last executing test programs: 2m3.346901003s ago: executing program 3 (id=1272): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001308e9990000000000000000fc010004000000000000000000000001ac1414bb00000000000000000000000000000c00100000800200111084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008000) recvfrom$inet(r5, &(0x7f0000000080)=""/19, 0x13, 0x40000041, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0xfffe, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 1m59.030303326s ago: executing program 3 (id=1302): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @broadcast}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @local}, 0x10) 1m58.923027686s ago: executing program 3 (id=1303): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x5, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000007c66de749fc717cef674d794300000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0xe, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) setxattr$system_posix_acl(&(0x7f0000000440)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000001"], 0xff3c, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) gettid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003}, 0x38) 1m58.415220852s ago: executing program 3 (id=1304): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {}, {@dioread_lock}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) close(0xffffffffffffffff) r1 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x11) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x100000007f, 0x61}, 0x2, 0x3685, 0x0, 0x2, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x1a2d, 0x0, 0x7f7, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80001804, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, &(0x7f0000000140)}, 0x2408c8c0) r2 = syz_clone(0xa020000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x400, &(0x7f0000000040)="209e8c2735f6b0fa4cfff4d87e053450d0964baaf169ffb1efbbd39eec2ca3feb2a0c8c7decf1568111a20d9128ad478c15fbee474af15e97905acc8c42befc27fb0674b945d928c0c561a904318542d04d03da368b03711fa9c00385fc6e5081f7f42b24989264cd5ea1600dc8301c0ff2bc0094fcf3530644dd776f489487e55dd6d755d076ed783") ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000000)={&(0x7f0000000340)="ea132b46bdd0836817f458fb", 0xc}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)=0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x27, r3, 0xffffffffffffffff, 0x1, 0xd, 0xf2, "2b4fbbf29bb82e79df517898a7d908a80288a80efd6622e2f8fd2b3892dcedc60571af03f57a5d79ae038beb0d8bee9f3a6c92e0fa2a71bc299207a8630727", 0xa}, 0x60, &(0x7f0000000380)=[{&(0x7f0000000ac0)="ad1d961029b63ad1cbe83b8f6465e0dcac21419bf4864090c54501a520cde0b8bbb6799d25a7524894f5653f6ca0ebff6c63f8e6a9387e2ae7495d7da15fa0088ae17d483f7faa8390d0e865b1aa55ab58df940d8d2a86253b8f72ccdb56f5d2f3a8ffb28b386ab1fd16d289097309dea492196883c98955c175dd0e4ba8da1e6372b5d26dca8d9d7b53893116dd2dd458e85b925efb88157280834e699cd3d40c11f7457344c776d22ce2bb", 0xac}, {&(0x7f0000001300)="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", 0x1000}], 0x2, &(0x7f0000000b80)={0x88, 0x108, 0xe9a, "8c0dcbacab4008e693cfbec9bb44405740bea522a62f79df6eef6c460673eba296e5130773f94fabae709d5887d79175c614e720f95f3792d3b2b01b5f11d5896386d366ddd90f7cd36af965ff899a48bfe9905c1e2712a7d224b4d532744c6b16b8f4da8445dd25a0b42e7a368896925a6e"}, 0x88, 0x40000}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x2, {0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x32) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x20000000000002e5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000100), 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) eventfd2(0x0, 0x80000) r6 = syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x79ab, 0x3380, 0x8000, 0x172}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x110, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r6, 0x627, 0x14, 0x43, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) 1m58.122845088s ago: executing program 3 (id=1307): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) readlinkat(r3, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000740)={0x128, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r2}, {0x4}}, {{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4040df5}, 0x4040084) 1m57.063044842s ago: executing program 3 (id=1317): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x24004811) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300fe00"}, 0x52ba, 0xffffffffffffffff) 1m57.062790662s ago: executing program 32 (id=1317): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x24004811) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300fe00"}, 0x52ba, 0xffffffffffffffff) 1m44.967916417s ago: executing program 2 (id=1398): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x5, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000007c66de749fc717cef674d794300000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0xe, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) setxattr$system_posix_acl(&(0x7f0000000440)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000001"], 0xff3c, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x9, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r5}, 0x38) 1m44.072417682s ago: executing program 2 (id=1409): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'bridge0\x00', 0x0}) r2 = socket(0x22, 0x2, 0x3) bind$phonet(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffc, {}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1m43.861210053s ago: executing program 2 (id=1412): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) (fail_nth: 2) 1m43.760632844s ago: executing program 2 (id=1413): open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x0) io_setup(0x2, &(0x7f0000000a00)) ioprio_set$pid(0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x129c81, 0x0) syz_mount_image$msdos(&(0x7f0000000600), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0x11f4, &(0x7f0000002440)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@delqdisc={0x0, 0x25, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {0x2}, {0x10, 0x7}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x4, 0x3, 0x74aa, 0x0, 0x1, 0x6, 0xe7d1}}, {0x0, 0x2, [0x8, 0x8]}}, {{0x0, 0x1, {0xd, 0x1, 0x0, 0x7, 0x2, 0x3, 0x8}}, {0x0, 0x2, [0x7, 0xffff, 0x5, 0x6]}}, {{0x0, 0x1, {0xfc, 0x3, 0xacb1, 0x7ac4, 0x1, 0x7, 0xcec}}, {0x0, 0x2, [0x6, 0xe, 0xfff9, 0x8]}}, {{0x0, 0x1, {0x2, 0x2, 0x8000, 0xe, 0x2, 0x4, 0x5}}, {0x0, 0x2, [0x7, 0x401]}}, {{0x0, 0x1, {0x5, 0x7, 0x6, 0x1, 0x0, 0x3, 0x1685eea8}}, {0x0, 0x2, [0x0, 0x23a, 0x1, 0x0]}}, {{0x0, 0x1, {0x92, 0x0, 0x9, 0x6f14b5e2, 0x2, 0xdd0, 0x5}}, {0x0, 0x2, [0x40, 0x1, 0x1, 0xfeff, 0xc, 0x2, 0x8]}}, {{0x0, 0x1, {0xa3, 0x7f, 0x9105, 0x2, 0x1, 0x8000, 0x1}}, {0x0, 0x2, [0x8]}}]}, @TCA_INGRESS_BLOCK, @qdisc_kind_options=@q_plug={{}, {0x0, 0x2, {0x3, 0x4}}}]}, 0x164}}, 0x800) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@dev, @dev}, &(0x7f0000000140)=0xc) r5 = socket(0xa, 0x3, 0x3a) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(r7, &(0x7f0000000180)='net/sockstat\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x7, r8, 0x2}, 0xc) 1m42.702944649s ago: executing program 2 (id=1422): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x5, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000007c66de749fc717cef674d794300000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0xe, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) 1m41.986500566s ago: executing program 2 (id=1427): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000010002000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a83010000000000140003006261746164765f736c6176655f30000008002900ec6e0700050010000300000008002000001a000024001680200001800c0005000600"], 0x70}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) r3 = getpgid(0x0) syz_pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) umount2(&(0x7f0000000000)='./file0\x00', 0x5) 1m41.924863165s ago: executing program 33 (id=1427): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000010002000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a83010000000000140003006261746164765f736c6176655f30000008002900ec6e0700050010000300000008002000001a000024001680200001800c0005000600"], 0x70}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) r3 = getpgid(0x0) syz_pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) umount2(&(0x7f0000000000)='./file0\x00', 0x5) 3.608355776s ago: executing program 6 (id=2476): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$inet(0x2, 0x1, 0xfffffffd) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x7, 'vlan0\x00', {}, 0x3}) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x2, 0x4}}, 0x26) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000100000000000200012800b000100697036746e6c000010000280050009000400000004001300080004"], 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 3.179855807s ago: executing program 6 (id=2480): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x3, 0x73) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x26e1, &(0x7f0000000140)={0x0, 0x25dd, 0x100, 0x2, 0x2ed, 0x0, r0}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 3.100538713s ago: executing program 6 (id=2484): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x400d050}, 0x240c881c) (fail_nth: 6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xa, "755b87dccd752cd44c65"}, &(0x7f0000000180)=0x12) socket$inet_sctp(0x2, 0x1, 0x84) 2.626846355s ago: executing program 6 (id=2486): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x1, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x4, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1100) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x1, 0x4002) 2.415029956s ago: executing program 4 (id=2488): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040084) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {0xd, 0x2500}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.991038818s ago: executing program 5 (id=2492): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x83, 0x5f9, &(0x7f0000001200)="$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") getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4050}, 0xa4ff}, {{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x0) 1.990860108s ago: executing program 4 (id=2493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x28000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) close(r6) r7 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r7, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010002, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7ff, 0x0, 0x4, 0x1, 0x3ff, 0xd, 0x7, 0x1, 0xff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x2000400) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.721286898s ago: executing program 6 (id=2494): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x3, 0x73) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x26e1, &(0x7f0000000140)={0x0, 0x25dd, 0x100, 0x2, 0x2ed, 0x0, r0}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 1.613602488s ago: executing program 0 (id=2495): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$inet6(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x1, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x4, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r2, 0x1, 0x4002) 1.494616876s ago: executing program 6 (id=2496): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110870000000000a600"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x80000000000f36, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, r1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1b0000000000000000000000758b6868b62fec6e8195e08167f68a85d3328574fc65fab7f99612c01556671019c3378f173a137ae35d94cdf3c414efc4805567", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x2, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="184000000000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, 0x0, 0x0) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000300)=[{0x0}], 0x1}, 0x8c1) r5 = socket$kcm(0x11, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000000c0)={[{@noblock_validity}, {@abort}, {}, {@nombcache}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@nobh}]}, 0x2a, 0x645, &(0x7f0000000600)="$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") 1.494349006s ago: executing program 5 (id=2497): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840) syz_usb_disconnect(r0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x701800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="c00000000018010400000000000000000a0000003c0001802c000180"], 0xc0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0001002abd70009595df250a0000000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 1.126945758s ago: executing program 4 (id=2499): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0xc0400, 0x0) r3 = dup2(r1, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)) mq_open(&(0x7f00000001c0)='\x00', 0x1, 0xc, &(0x7f0000000200)={0x80000001, 0xe000000000000000, 0x5, 0x3}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdffffeffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x1e, 0x0, @val=@perf_event={0x400}}, 0x18) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x700, 0x0, 0x4040010}, 0xb0) 955.948506ms ago: executing program 1 (id=2500): socket(0xa, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) creat(&(0x7f00000002c0)='./file1\x00', 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) bind$vsock_stream(r4, &(0x7f00000011c0)={0x28, 0x0, 0x2711, @host}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[], 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="18490000000000001500000000aefec82a0000001801000020756c2500000000002020207b1af8ff0552bb4d3a5a43c90000000007070000000000000002000008000000b70200003ce500008500000006000000183900000100ce27a837000000000000183800000400"/116], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x7c, &(0x7f00000002c0)=""/124, 0x83f00, 0x61, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000380)=[r0], &(0x7f00000003c0)=[{0x5, 0x3, 0xf, 0x8}, {0x5, 0x3, 0x9, 0x2}, {0x0, 0x4, 0xc, 0xb}, {0x5, 0x2, 0xb, 0x3}, {0x3, 0x2, 0x2, 0x9}, {0x3, 0x2, 0x0, 0x8}], 0x10, 0x46d}, 0x94) 936.268563ms ago: executing program 1 (id=2501): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7fffffffffe, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x11a, &(0x7f0000000000)={@link_local={0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @udp={{0x1c, 0x4, 0x2, 0x6, 0x10c, 0x64, 0x0, 0xe8, 0x11, 0x0, @broadcast, @private=0xa010100, {[@lsrr={0x83, 0x13, 0x46, [@empty, @loopback, @remote, @multicast2]}, @cipso={0x86, 0xf, 0x0, [{0x5, 0x9, "3f64c0a8f8c940"}]}, @generic={0x83, 0xb, "6ce6f815ef2a2c5069"}, @timestamp_addr={0x44, 0x2c, 0xe7, 0x1, 0x7, [{@multicast2, 0x3}, {@remote, 0x9}, {@remote, 0x8}, {@local}, {@multicast2, 0x3}]}]}}, {0x4e24, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "4035b43009ea52d52bffa4231fb54cb57ecadc15c17827441aeb8b84ba97882f", "a48c69f70b0eb713435c4651d23bec89fc5f39aa25bb9bd58ec947ca64c65516a02bf4425bf44f9d8929d24dd4501172", "15f125ab93d5b8749229e9ae31ba8f00caf1f6a7e7289910a85fc713", {"21c81192ab8753b9a7bea3478f076dc4", "96584b702e63faaca01771c5569ed5f5"}}}}}}}, 0x0) 698.670109ms ago: executing program 0 (id=2502): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000006d00673c2bbd7000ffdadf2500000000", @ANYRES32=0x0, @ANYBLOB="0110040004e80200180036"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 686.876667ms ago: executing program 5 (id=2503): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x4481, 0x3380, 0x1, 0x40024a}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, r4, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x23}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x215}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7c}]}, 0xc8}, 0x1, 0x0, 0x0, 0x81}, 0x4008000) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd_index=0x3, 0x8000000000, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x14, 0x63, 0x0, 0x0) 523.001636ms ago: executing program 5 (id=2504): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) (async) syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000160000000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xfff2, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040814) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r9 = socket$inet6(0xa, 0x3, 0xff) (rerun: 64) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x40, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) r10 = dup(r9) r11 = open(&(0x7f00000000c0)='./file0\x00', 0x200200, 0x0) ftruncate(r11, 0x200004) (async) sendfile(r10, r11, 0x0, 0x80001d00c0d1) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r12, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) keyctl$clear(0x3, 0xfffffffffffffffc) (async, rerun: 32) r13 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async, rerun: 64) r14 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400a739871d81e5f676283300", @ANYRESDEC=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r14], 0x40}, 0x1, 0xba01, 0x0, 0xc8c4}, 0x0) 522.615866ms ago: executing program 0 (id=2505): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x4, 0x3, 0x4}, @IFLA_XFRM_IF_ID={0x8}]}}}]}, 0x44}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x80, 0x0, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) unshare(0x22020400) r6 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0xb, 0x7, 0x5, 0x22, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_key={0x6, 0x9, 0x108, 0x0, "74084d0ac32767c7efaeafb4042f80fac6aa5fac1756ce5e90e0fb59c5beb26395"}, @sadb_x_sec_ctx={0xd, 0x18, 0xa, 0x3, 0x59, "90946c54a6b870c08a3140afcc25ddb176b1c1ee04d98aa90195f57c4ad1a2b85a766fbd6763d256cc2ad9984882622cb3829e879c0cb85b3f3a7b0a51c87974baf5733a07d0d7bed6a25abd28c3c062f0db730d942cd69e70"}, @sadb_address={0x5, 0x7, 0x6c, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x8}}, @sadb_address={0x3, 0x17, 0x2b, 0xa0, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x8, 0x0, 0x10}]}, 0x110}}, 0x4009010) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) write$P9_RVERSION(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) 522.120606ms ago: executing program 1 (id=2506): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001308e9990000000000000000fc010004000000000000000000000001ac1414bb00000000000000000000000000000c00100000800200111084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008000) recvfrom$inet(r4, &(0x7f0000000080)=""/19, 0x13, 0x40000041, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0xfffe, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 427.495248ms ago: executing program 0 (id=2507): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x3, 0x73) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x26e1, &(0x7f0000000140)={0x0, 0x25dd, 0x100, 0x2, 0x2ed, 0x0, r0}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 423.267018ms ago: executing program 1 (id=2508): r0 = socket$inet6(0xa, 0x805, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x1, 0x1, 0x0, 0x101}, 0x20) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x47, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, &(0x7f0000000080)=""/4066, &(0x7f0000001100)=0xfe2) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0x2, 0x80010, 0x238, 0xb, 0x3, "ff04ddf0ffa64d7feb190e0000000200", 0x2000006, 0xfffffffd}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000080)=0x800004, 0x4) r6 = semget(0x1, 0x4, 0x69c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r6, &(0x7f00000000c0)=[{0x1, 0xbbdd, 0x1000}, {0x1, 0x2, 0x1800}], 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001300)={&(0x7f0000001080), 0xc, &(0x7f00000010c0)={&(0x7f0000001140)={0x1bc, 0x9, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x8c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x57}]}, @IPSET_ATTR_ADT={0xa8, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xb}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'geneve0\x00'}}]}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xff}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x10040}, 0x80) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000140)=""/22, 0x16}], 0x1) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x2, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@cipso={0x86, 0x8, 0x0, [{0x1, 0x2}]}]}}}}}}, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) 377.76835ms ago: executing program 5 (id=2509): r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0xa0048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="ff", 0x1}], 0x1, 0x2000002, 0x0, 0x0) close(r2) r3 = dup(r1) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000008340)=[{&(0x7f0000006d00)=""/4096, 0x1000}], 0x1}, 0x1d}], 0x2, 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x73, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000180)={[{@data_err_ignore}, {@errors_remount}, {@sysvgroups}, {@nouid32}, {@nodioread_nolock}, {@orlov}, {@auto_da_alloc}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r5, 0x0, 0x0, 0x8800000) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 292.875194ms ago: executing program 0 (id=2510): pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000009c0), 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xff3c, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x9, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) 231.025712ms ago: executing program 4 (id=2511): socket(0xa, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) creat(&(0x7f00000002c0)='./file1\x00', 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) bind$vsock_stream(r4, &(0x7f00000011c0)={0x28, 0x0, 0x2711, @host}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[], 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="18490000000000001500000000aefec82a0000001801000020756c2500000000002020207b1af8ff0552bb4d3a5a43c90000000007070000000000000002000008000000b70200003ce500008500000006000000183900000100ce27a837000000000000183800000400"/116], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x7c, &(0x7f00000002c0)=""/124, 0x83f00, 0x61, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000380)=[r0], &(0x7f00000003c0)=[{0x5, 0x3, 0xf, 0x8}, {0x5, 0x3, 0x9, 0x2}, {0x0, 0x4, 0xc, 0xb}, {0x5, 0x2, 0xb, 0x3}, {0x3, 0x2, 0x2, 0x9}, {0x3, 0x2, 0x0, 0x8}], 0x10, 0x46d}, 0x94) 203.725207ms ago: executing program 1 (id=2512): r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9420}, 0x0, {0x0, r3}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@local}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e0002}) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f000045b000/0x2000)=nil], &(0x7f0000001180), &(0x7f00000001c0), 0x0) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003c80)={@map, 0xffffffffffffffff, 0x1b}, 0x20) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x2, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) r8 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, 0x0, 0x0) close(r7) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x21, &(0x7f0000000100), 0x120) 203.354687ms ago: executing program 4 (id=2513): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r1) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048800}, 0x4000080) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x149521) r3 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000014c0)=0x4d) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000002080)=""/4106, 0x100a}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r7 = syz_io_uring_setup(0x86f, &(0x7f0000000480)={0x0, 0x79af, 0x0, 0xfffffffe, 0x214}, &(0x7f0000000700)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000340)={0x0, 0xbe26, 0x0, 0x6, 0x3d3}, &(0x7f0000000280)=0x0, &(0x7f0000000300)) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffe, 0x7}) write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1808"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace$setregs(0xd, r12, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_io_uring_submit(r10, r9, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x20, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x40, 0x185100, 0x12345}) io_uring_enter(r7, 0x238e, 0xc1040000, 0x43, 0x0, 0x0) 161.56025ms ago: executing program 5 (id=2514): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000008000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 104.189969ms ago: executing program 1 (id=2515): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) sendmsg$sock(r0, &(0x7f00000002c0)={&(0x7f0000000300)=@llc={0x1a, 0x310, 0xbc, 0x1, 0xc, 0x1, @multicast}, 0x80, 0x0, 0x0, &(0x7f0000000080)}, 0x24004040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010008f0000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a300000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket$kcm(0x29, 0x0, 0x0) r7 = epoll_create(0x8) r8 = socket(0x28, 0x801, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000008c0)={{r7}, "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"}) connect$vsock_stream(r8, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000280)={0x30000010}) shutdown(r8, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) connect$inet(r9, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff}, 0x880) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r11, &(0x7f0000000000)='2', 0x1, 0x4fed0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x21, &(0x7f00000018c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3fc8ffd6}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}]}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0xd8, &(0x7f0000000540)=""/216, 0x0, 0x8, '\x00', 0x0, @fallback=0x29, r10, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x2, 0xffffcc57, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000380)={r9, r12}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbfd, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000044) socket$inet6_sctp(0xa, 0x2b78d7ab3fa7a90a, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) 103.481269ms ago: executing program 4 (id=2516): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"/264], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="080005020000", &(0x7f0000001200)=""/4115, 0x0, 0x10, 0x0, 0x0}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4004}}, 0x26) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7c, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGRDESCSIZE(r9, 0x80044801, &(0x7f0000000000)) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0xf, &(0x7f00000001c0)=@raw=[@exit, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xfa, &(0x7f0000000580)=""/250, 0x0, 0x1a, '\x00', 0x0, @fallback, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x3, 0x1ff, 0xfff}, 0x10, r8, r0, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff, r0, r9, 0xffffffffffffffff, r10, r11, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x4, 0x4, 0x800}], 0x10, 0x80000001}, 0x94) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r13 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r14 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r14, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 0s ago: executing program 0 (id=2517): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0xa, 0x0, 0x8, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x4, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x22020400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r2, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) kernel console output (not intermixed with test programs): ical_memsw_limit 9223372036854771712 [ 252.547952][T10278] total_cache 0 [ 252.551422][T10278] total_rss 4096 [ 252.555610][T10278] total_shmem 0 [ 252.559126][T10278] total_mapped_file 0 [ 252.563501][T10278] total_dirty 0 [ 252.567091][T10278] total_writeback 12288 [ 252.571449][T10278] total_workingset_refault_anon 2109 [ 252.577229][T10278] total_workingset_refault_file 0 [ 252.582890][T10278] total_swap 176128 [ 252.586774][T10278] total_swapcached 339968 [ 252.591143][T10278] total_pgpgin 25750 [ 252.601307][T10305] loop5: detected capacity change from 0 to 512 [ 252.609554][T10307] loop0: detected capacity change from 0 to 128 [ 252.618717][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 252.618796][ T28] audit: type=1400 audit(1772226934.125:2224): avc: denied { mount } for pid=10306 comm="syz.0.1777" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 252.625041][T10307] bio_check_eod: 53 callbacks suppressed [ 252.625086][T10307] syz.0.1777: attempt to access beyond end of device [ 252.625086][T10307] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 252.667928][T10278] total_pgpgout 25743 [ 252.672061][T10278] total_pgfault 28649 [ 252.676125][T10278] total_pgmajfault 298 [ 252.685477][T10278] total_inactive_anon 16384 [ 252.690328][T10307] syz.0.1777: attempt to access beyond end of device [ 252.690328][T10307] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 252.704161][T10278] total_active_anon 8192 [ 252.709326][T10278] total_inactive_file 4096 [ 252.713784][T10278] total_active_file 0 [ 252.726043][T10307] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 252.735284][T10278] total_unevictable 0 [ 252.739600][T10278] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1768,pid=10278,uid=0 [ 252.754741][T10307] syz.0.1777: attempt to access beyond end of device [ 252.754741][T10307] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 252.769334][T10278] Memory cgroup out of memory: Killed process 10278 (syz.6.1768) total-vm:94160kB, anon-rss:1232kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 252.788141][T10307] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 252.798377][T10307] syz.0.1777: attempt to access beyond end of device [ 252.798377][T10307] loop0: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 252.828385][T10307] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 252.828421][T10305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.841855][T10307] syz.0.1777: attempt to access beyond end of device [ 252.841855][T10307] loop0: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 252.864380][T10307] Buffer I/O error on dev loop0, logical block 78, lost async page write [ 252.893527][T10307] syz.0.1777: attempt to access beyond end of device [ 252.893527][T10307] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 252.896722][T10305] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.911062][T10307] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 252.929038][T10307] syz.0.1777: attempt to access beyond end of device [ 252.929038][T10307] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 252.942970][ T28] audit: type=1400 audit(1772226934.450:2225): avc: denied { create } for pid=10313 comm="syz.6.1778" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.943000][ T28] audit: type=1400 audit(1772226934.450:2226): avc: denied { map } for pid=10313 comm="syz.6.1778" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.943033][ T28] audit: type=1400 audit(1772226934.450:2227): avc: denied { read write } for pid=10313 comm="syz.6.1778" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 253.016991][T10307] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 253.036560][T10319] netlink: 'syz.6.1780': attribute type 6 has an invalid length. [ 253.065879][T10319] loop6: detected capacity change from 0 to 512 [ 253.094933][T10319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.107783][T10319] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.132998][ T8892] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.176975][ T28] audit: type=1400 audit(1772226934.723:2228): avc: denied { listen } for pid=10330 comm="syz.6.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.220344][ T28] audit: type=1400 audit(1772226934.765:2229): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 253.280262][ T8342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.319801][T10344] loop0: detected capacity change from 0 to 512 [ 253.590016][ T3317] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 253.639276][ T3317] CPU: 1 UID: 0 PID: 3317 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 253.639306][ T3317] Tainted: [W]=WARN [ 253.639314][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.639347][ T3317] Call Trace: [ 253.639417][ T3317] [ 253.639424][ T3317] __dump_stack+0x1d/0x30 [ 253.639448][ T3317] dump_stack_lvl+0x95/0xd0 [ 253.639469][ T3317] dump_stack+0x15/0x1b [ 253.639494][ T3317] dump_header+0x80/0x240 [ 253.639521][ T3317] oom_kill_process+0x295/0x350 [ 253.639572][ T3317] out_of_memory+0x97d/0xb80 [ 253.639597][ T3317] try_charge_memcg+0x62e/0xa10 [ 253.639646][ T3317] __mem_cgroup_charge+0x65/0x150 [ 253.639672][ T3317] filemap_add_folio+0x110/0x350 [ 253.639709][ T3317] __filemap_get_folio_mpol+0x326/0x680 [ 253.639738][ T3317] filemap_fault+0x486/0xb90 [ 253.639820][ T3317] __do_fault+0xbc/0x200 [ 253.639914][ T3317] handle_mm_fault+0x11d7/0x3020 [ 253.640017][ T3317] ? vma_start_read+0x1c7/0x2c0 [ 253.640073][ T3317] do_user_addr_fault+0x62f/0x1050 [ 253.640173][ T3317] ? trace_page_fault_user+0x1f/0xe0 [ 253.640240][ T3317] exc_page_fault+0x62/0xa0 [ 253.640275][ T3317] asm_exc_page_fault+0x26/0x30 [ 253.640359][ T3317] RIP: 0033:0x7fa05b91a7b4 [ 253.640379][ T3317] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 [ 253.640401][ T3317] RSP: 002b:00007ffe4fa39a40 EFLAGS: 00010206 [ 253.640419][ T3317] RAX: 0000001b33c24000 RBX: 00000000000003f4 RCX: 000000000003e030 [ 253.640460][ T3317] RDX: 00000000079c1a82 RSI: 00007ffe4fa39ad0 RDI: 0000000000000001 [ 253.640561][ T3317] RBP: 00007ffe4fa39a7c R08: 000000001d076ce1 R09: 7fffffffffffffff [ 253.640573][ T3317] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 253.640584][ T3317] R13: 00000000000927c0 R14: 000000000003e18c R15: 00007ffe4fa39ad0 [ 253.640599][ T3317] [ 253.646251][ T3317] memory: usage 307200kB, limit 307200kB, failcnt 8254 [ 253.858394][ T3317] memory+swap: usage 236756kB, limit 9007199254740988kB, failcnt 0 [ 253.866453][ T3317] kmem: usage 236256kB, limit 9007199254740988kB, failcnt 0 [ 253.917036][ T3317] Memory cgroup stats for /syz0: [ 253.917249][ T3317] cache 0 [ 253.954545][ T3317] rss 24576 [ 253.972048][ T3317] shmem 0 [ 253.977304][ T3317] mapped_file 0 [ 253.980782][ T3317] dirty 0 [ 254.000813][ T3317] writeback 0 [ 254.004160][ T3317] workingset_refault_anon 980 [ 254.043882][ T3317] workingset_refault_file 944 [ 254.057364][ T3317] swap 282624 [ 254.066146][ T3317] swapcached 7294976 [ 254.077346][ T3317] pgpgin 263891 [ 254.080853][ T3317] pgpgout 263877 [ 254.102594][ T3317] pgfault 254280 [ 254.106413][ T3317] pgmajfault 314 [ 254.109974][ T3317] inactive_anon 0 [ 254.113616][ T3317] active_anon 53248 [ 254.125706][ T3317] inactive_file 0 [ 254.134255][ T3317] active_file 4096 [ 254.138017][ T3317] unevictable 0 [ 254.154543][ T3317] hierarchical_memory_limit 314572800 [ 254.159988][ T3317] hierarchical_memsw_limit 9223372036854771712 [ 254.181673][ T3317] total_cache 0 [ 254.186279][ T3317] total_rss 24576 [ 254.189931][ T3317] total_shmem 0 [ 254.193565][T10367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=10367 comm=syz.1.1796 [ 254.203426][ T3317] total_mapped_file 0 [ 254.209993][ T3317] total_dirty 0 [ 254.232357][ T3317] total_writeback 0 [ 254.239763][ T3317] total_workingset_refault_anon 980 [ 254.245458][T10368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=10368 comm=syz.1.1796 [ 254.261274][ T3317] total_workingset_refault_file 944 [ 254.266610][ T3317] total_swap 282624 [ 254.274791][ T3317] total_swapcached 7294976 [ 254.281969][ T3317] total_pgpgin 263891 [ 254.288479][ T3317] total_pgpgout 263877 [ 254.305497][ T3317] total_pgfault 254280 [ 254.316897][ T3317] total_pgmajfault 314 [ 254.330968][ T3317] total_inactive_anon 0 [ 254.335263][ T3317] total_active_anon 53248 [ 254.339609][ T3317] total_inactive_file 0 [ 254.354253][ T3317] total_active_file 4096 [ 254.358553][ T3317] total_unevictable 0 [ 254.362540][ T3317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1789,pid=10343,uid=0 [ 254.387758][T10364] loop6: detected capacity change from 0 to 2048 [ 254.416873][ T3317] Memory cgroup out of memory: Killed process 10343 (syz.0.1789) total-vm:94160kB, anon-rss:1252kB, file-rss:22428kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 254.462381][T10364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.594591][T10364] netlink: 'syz.6.1795': attribute type 17 has an invalid length. [ 254.610509][T10364] netlink: 'syz.6.1795': attribute type 16 has an invalid length. [ 254.630641][T10364] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1795'. [ 254.724291][ T8892] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.758204][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1803'. [ 254.797221][T10391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.947326][T10422] loop6: detected capacity change from 0 to 512 [ 255.109563][T10421] syz.6.1811 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 255.136837][T10421] CPU: 1 UID: 0 PID: 10421 Comm: syz.6.1811 Tainted: G W syzkaller #0 PREEMPT(full) [ 255.136892][T10421] Tainted: [W]=WARN [ 255.136898][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.136908][T10421] Call Trace: [ 255.136914][T10421] [ 255.136920][T10421] __dump_stack+0x1d/0x30 [ 255.137035][T10421] dump_stack_lvl+0x95/0xd0 [ 255.137055][T10421] dump_stack+0x15/0x1b [ 255.137078][T10421] dump_header+0x80/0x240 [ 255.137103][T10421] oom_kill_process+0x295/0x350 [ 255.137147][T10421] out_of_memory+0x97d/0xb80 [ 255.137176][T10421] try_charge_memcg+0x62e/0xa10 [ 255.137209][T10421] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 255.137235][T10421] __swap_cache_prepare_and_add+0x386/0x530 [ 255.137276][T10421] swap_cache_alloc_folio+0xa2/0x120 [ 255.137302][T10421] swap_cluster_readahead+0x26e/0x3d0 [ 255.137330][T10421] swapin_readahead+0xde/0x840 [ 255.137387][T10421] ? _raw_spin_unlock+0x9/0x30 [ 255.137406][T10421] ? swap_put_entries_cluster+0x385/0x3a0 [ 255.137440][T10421] ? swap_put_entries_cluster+0x91/0x3a0 [ 255.137525][T10421] ? __rcu_read_unlock+0x4e/0x70 [ 255.137548][T10421] ? swap_cache_get_folio+0x26f/0x280 [ 255.137578][T10421] do_swap_page+0x309/0x2210 [ 255.137611][T10421] ? css_rstat_updated+0xbb/0x280 [ 255.137691][T10421] ? __rcu_read_lock+0x36/0x50 [ 255.137714][T10421] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 255.137750][T10421] handle_mm_fault+0xb40/0x3020 [ 255.137850][T10421] ? vma_start_read+0x1c7/0x2c0 [ 255.137873][T10421] do_user_addr_fault+0x62f/0x1050 [ 255.137900][T10421] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 255.137932][T10421] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 255.137991][T10421] ? trace_page_fault_user+0x1f/0xe0 [ 255.138045][T10421] exc_page_fault+0x62/0xa0 [ 255.138095][T10421] asm_exc_page_fault+0x26/0x30 [ 255.138119][T10421] RIP: 0033:0x7fea778ba14c [ 255.138139][T10421] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 255.138194][T10421] RSP: 002b:00007ffef02a4940 EFLAGS: 00010202 [ 255.138214][T10421] RAX: 0000000000000000 RBX: 00007fea77c66090 RCX: 00005555816f2808 [ 255.138230][T10421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.138244][T10421] RBP: 00007fea77c67da0 R08: 0000000000000000 R09: 0000000000000000 [ 255.138258][T10421] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003eafd [ 255.138312][T10421] R13: 00007fea77c6609c R14: 000000000003e83d R15: 00007fea77c66090 [ 255.138397][T10421] [ 255.138407][T10421] memory: usage 307200kB, limit 307200kB, failcnt 551 [ 255.477361][T10421] memory+swap: usage 225728kB, limit 9007199254740988kB, failcnt 0 [ 255.505464][T10421] kmem: usage 210900kB, limit 9007199254740988kB, failcnt 0 [ 255.557532][T10421] Memory cgroup stats for /syz6: [ 255.557732][T10421] cache 0 [ 255.587230][T10458] loop5: detected capacity change from 0 to 1024 [ 255.614864][T10421] rss 8192 [ 255.618227][T10458] EXT4-fs: inline encryption not supported [ 255.624139][T10421] shmem 0 [ 255.627095][T10421] mapped_file 0 [ 255.639856][T10421] dirty 0 [ 255.655561][T10458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.677550][T10421] writeback 8192 [ 255.681237][T10421] workingset_refault_anon 2138 [ 255.695634][T10458] EXT4-fs warning (device loop5): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 255.707049][ T28] audit: type=1400 audit(1772226937.359:2230): avc: denied { setopt } for pid=10457 comm="syz.5.1814" lport=56261 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 255.744765][T10421] workingset_refault_file 0 [ 255.764900][T10421] swap 184320 [ 255.782353][T10421] swapcached 577536 [ 255.808327][T10421] pgpgin 26533 [ 255.818141][T10421] pgpgout 26528 [ 255.830403][ T28] audit: type=1400 audit(1772226937.359:2231): avc: denied { getopt } for pid=10457 comm="syz.5.1814" lport=56261 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 255.848850][T10421] pgfault 29912 [ 255.882469][T10421] pgmajfault 311 [ 255.886061][T10421] inactive_anon 12288 [ 255.914243][T10421] active_anon 4096 [ 255.933232][T10421] inactive_file 4096 [ 255.937484][T10421] active_file 0 [ 255.940956][T10421] unevictable 0 [ 255.960855][T10421] hierarchical_memory_limit 314572800 [ 255.972376][T10421] hierarchical_memsw_limit 9223372036854771712 [ 255.978544][T10421] total_cache 0 [ 255.982006][T10421] total_rss 8192 [ 255.993694][T10421] total_shmem 0 [ 255.998412][T10421] total_mapped_file 0 [ 256.005293][T10421] total_dirty 0 [ 256.010232][T10421] total_writeback 8192 [ 256.014334][T10421] total_workingset_refault_anon 2138 [ 256.019635][T10421] total_workingset_refault_file 0 [ 256.038445][T10421] total_swap 184320 [ 256.064525][T10421] total_swapcached 577536 [ 256.069100][T10421] total_pgpgin 26533 [ 256.073220][T10421] total_pgpgout 26528 [ 256.081292][T10421] total_pgfault 29912 [ 256.085302][T10421] total_pgmajfault 311 [ 256.089525][T10421] total_inactive_anon 12288 [ 256.101171][T10421] total_active_anon 4096 [ 256.106175][T10421] total_inactive_file 4096 [ 256.111793][T10421] total_active_file 0 [ 256.117022][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'. [ 256.126484][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 256.135417][T10421] total_unevictable 0 [ 256.139437][T10421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1811,pid=10421,uid=0 [ 256.156304][T10421] Memory cgroup out of memory: Killed process 10421 (syz.6.1811) total-vm:94160kB, anon-rss:1236kB, file-rss:22432kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 256.216756][T10481] netlink: 'syz.1.1818': attribute type 1 has an invalid length. [ 256.224709][T10481] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1818'. [ 256.277558][T10485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=10485 comm=syz.6.1820 [ 256.316216][T10485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=10485 comm=syz.6.1820 [ 256.360571][ T8342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.436611][T10495] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2067 sclass=netlink_xfrm_socket pid=10495 comm=syz.4.1822 [ 256.450600][T10495] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2068 sclass=netlink_xfrm_socket pid=10495 comm=syz.4.1822 [ 256.466342][T10495] netlink: 'syz.4.1822': attribute type 36 has an invalid length. [ 256.486106][ T28] audit: type=1400 audit(1772226938.104:2232): avc: denied { getopt } for pid=10492 comm="syz.6.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 256.517784][T10495] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 256.527646][T10495] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 256.539079][T10499] netlink: 'syz.4.1822': attribute type 10 has an invalid length. [ 257.357470][ T3318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 257.415847][ T3318] CPU: 1 UID: 0 PID: 3318 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 257.415893][ T3318] Tainted: [W]=WARN [ 257.415899][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.415910][ T3318] Call Trace: [ 257.415917][ T3318] [ 257.415926][ T3318] __dump_stack+0x1d/0x30 [ 257.415978][ T3318] dump_stack_lvl+0x95/0xd0 [ 257.416011][ T3318] dump_stack+0x15/0x1b [ 257.416036][ T3318] dump_header+0x80/0x240 [ 257.416063][ T3318] oom_kill_process+0x295/0x350 [ 257.416087][ T3318] out_of_memory+0x97d/0xb80 [ 257.416106][ T3318] try_charge_memcg+0x62e/0xa10 [ 257.416214][ T3318] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 257.416294][ T3318] __swap_cache_prepare_and_add+0x386/0x530 [ 257.416324][ T3318] swap_cache_alloc_folio+0xa2/0x120 [ 257.416372][ T3318] swap_cluster_readahead+0x26e/0x3d0 [ 257.416457][ T3318] swapin_readahead+0xde/0x840 [ 257.416482][ T3318] ? mm_trace_rss_stat+0x1d/0xf0 [ 257.416586][ T3318] ? __rcu_read_unlock+0x33/0x70 [ 257.416640][ T3318] ? __rcu_read_unlock+0x4e/0x70 [ 257.416658][ T3318] ? swap_cache_get_folio+0x26f/0x280 [ 257.416682][ T3318] do_swap_page+0x309/0x2210 [ 257.416774][ T3318] ? __rcu_read_lock+0x36/0x50 [ 257.416794][ T3318] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 257.416818][ T3318] handle_mm_fault+0xb40/0x3020 [ 257.416852][ T3318] ? vma_start_read+0x1c7/0x2c0 [ 257.416942][ T3318] do_user_addr_fault+0x62f/0x1050 [ 257.417030][ T3318] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 257.417051][ T3318] ? trace_page_fault_user+0x1f/0xe0 [ 257.417121][ T3318] exc_page_fault+0x62/0xa0 [ 257.417148][ T3318] asm_exc_page_fault+0x26/0x30 [ 257.417288][ T3318] RIP: 0033:0x7f7a797ca7b7 [ 257.417305][ T3318] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 39 7c 24 [ 257.417321][ T3318] RSP: 002b:00007ffddcd0f6e0 EFLAGS: 00010202 [ 257.417336][ T3318] RAX: 0000001b33d24000 RBX: 000000000000042b RCX: 000000000003efd0 [ 257.417398][ T3318] RDX: 0000000007179940 RSI: 00007ffddcd0f770 RDI: 000000000000001d [ 257.417412][ T3318] RBP: 00007ffddcd0f71c R08: 000000001b0df58d R09: 7fffffffffffffff [ 257.417424][ T3318] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 257.417436][ T3318] R13: 00000000000927c0 R14: 000000000003f099 R15: 00007ffddcd0f770 [ 257.417531][ T3318] [ 257.653925][ T3318] memory: usage 243756kB, limit 307200kB, failcnt 16550 [ 257.661106][ T3318] memory+swap: usage 311668kB, limit 9007199254740988kB, failcnt 0 [ 257.684181][ T3318] kmem: usage 219860kB, limit 9007199254740988kB, failcnt 0 [ 257.740478][ T3318] Memory cgroup stats for /syz1: [ 257.740717][ T3318] cache 4096 [ 257.752666][ T3318] rss 118784 [ 257.762555][ T3318] shmem 0 [ 257.765712][ T3318] mapped_file 4096 [ 257.769517][ T3318] dirty 4096 [ 257.781868][ T3318] writeback 28672 [ 257.785685][ T3318] workingset_refault_anon 322 [ 257.790415][ T3318] workingset_refault_file 2782 [ 257.803600][ T3318] swap 69541888 [ 257.807131][ T3318] swapcached 95334400 [ 257.811235][ T3318] pgpgin 267089 [ 257.814817][ T3318] pgpgout 267050 [ 257.828112][ T3318] pgfault 243365 [ 257.831735][ T3318] pgmajfault 163 [ 257.835347][ T3318] inactive_anon 28672 [ 257.839392][ T3318] active_anon 126976 [ 257.852861][ T3318] inactive_file 0 [ 257.864346][ T3318] active_file 4096 [ 257.876849][ T3318] unevictable 0 [ 257.914566][ T3318] hierarchical_memory_limit 314572800 [ 257.946008][ T3318] hierarchical_memsw_limit 9223372036854771712 [ 257.974726][ T3318] total_cache 4096 [ 257.978468][ T3318] total_rss 118784 [ 258.008637][ T3318] total_shmem 0 [ 258.021906][ T3318] total_mapped_file 4096 [ 258.026156][ T3318] total_dirty 4096 [ 258.047324][ T3318] total_writeback 28672 [ 258.052356][ T3318] total_workingset_refault_anon 322 [ 258.057809][ T3318] total_workingset_refault_file 2782 [ 258.064009][ T3318] total_swap 69541888 [ 258.068200][ T3318] total_swapcached 95334400 [ 258.072828][ T3318] total_pgpgin 267089 [ 258.076907][ T3318] total_pgpgout 267050 [ 258.081557][ T3318] total_pgfault 243365 [ 258.085665][ T3318] total_pgmajfault 163 [ 258.090529][ T3318] total_inactive_anon 28672 [ 258.095081][ T3318] total_active_anon 126976 [ 258.108996][ T3318] total_inactive_file 0 [ 258.113212][ T3318] total_active_file 4096 [ 258.118451][ T3318] total_unevictable 0 [ 258.122907][ T3318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1831,pid=10519,uid=0 [ 258.146986][ T3318] Memory cgroup out of memory: OOM victim 10519 (syz.1.1831) is already exiting. Skip killing the task [ 258.233329][T10541] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 258.273137][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1838'. [ 258.296561][T10551] FAULT_INJECTION: forcing a failure. [ 258.296561][T10551] name failslab, interval 1, probability 0, space 0, times 0 [ 258.334695][T10551] CPU: 1 UID: 0 PID: 10551 Comm: syz.6.1841 Tainted: G W syzkaller #0 PREEMPT(full) [ 258.334733][T10551] Tainted: [W]=WARN [ 258.334770][T10551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.334783][T10551] Call Trace: [ 258.334865][T10551] [ 258.334873][T10551] __dump_stack+0x1d/0x30 [ 258.334902][T10551] dump_stack_lvl+0x95/0xd0 [ 258.334983][T10551] dump_stack+0x15/0x1b [ 258.335010][T10551] should_fail_ex+0x263/0x280 [ 258.335037][T10551] should_failslab+0x8c/0xb0 [ 258.335058][T10551] __kmalloc_noprof+0xb8/0x4e0 [ 258.335135][T10551] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 258.335217][T10551] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 258.335245][T10551] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 258.335290][T10551] ? genl_get_cmd+0x639/0x660 [ 258.335332][T10551] genl_rcv_msg+0x432/0x470 [ 258.335390][T10551] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 258.335432][T10551] ? __pfx_nl80211_get_protocol_features+0x10/0x10 [ 258.335478][T10551] ? __pfx_nl80211_post_doit+0x10/0x10 [ 258.335560][T10551] netlink_rcv_skb+0x123/0x220 [ 258.335660][T10551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 258.335708][T10551] genl_rcv+0x28/0x40 [ 258.335802][T10551] netlink_unicast+0x5c0/0x690 [ 258.335831][T10551] netlink_sendmsg+0x5c8/0x6f0 [ 258.335863][T10551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.335890][T10551] ____sys_sendmsg+0x5af/0x600 [ 258.335954][T10551] ___sys_sendmsg+0x195/0x1e0 [ 258.336008][T10551] __x64_sys_sendmsg+0xd4/0x160 [ 258.336047][T10551] x64_sys_call+0x194c/0x3020 [ 258.336077][T10551] do_syscall_64+0x12c/0x370 [ 258.336215][T10551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.336241][T10551] RIP: 0033:0x7fea779ec799 [ 258.336261][T10551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.336283][T10551] RSP: 002b:00007fea76447028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.336308][T10551] RAX: ffffffffffffffda RBX: 00007fea77c65fa0 RCX: 00007fea779ec799 [ 258.336325][T10551] RDX: 0000000000004000 RSI: 0000200000000400 RDI: 0000000000000003 [ 258.336405][T10551] RBP: 00007fea76447090 R08: 0000000000000000 R09: 0000000000000000 [ 258.336419][T10551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.336434][T10551] R13: 00007fea77c66038 R14: 00007fea77c65fa0 R15: 00007ffef02a47d8 [ 258.336464][T10551] [ 258.509440][T10561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=10561 comm=syz.1.1845 [ 258.537335][T10556] loop5: detected capacity change from 0 to 512 [ 258.562562][T10560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=10560 comm=syz.1.1845 [ 258.612132][T10556] FAT-fs (loop5): bogus number of FAT sectors [ 258.621531][T10556] FAT-fs (loop5): Can't find a valid FAT filesystem [ 258.766100][ T28] audit: type=1400 audit(1772226940.592:2233): avc: denied { ioctl } for pid=10578 comm="syz.5.1853" path="socket:[27182]" dev="sockfs" ino=27182 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 258.796690][T10579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.805247][T10579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.817577][ T28] audit: type=1400 audit(1772226940.624:2234): avc: denied { listen } for pid=10578 comm="syz.5.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.937020][T10591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10591 comm=syz.6.1858 [ 258.937066][T10592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10592 comm=syz.6.1858 [ 259.001798][T10595] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1860'. [ 259.021189][ T28] audit: type=1400 audit(1772226940.855:2235): avc: denied { remount } for pid=10593 comm="syz.1.1859" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 259.041243][T10595] netlink: 'syz.6.1860': attribute type 9 has an invalid length. [ 259.049148][T10595] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1860'. [ 259.058476][T10595] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1860'. [ 259.130245][T10601] loop6: detected capacity change from 0 to 512 [ 259.167371][T10601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.180007][T10601] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.284262][ T28] audit: type=1400 audit(1772226941.128:2236): avc: denied { create } for pid=10600 comm="syz.6.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 260.129992][T10614] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2067 sclass=netlink_xfrm_socket pid=10614 comm=syz.1.1865 [ 260.147855][T10614] netlink: 'syz.1.1865': attribute type 36 has an invalid length. [ 260.162433][T10614] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 260.172545][T10614] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 260.192372][T10614] netlink: 'syz.1.1865': attribute type 10 has an invalid length. [ 260.205378][T10615] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2067 sclass=netlink_xfrm_socket pid=10615 comm=syz.4.1864 [ 260.220771][T10615] netlink: 'syz.4.1864': attribute type 36 has an invalid length. [ 260.234872][T10615] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 260.244802][T10615] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 260.256956][T10615] netlink: 'syz.4.1864': attribute type 10 has an invalid length. [ 260.444418][ T8892] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.567190][T10624] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1870'. [ 260.676255][T10636] tipc: Enabling of bearer rejected, failed to enable media [ 260.705621][T10636] tipc: Enabled bearer , priority 0 [ 260.807446][T10642] lo speed is unknown, defaulting to 1000 [ 260.861991][T10645] netlink: 'syz.0.1876': attribute type 5 has an invalid length. [ 260.877631][T10645] netlink: 'syz.0.1876': attribute type 11 has an invalid length. [ 261.041182][T10660] FAULT_INJECTION: forcing a failure. [ 261.041182][T10660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.099796][T10660] CPU: 0 UID: 0 PID: 10660 Comm: syz.0.1878 Tainted: G W syzkaller #0 PREEMPT(full) [ 261.099839][T10660] Tainted: [W]=WARN [ 261.099846][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.099861][T10660] Call Trace: [ 261.099867][T10660] [ 261.099876][T10660] __dump_stack+0x1d/0x30 [ 261.099912][T10660] dump_stack_lvl+0x95/0xd0 [ 261.099935][T10660] dump_stack+0x15/0x1b [ 261.099956][T10660] should_fail_ex+0x263/0x280 [ 261.099976][T10660] should_fail+0xb/0x20 [ 261.100025][T10660] should_fail_usercopy+0x1a/0x20 [ 261.100049][T10660] _copy_from_user+0x1c/0xb0 [ 261.100130][T10660] ___sys_sendmsg+0xc1/0x1e0 [ 261.100171][T10660] __x64_sys_sendmsg+0xd4/0x160 [ 261.100198][T10660] x64_sys_call+0x194c/0x3020 [ 261.100221][T10660] do_syscall_64+0x12c/0x370 [ 261.100264][T10660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.100287][T10660] RIP: 0033:0x7fa05ba4c799 [ 261.100302][T10660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.100322][T10660] RSP: 002b:00007fa05a4a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.100345][T10660] RAX: ffffffffffffffda RBX: 00007fa05bcc5fa0 RCX: 00007fa05ba4c799 [ 261.100361][T10660] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 261.100417][T10660] RBP: 00007fa05a4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 261.100429][T10660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.100558][T10660] R13: 00007fa05bcc6038 R14: 00007fa05bcc5fa0 R15: 00007ffe4fa396d8 [ 261.100575][T10660] [ 261.365134][T10664] FAULT_INJECTION: forcing a failure. [ 261.365134][T10664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.384542][T10664] CPU: 0 UID: 0 PID: 10664 Comm: syz.0.1880 Tainted: G W syzkaller #0 PREEMPT(full) [ 261.384594][T10664] Tainted: [W]=WARN [ 261.384600][T10664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.384610][T10664] Call Trace: [ 261.384623][T10664] [ 261.384632][T10664] __dump_stack+0x1d/0x30 [ 261.384660][T10664] dump_stack_lvl+0x95/0xd0 [ 261.384686][T10664] dump_stack+0x15/0x1b [ 261.384706][T10664] should_fail_ex+0x263/0x280 [ 261.384767][T10664] should_fail+0xb/0x20 [ 261.384789][T10664] should_fail_usercopy+0x1a/0x20 [ 261.384812][T10664] _copy_from_user+0x1c/0xb0 [ 261.384891][T10664] packet_setsockopt+0x76e/0xfd0 [ 261.384923][T10664] ? __pfx_packet_setsockopt+0x10/0x10 [ 261.384950][T10664] __sys_setsockopt+0x184/0x200 [ 261.384982][T10664] __x64_sys_setsockopt+0x64/0x80 [ 261.385070][T10664] x64_sys_call+0x2327/0x3020 [ 261.385102][T10664] do_syscall_64+0x12c/0x370 [ 261.385126][T10664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.385178][T10664] RIP: 0033:0x7fa05ba4c799 [ 261.385221][T10664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.385242][T10664] RSP: 002b:00007fa05a4a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 261.385265][T10664] RAX: ffffffffffffffda RBX: 00007fa05bcc5fa0 RCX: 00007fa05ba4c799 [ 261.385281][T10664] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 261.385296][T10664] RBP: 00007fa05a4a7090 R08: 0000000000000010 R09: 0000000000000000 [ 261.385311][T10664] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 261.385416][T10664] R13: 00007fa05bcc6038 R14: 00007fa05bcc5fa0 R15: 00007ffe4fa396d8 [ 261.385438][T10664] [ 261.665659][T10674] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2067 sclass=netlink_xfrm_socket pid=10674 comm=syz.1.1881 [ 261.681076][T10674] netlink: 'syz.1.1881': attribute type 36 has an invalid length. [ 261.694535][T10674] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 261.704498][T10674] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 261.716903][T10674] netlink: 'syz.1.1881': attribute type 10 has an invalid length. [ 261.768013][T10673] batadv_slave_1: entered promiscuous mode [ 261.777701][T10672] batadv_slave_1: left promiscuous mode [ 262.089015][ T3105] tipc: Node number set to 4278190112 [ 262.213808][T10683] batadv_slave_1: entered promiscuous mode [ 262.220907][T10682] batadv_slave_1: left promiscuous mode [ 262.327499][T10694] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.357890][T10698] loop0: detected capacity change from 0 to 512 [ 262.401796][T10698] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 262.419181][T10698] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1891: bad orphan inode 131083 [ 262.429874][T10698] loop0: lost filesystem error report for type 5 error -117 [ 262.430448][T10698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.467330][T10694] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.485272][T10698] netlink: 'syz.0.1891': attribute type 1 has an invalid length. [ 262.493191][ T3326] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 262.504223][T10698] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1891'. [ 262.504598][ T3326] CPU: 0 UID: 0 PID: 3326 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 262.504713][ T3326] Tainted: [W]=WARN [ 262.504737][ T3326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.504767][ T3326] Call Trace: [ 262.504801][ T3326] [ 262.504820][ T3326] __dump_stack+0x1d/0x30 [ 262.504886][ T3326] dump_stack_lvl+0x95/0xd0 [ 262.504957][ T3326] dump_stack+0x15/0x1b [ 262.505078][ T3326] dump_header+0x80/0x240 [ 262.505137][ T3326] oom_kill_process+0x295/0x350 [ 262.505190][ T3326] out_of_memory+0x97d/0xb80 [ 262.505248][ T3326] try_charge_memcg+0x62e/0xa10 [ 262.505402][ T3326] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 262.505505][ T3326] __swap_cache_prepare_and_add+0x386/0x530 [ 262.505660][ T3326] swap_cache_alloc_folio+0xa2/0x120 [ 262.505687][ T3326] swap_cluster_readahead+0x26e/0x3d0 [ 262.505864][ T3326] swapin_readahead+0xde/0x840 [ 262.505969][ T3326] ? mm_trace_rss_stat+0x1d/0xf0 [ 262.506077][ T3326] ? __rcu_read_unlock+0x33/0x70 [ 262.506136][ T3326] ? __rcu_read_unlock+0x4e/0x70 [ 262.506199][ T3326] ? swap_cache_get_folio+0x26f/0x280 [ 262.506282][ T3326] do_swap_page+0x309/0x2210 [ 262.506399][ T3326] ? css_rstat_updated+0xbb/0x280 [ 262.506498][ T3326] ? __rcu_read_lock+0x36/0x50 [ 262.506556][ T3326] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 262.506630][ T3326] handle_mm_fault+0xb40/0x3020 [ 262.506721][ T3326] ? vma_start_read+0x1c7/0x2c0 [ 262.506798][ T3326] do_user_addr_fault+0x62f/0x1050 [ 262.506938][ T3326] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 262.507024][ T3326] ? trace_page_fault_user+0x1f/0xe0 [ 262.507106][ T3326] exc_page_fault+0x62/0xa0 [ 262.507174][ T3326] asm_exc_page_fault+0x26/0x30 [ 262.507248][ T3326] RIP: 0033:0x7f3c24f3a7b7 [ 262.507339][ T3326] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 39 7c 24 [ 262.507447][ T3326] RSP: 002b:00007fff67c3ffd0 EFLAGS: 00010202 [ 262.507533][ T3326] RAX: 0000001b34024000 RBX: 00000000000004e6 RCX: 0000000000040358 [ 262.507567][ T3326] RDX: 000000000cd77397 RSI: 00007fff67c40060 RDI: 000000000000001d [ 262.507601][ T3326] RBP: 00007fff67c4000c R08: 0000000030fca1e4 R09: 7fffffffffffffff [ 262.507637][ T3326] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 262.507675][ T3326] R13: 00000000000927c0 R14: 0000000000040608 R15: 00007fff67c40060 [ 262.507724][ T3326] [ 262.507786][ T3326] memory: usage 307200kB, limit 307200kB, failcnt 10491 [ 262.768176][ T3326] memory+swap: usage 265612kB, limit 9007199254740988kB, failcnt 0 [ 262.769151][T10694] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.776195][ T3326] kmem: usage 265172kB, limit 9007199254740988kB, failcnt 0 [ 262.776210][ T3326] Memory cgroup stats for /syz4: [ 262.776573][ T3326] cache 0 [ 262.800850][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.802368][ T3326] rss 114688 [ 262.914473][ T3326] shmem 0 [ 262.929822][ T3326] mapped_file 0 [ 262.947466][T10694] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.964685][ T3326] dirty 0 [ 262.972012][ T3326] writeback 28672 [ 262.982923][ T3326] workingset_refault_anon 163 [ 262.987692][ T3326] workingset_refault_file 669 [ 262.993663][ T3326] swap 282624 [ 262.999488][ T3326] swapcached 2637824 [ 263.016300][ T3326] pgpgin 239156 [ 263.022770][ T3326] pgpgout 239122 [ 263.026590][ T3326] pgfault 241073 [ 263.043716][ T4017] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.052164][ T3326] pgmajfault 81 [ 263.061869][T10714] team0: No ports can be present during mode change [ 263.064548][ T3326] inactive_anon 28672 [ 263.073618][ T3326] active_anon 94208 [ 263.077705][ T3326] inactive_file 16384 [ 263.081828][ T3326] active_file 0 [ 263.085508][ T3326] unevictable 0 [ 263.089375][ T3326] hierarchical_memory_limit 314572800 [ 263.106017][ T3326] hierarchical_memsw_limit 9223372036854771712 [ 263.109286][ T4017] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.140582][ T4017] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.148902][ T4017] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.157836][ T3326] total_cache 0 [ 263.161433][ T3326] total_rss 114688 [ 263.261858][ T3326] total_shmem 0 [ 263.265518][ T3326] total_mapped_file 0 [ 263.280609][ T3326] total_dirty 0 [ 263.284177][ T3326] total_writeback 28672 [ 263.304231][ T3326] total_workingset_refault_anon 163 [ 263.358560][ T3326] total_workingset_refault_file 669 [ 263.379634][ T3326] total_swap 282624 [ 263.393781][ T3326] total_swapcached 2637824 [ 263.422337][ T3326] total_pgpgin 239156 [ 263.438856][ T3326] total_pgpgout 239122 [ 263.454968][ T3326] total_pgfault 241073 [ 263.472201][ T3326] total_pgmajfault 81 [ 263.476739][ T3326] total_inactive_anon 28672 [ 263.494551][ T3326] total_active_anon 94208 [ 263.506224][ T3326] total_inactive_file 16384 [ 263.521722][ T3326] total_active_file 0 [ 263.559397][ T3326] total_unevictable 0 [ 263.578706][ T3326] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1889,pid=10684,uid=0 [ 263.684659][T10724] hub 8-0:1.0: USB hub found [ 263.689452][T10724] hub 8-0:1.0: 8 ports detected [ 263.708812][T10724] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 263.718691][T10724] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 263.732259][T10724] veth1_vlan: left allmulticast mode [ 263.792004][ T3326] Memory cgroup out of memory: OOM victim 10684 (syz.4.1889) is already exiting. Skip killing the task [ 263.845951][T10726] vlan0: entered promiscuous mode [ 264.128142][ T28] audit: type=1326 audit(1772226946.220:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.4.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2506c799 code=0x7ffc0000 [ 264.151735][ T28] audit: type=1326 audit(1772226946.220:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.4.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2506c799 code=0x7ffc0000 [ 264.175832][ T28] audit: type=1326 audit(1772226946.220:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.4.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2506c799 code=0x7ffc0000 [ 264.199424][ T28] audit: type=1326 audit(1772226946.220:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.4.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f3c2506c799 code=0x7ffc0000 [ 264.223698][ T28] audit: type=1326 audit(1772226946.220:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.4.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2506c799 code=0x7ffc0000 [ 264.247366][ T28] audit: type=1326 audit(1772226946.220:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.4.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2506c799 code=0x7ffc0000 [ 264.271878][ T28] audit: type=1326 audit(1772226946.220:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.4.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2506c799 code=0x7ffc0000 [ 264.298078][ T28] audit: type=1326 audit(1772226946.220:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.4.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2506c799 code=0x7ffc0000 [ 264.322322][ T28] audit: type=1326 audit(1772226946.251:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.4.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c2502cfce code=0x7ffc0000 [ 264.357909][ T28] audit: type=1326 audit(1772226946.251:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.4.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2506c799 code=0x7ffc0000 [ 264.389062][T10740] loop0: detected capacity change from 0 to 256 [ 264.420561][T10740] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.432594][T10740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.468860][T10740] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 264.476858][T10740] FAT-fs (loop0): Filesystem has been set read-only [ 264.483663][T10740] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 264.491686][T10740] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 264.500762][T10740] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 264.534118][T10744] loop6: detected capacity change from 0 to 512 [ 264.580323][T10744] EXT4-fs (loop6): 1 orphan inode deleted [ 264.586741][T10744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.610947][T10744] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.631239][ T1753] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 264.723386][ T8892] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.917422][T10772] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2067 sclass=netlink_xfrm_socket pid=10772 comm=syz.6.1911 [ 264.931137][T10772] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2068 sclass=netlink_xfrm_socket pid=10772 comm=syz.6.1911 [ 265.201048][T10774] validate_nla: 3 callbacks suppressed [ 265.201069][T10774] netlink: 'syz.6.1911': attribute type 36 has an invalid length. [ 265.218678][T10774] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 265.228766][T10774] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 265.242116][T10774] netlink: 'syz.6.1911': attribute type 10 has an invalid length. [ 265.649763][ T23] usb usb8-port1: attempt power cycle [ 266.444665][T10847] bridge6: entered promiscuous mode [ 266.450043][T10847] bridge6: entered allmulticast mode [ 266.480280][T10851] lo speed is unknown, defaulting to 1000 [ 266.651560][T10851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10851 comm=syz.1.1919 [ 266.787590][T10859] pimreg: entered allmulticast mode [ 266.794891][T10859] pimreg: left allmulticast mode [ 266.864077][T10864] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.947112][T10864] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.022902][T10864] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.069536][T10864] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.176477][ T3997] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.205330][ T3997] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.219345][ T3997] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.232717][ T3997] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.392249][ T23] usb usb8-port1: unable to enumerate USB device [ 267.526516][T10885] syzkaller0: entered promiscuous mode [ 267.532156][T10880] loop6: detected capacity change from 0 to 8192 [ 267.543148][T10885] syzkaller0: entered allmulticast mode [ 267.642405][T10880] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 267.659848][T10880] FAT-fs (loop6): Filesystem has been set read-only [ 267.687155][T10892] team0: Device macvtap2 is already an upper device of the team interface [ 269.069250][T10919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.139745][T10919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.189185][T10925] lo speed is unknown, defaulting to 1000 [ 269.199870][T10923] loop6: detected capacity change from 0 to 8192 [ 269.259096][ T3310] loop6: p1 p2 p4 [ 269.264703][ T3310] loop6: p4 size 262912 extends beyond EOD, truncated [ 269.294674][T10923] loop6: p1 p2 p4 [ 269.312959][T10923] loop6: p4 size 262912 extends beyond EOD, truncated [ 269.374856][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 269.375319][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 269.565668][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 269.575617][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 269.609191][ T4010] Bluetooth: hci0: Frame reassembly failed (-84) [ 269.733495][ T28] kauditd_printk_skb: 1290 callbacks suppressed [ 269.733509][ T28] audit: type=1400 audit(1772226952.099:3534): avc: denied { watch_reads } for pid=10948 comm="syz.1.1951" path="/410/control" dev="tmpfs" ino=2198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 269.898879][T10957] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1955'. [ 270.060448][T10965] lo speed is unknown, defaulting to 1000 [ 270.456731][T10979] tipc: Enabling of bearer rejected, failed to enable media [ 270.563197][ T28] audit: type=1400 audit(1772226952.971:3535): avc: denied { unmount } for pid=10968 comm="syz.1.1958" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 270.612991][ T28] audit: type=1400 audit(1772226953.013:3536): avc: denied { watch } for pid=10968 comm="syz.1.1958" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.676092][T10986] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1963'. [ 270.760366][T10996] bridge0: entered promiscuous mode [ 270.773757][T10996] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 270.791941][T10996] macvtap1: entered promiscuous mode [ 270.898675][T11003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.921382][T11003] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1970'. [ 270.930469][T11003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1970'. [ 270.944652][T11003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1970'. [ 270.999808][ T28] audit: type=1400 audit(1772226953.433:3537): avc: denied { listen } for pid=11005 comm="syz.4.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 271.041332][T11006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1971'. [ 271.059549][T11006] 9p: Bad value for 'rfdno' [ 271.125566][T11010] netlink: 'syz.4.1973': attribute type 63 has an invalid length. [ 271.134619][T11010] lo: entered promiscuous mode [ 271.139778][T11010] lo: entered allmulticast mode [ 271.522340][ T3707] Bluetooth: hci0: command 0x1003 tx timeout [ 271.528473][ T3549] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 271.791434][T11035] lo speed is unknown, defaulting to 1000 [ 272.126624][T11039] bond2: entered allmulticast mode [ 272.147542][T11039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.316055][T11056] FAULT_INJECTION: forcing a failure. [ 272.316055][T11056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.361795][T11050] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1984'. [ 272.388208][T11049] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1984'. [ 272.486895][T11056] CPU: 0 UID: 0 PID: 11056 Comm: syz.6.1985 Tainted: G W syzkaller #0 PREEMPT(full) [ 272.486924][T11056] Tainted: [W]=WARN [ 272.486930][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.486942][T11056] Call Trace: [ 272.486949][T11056] [ 272.486957][T11056] __dump_stack+0x1d/0x30 [ 272.487009][T11056] dump_stack_lvl+0x95/0xd0 [ 272.487031][T11056] dump_stack+0x15/0x1b [ 272.487051][T11056] should_fail_ex+0x263/0x280 [ 272.487075][T11056] should_fail+0xb/0x20 [ 272.487095][T11056] should_fail_usercopy+0x1a/0x20 [ 272.487160][T11056] _copy_from_user+0x1c/0xb0 [ 272.487210][T11056] memdup_user+0x5e/0xd0 [ 272.487246][T11056] strndup_user+0x68/0xb0 [ 272.487264][T11056] __se_sys_mount+0x4d/0x2e0 [ 272.487319][T11056] ? fput+0x8f/0xc0 [ 272.487343][T11056] ? ksys_write+0x194/0x1a0 [ 272.487429][T11056] __x64_sys_mount+0x67/0x80 [ 272.487451][T11056] x64_sys_call+0x2d61/0x3020 [ 272.487556][T11056] do_syscall_64+0x12c/0x370 [ 272.487574][T11056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.487593][T11056] RIP: 0033:0x7fea779ec799 [ 272.487605][T11056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.487620][T11056] RSP: 002b:00007fea76405028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 272.487638][T11056] RAX: ffffffffffffffda RBX: 00007fea77c66180 RCX: 00007fea779ec799 [ 272.487698][T11056] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 272.487711][T11056] RBP: 00007fea76405090 R08: 0000200000000340 R09: 0000000000000000 [ 272.487725][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.487738][T11056] R13: 00007fea77c66218 R14: 00007fea77c66180 R15: 00007ffef02a47d8 [ 272.487759][T11056] [ 272.925308][T11072] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1990'. [ 273.084193][T11078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.126272][T11078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.191148][T11121] team0: No ports can be present during mode change [ 274.708385][ T28] audit: type=1400 audit(1772226957.328:3538): avc: denied { setopt } for pid=11127 comm="syz.4.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 274.897649][ T28] audit: type=1400 audit(1772226957.517:3539): avc: denied { listen } for pid=11130 comm="syz.5.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.933797][T11135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2008'. [ 274.946475][ T28] audit: type=1400 audit(1772226957.517:3540): avc: denied { accept } for pid=11130 comm="syz.5.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.968655][T11135] bridge0: entered allmulticast mode [ 275.163661][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2012'. [ 275.384120][T11140] vlan0: left promiscuous mode [ 275.390836][T11140] macvlan1: left allmulticast mode [ 275.398895][T11140] tipc: Resetting bearer [ 275.426587][T11140] bond1: left allmulticast mode [ 275.441250][T11140] bond3: left allmulticast mode [ 275.447155][T11140] bridge6: left promiscuous mode [ 275.452491][T11140] bridge6: left allmulticast mode [ 275.458510][ T1651] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.475528][ T1651] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.509913][ T1651] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.529578][ T1651] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.845138][T11180] team0: No ports can be present during mode change [ 276.552226][ T4524] Bluetooth: hci0: Frame reassembly failed (-84) [ 276.570287][T11185] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2020'. [ 276.580959][T11185] tipc: Started in network mode [ 276.586473][T11185] tipc: Node identity ac1414aa, cluster identity 4711 [ 276.593490][T11185] tipc: New replicast peer: 10.1.1.2 [ 276.598811][T11185] tipc: Enabled bearer , priority 10 [ 276.618638][ T28] audit: type=1400 audit(1772226959.323:3541): avc: denied { ioctl } for pid=11184 comm="syz.0.2020" path="socket:[30668]" dev="sockfs" ino=30668 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 276.797955][T11191] xt_hashlimit: max too large, truncated to 1048576 [ 276.911024][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2027'. [ 276.940594][T11211] loop5: detected capacity change from 0 to 512 [ 276.952444][T11211] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 276.961346][T11211] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 276.970977][T11207] loop6: detected capacity change from 0 to 256 [ 276.971000][T11211] EXT4-fs (loop5): 1 truncate cleaned up [ 276.971868][T11211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.007252][T11211] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 4: comm syz.5.2028: lblock 0 mapped to illegal pblock 4 (length 1) [ 277.026064][T11207] FAT-fs (loop6): Directory bread(block 64) failed [ 277.032760][T11207] FAT-fs (loop6): Directory bread(block 65) failed [ 277.039280][T11207] FAT-fs (loop6): Directory bread(block 66) failed [ 277.042546][T11211] EXT4-fs (loop5): Remounting filesystem read-only [ 277.045832][T11207] FAT-fs (loop6): Directory bread(block 67) failed [ 277.059087][T11207] FAT-fs (loop6): Directory bread(block 68) failed [ 277.065626][T11207] FAT-fs (loop6): Directory bread(block 69) failed [ 277.072272][T11207] FAT-fs (loop6): Directory bread(block 70) failed [ 277.078901][T11207] FAT-fs (loop6): Directory bread(block 71) failed [ 277.085508][T11207] FAT-fs (loop6): Directory bread(block 72) failed [ 277.092143][T11207] FAT-fs (loop6): Directory bread(block 73) failed [ 277.109457][ T8342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.189556][T11216] loop5: detected capacity change from 0 to 512 [ 277.215074][T11216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.227767][T11216] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.570585][T11220] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2030'. [ 277.678522][T11155] tipc: Node number set to 2886997162 [ 277.930937][ T28] audit: type=1326 audit(1772226960.709:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a798fc799 code=0x7ffc0000 [ 277.954526][ T28] audit: type=1326 audit(1772226960.709:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a798fc799 code=0x7ffc0000 [ 277.978215][ T28] audit: type=1326 audit(1772226960.709:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7a798fc799 code=0x7ffc0000 [ 278.001811][ T28] audit: type=1326 audit(1772226960.709:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a798fc799 code=0x7ffc0000 [ 278.025321][ T28] audit: type=1326 audit(1772226960.709:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a798fc799 code=0x7ffc0000 [ 278.049506][ T28] audit: type=1326 audit(1772226960.709:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7a798fc799 code=0x7ffc0000 [ 278.076170][ T8342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.227736][T11251] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.239653][T11253] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2044'. [ 278.291718][T11251] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.349838][T11251] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.424834][T11251] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.490306][ T4524] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.506944][ T4524] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.520017][ T4524] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.532867][ T4524] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.574037][ T3549] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 278.720981][T11275] loop6: detected capacity change from 0 to 512 [ 278.750804][T11275] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.761427][T11282] 9p: Bad value for 'aname' [ 278.767269][T11283] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2053'. [ 278.794238][T11275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.829933][T11275] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.110074][ T8892] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.123356][T11292] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2056'. [ 279.339765][T11317] loop6: detected capacity change from 0 to 256 [ 279.357736][T11317] FAT-fs (loop6): Directory bread(block 1285) failed [ 279.366105][T11319] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2065'. [ 279.376359][T11317] FAT-fs (loop6): Directory bread(block 1286) failed [ 279.397029][T11317] FAT-fs (loop6): Directory bread(block 1287) failed [ 279.416798][T11317] FAT-fs (loop6): Directory bread(block 1288) failed [ 279.445204][T11317] FAT-fs (loop6): Directory bread(block 1285) failed [ 279.452022][T11317] FAT-fs (loop6): Directory bread(block 1286) failed [ 279.459267][T11317] FAT-fs (loop6): Directory bread(block 1287) failed [ 279.466291][T11317] FAT-fs (loop6): Directory bread(block 1288) failed [ 279.474395][T11317] FAT-fs (loop6): Directory bread(block 1285) failed [ 279.481382][T11317] FAT-fs (loop6): Directory bread(block 1286) failed [ 280.294962][T11330] netlink: 'syz.4.2067': attribute type 36 has an invalid length. [ 280.306398][T11330] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 280.316249][T11330] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 280.329779][T11330] netlink: 'syz.4.2067': attribute type 10 has an invalid length. [ 280.338762][T11332] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2067 sclass=netlink_xfrm_socket pid=11332 comm=syz.6.2068 [ 280.351707][T11332] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2068 sclass=netlink_xfrm_socket pid=11332 comm=syz.6.2068 [ 280.417201][T11333] netlink: 'syz.6.2068': attribute type 36 has an invalid length. [ 280.429462][T11333] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 280.439338][T11333] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 280.508825][T11333] netlink: 'syz.6.2068': attribute type 10 has an invalid length. [ 280.754740][T11345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2074'. [ 280.772036][T11347] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 280.931493][T11355] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 280.949140][T11355] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.963508][T11357] ip6gre1: entered promiscuous mode [ 280.969402][T11357] ip6gre1: entered allmulticast mode [ 280.976073][ T3997] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.981299][T11357] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.991312][ T3997] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.002696][T11164] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.029637][T11360] lo speed is unknown, defaulting to 1000 [ 281.126894][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 281.126908][ T28] audit: type=1400 audit(1772226964.069:3655): avc: denied { ioctl } for pid=11364 comm="syz.5.2082" path="socket:[30969]" dev="sockfs" ino=30969 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 281.145600][T11164] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.221980][T11376] FAULT_INJECTION: forcing a failure. [ 281.221980][T11376] name failslab, interval 1, probability 0, space 0, times 0 [ 281.235670][T11376] CPU: 0 UID: 0 PID: 11376 Comm: syz.5.2086 Tainted: G W syzkaller #0 PREEMPT(full) [ 281.235702][T11376] Tainted: [W]=WARN [ 281.235760][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.235774][T11376] Call Trace: [ 281.235781][T11376] [ 281.235789][T11376] __dump_stack+0x1d/0x30 [ 281.235818][T11376] dump_stack_lvl+0x95/0xd0 [ 281.235875][T11376] dump_stack+0x15/0x1b [ 281.235893][T11376] should_fail_ex+0x263/0x280 [ 281.235965][T11376] should_failslab+0x8c/0xb0 [ 281.235988][T11376] __kmalloc_noprof+0xb8/0x4e0 [ 281.236039][T11376] ? bpf_test_init+0x86/0x130 [ 281.236121][T11376] bpf_test_init+0x86/0x130 [ 281.236147][T11376] bpf_prog_test_run_skb+0x2b5/0xef0 [ 281.236228][T11376] ? __fget_files+0x184/0x1c0 [ 281.236256][T11376] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 281.236295][T11376] bpf_prog_test_run+0x204/0x340 [ 281.236327][T11376] __sys_bpf+0x52e/0x7e0 [ 281.236351][T11376] __x64_sys_bpf+0x41/0x50 [ 281.236378][T11376] x64_sys_call+0x10cb/0x3020 [ 281.236408][T11376] do_syscall_64+0x12c/0x370 [ 281.236522][T11376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.236691][T11376] RIP: 0033:0x7f0df484c799 [ 281.236709][T11376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.236731][T11376] RSP: 002b:00007f0df32a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.236754][T11376] RAX: ffffffffffffffda RBX: 00007f0df4ac5fa0 RCX: 00007f0df484c799 [ 281.236770][T11376] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000000a [ 281.236785][T11376] RBP: 00007f0df32a7090 R08: 0000000000000000 R09: 0000000000000000 [ 281.236843][T11376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.236857][T11376] R13: 00007f0df4ac6038 R14: 00007f0df4ac5fa0 R15: 00007ffc0d194308 [ 281.236879][T11376] [ 281.430050][T11164] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.443326][T11149] usb usb8-port1: attempt power cycle [ 281.449177][T11378] bridge0: port 1(veth0_to_bridge) entered blocking state [ 281.456442][T11378] bridge0: port 1(veth0_to_bridge) entered disabled state [ 281.463778][T11378] veth0_to_bridge: entered allmulticast mode [ 281.470294][T11378] veth0_to_bridge: entered promiscuous mode [ 281.515500][T11388] netlink: 'syz.5.2088': attribute type 1 has an invalid length. [ 282.019045][T11399] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2093'. [ 282.095772][T11405] bond4: entered allmulticast mode [ 282.101314][T11405] 8021q: adding VLAN 0 to HW filter on device bond4 [ 282.887852][ T28] audit: type=1400 audit(1772226965.906:3656): avc: denied { connect } for pid=11410 comm="syz.4.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 282.937924][T11154] IPVS: starting estimator thread 0... [ 282.969551][T11416] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 283.031644][T11417] IPVS: using max 2352 ests per chain, 117600 per kthread [ 283.068533][ T28] audit: type=1326 audit(1772226966.095:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.4.2103" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c2506c799 code=0x0 [ 283.183950][T11149] usb usb8-port1: unable to enumerate USB device [ 283.334146][T11436] loop0: detected capacity change from 0 to 1024 [ 283.363602][T11436] EXT4-fs (loop0): inodes count not valid: 1 vs 32 [ 284.244980][T11486] lo speed is unknown, defaulting to 1000 [ 284.324654][T11495] FAULT_INJECTION: forcing a failure. [ 284.324654][T11495] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 284.341467][T11495] CPU: 0 UID: 0 PID: 11495 Comm: syz.5.2126 Tainted: G W syzkaller #0 PREEMPT(full) [ 284.341561][T11495] Tainted: [W]=WARN [ 284.341567][T11495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.341581][T11495] Call Trace: [ 284.341589][T11495] [ 284.341598][T11495] __dump_stack+0x1d/0x30 [ 284.341634][T11495] dump_stack_lvl+0x95/0xd0 [ 284.341658][T11495] dump_stack+0x15/0x1b [ 284.341770][T11495] should_fail_ex+0x263/0x280 [ 284.341790][T11495] should_fail_alloc_page+0xf2/0x100 [ 284.341812][T11495] __alloc_frozen_pages_noprof+0x108/0x360 [ 284.341846][T11495] alloc_pages_mpol+0xb3/0x260 [ 284.341911][T11495] alloc_pages_noprof+0x8f/0x130 [ 284.341940][T11495] __pud_alloc+0x47/0x4a0 [ 284.341971][T11495] handle_mm_fault+0x1d59/0x3020 [ 284.342084][T11495] ? mt_find+0x291/0x3d0 [ 284.342114][T11495] ? lock_mm_and_find_vma+0x8b/0x440 [ 284.342140][T11495] do_user_addr_fault+0x3fd/0x1050 [ 284.342172][T11495] exc_page_fault+0x62/0xa0 [ 284.342262][T11495] asm_exc_page_fault+0x26/0x30 [ 284.342281][T11495] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 284.342304][T11495] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 19 02 00 66 2e [ 284.342321][T11495] RSP: 0018:ffffc900018ffca8 EFLAGS: 00050202 [ 284.342400][T11495] RAX: ffff888104998a78 RBX: 0000000000000004 RCX: 0000000000000004 [ 284.342412][T11495] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc900018ffd3c [ 284.342423][T11495] RBP: 00000000800448d4 R08: 00000000000000eb R09: 0000000000000000 [ 284.342437][T11495] R10: 0001c900018ffd3c R11: 0001c900018ffd3f R12: ffff8881001b9f00 [ 284.342453][T11495] R13: ffffffff85e3a6e0 R14: ffffc900018ffd3c R15: 0000200000000040 [ 284.342492][T11495] _copy_from_user+0x6f/0xb0 [ 284.342516][T11495] hci_get_conn_list+0x4c/0x4a0 [ 284.342587][T11495] ? kmem_cache_free+0xc8/0x380 [ 284.342607][T11495] ? hci_sock_ioctl+0x2f3/0x7f0 [ 284.342636][T11495] ? _raw_spin_lock_bh+0x56/0xb0 [ 284.342664][T11495] hci_sock_ioctl+0x520/0x7f0 [ 284.342716][T11495] sock_do_ioctl+0x73/0x230 [ 284.342746][T11495] sock_ioctl+0x41b/0x610 [ 284.342840][T11495] ? mutex_lock+0x57/0x90 [ 284.342875][T11495] ? __pfx_sock_ioctl+0x10/0x10 [ 284.342905][T11495] __se_sys_ioctl+0xce/0x140 [ 284.343010][T11495] __x64_sys_ioctl+0x43/0x50 [ 284.343040][T11495] x64_sys_call+0x1563/0x3020 [ 284.343099][T11495] do_syscall_64+0x12c/0x370 [ 284.343118][T11495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.343146][T11495] RIP: 0033:0x7f0df484c799 [ 284.343162][T11495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.343191][T11495] RSP: 002b:00007f0df32a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.343215][T11495] RAX: ffffffffffffffda RBX: 00007f0df4ac5fa0 RCX: 00007f0df484c799 [ 284.343227][T11495] RDX: 0000200000000040 RSI: 00000000800448d4 RDI: 0000000000000004 [ 284.343241][T11495] RBP: 00007f0df32a7090 R08: 0000000000000000 R09: 0000000000000000 [ 284.343255][T11495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.343334][T11495] R13: 00007f0df4ac6038 R14: 00007f0df4ac5fa0 R15: 00007ffc0d194308 [ 284.343396][T11495] [ 284.703061][T11501] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2128'. [ 284.734341][T11503] netlink: 'syz.5.2129': attribute type 5 has an invalid length. [ 284.750675][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2129'. [ 284.795550][T11511] 9pnet_fd: Insufficient options for proto=fd [ 284.833015][T11511] loop5: detected capacity change from 0 to 8192 [ 285.079537][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 285.106088][T11521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.126915][T11521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.180772][T11523] siw: device registration error -23 [ 285.270348][T11154] usb usb8-port1: attempt power cycle [ 285.704110][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'. [ 285.741552][ T28] audit: type=1400 audit(1772226968.898:3658): avc: denied { execute } for pid=11536 comm="syz.4.2140" path="/cpu.stat" dev="ramfs" ino=32144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 285.825165][T11547] tipc: Enabling of bearer rejected, failed to enable media [ 285.873247][T11545] sctp: [Deprecated]: syz.0.2144 (pid 11545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.873247][T11545] Use struct sctp_sack_info instead [ 285.912461][T11553] netlink: 'syz.5.2147': attribute type 9 has an invalid length. [ 285.922312][T11553] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2147'. [ 286.074710][T11565] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2067 sclass=netlink_xfrm_socket pid=11565 comm=syz.6.2148 [ 286.088674][T11565] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2068 sclass=netlink_xfrm_socket pid=11565 comm=syz.6.2148 [ 286.154073][T11566] netlink: 'syz.6.2148': attribute type 36 has an invalid length. [ 286.167367][T11566] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 286.177285][T11566] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 286.194463][T11566] netlink: 'syz.6.2148': attribute type 10 has an invalid length. [ 286.712913][T11579] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 286.751164][T11579] 9pnet_fd: p9_fd_create_unix (11579): problem connecting socket: ./file0: -2 [ 286.887814][T11569] loop5: detected capacity change from 0 to 1764 [ 286.901855][T11569] iso9660: Unknown parameter 'de' [ 286.945122][ T28] audit: type=1400 audit(1772226970.169:3659): avc: denied { accept } for pid=11583 comm="syz.4.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 287.009800][T11569] loop5: detected capacity change from 0 to 1764 [ 287.148343][T11598] netlink: 'syz.4.2160': attribute type 9 has an invalid length. [ 287.175184][T11598] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2160'. [ 287.227351][ T28] audit: type=1400 audit(1772226970.473:3660): avc: denied { ioctl } for pid=11600 comm="syz.4.2161" path="socket:[31409]" dev="sockfs" ino=31409 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 287.461070][T11154] usb usb8-port1: unable to enumerate USB device [ 287.625136][T11613] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2067 sclass=netlink_xfrm_socket pid=11613 comm=syz.0.2165 [ 287.638753][T11613] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2068 sclass=netlink_xfrm_socket pid=11613 comm=syz.0.2165 [ 287.735132][T11614] hub 8-0:1.0: USB hub found [ 287.739933][T11614] hub 8-0:1.0: 8 ports detected [ 287.755332][T11614] netlink: 'syz.0.2165': attribute type 36 has an invalid length. [ 287.768578][T11614] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 287.778501][T11614] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 287.798280][T11614] netlink: 'syz.0.2165': attribute type 10 has an invalid length. [ 288.230959][T11631] team0: No ports can be present during mode change [ 288.318779][ T28] audit: type=1400 audit(1772226971.597:3661): avc: denied { getopt } for pid=11625 comm="syz.1.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.364460][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2173'. [ 288.385611][T11636] netlink: 'syz.1.2173': attribute type 1 has an invalid length. [ 288.393386][T11636] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2173'. [ 288.736375][T11647] lo speed is unknown, defaulting to 1000 [ 288.777699][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2176'. [ 288.800855][T11650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2177'. [ 289.051022][T11661] FAULT_INJECTION: forcing a failure. [ 289.051022][T11661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.139957][T11661] CPU: 0 UID: 0 PID: 11661 Comm: syz.5.2182 Tainted: G W syzkaller #0 PREEMPT(full) [ 289.140003][T11661] Tainted: [W]=WARN [ 289.140065][T11661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.140082][T11661] Call Trace: [ 289.140091][T11661] [ 289.140101][T11661] __dump_stack+0x1d/0x30 [ 289.140135][T11661] dump_stack_lvl+0x95/0xd0 [ 289.140165][T11661] dump_stack+0x15/0x1b [ 289.140252][T11661] should_fail_ex+0x263/0x280 [ 289.140291][T11661] should_fail+0xb/0x20 [ 289.140316][T11661] should_fail_usercopy+0x1a/0x20 [ 289.140345][T11661] _copy_from_iter+0xcf/0xea0 [ 289.140375][T11661] ? __alloc_skb+0x4f6/0x690 [ 289.140474][T11661] ? __alloc_skb+0x200/0x690 [ 289.140549][T11661] netlink_sendmsg+0x4ae/0x6f0 [ 289.140639][T11661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.140671][T11661] ____sys_sendmsg+0x5af/0x600 [ 289.140710][T11661] ___sys_sendmsg+0x195/0x1e0 [ 289.140821][T11661] __x64_sys_sendmsg+0xd4/0x160 [ 289.140869][T11661] x64_sys_call+0x194c/0x3020 [ 289.140900][T11661] do_syscall_64+0x12c/0x370 [ 289.140923][T11661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.141010][T11661] RIP: 0033:0x7f0df484c799 [ 289.141027][T11661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.141047][T11661] RSP: 002b:00007f0df32a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.141117][T11661] RAX: ffffffffffffffda RBX: 00007f0df4ac5fa0 RCX: 00007f0df484c799 [ 289.141133][T11661] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 289.141146][T11661] RBP: 00007f0df32a7090 R08: 0000000000000000 R09: 0000000000000000 [ 289.141160][T11661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.141172][T11661] R13: 00007f0df4ac6038 R14: 00007f0df4ac5fa0 R15: 00007ffc0d194308 [ 289.141192][T11661] [ 289.463872][T11669] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2067 sclass=netlink_xfrm_socket pid=11669 comm=syz.6.2183 [ 289.477321][T11669] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2068 sclass=netlink_xfrm_socket pid=11669 comm=syz.6.2183 [ 289.544844][T11670] netlink: 'syz.6.2183': attribute type 36 has an invalid length. [ 289.556579][T11670] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 289.566531][T11670] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 289.577941][T11670] netlink: 'syz.6.2183': attribute type 10 has an invalid length. [ 289.632459][T11165] usb usb8-port1: attempt power cycle [ 290.324439][T11704] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2067 sclass=netlink_xfrm_socket pid=11704 comm=syz.1.2197 [ 290.338209][T11704] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2068 sclass=netlink_xfrm_socket pid=11704 comm=syz.1.2197 [ 290.354935][T11704] netlink: 'syz.1.2197': attribute type 36 has an invalid length. [ 290.367714][T11704] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 290.377604][T11704] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 290.395363][T11704] macvlan1: entered allmulticast mode [ 290.481119][T11700] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2196'. [ 291.031749][T11712] loop5: detected capacity change from 0 to 1024 [ 291.039611][T11712] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 291.470315][T11165] usb usb8-port1: unable to enumerate USB device [ 291.611603][ T28] audit: type=1326 audit(1772226975.072:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 291.670916][ T28] audit: type=1326 audit(1772226975.072:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 291.728561][ T28] audit: type=1326 audit(1772226975.082:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 291.754296][ T28] audit: type=1326 audit(1772226975.093:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa05ba0cfce code=0x7ffc0000 [ 291.789680][ T28] audit: type=1326 audit(1772226975.093:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 291.860390][ T28] audit: type=1326 audit(1772226975.093:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 291.883967][ T28] audit: type=1326 audit(1772226975.103:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 291.907456][ T28] audit: type=1326 audit(1772226975.292:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 291.931469][ T28] audit: type=1326 audit(1772226975.313:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa05b9edb19 code=0x7ffc0000 [ 292.076060][T11755] x_tables: unsorted underflow at hook 2 [ 292.088003][T11755] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2217'. [ 292.129491][ T28] audit: type=1326 audit(1772226975.313:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 292.171062][T11758] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2216'. [ 292.228975][T11758] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 292.271702][ T28] audit: type=1326 audit(1772226975.313:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 292.347825][T11762] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2067 sclass=netlink_xfrm_socket pid=11762 comm=syz.1.2218 [ 292.361253][T11762] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2068 sclass=netlink_xfrm_socket pid=11762 comm=syz.1.2218 [ 292.377577][T11762] validate_nla: 1 callbacks suppressed [ 292.377588][T11762] netlink: 'syz.1.2218': attribute type 36 has an invalid length. [ 292.398055][T11762] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 292.408060][T11762] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 292.421492][T11762] netlink: 'syz.1.2218': attribute type 10 has an invalid length. [ 292.584486][ T28] audit: type=1400 audit(1772226976.090:3673): avc: denied { mount } for pid=11768 comm="syz.5.2221" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 292.710765][T11150] IPVS: starting estimator thread 0... [ 292.750815][T11783] xt_connbytes: Forcing CT accounting to be enabled [ 292.793986][T11777] IPVS: using max 2160 ests per chain, 108000 per kthread [ 293.089200][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.386763][T11816] loop6: detected capacity change from 0 to 1024 [ 293.502050][T11816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.622747][T11827] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2067 sclass=netlink_xfrm_socket pid=11827 comm=syz.4.2242 [ 293.635581][T11827] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2068 sclass=netlink_xfrm_socket pid=11827 comm=syz.4.2242 [ 293.649528][T11827] netlink: 'syz.4.2242': attribute type 36 has an invalid length. [ 293.660578][T11827] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 293.670430][T11827] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 293.681715][T11827] netlink: 'syz.4.2242': attribute type 10 has an invalid length. [ 293.893086][T11816] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.2240: Allocating blocks 497-513 which overlap fs metadata [ 293.938844][T11816] EXT4-fs (loop6): pa ffff88810822ef50: logic 256, phys. 385, len 8 [ 293.947510][T11816] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 293.994019][T11839] loop0: detected capacity change from 0 to 4096 [ 294.055207][ T8892] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.091851][T11839] loop0: detected capacity change from 0 to 256 [ 294.330132][T11845] FAULT_INJECTION: forcing a failure. [ 294.330132][T11845] name failslab, interval 1, probability 0, space 0, times 0 [ 294.421179][T11845] CPU: 0 UID: 0 PID: 11845 Comm: syz.6.2248 Tainted: G W syzkaller #0 PREEMPT(full) [ 294.421275][T11845] Tainted: [W]=WARN [ 294.421281][T11845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 294.421294][T11845] Call Trace: [ 294.421301][T11845] [ 294.421309][T11845] __dump_stack+0x1d/0x30 [ 294.421338][T11845] dump_stack_lvl+0x95/0xd0 [ 294.421361][T11845] dump_stack+0x15/0x1b [ 294.421395][T11845] should_fail_ex+0x263/0x280 [ 294.421416][T11845] should_failslab+0x8c/0xb0 [ 294.421432][T11845] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 294.421496][T11845] ? __alloc_skb+0x2d6/0x690 [ 294.421516][T11845] __alloc_skb+0x2d6/0x690 [ 294.421533][T11845] ? __alloc_skb+0x200/0x690 [ 294.421560][T11845] netlink_alloc_large_skb+0xbf/0xf0 [ 294.421589][T11845] netlink_sendmsg+0x40c/0x6f0 [ 294.421623][T11845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.421813][T11845] ____sys_sendmsg+0x5af/0x600 [ 294.421841][T11845] ___sys_sendmsg+0x195/0x1e0 [ 294.421989][T11845] __x64_sys_sendmsg+0xd4/0x160 [ 294.422020][T11845] x64_sys_call+0x194c/0x3020 [ 294.422042][T11845] do_syscall_64+0x12c/0x370 [ 294.422107][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.422185][T11845] RIP: 0033:0x7fea779ec799 [ 294.422272][T11845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.422287][T11845] RSP: 002b:00007fea76405028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.422375][T11845] RAX: ffffffffffffffda RBX: 00007fea77c66180 RCX: 00007fea779ec799 [ 294.422390][T11845] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000006 [ 294.422405][T11845] RBP: 00007fea76405090 R08: 0000000000000000 R09: 0000000000000000 [ 294.422418][T11845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.422429][T11845] R13: 00007fea77c66218 R14: 00007fea77c66180 R15: 00007ffef02a47d8 [ 294.422502][T11845] [ 294.853232][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2253'. [ 295.527520][T11880] team0: No ports can be present during mode change [ 296.180393][T11897] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2266'. [ 297.038202][T11903] loop0: detected capacity change from 0 to 736 [ 297.045734][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 297.045803][ T28] audit: type=1326 audit(1772226980.773:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 297.103984][T11905] netlink: 10440 bytes leftover after parsing attributes in process `syz.5.2272'. [ 297.113431][ T28] audit: type=1326 audit(1772226980.773:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 297.132046][T11905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2272'. [ 297.165923][ T28] audit: type=1326 audit(1772226980.773:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 297.232513][ T28] audit: type=1326 audit(1772226980.773:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa05ba4c502 code=0x7ffc0000 [ 297.299380][ T28] audit: type=1326 audit(1772226980.773:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa05ba0cfce code=0x7ffc0000 [ 297.327146][T11917] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2273'. [ 297.375888][ T28] audit: type=1326 audit(1772226980.773:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa05ba4c5c7 code=0x7ffc0000 [ 297.452507][ T28] audit: type=1326 audit(1772226980.773:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa05ba0cfce code=0x7ffc0000 [ 297.536807][ T28] audit: type=1326 audit(1772226980.773:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa05ba4c42b code=0x7ffc0000 [ 297.593386][ T28] audit: type=1326 audit(1772226980.815:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa05ba0cfce code=0x7ffc0000 [ 297.666640][ T28] audit: type=1326 audit(1772226980.815:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa05ba0cfce code=0x7ffc0000 [ 297.718180][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2280'. [ 297.750106][T11934] vlan2: entered promiscuous mode [ 297.755169][T11934] syz_tun: entered promiscuous mode [ 298.152851][T11945] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2285'. [ 298.348785][T11960] pimreg: entered allmulticast mode [ 298.355928][T11960] pimreg: left allmulticast mode [ 299.238423][T11988] loop0: detected capacity change from 0 to 2048 [ 299.245269][T11986] loop6: detected capacity change from 0 to 512 [ 299.262980][T11986] EXT4-fs: journaled quota format not specified [ 299.331704][T11988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.410936][T12001] ipvlan2: entered promiscuous mode [ 299.573549][T12004] loop6: detected capacity change from 0 to 1024 [ 299.625004][T12004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 299.652471][T12004] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.756555][T11995] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 299.779491][T12004] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.2305: lblock 0 mapped to illegal pblock 0 (length 6) [ 299.816228][T12004] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 299.847883][T12004] EXT4-fs (loop6): This should not happen!! Data will be lost [ 299.847883][T12004] [ 299.892933][T12004] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.969651][T12004] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.114583][T12004] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.322438][T12004] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.503237][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.568450][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.699250][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.708230][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.784242][ T4021] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:23: lblock 8 mapped to illegal pblock 8 (length 5) [ 300.861924][ T4021] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 300.875041][ T4021] EXT4-fs (loop6): This should not happen!! Data will be lost [ 300.875041][ T4021] [ 300.885911][ T8892] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 300.948650][T12033] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2067 sclass=netlink_xfrm_socket pid=12033 comm=syz.5.2310 [ 300.961583][T12033] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2068 sclass=netlink_xfrm_socket pid=12033 comm=syz.5.2310 [ 301.007403][T12033] hub 8-0:1.0: USB hub found [ 301.012081][T12033] hub 8-0:1.0: 8 ports detected [ 301.019233][T12033] netlink: 'syz.5.2310': attribute type 36 has an invalid length. [ 301.030320][T12033] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 301.040169][T12033] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 301.051611][T12033] netlink: 'syz.5.2310': attribute type 10 has an invalid length. [ 301.062101][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.283924][T12062] tipc: Failed to remove unknown binding: 66,1,1/2886997162:751289290/751289292 [ 301.302798][T12062] tipc: Failed to remove unknown binding: 66,1,1/2886997162:751289290/751289292 [ 302.042614][T12073] x_tables: duplicate underflow at hook 3 [ 302.157535][T12078] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2323'. [ 302.207537][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 302.207602][ T28] audit: type=1400 audit(1772226986.201:3784): avc: denied { ioctl } for pid=12079 comm="syz.6.2324" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35275 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.345983][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2326'. [ 302.389815][T12095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.400364][T12095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.414198][T12095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 302.464420][T12095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.475505][T12095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.486205][T12095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 302.512101][T12095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.533702][T12095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.548937][T12095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 302.589096][T12095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.616056][T12095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.639499][T12095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 302.701078][ T4020] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.709841][ T4020] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 302.717985][ T4020] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.736332][ T4020] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.747051][ T4020] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 302.755445][ T4020] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.770924][ T4020] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.779578][T11150] usb usb8-port1: attempt power cycle [ 302.789865][ T4020] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 302.801480][ T4020] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.814701][ T4020] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.822974][ T4020] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 302.831122][ T4020] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.936035][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2338'. [ 302.945727][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2338'. [ 302.960718][ T28] audit: type=1400 audit(1772226986.988:3785): avc: denied { bind } for pid=12118 comm="syz.0.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 303.041255][ T28] audit: type=1400 audit(1772226987.072:3786): avc: denied { create } for pid=12125 comm="syz.0.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 304.298720][T12150] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 304.373271][T12150] team0: No ports can be present during mode change [ 304.387227][T12153] netlink: 'syz.4.2349': attribute type 1 has an invalid length. [ 304.406467][T12153] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2349'. [ 304.525391][T12160] loop0: detected capacity change from 0 to 512 [ 304.540608][ T28] audit: type=1400 audit(1772226988.647:3787): avc: denied { nlmsg_write } for pid=12162 comm="syz.1.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 304.569133][T12160] msdos: Unknown parameter 'Ɏ' [ 304.653721][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2353'. [ 304.699054][T12160] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 304.751297][T12160] bond8 (unregistering): Released all slaves [ 304.915663][T12180] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2358'. [ 304.946031][T12180] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 305.217143][T12197] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2365'. [ 305.361879][T12206] syz_tun: entered allmulticast mode [ 305.378651][ T28] audit: type=1400 audit(1772226989.529:3788): avc: denied { write } for pid=12205 comm="syz.0.2369" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 305.404921][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2369'. [ 305.445205][T12210] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2371'. [ 305.454351][T12210] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 305.531411][T12224] lo speed is unknown, defaulting to 1000 [ 305.557978][T12229] team0 (unregistering): Port device macvlan1 removed [ 305.624201][T11150] usb usb8-port1: unable to enumerate USB device [ 305.673549][T12237] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 305.740718][T12243] loop5: detected capacity change from 0 to 512 [ 305.765909][T12243] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 305.824614][T12243] EXT4-fs (loop5): 1 truncate cleaned up [ 305.850976][T12243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.999995][ T28] audit: type=1400 audit(1772226990.180:3789): avc: denied { getopt } for pid=12242 comm="syz.5.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 306.063227][ T28] audit: type=1400 audit(1772226990.233:3790): avc: denied { getopt } for pid=12242 comm="syz.5.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 306.072526][ T8342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.510409][T12300] lo speed is unknown, defaulting to 1000 [ 306.578103][T12306] loop5: detected capacity change from 0 to 512 [ 306.699595][T12306] EXT4-fs (loop5): orphan cleanup on readonly fs [ 306.732049][T12306] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #11: block 1: comm syz.5.2405: lblock 0 mapped to illegal pblock 1 (length 1) [ 306.762987][T12306] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 306.763131][T12306] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 306.772372][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 306.772392][ C1] EXT4-fs (loop5): initial error at time 1772226990: ext4_map_blocks:776: inode 11: block 1 [ 306.772431][ C1] EXT4-fs (loop5): last error at time 1772226990: ext4_map_blocks:776: inode 11: block 1 [ 306.828021][T12306] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.2405: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 306.911899][T12306] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 306.912066][T12306] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.5.2405: ea_inode dec ref err=-117 [ 306.956093][T12306] EXT4-fs (loop5): 1 orphan inode deleted [ 306.992294][T12306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 307.029434][T12318] hub 8-0:1.0: USB hub found [ 307.034275][T12318] hub 8-0:1.0: 8 ports detected [ 307.052203][T12318] netlink: 'syz.6.2407': attribute type 36 has an invalid length. [ 307.066055][T12318] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 307.075932][T12318] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 307.092062][T12318] netlink: 'syz.6.2407': attribute type 10 has an invalid length. [ 307.241600][T12306] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 307.578908][T12326] netlink: 'syz.4.2409': attribute type 12 has an invalid length. [ 307.587287][T12326] xt_hashlimit: size too large, truncated to 1048576 [ 307.594047][T12326] xt_hashlimit: max too large, truncated to 1048576 [ 307.660062][T12332] xt_l2tp: invalid flags combination: 8 [ 307.806810][T12344] tipc: Enabling of bearer rejected, already enabled [ 307.822908][T12340] tipc: Enabled bearer , priority 0 [ 307.913923][T12352] ip6gre1: entered promiscuous mode [ 307.928970][T12352] ip6gre1: entered allmulticast mode [ 307.951470][ T8342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.963493][T12352] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 307.992599][T12357] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 308.053656][T12359] bridge_slave_0: left allmulticast mode [ 308.059343][T12359] bridge_slave_0: left promiscuous mode [ 308.067058][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.077946][T12359] bridge_slave_1: left allmulticast mode [ 308.084273][T12359] bridge_slave_1: left promiscuous mode [ 308.090018][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.100249][T12359] bond0: (slave bond_slave_0): Releasing backup interface [ 308.111852][T12359] bond0: (slave bond_slave_1): Releasing backup interface [ 308.125620][T12359] team0: Port device team_slave_0 removed [ 308.144015][T12359] team0: Port device team_slave_1 removed [ 308.151463][T12359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.159106][T12359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.170129][T12359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.182181][T12359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.192224][T12359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 308.224960][T12366] team0: No ports can be present during mode change [ 308.231925][T12368] batadv_slave_1: entered promiscuous mode [ 308.257985][T12367] batadv_slave_1: left promiscuous mode [ 308.271900][T12378] __nla_validate_parse: 1 callbacks suppressed [ 308.271915][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 308.354755][T12384] lo speed is unknown, defaulting to 1000 [ 308.418027][T12391] netlink: 'syz.5.2430': attribute type 32 has an invalid length. [ 308.425996][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2430'. [ 308.500640][T12391] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 308.578344][T12394] loop0: detected capacity change from 0 to 512 [ 308.594668][ T1651] Bluetooth: hci0: Frame reassembly failed (-84) [ 308.604312][T12394] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 308.617656][T12394] EXT4-fs (loop0): 1 orphan inode deleted [ 308.623969][T12394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.690838][T12402] batadv_slave_1: entered promiscuous mode [ 308.697323][T12401] batadv_slave_1: left promiscuous mode [ 308.709340][ T70] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 308.717210][ T70] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 308.728734][T11149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 308.798937][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2446'. [ 308.811754][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2446'. [ 308.833576][T11164] usb usb8-port1: attempt power cycle [ 308.858646][T12415] loop5: detected capacity change from 0 to 512 [ 308.868660][T12415] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 308.887504][T12415] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2438: bad orphan inode 131083 [ 308.925010][T12415] loop5: lost filesystem error report for type 5 error -117 [ 308.928649][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 308.942453][ C1] EXT4-fs (loop5): initial error at time 1772226993: ext4_orphan_get:1417 [ 308.951001][ C1] EXT4-fs (loop5): last error at time 1772226993: ext4_orphan_get:1417 [ 308.959761][T12415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.984664][T12424] veth0_to_bridge: left allmulticast mode [ 308.991016][T12424] veth0_to_bridge: left promiscuous mode [ 309.002483][T12424] bridge0: port 1(veth0_to_bridge) entered disabled state [ 309.020403][T12424] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 309.020583][ T8342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.061632][T12430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.070250][T12430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.100299][T11149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.285526][T12437] loop5: detected capacity change from 0 to 256 [ 309.358991][T12437] FAT-fs (loop5): Directory bread(block 64) failed [ 309.365685][T12437] FAT-fs (loop5): Directory bread(block 65) failed [ 309.372974][T12437] FAT-fs (loop5): Directory bread(block 66) failed [ 309.379552][T12437] FAT-fs (loop5): Directory bread(block 67) failed [ 309.386202][T12437] FAT-fs (loop5): Directory bread(block 68) failed [ 309.392881][T12437] FAT-fs (loop5): Directory bread(block 69) failed [ 309.400119][T12437] FAT-fs (loop5): Directory bread(block 70) failed [ 309.406694][T12437] FAT-fs (loop5): Directory bread(block 71) failed [ 309.413610][T12437] FAT-fs (loop5): Directory bread(block 72) failed [ 309.420203][T12437] FAT-fs (loop5): Directory bread(block 73) failed [ 309.547608][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.801857][T12447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.809156][T12447] IPv6: NLM_F_CREATE should be set when creating new route [ 309.816380][T12447] IPv6: NLM_F_CREATE should be set when creating new route [ 310.179866][T11149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 310.539603][ T3707] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 310.831979][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.176635][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2457'. [ 311.185918][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2457'. [ 312.215245][T11164] usb usb8-port1: unable to enumerate USB device [ 312.260079][T12489] loop6: detected capacity change from 0 to 256 [ 312.268743][T12489] vfat: Unknown parameter 'r#31;}y>nzX66K( ډ^t\tÕ&' [ 312.290711][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.368755][T12494] loop5: detected capacity change from 0 to 128 [ 312.375661][T12494] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 312.407728][ T3310] udevd[3310]: incorrect ext4 checksum on /dev/loop5 [ 312.434679][T12501] loop6: detected capacity change from 0 to 512 [ 312.448623][T12501] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.2466: corrupted in-inode xattr: e_value out of bounds [ 312.463501][T12501] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 312.463776][T12501] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2466: couldn't read orphan inode 15 (err -117) [ 312.473023][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 312.473044][ C0] EXT4-fs (loop6): initial error at time 1772226996: ext4_iget_extra_inode:5025: inode 15 [ 312.473102][ C0] EXT4-fs (loop6): last error at time 1772226996: ext4_iget_extra_inode:5025: inode 15 [ 312.512267][T12501] loop6: lost filesystem error report for type 5 error -117 [ 312.512771][T12501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.943715][T12523] loop5: detected capacity change from 0 to 1024 [ 312.950709][T12523] EXT4-fs: Ignoring removed nomblk_io_submit option [ 312.965689][T12523] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 312.974158][T12523] System zones: 0-1, 3-36 [ 312.981808][T12523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.121462][ T8892] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.028381][T12472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.089295][ T28] audit: type=1326 audit(1772226998.674:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 314.138777][ T28] audit: type=1326 audit(1772226998.674:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 314.207275][ T28] audit: type=1326 audit(1772226998.705:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 314.207728][ T8342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.232371][ T28] audit: type=1326 audit(1772226998.705:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 314.272301][T12550] FAULT_INJECTION: forcing a failure. [ 314.272301][T12550] name failslab, interval 1, probability 0, space 0, times 0 [ 314.285049][ T28] audit: type=1326 audit(1772226998.705:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ba4c799 code=0x7ffc0000 [ 314.320339][T12550] CPU: 0 UID: 0 PID: 12550 Comm: syz.6.2484 Tainted: G W syzkaller #0 PREEMPT(full) [ 314.320398][T12550] Tainted: [W]=WARN [ 314.320406][T12550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.320420][T12550] Call Trace: [ 314.320458][T12550] [ 314.320467][T12550] __dump_stack+0x1d/0x30 [ 314.320495][T12550] dump_stack_lvl+0x95/0xd0 [ 314.320522][T12550] dump_stack+0x15/0x1b [ 314.320552][T12550] should_fail_ex+0x263/0x280 [ 314.320577][T12550] should_failslab+0x8c/0xb0 [ 314.320599][T12550] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 314.320683][T12550] ? __alloc_skb+0x2d6/0x690 [ 314.320775][T12550] __alloc_skb+0x2d6/0x690 [ 314.320801][T12550] ? __alloc_skb+0x200/0x690 [ 314.320826][T12550] netlink_dump+0x10d/0x8a0 [ 314.320850][T12550] ? __kfree_skb+0x109/0x150 [ 314.320873][T12550] ? nlmon_xmit+0x4f/0x60 [ 314.320943][T12550] ? consume_skb+0x4b/0x160 [ 314.320974][T12550] __netlink_dump_start+0x43e/0x520 [ 314.321034][T12550] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 314.321072][T12550] rtnetlink_rcv_msg+0x59f/0x720 [ 314.321314][T12550] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 314.321419][T12550] ? __pfx_rtnl_dumpit+0x10/0x10 [ 314.321454][T12550] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 314.321559][T12550] netlink_rcv_skb+0x123/0x220 [ 314.321589][T12550] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.321646][T12550] rtnetlink_rcv+0x1c/0x30 [ 314.321681][T12550] netlink_unicast+0x5c0/0x690 [ 314.321742][T12550] netlink_sendmsg+0x5c8/0x6f0 [ 314.321778][T12550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.321807][T12550] ____sys_sendmsg+0x5af/0x600 [ 314.321896][T12550] ___sys_sendmsg+0x195/0x1e0 [ 314.321944][T12550] __x64_sys_sendmsg+0xd4/0x160 [ 314.321982][T12550] x64_sys_call+0x194c/0x3020 [ 314.322086][T12550] do_syscall_64+0x12c/0x370 [ 314.322111][T12550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.322152][T12550] RIP: 0033:0x7fea779ec799 [ 314.322170][T12550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.322212][T12550] RSP: 002b:00007fea76447028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.322232][T12550] RAX: ffffffffffffffda RBX: 00007fea77c65fa0 RCX: 00007fea779ec799 [ 314.322247][T12550] RDX: 00000000240c881c RSI: 00002000000002c0 RDI: 0000000000000003 [ 314.322263][T12550] RBP: 00007fea76447090 R08: 0000000000000000 R09: 0000000000000000 [ 314.322278][T12550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.322292][T12550] R13: 00007fea77c66038 R14: 00007fea77c65fa0 R15: 00007ffef02a47d8 [ 314.322392][T12550] [ 314.619213][T12554] loop0: detected capacity change from 0 to 512 [ 314.653836][T12554] EXT4-fs: Ignoring removed nomblk_io_submit option [ 314.947380][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'. [ 314.998335][T12554] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 315.014666][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 315.021442][ C1] EXT4-fs (loop0): initial error at time 1772226999: mb_free_blocks:2047: inode 11: block 64 [ 315.032005][ C1] EXT4-fs (loop0): last error at time 1772226999: mb_free_blocks:2047: inode 11: block 64 [ 315.080744][T12554] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.2482: corrupted inode contents [ 315.108684][T12554] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 315.109284][T12554] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #11: comm syz.0.2482: mark_inode_dirty error [ 315.188805][T12554] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 315.188992][T12554] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2482: invalid indirect mapped block 1 (level 1) [ 315.214700][T12554] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 315.221916][T12554] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.2482: corrupted inode contents [ 315.257245][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2490'. [ 315.267379][T12554] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 315.269459][T12554] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 315.285308][T12586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2490'. [ 315.298495][T12554] loop0: lost filesystem error report for type 5 error -117 [ 315.298695][T12554] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.2482: corrupted inode contents [ 315.319272][T12554] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 315.319583][T12554] EXT4-fs error (device loop0): ext4_truncate:4587: inode #11: comm syz.0.2482: mark_inode_dirty error [ 315.340269][T12554] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 315.340448][T12554] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 315.346137][T12592] loop5: detected capacity change from 0 to 1024 [ 315.351425][T12554] loop0: lost filesystem error report for type 5 error -117 [ 315.366045][T12554] EXT4-fs (loop0): 1 truncate cleaned up [ 315.366158][T12591] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 315.390752][T12554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.403207][T12591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12591 comm=syz.4.2493 [ 315.417366][T12592] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 315.417819][T12591] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 315.437434][T12592] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 315.456312][T12592] EXT4-fs (loop5): orphan cleanup on readonly fs [ 315.463099][T12592] Quota error (device loop5): v2_read_file_info: Can't read info structure [ 315.472035][T12592] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 315.489938][T12591] tipc: Enabling of bearer rejected, failed to enable media [ 315.524290][T12592] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 315.559284][T12552] EXT4-fs error (device loop0): __ext4_iget:5378: inode #13: block 7962: comm syz.0.2482: invalid block [ 315.642217][T12592] EXT4-fs (loop5): 1 truncate cleaned up [ 315.673386][T12592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.692482][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.740955][T12592] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 16: comm syz.5.2492: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 315.814530][ T8342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.933399][T12662] loop6: detected capacity change from 0 to 1024 [ 315.942327][T12662] EXT4-fs: Ignoring removed nobh option [ 316.178621][T12681] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.248307][T12681] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.306239][T12681] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.394317][T12681] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.714370][ T3997] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.785672][T12763] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2067 sclass=netlink_xfrm_socket pid=12763 comm=syz.1.2506 [ 316.787342][ T4526] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.807363][T12763] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2068 sclass=netlink_xfrm_socket pid=12763 comm=syz.1.2506 [ 316.821610][T12763] netlink: 'syz.1.2506': attribute type 36 has an invalid length. [ 316.836747][T12763] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 316.846634][T12763] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 316.859586][T12763] netlink: 'syz.1.2506': attribute type 10 has an invalid length. [ 316.938325][ T4526] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.946750][T12773] loop5: detected capacity change from 0 to 512 [ 316.960022][T12773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 316.960103][ T4526] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.982056][T12773] ext4 filesystem being mounted at /225/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.032399][ T28] audit: type=1400 audit(1772227001.761:3796): avc: denied { execute } for pid=12772 comm="syz.5.2509" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=37282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 317.081625][T11149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.110135][T11149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.128293][T12784] 8021q: adding VLAN 0 to HW filter on device bond5 [ 317.150338][ T8342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 317.188565][T12791] netlink: 'syz.5.2514': attribute type 27 has an invalid length. [ 317.305970][T12791] macvlan1: left allmulticast mode [ 317.317837][T12791] bond2: left allmulticast mode [ 317.323525][T12791] dummy0: left allmulticast mode [ 317.328669][T12791] macvtap1: left promiscuous mode [ 317.333867][T12791] macvtap1: left allmulticast mode [ 317.334095][ T2993] ================================================================== [ 317.347142][ T2993] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 317.354126][ T2993] [ 317.356522][ T2993] write to 0xffffffff86c6ae48 of 8 bytes by task 12791 on cpu 1: [ 317.364263][ T2993] data_alloc+0x310/0x390 [ 317.368606][ T2993] prb_reserve+0x8d7/0xae0 [ 317.373044][ T2993] vprintk_store+0x54a/0x910 [ 317.377622][ T2993] vprintk_emit+0x1a4/0x600 [ 317.382124][ T2993] vprintk_default+0x26/0x30 [ 317.386701][ T2993] vprintk+0x1d/0x30 [ 317.390603][ T2993] _printk+0x79/0xa0 [ 317.394509][ T2993] __netdev_printk+0x310/0x370 [ 317.399311][ T2993] netdev_info+0xa6/0xd0 [ 317.403577][ T2993] netif_set_allmulti+0x14c/0x220 [ 317.408641][ T2993] __dev_change_flags+0x32f/0x400 [ 317.413682][ T2993] netif_change_flags+0x5a/0xd0 [ 317.418550][ T2993] do_setlink+0x905/0x2940 [ 317.422973][ T2993] rtnl_newlink+0xeee/0x1330 [ 317.427587][ T2993] rtnetlink_rcv_msg+0x64b/0x720 [ 317.432640][ T2993] netlink_rcv_skb+0x123/0x220 [ 317.437423][ T2993] rtnetlink_rcv+0x1c/0x30 [ 317.441864][ T2993] netlink_unicast+0x5c0/0x690 [ 317.446665][ T2993] netlink_sendmsg+0x5c8/0x6f0 [ 317.451455][ T2993] ____sys_sendmsg+0x5af/0x600 [ 317.456257][ T2993] ___sys_sendmsg+0x195/0x1e0 [ 317.460976][ T2993] __x64_sys_sendmsg+0xd4/0x160 [ 317.465851][ T2993] x64_sys_call+0x194c/0x3020 [ 317.470550][ T2993] do_syscall_64+0x12c/0x370 [ 317.475140][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.481039][ T2993] [ 317.483356][ T2993] read to 0xffffffff86c6ae48 of 16 bytes by task 2993 on cpu 0: [ 317.491009][ T2993] _prb_read_valid+0x1bc/0x950 [ 317.495804][ T2993] prb_read_valid+0x3c/0x60 [ 317.500307][ T2993] syslog_print+0x109/0x560 [ 317.504808][ T2993] do_syslog+0x52b/0x7f0 [ 317.509059][ T2993] __x64_sys_syslog+0x41/0x50 [ 317.513735][ T2993] x64_sys_call+0x2b9e/0x3020 [ 317.518424][ T2993] do_syscall_64+0x12c/0x370 [ 317.519910][T11149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.523035][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.536444][ T2993] [ 317.538773][ T2993] Reported by Kernel Concurrency Sanitizer on: [ 317.544918][ T2993] CPU: 0 UID: 0 PID: 2993 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(full) [ 317.555328][ T2993] Tainted: [W]=WARN [ 317.559123][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.569192][ T2993] ================================================================== [ 317.581733][T12799] smc: net device hsr0 erased user defined pnetid SYZ2 [ 317.619926][T12797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.628742][T12797] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.636857][T12797] dummy0: left promiscuous mode [ 317.643804][T12797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.660942][ T4526] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.669524][ T4526] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.678058][ T4526] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.687185][ T4526] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.901379][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!