last executing test programs: 2m37.689025588s ago: executing program 2 (id=3): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x38, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x1, 0x2}, &(0x7f0000000080)=0xc) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) openat$vcs(0xffffffffffffff9c, &(0x7f00000025c0), 0x20001, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x6, 0x8b}, 0x0) r4 = socket(0x1, 0x3, 0x0) bind$unix(r4, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, 0x8) 2m36.660622851s ago: executing program 2 (id=6): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x40080) 2m36.583540834s ago: executing program 2 (id=7): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000140001000000000000c300d92d"], 0x5c}}, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xeb1c6) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2m35.656999463s ago: executing program 2 (id=11): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8311}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x14, 0x30, 0xffff, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000340)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick=0x8, {0xfd, 0x40}, {0x3}, @connect={{0x4, 0x2}, {0x3, 0x9}}}, {0x6, 0x7, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @raw8={"93ec0ccdd44e1cfec21c2b14"}}, {0xf7, 0x81, 0x1, 0xaf, @tick, {0x70, 0x3c}, {0x1}, @quote={{0x5, 0x6}, 0x6}}, {0x2, 0xff, 0x81, 0xc0, @time={0xd1a, 0xc88}, {0xc, 0x9}, {0x48, 0x5}, @result={0xa80, 0x9f92}}], 0x8c) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r2) 2m34.84063061s ago: executing program 2 (id=12): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x10d022, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x6, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r0, &(0x7f0000000180)=0x4b6f, 0x12) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) openat(r0, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000b00)={[{@usrjquota}, {@noblock_validity}, {@discard}, {@jqfmt_vfsold}, {@data_writeback, 0x0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nodioread_nolock}, {@nodiscard}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9b}}, {@data_writeback}, {@errors_continue}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x87cb}}, {@abort}, {@dax_never}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}], [{@obj_role}, {@context={'context', 0x3d, 'root'}}], 0x2c}, 0x1, 0x532, &(0x7f0000000480)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x0, 0xc}}}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0xf2, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x10000000000002eb, &(0x7f00000003c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x2, 0x5) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) 2m25.404347611s ago: executing program 2 (id=31): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) socket$rxrpc(0x21, 0x2, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 2m8.804522842s ago: executing program 32 (id=31): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) socket$rxrpc(0x21, 0x2, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 2.005686436s ago: executing program 0 (id=1404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0xa) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") write$usbip_server(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x3f8e) shutdown(0xffffffffffffffff, 0x1) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$NILFS_IOCTL_GET_BDESCS(r7, 0xc0186e87, &(0x7f0000000080)={&(0x7f0000000040)=[{0x81, 0x10000, 0x9, 0x5}], 0x1, 0x28, 0x1, 0x4}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea8, 0x1, @local, 0x7}, 0x1c) 1.638075197s ago: executing program 1 (id=1411): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffff90c}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xd8b393b07b7ddb3d}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x141b0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb, 0x10}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x3, 0x7, 0x8, @dev={0xfe, 0x80, '\x00', 0x27}, @private2, 0x700, 0x40, 0x1ff, 0x200}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xc, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x57, 0x4}, @typedef, @fwd={0xe}]}, {0x0, [0x0, 0x30, 0x61, 0x30, 0x61, 0x2e, 0x0, 0x61, 0x2e, 0x61]}}, &(0x7f0000000780)=""/175, 0x4c, 0xaf, 0x0, 0x6}, 0x28) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x9, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000480)='GPL\x00', 0xe, 0xc2, &(0x7f00000004c0)=""/194, 0x41100, 0x47, '\x00', r4, @fallback=0x36, r5, 0x8, &(0x7f0000000880)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0xd, 0x3, 0x8}, 0x10, 0x0, r2, 0x0, &(0x7f0000000940)=[r6], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="7365637572697479000000000000000000e7ff00000000000000000000000000a80000006c02b941c87ff748bc40622aa52e618b6bfc995a17a6c1f766e9954cc835926239153355ff17d50b759c43aca49382219814f7b4a23a456bca74db25cf4845205fe18b16362c706562906b6117678c67ea269bc7fc562312176dffd72bb02ae80d99a81b1338091dcd8e565e5e9adb48ee9a2345372f9fb9c268504cff534c281c551f98433cf5acc17468eb20e494474dcb0009eaf5fc0e7e3e49f6d65c8acf1c97ebcc64df13a9"], &(0x7f00000003c0)=0xcc) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000080)='./file0\x00', 0x20000004) inotify_add_watch(r9, &(0x7f00000000c0)='./file0\x00', 0x4) ioctl$TIOCGICOUNT(r8, 0x545d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.637616507s ago: executing program 1 (id=1412): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x298}, 0xc004) 1.620789248s ago: executing program 1 (id=1413): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) prctl$PR_MCE_KILL(0x23, 0x8, 0x7fffffffeffe) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='./file0\x00', 0xe0000a19) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, r0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000340)={@desc={0x1, 0x0, @desc4}, 0x40, 0x0, '\x00', @b}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x6, 0xffff}, {}, {0xfff9, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc014}, 0x4004841) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f0000000200)={&(0x7f0000000840)=@xdp={0x2c, 0xe, r13, 0x34}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 1.507061132s ago: executing program 5 (id=1414): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x2}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x4000000080000001, 0x0, 0x6, 0x0, 0xfffffffffffffffa, 0x100000001, 0x0, 0x7a8b, 0x0, 0x1, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000340)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4) sendmsg$NFT_BATCH(r3, 0x0, 0x0) close(r3) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) semget$private(0x0, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c40000000000000097ffffffffffffff00", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x7fff, 0x5, 0xd, 0x5, "db060475ea0d8318470c9faddcb12e3a88cae5eb3084c7f199c0fc06bf18d00ae592813c6cb76ba83322095b3803ad537e00f8ab580c7561ac7ce9f88b103b31", "74631679e4037f8f7700645bb83d08d4380e4adb7fd6268a14becdb80c44e421", [0x3ff, 0xff]}) 1.478122703s ago: executing program 5 (id=1415): socket(0x27, 0x80805, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) clock_gettime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x0, 0x0, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00', r2}, 0x18) unshare(0x100000) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x105) getdents64(r3, 0xfffffffffffffffe, 0x29) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f00000006c0)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1000000000000001, 0xec, 0xfffffffffffffffe, 0x8, 0x0, 0x1, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r6, @ANYBLOB="200001"], 0x38}}, 0x20000100) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) r8 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r8, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb653}}, {@init_itable_val={'init_itable', 0x3d, 0x4000000008d55}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$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") socket(0x2, 0x3, 0xff) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 1.477629202s ago: executing program 5 (id=1416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xffffffff, 0xdb7, 0x8, 0x7, 0x9}, 0xd, 0xeb}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51b, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0xa3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x81a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102a, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0xa4, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0x8, 0x8, 0x7, 0x3, 0x4000}, {0x401, 0x81, 0x8, 0x6, 0xffff, 0x59}, {0x1, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7fff, 0x4}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7f, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0x80f469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x7, 0x7, 0x8001, 0x76, 0x3, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x4, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0x2a, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0xc55, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1816, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x5, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x8, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x3, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0x80000001, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x8, 0x6, 0x9, 0xfffffff8, 0x3}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffffa, 0x4, 0x6, 0x4756, 0x4002b13, 0x80}, {0x4, 0x1c0002, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xff, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x1ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x7}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x3}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0xfb5, 0x4, 0x0, 0x7}, {0xfffffffc, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0xb}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x3, 0x2}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x8000, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0xbd9, 0x6, 0xb, 0xfffffffc, 0x0, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x8}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0xb, 0x9, 0x101, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x6}, {0x1, 0x5, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0x585, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x9}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x5}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x100, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0xa, 0x9, 0x100, 0x4, 0x5, 0x8000}, {0x8, 0x4, 0x8, 0x9, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5}, {0x6, 0xfffffff7, 0x6, 0xef, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x5, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x4, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x3ff, 0xfffffffc, 0xff}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x6, 0xffd9}, {0x7ff, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x9, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10004}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x3, 0x80000000, 0x93f8}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x7}], [{0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x94, 0x4}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1.386259075s ago: executing program 5 (id=1417): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffeffffa}, {}, 0x4, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in=@multicast1, 0x4d2, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xd, 0xfffffffe, 0x3}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0x2}, 0x62) writev(r3, &(0x7f0000000340), 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r7 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x80000018}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) syz_emit_ethernet(0x8e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa25aae0cb3fd0a2ea4e01aaaaaaaaaa4305400f008000650000082e90780a01010164010102864e000000030008094ac467ec3f00124c985e594ee96c2b09f6e55ec84c916e05052450b2070ce17393606d00a7ab3c13010dcee8f17fabc8f286afabb207106549c337b0e2fdba29f02c960c99891be6ac141425ac1414aa64010100ffffffffe00000"], 0x0) r10 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r10, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r7], 0x18, 0x20000001}, 0x20008000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r10, 0x84, 0x65, 0x0, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000ffdbdf27152f8afa634e3ee4", @ANYRES32=r8, @ANYBLOB="0c002b800800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x20008800) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x6, 0x87, 0x5, 0x7ffbffff}, {0x0, 0xf7, 0x2, 0x6a8d}]}) 1.380211515s ago: executing program 5 (id=1418): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, &(0x7f00000003c0)={'ip_vti0\x00', @ifru_ivalue=0x9}) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_pidfd_open(r0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x40000000015, 0x5, 0x0) unshare(0x24020400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x7}, 0x10) socket(0x2, 0x3, 0xff) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002100010000f700000000000002200000000000000000000008070000000000000000060000000000"], 0x2c}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfd.o=', @ANYRESHEX=r6, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r8, @ANYRESOCT=r7], 0x15) 1.103893324s ago: executing program 0 (id=1419): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) dup(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180), &(0x7f00000002c0)=0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) tkill(0x0, 0x7) open(0x0, 0x109042, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000010440)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1, 0xc03, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25030000003c00018014000400fc00000000000000000000000000001014000400ff020000000000000000000000000001060001000a000000080007"], 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040) 983.883068ms ago: executing program 0 (id=1420): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0xfff4, 0xbe, 0x0, 0x0, @fd}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x40080) 971.742859ms ago: executing program 0 (id=1421): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x4, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x14, &(0x7f0000000b40)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0xa, 0x801, 0x0) getsockopt(r5, 0x29, 0x40, &(0x7f0000000000)=""/84, &(0x7f00000002c0)=0x54) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x15}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7f2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x10000089) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000300)=0x100) syz_emit_ethernet(0x192, &(0x7f0000002080)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x15c, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @mcast2, {[@dstopts={0x2c, 0x17, '\x00', [@pad1, @generic={0x8, 0xa4, "a0ae1ac2ef2a2b01a760122848e8e6360c559f7366a8f3916182907a51a16ba42b98c21476441a89066d6af9bda7eec50121db460e109341da924aee6c50343596785e38ad92e0a42065ac50c5bb06b6c5ad131f57f712930bf1f6be904ffa23f7f4bf6222f06e0aed08fcba7bd28e152a6eabbc16d870e14b48a5d44d1577096c5ed26c9521e4880c2cfe67fe68d35701786ed0a4a49ad8b6b466cb3c7ba98bbbbc2fe2"}, @ra={0x5, 0x2, 0xe}, @pad1, @generic={0xd}, @generic={0x3}, @padn={0x1, 0x2, [0x0, 0x0]}]}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "8f7047b3b373b3e308f3ecbd873be642f8ab92b7703697c6afff150f54b8217b", "52b5122cb520a93a5c170cbbdbccb8fd37dcaccad4a21c965840561311772fd82bd5b67dc4d8dd0a4a279d81d356128f", "3c1f8d96978414d6a41cbb8e2235aeeb3c4941a29a7d76ecf58b6d82", {"b10ea3af9af1adbbe659374c03242a1e", "37b9715e1d11a843d8c3b71b54e8fadf"}}}}}}}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000d400000010000000350000000000000095000000000000005727f060e0b274e73dbd0f85d0cd2a1fc5c546297f000000d870402345f4cd32986892c237bec9e7604d0ffcf86e2f89820d233697b0f0a23c7aa27429916b566f48ced9dba83f1d32743dfadedcb674e0a75cacbbc0df8d43627b0bacfed05f3df0f47d5114c516c4"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x94) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x48}}, 0x0) 956.712279ms ago: executing program 0 (id=1422): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001ac1414bb00000000000000000000000000000000000000000000000000000500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d333000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00"], 0x158}}, 0x0) 902.030611ms ago: executing program 0 (id=1423): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x50000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket(0x27, 0x80000, 0x7e1) syz_usb_connect$cdc_ecm(0x4, 0x73, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0x6, 0x20, 0x80, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x4, {{0xa, 0x24, 0x6, 0x0, 0x0, "03761ec0ed"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x81, 0xf, 0x6}, [@obex={0x5, 0x24, 0x15, 0x6c5}, @dmm={0x7, 0x24, 0x14, 0x6, 0x2}, @obex={0x5, 0x24, 0x15, 0x3800}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x0, 0x8, 0x8, 0x6, 0x5}, @acm={0x4, 0x24, 0x2, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xd, 0x80}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x5, 0x6, 0x7, 0x10, 0x2}, 0xa3, &(0x7f0000000300)={0x5, 0xf, 0xa3, 0x2, [@generic={0x93, 0x10, 0xa, "f494c0be9dfdf8f1105c5327699b628510d3c1e7de8eb547f7a8027e39c2dc41bdfc7b6ba3a8a01b9b8b10aef060480e475465c25f5c28acab2b4bbcfb5c145ccd3f410b0ab77c41983df21dfab9580ca32d0e52f7ebc7463db1ac6e938c52bb1311718236c36ad7c1a91fbbbdfef0c7a695d6bfbea3a6de63886ab3cd40d800d910d38f2b5c165e406f96d8ea65ecf3"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0xd, 0xb, 0x7fff, 0x55}]}, 0x1, [{0x9d, &(0x7f00000003c0)=@string={0x9d, 0x3, "22d7950b943bebfab03c3ac679a477809d8da327c356d2c66249572334470654e1302ca93f753d5eb2a0643ea6512b9dda63dbe3c9e5d732e841a693b437e4ee1693ff7be30b4a5a7e7cdaeb3e3b0534934f8ace541b42997950cc305c50d27c2c82b56dafa46e136892c7b9079bc69d44f2b4c38235271165771265ff3e590d2290dff320be9aa7b462d613f192f24ee0875983f3661598d909bb"}}]}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x62, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f00000006c0), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x8, 0x0, 0x80, @vifc_lcl_ifindex=r5, @rand_addr=0x64010102}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x0, 0x2, 0x4}, {0x44, 0x1, 0x9, 0x8016}, {0x4, 0x9, 0x7, 0x5}, {0x6, 0x9, 0xd, 0x5}]}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1000000, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe428116085f06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmmsg$sock(r1, &(0x7f00000016c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/1367], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48) 717.901297ms ago: executing program 3 (id=1434): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSLCKTRMIOS(r0, 0x80047437, &(0x7f0000000080)) perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x3}, 0x80, 0x10000, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x31, 0x8}, 0xc) fchdir(r2) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000000012080001"], 0xa4}}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x75, 0x100) r7 = geteuid() quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, r7, &(0x7f0000000280)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x22400, 0x19e) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r6, 0xc038943b, &(0x7f00000001c0)={0x7, 0x40, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111640000000000851000000200000085000000b200000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 717.638747ms ago: executing program 3 (id=1435): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x1, 0x3, 0xe, "0060000000000000000001030040000000f600"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = io_uring_setup(0xad5, &(0x7f00000003c0)={0x0, 0xc45e, 0x8, 0x0, 0xffc}) close(r3) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x0, 0x1, 0x56, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) timer_settime(0x0, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x3d, &(0x7f0000000000)={0x77359400}) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00c8702cc583177e7c953d2b6c6e43b73645f2acb80cc28520c3cd61e54370886d9caa3a1ec165ec59309153922716cb0f95f435e2af"], 0x1, 0x2f0, &(0x7f0000000f80)="$eJzs3ctrE0EcwPFf3klrTQ8iIgpDBVGkSxPw5sEiLYgBpW0EKwhbu9WQbVKyoRAR24Pg1bOHHjyKIII3LyJee/Ev8HXrpTcLFlc2u5umyZqmlT79fg7NdOf325ndme1j2uyuXHk+W5yxtF92VJr1S1giXnlRLn5a+np2/OMx93OlRocnMlmlwiJy9/HrgQ/V3tvvjr9PyHL/vZXV7I/lMxMivyceSlgVLFWybdtWU+VyNeQkTxesoqbULdPQLUMVSpZRqSq9Xq9PmYaaMctzczWll6b7euYqhmUpvVRTRaOmqmVVrdSU/kAvlJSmaaqvR1AfLF+4rS7UKTH/as22ZdUZoMSi2LYdEL3oF2Lea+LfOouDpGX8O8a2TY7IbvYMe2HNjjbGP77F+OPoca//by+6uf5x9IzfmbwxnMuNjCmVFJl9Np+fz7uvbv2XXimIKYYsjV2aXBdnjngk5HwcvZ4bGVJ1/XJ+dsHLX5jPu98chme8/IyknZ9TmvLFz8+4+Wpzfkx6mvOzkpYTwflZP1/CTflxuXCuKV+TtHy+L2UxZVqc3I38Jxmlrt3MtbSfqscBAAAAAAAAAHAYaaphY/0+1PhTb0rTEvX/+GjUp5zNTpwb0FhfH5K0rAevzw8Fru9H5XR0Hw8cAAAAAID/iFV7VNRN06jsTiHyMtWhiZiIOAWRpwNOZzru8KTX4+5aj4tIe1WkcxObCqnLbntvxryOyW6eqB0WwiLSvMV9s4Zz8OZbPyYlQenhbU2AwXjgmU/u6SFLN8GS3NnETnQ9tVoLoXV/y6nAGDu09X5s3Yy5W/wLc6vWr27rcvhrIdl6oga/u/s1O3zR+NlY4gMAAABwiDT94gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbJjm4e5t+3f3OVeI+Ib78lW+tz4rnvPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAD6E8AAAD//+b9sCg=") r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000200)=""/95, 0x5f) 714.820057ms ago: executing program 1 (id=1438): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0xeaff, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017000000a1ff0000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 653.266209ms ago: executing program 3 (id=1440): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006dc7350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000008700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000002000000000000000000000400"], 0xb8}}, 0x2c000010) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setresuid(0xee01, 0x0, 0x0) setresuid(0xee00, 0xee01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='-pids'], 0x6) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) r5 = socket(0x10, 0x3, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0xbe, 0x0, 0x0, @fd}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x40080) 605.88752ms ago: executing program 3 (id=1441): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r2, &(0x7f0000000100), 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xa8, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@generic="6ecf18fbb743e257055baf1a493cd4e5d16faff75d8f487ecbfff857bdc792827cebe078f2c6f0cd18ed0bdd91c59c488a2327dbd23c26d33abbfdf80cf895a6201ea7b5e0b81a3fe22cdbcba88c052b9a39317216c661e6f6fd01dd5a92d9ec361f05a2b5841f5c5042088074e8c1c69ef53b2622c4cf93da22fdec50acd54c32e93cd65f76737e63", @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0xa8}, 0x1, 0x8000000, 0x0, 0x400c890}, 0x40080) r3 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000001000)=""/61, 0x3d) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000080)=0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r5, &(0x7f0000000200)={0xc85, 0x8000000000000001, 0x5, 0x1, 0x7, 0x401, 0x8, 0x120000000, 0xff}) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@private2, @in6=@private2, 0x4e20, 0x0, 0x4e23, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in=@empty, 0x4d5, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@private2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) keyctl$revoke(0x3, r3) 604.53957ms ago: executing program 3 (id=1444): unshare(0x22020600) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x33, 0xffffffffffffffff, &(0x7f00000001c0)=0xfffffffffffffff1) r2 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 550.189832ms ago: executing program 1 (id=1445): r0 = socket$inet6(0x10, 0x2, 0x4) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000000, 0x13, r3, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = epoll_create1(0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="4400000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000008003000008001b00000000000c001a800800028004000180080004"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000100)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)={0x4}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendto$inet6(r0, &(0x7f0000000000)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 548.061162ms ago: executing program 3 (id=1446): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x1f4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x4, 0x0, 0x40, 0x0, 0x6, 0x20a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext={0x7, 0x80000004dd5}, 0x4, 0x0, 0x1, 0x2, 0x6f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000000)) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000006000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 544.111872ms ago: executing program 1 (id=1447): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="033e48cac9ce7bc5d53b82cdda938b77f344caa2057dca21723c1d9d90d1ab3cb2d2d952fe688c206c0a0a3e0f3611be8c66413e50b2c42986d52c484c1aa12c4c", 0x41, 0xfffffffffffffffe) keyctl$update(0x2, r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000001240)={[{@noload}]}, 0x0, 0x5e6, &(0x7f0000000ac0)="$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") 466.927135ms ago: executing program 5 (id=1452): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x800) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6(0xa, 0x1, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002002, 0x0) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000500), 0xf0000000) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x40008c1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x3}, 0x8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x200488c0) 303.35499ms ago: executing program 4 (id=1453): socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="000000004c90020029000000030001000000000000000000000000000000000000000000007f000000000000000000000000000000000000000000000000000000000000050000000029000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 242.307112ms ago: executing program 4 (id=1454): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x500}, 0x0) 242.034552ms ago: executing program 4 (id=1455): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000008c0)={[{@test_dummy_encryption_v1}, {@nojournal_checksum}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x598, &(0x7f0000001900)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) (async, rerun: 64) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async, rerun: 64) brk(0x200000ffc000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x3f, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB="b151c479", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5aec}, {0x20, 0xf, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x1}]}, 0x10) (async, rerun: 64) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async, rerun: 64) socket(0x2, 0x80805, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 241.396402ms ago: executing program 4 (id=1456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x628381, 0xa4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x4a}) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000001900)={0x9, 0x1, 0x0, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r1, 0x1ae6, 0x6931, 0x17, 0x0, 0x0) unshare(0x2a020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000697000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x17) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 225.279842ms ago: executing program 4 (id=1457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002080)=[{&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/107, 0x6b}, {&(0x7f0000002000)=""/111, 0x6f}], 0x3, &(0x7f0000003300)=[{0x0}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000003240)=""/163, 0xa3}], 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0xfd}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") link(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000000)='./bus\x00') unlink(0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3, 0x0, 0x0, 0x1f}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa00}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=1458): open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (async) unshare(0x20060400) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) clock_gettime(0xa, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) fcntl$F_GET_RW_HINT(r0, 0x40f, &(0x7f0000000140)) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) r1 = open(&(0x7f0000000180)='./bus\x00', 0x2f77e, 0x67) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") (async) io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe3b, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) kernel console output (not intermixed with test programs): sing attributes in process `syz.1.344'. [ 101.379356][ T4792] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.339: bad orphan inode 3 [ 101.387554][ T28] audit: type=1326 audit(1780275265.500:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7297ce59 code=0x7ffc0000 [ 101.422289][ T28] audit: type=1326 audit(1780275265.500:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7297ce59 code=0x7ffc0000 [ 101.450138][ T28] audit: type=1326 audit(1780275265.500:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f2a7297ce59 code=0x7ffc0000 [ 101.523144][ T4792] loop4: lost filesystem error report for type 5 error -117 [ 101.527642][ T4792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 101.596954][ T28] audit: type=1326 audit(1780275265.500:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7297ce59 code=0x7ffc0000 [ 101.633970][ T28] audit: type=1326 audit(1780275265.500:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7297ce59 code=0x7ffc0000 [ 101.672516][ T4811] loop3: detected capacity change from 0 to 512 [ 101.699493][ T4811] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 101.714349][ T4790] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.339: dx entry: limit 0 != root limit 125 [ 101.730402][ T28] audit: type=1326 audit(1780275265.500:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2a7297ce59 code=0x7ffc0000 [ 101.755785][ T28] audit: type=1326 audit(1780275265.500:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2a7297ce59 code=0x7ffc0000 [ 101.781640][ T4811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e01c, mo2=0002] [ 101.789674][ T4790] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.339: Corrupt directory, running e2fsck is recommended [ 101.802767][ T4811] EXT4-fs (loop3): orphan cleanup on readonly fs [ 101.810557][ T28] audit: type=1400 audit(1780275266.052:545): avc: denied { read append } for pid=4817 comm="syz.5.351" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 101.828889][ T4811] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.348: bad orphan inode 3 [ 101.856940][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 101.881567][ T4812] loop1: detected capacity change from 0 to 512 [ 101.891788][ T4812] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.894022][ T4811] loop3: lost filesystem error report for type 5 error -117 [ 101.932591][ T4811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 101.953101][ T4824] netlink: 140 bytes leftover after parsing attributes in process `syz.4.352'. [ 102.030996][ T4811] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.348: dx entry: limit 0 != root limit 125 [ 102.043427][ T4811] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.348: Corrupt directory, running e2fsck is recommended [ 102.065842][ T4811] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.348: dx entry: limit 0 != root limit 125 [ 102.069730][ T4836] netlink: 'syz.0.354': attribute type 1 has an invalid length. [ 102.085274][ T4811] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.348: Corrupt directory, running e2fsck is recommended [ 102.108482][ T4836] netlink: 'syz.0.354': attribute type 2 has an invalid length. [ 102.116847][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 102.162281][ T4846] netlink: 48 bytes leftover after parsing attributes in process `syz.5.360'. [ 102.171561][ T4845] netlink: 44 bytes leftover after parsing attributes in process `syz.3.359'. [ 102.266987][ T4853] loop3: detected capacity change from 0 to 512 [ 102.306510][ T4853] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 102.348932][ T4853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e01c, mo2=0002] [ 102.358160][ T4853] EXT4-fs (loop3): orphan cleanup on readonly fs [ 102.367590][ T4853] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.363: bad orphan inode 3 [ 102.378155][ T4853] loop3: lost filesystem error report for type 5 error -117 [ 102.382546][ T4853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 102.442331][ T4853] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.363: dx entry: limit 0 != root limit 125 [ 102.522194][ T4864] loop5: detected capacity change from 0 to 764 [ 102.576222][ T4864] Symlink component flag not implemented [ 102.582265][ T4864] Symlink component flag not implemented [ 103.247122][ T4853] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.363: Corrupt directory, running e2fsck is recommended [ 103.316387][ T4873] loop0: detected capacity change from 0 to 512 [ 103.353400][ T4873] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.392438][ T4873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.417290][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 103.438269][ T4882] netlink: 48 bytes leftover after parsing attributes in process `syz.4.372'. [ 103.447673][ T4873] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.488519][ T4873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.370'. [ 103.505233][ T4873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4873 comm=syz.0.370 [ 103.625462][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.653944][ T4896] netlink: 'syz.4.378': attribute type 8 has an invalid length. [ 103.672379][ T4894] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 103.683149][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 103.701807][ T4899] loop0: detected capacity change from 0 to 512 [ 103.731593][ T4894] netlink: 'syz.3.376': attribute type 2 has an invalid length. [ 103.743292][ T4899] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 103.768068][ T4899] EXT4-fs (loop0): mount failed [ 103.995130][ T4913] netlink: 40 bytes leftover after parsing attributes in process `syz.3.383'. [ 104.051559][ T4919] netlink: 48 bytes leftover after parsing attributes in process `syz.3.386'. [ 104.080982][ T4923] loop0: detected capacity change from 0 to 512 [ 104.088304][ T4923] EXT4-fs: Ignoring removed nobh option [ 104.094807][ T4923] EXT4-fs (loop0): first meta block group too large: 83886080 (group descriptor block count 1) [ 104.128565][ T4915] loop5: detected capacity change from 0 to 512 [ 104.154863][ T4915] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 104.168585][ T4915] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e01c, mo2=0002] [ 104.180946][ T4915] EXT4-fs (loop5): orphan cleanup on readonly fs [ 104.187681][ T4915] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.384: bad orphan inode 3 [ 104.202029][ T4915] loop5: lost filesystem error report for type 5 error -117 [ 104.203924][ T4932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 104.205430][ T4915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 104.238190][ T4929] netlink: 'syz.4.390': attribute type 21 has an invalid length. [ 104.253874][ T4915] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.384: dx entry: limit 0 != root limit 125 [ 104.268085][ T4915] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.384: Corrupt directory, running e2fsck is recommended [ 104.318792][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 104.328820][ T3748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 104.359679][ T4944] FAULT_INJECTION: forcing a failure. [ 104.359679][ T4944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.382024][ T4944] CPU: 1 UID: 0 PID: 4944 Comm: syz.0.397 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.382051][ T4944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.382062][ T4944] Call Trace: [ 104.382068][ T4944] [ 104.382120][ T4944] __dump_stack+0x1d/0x30 [ 104.382189][ T4944] dump_stack_lvl+0x95/0xd0 [ 104.382209][ T4944] dump_stack+0x15/0x1b [ 104.382273][ T4944] should_fail_ex+0x263/0x280 [ 104.382294][ T4944] should_fail+0xb/0x20 [ 104.382311][ T4944] should_fail_usercopy+0x1a/0x20 [ 104.382332][ T4944] _copy_from_iter+0xcf/0xea0 [ 104.382351][ T4944] ? __alloc_skb+0x4f6/0x690 [ 104.382435][ T4944] ? __alloc_skb+0x200/0x690 [ 104.382455][ T4944] netlink_sendmsg+0x4ae/0x6f0 [ 104.382481][ T4944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.382541][ T4944] __sys_sendto+0x42e/0x490 [ 104.382624][ T4944] __x64_sys_sendto+0x76/0x90 [ 104.382648][ T4944] x64_sys_call+0x2d35/0x3020 [ 104.382671][ T4944] do_syscall_64+0x12c/0x3b0 [ 104.382701][ T4944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.382768][ T4944] RIP: 0033:0x7ff92527ce59 [ 104.382784][ T4944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.382805][ T4944] RSP: 002b:00007ff923ccf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 104.382914][ T4944] RAX: ffffffffffffffda RBX: 00007ff9254f5fa0 RCX: 00007ff92527ce59 [ 104.382928][ T4944] RDX: 000000000000004c RSI: 0000200000000080 RDI: 0000000000000003 [ 104.382941][ T4944] RBP: 00007ff923ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 104.382982][ T4944] R10: 0000000000000810 R11: 0000000000000246 R12: 0000000000000001 [ 104.382994][ T4944] R13: 00007ff9254f6038 R14: 00007ff9254f5fa0 R15: 00007fff0d29a1f8 [ 104.383010][ T4944] [ 104.597300][ T4955] ext4: Unknown parameter 'noacl' [ 104.636916][ T4956] netlink: 'syz.0.400': attribute type 15 has an invalid length. [ 104.849799][ T4973] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.864693][ T4973] EXT4-fs (loop5): 1 truncate cleaned up [ 104.872262][ T4973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.872773][ T4973] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.410: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 105.893555][ T4973] EXT4-fs (loop5): Remounting filesystem read-only [ 105.916118][ T5002] set_capacity_and_notify: 2 callbacks suppressed [ 105.916136][ T5002] loop0: detected capacity change from 0 to 512 [ 105.929950][ T5002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.956856][ T3748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.971288][ T5002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.985659][ T5002] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.023391][ T5008] FAULT_INJECTION: forcing a failure. [ 106.023391][ T5008] name failslab, interval 1, probability 0, space 0, times 0 [ 106.036237][ T5008] CPU: 1 UID: 0 PID: 5008 Comm: syz.4.423 Not tainted syzkaller #0 PREEMPT(lazy) [ 106.036261][ T5008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.036272][ T5008] Call Trace: [ 106.036278][ T5008] [ 106.036285][ T5008] __dump_stack+0x1d/0x30 [ 106.036384][ T5008] dump_stack_lvl+0x95/0xd0 [ 106.036463][ T5008] dump_stack+0x15/0x1b [ 106.036479][ T5008] should_fail_ex+0x263/0x280 [ 106.036498][ T5008] ? __pfx_proc_alloc_inode+0x10/0x10 [ 106.036526][ T5008] should_failslab+0x8c/0xb0 [ 106.036627][ T5008] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 106.036734][ T5008] ? proc_alloc_inode+0x34/0x90 [ 106.036760][ T5008] ? __pfx_proc_alloc_inode+0x10/0x10 [ 106.036834][ T5008] proc_alloc_inode+0x34/0x90 [ 106.036868][ T5008] alloc_inode+0x40/0x170 [ 106.036883][ T5008] new_inode+0x1d/0xe0 [ 106.036899][ T5008] proc_pid_make_inode+0x1f/0xd0 [ 106.036966][ T5008] proc_map_files_instantiate+0x81/0x120 [ 106.036996][ T5008] proc_fill_cache+0x1e0/0x260 [ 106.037013][ T5008] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 106.037118][ T5008] proc_map_files_readdir+0x521/0x6a0 [ 106.037151][ T5008] iterate_dir+0x114/0x330 [ 106.037176][ T5008] __se_sys_getdents64+0xd2/0x230 [ 106.037204][ T5008] ? __pfx_filldir64+0x10/0x10 [ 106.037316][ T5008] __x64_sys_getdents64+0x43/0x50 [ 106.037365][ T5008] x64_sys_call+0x2408/0x3020 [ 106.037393][ T5008] do_syscall_64+0x12c/0x3b0 [ 106.037426][ T5008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.037445][ T5008] RIP: 0033:0x7f71f91fce59 [ 106.037529][ T5008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.037546][ T5008] RSP: 002b:00007f71f7c57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 106.037584][ T5008] RAX: ffffffffffffffda RBX: 00007f71f9475fa0 RCX: 00007f71f91fce59 [ 106.037598][ T5008] RDX: 00000000000000eb RSI: 0000200000000000 RDI: 0000000000000006 [ 106.037659][ T5008] RBP: 00007f71f7c57090 R08: 0000000000000000 R09: 0000000000000000 [ 106.037672][ T5008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.037685][ T5008] R13: 00007f71f9476038 R14: 00007f71f9475fa0 R15: 00007ffe3560ca58 [ 106.037702][ T5008] [ 106.283409][ T5012] loop4: detected capacity change from 0 to 512 [ 106.305696][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 106.336671][ T5012] ext4: Unknown parameter 'permit_directio' [ 106.817529][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 106.817543][ T28] audit: type=1400 audit(1780275272.730:586): avc: denied { append } for pid=5029 comm="syz.1.432" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.878680][ T5038] loop6: detected capacity change from 0 to 8 [ 106.925160][ T5032] loop1: detected capacity change from 0 to 1024 [ 106.934014][ T5032] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 106.949127][ T5038] loop6: detected capacity change from 8 to 0 [ 106.982109][ T5041] loop0: detected capacity change from 0 to 128 [ 107.078201][ T5048] sch_tbf: burst 18 is lower than device lo mtu (65550) ! [ 108.503306][ T5080] loop5: detected capacity change from 0 to 764 [ 109.415855][ T5085] loop0: detected capacity change from 0 to 512 [ 109.947194][ T5082] loop4: detected capacity change from 0 to 764 [ 111.531473][ T5080] Symlink component flag not implemented [ 111.537237][ T5080] Symlink component flag not implemented [ 111.563877][ T5088] __nla_validate_parse: 9 callbacks suppressed [ 111.563894][ T5088] netlink: 48 bytes leftover after parsing attributes in process `syz.1.453'. [ 112.434056][ T5092] loop0: detected capacity change from 0 to 512 [ 112.481256][ T5092] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.693811][ T5092] EXT4-fs (loop0): 1 truncate cleaned up [ 112.725130][ T5092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.855931][ T5107] loop4: detected capacity change from 0 to 764 [ 112.895753][ T5107] Symlink component flag not implemented [ 112.902123][ T5107] Symlink component flag not implemented [ 113.165073][ T28] audit: type=1400 audit(1780275278.679:587): avc: denied { write } for pid=5091 comm="syz.0.454" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.301408][ T28] audit: type=1400 audit(1780275278.698:588): avc: denied { create } for pid=5091 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 113.424866][ T5095] loop3: detected capacity change from 0 to 512 [ 113.681102][ T5095] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 113.699686][ T5116] loop5: detected capacity change from 0 to 512 [ 113.724093][ T5116] EXT4-fs: Ignoring removed nobh option [ 113.733271][ T5114] netlink: 44 bytes leftover after parsing attributes in process `syz.1.461'. [ 113.754791][ T5095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e01c, mo2=0002] [ 113.769000][ T5116] ext4: Bad value for 'init_itable' [ 113.799614][ T5095] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.842669][ T5095] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.455: bad orphan inode 3 [ 113.892131][ T5092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.454'. [ 113.904575][ T5095] loop3: lost filesystem error report for type 5 error -117 [ 113.914876][ T5095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 113.949079][ T5111] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.454: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 113.974947][ T28] audit: type=1400 audit(1780275280.402:589): avc: denied { write } for pid=5091 comm="syz.0.454" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.024309][ T5094] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.455: dx entry: limit 0 != root limit 125 [ 114.024341][ T5094] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.455: Corrupt directory, running e2fsck is recommended [ 114.276753][ T5126] netlink: 28 bytes leftover after parsing attributes in process `syz.5.463'. [ 114.300307][ T5126] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 114.300564][ T28] audit: type=1400 audit(1780275280.738:590): avc: denied { accept } for pid=5120 comm="syz.5.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.327734][ T5111] EXT4-fs (loop0): Remounting filesystem read-only [ 114.376454][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 114.450763][ T5131] netlink: 48 bytes leftover after parsing attributes in process `syz.5.467'. [ 114.646253][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.809222][ T5147] loop3: detected capacity change from 0 to 764 [ 114.929183][ T5148] netlink: 44 bytes leftover after parsing attributes in process `syz.0.472'. [ 114.975158][ T5143] netlink: 'syz.5.471': attribute type 1 has an invalid length. [ 115.065076][ T5143] netlink: 'syz.5.471': attribute type 2 has an invalid length. [ 115.455461][ T5161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 115.709577][ T5147] Symlink component flag not implemented [ 115.715899][ T5147] Symlink component flag not implemented [ 116.228729][ T5163] loop5: detected capacity change from 0 to 512 [ 116.277498][ T5163] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 116.318675][ T5163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e01c, mo2=0002] [ 116.367499][ T5163] EXT4-fs (loop5): orphan cleanup on readonly fs [ 116.385803][ T5163] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.477: bad orphan inode 3 [ 116.408765][ T5163] loop5: lost filesystem error report for type 5 error -117 [ 116.410087][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 116.424060][ C0] EXT4-fs (loop5): initial error at time 1780275283: ext4_orphan_get:1423 [ 116.432763][ C0] EXT4-fs (loop5): last error at time 1780275283: ext4_orphan_get:1423 [ 116.434546][ T5163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 116.446058][ T28] audit: type=1400 audit(1780275283.741:591): avc: denied { create } for pid=5171 comm="syz.1.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.491876][ T5163] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.477: dx entry: limit 0 != root limit 125 [ 116.525898][ T5163] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.477: Corrupt directory, running e2fsck is recommended [ 116.570855][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 116.580919][ T5179] loop3: detected capacity change from 0 to 512 [ 116.589784][ T28] audit: type=1400 audit(1780275283.881:592): avc: denied { mounton } for pid=5178 comm="syz.3.482" path="/106/file0" dev="tmpfs" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.638085][ T5184] netlink: 'syz.0.484': attribute type 32 has an invalid length. [ 116.648896][ T3748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 116.648901][ T5179] EXT4-fs error (device loop3): ext4_quota_enable:7225: inode #3: comm syz.3.482: iget: checksum invalid [ 116.648928][ T5179] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -74 [ 116.700716][ T28] audit: type=1400 audit(1780275283.984:593): avc: denied { write } for pid=5192 comm="syz.5.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.730731][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 116.737197][ C1] EXT4-fs (loop3): initial error at time 1780275283: ext4_quota_enable:7225: inode 3 [ 116.740234][ T5179] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.482: Bad quota inode: 3, type: 0 [ 116.746696][ C1] EXT4-fs (loop3): last error at time 1780275283: ext4_quota_enable:7225: inode 3 [ 116.767238][ T5193] syzkaller0: entered promiscuous mode [ 116.768584][ T5179] loop3: lost filesystem error report for type 5 error -117 [ 116.772751][ T5193] syzkaller0: entered allmulticast mode [ 116.773002][ T5179] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix. [ 116.803916][ T5193] loop5: detected capacity change from 0 to 256 [ 116.808231][ T5179] EXT4-fs (loop3): mount failed [ 116.917030][ T5209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 116.933305][ T5207] netlink: 'syz.5.489': attribute type 16 has an invalid length. [ 116.935368][ T5179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.482'. [ 116.943479][ T28] audit: type=1400 audit(1780275284.190:594): avc: denied { ioctl } for pid=5178 comm="syz.3.482" path="socket:[12396]" dev="sockfs" ino=12396 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.976850][ T5207] netlink: 132 bytes leftover after parsing attributes in process `syz.5.489'. [ 116.994837][ T28] audit: type=1400 audit(1780275284.190:595): avc: denied { read } for pid=5178 comm="syz.3.482" path="socket:[12396]" dev="sockfs" ino=12396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.023552][ T28] audit: type=1400 audit(1780275284.246:596): avc: denied { write } for pid=5208 comm="syz.0.490" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 117.312086][ T5219] netlink: 52 bytes leftover after parsing attributes in process `syz.4.491'. [ 117.321702][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.328926][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.523412][ T5224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 117.590452][ T5224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 117.672745][ T5224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 117.733287][ T5229] loop5: detected capacity change from 0 to 512 [ 117.816415][ T5229] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 117.860918][ T5224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 117.906477][ T5224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 117.922307][ T5229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e01c, mo2=0002] [ 118.003715][ T5224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 118.004163][ T5229] EXT4-fs (loop5): orphan cleanup on readonly fs [ 118.024837][ T5229] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.496: bad orphan inode 3 [ 118.091889][ T5229] loop5: lost filesystem error report for type 5 error -117 [ 118.093768][ T5229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 118.244135][ T5229] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.496: dx entry: limit 0 != root limit 125 [ 118.372827][ T5229] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.496: Corrupt directory, running e2fsck is recommended [ 118.470181][ T5243] loop3: detected capacity change from 0 to 4096 [ 118.998016][ T5243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.022386][ T3748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 119.786197][ T5264] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 119.793938][ T5264] netlink: 'syz.1.506': attribute type 2 has an invalid length. [ 120.125515][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 120.125529][ T28] audit: type=1400 audit(1780275287.183:601): avc: denied { read } for pid=5272 comm="syz.4.507" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 120.222097][ T28] audit: type=1400 audit(1780275287.183:602): avc: denied { open } for pid=5272 comm="syz.4.507" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 120.276829][ T28] audit: type=1400 audit(1780275287.221:603): avc: denied { create } for pid=5272 comm="syz.4.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 120.325013][ T28] audit: type=1400 audit(1780275287.305:604): avc: denied { name_bind } for pid=5272 comm="syz.4.507" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 120.370987][ T28] audit: type=1400 audit(1780275287.305:605): avc: denied { write } for pid=5272 comm="syz.4.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.414987][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.529231][ T5287] loop4: detected capacity change from 0 to 2048 [ 120.539355][ T5287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.562972][ T5287] ext4: Unknown parameter 'fowner<00000000000000000000' [ 120.606711][ T28] audit: type=1400 audit(1780275287.632:606): avc: denied { cpu } for pid=5279 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 120.660914][ T28] audit: type=1400 audit(1780275287.670:607): avc: denied { ioctl } for pid=5279 comm="syz.3.510" path="socket:[12069]" dev="sockfs" ino=12069 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 120.686465][ T28] audit: type=1400 audit(1780275287.670:608): avc: denied { write } for pid=5279 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 120.724390][ T5291] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 120.829652][ T5300] loop1: detected capacity change from 0 to 512 [ 120.923934][ T5300] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.513: inode has both inline data and extents flags [ 120.937040][ T5300] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.938782][ T5300] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.513: couldn't read orphan inode 15 (err -117) [ 120.947952][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 120.947967][ C1] EXT4-fs (loop1): initial error at time 1780275287: ext4_orphan_get:1397: inode 15 [ 120.947994][ C1] EXT4-fs (loop1): last error at time 1780275287: ext4_orphan_get:1397: inode 15 [ 120.984700][ T5300] loop1: lost filesystem error report for type 5 error -117 [ 120.989982][ T5300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.578124][ T5291] netlink: 'syz.0.511': attribute type 2 has an invalid length. [ 121.701334][ T28] audit: type=1400 audit(1780275288.016:609): avc: denied { write } for pid=5288 comm="syz.1.513" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.722911][ T28] audit: type=1400 audit(1780275288.016:610): avc: denied { add_name } for pid=5288 comm="syz.1.513" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.454329][ T5317] loop4: detected capacity change from 0 to 764 [ 122.711691][ T5317] __nla_validate_parse: 6 callbacks suppressed [ 122.712139][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.518'. [ 122.731704][ T5317] Symlink component flag not implemented [ 122.740268][ T5317] Symlink component flag not implemented [ 123.107361][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.280047][ T5321] loop5: detected capacity change from 0 to 164 [ 123.324399][ T5321] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 123.486219][ T5340] loop5: detected capacity change from 0 to 512 [ 123.534938][ T5340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.602610][ T5340] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.526: iget: bad i_size value: 38620345925642 [ 123.661655][ T5340] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.661809][ T5340] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.526: couldn't read orphan inode 15 (err -117) [ 123.671033][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 123.671053][ C0] EXT4-fs (loop5): initial error at time 1780275291: ext4_orphan_get:1397: inode 15 [ 123.671082][ C0] EXT4-fs (loop5): last error at time 1780275291: ext4_orphan_get:1397: inode 15 [ 123.922243][ T5355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.530'. [ 123.932816][ T5355] loop0: detected capacity change from 0 to 256 [ 124.169676][ T5340] loop5: lost filesystem error report for type 5 error -117 [ 124.197869][ T5361] loop1: detected capacity change from 0 to 512 [ 124.346192][ T5361] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.357609][ T5340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.372030][ T5361] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c098, mo2=0002] [ 124.382675][ T5361] System zones: 1-12 [ 124.388259][ T5361] EXT4-fs (loop1): 1 truncate cleaned up [ 124.419613][ T5365] FAULT_INJECTION: forcing a failure. [ 124.419613][ T5365] name failslab, interval 1, probability 0, space 0, times 0 [ 124.449636][ T5361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.468915][ T5365] CPU: 0 UID: 0 PID: 5365 Comm: syz.3.535 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.469008][ T5365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.469021][ T5365] Call Trace: [ 124.469075][ T5365] [ 124.469081][ T5365] __dump_stack+0x1d/0x30 [ 124.469122][ T5365] dump_stack_lvl+0x95/0xd0 [ 124.469140][ T5365] dump_stack+0x15/0x1b [ 124.469155][ T5365] should_fail_ex+0x263/0x280 [ 124.469175][ T5365] ? audit_log_d_path+0x8d/0x150 [ 124.469259][ T5365] should_failslab+0x8c/0xb0 [ 124.469289][ T5365] __kmalloc_cache_noprof+0x5f/0x400 [ 124.469316][ T5365] audit_log_d_path+0x8d/0x150 [ 124.469339][ T5365] audit_log_d_path_exe+0x42/0x70 [ 124.469421][ T5365] audit_log_task+0x1e8/0x250 [ 124.469486][ T5365] audit_seccomp+0x60/0x100 [ 124.469504][ T5365] ? __seccomp_filter+0x8db/0x1350 [ 124.469527][ T5365] __seccomp_filter+0x8ec/0x1350 [ 124.469629][ T5365] ? __fget_files+0x184/0x1c0 [ 124.469707][ T5365] __secure_computing+0x81/0x150 [ 124.469730][ T5365] do_syscall_64+0xce/0x3b0 [ 124.469757][ T5365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.469779][ T5365] RIP: 0033:0x7f2a7293d68e [ 124.469800][ T5365] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.469866][ T5365] RSP: 002b:00007f2a713cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.469902][ T5365] RAX: ffffffffffffffda RBX: 00007f2a713cf6c0 RCX: 00007f2a7293d68e [ 124.469916][ T5365] RDX: 000000000000000f RSI: 00007f2a713cf0a0 RDI: 0000000000000004 [ 124.469930][ T5365] RBP: 00007f2a713cf090 R08: 0000000000000000 R09: 0000000000000000 [ 124.469949][ T5365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.469961][ T5365] R13: 00007f2a72bf6038 R14: 00007f2a72bf5fa0 R15: 00007ffd54f57cc8 [ 124.469981][ T5365] [ 124.705088][ T361] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 124.726703][ T361] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 124.739608][ T361] EXT4-fs (loop5): This should not happen!! Data will be lost [ 124.739608][ T361] [ 124.749716][ T361] EXT4-fs (loop5): Total free blocks count 0 [ 124.757332][ T5372] Illegal XDP return value 4294967274 on prog (id 159) dev syz_tun, expect packet loss! [ 124.767374][ T361] EXT4-fs (loop5): Free/Dirty block details [ 124.773576][ T361] EXT4-fs (loop5): free_blocks=0 [ 124.778790][ T361] EXT4-fs (loop5): dirty_blocks=1 [ 124.791932][ T361] EXT4-fs (loop5): Block reservation details [ 124.799286][ T361] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 124.816498][ T3748] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 124.828109][ T3748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.839815][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.872453][ T5376] SELinux: syz.5.537 (5376) wrote to checkreqprot. This is no longer supported. [ 125.020659][ T5387] loop0: detected capacity change from 0 to 764 [ 125.745927][ T5398] FAULT_INJECTION: forcing a failure. [ 125.745927][ T5398] name failslab, interval 1, probability 0, space 0, times 0 [ 125.798899][ T5398] CPU: 1 UID: 0 PID: 5398 Comm: syz.4.546 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.798927][ T5398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.798959][ T5398] Call Trace: [ 125.798965][ T5398] [ 125.798972][ T5398] __dump_stack+0x1d/0x30 [ 125.798992][ T5398] dump_stack_lvl+0x95/0xd0 [ 125.799013][ T5398] dump_stack+0x15/0x1b [ 125.799028][ T5398] should_fail_ex+0x263/0x280 [ 125.799044][ T5398] ? __inet_diag_dump_start+0x53/0x850 [ 125.799063][ T5398] should_failslab+0x8c/0xb0 [ 125.799119][ T5398] __kmalloc_cache_noprof+0x5f/0x400 [ 125.799147][ T5398] __inet_diag_dump_start+0x53/0x850 [ 125.799163][ T5398] ? __rcu_read_unlock+0x33/0x70 [ 125.799305][ T5398] ? __netlink_lookup+0x276/0x2b0 [ 125.799378][ T5398] inet_diag_dump_start_compat+0x1a/0x30 [ 125.799397][ T5398] __netlink_dump_start+0x334/0x520 [ 125.799428][ T5398] inet_diag_rcv_msg_compat+0x10b/0x200 [ 125.799521][ T5398] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 125.799542][ T5398] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 125.799558][ T5398] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 125.799576][ T5398] sock_diag_rcv_msg+0x189/0x2c0 [ 125.799607][ T5398] netlink_rcv_skb+0x123/0x220 [ 125.799634][ T5398] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 125.799682][ T5398] sock_diag_rcv+0x1c/0x30 [ 125.799702][ T5398] netlink_unicast+0x5a8/0x680 [ 125.799729][ T5398] netlink_sendmsg+0x5c8/0x6f0 [ 125.799755][ T5398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.799866][ T5398] __sys_sendto+0x42e/0x490 [ 125.799896][ T5398] __x64_sys_sendto+0x76/0x90 [ 125.799949][ T5398] x64_sys_call+0x2d35/0x3020 [ 125.799968][ T5398] do_syscall_64+0x12c/0x3b0 [ 125.799993][ T5398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.800093][ T5398] RIP: 0033:0x7f71f91fce59 [ 125.800106][ T5398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.800164][ T5398] RSP: 002b:00007f71f7c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 125.800182][ T5398] RAX: ffffffffffffffda RBX: 00007f71f9475fa0 RCX: 00007f71f91fce59 [ 125.800197][ T5398] RDX: 000000000000004c RSI: 0000200000000080 RDI: 0000000000000003 [ 125.800210][ T5398] RBP: 00007f71f7c57090 R08: 0000000000000000 R09: 0000000000000000 [ 125.800298][ T5398] R10: 0000000000000810 R11: 0000000000000246 R12: 0000000000000001 [ 125.800311][ T5398] R13: 00007f71f9476038 R14: 00007f71f9475fa0 R15: 00007ffe3560ca58 [ 125.800331][ T5398] [ 126.169208][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 126.169225][ T28] audit: type=1400 audit(1780275293.806:673): avc: denied { create } for pid=5390 comm="syz.5.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 126.296727][ T5412] loop4: detected capacity change from 0 to 512 [ 126.309737][ T5412] ext4: Unknown parameter 'noacl' [ 126.557863][ T5419] loop5: detected capacity change from 0 to 512 [ 126.566438][ T5402] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 126.574315][ T5402] netlink: 'syz.1.544': attribute type 2 has an invalid length. [ 126.602876][ T5419] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 126.617969][ T5419] EXT4-fs (loop5): mount failed [ 126.626785][ T5423] netlink: 'syz.0.554': attribute type 16 has an invalid length. [ 126.636173][ T5423] netlink: 132 bytes leftover after parsing attributes in process `syz.0.554'. [ 126.873613][ T28] audit: type=1404 audit(1780275294.498:674): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 126.916407][ T28] audit: type=1400 audit(1780275294.536:675): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 126.952410][ T28] audit: type=1400 audit(1780275294.573:676): avc: denied { create } for pid=5415 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 126.989703][ T5445] bond1 (unregistering): Released all slaves [ 126.998658][ T28] audit: type=1400 audit(1780275294.611:677): avc: denied { write } for pid=5399 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 127.014806][ T28] audit: type=1400 audit(1780275294.620:678): avc: denied { read write } for pid=3748 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.022836][ T28] audit: type=1400 audit(1780275294.639:679): avc: denied { create } for pid=5449 comm="syz.5.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=0 [ 127.026109][ T28] audit: type=1400 audit(1780275294.639:680): avc: denied { create } for pid=5449 comm="syz.5.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 127.029157][ T28] audit: type=1400 audit(1780275294.648:681): avc: denied { prog_load } for pid=5449 comm="syz.5.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.033727][ T28] audit: type=1400 audit(1780275294.648:682): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.329781][ T5476] netlink: 'syz.0.572': attribute type 21 has an invalid length. [ 127.351043][ T5479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.573'. [ 127.361474][ T5480] FAULT_INJECTION: forcing a failure. [ 127.361474][ T5480] name failslab, interval 1, probability 0, space 0, times 0 [ 127.382617][ T5480] CPU: 1 UID: 0 PID: 5480 Comm: syz.5.574 Not tainted syzkaller #0 PREEMPT(lazy) [ 127.382736][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.382746][ T5480] Call Trace: [ 127.382751][ T5480] [ 127.382757][ T5480] __dump_stack+0x1d/0x30 [ 127.382776][ T5480] dump_stack_lvl+0x95/0xd0 [ 127.382793][ T5480] dump_stack+0x15/0x1b [ 127.382831][ T5480] should_fail_ex+0x263/0x280 [ 127.382852][ T5480] should_failslab+0x8c/0xb0 [ 127.382882][ T5480] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 127.382910][ T5480] ? __d_alloc+0x37/0x340 [ 127.382930][ T5480] __d_alloc+0x37/0x340 [ 127.382948][ T5480] ? number+0xa78/0xb90 [ 127.383059][ T5480] d_alloc_parallel+0x54/0xce0 [ 127.383079][ T5480] ? __d_lookup+0x316/0x340 [ 127.383180][ T5480] ? lookup_noperm_common+0x1c2/0x2a0 [ 127.383205][ T5480] ? d_lookup+0xb2/0xd0 [ 127.383229][ T5480] proc_fill_cache+0x180/0x260 [ 127.383324][ T5480] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 127.383358][ T5480] proc_map_files_readdir+0x521/0x6a0 [ 127.383403][ T5480] iterate_dir+0x114/0x330 [ 127.383426][ T5480] __se_sys_getdents64+0xd2/0x230 [ 127.383449][ T5480] ? __pfx_filldir64+0x10/0x10 [ 127.383487][ T5480] __x64_sys_getdents64+0x43/0x50 [ 127.383563][ T5480] x64_sys_call+0x2408/0x3020 [ 127.383581][ T5480] do_syscall_64+0x12c/0x3b0 [ 127.383659][ T5480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.383676][ T5480] RIP: 0033:0x7fdaf326ce59 [ 127.383769][ T5480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.383784][ T5480] RSP: 002b:00007fdaf1cbf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 127.383813][ T5480] RAX: ffffffffffffffda RBX: 00007fdaf34e5fa0 RCX: 00007fdaf326ce59 [ 127.383826][ T5480] RDX: 00000000000000eb RSI: 0000200000000000 RDI: 0000000000000006 [ 127.383840][ T5480] RBP: 00007fdaf1cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 127.383854][ T5480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.383867][ T5480] R13: 00007fdaf34e6038 R14: 00007fdaf34e5fa0 R15: 00007ffec7444db8 [ 127.383886][ T5480] [ 127.650524][ T5485] netlink: 'syz.0.575': attribute type 8 has an invalid length. [ 127.672747][ T5485] sch_fq: defrate 0 ignored. [ 127.714039][ T5489] bond1: option ad_user_port_key: invalid value (2311) [ 127.736527][ T5489] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 127.759343][ T5489] bond1 (unregistering): Released all slaves [ 127.812786][ T5500] gtp0: entered promiscuous mode [ 128.024426][ T5522] ip6tnl1: entered allmulticast mode [ 128.052506][ T5522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5522 comm=syz.5.589 [ 128.274278][ T5530] netlink: 52 bytes leftover after parsing attributes in process `syz.5.591'. [ 128.666505][ T5492] syz.4.579 (5492) used greatest stack depth: 8576 bytes left [ 128.726141][ T5538] netlink: 'syz.4.595': attribute type 1 has an invalid length. [ 128.752333][ T5538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.771541][ T5538] bond1: entered allmulticast mode [ 128.791697][ T5538] bond1: (slave ip6gretap1): making interface the new active one [ 128.809991][ T5538] ip6gretap1: entered allmulticast mode [ 128.843641][ T5538] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 129.534385][ T5574] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 129.684425][ T5578] FAULT_INJECTION: forcing a failure. [ 129.684425][ T5578] name failslab, interval 1, probability 0, space 0, times 0 [ 129.697120][ T5578] CPU: 0 UID: 0 PID: 5578 Comm: syz.0.610 Not tainted syzkaller #0 PREEMPT(lazy) [ 129.697147][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.697217][ T5578] Call Trace: [ 129.697224][ T5578] [ 129.697232][ T5578] __dump_stack+0x1d/0x30 [ 129.697256][ T5578] dump_stack_lvl+0x95/0xd0 [ 129.697292][ T5578] dump_stack+0x15/0x1b [ 129.697311][ T5578] should_fail_ex+0x263/0x280 [ 129.697332][ T5578] should_failslab+0x8c/0xb0 [ 129.697431][ T5578] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 129.697462][ T5578] ? __alloc_skb+0x2d6/0x690 [ 129.697576][ T5578] __alloc_skb+0x2d6/0x690 [ 129.697597][ T5578] ? __alloc_skb+0x200/0x690 [ 129.697673][ T5578] netlink_alloc_large_skb+0xbf/0xf0 [ 129.697698][ T5578] netlink_sendmsg+0x40c/0x6f0 [ 129.697768][ T5578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.697796][ T5578] ____sys_sendmsg+0x563/0x5b0 [ 129.697824][ T5578] ___sys_sendmsg+0x195/0x1e0 [ 129.697921][ T5578] __x64_sys_sendmsg+0xd4/0x160 [ 129.697949][ T5578] x64_sys_call+0x194c/0x3020 [ 129.698023][ T5578] do_syscall_64+0x12c/0x3b0 [ 129.698053][ T5578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.698075][ T5578] RIP: 0033:0x7ff92527ce59 [ 129.698092][ T5578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.698108][ T5578] RSP: 002b:00007ff923ccf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.698170][ T5578] RAX: ffffffffffffffda RBX: 00007ff9254f5fa0 RCX: 00007ff92527ce59 [ 129.698200][ T5578] RDX: 000000002008c010 RSI: 0000200000000200 RDI: 0000000000000004 [ 129.698214][ T5578] RBP: 00007ff923ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 129.698228][ T5578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.698241][ T5578] R13: 00007ff9254f6038 R14: 00007ff9254f5fa0 R15: 00007fff0d29a1f8 [ 129.698260][ T5578] [ 130.984414][ T5634] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 131.704232][ T28] kauditd_printk_skb: 424 callbacks suppressed [ 131.704247][ T28] audit: type=1400 audit(1780275300.014:1107): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.742358][ T28] audit: type=1400 audit(1780275300.051:1108): avc: denied { execmem } for pid=5656 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 131.811499][ T28] audit: type=1400 audit(1780275300.051:1109): avc: denied { open } for pid=5656 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 131.864192][ T28] audit: type=1400 audit(1780275300.051:1110): avc: denied { allowed } for pid=5656 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 131.916693][ T28] audit: type=1400 audit(1780275300.051:1111): avc: denied { map_create } for pid=5656 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 131.969222][ T28] audit: type=1400 audit(1780275300.108:1112): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.999430][ T28] audit: type=1400 audit(1780275300.117:1113): avc: denied { create } for pid=5658 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 132.020667][ T28] audit: type=1400 audit(1780275300.117:1114): avc: denied { create } for pid=5658 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 132.041735][ T28] audit: type=1400 audit(1780275300.117:1115): avc: denied { create } for pid=5658 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 132.063001][ T28] audit: type=1400 audit(1780275300.126:1116): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 132.342905][ T5681] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 133.547917][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'. [ 133.570032][ T5696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.640595][ T5670] syz.5.650 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 133.654768][ T5670] CPU: 0 UID: 0 PID: 5670 Comm: syz.5.650 Not tainted syzkaller #0 PREEMPT(lazy) [ 133.654796][ T5670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 133.654806][ T5670] Call Trace: [ 133.654812][ T5670] [ 133.654875][ T5670] __dump_stack+0x1d/0x30 [ 133.654899][ T5670] dump_stack_lvl+0x95/0xd0 [ 133.654915][ T5670] dump_stack+0x15/0x1b [ 133.654930][ T5670] dump_header+0x80/0x240 [ 133.654951][ T5670] oom_kill_process+0x295/0x350 [ 133.654985][ T5670] out_of_memory+0x97d/0xb80 [ 133.655015][ T5670] try_charge_memcg+0x62f/0xa10 [ 133.655039][ T5670] ? radix_tree_lookup+0xfa/0x140 [ 133.655080][ T5670] charge_memcg+0x6d/0x120 [ 133.655165][ T5670] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 133.655192][ T5670] __swap_cache_prepare_and_add+0x69/0x4a0 [ 133.655218][ T5670] ? alloc_pages_mpol+0x217/0x260 [ 133.655289][ T5670] swap_cache_alloc_folio+0xa2/0x120 [ 133.655353][ T5670] swap_cluster_readahead+0x25f/0x3c0 [ 133.655380][ T5670] swapin_readahead+0xde/0x840 [ 133.655403][ T5670] ? _raw_spin_unlock+0x9/0x30 [ 133.655460][ T5670] ? swap_put_entries_cluster+0x46c/0x490 [ 133.655480][ T5670] ? __entry_text_end+0x1d848/0x102179 [ 133.655544][ T5670] ? __rcu_read_unlock+0x4e/0x70 [ 133.655565][ T5670] ? swap_cache_get_folio+0x1e0/0x1f0 [ 133.655641][ T5670] do_swap_page+0x31e/0x2180 [ 133.655683][ T5670] ? __css_rstat_updated+0xbb/0x280 [ 133.655704][ T5670] ? __rcu_read_lock+0x36/0x50 [ 133.655724][ T5670] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 133.655747][ T5670] handle_mm_fault+0xb30/0x2e70 [ 133.655774][ T5670] ? vma_start_read+0x1c7/0x2c0 [ 133.655802][ T5670] do_user_addr_fault+0x62f/0x1050 [ 133.655831][ T5670] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 133.655852][ T5670] ? trace_page_fault_user+0x1f/0xa0 [ 133.656006][ T5670] exc_page_fault+0x62/0xa0 [ 133.656030][ T5670] asm_exc_page_fault+0x26/0x30 [ 133.656050][ T5670] RIP: 0033:0x7fdaf313a80c [ 133.656065][ T5670] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 133.656079][ T5670] RSP: 002b:00007ffec7444f20 EFLAGS: 00010202 [ 133.656170][ T5670] RAX: 0000000000000000 RBX: 00007fdaf34e6090 RCX: 00005555820bc808 [ 133.656184][ T5670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.656207][ T5670] RBP: 00007fdaf34e7da0 R08: 0000000000000000 R09: 0000000000000000 [ 133.656221][ T5670] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001f69e [ 133.656233][ T5670] R13: 00007fdaf34e618c R14: 000000000001eb18 R15: 00007fdaf34e6180 [ 133.656248][ T5670] [ 133.660841][ T5670] memory: usage 307200kB, limit 307200kB, failcnt 174 [ 133.922551][ T5670] memory+swap: usage 307976kB, limit 9007199254740988kB, failcnt 0 [ 133.930449][ T5670] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 133.937788][ T5670] Memory cgroup stats for /syz5: [ 133.937995][ T5670] cache 0 [ 133.945902][ T5670] rss 0 [ 133.948654][ T5670] shmem 0 [ 133.951571][ T5670] mapped_file 0 [ 133.955230][ T5670] dirty 0 [ 133.958162][ T5670] writeback 0 [ 133.961455][ T5670] workingset_refault_anon 24 [ 133.966296][ T5670] workingset_refault_file 0 [ 133.970867][ T5670] swap 794624 [ 133.974207][ T5670] swapcached 897024 [ 133.979854][ T5670] pgpgin 58852 [ 133.984682][ T5670] pgpgout 58851 [ 133.993365][ T5670] pgfault 80701 [ 134.000068][ T5670] pgmajfault 15 [ 134.006575][ T5670] inactive_anon 0 [ 134.028150][ T5670] active_anon 4096 [ 134.031917][ T5670] inactive_file 0 [ 134.035550][ T5670] active_file 0 [ 134.039074][ T5670] unevictable 0 [ 134.042984][ T5670] hierarchical_memory_limit 314572800 [ 134.070943][ T5670] hierarchical_memsw_limit 9223372036854771712 [ 134.077159][ T5670] total_cache 0 [ 134.080621][ T5670] total_rss 0 [ 134.083933][ T5670] total_shmem 0 [ 134.087721][ T5670] total_mapped_file 0 [ 134.091803][ T5670] total_dirty 0 [ 134.096909][ T5670] total_writeback 0 [ 134.103414][ T5670] total_workingset_refault_anon 24 [ 134.113763][ T5670] total_workingset_refault_file 0 [ 134.124445][ T5670] total_swap 794624 [ 134.130008][ T5670] total_swapcached 897024 [ 134.139067][ T5670] total_pgpgin 58852 [ 134.146123][ T5670] total_pgpgout 58851 [ 134.161963][ T5670] total_pgfault 80701 [ 134.172550][ T5670] total_pgmajfault 15 [ 134.182828][ T5670] total_inactive_anon 0 [ 134.194704][ T5670] total_active_anon 4096 [ 134.205964][ T5670] total_inactive_file 0 [ 134.215111][ T5670] total_active_file 0 [ 134.222204][ T5670] total_unevictable 0 [ 134.230872][ T5670] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.650,pid=5670,uid=0 [ 134.256750][ T5712] netlink: 140 bytes leftover after parsing attributes in process `syz.4.663'. [ 134.268885][ T5670] Memory cgroup out of memory: Killed process 5670 (syz.5.650) total-vm:94300kB, anon-rss:1232kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 134.470487][ T5725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'. [ 134.512274][ T5725] bond2: Unable to set down delay as MII monitoring is disabled [ 134.567357][ T5725] bond2 (unregistering): Released all slaves [ 134.950173][ T5753] FAULT_INJECTION: forcing a failure. [ 134.950173][ T5753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.963772][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz.1.678 Not tainted syzkaller #0 PREEMPT(lazy) [ 134.963798][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.963884][ T5753] Call Trace: [ 134.963890][ T5753] [ 134.963897][ T5753] __dump_stack+0x1d/0x30 [ 134.963925][ T5753] dump_stack_lvl+0x95/0xd0 [ 134.963947][ T5753] dump_stack+0x15/0x1b [ 134.963966][ T5753] should_fail_ex+0x263/0x280 [ 134.963987][ T5753] should_fail+0xb/0x20 [ 134.964004][ T5753] should_fail_usercopy+0x1a/0x20 [ 134.964021][ T5753] _copy_to_user+0x20/0xa0 [ 134.964127][ T5753] copy_siginfo_to_user+0x22/0xb0 [ 134.964152][ T5753] x64_setup_rt_frame+0x2b4/0x4e0 [ 134.964176][ T5753] arch_do_signal_or_restart+0x27c/0x480 [ 134.964206][ T5753] exit_to_user_mode_loop+0x6f/0x820 [ 134.964309][ T5753] do_syscall_64+0x232/0x3b0 [ 134.964339][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.964388][ T5753] RIP: 0033:0x7faf1954ce59 [ 134.964401][ T5753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.964414][ T5753] RSP: 002b:00007faf17fa7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 134.964431][ T5753] RAX: 0000000000000030 RBX: 00007faf197c5fa0 RCX: 00007faf1954ce59 [ 134.964489][ T5753] RDX: 00000000000000eb RSI: 0000200000000000 RDI: 0000000000000006 [ 134.964502][ T5753] RBP: 00007faf17fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.964515][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.964525][ T5753] R13: 00007faf197c6038 R14: 00007faf197c5fa0 R15: 00007ffc3a937e78 [ 134.964541][ T5753] [ 135.305809][ T5781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.687'. [ 135.394152][ T5791] netlink: 'syz.1.694': attribute type 4 has an invalid length. [ 135.401961][ T5791] netlink: 152 bytes leftover after parsing attributes in process `syz.1.694'. [ 135.415978][ T5791] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 135.625786][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 135.931785][ T5818] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 136.070154][ T5829] netlink: 140 bytes leftover after parsing attributes in process `syz.4.712'. [ 136.364887][ T5855] netlink: 140 bytes leftover after parsing attributes in process `syz.3.723'. [ 136.573038][ T5866] netlink: 52 bytes leftover after parsing attributes in process `syz.3.726'. [ 136.599473][ T5878] bridge0: port 2(bridge_slave_1) entered listening state [ 136.778877][ T5894] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 136.988962][ T5907] syz_tun: entered promiscuous mode [ 137.001475][ T5907] macvtap1: entered promiscuous mode [ 137.014392][ T5907] macvtap1: entered allmulticast mode [ 137.032539][ T5907] syz_tun: entered allmulticast mode [ 137.049475][ T5907] syz_tun: left allmulticast mode [ 137.055519][ T5907] syz_tun: left promiscuous mode [ 137.121683][ T28] kauditd_printk_skb: 664 callbacks suppressed [ 137.121699][ T28] audit: type=1400 audit(1780275305.084:1781): avc: denied { read write } for pid=3748 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 137.190399][ T28] audit: type=1400 audit(1780275305.112:1782): avc: denied { allowed } for pid=5909 comm="syz.5.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 137.250403][ T5914] netlink: 40 bytes leftover after parsing attributes in process `syz.5.748'. [ 137.259330][ T28] audit: type=1400 audit(1780275305.112:1783): avc: denied { create } for pid=5909 comm="syz.5.746" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 137.323937][ T28] audit: type=1400 audit(1780275305.121:1784): avc: denied { read write } for pid=3748 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 137.387985][ T28] audit: type=1400 audit(1780275305.140:1785): avc: denied { execmem } for pid=5911 comm="syz.5.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 137.440867][ T28] audit: type=1400 audit(1780275305.140:1786): avc: denied { open } for pid=5911 comm="syz.5.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 137.484419][ T28] audit: type=1400 audit(1780275305.140:1787): avc: denied { allowed } for pid=5911 comm="syz.5.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 137.532692][ T28] audit: type=1400 audit(1780275305.140:1788): avc: denied { map_create } for pid=5911 comm="syz.5.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 137.582322][ T28] audit: type=1400 audit(1780275305.196:1789): avc: denied { read write } for pid=3748 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 137.653768][ T28] audit: type=1400 audit(1780275305.205:1790): avc: denied { open } for pid=5913 comm="syz.5.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 138.561692][ T5948] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 138.611256][ T5950] netlink: 'syz.1.761': attribute type 1 has an invalid length. [ 138.652579][ T5950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.688490][ T5952] veth3: entered allmulticast mode [ 138.756252][ T5952] bond1: (slave veth3): Enslaving as an active interface with a down link [ 138.843141][ T5950] bond1: entered promiscuous mode [ 138.861828][ T5950] bond1: entered allmulticast mode [ 138.925604][ T5950] macvlan2: entered promiscuous mode [ 138.955920][ T5950] macvlan2: entered allmulticast mode [ 138.978337][ T5950] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 139.198626][ T5955] FAULT_INJECTION: forcing a failure. [ 139.198626][ T5955] name failslab, interval 1, probability 0, space 0, times 0 [ 139.245228][ T5955] CPU: 0 UID: 0 PID: 5955 Comm: syz.1.762 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.245256][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.245313][ T5955] Call Trace: [ 139.245320][ T5955] [ 139.245339][ T5955] __dump_stack+0x1d/0x30 [ 139.245401][ T5955] dump_stack_lvl+0x95/0xd0 [ 139.245443][ T5955] dump_stack+0x15/0x1b [ 139.245461][ T5955] should_fail_ex+0x263/0x280 [ 139.245482][ T5955] should_failslab+0x8c/0xb0 [ 139.245513][ T5955] kmem_cache_alloc_noprof+0x66/0x3f0 [ 139.245644][ T5955] ? do_getname+0x2e/0x1c0 [ 139.245664][ T5955] do_getname+0x2e/0x1c0 [ 139.245682][ T5955] getname_flags+0x1d/0x30 [ 139.245764][ T5955] do_sys_openat2+0x60/0x130 [ 139.245783][ T5955] __x64_sys_openat+0xf2/0x120 [ 139.245802][ T5955] x64_sys_call+0x1e39/0x3020 [ 139.245901][ T5955] do_syscall_64+0x12c/0x3b0 [ 139.245926][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.245944][ T5955] RIP: 0033:0x7faf1954ce59 [ 139.246020][ T5955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.246092][ T5955] RSP: 002b:00007faf17fa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.246112][ T5955] RAX: ffffffffffffffda RBX: 00007faf197c5fa0 RCX: 00007faf1954ce59 [ 139.246196][ T5955] RDX: 00000000001c1202 RSI: 0000200000004400 RDI: ffffffffffffff9c [ 139.246208][ T5955] RBP: 00007faf17fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.246220][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.246233][ T5955] R13: 00007faf197c6038 R14: 00007faf197c5fa0 R15: 00007ffc3a937e78 [ 139.246253][ T5955] [ 139.722306][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 140.020083][ T5979] syzkaller0: entered promiscuous mode [ 140.036208][ T5979] syzkaller0: entered allmulticast mode [ 140.195281][ T5982] FAULT_INJECTION: forcing a failure. [ 140.195281][ T5982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.260798][ T5982] CPU: 0 UID: 0 PID: 5982 Comm: syz.1.773 Not tainted syzkaller #0 PREEMPT(lazy) [ 140.260946][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.260977][ T5982] Call Trace: [ 140.261016][ T5982] [ 140.261024][ T5982] __dump_stack+0x1d/0x30 [ 140.261047][ T5982] dump_stack_lvl+0x95/0xd0 [ 140.261064][ T5982] dump_stack+0x15/0x1b [ 140.261080][ T5982] should_fail_ex+0x263/0x280 [ 140.261100][ T5982] should_fail+0xb/0x20 [ 140.261131][ T5982] should_fail_usercopy+0x1a/0x20 [ 140.261153][ T5982] _copy_to_user+0x20/0xa0 [ 140.261177][ T5982] simple_read_from_buffer+0xb5/0x130 [ 140.261218][ T5982] proc_fail_nth_read+0x10e/0x150 [ 140.261243][ T5982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.261265][ T5982] vfs_read+0x1ab/0x7f0 [ 140.261286][ T5982] ? __rcu_read_unlock+0x4e/0x70 [ 140.261378][ T5982] ? __fget_files+0x184/0x1c0 [ 140.261396][ T5982] ? mutex_lock+0x57/0x90 [ 140.261424][ T5982] ksys_read+0xdc/0x1a0 [ 140.261448][ T5982] __x64_sys_read+0x40/0x50 [ 140.261473][ T5982] x64_sys_call+0x2886/0x3020 [ 140.261518][ T5982] do_syscall_64+0x12c/0x3b0 [ 140.261547][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.261566][ T5982] RIP: 0033:0x7faf1950d68e [ 140.261580][ T5982] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.261630][ T5982] RSP: 002b:00007faf17fa6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.261648][ T5982] RAX: ffffffffffffffda RBX: 00007faf17fa76c0 RCX: 00007faf1950d68e [ 140.261659][ T5982] RDX: 000000000000000f RSI: 00007faf17fa70a0 RDI: 0000000000000004 [ 140.261669][ T5982] RBP: 00007faf17fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 140.261680][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.261690][ T5982] R13: 00007faf197c6038 R14: 00007faf197c5fa0 R15: 00007ffc3a937e78 [ 140.261758][ T5982] [ 140.488793][ T5990] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 140.522127][ T5991] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 140.657982][ T5996] netlink: 'syz.1.779': attribute type 2 has an invalid length. [ 140.677890][ T5996] netlink: 119 bytes leftover after parsing attributes in process `syz.1.779'. [ 140.764423][ T6009] netlink: 140 bytes leftover after parsing attributes in process `syz.3.785'. [ 140.902507][ T6014] ipvlan2: entered promiscuous mode [ 140.922208][ T6014] team0: Device ipvlan2 failed to register rx_handler [ 141.381764][ T6032] FAULT_INJECTION: forcing a failure. [ 141.381764][ T6032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.395288][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: syz.5.794 Not tainted syzkaller #0 PREEMPT(lazy) [ 141.395314][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.395382][ T6032] Call Trace: [ 141.395462][ T6032] [ 141.395470][ T6032] __dump_stack+0x1d/0x30 [ 141.395494][ T6032] dump_stack_lvl+0x95/0xd0 [ 141.395513][ T6032] dump_stack+0x15/0x1b [ 141.395528][ T6032] should_fail_ex+0x263/0x280 [ 141.395687][ T6032] should_fail+0xb/0x20 [ 141.395701][ T6032] should_fail_usercopy+0x1a/0x20 [ 141.395718][ T6032] strncpy_from_user+0x27/0x250 [ 141.395745][ T6032] ? __fget_files+0x184/0x1c0 [ 141.395765][ T6032] __se_sys_add_key+0x86/0x360 [ 141.395818][ T6032] __x64_sys_add_key+0x67/0x80 [ 141.395839][ T6032] x64_sys_call+0xb39/0x3020 [ 141.395862][ T6032] do_syscall_64+0x12c/0x3b0 [ 141.395935][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.395958][ T6032] RIP: 0033:0x7fdaf326ce59 [ 141.395976][ T6032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.396036][ T6032] RSP: 002b:00007fdaf1cbf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 141.396057][ T6032] RAX: ffffffffffffffda RBX: 00007fdaf34e5fa0 RCX: 00007fdaf326ce59 [ 141.396154][ T6032] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 141.396167][ T6032] RBP: 00007fdaf1cbf090 R08: ffffffffffffffff R09: 0000000000000000 [ 141.396178][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.396188][ T6032] R13: 00007fdaf34e6038 R14: 00007fdaf34e5fa0 R15: 00007ffec7444db8 [ 141.396258][ T6032] [ 141.699965][ T6052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9488 sclass=netlink_route_socket pid=6052 comm=syz.5.801 [ 141.820107][ T6064] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 141.843921][ T6064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.885101][ T6068] bond1: entered allmulticast mode [ 141.915969][ T6064] bond1: (slave ip6gretap1): making interface the new active one [ 141.926320][ T6064] ip6gretap1: entered allmulticast mode [ 141.937731][ T6064] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 142.017079][ T6078] FAULT_INJECTION: forcing a failure. [ 142.017079][ T6078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.034624][ T6078] CPU: 0 UID: 0 PID: 6078 Comm: syz.5.812 Not tainted syzkaller #0 PREEMPT(lazy) [ 142.034649][ T6078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.034737][ T6078] Call Trace: [ 142.034744][ T6078] [ 142.034751][ T6078] __dump_stack+0x1d/0x30 [ 142.034772][ T6078] dump_stack_lvl+0x95/0xd0 [ 142.034788][ T6078] dump_stack+0x15/0x1b [ 142.034804][ T6078] should_fail_ex+0x263/0x280 [ 142.034822][ T6078] should_fail+0xb/0x20 [ 142.034839][ T6078] should_fail_usercopy+0x1a/0x20 [ 142.034861][ T6078] _copy_to_user+0x20/0xa0 [ 142.034907][ T6078] simple_read_from_buffer+0xb5/0x130 [ 142.034980][ T6078] proc_fail_nth_read+0x10e/0x150 [ 142.035003][ T6078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.035025][ T6078] vfs_read+0x1ab/0x7f0 [ 142.035062][ T6078] ? __rcu_read_unlock+0x4e/0x70 [ 142.035094][ T6078] ? __fget_files+0x184/0x1c0 [ 142.035111][ T6078] ? mutex_lock+0x57/0x90 [ 142.035130][ T6078] ksys_read+0xdc/0x1a0 [ 142.035152][ T6078] __x64_sys_read+0x40/0x50 [ 142.035179][ T6078] x64_sys_call+0x2886/0x3020 [ 142.035198][ T6078] do_syscall_64+0x12c/0x3b0 [ 142.035221][ T6078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.035242][ T6078] RIP: 0033:0x7fdaf322d68e [ 142.035318][ T6078] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.035384][ T6078] RSP: 002b:00007fdaf1cbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.035403][ T6078] RAX: ffffffffffffffda RBX: 00007fdaf1cbf6c0 RCX: 00007fdaf322d68e [ 142.035416][ T6078] RDX: 000000000000000f RSI: 00007fdaf1cbf0a0 RDI: 0000000000000003 [ 142.035429][ T6078] RBP: 00007fdaf1cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 142.035442][ T6078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.035510][ T6078] R13: 00007fdaf34e6038 R14: 00007fdaf34e5fa0 R15: 00007ffec7444db8 [ 142.035529][ T6078] [ 142.477664][ T28] kauditd_printk_skb: 401 callbacks suppressed [ 142.477677][ T28] audit: type=1400 audit(1780275310.098:2192): avc: denied { read write } for pid=3748 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 142.521481][ T28] audit: type=1400 audit(1780275310.135:2193): avc: denied { allowed } for pid=6101 comm="syz.5.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 142.574199][ T28] audit: type=1400 audit(1780275310.154:2194): avc: denied { create } for pid=6101 comm="syz.5.822" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 142.603866][ T28] audit: type=1400 audit(1780275310.172:2195): avc: denied { read write } for pid=3748 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 142.629459][ T28] audit: type=1400 audit(1780275310.182:2196): avc: denied { create } for pid=6103 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 142.675081][ T28] audit: type=1400 audit(1780275310.182:2197): avc: denied { create } for pid=6103 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 142.714687][ T28] audit: type=1400 audit(1780275310.182:2198): avc: denied { prog_load } for pid=6103 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 142.751197][ T28] audit: type=1400 audit(1780275310.182:2199): avc: denied { map_create } for pid=6103 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 142.787621][ T28] audit: type=1400 audit(1780275310.182:2200): avc: denied { prog_load } for pid=6103 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 142.825750][ T28] audit: type=1400 audit(1780275310.182:2201): avc: denied { prog_load } for pid=6103 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.098276][ T6146] netlink: 'syz.5.836': attribute type 4 has an invalid length. [ 143.106083][ T6146] netlink: 152 bytes leftover after parsing attributes in process `syz.5.836'. [ 143.132343][ T6146] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 143.238262][ T6152] netlink: 48 bytes leftover after parsing attributes in process `syz.0.842'. [ 145.423640][ T6169] xt_CT: No such helper "snmp_trap" [ 145.623049][ T6180] netlink: 52 bytes leftover after parsing attributes in process `syz.4.850'. [ 145.668090][ T6188] netlink: 48 bytes leftover after parsing attributes in process `syz.0.853'. [ 145.722423][ T6190] FAULT_INJECTION: forcing a failure. [ 145.722423][ T6190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.748034][ T6190] CPU: 1 UID: 0 PID: 6190 Comm: syz.0.854 Not tainted syzkaller #0 PREEMPT(lazy) [ 145.748057][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.748070][ T6190] Call Trace: [ 145.748077][ T6190] [ 145.748163][ T6190] __dump_stack+0x1d/0x30 [ 145.748184][ T6190] dump_stack_lvl+0x95/0xd0 [ 145.748201][ T6190] dump_stack+0x15/0x1b [ 145.748305][ T6190] should_fail_ex+0x263/0x280 [ 145.748397][ T6190] should_fail+0xb/0x20 [ 145.748414][ T6190] should_fail_usercopy+0x1a/0x20 [ 145.748436][ T6190] strncpy_from_user+0x27/0x250 [ 145.748553][ T6190] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 145.748584][ T6190] do_getname+0x59/0x1c0 [ 145.748601][ T6190] getname_flags+0x1d/0x30 [ 145.748620][ T6190] do_sys_openat2+0x60/0x130 [ 145.748641][ T6190] __x64_sys_openat+0xf2/0x120 [ 145.748660][ T6190] x64_sys_call+0x1e39/0x3020 [ 145.748680][ T6190] do_syscall_64+0x12c/0x3b0 [ 145.748738][ T6190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.748760][ T6190] RIP: 0033:0x7ff92527ce59 [ 145.748776][ T6190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.748791][ T6190] RSP: 002b:00007ff923ccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 145.748808][ T6190] RAX: ffffffffffffffda RBX: 00007ff9254f5fa0 RCX: 00007ff92527ce59 [ 145.748884][ T6190] RDX: 00000000001c1202 RSI: 0000200000004400 RDI: ffffffffffffff9c [ 145.748897][ T6190] RBP: 00007ff923ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 145.748953][ T6190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.748963][ T6190] R13: 00007ff9254f6038 R14: 00007ff9254f5fa0 R15: 00007fff0d29a1f8 [ 145.749039][ T6190] [ 146.229551][ T6223] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 147.205029][ T6273] veth0_vlan: entered allmulticast mode [ 147.251366][ T6278] capability: warning: `syz.1.890' uses 32-bit capabilities (legacy support in use) [ 148.144377][ T28] kauditd_printk_skb: 452 callbacks suppressed [ 148.144448][ T28] audit: type=1400 audit(1780275315.392:2654): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.188065][ T28] audit: type=1400 audit(1780275315.420:2655): avc: denied { execmem } for pid=6289 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 148.226935][ T28] audit: type=1400 audit(1780275315.420:2656): avc: denied { allowed } for pid=6289 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 148.268123][ T28] audit: type=1400 audit(1780275315.439:2657): avc: denied { map_create } for pid=6289 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 148.325555][ T28] audit: type=1400 audit(1780275315.439:2658): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.392664][ T6299] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 148.394726][ T28] audit: type=1400 audit(1780275315.457:2659): avc: denied { read write } for pid=6291 comm="syz.1.895" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.435143][ T6301] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.899'. [ 148.440300][ T28] audit: type=1400 audit(1780275315.467:2660): avc: denied { execmem } for pid=6291 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 148.495399][ T28] audit: type=1400 audit(1780275315.467:2661): avc: denied { open } for pid=6291 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 148.515097][ T28] audit: type=1400 audit(1780275315.467:2662): avc: denied { prog_load } for pid=6291 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 148.534520][ T28] audit: type=1400 audit(1780275315.485:2663): avc: denied { create } for pid=6291 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 148.565893][ T6307] netlink: 60 bytes leftover after parsing attributes in process `syz.3.901'. [ 148.675920][ T6320] bond2: option ad_user_port_key: invalid value (2311) [ 148.686881][ T6320] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 148.710765][ T6320] bond2 (unregistering): Released all slaves [ 148.904282][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.921632][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.215103][ T6366] FAULT_INJECTION: forcing a failure. [ 149.215103][ T6366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.215131][ T6366] CPU: 0 UID: 0 PID: 6366 Comm: syz.1.927 Not tainted syzkaller #0 PREEMPT(lazy) [ 149.215156][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.215184][ T6366] Call Trace: [ 149.215190][ T6366] [ 149.215197][ T6366] __dump_stack+0x1d/0x30 [ 149.215220][ T6366] dump_stack_lvl+0x95/0xd0 [ 149.215239][ T6366] dump_stack+0x15/0x1b [ 149.215321][ T6366] should_fail_ex+0x263/0x280 [ 149.215340][ T6366] should_fail+0xb/0x20 [ 149.215357][ T6366] should_fail_usercopy+0x1a/0x20 [ 149.215406][ T6366] copy_folio_from_iter_atomic+0x24d/0x10b0 [ 149.215468][ T6366] ? shmem_write_begin+0xfc/0x1f0 [ 149.215514][ T6366] ? shmem_write_begin+0x135/0x1f0 [ 149.215551][ T6366] generic_perform_write+0x2c1/0x490 [ 149.215574][ T6366] shmem_file_write_iter+0xc5/0xf0 [ 149.215635][ T6366] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 149.215659][ T6366] vfs_write+0x5a6/0x9f0 [ 149.215699][ T6366] ksys_write+0xdc/0x1a0 [ 149.215789][ T6366] __x64_sys_write+0x40/0x50 [ 149.215814][ T6366] x64_sys_call+0x27e1/0x3020 [ 149.215836][ T6366] do_syscall_64+0x12c/0x3b0 [ 149.215919][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.215985][ T6366] RIP: 0033:0x7faf1950d68e [ 149.216000][ T6366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.216017][ T6366] RSP: 002b:00007faf17fa6da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.216036][ T6366] RAX: ffffffffffffffda RBX: 00007faf17fa76c0 RCX: 00007faf1950d68e [ 149.216069][ T6366] RDX: 0000000000040000 RSI: 00007faf0fb87000 RDI: 0000000000000004 [ 149.216081][ T6366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.216093][ T6366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 149.216105][ T6366] R13: 00007faf17fa6ee0 R14: 00007faf17fa6ea0 R15: 00007faf0fb87000 [ 149.216124][ T6366] [ 149.315436][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 149.536345][ T6393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.536358][ T6393] IPv6: NLM_F_CREATE should be set when creating new route [ 149.536366][ T6393] IPv6: NLM_F_CREATE should be set when creating new route [ 149.783136][ T6401] netlink: 'syz.3.939': attribute type 4 has an invalid length. [ 149.783154][ T6401] netlink: 152 bytes leftover after parsing attributes in process `syz.3.939'. [ 151.802105][ T6445] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 152.768338][ T6475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.970'. [ 152.897284][ T6481] FAULT_INJECTION: forcing a failure. [ 152.897284][ T6481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.947600][ T6481] CPU: 1 UID: 0 PID: 6481 Comm: syz.1.971 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.947665][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.947676][ T6481] Call Trace: [ 152.947682][ T6481] [ 152.947689][ T6481] __dump_stack+0x1d/0x30 [ 152.947709][ T6481] dump_stack_lvl+0x95/0xd0 [ 152.947725][ T6481] dump_stack+0x15/0x1b [ 152.947782][ T6481] should_fail_ex+0x263/0x280 [ 152.947799][ T6481] should_fail+0xb/0x20 [ 152.947813][ T6481] should_fail_usercopy+0x1a/0x20 [ 152.947905][ T6481] _copy_to_user+0x20/0xa0 [ 152.947929][ T6481] simple_read_from_buffer+0xb5/0x130 [ 152.947962][ T6481] proc_fail_nth_read+0x10e/0x150 [ 152.947987][ T6481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.948060][ T6481] vfs_read+0x1ab/0x7f0 [ 152.948090][ T6481] ? __rcu_read_unlock+0x4e/0x70 [ 152.948125][ T6481] ? __fget_files+0x184/0x1c0 [ 152.948141][ T6481] ? mutex_lock+0x57/0x90 [ 152.948160][ T6481] ksys_read+0xdc/0x1a0 [ 152.948198][ T6481] __x64_sys_read+0x40/0x50 [ 152.948224][ T6481] x64_sys_call+0x2886/0x3020 [ 152.948248][ T6481] do_syscall_64+0x12c/0x3b0 [ 152.948273][ T6481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.948380][ T6481] RIP: 0033:0x7faf1950d68e [ 152.948510][ T6481] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 152.948524][ T6481] RSP: 002b:00007faf17f85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.948542][ T6481] RAX: ffffffffffffffda RBX: 00007faf17f866c0 RCX: 00007faf1950d68e [ 152.948605][ T6481] RDX: 000000000000000f RSI: 00007faf17f860a0 RDI: 0000000000000005 [ 152.948619][ T6481] RBP: 00007faf17f86090 R08: 0000000000000000 R09: 0000000000000000 [ 152.948635][ T6481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.948649][ T6481] R13: 00007faf197c6128 R14: 00007faf197c6090 R15: 00007ffc3a937e78 [ 152.948665][ T6481] [ 154.726468][ T28] kauditd_printk_skb: 553 callbacks suppressed [ 154.726484][ T28] audit: type=1400 audit(1780275321.556:3217): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 154.781799][ T28] audit: type=1400 audit(1780275321.594:3218): avc: denied { execmem } for pid=6489 comm="syz.4.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 154.839811][ T28] audit: type=1400 audit(1780275321.603:3219): avc: denied { open } for pid=6489 comm="syz.4.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 154.895874][ T28] audit: type=1400 audit(1780275321.603:3220): avc: denied { allowed } for pid=6489 comm="syz.4.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 154.895898][ T28] audit: type=1400 audit(1780275321.603:3221): avc: denied { map_create } for pid=6489 comm="syz.4.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 154.895919][ T28] audit: type=1400 audit(1780275321.622:3222): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 154.895972][ T28] audit: type=1400 audit(1780275321.650:3223): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.170829][ T28] audit: type=1400 audit(1780275321.968:3224): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.242817][ T28] audit: type=1400 audit(1780275322.005:3225): avc: denied { open } for pid=6498 comm="syz.4.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 155.297326][ T28] audit: type=1400 audit(1780275322.005:3226): avc: denied { create } for pid=6498 comm="syz.4.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 156.501567][ T6527] netlink: 140 bytes leftover after parsing attributes in process `syz.1.990'. [ 156.566252][ T6530] macsec1: entered promiscuous mode [ 156.571596][ T6530] dummy0: entered promiscuous mode [ 156.589028][ T6530] macsec1: entered allmulticast mode [ 156.598355][ T6530] dummy0: entered allmulticast mode [ 156.656497][ T6542] netlink: 48 bytes leftover after parsing attributes in process `syz.4.995'. [ 157.065591][ T6563] bond1: option ad_user_port_key: invalid value (2311) [ 157.096039][ T6563] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 157.121926][ T6563] bond1 (unregistering): Released all slaves [ 159.097259][ T6607] FAULT_INJECTION: forcing a failure. [ 159.097259][ T6607] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 159.126512][ T6607] CPU: 1 UID: 0 PID: 6607 Comm: syz.5.1018 Not tainted syzkaller #0 PREEMPT(lazy) [ 159.126542][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.126554][ T6607] Call Trace: [ 159.126560][ T6607] [ 159.126567][ T6607] __dump_stack+0x1d/0x30 [ 159.126587][ T6607] dump_stack_lvl+0x95/0xd0 [ 159.126638][ T6607] dump_stack+0x15/0x1b [ 159.126656][ T6607] should_fail_ex+0x263/0x280 [ 159.126725][ T6607] should_fail_alloc_page+0xf2/0x100 [ 159.126762][ T6607] __alloc_frozen_pages_noprof+0x108/0x350 [ 159.126865][ T6607] alloc_pages_mpol+0xb3/0x260 [ 159.126933][ T6607] folio_alloc_mpol_noprof+0x39/0x80 [ 159.127018][ T6607] shmem_get_folio_gfp+0x3da/0xd60 [ 159.127080][ T6607] shmem_write_begin+0xfc/0x1f0 [ 159.127100][ T6607] generic_perform_write+0x183/0x490 [ 159.127182][ T6607] shmem_file_write_iter+0xc5/0xf0 [ 159.127203][ T6607] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 159.127223][ T6607] vfs_write+0x5a6/0x9f0 [ 159.127319][ T6607] ksys_write+0xdc/0x1a0 [ 159.127346][ T6607] __x64_sys_write+0x40/0x50 [ 159.127371][ T6607] x64_sys_call+0x27e1/0x3020 [ 159.127473][ T6607] do_syscall_64+0x12c/0x3b0 [ 159.127577][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.127599][ T6607] RIP: 0033:0x7fdaf322d68e [ 159.127615][ T6607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 159.127683][ T6607] RSP: 002b:00007fdaf1cbeda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.127700][ T6607] RAX: ffffffffffffffda RBX: 00007fdaf1cbf6c0 RCX: 00007fdaf322d68e [ 159.127713][ T6607] RDX: 0000000000040000 RSI: 00007fdae989f000 RDI: 0000000000000004 [ 159.127752][ T6607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.127762][ T6607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 159.127772][ T6607] R13: 00007fdaf1cbeee0 R14: 00007fdaf1cbeea0 R15: 00007fdae989f000 [ 159.127821][ T6607] [ 160.090790][ T28] kauditd_printk_skb: 267 callbacks suppressed [ 160.090805][ T28] audit: type=1400 audit(1780275328.568:3494): avc: denied { checkpoint_restore } for pid=6612 comm="syz.3.1020" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 160.139394][ T28] audit: type=1400 audit(1780275328.596:3495): avc: denied { create } for pid=6612 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 160.190675][ T28] audit: type=1400 audit(1780275328.661:3496): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 160.198578][ T6615] FAULT_INJECTION: forcing a failure. [ 160.198578][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 160.246148][ T6615] CPU: 1 UID: 0 PID: 6615 Comm: syz.3.1021 Not tainted syzkaller #0 PREEMPT(lazy) [ 160.246231][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.246243][ T6615] Call Trace: [ 160.246264][ T6615] [ 160.246272][ T6615] __dump_stack+0x1d/0x30 [ 160.246297][ T6615] dump_stack_lvl+0x95/0xd0 [ 160.246315][ T6615] dump_stack+0x15/0x1b [ 160.246353][ T6615] should_fail_ex+0x263/0x280 [ 160.246372][ T6615] ? __tcf_chain_get+0x91/0x270 [ 160.246396][ T6615] should_failslab+0x8c/0xb0 [ 160.246464][ T6615] __kmalloc_cache_noprof+0x5f/0x400 [ 160.246498][ T6615] __tcf_chain_get+0x91/0x270 [ 160.246522][ T6615] tc_new_tfilter+0x60d/0x1200 [ 160.246602][ T6615] ? __pfx_tc_new_tfilter+0x10/0x10 [ 160.246624][ T6615] rtnetlink_rcv_msg+0x64b/0x720 [ 160.246723][ T6615] netlink_rcv_skb+0x123/0x220 [ 160.246808][ T6615] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.246841][ T6615] rtnetlink_rcv+0x1c/0x30 [ 160.246917][ T6615] netlink_unicast+0x5a8/0x680 [ 160.247000][ T6615] netlink_sendmsg+0x5c8/0x6f0 [ 160.247026][ T6615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.247051][ T6615] ____sys_sendmsg+0x563/0x5b0 [ 160.247124][ T6615] ___sys_sendmsg+0x195/0x1e0 [ 160.247188][ T6615] __x64_sys_sendmsg+0xd4/0x160 [ 160.247289][ T6615] x64_sys_call+0x194c/0x3020 [ 160.247339][ T6615] do_syscall_64+0x12c/0x3b0 [ 160.247364][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.247382][ T6615] RIP: 0033:0x7f2a7297ce59 [ 160.247417][ T6615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.247434][ T6615] RSP: 002b:00007f2a713cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.247454][ T6615] RAX: ffffffffffffffda RBX: 00007f2a72bf5fa0 RCX: 00007f2a7297ce59 [ 160.247495][ T6615] RDX: 000000002008c010 RSI: 0000200000000200 RDI: 0000000000000004 [ 160.247512][ T6615] RBP: 00007f2a713cf090 R08: 0000000000000000 R09: 0000000000000000 [ 160.247525][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.247539][ T6615] R13: 00007f2a72bf6038 R14: 00007f2a72bf5fa0 R15: 00007ffd54f57cc8 [ 160.247558][ T6615] [ 160.519684][ T28] audit: type=1400 audit(1780275328.961:3497): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 160.616090][ T28] audit: type=1400 audit(1780275329.054:3498): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 160.652287][ T28] audit: type=1400 audit(1780275329.092:3499): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 160.690655][ T28] audit: type=1400 audit(1780275329.138:3500): avc: denied { execmem } for pid=6618 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 160.713043][ T28] audit: type=1400 audit(1780275329.148:3501): avc: denied { map_create } for pid=6620 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 160.767053][ T28] audit: type=1400 audit(1780275329.148:3502): avc: denied { prog_load } for pid=6620 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 160.771669][ T6627] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1026'. [ 160.796373][ T6628] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 160.820361][ T28] audit: type=1400 audit(1780275329.157:3503): avc: denied { read write } for pid=6620 comm="syz.3.1024" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.088757][ T6657] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1037'. [ 162.131435][ T6659] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 162.155400][ T6659] syzkaller0: entered promiscuous mode [ 162.165896][ T6659] syzkaller0: entered allmulticast mode [ 162.441514][ T6670] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 162.724107][ T6686] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1049'. [ 163.184789][ T6710] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1060'. [ 163.815202][ T6740] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1072'. [ 163.994610][ T6750] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 164.762128][ T6771] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1084'. [ 164.884668][ T6778] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1097'. [ 164.905198][ T6778] FAULT_INJECTION: forcing a failure. [ 164.905198][ T6778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.927092][ T6778] CPU: 0 UID: 0 PID: 6778 Comm: syz.0.1097 Not tainted syzkaller #0 PREEMPT(lazy) [ 164.927118][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.927176][ T6778] Call Trace: [ 164.927182][ T6778] [ 164.927189][ T6778] __dump_stack+0x1d/0x30 [ 164.927210][ T6778] dump_stack_lvl+0x95/0xd0 [ 164.927301][ T6778] dump_stack+0x15/0x1b [ 164.927316][ T6778] should_fail_ex+0x263/0x280 [ 164.927344][ T6778] should_fail+0xb/0x20 [ 164.927423][ T6778] should_fail_usercopy+0x1a/0x20 [ 164.927443][ T6778] _copy_to_user+0x20/0xa0 [ 164.927467][ T6778] simple_read_from_buffer+0xb5/0x130 [ 164.927545][ T6778] proc_fail_nth_read+0x10e/0x150 [ 164.927572][ T6778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.927595][ T6778] vfs_read+0x1ab/0x7f0 [ 164.927646][ T6778] ? __rcu_read_unlock+0x4e/0x70 [ 164.927716][ T6778] ? __fget_files+0x184/0x1c0 [ 164.927734][ T6778] ? mutex_lock+0x57/0x90 [ 164.927762][ T6778] ksys_read+0xdc/0x1a0 [ 164.927783][ T6778] __x64_sys_read+0x40/0x50 [ 164.927823][ T6778] x64_sys_call+0x2886/0x3020 [ 164.927842][ T6778] do_syscall_64+0x12c/0x3b0 [ 164.927866][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.927956][ T6778] RIP: 0033:0x7ff92523d68e [ 164.927997][ T6778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.928020][ T6778] RSP: 002b:00007ff923ccefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.928041][ T6778] RAX: ffffffffffffffda RBX: 00007ff923ccf6c0 RCX: 00007ff92523d68e [ 164.928056][ T6778] RDX: 000000000000000f RSI: 00007ff923ccf0a0 RDI: 0000000000000004 [ 164.928070][ T6778] RBP: 00007ff923ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 164.928220][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.928233][ T6778] R13: 00007ff9254f6038 R14: 00007ff9254f5fa0 R15: 00007fff0d29a1f8 [ 164.928330][ T6778] [ 165.128826][ T6780] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.1087'. [ 165.295538][ T6796] bridge_slave_0: left allmulticast mode [ 165.301439][ T6796] bridge_slave_0: left promiscuous mode [ 165.315360][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.336969][ T6796] bridge_slave_1: left allmulticast mode [ 165.342863][ T6796] bridge_slave_1: left promiscuous mode [ 165.353421][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.381585][ T6796] bond0: (slave bond_slave_0): Releasing backup interface [ 165.395251][ T6796] bond0: (slave bond_slave_1): Releasing backup interface [ 165.409248][ T6796] team0: Port device team_slave_0 removed [ 165.416007][ T6796] team0: Port device team_slave_1 removed [ 165.422060][ T6796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.443399][ T6796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.452421][ T6796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.504383][ T28] kauditd_printk_skb: 429 callbacks suppressed [ 165.504396][ T28] audit: type=1400 audit(1780275340.630:3933): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 165.552870][ T6800] syzkaller0: entered promiscuous mode [ 165.559134][ T28] audit: type=1400 audit(1780275340.686:3934): avc: denied { open } for pid=6802 comm="syz.0.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 165.559508][ T6803] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1095'. [ 165.588277][ T6800] syzkaller0: entered allmulticast mode [ 165.622444][ T28] audit: type=1400 audit(1780275340.742:3935): avc: denied { create } for pid=6799 comm="syz.3.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 165.661119][ T28] audit: type=1400 audit(1780275340.742:3936): avc: denied { create } for pid=6799 comm="syz.3.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 165.715174][ T28] audit: type=1400 audit(1780275340.742:3937): avc: denied { create } for pid=6799 comm="syz.3.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 165.755405][ T28] audit: type=1400 audit(1780275340.742:3938): avc: denied { create } for pid=6802 comm="syz.0.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 165.791577][ T6811] bond1: option ad_user_port_key: invalid value (2311) [ 165.824333][ T6811] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 165.835496][ T28] audit: type=1400 audit(1780275340.751:3939): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 165.877180][ T6811] bond1 (unregistering): Released all slaves [ 165.914706][ T28] audit: type=1400 audit(1780275340.770:3940): avc: denied { create } for pid=6804 comm="syz.0.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 165.971800][ T28] audit: type=1400 audit(1780275340.770:3941): avc: denied { create } for pid=6804 comm="syz.0.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 166.027284][ T28] audit: type=1400 audit(1780275340.770:3942): avc: denied { mount } for pid=6804 comm="syz.0.1096" name="/" dev="autofs" ino=18900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=0 [ 166.118792][ T6840] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1107'. [ 166.286130][ T6849] netlink: 'syz.1.1108': attribute type 4 has an invalid length. [ 166.294311][ T6849] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1108'. [ 166.311131][ T6849] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 166.503772][ T6852] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1111'. [ 167.212150][ T6874] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1118'. [ 167.928380][ T6902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1131'. [ 168.286902][ T23] IPVS: starting estimator thread 0... [ 168.294224][ T6906] Bluetooth: hci0: Frame reassembly failed (-84) [ 168.295779][ T42] Bluetooth: hci0: unexpected event 0x04 length: 0 < 10 [ 168.398560][ T6905] IPVS: using max 2592 ests per chain, 129600 per kthread [ 168.808586][ T6924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1138'. [ 168.819070][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1139'. [ 170.135497][ T6962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1153'. [ 170.472471][ T3531] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 170.472648][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 170.861145][ T28] kauditd_printk_skb: 433 callbacks suppressed [ 170.861160][ T28] audit: type=1400 audit(1780275346.647:4376): avc: denied { create } for pid=6997 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 170.909327][ T28] audit: type=1400 audit(1780275346.675:4377): avc: denied { map_create } for pid=6997 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 170.966127][ T28] audit: type=1400 audit(1780275346.675:4378): avc: denied { bpf } for pid=6997 comm="syz.1.1165" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 171.026102][ T28] audit: type=1400 audit(1780275346.675:4379): avc: denied { prog_load } for pid=6997 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.082597][ T28] audit: type=1400 audit(1780275346.675:4380): avc: denied { prog_load } for pid=6997 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.132239][ T7009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1170'. [ 171.137927][ T28] audit: type=1400 audit(1780275346.675:4381): avc: denied { create } for pid=6997 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=0 [ 171.207522][ T28] audit: type=1400 audit(1780275346.675:4382): avc: denied { read write } for pid=6997 comm="syz.1.1165" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=0 [ 171.256131][ T28] audit: type=1400 audit(1780275346.675:4383): avc: denied { prog_load } for pid=6997 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.286499][ T28] audit: type=1400 audit(1780275346.684:4384): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.337789][ T28] audit: type=1400 audit(1780275346.712:4385): avc: denied { open } for pid=7000 comm="syz.1.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 171.505732][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'. [ 171.538858][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 171.646084][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.654811][ T7051] xt_hashlimit: max too large, truncated to 1048576 [ 172.360481][ T7082] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1200'. [ 172.421414][ T7084] FAULT_INJECTION: forcing a failure. [ 172.421414][ T7084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.439660][ T7084] CPU: 1 UID: 0 PID: 7084 Comm: syz.1.1201 Not tainted syzkaller #0 PREEMPT(lazy) [ 172.439705][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 172.439733][ T7084] Call Trace: [ 172.439740][ T7084] [ 172.439749][ T7084] __dump_stack+0x1d/0x30 [ 172.439773][ T7084] dump_stack_lvl+0x95/0xd0 [ 172.439794][ T7084] dump_stack+0x15/0x1b [ 172.439827][ T7084] should_fail_ex+0x263/0x280 [ 172.439847][ T7084] should_fail+0xb/0x20 [ 172.439861][ T7084] should_fail_usercopy+0x1a/0x20 [ 172.439879][ T7084] _copy_to_user+0x20/0xa0 [ 172.439901][ T7084] simple_read_from_buffer+0xb5/0x130 [ 172.439943][ T7084] proc_fail_nth_read+0x10e/0x150 [ 172.439966][ T7084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.439998][ T7084] vfs_read+0x1ab/0x7f0 [ 172.440064][ T7084] ? __rcu_read_unlock+0x4e/0x70 [ 172.440084][ T7084] ? __fget_files+0x184/0x1c0 [ 172.440157][ T7084] ? mutex_lock+0x57/0x90 [ 172.440177][ T7084] ksys_read+0xdc/0x1a0 [ 172.440238][ T7084] __x64_sys_read+0x40/0x50 [ 172.440264][ T7084] x64_sys_call+0x2886/0x3020 [ 172.440287][ T7084] do_syscall_64+0x12c/0x3b0 [ 172.440322][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.440344][ T7084] RIP: 0033:0x7faf1950d68e [ 172.440360][ T7084] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 172.440411][ T7084] RSP: 002b:00007faf17fa6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.440432][ T7084] RAX: ffffffffffffffda RBX: 00007faf17fa76c0 RCX: 00007faf1950d68e [ 172.440447][ T7084] RDX: 000000000000000f RSI: 00007faf17fa70a0 RDI: 0000000000000003 [ 172.440472][ T7084] RBP: 00007faf17fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.440489][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.440503][ T7084] R13: 00007faf197c6038 R14: 00007faf197c5fa0 R15: 00007ffc3a937e78 [ 172.440583][ T7084] [ 172.712439][ T7094] bond2: option ad_user_port_key: invalid value (2311) [ 172.719555][ T7094] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 172.728606][ T7094] bond2 (unregistering): Released all slaves [ 172.848371][ T7107] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1211'. [ 172.917879][ T7111] netlink: 'syz.4.1209': attribute type 4 has an invalid length. [ 172.926840][ T7111] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1209'. [ 172.962912][ T7111] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 173.563765][ T7123] FAULT_INJECTION: forcing a failure. [ 173.563765][ T7123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.592552][ T7123] CPU: 0 UID: 0 PID: 7123 Comm: syz.5.1217 Not tainted syzkaller #0 PREEMPT(lazy) [ 173.592619][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.592672][ T7123] Call Trace: [ 173.592679][ T7123] [ 173.592688][ T7123] __dump_stack+0x1d/0x30 [ 173.592712][ T7123] dump_stack_lvl+0x95/0xd0 [ 173.592730][ T7123] dump_stack+0x15/0x1b [ 173.592746][ T7123] should_fail_ex+0x263/0x280 [ 173.592822][ T7123] should_fail+0xb/0x20 [ 173.592888][ T7123] should_fail_usercopy+0x1a/0x20 [ 173.592917][ T7123] _copy_from_user+0x1c/0xb0 [ 173.593011][ T7123] kstrtouint_from_user+0x69/0xf0 [ 173.593040][ T7123] ? 0xffffffff81000000 [ 173.593055][ T7123] ? selinux_file_permission+0x1e1/0x320 [ 173.593109][ T7123] proc_fail_nth_write+0x50/0x160 [ 173.593138][ T7123] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 173.593243][ T7123] vfs_write+0x269/0x9f0 [ 173.593293][ T7123] ? __rcu_read_unlock+0x4e/0x70 [ 173.593310][ T7123] ? __fget_files+0x184/0x1c0 [ 173.593462][ T7123] ? mutex_lock+0x57/0x90 [ 173.593486][ T7123] ksys_write+0xdc/0x1a0 [ 173.593514][ T7123] __x64_sys_write+0x40/0x50 [ 173.593609][ T7123] x64_sys_call+0x27e1/0x3020 [ 173.593633][ T7123] do_syscall_64+0x12c/0x3b0 [ 173.593664][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.593686][ T7123] RIP: 0033:0x7fdaf322d68e [ 173.593738][ T7123] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 173.593753][ T7123] RSP: 002b:00007fdaf1cbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.593772][ T7123] RAX: ffffffffffffffda RBX: 00007fdaf1cbf6c0 RCX: 00007fdaf322d68e [ 173.593787][ T7123] RDX: 0000000000000001 RSI: 00007fdaf1cbf0a0 RDI: 0000000000000004 [ 173.593801][ T7123] RBP: 00007fdaf1cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 173.593879][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.593890][ T7123] R13: 00007fdaf34e6038 R14: 00007fdaf34e5fa0 R15: 00007ffec7444db8 [ 173.593913][ T7123] [ 173.808813][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 173.810056][ T3531] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 173.878117][ T7129] FAULT_INJECTION: forcing a failure. [ 173.878117][ T7129] name failslab, interval 1, probability 0, space 0, times 0 [ 173.914838][ T7129] CPU: 1 UID: 0 PID: 7129 Comm: syz.5.1220 Not tainted syzkaller #0 PREEMPT(lazy) [ 173.914864][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.914876][ T7129] Call Trace: [ 173.914883][ T7129] [ 173.914891][ T7129] __dump_stack+0x1d/0x30 [ 173.914924][ T7129] dump_stack_lvl+0x95/0xd0 [ 173.914975][ T7129] dump_stack+0x15/0x1b [ 173.914993][ T7129] should_fail_ex+0x263/0x280 [ 173.915050][ T7129] should_failslab+0x8c/0xb0 [ 173.915079][ T7129] __kmalloc_noprof+0xb8/0x4d0 [ 173.915110][ T7129] ? security_prepare_creds+0x52/0x120 [ 173.915131][ T7129] security_prepare_creds+0x52/0x120 [ 173.915186][ T7129] prepare_creds+0x381/0x540 [ 173.915209][ T7129] lookup_user_key+0x136/0xd60 [ 173.915272][ T7129] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 173.915299][ T7129] __se_sys_add_key+0x272/0x360 [ 173.915344][ T7129] __x64_sys_add_key+0x67/0x80 [ 173.915442][ T7129] x64_sys_call+0xb39/0x3020 [ 173.915511][ T7129] do_syscall_64+0x12c/0x3b0 [ 173.915537][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.915559][ T7129] RIP: 0033:0x7fdaf326ce59 [ 173.915576][ T7129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.915634][ T7129] RSP: 002b:00007fdaf1cbf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 173.915654][ T7129] RAX: ffffffffffffffda RBX: 00007fdaf34e5fa0 RCX: 00007fdaf326ce59 [ 173.915668][ T7129] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 173.915683][ T7129] RBP: 00007fdaf1cbf090 R08: ffffffffffffffff R09: 0000000000000000 [ 173.915725][ T7129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.915737][ T7129] R13: 00007fdaf34e6038 R14: 00007fdaf34e5fa0 R15: 00007ffec7444db8 [ 173.915755][ T7129] [ 174.145825][ T7140] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1222'. [ 174.839935][ T7170] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1237'. [ 175.455319][ T7195] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1248'. [ 175.537713][ T7199] FAULT_INJECTION: forcing a failure. [ 175.537713][ T7199] name failslab, interval 1, probability 0, space 0, times 0 [ 175.557812][ T7199] CPU: 1 UID: 0 PID: 7199 Comm: syz.1.1250 Not tainted syzkaller #0 PREEMPT(lazy) [ 175.557841][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.557854][ T7199] Call Trace: [ 175.557860][ T7199] [ 175.557868][ T7199] __dump_stack+0x1d/0x30 [ 175.557896][ T7199] dump_stack_lvl+0x95/0xd0 [ 175.557936][ T7199] dump_stack+0x15/0x1b [ 175.557974][ T7199] should_fail_ex+0x263/0x280 [ 175.557991][ T7199] ? tcf_exts_init_ex+0x9a/0x380 [ 175.558077][ T7199] should_failslab+0x8c/0xb0 [ 175.558104][ T7199] __kmalloc_cache_noprof+0x5f/0x400 [ 175.558132][ T7199] tcf_exts_init_ex+0x9a/0x380 [ 175.558188][ T7199] mall_change+0x1b8/0x490 [ 175.558212][ T7199] ? mutex_unlock+0x4e/0x90 [ 175.558285][ T7199] tc_new_tfilter+0xfc0/0x1200 [ 175.558316][ T7199] ? __pfx_tc_new_tfilter+0x10/0x10 [ 175.558410][ T7199] rtnetlink_rcv_msg+0x64b/0x720 [ 175.558481][ T7199] netlink_rcv_skb+0x123/0x220 [ 175.558549][ T7199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.558576][ T7199] rtnetlink_rcv+0x1c/0x30 [ 175.558599][ T7199] netlink_unicast+0x5a8/0x680 [ 175.558657][ T7199] netlink_sendmsg+0x5c8/0x6f0 [ 175.558683][ T7199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.558737][ T7199] ____sys_sendmsg+0x563/0x5b0 [ 175.558760][ T7199] ___sys_sendmsg+0x195/0x1e0 [ 175.558788][ T7199] __x64_sys_sendmsg+0xd4/0x160 [ 175.558813][ T7199] x64_sys_call+0x194c/0x3020 [ 175.558867][ T7199] do_syscall_64+0x12c/0x3b0 [ 175.558893][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.558973][ T7199] RIP: 0033:0x7faf1954ce59 [ 175.558989][ T7199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.559007][ T7199] RSP: 002b:00007faf17fa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.559028][ T7199] RAX: ffffffffffffffda RBX: 00007faf197c5fa0 RCX: 00007faf1954ce59 [ 175.559066][ T7199] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 175.559076][ T7199] RBP: 00007faf17fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 175.559087][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.559097][ T7199] R13: 00007faf197c6038 R14: 00007faf197c5fa0 R15: 00007ffc3a937e78 [ 175.559170][ T7199] [ 175.839006][ T7202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1251'. [ 175.935393][ T7215] netlink: 'syz.1.1257': attribute type 8 has an invalid length. [ 175.943212][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 175.955505][ T7215] bond0: entered promiscuous mode [ 175.960933][ T7215] bond_slave_0: entered promiscuous mode [ 175.966849][ T7215] bond_slave_1: entered promiscuous mode [ 175.974682][ T7215] batadv0: entered promiscuous mode [ 175.980402][ T7215] debugfs: 'hsr1' already exists in 'hsr' [ 175.986174][ T7215] Cannot create hsr debugfs directory [ 175.991973][ T7215] hsr1: entered promiscuous mode [ 176.013399][ T7215] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 176.085589][ T7221] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1260'. [ 176.425642][ T28] kauditd_printk_skb: 648 callbacks suppressed [ 176.425662][ T28] audit: type=1400 audit(1780275351.847:5034): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.464599][ T28] audit: type=1400 audit(1780275351.885:5035): avc: denied { prog_load } for pid=7233 comm="syz.1.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.502820][ T28] audit: type=1400 audit(1780275351.894:5036): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.556839][ T28] audit: type=1400 audit(1780275351.904:5037): avc: denied { open } for pid=7235 comm="syz.1.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 176.594805][ T28] audit: type=1400 audit(1780275351.904:5038): avc: denied { prog_load } for pid=7235 comm="syz.1.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.634035][ T28] audit: type=1400 audit(1780275351.922:5039): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.683043][ T28] audit: type=1400 audit(1780275351.941:5040): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.732313][ T28] audit: type=1400 audit(1780275351.941:5041): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.756670][ T28] audit: type=1400 audit(1780275351.950:5042): avc: denied { open } for pid=7243 comm="syz.3.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 176.791101][ T7256] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1272'. [ 176.808990][ T28] audit: type=1400 audit(1780275351.950:5043): avc: denied { create } for pid=7242 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 177.710023][ T7283] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1283'. [ 178.777996][ T7331] SET target dimension over the limit! [ 178.919427][ T7348] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1311'. [ 178.942932][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1310'. [ 179.000084][ T7362] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1318'. [ 179.313524][ T7392] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1331'. [ 179.762626][ T7421] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1341'. [ 180.041102][ T7426] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1343'. [ 180.110796][ T7428] sock: sock_set_timeout: `syz.4.1344' (pid 7428) tries to set negative timeout [ 180.288224][ T7437] netlink: 'syz.1.1346': attribute type 4 has an invalid length. [ 180.296181][ T7437] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1346'. [ 180.328974][ T7437] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 180.577087][ T7439] netlink: 'syz.3.1348': attribute type 8 has an invalid length. [ 180.584929][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 180.816477][ T7443] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1350'. [ 181.772931][ T28] kauditd_printk_skb: 494 callbacks suppressed [ 181.772947][ T28] audit: type=1400 audit(1780275362.855:5538): avc: denied { create } for pid=7473 comm="syz.5.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 181.812231][ T28] audit: type=1400 audit(1780275362.883:5539): avc: denied { read write } for pid=3748 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 181.878160][ T28] audit: type=1400 audit(1780275362.949:5540): avc: denied { execmem } for pid=7475 comm="syz.5.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 181.934384][ T28] audit: type=1400 audit(1780275362.967:5541): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 181.992600][ T28] audit: type=1400 audit(1780275362.977:5542): avc: denied { allowed } for pid=7477 comm="syz.0.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 182.063397][ T28] audit: type=1400 audit(1780275362.977:5543): avc: denied { create } for pid=7477 comm="syz.0.1362" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 182.087123][ T28] audit: type=1400 audit(1780275362.995:5544): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 182.133382][ T28] audit: type=1400 audit(1780275363.005:5545): avc: denied { prog_load } for pid=7475 comm="syz.5.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 182.167469][ T28] audit: type=1400 audit(1780275363.005:5546): avc: denied { prog_load } for pid=7475 comm="syz.5.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 182.186968][ T28] audit: type=1400 audit(1780275363.005:5547): avc: denied { open } for pid=7475 comm="syz.5.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 182.655536][ T7499] bond2: option ad_user_port_key: invalid value (2311) [ 182.679825][ T7499] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 182.708472][ T7499] bond2 (unregistering): Released all slaves [ 182.799427][ T7502] syzkaller0: entered promiscuous mode [ 182.810969][ T7502] syzkaller0: entered allmulticast mode [ 183.857386][ T7553] xt_hashlimit: max too large, truncated to 1048576 [ 184.215197][ T7563] bond2: option ad_user_port_key: invalid value (2311) [ 184.232709][ T7563] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 184.254820][ T7563] bond2 (unregistering): Released all slaves [ 184.283262][ T7566] IPv6: sit1: Disabled Multicast RS [ 184.289342][ T7566] sit1: entered allmulticast mode [ 184.801072][ T7606] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 185.108935][ T7623] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7623 comm=syz.5.1417 [ 185.192280][ T7626] __nla_validate_parse: 4 callbacks suppressed [ 185.192368][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1418'. [ 185.707740][ T7650] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 185.806347][ T7673] syzkaller0: entered promiscuous mode [ 185.806367][ T7673] syzkaller0: entered allmulticast mode [ 185.883751][ T7680] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1441'. [ 185.922897][ T7686] netlink: 'syz.4.1443': attribute type 1 has an invalid length. [ 185.936595][ T7686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.946514][ T7686] bond2: entered allmulticast mode [ 186.054479][ T7706] netlink: 'syz.3.1446': attribute type 4 has an invalid length. [ 186.085520][ T7706] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1446'. [ 186.122137][ T7706] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 186.549304][ T7727] ================================================================== [ 186.557392][ T7727] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 186.565096][ T7727] [ 186.567406][ T7727] write to 0xffff88811dcd9708 of 8 bytes by task 7725 on cpu 0: [ 186.575008][ T7727] mas_wr_store_entry+0x3405/0x5ad0 [ 186.580188][ T7727] mas_store_prealloc+0x43e/0x690 [ 186.585198][ T7727] commit_merge+0x6a1/0x720 [ 186.589690][ T7727] vma_expand+0x301/0x460 [ 186.593996][ T7727] vma_merge_new_range+0x29c/0x320 [ 186.599087][ T7727] mmap_region+0x10a5/0x20d0 [ 186.603668][ T7727] do_mmap+0x9b2/0xbd0 [ 186.607715][ T7727] vm_mmap_pgoff+0x183/0x2d0 [ 186.612287][ T7727] ksys_mmap_pgoff+0xc1/0x310 [ 186.616958][ T7727] x64_sys_call+0x14df/0x3020 [ 186.621618][ T7727] do_syscall_64+0x12c/0x3b0 [ 186.626198][ T7727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.632068][ T7727] [ 186.634369][ T7727] read to 0xffff88811dcd9708 of 8 bytes by task 7727 on cpu 1: [ 186.641917][ T7727] mtree_range_walk+0x1a6/0x490 [ 186.646760][ T7727] mas_walk+0x1cc/0x370 [ 186.650894][ T7727] lock_vma_under_rcu+0xc9/0x210 [ 186.655816][ T7727] do_user_addr_fault+0x232/0x1050 [ 186.660917][ T7727] exc_page_fault+0x62/0xa0 [ 186.665402][ T7727] asm_exc_page_fault+0x26/0x30 [ 186.670230][ T7727] [ 186.672531][ T7727] value changed: 0x00007f71f7c15fff -> 0x00007f71f7bf4fff [ 186.679619][ T7727] [ 186.681924][ T7727] Reported by Kernel Concurrency Sanitizer on: [ 186.688087][ T7727] CPU: 1 UID: 0 PID: 7727 Comm: syz.4.1458 Not tainted syzkaller #0 PREEMPT(lazy) [ 186.697358][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.707415][ T7727] ================================================================== [ 188.789223][ T28] kauditd_printk_skb: 488 callbacks suppressed [ 188.789238][ T28] audit: type=1400 audit(1780275372.417:6036): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 189.161188][ T28] audit: type=1400 audit(1780275372.763:6037): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0