255286][ T5375] team_slave_1: entered promiscuous mode [ 81.309779][ T5375] macvtap1: entered promiscuous mode [ 81.325499][ T5375] team0: entered promiscuous mode [ 81.332939][ T5375] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 81.356241][ T5378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.555'. [ 81.365291][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.381636][ T5382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.392317][ T5378] bridge0: entered promiscuous mode [ 81.397847][ T5378] macvlan2: entered promiscuous mode [ 81.480295][ T5386] netlink: 'syz.1.558': attribute type 13 has an invalid length. [ 81.543221][ T5392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 81.651683][ T5402] gtp0: entered promiscuous mode [ 81.656965][ T5402] team0: Device gtp0 is of different type [ 81.699287][ T5403] netlink: 'syz.1.566': attribute type 10 has an invalid length. [ 81.711986][ T5403] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 82.618089][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 82.627231][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 82.636978][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 83.397509][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.883659][ T5488] syzkaller0: entered promiscuous mode [ 83.897490][ T5488] syzkaller0: entered allmulticast mode [ 84.238272][ T5499] team_slave_0: entered promiscuous mode [ 84.243972][ T5499] team_slave_1: entered promiscuous mode [ 84.259033][ T5499] macvtap1: entered promiscuous mode [ 84.272088][ T5499] team0: entered promiscuous mode [ 84.283943][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.295186][ T5499] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 84.303033][ T5504] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 84.403648][ T5514] syzkaller0: entered promiscuous mode [ 84.418212][ T5514] syzkaller0: entered allmulticast mode [ 84.816579][ T5528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5528 comm=syz.3.614 [ 85.045983][ T28] kauditd_printk_skb: 395 callbacks suppressed [ 85.046005][ T28] audit: type=1400 audit(1772480568.504:1242): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.077529][ T28] audit: type=1400 audit(1772480568.544:1243): avc: denied { open } for pid=5542 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 85.098746][ T28] audit: type=1400 audit(1772480568.564:1244): avc: denied { prog_load } for pid=5542 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.119440][ T28] audit: type=1400 audit(1772480568.584:1245): avc: denied { create } for pid=5542 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 85.140677][ T28] audit: type=1400 audit(1772480568.604:1246): avc: denied { create } for pid=5542 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 85.185412][ T28] audit: type=1400 audit(1772480568.604:1247): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.210429][ T5551] Cannot find del_set index 0 as target [ 85.216892][ T28] audit: type=1400 audit(1772480568.634:1248): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.265914][ T5557] netlink: 'syz.2.625': attribute type 5 has an invalid length. [ 85.321372][ T28] audit: type=1400 audit(1772480568.634:1249): avc: denied { prog_load } for pid=5545 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.341573][ T28] audit: type=1400 audit(1772480568.644:1250): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.366124][ T5562] netlink: 48 bytes leftover after parsing attributes in process `syz.0.627'. [ 85.367747][ T28] audit: type=1400 audit(1772480568.704:1251): avc: denied { create } for pid=5552 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 85.449696][ T5569] mmap: syz.0.627 (5569) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.925283][ T5584] netlink: 'syz.1.634': attribute type 10 has an invalid length. [ 86.358061][ T3583] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.531354][ T5609] bond1: entered promiscuous mode [ 86.543482][ T5609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.570045][ T5609] bridge2: entered promiscuous mode [ 86.578383][ T5609] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 86.757465][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.588864][ T5689] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 87.627275][ T5689] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.659138][ T5689] bond2: (slave geneve2): making interface the new active one [ 87.678255][ T5689] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 87.909886][ T5704] ip6gre1: entered promiscuous mode [ 87.916441][ T5704] ip6gre1: entered allmulticast mode [ 88.064626][ T5717] bond3: (slave bond_slave_1): Device is not our slave [ 88.101419][ T5717] bond3: option active_slave: invalid value (bond_slave_1) [ 88.120139][ T5726] FAULT_INJECTION: forcing a failure. [ 88.120139][ T5726] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.145866][ T5726] CPU: 1 UID: 0 PID: 5726 Comm: syz.0.691 Tainted: G W syzkaller #0 PREEMPT(full) [ 88.145901][ T5726] Tainted: [W]=WARN [ 88.145950][ T5717] bond3 (unregistering): Released all slaves [ 88.145957][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.146041][ T5726] Call Trace: [ 88.146048][ T5726] [ 88.146056][ T5726] __dump_stack+0x1d/0x30 [ 88.146111][ T5726] dump_stack_lvl+0x95/0xd0 [ 88.146135][ T5726] dump_stack+0x15/0x1b [ 88.146157][ T5726] should_fail_ex+0x263/0x280 [ 88.146181][ T5726] should_fail+0xb/0x20 [ 88.146267][ T5726] should_fail_usercopy+0x1a/0x20 [ 88.146290][ T5726] _copy_from_user+0x1c/0xb0 [ 88.146357][ T5726] memdup_user_nul+0x5f/0xe0 [ 88.146377][ T5726] sel_write_enforce+0x9c/0x2d0 [ 88.146403][ T5726] vfs_writev+0x42b/0x900 [ 88.146427][ T5726] ? __pfx_sel_write_enforce+0x10/0x10 [ 88.146555][ T5726] do_writev+0xe9/0x210 [ 88.146621][ T5726] __x64_sys_writev+0x45/0x50 [ 88.146641][ T5726] x64_sys_call+0x1c0c/0x3020 [ 88.146699][ T5726] do_syscall_64+0x12c/0x370 [ 88.146721][ T5726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.146764][ T5726] RIP: 0033:0x7feebc05c799 [ 88.146781][ T5726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.146799][ T5726] RSP: 002b:00007feebaab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 88.146833][ T5726] RAX: ffffffffffffffda RBX: 00007feebc2d5fa0 RCX: 00007feebc05c799 [ 88.146848][ T5726] RDX: 0000000000000002 RSI: 0000200000002b00 RDI: 0000000000000003 [ 88.146861][ T5726] RBP: 00007feebaab7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.146874][ T5726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.146887][ T5726] R13: 00007feebc2d6038 R14: 00007feebc2d5fa0 R15: 00007ffece5e6358 [ 88.146906][ T5726] [ 88.236199][ T5736] netlink: 'syz.1.696': attribute type 12 has an invalid length. [ 88.348811][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 88.379426][ T309] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.379450][ T5736] netlink: 'syz.1.696': attribute type 12 has an invalid length. [ 88.392650][ T309] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.396305][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 88.455153][ T309] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.490590][ T309] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.532649][ T5750] syzkaller0: entered promiscuous mode [ 88.543200][ T5750] syzkaller0: entered allmulticast mode [ 89.021863][ T5798] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 89.048051][ T5797] netlink: 64 bytes leftover after parsing attributes in process `syz.3.722'. [ 89.065427][ T5798] bond1 (unregistering): Released all slaves [ 89.087170][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 89.103870][ T5799] netlink: 44 bytes leftover after parsing attributes in process `syz.3.722'. [ 89.112859][ T5809] netlink: 44 bytes leftover after parsing attributes in process `syz.3.722'. [ 89.181661][ T5821] netlink: 'syz.5.731': attribute type 1 has an invalid length. [ 89.331185][ T5840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.740'. [ 89.392289][ T5841] ipvlan2: entered allmulticast mode [ 89.781805][ T5851] No such timeout policy "syz0" [ 89.881995][ T5873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.752'. [ 90.047630][ T28] kauditd_printk_skb: 10432 callbacks suppressed [ 90.047651][ T28] audit: type=1400 audit(1772480573.514:9524): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.057665][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.089868][ T5883] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.096457][ T5883] audit: audit_lost=721 audit_rate_limit=0 audit_backlog_limit=64 [ 90.113454][ T5881] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.115629][ T3322] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.120107][ T5883] audit: backlog limit exceeded [ 90.128213][ T3315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.131483][ T28] audit: type=1400 audit(1772480573.514:9525): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.163925][ T5881] audit: audit_lost=722 audit_rate_limit=0 audit_backlog_limit=64 [ 90.178155][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'. [ 90.776440][ T5916] ipvlan2: entered allmulticast mode [ 91.356098][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 91.580817][ T5965] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 91.707601][ T5980] netlink: 'syz.2.793': attribute type 13 has an invalid length. [ 91.947487][ T6013] netlink: 'syz.1.807': attribute type 29 has an invalid length. [ 92.534565][ T6036] can0: slcan on ttyS3. [ 92.587446][ T6037] can0 (unregistered): slcan off ttyS3. [ 92.772299][ T6045] netlink: 'syz.3.819': attribute type 13 has an invalid length. [ 92.907586][ T3531] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.934581][ T6055] netlink: 'syz.3.823': attribute type 4 has an invalid length. [ 92.949769][ T6055] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 93.363447][ T6087] syzkaller0: entered promiscuous mode [ 93.387772][ T6087] syzkaller0: entered allmulticast mode [ 93.578079][ T3531] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.159806][ T6110] __nla_validate_parse: 4 callbacks suppressed [ 94.159823][ T6110] netlink: 56 bytes leftover after parsing attributes in process `syz.1.842'. [ 94.257163][ T6117] syzkaller0: entered promiscuous mode [ 94.291401][ T6117] syzkaller0: entered allmulticast mode [ 94.770334][ T6143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.851110][ T6149] Cannot find del_set index 0 as target [ 94.932490][ T6154] netlink: 'syz.3.859': attribute type 5 has an invalid length. [ 95.057496][ T28] kauditd_printk_skb: 27084 callbacks suppressed [ 95.057514][ T28] audit: type=1400 audit(1772480578.504:26984): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.096746][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.099819][ T6181] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.109887][ T3038] audit: audit_lost=3932 audit_rate_limit=0 audit_backlog_limit=64 [ 95.110775][ T6178] netlink: 'syz.3.865': attribute type 10 has an invalid length. [ 95.119168][ T3315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.125886][ T6179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.132489][ T3038] audit: backlog limit exceeded [ 95.141068][ T6181] audit: audit_lost=3933 audit_rate_limit=0 audit_backlog_limit=64 [ 95.144380][ T6184] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.151791][ T6178] bridge0: port 3(netdevsim1) entered blocking state [ 95.158347][ T3315] audit: audit_lost=3934 audit_rate_limit=0 audit_backlog_limit=64 [ 95.181560][ T6178] bridge0: port 3(netdevsim1) entered disabled state [ 95.189566][ T6178] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 95.201219][ T6178] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 95.209195][ T6178] bridge0: port 3(netdevsim1) entered blocking state [ 95.215929][ T6178] bridge0: port 3(netdevsim1) entered forwarding state [ 95.421368][ T3531] Process accounting resumed [ 97.117932][ T6362] team0: Port device team_slave_0 removed [ 97.138516][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 97.332209][ T6379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=6379 comm=syz.3.942 [ 97.579336][ T6393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.948'. [ 97.784120][ T6385] No such timeout policy "syz0" [ 98.664658][ T6424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=6424 comm=syz.5.959 [ 99.124611][ T6441] No such timeout policy "syz0" [ 99.231274][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.5.968'. [ 99.638834][ T6475] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 99.645394][ T6475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.686132][ T6475] vhci_hcd vhci_hcd.0: Device attached [ 99.699786][ T6483] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 99.706359][ T6483] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.717185][ T6483] vhci_hcd vhci_hcd.0: Device attached [ 99.723977][ T6475] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(6) [ 99.730535][ T6475] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 99.756690][ T6475] vhci_hcd vhci_hcd.0: Device attached [ 99.763858][ T6475] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(10) [ 99.770708][ T6475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.782975][ T6475] vhci_hcd vhci_hcd.0: Device attached [ 99.792294][ T6475] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(12) [ 99.798931][ T6475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.808828][ T6475] vhci_hcd vhci_hcd.0: Device attached [ 99.817261][ T6475] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.843547][ T6475] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(16) [ 99.850328][ T6475] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.864283][ T6475] vhci_hcd vhci_hcd.0: Device attached [ 99.873683][ T6495] vhci_hcd: connection closed [ 99.873884][ T6492] vhci_hcd: connection closed [ 99.879209][ T50] vhci_hcd vhci_hcd.0: stop threads [ 99.879285][ T6490] vhci_hcd: connection closed [ 99.883916][ T50] vhci_hcd vhci_hcd.0: release socket [ 99.883970][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 99.890168][ T6487] vhci_hcd: connection closed [ 99.905719][ T50] vhci_hcd vhci_hcd.0: stop threads [ 99.905764][ T6479] vhci_hcd: connection closed [ 99.916150][ T6484] vhci_hcd: connection closed [ 99.920171][ T50] vhci_hcd vhci_hcd.0: release socket [ 99.947102][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 99.956976][ T50] vhci_hcd vhci_hcd.0: stop threads [ 99.967455][ T3531] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 99.974797][ T6480] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 99.983264][ T50] vhci_hcd vhci_hcd.0: release socket [ 99.989779][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 100.000813][ T50] vhci_hcd vhci_hcd.0: stop threads [ 100.006045][ T50] vhci_hcd vhci_hcd.0: release socket [ 100.032025][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 100.050540][ T50] vhci_hcd vhci_hcd.0: stop threads [ 100.061168][ T50] vhci_hcd vhci_hcd.0: release socket [ 100.067621][ T28] kauditd_printk_skb: 17125 callbacks suppressed [ 100.067636][ T28] audit: type=1400 audit(1772480583.534:42548): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.104889][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.107466][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 100.111511][ T3038] audit: audit_lost=4456 audit_rate_limit=0 audit_backlog_limit=64 [ 100.119495][ T50] vhci_hcd vhci_hcd.0: stop threads [ 100.127994][ T28] audit: type=1400 audit(1772480583.554:42549): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.151760][ T3038] audit: backlog limit exceeded [ 100.161962][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.169166][ T50] vhci_hcd vhci_hcd.0: release socket [ 100.171857][ T3038] audit: audit_lost=4457 audit_rate_limit=0 audit_backlog_limit=64 [ 100.181260][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 100.187369][ T28] audit: type=1400 audit(1772480583.554:42550): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.217486][ T3038] audit: backlog limit exceeded [ 100.228688][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.462417][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.582704][ T6527] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 100.601580][ T6527] bond2 (unregistering): Released all slaves [ 101.161518][ T6576] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1010'. [ 102.161513][ T6641] ipvlan2: entered allmulticast mode [ 102.192346][ T6619] No such timeout policy "syz0" [ 102.517393][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.517410][ T3583] Bluetooth: hci0: command 0x1003 tx timeout [ 102.961896][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1052'. [ 103.060363][ T6697] netlink: 'syz.1.1057': attribute type 10 has an invalid length. [ 103.084751][ T6697] bridge0: entered promiscuous mode [ 103.102097][ T6697] team0: Port device bridge0 added [ 103.189697][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1065'. [ 103.200370][ T6712] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 103.280732][ T6714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1066'. [ 103.280732][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1066'. [ 103.475518][ T6730] pim6reg1: entered promiscuous mode [ 103.508603][ T6730] pim6reg1: entered allmulticast mode [ 103.583866][ T6739] netlink: 'syz.2.1076': attribute type 13 has an invalid length. [ 103.890486][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.898073][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.910768][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.924990][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.970209][ T6783] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.091873][ T6795] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 104.099122][ T6795] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 104.106756][ T6795] bridge0: port 3(netdevsim1) entered disabled state [ 104.115394][ T6795] bridge_slave_1: left allmulticast mode [ 104.125310][ T6795] bridge_slave_1: left promiscuous mode [ 104.131546][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.139765][ T6795] bridge_slave_0: left allmulticast mode [ 104.146420][ T6795] bridge_slave_0: left promiscuous mode [ 104.153915][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.677466][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.997481][ T3531] usb 1-1: enqueue for inactive port 0 [ 105.004059][ T6840] syzkaller0: entered promiscuous mode [ 105.013261][ T3531] usb 1-1: enqueue for inactive port 0 [ 105.031409][ T6840] syzkaller0: entered allmulticast mode [ 105.080881][ T28] kauditd_printk_skb: 29423 callbacks suppressed [ 105.080899][ T28] audit: type=1400 audit(1772480844.540:61793): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.089191][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.115702][ T3531] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 105.122360][ T3038] audit: audit_lost=7852 audit_rate_limit=0 audit_backlog_limit=64 [ 105.130563][ T3038] audit: backlog limit exceeded [ 105.135680][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.147222][ T6841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.156442][ T6841] audit: audit_lost=7853 audit_rate_limit=0 audit_backlog_limit=64 [ 105.157043][ T3309] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.164560][ T28] audit: type=1400 audit(1772480844.540:61794): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.174771][ T3038] audit: audit_lost=7854 audit_rate_limit=0 audit_backlog_limit=64 [ 106.481101][ T6885] syzkaller0: entered promiscuous mode [ 106.486675][ T6885] syzkaller0: entered allmulticast mode [ 106.919657][ T6898] 8021q: VLANs not supported on ip_vti0 [ 107.032259][ T6905] netlink: 'syz.2.1140': attribute type 10 has an invalid length. [ 107.057522][ T6905] bridge0: port 3(netdevsim1) entered blocking state [ 107.064389][ T6905] bridge0: port 3(netdevsim1) entered disabled state [ 107.079084][ T6905] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 107.101964][ T6905] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 107.120399][ T6905] bridge0: port 3(netdevsim1) entered blocking state [ 107.127330][ T6905] bridge0: port 3(netdevsim1) entered forwarding state [ 107.821196][ T6915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.156821][ T6930] 8021q: VLANs not supported on ip_vti0 [ 108.364028][ T6942] netlink: 'syz.1.1154': attribute type 10 has an invalid length. [ 108.658961][ T6953] Cannot find del_set index 0 as target [ 109.956654][ T6988] netlink: 'syz.5.1169': attribute type 5 has an invalid length. [ 110.084118][ T6999] netlink: 'syz.0.1171': attribute type 10 has an invalid length. [ 110.092164][ T28] kauditd_printk_skb: 28561 callbacks suppressed [ 110.092307][ T28] audit: type=1400 audit(1772480849.540:79420): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.107862][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 110.136915][ T7000] audit: audit_backlog=65 > audit_backlog_limit=64 [ 110.143543][ T7000] audit: audit_lost=11500 audit_rate_limit=0 audit_backlog_limit=64 [ 110.152448][ T7004] audit: audit_backlog=65 > audit_backlog_limit=64 [ 110.159849][ T6992] audit: audit_backlog=65 > audit_backlog_limit=64 [ 110.162427][ T7004] audit: audit_lost=11501 audit_rate_limit=0 audit_backlog_limit=64 [ 110.168636][ T28] audit: type=1400 audit(1772480849.550:79421): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.184562][ T3038] audit: audit_lost=11502 audit_rate_limit=0 audit_backlog_limit=64 [ 110.198786][ T7006] audit: audit_backlog=65 > audit_backlog_limit=64 [ 110.494442][ T7024] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1184'. [ 111.077445][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 111.433014][ T7050] netlink: 'syz.5.1190': attribute type 10 has an invalid length. [ 111.463736][ T7050] bridge0: port 3(netdevsim1) entered blocking state [ 111.494039][ T7053] netlink: 'syz.3.1188': attribute type 10 has an invalid length. [ 111.504993][ T7050] bridge0: port 3(netdevsim1) entered disabled state [ 111.534853][ T7050] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 111.571508][ T7050] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 111.591269][ T7050] bridge0: port 3(netdevsim1) entered blocking state [ 111.598142][ T7050] bridge0: port 3(netdevsim1) entered forwarding state [ 112.088529][ T7070] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 112.114416][ T7070] dvmrp1: linktype set to 270 [ 112.257375][ T7078] batman_adv: batadv0: Adding interface: dummy0 [ 112.263679][ T7078] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.330001][ T7078] batman_adv: batadv0: Interface activated: dummy0 [ 113.164023][ T7100] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1202'. [ 113.216615][ T7100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.240848][ T7100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.258775][ T7100] bond0 (unregistering): Released all slaves [ 114.047521][ T7120] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1211'. [ 114.078897][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1214'. [ 114.117143][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1214'. [ 114.117401][ T3583] Bluetooth: hci0: command 0x1003 tx timeout [ 114.126190][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.518863][ T7156] FAULT_INJECTION: forcing a failure. [ 114.518863][ T7156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.553820][ T7156] CPU: 0 UID: 0 PID: 7156 Comm: syz.5.1224 Tainted: G W syzkaller #0 PREEMPT(full) [ 114.553915][ T7156] Tainted: [W]=WARN [ 114.553922][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.553933][ T7156] Call Trace: [ 114.553941][ T7156] [ 114.553949][ T7156] __dump_stack+0x1d/0x30 [ 114.554060][ T7156] dump_stack_lvl+0x95/0xd0 [ 114.554082][ T7156] dump_stack+0x15/0x1b [ 114.554102][ T7156] should_fail_ex+0x263/0x280 [ 114.554182][ T7156] should_fail+0xb/0x20 [ 114.554203][ T7156] should_fail_usercopy+0x1a/0x20 [ 114.554305][ T7156] _copy_from_user+0x1c/0xb0 [ 114.554372][ T7156] memdup_user_nul+0x5f/0xe0 [ 114.554443][ T7156] sel_write_enforce+0x9c/0x2d0 [ 114.554469][ T7156] vfs_writev+0x42b/0x900 [ 114.554491][ T7156] ? __pfx_sel_write_enforce+0x10/0x10 [ 114.554527][ T7156] do_writev+0xe9/0x210 [ 114.554628][ T7156] __x64_sys_writev+0x45/0x50 [ 114.554651][ T7156] x64_sys_call+0x1c0c/0x3020 [ 114.554679][ T7156] do_syscall_64+0x12c/0x370 [ 114.554703][ T7156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.554789][ T7156] RIP: 0033:0x7f547499c799 [ 114.554858][ T7156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.554879][ T7156] RSP: 002b:00007f54733f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 114.554904][ T7156] RAX: ffffffffffffffda RBX: 00007f5474c15fa0 RCX: 00007f547499c799 [ 114.554920][ T7156] RDX: 0000000000000002 RSI: 0000200000002b00 RDI: 0000000000000003 [ 114.554936][ T7156] RBP: 00007f54733f7090 R08: 0000000000000000 R09: 0000000000000000 [ 114.554950][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.554990][ T7156] R13: 00007f5474c16038 R14: 00007f5474c15fa0 R15: 00007ffd9b8718c8 [ 114.555007][ T7156] [ 115.100308][ T28] kauditd_printk_skb: 17465 callbacks suppressed [ 115.100324][ T28] audit: type=1400 audit(1772480854.560:92584): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.142666][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.161452][ T3038] audit: audit_lost=12937 audit_rate_limit=0 audit_backlog_limit=64 [ 115.168865][ T3315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.176141][ T4182] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.187448][ T3038] audit: backlog limit exceeded [ 115.192535][ T28] audit: type=1400 audit(1772480854.590:92585): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.214272][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.221068][ T4182] audit: audit_lost=12938 audit_rate_limit=0 audit_backlog_limit=64 [ 115.229580][ T3038] audit: audit_lost=12939 audit_rate_limit=0 audit_backlog_limit=64 [ 115.677912][ T7191] syzkaller0: entered promiscuous mode [ 115.701689][ T7191] syzkaller0: entered allmulticast mode [ 115.963897][ T7215] xt_nat: multiple ranges no longer supported [ 116.070010][ T7226] syz_tun: entered promiscuous mode [ 116.081274][ T7226] team0: Port device syz_tun added [ 116.114288][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1255'. [ 116.144136][ T7226] syz_tun: left promiscuous mode [ 116.170311][ T7226] team0: Port device syz_tun removed [ 116.203413][ T7226] bridge_slave_0: left allmulticast mode [ 116.219162][ T7226] bridge_slave_0: left promiscuous mode [ 116.234324][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.268720][ T7226] bridge_slave_1: left allmulticast mode [ 116.274535][ T7226] bridge_slave_1: left promiscuous mode [ 116.280883][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.310385][ T7226] bond0: (slave bond_slave_0): Releasing backup interface [ 116.327543][ T7226] bond0: (slave bond_slave_1): Releasing backup interface [ 116.352412][ T7226] team_slave_0: left promiscuous mode [ 116.373468][ T7226] team0: Port device team_slave_0 removed [ 116.396707][ T7226] team_slave_1: left promiscuous mode [ 116.404125][ T7226] team0: Port device team_slave_1 removed [ 116.412094][ T7226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.422768][ T7226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.462021][ T7226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.469864][ T7226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.499074][ T7226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.723179][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1275'. [ 116.948466][ T7265] No such timeout policy "syz0" [ 116.995692][ T7300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1282'. [ 117.030043][ T7300] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 117.265635][ T7330] netlink: 'syz.2.1292': attribute type 13 has an invalid length. [ 117.294689][ T3496] IPVS: starting estimator thread 0... [ 117.397511][ T7342] IPVS: using max 2592 ests per chain, 129600 per kthread [ 117.424480][ T7360] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 117.600085][ T7379] netlink: 'syz.0.1313': attribute type 10 has an invalid length. [ 117.651282][ T7379] team0 (unregistering): Port device team_slave_0 removed [ 117.705182][ T7379] team0 (unregistering): Port device team_slave_1 removed [ 118.669981][ T7416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.934686][ T7422] Cannot find del_set index 0 as target [ 119.346360][ T7437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7437 comm=syz.3.1337 [ 119.858418][ T7461] syzkaller0: entered promiscuous mode [ 119.877439][ T7461] syzkaller0: entered allmulticast mode [ 120.107638][ T28] kauditd_printk_skb: 16474 callbacks suppressed [ 120.107656][ T28] audit: type=1400 audit(1772481115.571:108612): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 120.161799][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.168672][ T3038] audit: audit_lost=13089 audit_rate_limit=0 audit_backlog_limit=64 [ 120.176703][ T3038] audit: backlog limit exceeded [ 120.184637][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.191532][ T28] audit: type=1400 audit(1772481115.591:108613): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 120.217385][ T3038] audit: audit_lost=13090 audit_rate_limit=0 audit_backlog_limit=64 [ 120.227504][ T3038] audit: backlog limit exceeded [ 120.235691][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.242364][ T28] audit: type=1400 audit(1772481115.591:108614): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 121.044878][ T7502] syzkaller0: entered promiscuous mode [ 121.061651][ T7502] syzkaller0: entered allmulticast mode [ 123.142217][ T7586] No such timeout policy "syz0" [ 123.433389][ T7631] ipvlan2: entered allmulticast mode [ 123.468440][ T7631] dummy0: entered allmulticast mode [ 123.643880][ T7643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.661207][ T7645] Cannot find del_set index 0 as target [ 123.796402][ T7650] syzkaller0: entered promiscuous mode [ 123.824091][ T7650] syzkaller0: entered allmulticast mode [ 124.277534][ T7679] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1434'. [ 124.318879][ T7683] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 124.558673][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1440'. [ 124.572116][ T7698] netlink: 'syz.5.1439': attribute type 10 has an invalid length. [ 124.773805][ T7706] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.120687][ T28] kauditd_printk_skb: 22203 callbacks suppressed [ 125.120704][ T28] audit: type=1400 audit(1772481120.581:127507): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.128707][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 125.205461][ T28] audit: type=1400 audit(1772481120.581:127508): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.217368][ T3038] audit: audit_lost=14195 audit_rate_limit=0 audit_backlog_limit=64 [ 125.243162][ T3309] audit: audit_backlog=65 > audit_backlog_limit=64 [ 125.247165][ T3038] audit: backlog limit exceeded [ 125.254880][ T7726] audit: audit_backlog=65 > audit_backlog_limit=64 [ 125.261510][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 125.263964][ T28] audit: type=1400 audit(1772481120.581:127509): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.277429][ T7726] audit: audit_lost=14196 audit_rate_limit=0 audit_backlog_limit=64 [ 125.425347][ T7729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1451'. [ 125.465476][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'. [ 125.552397][ T7729] geneve2: entered promiscuous mode [ 125.725531][ T7755] FAULT_INJECTION: forcing a failure. [ 125.725531][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 125.757777][ T7753] ip6gre1: entered promiscuous mode [ 125.775600][ T7755] CPU: 0 UID: 0 PID: 7755 Comm: syz.3.1465 Tainted: G W syzkaller #0 PREEMPT(full) [ 125.775701][ T7755] Tainted: [W]=WARN [ 125.775708][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.775719][ T7755] Call Trace: [ 125.775725][ T7755] [ 125.775731][ T7755] __dump_stack+0x1d/0x30 [ 125.775806][ T7755] dump_stack_lvl+0x95/0xd0 [ 125.775833][ T7755] dump_stack+0x15/0x1b [ 125.775858][ T7755] should_fail_ex+0x263/0x280 [ 125.776002][ T7755] should_failslab+0x8c/0xb0 [ 125.776022][ T7755] kmem_cache_alloc_noprof+0x66/0x400 [ 125.776047][ T7755] ? do_getname+0x2e/0x1c0 [ 125.776144][ T7755] do_getname+0x2e/0x1c0 [ 125.776164][ T7755] getname_flags+0x1d/0x30 [ 125.776186][ T7755] do_sys_openat2+0x60/0x130 [ 125.776225][ T7755] __x64_sys_openat+0xf2/0x120 [ 125.776291][ T7755] x64_sys_call+0x1e39/0x3020 [ 125.776322][ T7755] do_syscall_64+0x12c/0x370 [ 125.776346][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.776371][ T7755] RIP: 0033:0x7fe42f2dc799 [ 125.776457][ T7755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.776477][ T7755] RSP: 002b:00007fe42dd2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 125.776532][ T7755] RAX: ffffffffffffffda RBX: 00007fe42f555fa0 RCX: 00007fe42f2dc799 [ 125.776547][ T7755] RDX: 000000000000275a RSI: 00002000000002c0 RDI: 0000000000000005 [ 125.776563][ T7755] RBP: 00007fe42dd2f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.776622][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.776633][ T7755] R13: 00007fe42f556038 R14: 00007fe42f555fa0 R15: 00007ffd0fd9d2e8 [ 125.776650][ T7755] [ 125.776771][ T7753] ip6gre1: entered allmulticast mode [ 126.048095][ T7769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.086489][ T4415] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.106764][ T4415] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.117502][ T3531] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.142916][ T7785] syzkaller0: entered promiscuous mode [ 126.157736][ T7785] syzkaller0: entered allmulticast mode [ 126.550354][ T7822] ipvlan2: entered allmulticast mode [ 126.838566][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.911975][ T7852] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 126.927672][ T3531] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.958897][ T7852] bond3 (unregistering): Released all slaves [ 127.232785][ T7871] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 127.232785][ T7871] The task syz.3.1504 (7871) triggered the difference, watch for misbehavior. [ 127.303178][ T7875] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1508'. [ 128.137662][ T7923] syzkaller0: entered promiscuous mode [ 128.174456][ T7923] syzkaller0: entered allmulticast mode [ 128.257224][ T7923] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1527'. [ 128.295742][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1530'. [ 128.313501][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1530'. [ 128.348443][ T50] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.366205][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1530'. [ 128.385295][ T50] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.387405][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1530'. [ 128.395032][ T7919] No such timeout policy "syz0" [ 128.417752][ T50] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.443464][ T7936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.445583][ T50] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.575016][ T7946] netlink: 'syz.5.1537': attribute type 5 has an invalid length. [ 128.663466][ T7953] ipvlan2: entered allmulticast mode [ 128.744051][ T7954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.810586][ T7961] netlink: 'syz.0.1541': attribute type 7 has an invalid length. [ 128.853219][ T7961] netlink: 'syz.0.1541': attribute type 8 has an invalid length. [ 128.870783][ T7961] erspan0: entered promiscuous mode [ 128.871819][ T7961] gretap0: entered promiscuous mode [ 129.061482][ T7972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7972 comm=syz.0.1546 [ 129.119078][ T7972] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 129.395784][ T7975] FAULT_INJECTION: forcing a failure. [ 129.395784][ T7975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.447340][ T7975] CPU: 1 UID: 0 PID: 7975 Comm: syz.2.1547 Tainted: G W syzkaller #0 PREEMPT(full) [ 129.447379][ T7975] Tainted: [W]=WARN [ 129.447387][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.447471][ T7975] Call Trace: [ 129.447480][ T7975] [ 129.447489][ T7975] __dump_stack+0x1d/0x30 [ 129.447520][ T7975] dump_stack_lvl+0x95/0xd0 [ 129.447546][ T7975] dump_stack+0x15/0x1b [ 129.447567][ T7975] should_fail_ex+0x263/0x280 [ 129.447669][ T7975] should_fail+0xb/0x20 [ 129.447689][ T7975] should_fail_usercopy+0x1a/0x20 [ 129.447762][ T7975] _copy_to_user+0x20/0xa0 [ 129.447786][ T7975] simple_read_from_buffer+0xb5/0x130 [ 129.447806][ T7975] proc_fail_nth_read+0x10e/0x150 [ 129.447832][ T7975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.447866][ T7975] vfs_read+0x1ab/0x7f0 [ 129.447893][ T7975] ? __rcu_read_unlock+0x4e/0x70 [ 129.447912][ T7975] ? __fget_files+0x184/0x1c0 [ 129.447932][ T7975] ? mutex_lock+0x57/0x90 [ 129.447988][ T7975] ksys_read+0xdc/0x1a0 [ 129.448016][ T7975] __x64_sys_read+0x40/0x50 [ 129.448064][ T7975] x64_sys_call+0x2886/0x3020 [ 129.448098][ T7975] do_syscall_64+0x12c/0x370 [ 129.448116][ T7975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.448185][ T7975] RIP: 0033:0x7f7feb8dcfce [ 129.448200][ T7975] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 129.448216][ T7975] RSP: 002b:00007f7fea376fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.448234][ T7975] RAX: ffffffffffffffda RBX: 00007f7fea3776c0 RCX: 00007f7feb8dcfce [ 129.448254][ T7975] RDX: 000000000000000f RSI: 00007f7fea3770a0 RDI: 0000000000000004 [ 129.448320][ T7975] RBP: 00007f7fea377090 R08: 0000000000000000 R09: 0000000000000000 [ 129.448332][ T7975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.448343][ T7975] R13: 00007f7febb96038 R14: 00007f7febb95fa0 R15: 00007ffeb3b6ba78 [ 129.448359][ T7975] [ 129.792903][ T7986] netlink: 'syz.2.1551': attribute type 10 has an invalid length. [ 129.869992][ T7994] FAULT_INJECTION: forcing a failure. [ 129.869992][ T7994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.936185][ T7994] CPU: 0 UID: 0 PID: 7994 Comm: syz.0.1556 Tainted: G W syzkaller #0 PREEMPT(full) [ 129.936277][ T7994] Tainted: [W]=WARN [ 129.936284][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.936296][ T7994] Call Trace: [ 129.936302][ T7994] [ 129.936310][ T7994] __dump_stack+0x1d/0x30 [ 129.936338][ T7994] dump_stack_lvl+0x95/0xd0 [ 129.936392][ T7994] dump_stack+0x15/0x1b [ 129.936469][ T7994] should_fail_ex+0x263/0x280 [ 129.936492][ T7994] should_fail+0xb/0x20 [ 129.936512][ T7994] should_fail_usercopy+0x1a/0x20 [ 129.936534][ T7994] strncpy_from_user+0x27/0x250 [ 129.936618][ T7994] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 129.936641][ T7994] do_getname+0x59/0x1c0 [ 129.936662][ T7994] getname_uflags+0x23/0x30 [ 129.936748][ T7994] __x64_sys_execveat+0x5d/0xa0 [ 129.936782][ T7994] x64_sys_call+0x2a33/0x3020 [ 129.936806][ T7994] do_syscall_64+0x12c/0x370 [ 129.936827][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.936872][ T7994] RIP: 0033:0x7feebc05c799 [ 129.936891][ T7994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.937001][ T7994] RSP: 002b:00007feebaab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 129.937021][ T7994] RAX: ffffffffffffffda RBX: 00007feebc2d5fa0 RCX: 00007feebc05c799 [ 129.937036][ T7994] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 129.937048][ T7994] RBP: 00007feebaab7090 R08: 0000000000001000 R09: 0000000000000000 [ 129.937060][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.937072][ T7994] R13: 00007feebc2d6038 R14: 00007feebc2d5fa0 R15: 00007ffece5e6358 [ 129.937089][ T7994] [ 130.132766][ T28] kauditd_printk_skb: 21165 callbacks suppressed [ 130.132783][ T28] audit: type=1400 audit(1772481125.591:142586): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 130.151033][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.174421][ T8007] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.181851][ T28] audit: type=1400 audit(1772481125.591:142587): avc: denied { create } for pid=8005 comm="syz.3.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 130.184966][ T8007] audit: audit_lost=16227 audit_rate_limit=0 audit_backlog_limit=64 [ 130.207852][ T8009] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.212022][ T3311] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.219979][ T8009] audit: audit_lost=16228 audit_rate_limit=0 audit_backlog_limit=64 [ 130.224455][ T3311] audit: audit_lost=16229 audit_rate_limit=0 audit_backlog_limit=64 [ 130.240278][ T8007] audit: backlog limit exceeded [ 130.277437][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.343231][ T8019] __nla_validate_parse: 2 callbacks suppressed [ 130.343248][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 131.291373][ T8053] ip6gre1: entered promiscuous mode [ 131.316226][ T8053] ip6gre1: entered allmulticast mode [ 131.338217][ T4415] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.345830][ T4415] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.367447][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.405204][ T8058] FAULT_INJECTION: forcing a failure. [ 131.405204][ T8058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.439938][ T8058] CPU: 0 UID: 0 PID: 8058 Comm: syz.0.1581 Tainted: G W syzkaller #0 PREEMPT(full) [ 131.440036][ T8058] Tainted: [W]=WARN [ 131.440043][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.440125][ T8058] Call Trace: [ 131.440133][ T8058] [ 131.440143][ T8058] __dump_stack+0x1d/0x30 [ 131.440174][ T8058] dump_stack_lvl+0x95/0xd0 [ 131.440196][ T8058] dump_stack+0x15/0x1b [ 131.440246][ T8058] should_fail_ex+0x263/0x280 [ 131.440272][ T8058] should_fail+0xb/0x20 [ 131.440290][ T8058] should_fail_usercopy+0x1a/0x20 [ 131.440317][ T8058] _copy_to_user+0x20/0xa0 [ 131.440385][ T8058] simple_read_from_buffer+0xb5/0x130 [ 131.440406][ T8058] proc_fail_nth_read+0x10e/0x150 [ 131.440438][ T8058] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.440493][ T8058] vfs_read+0x1ab/0x7f0 [ 131.440525][ T8058] ? __rcu_read_unlock+0x4e/0x70 [ 131.440630][ T8058] ? __fget_files+0x184/0x1c0 [ 131.440655][ T8058] ? mutex_lock+0x57/0x90 [ 131.440687][ T8058] ksys_read+0xdc/0x1a0 [ 131.440759][ T8058] __x64_sys_read+0x40/0x50 [ 131.440792][ T8058] x64_sys_call+0x2886/0x3020 [ 131.440891][ T8058] do_syscall_64+0x12c/0x370 [ 131.440915][ T8058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.440941][ T8058] RIP: 0033:0x7feebc01cfce [ 131.440957][ T8058] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.440978][ T8058] RSP: 002b:00007feebaab6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.441083][ T8058] RAX: ffffffffffffffda RBX: 00007feebaab76c0 RCX: 00007feebc01cfce [ 131.441100][ T8058] RDX: 000000000000000f RSI: 00007feebaab70a0 RDI: 0000000000000004 [ 131.441113][ T8058] RBP: 00007feebaab7090 R08: 0000000000000000 R09: 0000000000000000 [ 131.441125][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.441137][ T8058] R13: 00007feebc2d6038 R14: 00007feebc2d5fa0 R15: 00007ffece5e6358 [ 131.441154][ T8058] [ 131.753853][ T3531] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.014166][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1592'. [ 132.357455][ T3531] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.204339][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1611'. [ 133.386966][ T8151] netlink: 'syz.5.1617': attribute type 13 has an invalid length. [ 133.557982][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 133.610392][ T8162] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1623'. [ 133.619849][ T8168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.725476][ T8178] veth3: entered promiscuous mode [ 133.731008][ T8178] veth3: entered allmulticast mode [ 133.776012][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'. [ 133.786203][ T8184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1632'. [ 133.795542][ T8184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1632'. [ 133.838671][ T8186] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1632'. [ 133.866463][ T8186] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1632'. [ 134.625103][ T8247] Cannot find del_set index 0 as target [ 134.736420][ T8255] netlink: 'syz.0.1658': attribute type 5 has an invalid length. [ 134.886724][ T8263] syzkaller0: entered promiscuous mode [ 134.928014][ T8263] syzkaller0: entered allmulticast mode [ 135.137483][ T28] kauditd_printk_skb: 15304 callbacks suppressed [ 135.137501][ T28] audit: type=1400 audit(1772481386.590:155719): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.167555][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.192656][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.205216][ T8287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.207620][ T3038] audit: audit_lost=16954 audit_rate_limit=0 audit_backlog_limit=64 [ 135.227570][ T28] audit: type=1400 audit(1772481386.600:155720): avc: denied { read write } for pid=4182 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 135.229716][ T8287] audit: audit_lost=16955 audit_rate_limit=0 audit_backlog_limit=64 [ 135.257661][ T3038] audit: backlog limit exceeded [ 135.265402][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.277922][ T8288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.297397][ T8287] audit: backlog limit exceeded [ 135.521360][ T8289] syzkaller0: entered promiscuous mode [ 135.526909][ T8289] syzkaller0: entered allmulticast mode [ 135.881429][ T8308] netlink: 'syz.3.1675': attribute type 10 has an invalid length. [ 136.048150][ T8313] __nla_validate_parse: 1 callbacks suppressed [ 136.048169][ T8313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1677'. [ 136.189687][ T8316] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8316 comm=syz.3.1677 [ 136.541289][ T8329] ipvlan2: entered allmulticast mode [ 136.686857][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'. [ 136.745637][ T8342] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1686'. [ 137.922859][ T8396] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1708'. [ 137.941469][ T8395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1709'. [ 137.993053][ T30] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.008671][ T30] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.027506][ T30] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.052538][ T30] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.042607][ T8446] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 139.107502][ T8446] bond2 (unregistering): Released all slaves [ 139.237411][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.147498][ T28] kauditd_printk_skb: 17820 callbacks suppressed [ 140.147516][ T28] audit: type=1400 audit(1772481391.618:171143): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.162732][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 140.227361][ T3038] audit: audit_lost=17756 audit_rate_limit=0 audit_backlog_limit=64 [ 140.235395][ T3038] audit: backlog limit exceeded [ 140.237419][ T28] audit: type=1400 audit(1772481391.618:171144): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.267553][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 140.274177][ T3038] audit: audit_lost=17757 audit_rate_limit=0 audit_backlog_limit=64 [ 140.300107][ T4182] audit: audit_backlog=65 > audit_backlog_limit=64 [ 140.306908][ T3038] audit: backlog limit exceeded [ 140.319166][ T4182] audit: audit_lost=17758 audit_rate_limit=0 audit_backlog_limit=64 [ 140.428510][ T8491] netlink: 'syz.5.1747': attribute type 29 has an invalid length. [ 140.497985][ T8494] SELinux: security_context_str_to_sid (a`yv-|J+0l8G[kT_|nU5 [ 140.497985][ T8494] M9) failed with errno=-22 [ 140.525052][ T8493] SELinux: security_context_str_to_sid (a`yv-|J+0l8G[kT_|nU5 [ 140.525052][ T8493] M9) failed with errno=-22 [ 140.559687][ T8494] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 140.860662][ T8510] bond3: entered promiscuous mode [ 140.950967][ T8510] macvlan2: entered promiscuous mode [ 140.974836][ T8510] macvlan2: entered allmulticast mode [ 141.003936][ T8510] bond3: (slave macvlan2): Opening slave failed [ 141.036151][ T8513] No such timeout policy "syz0" [ 141.157507][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.201154][ T8526] netlink: 'syz.2.1758': attribute type 10 has an invalid length. [ 141.227276][ T8528] FAULT_INJECTION: forcing a failure. [ 141.227276][ T8528] name failslab, interval 1, probability 0, space 0, times 0 [ 141.244749][ T8528] CPU: 0 UID: 0 PID: 8528 Comm: syz.1.1761 Tainted: G W syzkaller #0 PREEMPT(full) [ 141.244785][ T8528] Tainted: [W]=WARN [ 141.244794][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.244836][ T8528] Call Trace: [ 141.244843][ T8528] [ 141.244851][ T8528] __dump_stack+0x1d/0x30 [ 141.244881][ T8528] dump_stack_lvl+0x95/0xd0 [ 141.244908][ T8528] dump_stack+0x15/0x1b [ 141.244933][ T8528] should_fail_ex+0x263/0x280 [ 141.245097][ T8528] should_failslab+0x8c/0xb0 [ 141.245121][ T8528] kmem_cache_alloc_noprof+0x66/0x400 [ 141.245146][ T8528] ? security_file_alloc+0x32/0xf0 [ 141.245237][ T8528] security_file_alloc+0x32/0xf0 [ 141.245326][ T8528] init_file+0x5b/0x1b0 [ 141.245376][ T8528] alloc_empty_file+0x8b/0x200 [ 141.245455][ T8528] path_openat+0x65/0x2050 [ 141.245491][ T8528] ? terminate_walk+0x1e6/0x210 [ 141.245518][ T8528] ? path_openat+0x1ab2/0x2050 [ 141.245553][ T8528] ? path_openat+0x1b01/0x2050 [ 141.245604][ T8528] ? _parse_integer_limit+0x170/0x190 [ 141.245675][ T8528] do_file_open+0x16c/0x290 [ 141.245714][ T8528] do_open_execat+0xab/0x240 [ 141.245747][ T8528] alloc_bprm+0x25/0x350 [ 141.245859][ T8528] do_execveat_common+0x104/0x720 [ 141.245888][ T8528] ? do_getname+0x102/0x1c0 [ 141.245984][ T8528] __x64_sys_execveat+0x76/0xa0 [ 141.246019][ T8528] x64_sys_call+0x2a33/0x3020 [ 141.246058][ T8528] do_syscall_64+0x12c/0x370 [ 141.246083][ T8528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.246109][ T8528] RIP: 0033:0x7ff29350c799 [ 141.246125][ T8528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.246152][ T8528] RSP: 002b:00007ff291f5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 141.246177][ T8528] RAX: ffffffffffffffda RBX: 00007ff293785fa0 RCX: 00007ff29350c799 [ 141.246193][ T8528] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 141.246209][ T8528] RBP: 00007ff291f5f090 R08: 0000000000001000 R09: 0000000000000000 [ 141.246225][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.246243][ T8528] R13: 00007ff293786038 R14: 00007ff293785fa0 R15: 00007ffe8cc14488 [ 141.246261][ T8528] [ 141.632423][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 141.676988][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 142.014661][ T8578] xt_hashlimit: max too large, truncated to 1048576 [ 142.024079][ T8581] FAULT_INJECTION: forcing a failure. [ 142.024079][ T8581] name failslab, interval 1, probability 0, space 0, times 0 [ 142.045015][ T8581] CPU: 0 UID: 0 PID: 8581 Comm: syz.1.1784 Tainted: G W syzkaller #0 PREEMPT(full) [ 142.045102][ T8581] Tainted: [W]=WARN [ 142.045109][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.045124][ T8581] Call Trace: [ 142.045131][ T8581] [ 142.045140][ T8581] __dump_stack+0x1d/0x30 [ 142.045222][ T8581] dump_stack_lvl+0x95/0xd0 [ 142.045244][ T8581] dump_stack+0x15/0x1b [ 142.045264][ T8581] should_fail_ex+0x263/0x280 [ 142.045288][ T8581] should_failslab+0x8c/0xb0 [ 142.045311][ T8581] kmem_cache_alloc_noprof+0x66/0x400 [ 142.045333][ T8581] ? security_file_alloc+0x32/0xf0 [ 142.045444][ T8581] security_file_alloc+0x32/0xf0 [ 142.045479][ T8581] init_file+0x5b/0x1b0 [ 142.045521][ T8581] alloc_empty_file+0x8b/0x200 [ 142.045557][ T8581] path_openat+0x65/0x2050 [ 142.045587][ T8581] ? _parse_integer_limit+0x170/0x190 [ 142.045611][ T8581] ? _parse_integer+0x27/0x40 [ 142.045628][ T8581] ? kstrtoull+0x111/0x140 [ 142.045707][ T8581] ? kstrtouint+0x76/0xc0 [ 142.045728][ T8581] do_file_open+0x16c/0x290 [ 142.045765][ T8581] do_sys_openat2+0x94/0x130 [ 142.045848][ T8581] __x64_sys_openat+0xf2/0x120 [ 142.045932][ T8581] x64_sys_call+0x1e39/0x3020 [ 142.045961][ T8581] do_syscall_64+0x12c/0x370 [ 142.045985][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.046047][ T8581] RIP: 0033:0x7ff29350c799 [ 142.046066][ T8581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.046090][ T8581] RSP: 002b:00007ff291f5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 142.046116][ T8581] RAX: ffffffffffffffda RBX: 00007ff293785fa0 RCX: 00007ff29350c799 [ 142.046130][ T8581] RDX: 000000000000275a RSI: 00002000000002c0 RDI: 0000000000000005 [ 142.046143][ T8581] RBP: 00007ff291f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 142.046155][ T8581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.046167][ T8581] R13: 00007ff293786038 R14: 00007ff293785fa0 R15: 00007ffe8cc14488 [ 142.046344][ T8581] [ 142.323149][ T8592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1788'. [ 142.527169][ T8606] syzkaller0: entered promiscuous mode [ 142.554460][ T8606] syzkaller0: entered allmulticast mode [ 142.768258][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1803'. [ 142.890835][ T8635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1807'. [ 143.077412][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.482418][ T8678] netlink: 'syz.1.1825': attribute type 13 has an invalid length. [ 143.747877][ T8680] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 143.969871][ T8706] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1837'. [ 143.979362][ T8706] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 144.286687][ T8749] Cannot find del_set index 0 as target [ 144.329476][ T8751] netlink: 'syz.0.1857': attribute type 5 has an invalid length. [ 144.368067][ T8756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.691506][ T8792] syzkaller0: entered promiscuous mode [ 144.708630][ T8792] syzkaller0: entered allmulticast mode [ 144.871746][ T8806] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.067442][ T8814] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 145.092916][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1879'. [ 145.102051][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1879'. [ 145.135751][ T8806] netlink: 'syz.2.1879': attribute type 6 has an invalid length. [ 145.159820][ T28] kauditd_printk_skb: 17044 callbacks suppressed [ 145.159837][ T28] audit: type=1400 audit(1772481652.619:186802): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.173481][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.188334][ T4182] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.199649][ T8822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.200989][ T4182] audit: audit_lost=18221 audit_rate_limit=0 audit_backlog_limit=64 [ 145.207759][ T8822] audit: audit_lost=18222 audit_rate_limit=0 audit_backlog_limit=64 [ 145.233643][ T28] audit: type=1400 audit(1772481652.619:186803): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.249846][ T8812] syzkaller0: entered promiscuous mode [ 145.256089][ T8822] audit: backlog limit exceeded [ 145.260600][ T8812] syzkaller0: entered allmulticast mode [ 145.271066][ T4182] audit: backlog limit exceeded [ 145.291974][ T3038] audit: audit_lost=18223 audit_rate_limit=0 audit_backlog_limit=64 [ 146.388378][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1922'. [ 146.436714][ T8915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.789666][ T8930] syzkaller0: entered promiscuous mode [ 146.795668][ T8930] syzkaller0: entered allmulticast mode [ 148.748534][ T9038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9038 comm=syz.1.1973 [ 149.154189][ T9060] Cannot find del_set index 0 as target [ 149.292468][ T9068] netlink: 'syz.1.1986': attribute type 5 has an invalid length. [ 150.172468][ T28] kauditd_printk_skb: 28151 callbacks suppressed [ 150.172527][ T28] audit: type=1400 audit(1772481657.629:201478): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.211573][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.219165][ T3315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.229197][ T3315] audit: audit_lost=22716 audit_rate_limit=0 audit_backlog_limit=64 [ 150.235955][ T3038] audit: audit_lost=22717 audit_rate_limit=0 audit_backlog_limit=64 [ 150.245341][ T3038] audit: backlog limit exceeded [ 150.250265][ T3315] audit: backlog limit exceeded [ 150.253217][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.267468][ T28] audit: type=1400 audit(1772481657.629:201479): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.288913][ T3038] audit: audit_lost=22718 audit_rate_limit=0 audit_backlog_limit=64 [ 150.661306][ T9139] netlink: 'syz.5.2016': attribute type 10 has an invalid length. [ 150.683880][ T9139] dummy0: entered promiscuous mode [ 150.698717][ T9139] team0: Port device dummy0 added [ 150.956147][ T9166] ipt_REJECT: ECHOREPLY no longer supported. [ 151.794996][ T9187] No such timeout policy "syz0" [ 152.541216][ T9217] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2049'. [ 152.760446][ T9232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2055'. [ 152.974477][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2067'. [ 154.655632][ T9344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.179814][ T28] kauditd_printk_skb: 18874 callbacks suppressed [ 155.179833][ T28] audit: type=1400 audit(1772481918.647:219883): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.217610][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.222741][ T9387] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.224843][ T3038] audit: audit_lost=22876 audit_rate_limit=0 audit_backlog_limit=64 [ 155.234028][ T3311] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.239620][ T28] audit: type=1400 audit(1772481918.677:219884): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.264966][ T9387] audit: audit_lost=22877 audit_rate_limit=0 audit_backlog_limit=64 [ 155.268766][ T3038] audit: backlog limit exceeded [ 155.283103][ T3311] audit: audit_lost=22878 audit_rate_limit=0 audit_backlog_limit=64 [ 155.283509][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.902710][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2132'. [ 156.234830][ T9428] netlink: 'syz.1.2135': attribute type 10 has an invalid length. [ 156.444170][ T9433] syzkaller0: entered promiscuous mode [ 156.463419][ T9433] syzkaller0: entered allmulticast mode [ 156.515731][ T9450] FAULT_INJECTION: forcing a failure. [ 156.515731][ T9450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.533828][ T9450] CPU: 0 UID: 0 PID: 9450 Comm: syz.3.2143 Tainted: G W syzkaller #0 PREEMPT(full) [ 156.533868][ T9450] Tainted: [W]=WARN [ 156.533876][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.533889][ T9450] Call Trace: [ 156.533895][ T9450] [ 156.533904][ T9450] __dump_stack+0x1d/0x30 [ 156.533932][ T9450] dump_stack_lvl+0x95/0xd0 [ 156.533985][ T9450] dump_stack+0x15/0x1b [ 156.534073][ T9450] should_fail_ex+0x263/0x280 [ 156.534099][ T9450] should_fail+0xb/0x20 [ 156.534127][ T9450] should_fail_usercopy+0x1a/0x20 [ 156.534154][ T9450] _copy_from_user+0x1c/0xb0 [ 156.534183][ T9450] __sys_bpf+0x183/0x7e0 [ 156.534286][ T9450] __x64_sys_bpf+0x41/0x50 [ 156.534319][ T9450] x64_sys_call+0x10cb/0x3020 [ 156.534348][ T9450] do_syscall_64+0x12c/0x370 [ 156.534379][ T9450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.534422][ T9450] RIP: 0033:0x7fe42f2dc799 [ 156.534442][ T9450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.534488][ T9450] RSP: 002b:00007fe42dd2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.534511][ T9450] RAX: ffffffffffffffda RBX: 00007fe42f555fa0 RCX: 00007fe42f2dc799 [ 156.534526][ T9450] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 156.534542][ T9450] RBP: 00007fe42dd2f090 R08: 0000000000000000 R09: 0000000000000000 [ 156.534557][ T9450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.534571][ T9450] R13: 00007fe42f556038 R14: 00007fe42f555fa0 R15: 00007ffd0fd9d2e8 [ 156.534605][ T9450] [ 156.888473][ T9466] FAULT_INJECTION: forcing a failure. [ 156.888473][ T9466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.942387][ T9466] CPU: 1 UID: 0 PID: 9466 Comm: syz.0.2149 Tainted: G W syzkaller #0 PREEMPT(full) [ 156.942425][ T9466] Tainted: [W]=WARN [ 156.942432][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.942483][ T9466] Call Trace: [ 156.942491][ T9466] [ 156.942501][ T9466] __dump_stack+0x1d/0x30 [ 156.942545][ T9466] dump_stack_lvl+0x95/0xd0 [ 156.942602][ T9466] dump_stack+0x15/0x1b [ 156.942627][ T9466] should_fail_ex+0x263/0x280 [ 156.942655][ T9466] should_fail+0xb/0x20 [ 156.942676][ T9466] should_fail_usercopy+0x1a/0x20 [ 156.942702][ T9466] _copy_from_user+0x1c/0xb0 [ 156.942731][ T9466] kstrtouint_from_user+0x69/0xf0 [ 156.942753][ T9466] proc_fail_nth_write+0x50/0x160 [ 156.942791][ T9466] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 156.942825][ T9466] vfs_write+0x269/0x9f0 [ 156.942861][ T9466] ? __rcu_read_unlock+0x4e/0x70 [ 156.942887][ T9466] ? __fget_files+0x184/0x1c0 [ 156.942943][ T9466] ? mutex_lock+0x57/0x90 [ 156.942973][ T9466] ksys_write+0xdc/0x1a0 [ 156.943010][ T9466] __x64_sys_write+0x40/0x50 [ 156.943037][ T9466] x64_sys_call+0x27e1/0x3020 [ 156.943068][ T9466] do_syscall_64+0x12c/0x370 [ 156.943092][ T9466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.943117][ T9466] RIP: 0033:0x7feebc01cfce [ 156.943163][ T9466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.943185][ T9466] RSP: 002b:00007feebaab6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.943210][ T9466] RAX: ffffffffffffffda RBX: 00007feebaab76c0 RCX: 00007feebc01cfce [ 156.943228][ T9466] RDX: 0000000000000001 RSI: 00007feebaab70a0 RDI: 0000000000000006 [ 156.943245][ T9466] RBP: 00007feebaab7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.943258][ T9466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.943270][ T9466] R13: 00007feebc2d6038 R14: 00007feebc2d5fa0 R15: 00007ffece5e6358 [ 156.943291][ T9466] [ 157.158212][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.360435][ T9471] syzkaller0: entered promiscuous mode [ 157.377509][ T9471] syzkaller0: entered allmulticast mode [ 157.814952][ T9499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2162'. [ 158.447401][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.648094][ T9558] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 158.692870][ T9558] bond5 (unregistering): Released all slaves [ 158.857870][ T9561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2186'. [ 159.461635][ T9591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2196'. [ 159.507384][ T9591] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 160.110887][ T9625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9625 comm=syz.0.2206 [ 160.187655][ T3038] audit_log_start: 26829 callbacks suppressed [ 160.187671][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.187819][ T9620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.197552][ T3038] audit: audit_lost=27104 audit_rate_limit=0 audit_backlog_limit=64 [ 160.207361][ T28] audit: type=1400 audit(1772481923.637:234040): avc: denied { open } for pid=9619 comm="syz.0.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 160.233924][ T3038] audit: backlog limit exceeded [ 160.239461][ T9620] audit: audit_lost=27105 audit_rate_limit=0 audit_backlog_limit=64 [ 160.241237][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.247914][ T9631] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.259541][ T3038] audit: audit_lost=27106 audit_rate_limit=0 audit_backlog_limit=64 [ 160.267525][ T9631] audit: audit_lost=27107 audit_rate_limit=0 audit_backlog_limit=64 [ 160.358495][ T9637] Cannot find del_set index 0 as target [ 160.698003][ T9677] lo: entered promiscuous mode [ 160.704137][ T9677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.824078][ T9720] syzkaller0: entered promiscuous mode [ 161.830188][ T9720] syzkaller0: entered allmulticast mode [ 161.863442][ T9722] FAULT_INJECTION: forcing a failure. [ 161.863442][ T9722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.919623][ T9722] CPU: 0 UID: 0 PID: 9722 Comm: syz.5.2247 Tainted: G W syzkaller #0 PREEMPT(full) [ 161.919659][ T9722] Tainted: [W]=WARN [ 161.919668][ T9722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.919699][ T9722] Call Trace: [ 161.919708][ T9722] [ 161.919718][ T9722] __dump_stack+0x1d/0x30 [ 161.919748][ T9722] dump_stack_lvl+0x95/0xd0 [ 161.919773][ T9722] dump_stack+0x15/0x1b [ 161.919797][ T9722] should_fail_ex+0x263/0x280 [ 161.919870][ T9722] should_fail+0xb/0x20 [ 161.919891][ T9722] should_fail_usercopy+0x1a/0x20 [ 161.919917][ T9722] _copy_to_user+0x20/0xa0 [ 161.920025][ T9722] simple_read_from_buffer+0xb5/0x130 [ 161.920051][ T9722] proc_fail_nth_read+0x10e/0x150 [ 161.920128][ T9722] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.920157][ T9722] vfs_read+0x1ab/0x7f0 [ 161.920266][ T9722] ? __rcu_read_unlock+0x4e/0x70 [ 161.920300][ T9722] ? __fget_files+0x184/0x1c0 [ 161.920329][ T9722] ? mutex_lock+0x57/0x90 [ 161.920357][ T9722] ksys_read+0xdc/0x1a0 [ 161.920461][ T9722] __x64_sys_read+0x40/0x50 [ 161.920559][ T9722] x64_sys_call+0x2886/0x3020 [ 161.920590][ T9722] do_syscall_64+0x12c/0x370 [ 161.920616][ T9722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.920642][ T9722] RIP: 0033:0x7f547495cfce [ 161.920712][ T9722] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.920733][ T9722] RSP: 002b:00007f54733f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.920758][ T9722] RAX: ffffffffffffffda RBX: 00007f54733f76c0 RCX: 00007f547495cfce [ 161.920774][ T9722] RDX: 000000000000000f RSI: 00007f54733f70a0 RDI: 0000000000000003 [ 161.920787][ T9722] RBP: 00007f54733f7090 R08: 0000000000000000 R09: 0000000000000000 [ 161.920799][ T9722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.920860][ T9722] R13: 00007f5474c16038 R14: 00007f5474c15fa0 R15: 00007ffd9b8718c8 [ 161.920881][ T9722] [ 162.466288][ T9739] FAULT_INJECTION: forcing a failure. [ 162.466288][ T9739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.491332][ T9739] CPU: 1 UID: 0 PID: 9739 Comm: syz.5.2254 Tainted: G W syzkaller #0 PREEMPT(full) [ 162.491365][ T9739] Tainted: [W]=WARN [ 162.491373][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.491388][ T9739] Call Trace: [ 162.491434][ T9739] [ 162.491441][ T9739] __dump_stack+0x1d/0x30 [ 162.491467][ T9739] dump_stack_lvl+0x95/0xd0 [ 162.491491][ T9739] dump_stack+0x15/0x1b [ 162.491515][ T9739] should_fail_ex+0x263/0x280 [ 162.491600][ T9739] should_fail+0xb/0x20 [ 162.491623][ T9739] should_fail_usercopy+0x1a/0x20 [ 162.491651][ T9739] strncpy_from_user+0x27/0x250 [ 162.491689][ T9739] path_setxattrat+0xeb/0x310 [ 162.491776][ T9739] __x64_sys_fsetxattr+0x6b/0x80 [ 162.491806][ T9739] x64_sys_call+0x2f0e/0x3020 [ 162.491898][ T9739] do_syscall_64+0x12c/0x370 [ 162.491922][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.492043][ T9739] RIP: 0033:0x7f547499c799 [ 162.492060][ T9739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.492077][ T9739] RSP: 002b:00007f54733f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 162.492104][ T9739] RAX: ffffffffffffffda RBX: 00007f5474c15fa0 RCX: 00007f547499c799 [ 162.492119][ T9739] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 162.492200][ T9739] RBP: 00007f54733f7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.492215][ T9739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.492230][ T9739] R13: 00007f5474c16038 R14: 00007f5474c15fa0 R15: 00007ffd9b8718c8 [ 162.492250][ T9739] [ 162.700996][ T9744] syzkaller0: entered promiscuous mode [ 162.701019][ T9744] syzkaller0: entered allmulticast mode [ 163.445443][ T9776] lo: left promiscuous mode [ 163.737804][ T9794] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9794 comm=syz.1.2274 [ 163.980276][ T9826] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.981279][ T9825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2286'. [ 164.008833][ T9825] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 164.043508][ T9827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9827 comm=syz.0.2287 [ 164.518840][ T9878] ipvlan2: entered allmulticast mode [ 164.670226][ T9885] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2308'. [ 164.885168][ T9897] Cannot find del_set index 0 as target [ 165.197397][ T28] kauditd_printk_skb: 18568 callbacks suppressed [ 165.197415][ T28] audit: type=1400 audit(1772481928.657:252252): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 165.236890][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.244824][ T9913] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.248200][ T3038] audit: audit_lost=27226 audit_rate_limit=0 audit_backlog_limit=64 [ 165.258343][ T3322] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.260093][ T9913] audit: audit_lost=27227 audit_rate_limit=0 audit_backlog_limit=64 [ 165.266380][ T3322] audit: audit_lost=27228 audit_rate_limit=0 audit_backlog_limit=64 [ 165.274483][ T9913] audit: backlog limit exceeded [ 165.284745][ T28] audit: type=1400 audit(1772481928.667:252253): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 165.308852][ T3038] audit: backlog limit exceeded [ 165.417552][ T9934] Cannot find del_set index 2 as target [ 165.456188][ T9937] netlink: 'syz.3.2328': attribute type 10 has an invalid length. [ 166.502978][ T9987] ================================================================== [ 166.511176][ T9987] BUG: KCSAN: data-race in __dentry_kill / shrink_dentry_list [ 166.518630][ T9987] [ 166.520950][ T9987] read-write to 0xffff88810763ad80 of 4 bytes by task 3311 on cpu 0: [ 166.529007][ T9987] shrink_dentry_list+0x1a6/0x3c0 [ 166.534050][ T9987] shrink_dcache_tree+0x5b/0x220 [ 166.539180][ T9987] d_invalidate+0x76/0x1d0 [ 166.543690][ T9987] proc_invalidate_siblings_dcache+0x1c8/0x2b0 [ 166.549843][ T9987] proc_flush_pid+0x1d/0x30 [ 166.554425][ T9987] release_task+0x988/0xb60 [ 166.558928][ T9987] wait_consider_task+0x1160/0x1670 [ 166.564160][ T9987] __do_wait+0xf9/0x510 [ 166.568336][ T9987] do_wait+0xb6/0x260 [ 166.572340][ T9987] kernel_wait4+0x19f/0x210 [ 166.576857][ T9987] __x64_sys_wait4+0x91/0x120 [ 166.581529][ T9987] x64_sys_call+0x2aee/0x3020 [ 166.586202][ T9987] do_syscall_64+0x12c/0x370 [ 166.590782][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.596666][ T9987] [ 166.598985][ T9987] read to 0xffff88810763ad80 of 4 bytes by task 9987 on cpu 1: [ 166.606538][ T9987] __dentry_kill+0x25c/0x460 [ 166.611172][ T9987] finish_dput+0x2b/0x200 [ 166.615536][ T9987] dput+0x52/0x60 [ 166.619185][ T9987] proc_invalidate_siblings_dcache+0x1d0/0x2b0 [ 166.625817][ T9987] proc_flush_pid+0x1d/0x30 [ 166.630318][ T9987] release_task+0x988/0xb60 [ 166.634835][ T9987] do_exit+0xd5c/0x15a0 [ 166.639110][ T9987] do_group_exit+0xfe/0x140 [ 166.643630][ T9987] get_signal+0xe54/0xf60 [ 166.647975][ T9987] arch_do_signal_or_restart+0x96/0x450 [ 166.653549][ T9987] exit_to_user_mode_loop+0x6a/0x6f0 [ 166.658834][ T9987] do_syscall_64+0x249/0x370 [ 166.663427][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.669315][ T9987] [ 166.671638][ T9987] value changed: 0x0024040c -> 0x0000000c [ 166.677343][ T9987] [ 166.679667][ T9987] Reported by Kernel Concurrency Sanitizer on: [ 166.685805][ T9987] CPU: 1 UID: 0 PID: 9987 Comm: syz.3.2352 Tainted: G W syzkaller #0 PREEMPT(full) [ 166.696646][ T9987] Tainted: [W]=WARN [ 166.700445][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.710500][ T9987] ================================================================== [ 170.207391][ T28] kauditd_printk_skb: 40758 callbacks suppressed [ 170.207411][ T28] audit: type=1400 audit(1772481933.677:292583): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.224111][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.235747][ T28] audit: type=1400 audit(1772481933.677:292584): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.242459][ T3038] audit: audit_lost=27372 audit_rate_limit=0 audit_backlog_limit=64 [ 170.263565][ T28] audit: type=1400 audit(1772481933.677:292585): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.271670][ T3038] audit: backlog limit exceeded [ 170.292935][ T28] audit: type=1400 audit(1772481933.677:292586): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.298455][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.321182][ T28] audit: type=1400 audit(1772481933.677:292587): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.325809][ T3038] audit: audit_lost=27373 audit_rate_limit=0 audit_backlog_limit=64 [ 175.217552][ T28] kauditd_printk_skb: 46916 callbacks suppressed [ 175.217571][ T28] audit: type=1400 audit(1772481938.687:339362): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.238044][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.247177][ T28] audit: type=1400 audit(1772481938.687:339363): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.251861][ T3038] audit: audit_lost=27421 audit_rate_limit=0 audit_backlog_limit=64 [ 175.273009][ T28] audit: type=1400 audit(1772481938.687:339364): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.281350][ T3038] audit: backlog limit exceeded [ 175.302743][ T28] audit: type=1400 audit(1772481938.687:339365): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.308175][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.328847][ T28] audit: type=1400 audit(1772481938.687:339366): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.335379][ T3038] audit: audit_lost=27422 audit_rate_limit=0 audit_backlog_limit=64