last executing test programs: 2m5.274576024s ago: executing program 0 (id=331): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20, 0x6000}, 0x0) 2m5.036133186s ago: executing program 0 (id=333): recvmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x40004020, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000280)=[{0x6, 0x8, 0x0, 0x5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5d", 0x4}], 0x1}}], 0x2, 0xa090) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x14, 0x7, 0x1, 0x6bfc, 0x40, 0x72, 0xce, 0x3, 0xf9, 0xe7, 0xe, 0x1, 0x8, 0xff, 0x0, 0x7fff, [0x7ff, 0x2]}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'pimreg0\x00', {}, 0x4}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x8840}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) 2m4.158116789s ago: executing program 0 (id=338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m4.059387283s ago: executing program 0 (id=341): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) shutdown(r0, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4000000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1}, 0x4004045) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x168) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x82101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x236f003, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x21, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000400000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085d035b1bcb6a200000083000000bf090000000000005509010000000000950000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018340000020000000000000000000000fa2505000080000001a88000f0ffffff850000009100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x2f, &(0x7f0000000600)=""/47, 0x41000, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x8, 0x1, 0x20}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000380), 0x10, 0x8000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r1, 0x0, 0x25, 0x11, @void}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="54000000100001000000c801000000000500000a4c000000090a050400000000000000000a0000040900010073797a31220000000800054000000085c02ba883e12475bd020900020073797a310000000009006c61737400000000140000001100010000000000000080000900000a0000000000606f554a875a9260a34a55c0fe216998e0f833ef273a6d0ca7ced84e9667bcb4e17758bfee2601f4"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000900c0001800600010000000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050065000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) 2m3.906147421s ago: executing program 0 (id=342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x3, 0x0, 0x0, 0x10000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xa, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2m3.581664857s ago: executing program 0 (id=347): socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r2}, &(0x7f0000000300)=0x8) 2m3.362769418s ago: executing program 32 (id=347): socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r2}, &(0x7f0000000300)=0x8) 1m20.096001577s ago: executing program 1 (id=602): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000b880)=@newtfilter={0x4e8, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xa, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4bc, 0x2, [@TCA_FW_POLICE={0x4}, @TCA_FW_ACT={0x4}, @TCA_FW_POLICE={0x4}, @TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'wlan1\x00'}, @TCA_FW_POLICE={0x488, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xa, 0x81, 0x2, 0x1, 0x0, 0x7f, 0x81, 0xc21a, 0x3, 0x7, 0x8000, 0x400, 0x4, 0x8, 0xc, 0x2, 0x7, 0x20fd4059, 0x74e8, 0x7, 0xffff3641, 0x6, 0x7fff, 0xa, 0x37f, 0x84, 0x3, 0x1, 0x0, 0x5, 0x8, 0x4, 0x8, 0xffff, 0x100, 0x3, 0x20, 0x1, 0xb6, 0x0, 0x5, 0xff, 0xbbf0, 0x1ff, 0x2, 0x3, 0x4, 0x3ff, 0xe11f, 0x9, 0x6, 0x3, 0x200, 0x9, 0x8, 0x8, 0x80, 0xc8, 0x7fff, 0x80000000, 0x8, 0x1, 0x5, 0x40, 0x8, 0x76d9, 0x8, 0x8, 0xffff1fb6, 0x8, 0x98, 0x5, 0xa, 0x30ad6bec, 0x5b, 0xfffffff9, 0x2, 0x7, 0x4, 0x3, 0x8b9d7167, 0xffff, 0x2e69, 0x2, 0x1, 0xfffffffc, 0x1100000, 0x1, 0x7, 0x5, 0x9, 0xfffff801, 0x8, 0x9, 0x10001, 0x684, 0x22ee, 0x7ff, 0xffff4edd, 0x6, 0x4, 0x89e8, 0x4, 0x2, 0xecd5, 0x0, 0xfe, 0x4, 0xb, 0x49ad, 0x3, 0x5, 0x4, 0x2, 0x200, 0xaa0, 0x8000, 0x2, 0x8, 0x401, 0x6, 0xffffffff, 0x1a48, 0x6, 0x192, 0x101, 0x5, 0x2, 0x5, 0x78, 0x7, 0x5, 0x2, 0x0, 0x1d, 0x3, 0x8, 0x0, 0x4, 0x1d4, 0xb7, 0x9, 0x6, 0x2, 0x460, 0x6, 0xa34, 0x5e8, 0x1, 0x5, 0x7, 0x9, 0x1, 0x3, 0xfffffbff, 0x7, 0x2b8, 0x400, 0xfffffffe, 0xfffffff9, 0x2, 0x7fffffff, 0x1, 0x1, 0x4, 0xfffffff7, 0x0, 0xe, 0x7, 0x1, 0xfff, 0x8, 0x9, 0x1000, 0x7fffffff, 0x800, 0x4, 0x8, 0x1, 0x5, 0x9, 0x1ff, 0x7, 0x87, 0x3, 0x8, 0x9, 0x6, 0xd0, 0x1, 0x9, 0x3ff, 0x10001, 0xffffff43, 0xc0e, 0x5d7, 0xffffffff, 0x6, 0xc7, 0xc1e, 0x3, 0x0, 0xcc90, 0x9, 0x7, 0x6a3, 0x2bb5, 0x3190643, 0xb, 0xffffff01, 0x3, 0x8a5, 0x6, 0xc, 0x9, 0x7, 0x2, 0x1, 0x200, 0x7, 0x80, 0x1ff, 0x7, 0x8001, 0x3, 0xfffffff7, 0xfffffff8, 0x3, 0x1, 0x6, 0x101, 0x3, 0x0, 0xdc4, 0x3, 0x200, 0xf10a, 0x5, 0x81, 0x3, 0x7, 0x7f, 0x4, 0x8f, 0xd, 0x3, 0x1, 0x1, 0x2e, 0x101, 0x2, 0x9, 0xfffffffa, 0x6, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x0, 0x53c, 0xbe1, {0x4, 0x2, 0x79, 0x8, 0x2, 0x3}, {0x1e, 0x1, 0x6, 0x2fe7, 0xca, 0x8}, 0x0, 0x7f, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x95, 0x4, 0x8, 0x81, 0x8, {0x8, 0x1, 0x101, 0x2, 0x7, 0x2}, {0x3, 0x0, 0xe, 0x9, 0xda6, 0x5}, 0x4, 0x9, 0x8}}]}, @TCA_FW_ACT={0x4}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xfff3}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_getaddr={0x28, 0x16, 0x8, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x4, 0xfd, r2}, [@IFA_FLAGS={0x8, 0x8, 0x8c}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1m19.994459172s ago: executing program 1 (id=603): r0 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') getdents64(r0, &(0x7f0000000000)=""/97, 0x61) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) 1m19.860631769s ago: executing program 1 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x24, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x6001) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b1a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff5843f6739a8ec5ff33791394a5c075018b5d92bbd7d9874589f3561fbdfc44653bb6c56b522a3413"], 0x3, 0x39a, &(0x7f00000002c0)="$eJzs3UFoW2UcAPB/+pKm1c32IIiC8PQm6NimIHqxZXQwzGVKmHoQg9t0NFVYMbgdltWLeBR21JM3D3rwsJsXUZHdPHh1gkzFg+42cOzJy3tpXprWDUc6h7/fIfz7ff//976XfG1e0+Tra0uxerwRJ69evRJzc7WoLx1aimu1WIwkhs7HpNlt2gCAu8O1LIs/s0LEl7dSUpv+rACAaRo8/7+xt9Ly3jej+OuJ/Kx49m/sxtwAgOkof/+fr7YlW3LmJqrmpz0tAGCK8uf/qFcaHp1Iqfypvz5xbQAA3H1efPmV55dbES+k6VzE2vu9dq8dz476l0/GqejGidgfC3E9onijQH5TG9wePtJa2Z+maT9+WYx2XtFrR6z1e+3iSmE5GdQ340AsxGJZX77bIMuy5PAXrZUD6UBEnO/3Gvkoa7VeuzF4lWF5Pk79eE+ciIORxv0T9RFHWiub1yTt/LiD4zciNkavW+Tz3xcL8f3r8XZ043jktcPLmtbKuQNpeihr7amN6vu9dnOQV5h8BQQAAAAAAAAAAAAAAAAAAAAAAG7HvmLvnb1pmi5u7p+Tjfbv2VcmlP33RkR7sF9gu6gv9wfaKPYHyppZZNkf7z7R/iCJsf2BBhv8jO2vU4+ZO3vqAAAAAAAAAAAAAAAAAAAA8J+xfmY2Ot3uidPrZ86uVoP+6fUzMxGRt7z13Wdfzcd4znw5wHjVWFAvUypd6agqS4bJWTKWUwZJfvBavWj59OLmjCs5lbMYlc+McppbusaCvY/8/NHZ1eEIDyfDqhujnCS2Pa+zyfg0xoK1+4oBhy0Xdr5/JoODN8m5nGXZTuXnXp2silpEfcep/ssgy4Nvr7z54JPrw0WQFR57fOHY5Quf/Lba6eZHznW7s6fXr2ernfLr7RfbRNAcLpuksn5q5WKrVVdCvfPUjaN7dhh5Y7ylk/zw+0sPfXipbJmpPEzbTCM7dmnU8s42OUlx0M+3ds0WQT7Nza7n8iC/jybGGX6X3PRueTpu64F74OOlzsVzP/16q1WVHxI26gAAAAAAAAAAAAAAAAAAgF1R+ax4qfywb+Ofqp45Ov2ZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuGf3//80gZja2tNxa8Fc/hi3HYtjVzAeM2coRF+/g2QIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H/1dwAAAP//kp5N2g==") sendmsg$sock(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000001c0)="579902df9b75fb36ef04e924b83f541edc38318418e7ca9950111e2056b454357c46261d4d4e34286ca0e5f3d2a21e4103b22db0ae81de38d6c3afc8f919a81322", 0x41}], 0x1}, 0x20008800) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, &(0x7f0000002240)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x118, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20040040}, 0x4001) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000000)={0x6, 'syz1\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4000014) r5 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="00181100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 1m19.649014729s ago: executing program 1 (id=606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r1, @ANYBLOB="00022dbd7000fbdbdf253a0000000c009900400000002700000006006500000000002b005b00ad6fb15b5cf7b79ae99072bc926071309530f09fa89341688c357e4fbf99464f660d642024f7d4006a005b007ecdac326f3433ab2986733b9f1c4d42a5f2584f9cd9e7ac1125e363ecf72e90369e8152657658795dfccc47ed204970ae9aa6903152a9becb4239575f3e71d6d0b3ff4128c4048420d662f95d51aa9cc244c4979612df5dbc760c3c5029e78f76c7e0301b8500000600650000800000060065008100000029005b0031f873ecc52c1e4391b416aea436e3f2debd41a0f07b899c8708ecb9caa0f8ba38da91da3a1493b4c07be17727abd2374fc000000067005b00a96057741be19ce10eb99a5d36dbca696e7b9f052b9fe9c9be1c7c58be70cd8907ca7dcf5d527bf7b209903dac2d781225261dbd048d84e7898d595be8f6ff567170c028d79610678a5a8660e89197a8eba581c53e7e00060065000600"/371], 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x3}, [@CGW_LIM_HOPS={0x5, 0xd, 0x5}]}, 0x1c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b20ad011cb0f0cedb0cef9f6ec5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e5d97759017ace0c3f5"], 0x6, 0x2c3, &(0x7f0000000900)="$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") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) setresuid(0xee01, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r8, @ANYBLOB="000000000c009cc9b3425aa8c3000e667d1789eafa643900b700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000280), &(0x7f00000002c0)=r10}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r13 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160) r14 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r15, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r15, r16, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r14, 0x0, 0x0, 0x0, 0x2, 0x1}) open_by_handle_at(r13, &(0x7f0000000d80)=ANY=[@ANYRES64=r11, @ANYBLOB="e6505ed9bcd5e6aad9f3f8a443d8e35b7fb999b5cef4b0d476de3d3f8a047ef240b8b37206a2624229aefe5a98c40d7dd7dae2c1fb53df8ba959cbd8ffcdfd47d7492b3b35e0743f3abcfc8cc66b431d922fffd153d1e0579a0be2bdaa3fd2f0868ff68777ee93979531ff", @ANYRES16=r5, @ANYRES16=r4, @ANYRESDEC=0x0, @ANYBLOB="f555a2831dfaca2cf9fba23093df88ab34d81e1cb14a6e77e6e3830dea45eae38390c599b89df0638eed3e2e12e2b1dfec747959d5196bddf82e9eb2f6c08860d74e794634001618626213153449397d36ddeb5a06deee4644d426839a71ffaa2d25", @ANYRES8=r10, @ANYRESHEX=r2, @ANYRES16=r8, @ANYRES32=r16], 0x0) 1m19.554394003s ago: executing program 1 (id=607): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008891) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000740)={r7, @in6={{0xa, 0x3, 0x6, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000002c0)={r7}, &(0x7f0000000400)=0x8) r8 = accept$inet(r3, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @loopback}, &(0x7f0000000480)=0x14) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x106020, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 1m19.270510287s ago: executing program 1 (id=610): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@jqfmt_vfsv0}, {@grpquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}}, 0x0) 1m19.270360218s ago: executing program 33 (id=610): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@jqfmt_vfsv0}, {@grpquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$eJzs3c+LG1UcAPDvZHf7W9tCKSoiCz1Yqc12d/1RwUM9ihYLeq9hM13KJk3ZZEt3Ldge7MWLFEHEgnjXu8fiP+BfUdBCkbLowUtkspNt2k266TZttubzgSnvZSZ5852Z7+ubvFkSwMiazP4pRLwcEd8kEfsjIsnXjUe+cnJtu9V7V+ayJYlm89O/ktZ2Wb39We337c0rL0XEb19FHCtsbLe+vLJQqlTSxbw+1ahenKovrxw/Xy3Np/PphZlm8+TbszPvvfvOwGJ948w/339y68OTXx9Z/e6XOwdvJHEq9uXrOuN4Alc7K5MxmR+TiTj10IbTA2hsO0mGvQNsyVie5xOR9QH7YyzPeuD/78uIaAIjKpH/MKLa44D2vf2A7oOfG3c/WLsB2hj/+Np3I7GrdW+0ZzV54M4ou989MID2szZ+/fPmjWyJwX0PAbCpq9ci4sT4+Mb+L8n7v6070cc2D7eh/4Nn51Y2/nmz2/insD7+iS7jn71dcncrNs//wp0BNNNTNv57v+v4d33S6sBYXnuhNeabSM6dr6RZ3/ZiRByNiZ1Z/VHzOSdXbzd7resc/2VL1n57LJjvx53xnQ++p1xqlJ4k5k53r0W80nX8m6yf/6TL+c+Ox5k+2zic3nyt17rN43+6mj9FvN71/N+f0Uq6zk/Ozubzk1Ot62GqfVVs9Pf1w7/3an/Y8Wfnf8+j4z+QdM7X1h+/jR93/Zv2WvdA/NH/9b8j+axV3pG/drnUaCxOR+xIPt74+sz997br7e2z+I8eeXT/1+363x0Rn/cZ//VDP7/aV/xDOv/lxzr/j1+4/dEXP/Rqv7/+761W6Wj+Sj/9X787+CTHDgAAAAAAALabQkTsi6RQXC8XCsXi2vMdh2JPoVKrN46dqy1dKMe1fWvPPxTaM937O56HmM6fh23XZx6qz0bEwYj4dmx3q16cq1XKww4eAAAAAAAAAAAAAAAAAAAAtom9Pf7+P/PH2LD3Dnjq/OQ3jK5N838Qv/QEbEv+/4fRJf9hdMl/GF3yH0aX/IfRJf9hdMl/GF3yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbqzOnT2dJcvXdlLquXLy0vLdQuHS+n9YVidWmuOFdbvFicr9XmK2lxrlbd7PMqtdrF6ZlYujzVSOuNqfryytlqbelC4+z5amk+PZtOPJOoAAAAAAAAAAAAAAAAAAAA4PlSX15ZKFUq6aKCwpYK49tjNxQGXBh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9/0XAAD//zWdOco=") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}}, 0x0) 5.275307s ago: executing program 6 (id=1599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) 5.239219031s ago: executing program 6 (id=1601): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000010000010000b7080000000000087b8ae8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xe}, 0x94) 5.170291375s ago: executing program 6 (id=1603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x11, r1, 0x2000) r2 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002040), &(0x7f0000cab000)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.989976114s ago: executing program 6 (id=1606): r0 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547056ef5303cb81c0f8f2694ad16044e6348bacb7a9c28bc03db61de13436ff3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x1) 2.879202338s ago: executing program 5 (id=1641): syz_emit_ethernet(0x22, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @local, @void, {@ipv4={0x4305, @generic={{0x5, 0x4, 0x3, 0x3, 0x14, 0x65, 0x0, 0x8, 0x2e, 0x0, @private=0xa010101, @rand_addr=0x64010102}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x8006}, 0x40) 2.822590191s ago: executing program 5 (id=1644): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030328bd7000000000000a0000000800", @ANYRES32=r1], 0x1c}}, 0x0) 2.821817841s ago: executing program 5 (id=1647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) prctl$PR_GET_FPEMU(0x42, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe06", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0x44) r5 = fsmount(0xffffffffffffffff, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x5, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, 0x5820}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}, {0xd, 0x7, 0xf8, 0x5}, {0x2, 0x0, 0x8b, 0x6}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) write$tun(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xfce) 2.721864636s ago: executing program 5 (id=1653): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(r0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1a001, &(0x7f0000000880)={[], [{@fsmagic={'fsmagic', 0x3d, 0x4}}]}, 0x1, 0x632, &(0x7f0000001280)="$eJzs3c9rHNcdAPDvzEqyZauVXUqpTUsFPdhQvJZcU7c92e6hPhhqqA8h5GBhSY7w+geWDLZjsAw5JJBACLmG4Ev+gZBr0DXkFgKJbzkHnBCc5JAEb5jZWWuz2rU3kla78Xw+MDNvfmjf++7s2/dmZkcTQGlNZaM0Yl9EnEsiJlvWTURj5VSx3cOvb5/PhiTq9f9/lURSLGtu/6iY7s5GSeNvPj4Z8bvK+nyXbt66OFurN9yJOLx86erhpZu3Di1emr0wf2H+8syRfx49Nv2vmQ+3Js7dxfTU6f/96fWXX/zHwie1Q0kcj7OjL81FWxxbZarx7kYWYuvykYg4liU6vC+wnSrF53E0Iv4Qk1HJ5xomY/G1gRYO6Kt6pdE+1cfqQOkk0UwMuCDANmv2A5rH9v04Dh5mD05k4xsd4h8pjt535sdGux4mLUdG2dKIPVuQ/0pE/Hh7/9vZEF3OQ4xsQT5d878bEX/stP+TPP49eaRZ/GmkLX+XpaeLcxtZ+f6ziTIkLenePn93NpHbz/2S+Fv3Qxb/8WKaLT/Z5fWfdopnqm2+bPUPgMFYPVE05FlHJNbav6xn2Oz/RHv/p/5+fm2ove3aiO7tX7oFr/50ef9vpFP732zvd+ZteNrWD0ti5dsznV9ytH3B56+eerNb/lMt/b9syPJv9gV7sOmu4YO7Efvb4n8lf+uTx/s/6dD/zfp753rM47+ffnmq27pNxr9p9XsRBzoe/6z1SrNU2/XJJJrXJ4/OHF5YrM1PN8Yd8/jgoxfe7Zb/oOPP9v+uLvE/af9ny672mMd7Z+5daqR2rFs38dT40y/GkrN5aiwfr1WvseR0sUljcmN2efnakSeXpblNPp1pxH/wr53rf5f484OP8eZXZg+uPnfxYbd1m9z/j+o9bthNFv/cBvf/Gz3m8d3z1//cbd36+NfOSYxvNCgAAAAAAAAoqTS/Bpuk1cfpNK0WF95+H7vS2pWl5b8tXLl+eS7iYP57yNG0eaV7sjGfZPMzxe9hm/NH2ub/HhF7I+Ktyng+Xz1/pTY36OABAAAAAAAAAAAAAAAAAABgSOwu7v9/VDwP7JtKmlargy4VsG36+YA5YLip/1Beef3fnuetAUNG+w/l1bH++1KAUlDVobzUfygv9R/KS/2H8lL/oby61/91a+72uywAAAAAwJbZ+5fV+yMRsfLv8XzIjBXrRgdaMqDf1HEor8qgCwAMzOML/G7/h9Lpqf//ffHPAftfHGAAkpb0SjORdw7qT678q0nfywYAAAAAAAAAAAAANBzYt3o/cf8/lJLb/qC8Nnb/f2XjfwoMjU7/+t/jQKAcHONDyfVwEmBntxXu/wcAAAAAAAAAAACAbTORD0laLX4GPBFpWq1G/CYi9sRosrBYm5+OiN9GxGeV0R3Z/MygCw0AAAAAAAAAAAAAAAAAAADPmKWbty7O1mrz11oTP6xb8mwnmk88HZbytCYi6XsWabQtGY+IYYi9P4mRliVJxEq257filZPNf35iGN6fIjHgLyYAAAAAAAAAAAAAAAAAACihlnuPO9v/zjaXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC239rz//uXGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCv008BAAD//xS+O5U=") r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000015c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x30) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x1, 0x1, 0x400, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@timestamp_addr={0x44, 0x4, 0x9e}]}}}}}) r5 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0xffffffff, 0x0, 0x1, 0x0, 0x0, 0xf001}, {0xffffffff, 0x8, 0xfffffffffffffffe, 0x6}]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000180)={{0x0, 0x1, 0x2, 0x1, 0x4}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r6, 0x4004551e, &(0x7f0000000040)=0x101) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r7, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_robust_list(&(0x7f0000000080)={0x0, 0x9}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10612, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x5, 0x80008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000006}, 0x0, 0xffffffffffffffff, r7, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@dax_never}, {@oldalloc}, {@errors_continue}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) 2.484842017s ago: executing program 5 (id=1654): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000040), 0xa, 0x12002) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0xbd, 0x12, 0x9, 0xc, "00b6a76acfa36c74c4d9e7b09b2ccb2abdfd50553f0d649e6dc0b97b63841a7cd483d5f47612a8d68dbaca7f43740a3384f57652adb0905fcdfa5923b9509aca", "3be48e78e84251a04f59fce15b1d752ad607ab587f904351bd368a9ab1da6735", [0x2, 0x9]}) r3 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0xb7e2, 0x80, 0x1, 0xe0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x800) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.459905919s ago: executing program 5 (id=1655): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000003bc0)=[{{0x0, 0xfe3d, 0x0, 0x0, 0x0, 0x20}}, {{0x0, 0x0, 0x0}}], 0x4000000000002ca, 0x4040014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.938599684s ago: executing program 6 (id=1656): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x3000c81c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8911}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x274, &(0x7f0000000540)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) 1.938269234s ago: executing program 3 (id=1657): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030328bd7000000000000a0000000800", @ANYRES32=r1], 0x1c}}, 0x0) 1.918081485s ago: executing program 3 (id=1658): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() perf_event_open(&(0x7f00000010c0)={0x5, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4000a, 0x7}, 0x8781, 0x2000000, 0x5, 0x9, 0x0, 0x10, 0xfffe}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000085f0ff00100000001811000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r6], 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r9, 0x10, 0x6, 0x10001) r10 = socket$packet(0x11, 0x2, 0x300) mknodat$null(r0, &(0x7f00000000c0)='./file1\x00', 0x20, 0x103) setsockopt$packet_int(r10, 0x107, 0xc, &(0x7f0000000180)=0x1d5e, 0x4) 1.802490561s ago: executing program 3 (id=1660): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x7, 0x38}, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x8) listen(r2, 0x40000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func={0xc, 0x0, 0x0, 0xc, 0x3}, @const={0x0, 0x0, 0x0, 0xa, 0x3}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x5}, @func={0x8, 0x0, 0x0, 0xc, 0x1}, @ptr={0x1, 0x0, 0x0, 0x2, 0x5}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f, 0x61, 0x2e, 0x30]}}, &(0x7f0000001040)=""/4096, 0x6b, 0x1000, 0x0, 0x8, 0x10000}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7, 0x3, 0x75c, 0x4000, r1, 0xffff, '\x00', r3, r4, 0x1, 0x3, 0x5, 0x2}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff750000000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x11}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1.780745962s ago: executing program 3 (id=1661): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x1e, 0x4, 0x9, &(0x7f0000000040)={0x0, 0x0}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) dup(r4) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x40, 0x80) fcntl$notify(r7, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)=""/178, 0xb2}], 0x1, 0x8, 0xffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r9, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x7f}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0xd, 0xa8, 0x20, 0x4, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) dup3(r3, r2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 1.60932887s ago: executing program 2 (id=1665): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file0\x00', 0x100c404, &(0x7f0000000280)=ANY=[], 0x1, 0x1ff, &(0x7f0000000580)="$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") r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000011000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1.566463822s ago: executing program 2 (id=1666): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xf, 0x200, &(0x7f0000003c40)="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"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000380)="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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) remap_file_pages(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0xfffffffffffffffe, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x28000, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24004011) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)=""/240, 0xf0}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000002340)=""/4071, 0xfe7}, {&(0x7f00000009c0)=""/230, 0xe6}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000780)=""/152, 0x98}, {&(0x7f00000008c0)=""/233, 0xe9}, {&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f0000000840)=""/94, 0x5e}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000700)=""/119, 0x77}], 0xd}, 0x40002100) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) setregid(r5, r5) stat(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r8, r9, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001340)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000001440)=0xe8) mount$bpf(0x0, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140), 0x1000000, &(0x7f0000001480)={[{@gid}, {@gid}, {@gid={'gid', 0x3d, r5}}, {@uid={'uid', 0x3d, r6}}, {}, {@uid={'uid', 0x3d, r7}}, {@mode={'mode', 0x3d, 0x10000}}], [{@fowner_eq={'fowner', 0x3d, r9}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r10}}, {@subj_type={'subj_type', 0x3d, '^\'.:{+=,:['}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@pcr={'pcr', 0x3d, 0xa}}]}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480060003"], 0xf4}}, 0x0) kexec_load(0x5, 0x4, &(0x7f0000001040)=[{&(0x7f0000000e80)="0fff4a641bcf00df22346816f277e964340dce2064f4a1d74b3baa2e5320c0ead09efe320a559243d99c31e6453a050657dea06a3bf3a5b509d8a73c99762530df4f945a5ac3b1ae392d8a4f1857cd43e69ccd01d5e411c3de405496301de2b8a6b8c6c50798c3eeced40ab4f1c8d76e6c945ed01b1637e5612ceaf8749e7df5a4c5", 0x82, 0x1, 0x3}, {&(0x7f0000000f40)="1fe3e1e1df59f987498b1bf6d0db0ece6f2c505f276d947e024c64b8f08c242e7edd4cd909be2f08f9ea99d20b026962579136da928d209bf80903d960e5e39907f094d7ea5c79f3caa64cf7540b5eb3315aa8dc2180de4efb64e16f3b33b049d469ee41920037479a8444ba8030c6020394d4f8b0d4c63485262492a3e27c17bb372a6a7b768726e2ead342112ceae7e3c977af38c26948d277cf12e79763eed0d6045078be9b534c77fe21262c9261f1d9bffcaa2a7743db7bd97525ff63784e63e8aedd628ad1b317d0100501778f0935dd7d27b0f292ade206b29cbf0f1e89dff6d97ee3f048", 0xe8, 0x5, 0x200}, {&(0x7f0000000240)="8e2056aa0784412b4283951e698178066562257915544d885a321ada9573d58e1e22f6288fb72b083c9a4c7f405a36368c4e1b12f2268d3a83e1368236647bc86d57f3602a18b7789ba985ed2a90ed9e079ddccd42bb6fa615399fc874329e7e2c1fb1d5662c9cb4b2f1478972717f57", 0x70, 0x36e, 0x148000000}, {&(0x7f0000000180)="2a9697bd8cee23d1fb59799239f79e72", 0x10, 0x100000000, 0x2}], 0x140000) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000010c0)={0x2, 0x2, 0x6}) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, r11, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) 1.370436152s ago: executing program 6 (id=1667): r0 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547056ef5303cb81c0f8f2694ad16044e6348bacb7a9c28bc03db61de13436ff3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x1) 1.338979344s ago: executing program 2 (id=1668): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030328bd7000000000000a0000000800", @ANYRES32=r1], 0x1c}}, 0x0) 1.296319676s ago: executing program 2 (id=1669): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffbfffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x80) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$kcm(r2, 0x0, 0x40) socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x5, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) link(0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local, 0x1000000}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) 1.178424142s ago: executing program 2 (id=1670): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r6}, 0x8) r7 = bpf$MAP_CREATE(0x200000000000000, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000003}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081139000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103500000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xff00, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 940.306213ms ago: executing program 4 (id=1672): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r0, 0x33, 0x1, 0x9, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) (async) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) 623.584479ms ago: executing program 4 (id=1673): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x70, 0x1c0}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) 346.987253ms ago: executing program 4 (id=1674): prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x84000800}, {0x1000000a, 0x4, 0x200}], 0x10, 0x4}, 0x94) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x3, @multicast, 'vcan0\x00'}}, 0x80, 0x0}, 0x24004080) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x1c) r2 = getpid() shmctl$SHM_LOCK(0x0, 0xb) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e60}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000002e40)=[{{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f0000000380)=""/15, 0xf}, {&(0x7f0000000680)=""/72, 0x48}], 0x3, &(0x7f0000000740)=""/121, 0x79}, 0x7f}, {{&(0x7f00000007c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/236, 0xec}, {&(0x7f0000000a40)=""/235, 0xeb}, {&(0x7f0000002ec0)=""/93, 0x5d}, {&(0x7f0000000bc0)=""/172, 0xac}, {&(0x7f0000000c80)=""/11, 0xb}, {&(0x7f0000000cc0)=""/197, 0xc5}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001e40)=""/4096, 0x1000}, 0x10}], 0x2, 0x12101, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_LOW_DMA(r6, 0x227a, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0x69, 0x4, 0x4, 0x0, 0x0, 0xa, 0x40008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7c, 0x2}, 0x4580, 0x2, 0x800000, 0xb, 0x38000000000, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x140) sendmsg$tipc(r9, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000000240)=[{{0x0, 0xffffffffffffff93, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000002ca, 0x4040014) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x8, 0x6}, 0x0) 230.453348ms ago: executing program 3 (id=1675): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xd}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 230.270798ms ago: executing program 4 (id=1676): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0xff9f) 130.553753ms ago: executing program 4 (id=1677): r0 = socket$kcm(0xa, 0x3, 0x3a) read(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x4008090) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x0, 0xb000000}, 0x80, &(0x7f0000000080), 0x1}, 0x0) 72.144126ms ago: executing program 4 (id=1678): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) (async) sendfile(r0, r0, &(0x7f0000001000), 0xffff) (async) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1, &(0x7f0000000080)=[{}]}, 0x10) 2.297049ms ago: executing program 3 (id=1679): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030328bd7000000000000a000000080003", @ANYRES32=r1], 0x1c}}, 0x0) 0s ago: executing program 2 (id=1680): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00e80790ac1900"/21, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x200, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x54) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r7 = add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r7) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000240)={0x89, @rand_addr=0x64010102, 0x4e24, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): XT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.960551][ T5824] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.539118][ T5834] loop4: detected capacity change from 0 to 1024 [ 141.752421][ T70] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 141.763587][ T5834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.770678][ T70] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:5: Failed to release dquot type 1 [ 142.115261][ T5837] siw: device registration error -23 [ 142.296296][ T5837] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 142.313803][ T5837] loop5: detected capacity change from 0 to 512 [ 142.399413][ T28] audit: type=1400 audit(1774335850.300:460): avc: denied { create } for pid=5832 comm="syz.5.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 142.458349][ T5834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.464193][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.512188][ T28] audit: type=1400 audit(1774335850.408:461): avc: denied { write } for pid=5832 comm="syz.5.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 142.565662][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.608619][ T5845] loop2: detected capacity change from 0 to 512 [ 142.639763][ T5845] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.670394][ T5848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.664'. [ 142.744123][ T5845] EXT4-fs (loop2): 1 truncate cleaned up [ 142.753866][ T5845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.804260][ T5854] loop5: detected capacity change from 0 to 1024 [ 142.819632][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.905338][ T5858] lo speed is unknown, defaulting to 1000 [ 143.096544][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.671'. [ 143.141495][ T5866] loop2: detected capacity change from 0 to 512 [ 143.582157][ T5878] siw: device registration error -23 [ 143.589757][ T5878] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 143.606759][ T5878] loop5: detected capacity change from 0 to 512 [ 144.153806][ T5887] loop2: detected capacity change from 0 to 128 [ 144.243262][ T28] audit: type=1326 audit(1774335852.488:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aa79c799 code=0x7ffc0000 [ 144.360167][ T28] audit: type=1326 audit(1774335852.537:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7ff5aa79c799 code=0x7ffc0000 [ 144.433979][ T28] audit: type=1326 audit(1774335852.537:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aa79c799 code=0x7ffc0000 [ 144.778922][ T5893] loop5: detected capacity change from 0 to 512 [ 144.854073][ T5893] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 144.888921][ T28] audit: type=1326 audit(1774335852.547:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aa79c799 code=0x7ffc0000 [ 145.078376][ T5893] EXT4-fs (loop5): 1 truncate cleaned up [ 145.100031][ T5893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.115486][ T28] audit: type=1326 audit(1774335853.274:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aa79c799 code=0x7fc00000 [ 145.246112][ T5899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.278380][ T4642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.351383][ T5899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.435757][ T28] audit: type=1400 audit(1774335853.668:467): avc: denied { getopt } for pid=5903 comm="syz.5.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.525563][ T5899] FAULT_INJECTION: forcing a failure. [ 145.525563][ T5899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.743388][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: syz.4.682 Tainted: G W syzkaller #0 PREEMPT(full) [ 145.743429][ T5899] Tainted: [W]=WARN [ 145.743438][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 145.743452][ T5899] Call Trace: [ 145.743460][ T5899] [ 145.743541][ T5899] __dump_stack+0x1d/0x30 [ 145.743570][ T5899] dump_stack_lvl+0x95/0xd0 [ 145.743627][ T5899] dump_stack+0x15/0x1b [ 145.743652][ T5899] should_fail_ex+0x263/0x280 [ 145.743682][ T5899] should_fail+0xb/0x20 [ 145.743704][ T5899] should_fail_usercopy+0x1a/0x20 [ 145.743785][ T5899] _copy_from_user+0x1c/0xb0 [ 145.743818][ T5899] ___sys_sendmsg+0xc1/0x1e0 [ 145.743860][ T5899] __sys_sendmmsg+0x185/0x320 [ 145.743982][ T5899] __x64_sys_sendmmsg+0x57/0x70 [ 145.744012][ T5899] x64_sys_call+0x27aa/0x3020 [ 145.744042][ T5899] do_syscall_64+0x12c/0x370 [ 145.744118][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.744144][ T5899] RIP: 0033:0x7ff5aa79c799 [ 145.744162][ T5899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.744180][ T5899] RSP: 002b:00007ff5a91f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 145.744202][ T5899] RAX: ffffffffffffffda RBX: 00007ff5aaa15fa0 RCX: 00007ff5aa79c799 [ 145.744275][ T5899] RDX: 0000000000000002 RSI: 00002000000060c0 RDI: 0000000000000006 [ 145.744291][ T5899] RBP: 00007ff5a91f7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.744305][ T5899] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.744322][ T5899] R13: 00007ff5aaa16038 R14: 00007ff5aaa15fa0 R15: 00007ffdd5d2ac98 [ 145.744346][ T5899] [ 146.024795][ T5915] siw: device registration error -23 [ 146.032445][ T5915] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 146.049061][ T5915] loop5: detected capacity change from 0 to 512 [ 146.433461][ T28] audit: type=1326 audit(1774335854.652:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.2.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4ff6c799 code=0x7ffc0000 [ 146.532910][ T5925] xt_limit: Overflow, try lower: 65536/2147483648 [ 146.605308][ T28] audit: type=1400 audit(1774335854.819:469): avc: denied { read } for pid=5920 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 146.644887][ T28] audit: type=1326 audit(1774335854.819:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.2.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f7e4ff6c799 code=0x7ffc0000 [ 146.669102][ T28] audit: type=1326 audit(1774335854.819:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.2.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4ff6c799 code=0x7ffc0000 [ 147.172596][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 147.276217][ T5994] loop2: detected capacity change from 0 to 128 [ 147.419652][ T6001] loop3: detected capacity change from 0 to 2048 [ 147.538911][ T6019] FAT-fs (loop9): unable to read boot sector [ 147.572329][ T6019] netlink: 'syz.4.711': attribute type 10 has an invalid length. [ 147.591539][ T6019] team0: Port device wg1 added [ 147.753860][ T6037] bridge2: entered promiscuous mode [ 147.759528][ T6037] bridge2: entered allmulticast mode [ 147.768102][ T6037] team0: Port device bridge2 added [ 147.787348][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.717'. [ 147.839880][ T6039] bpf: Bad value for 'uid' [ 147.888125][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 147.929078][ T6049] loop5: detected capacity change from 0 to 1024 [ 147.936737][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.721'. [ 147.964046][ T6049] EXT4-fs: test_dummy_encryption option not supported [ 148.022111][ T6052] xt_hashlimit: size too large, truncated to 1048576 [ 148.117752][ T6055] lo speed is unknown, defaulting to 1000 [ 148.186799][ T6060] loop2: detected capacity change from 0 to 1024 [ 148.196567][ T6060] EXT4-fs: inline encryption not supported [ 148.206643][ T6060] EXT4-fs: Ignoring removed bh option [ 148.232221][ T6060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.377170][ T6072] loop5: detected capacity change from 0 to 512 [ 148.406999][ T6071] bond0: entered promiscuous mode [ 148.416371][ T6071] batadv0: entered promiscuous mode [ 148.424211][ T6071] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 148.521280][ T6071] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 148.587522][ T6072] EXT4-fs (loop5): 1 orphan inode deleted [ 148.604056][ T6072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.620623][ T6072] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.643875][ T70] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:5: Failed to release dquot type 1 [ 148.656349][ T10] IPVS: starting estimator thread 0... [ 148.680707][ T6071] bond0: left promiscuous mode [ 148.692369][ T6071] batadv0: left promiscuous mode [ 148.733732][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.784136][ T6082] IPVS: using max 2592 ests per chain, 129600 per kthread [ 148.993074][ T6093] loop4: detected capacity change from 0 to 512 [ 149.019295][ T6093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.048702][ T6093] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.298007][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.817612][ T4642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.956482][ T6127] FAULT_INJECTION: forcing a failure. [ 149.956482][ T6127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 149.970446][ T6127] CPU: 0 UID: 0 PID: 6127 Comm: syz.6.740 Tainted: G W syzkaller #0 PREEMPT(full) [ 149.970547][ T6127] Tainted: [W]=WARN [ 149.970555][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.970567][ T6127] Call Trace: [ 149.970574][ T6127] [ 149.970582][ T6127] __dump_stack+0x1d/0x30 [ 149.970659][ T6127] dump_stack_lvl+0x95/0xd0 [ 149.970682][ T6127] dump_stack+0x15/0x1b [ 149.970708][ T6127] should_fail_ex+0x263/0x280 [ 149.970741][ T6127] should_fail_alloc_page+0xf2/0x100 [ 149.970843][ T6127] __alloc_frozen_pages_noprof+0x108/0x360 [ 149.970872][ T6127] alloc_pages_mpol+0xb3/0x260 [ 149.970982][ T6127] vma_alloc_folio_noprof+0x1a9/0x300 [ 149.971020][ T6127] handle_mm_fault+0x1129/0x3020 [ 149.971064][ T6127] ? vma_start_read+0x1c7/0x2c0 [ 149.971097][ T6127] do_user_addr_fault+0x62f/0x1050 [ 149.971127][ T6127] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 149.971177][ T6127] ? trace_page_fault_user+0x1f/0xe0 [ 149.971263][ T6127] exc_page_fault+0x62/0xa0 [ 149.971299][ T6127] asm_exc_page_fault+0x26/0x30 [ 149.971318][ T6127] RIP: 0033:0x7f47c9d43a63 [ 149.971338][ T6127] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 149.971424][ T6127] RSP: 002b:00007f47c88e6470 EFLAGS: 00010202 [ 149.971444][ T6127] RAX: 0000000000004000 RBX: 00007f47c88e6530 RCX: 00007f47c04c7000 [ 149.971460][ T6127] RDX: 00007f47c88e66d0 RSI: 0000000000000075 RDI: 00007f47c88e65d0 [ 149.971474][ T6127] RBP: 000000000000002e R08: 0000000000000006 R09: 000000000000001f [ 149.971486][ T6127] R10: 0000000000000024 R11: 00007f47c88e6530 R12: 0000000000000001 [ 149.971499][ T6127] R13: 00007f47c9f42620 R14: 0000000000000002 R15: 00007f47c88e65d0 [ 149.971518][ T6127] [ 149.971677][ T6127] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 150.282367][ T6127] loop6: detected capacity change from 0 to 1024 [ 150.293526][ T6127] EXT4-fs: inline encryption not supported [ 150.317573][ T6127] EXT4-fs: Ignoring removed bh option [ 150.323679][ T6127] EXT4-fs: inline encryption not supported [ 150.330197][ T6127] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.369140][ T6127] EXT4-fs (loop6): orphan cleanup on readonly fs [ 150.376096][ T6127] EXT4-fs error (device loop6): ext4_quota_enable:7192: comm syz.6.740: inode #2304: comm syz.6.740: iget: illegal inode # [ 150.389352][ T6127] loop6: lost filesystem error report for type 5 error -117 [ 150.389543][ T6127] EXT4-fs error (device loop6): ext4_quota_enable:7195: comm syz.6.740: Bad quota inode: 2304, type: 2 [ 150.396911][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 150.396933][ C1] EXT4-fs (loop6): initial error at time 1774335858: ext4_quota_enable:7192 [ 150.396975][ C1] EXT4-fs (loop6): last error at time 1774335858: ext4_quota_enable:7192 [ 150.433533][ T6127] loop6: lost filesystem error report for type 5 error -117 [ 150.435421][ T6127] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 150.459949][ T6127] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 150.467882][ T6127] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.507574][ T6138] FAULT_INJECTION: forcing a failure. [ 150.507574][ T6138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.527489][ T5557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.537204][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.4.744 Tainted: G W syzkaller #0 PREEMPT(full) [ 150.537241][ T6138] Tainted: [W]=WARN [ 150.537248][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.537303][ T6138] Call Trace: [ 150.537312][ T6138] [ 150.537321][ T6138] __dump_stack+0x1d/0x30 [ 150.537354][ T6138] dump_stack_lvl+0x95/0xd0 [ 150.537438][ T6138] dump_stack+0x15/0x1b [ 150.537466][ T6138] should_fail_ex+0x263/0x280 [ 150.537498][ T6138] should_fail+0xb/0x20 [ 150.537603][ T6138] should_fail_usercopy+0x1a/0x20 [ 150.537635][ T6138] _copy_from_user+0x1c/0xb0 [ 150.537670][ T6138] ___sys_sendmsg+0xc1/0x1e0 [ 150.537719][ T6138] __x64_sys_sendmsg+0xd4/0x160 [ 150.537771][ T6138] x64_sys_call+0x194c/0x3020 [ 150.537801][ T6138] do_syscall_64+0x12c/0x370 [ 150.537830][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.537889][ T6138] RIP: 0033:0x7ff5aa79c799 [ 150.537933][ T6138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.537955][ T6138] RSP: 002b:00007ff5a91f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.537980][ T6138] RAX: ffffffffffffffda RBX: 00007ff5aaa15fa0 RCX: 00007ff5aa79c799 [ 150.537997][ T6138] RDX: 0000000020008004 RSI: 0000200000000140 RDI: 0000000000000006 [ 150.538012][ T6138] RBP: 00007ff5a91f7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.538027][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.538042][ T6138] R13: 00007ff5aaa16038 R14: 00007ff5aaa15fa0 R15: 00007ffdd5d2ac98 [ 150.538070][ T6138] [ 150.759632][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 150.877400][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 150.877490][ T28] audit: type=1400 audit(1774335859.033:488): avc: denied { accept } for pid=6158 comm="syz.6.749" lport=35620 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.914651][ T28] audit: type=1400 audit(1774335859.072:489): avc: denied { setopt } for pid=6158 comm="syz.6.749" lport=35620 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 151.008581][ T6170] FAULT_INJECTION: forcing a failure. [ 151.008581][ T6170] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 151.051298][ T6170] CPU: 0 UID: 0 PID: 6170 Comm: syz.5.757 Tainted: G W syzkaller #0 PREEMPT(full) [ 151.051337][ T6170] Tainted: [W]=WARN [ 151.051412][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.051428][ T6170] Call Trace: [ 151.051436][ T6170] [ 151.051444][ T6170] __dump_stack+0x1d/0x30 [ 151.051478][ T6170] dump_stack_lvl+0x95/0xd0 [ 151.051547][ T6170] dump_stack+0x15/0x1b [ 151.051577][ T6170] should_fail_ex+0x263/0x280 [ 151.051675][ T6170] should_fail_alloc_page+0xf2/0x100 [ 151.051730][ T6170] __alloc_frozen_pages_noprof+0x108/0x360 [ 151.051767][ T6170] alloc_pages_mpol+0xb3/0x260 [ 151.051799][ T6170] vma_alloc_folio_noprof+0x1a9/0x300 [ 151.051901][ T6170] handle_mm_fault+0x1129/0x3020 [ 151.051939][ T6170] ? vma_start_read+0x1c7/0x2c0 [ 151.051982][ T6170] do_user_addr_fault+0x62f/0x1050 [ 151.052056][ T6170] ? ksys_mmap_pgoff+0xc1/0x310 [ 151.052087][ T6170] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 151.052119][ T6170] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 151.052148][ T6170] ? trace_page_fault_user+0x1f/0xe0 [ 151.052226][ T6170] exc_page_fault+0x62/0xa0 [ 151.052329][ T6170] asm_exc_page_fault+0x26/0x30 [ 151.052396][ T6170] RIP: 0033:0x7fd7a8303a63 [ 151.052417][ T6170] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 151.052441][ T6170] RSP: 002b:00007fd7a6ea6470 EFLAGS: 00010206 [ 151.052463][ T6170] RAX: 0000000000002008 RBX: 00007fd7a6ea6530 RCX: 00007fd79ea87000 [ 151.052480][ T6170] RDX: 00007fd7a6ea66d0 RSI: 0000000000000003 RDI: 00007fd7a6ea65d0 [ 151.052575][ T6170] RBP: 0000000000000008 R08: 0000000000000009 R09: 00000000000001b4 [ 151.052591][ T6170] R10: 00000000000001be R11: 00007fd7a6ea6530 R12: 0000000000001001 [ 151.052607][ T6170] R13: 00007fd7a8502620 R14: 00000000000000f3 R15: 00007fd7a6ea65d0 [ 151.052629][ T6170] [ 151.255466][ T6180] loop2: detected capacity change from 0 to 512 [ 151.263587][ T6180] vfat: Bad value for 'shortname' [ 151.270238][ T6170] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 151.287673][ T6170] loop5: detected capacity change from 0 to 2048 [ 151.421098][ T28] audit: type=1400 audit(1774335859.567:490): avc: denied { bind } for pid=6187 comm="syz.5.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 151.502986][ T6188] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 151.504775][ T28] audit: type=1400 audit(1774335859.567:491): avc: denied { write } for pid=6187 comm="syz.5.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 151.511543][ T6188] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 151.596225][ T6194] netlink: 'syz.3.766': attribute type 2 has an invalid length. [ 151.620519][ T6194] netlink: 'syz.3.766': attribute type 1 has an invalid length. [ 151.666645][ T6195] loop3: detected capacity change from 0 to 1024 [ 151.711461][ T6195] EXT4-fs: inline encryption not supported [ 151.717528][ T6195] EXT4-fs: inline encryption not supported [ 151.775122][ T6195] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.791429][ T6198] loop5: detected capacity change from 0 to 128 [ 151.850320][ T6198] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.881354][ T6195] EXT4-fs (loop3): orphan cleanup on readonly fs [ 151.902704][ T6204] loop6: detected capacity change from 0 to 256 [ 151.923047][ T28] audit: type=1400 audit(1774335860.071:492): avc: denied { write } for pid=6205 comm="syz.4.770" name="cgroup.subtree_control" dev="cgroup2" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.935767][ T6195] EXT4-fs error (device loop3): ext4_quota_enable:7192: comm syz.3.766: inode #2304: comm syz.3.766: iget: illegal inode # [ 151.975763][ T6195] loop3: lost filesystem error report for type 5 error -117 [ 151.981954][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 151.996104][ C1] EXT4-fs (loop3): initial error at time 1774335860: ext4_quota_enable:7192 [ 152.004924][ C1] EXT4-fs (loop3): last error at time 1774335860: ext4_quota_enable:7192 [ 152.013777][ T6195] EXT4-fs error (device loop3): ext4_quota_enable:7195: comm syz.3.766: Bad quota inode: 2304, type: 2 [ 152.025830][ T6198] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.068389][ T28] audit: type=1400 audit(1774335860.101:493): avc: denied { open } for pid=6205 comm="syz.4.770" path="" dev="cgroup2" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.068916][ T6195] loop3: lost filesystem error report for type 5 error -117 [ 152.103810][ T28] audit: type=1400 audit(1774335860.101:494): avc: denied { ioctl } for pid=6205 comm="syz.4.770" path="" dev="cgroup2" ino=197 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.136628][ T6195] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 152.171678][ T6195] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 152.200774][ T28] audit: type=1400 audit(1774335860.329:495): avc: denied { link } for pid=6196 comm="syz.5.767" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 152.202473][ T6195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.265910][ T4642] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.331470][ T28] audit: type=1400 audit(1774335860.457:496): avc: denied { write } for pid=6213 comm="syz.5.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.402280][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.405881][ T6205] syz.4.770 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 152.439055][ T6205] CPU: 0 UID: 0 PID: 6205 Comm: syz.4.770 Tainted: G W syzkaller #0 PREEMPT(full) [ 152.439133][ T6205] Tainted: [W]=WARN [ 152.439141][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.439153][ T6205] Call Trace: [ 152.439160][ T6205] [ 152.439169][ T6205] __dump_stack+0x1d/0x30 [ 152.439210][ T6205] dump_stack_lvl+0x95/0xd0 [ 152.439239][ T6205] dump_stack+0x15/0x1b [ 152.439311][ T6205] dump_header+0x80/0x240 [ 152.439336][ T6205] oom_kill_process+0x295/0x350 [ 152.439363][ T6205] out_of_memory+0x97d/0xb80 [ 152.439426][ T6205] try_charge_memcg+0x62e/0xa10 [ 152.439463][ T6205] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 152.439558][ T6205] __swap_cache_prepare_and_add+0x386/0x530 [ 152.439599][ T6205] swap_cache_alloc_folio+0xa2/0x120 [ 152.439698][ T6205] swap_cluster_readahead+0x26e/0x3d0 [ 152.439736][ T6205] swapin_readahead+0xde/0x840 [ 152.439770][ T6205] ? __rcu_read_unlock+0x4e/0x70 [ 152.439796][ T6205] ? __perf_event_task_sched_in+0xa65/0xad0 [ 152.439831][ T6205] ? __list_add_valid_or_report+0x38/0xe0 [ 152.439870][ T6205] ? xfd_validate_state+0x45/0xf0 [ 152.439910][ T6205] ? __rcu_read_unlock+0x4e/0x70 [ 152.439959][ T6205] ? swap_cache_get_folio+0x26f/0x280 [ 152.440052][ T6205] do_swap_page+0x30d/0x2220 [ 152.440082][ T6205] ? __schedule+0x93c/0xd40 [ 152.440113][ T6205] ? __rcu_read_lock+0x36/0x50 [ 152.440157][ T6205] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 152.440298][ T6205] handle_mm_fault+0xb46/0x3020 [ 152.440471][ T6205] ? vma_start_read+0x1c7/0x2c0 [ 152.440497][ T6205] do_user_addr_fault+0x62f/0x1050 [ 152.440537][ T6205] ? trace_page_fault_user+0x1f/0xe0 [ 152.440567][ T6205] exc_page_fault+0x62/0xa0 [ 152.440646][ T6205] asm_exc_page_fault+0x26/0x30 [ 152.440668][ T6205] RIP: 0033:0x7ff5aa75cfce [ 152.440687][ T6205] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 152.440708][ T6205] RSP: 002b:00007ffdd5d2ad78 EFLAGS: 00010246 [ 152.440729][ T6205] RAX: 0000000000000000 RBX: 000055555c1ae500 RCX: 00007ff5aa75cfce [ 152.440744][ T6205] RDX: 00007ffdd5d2add0 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.440790][ T6205] RBP: 00007ff5aaa17da0 R08: 0000000000000000 R09: 0000000000000000 [ 152.440803][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000025336 [ 152.440818][ T6205] R13: 00007ff5aaa15fac R14: 00000000000250e2 R15: 00007ff5aaa15fa0 [ 152.440840][ T6205] [ 152.701496][ T6205] memory: usage 269760kB, limit 307200kB, failcnt 2589 [ 152.719959][ T6205] memory+swap: usage 249248kB, limit 9007199254740988kB, failcnt 0 [ 152.740200][ T6205] kmem: usage 225020kB, limit 9007199254740988kB, failcnt 0 [ 152.750304][ T6205] Memory cgroup stats for /syz4: [ 152.750671][ T6205] cache 0 [ 152.772118][ T6205] rss 24576 [ 152.775783][ T6225] netlink: 14 bytes leftover after parsing attributes in process `syz.5.775'. [ 152.788620][ T6205] shmem 0 [ 152.810701][ T6205] mapped_file 0 [ 152.822820][ T6205] dirty 0 [ 152.826470][ T6205] writeback 8192 [ 152.841021][ T6205] workingset_refault_anon 33 [ 152.845733][ T6205] workingset_refault_file 65 [ 152.850414][ T6205] swap 540672 [ 152.864308][ T6225] hsr_slave_0: left promiscuous mode [ 152.881990][ T6205] swapcached 647168 [ 152.886621][ T28] audit: type=1400 audit(1774335860.992:497): avc: denied { ioctl } for pid=6220 comm="syz.3.774" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 152.913242][ T6205] pgpgin 89880 [ 152.918948][ T6205] pgpgout 89865 [ 152.926895][ T6205] pgfault 126300 [ 152.933584][ T6205] pgmajfault 18 [ 152.943597][ T6225] hsr_slave_1: left promiscuous mode [ 152.952049][ T6205] inactive_anon 12288 [ 152.968449][ T6205] active_anon 45056 [ 152.985290][ T6205] inactive_file 4096 [ 153.003742][ T6205] active_file 0 [ 153.010558][ T6205] unevictable 0 [ 153.018572][ T6205] hierarchical_memory_limit 314572800 [ 153.030483][ T6205] hierarchical_memsw_limit 9223372036854771712 [ 153.046678][ T6205] total_cache 0 [ 153.059606][ T6205] total_rss 24576 [ 153.069947][ T6205] total_shmem 0 [ 153.081026][ T6205] total_mapped_file 0 [ 153.097963][ T6205] total_dirty 0 [ 153.106769][ T6205] total_writeback 8192 [ 153.114896][ T6205] total_workingset_refault_anon 33 [ 153.125764][ T6205] total_workingset_refault_file 65 [ 153.131408][ T6205] total_swap 540672 [ 153.135438][ T6205] total_swapcached 647168 [ 153.140080][ T6205] total_pgpgin 89880 [ 153.147729][ T6205] total_pgpgout 89865 [ 153.152071][ T6205] total_pgfault 126300 [ 153.156601][ T6205] total_pgmajfault 18 [ 153.160849][ T6205] total_inactive_anon 12288 [ 153.165621][ T6205] total_active_anon 45056 [ 153.170221][ T6205] total_inactive_file 4096 [ 153.175185][ T6205] total_active_file 0 [ 153.179502][ T6205] total_unevictable 0 [ 153.183594][ T6205] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.770,pid=6205,uid=0 [ 153.199130][ T6205] Memory cgroup out of memory: Killed process 6205 (syz.4.770) total-vm:96344kB, anon-rss:1244kB, file-rss:22516kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 153.299329][ T6240] loop5: detected capacity change from 0 to 512 [ 153.348495][ T6240] EXT4-fs: Ignoring removed i_version option [ 153.354693][ T6240] EXT4-fs: Ignoring removed bh option [ 153.365833][ T6243] loop4: detected capacity change from 0 to 1024 [ 153.393163][ T6243] EXT4-fs: test_dummy_encryption option not supported [ 153.598001][ T6240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.833709][ T6253] loop4: detected capacity change from 0 to 512 [ 153.901011][ T6240] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.971433][ T6253] EXT4-fs (loop4): 1 orphan inode deleted [ 153.993258][ T6253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.014335][ T6253] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.076042][ T6253] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 154.584095][ T30] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 155.353438][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.680687][ T6262] netlink: 'syz.3.786': attribute type 1 has an invalid length. [ 155.702271][ T4642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.723435][ T6262] bond2: entered promiscuous mode [ 155.730311][ T6262] bond2: entered allmulticast mode [ 155.736414][ T6262] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.767457][ T6266] loop2: detected capacity change from 0 to 512 [ 155.774626][ T6266] ext4: Unknown parameter 'func' [ 155.851803][ T6276] loop4: detected capacity change from 0 to 512 [ 155.877944][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.879448][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.6.792'. [ 155.898888][ T6262] macvlan2: entered promiscuous mode [ 155.904725][ T6262] macvlan2: entered allmulticast mode [ 155.909367][ T6276] ------------[ cut here ]------------ [ 155.911891][ T6262] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 155.916123][ T6276] EA inode 11 i_nlink=2 [ 155.916136][ T6276] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.4.790/6276 [ 155.916275][ T6276] Modules linked in: [ 155.916299][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz.4.790 Tainted: G W syzkaller #0 PREEMPT(full) [ 155.925776][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.927726][ T6276] Tainted: [W]=WARN [ 155.927735][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.950097][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 155.950113][ T28] audit: type=1400 audit(1774335864.063:523): avc: denied { lock } for pid=6261 comm="syz.3.786" path="socket:[29824]" dev="sockfs" ino=29824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 155.954026][ T6276] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 156.014169][ T6276] Code: 74 46 99 ff 4c 8d 2d ed ac 5d 05 49 8d 7e 40 e8 14 e0 b5 ff 49 8b 6e 40 4c 89 e7 e8 48 db b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 6f 87 dd 03 66 66 66 66 66 66 2e [ 156.034447][ T6276] RSP: 0018:ffffc9000229f778 EFLAGS: 00010246 [ 156.040655][ T6276] RAX: ffff8881022dac48 RBX: ffff8881087fca68 RCX: ffffffff81c01828 [ 156.048969][ T6276] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dc500 [ 156.057584][ T6276] RBP: 000000000000000b R08: 00018881087fca1b R09: 0000000000000000 [ 156.065759][ T6276] R10: ffffc9000229f6a8 R11: 0001c9000229f6a8 R12: ffff8881087fca18 [ 156.074109][ T6276] R13: ffffffff871dc500 R14: ffff8881087fc9d0 R15: 0000000000000001 [ 156.082633][ T6276] FS: 00007ff5a91f76c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 156.091627][ T6276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.098323][ T6276] CR2: 00007f03ba4b5000 CR3: 0000000130bba000 CR4: 00000000003506f0 [ 156.106710][ T6276] Call Trace: [ 156.110267][ T6276] [ 156.113321][ T6276] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 156.119392][ T6276] ? errseq_check+0x2c/0x50 [ 156.124088][ T6276] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 156.129967][ T6276] ? ext4_truncate+0x92b/0xb00 [ 156.135183][ T6276] ext4_evict_inode+0xa1f/0xd60 [ 156.140238][ T6276] ? __pfx_ext4_evict_inode+0x10/0x10 [ 156.145770][ T6276] evict+0x2af/0x510 [ 156.150055][ T6276] ? __dquot_initialize+0x146/0x7c0 [ 156.155387][ T6276] iput+0x41a/0x580 [ 156.159484][ T6276] ext4_process_orphan+0x1a9/0x1c0 [ 156.164682][ T6276] ext4_orphan_cleanup+0x6a8/0xa00 [ 156.170092][ T6276] ext4_fill_super+0x3408/0x37c0 [ 156.175107][ T6276] ? set_blocksize+0x14c/0x270 [ 156.180309][ T6276] ? setup_bdev_super+0x30e/0x370 [ 156.185518][ T6276] ? __pfx_ext4_fill_super+0x10/0x10 [ 156.190826][ T6276] get_tree_bdev_flags+0x291/0x300 [ 156.195999][ T6276] ? __pfx_ext4_fill_super+0x10/0x10 [ 156.201409][ T6276] get_tree_bdev+0x1f/0x30 [ 156.205889][ T6276] ext4_get_tree+0x1c/0x30 [ 156.210445][ T6276] vfs_get_tree+0x57/0x1d0 [ 156.215242][ T6276] do_new_mount+0x288/0x8d0 [ 156.220111][ T6276] path_mount+0x4d0/0xbc0 [ 156.224496][ T6276] __se_sys_mount+0x28c/0x2e0 [ 156.229383][ T6276] __x64_sys_mount+0x67/0x80 [ 156.234597][ T6276] x64_sys_call+0x2d61/0x3020 [ 156.239501][ T6276] do_syscall_64+0x12c/0x370 [ 156.244458][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.250507][ T6276] RIP: 0033:0x7ff5aa79da0a [ 156.255034][ T6276] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.275133][ T6276] RSP: 002b:00007ff5a91f6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 156.283847][ T6276] RAX: ffffffffffffffda RBX: 00007ff5a91f6ee0 RCX: 00007ff5aa79da0a [ 156.292137][ T6276] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007ff5a91f6ea0 [ 156.300329][ T6276] RBP: 00002000000009c0 R08: 00007ff5a91f6ee0 R09: 0000000000800718 [ 156.308695][ T6276] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 156.316851][ T6276] R13: 00007ff5a91f6ea0 R14: 000000000000048d R15: 0000200000000200 [ 156.324944][ T6276] [ 156.328049][ T6276] ---[ end trace 0000000000000000 ]--- [ 156.334104][ T6276] EXT4-fs (loop4): 1 orphan inode deleted [ 156.340817][ T6276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.362368][ T6276] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 156.363337][ T6280] bond1: entered promiscuous mode [ 156.372698][ T6276] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 156.376695][ T6280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.383576][ T6276] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 156.399109][ T28] audit: type=1326 audit(1774335864.500:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.3.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb408c799 code=0x7ffc0000 [ 156.423336][ T28] audit: type=1326 audit(1774335864.500:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.3.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb408c799 code=0x7ffc0000 [ 156.461386][ T6276] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.537434][ T6276] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.782828][ T6276] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.470541][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 157.518792][ T28] audit: type=1400 audit(1774335865.611:526): avc: denied { watch } for pid=6309 comm="syz.2.800" path="/167/file0" dev="tmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 157.569347][ T28] audit: type=1400 audit(1774335865.611:527): avc: denied { watch_reads } for pid=6309 comm="syz.2.800" path="/167/file0" dev="tmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 157.702316][ T6276] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.766698][ T6315] geneve2: entered promiscuous mode [ 157.847651][ T30] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.871044][ T30] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.019354][ T28] audit: type=1400 audit(1774335866.107:528): avc: denied { sqpoll } for pid=6320 comm="syz.2.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 158.772716][ T6276] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.845042][ T6276] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.866929][ T6341] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 159.058588][ T6333] loop3: detected capacity change from 0 to 256 [ 159.183810][ T6333] FAT-fs (loop3): Directory bread(block 64) failed [ 159.211179][ T6333] FAT-fs (loop3): Directory bread(block 65) failed [ 159.344936][ T6333] FAT-fs (loop3): Directory bread(block 66) failed [ 159.351731][ T6333] FAT-fs (loop3): Directory bread(block 67) failed [ 159.358899][ T6333] FAT-fs (loop3): Directory bread(block 68) failed [ 159.365457][ T6333] FAT-fs (loop3): Directory bread(block 69) failed [ 159.372349][ T6333] FAT-fs (loop3): Directory bread(block 70) failed [ 159.380040][ T6333] FAT-fs (loop3): Directory bread(block 71) failed [ 159.434959][ T6333] FAT-fs (loop3): Directory bread(block 72) failed [ 159.442180][ T6333] FAT-fs (loop3): Directory bread(block 73) failed [ 159.516442][ T6332] team0: Port device vxcan1 removed [ 159.553951][ T6332] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 160.239413][ T6369] bond0: entered allmulticast mode [ 160.471744][ T6367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.991120][ T6386] siw: device registration error -23 [ 162.142626][ T6386] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 162.154466][ T6386] loop5: detected capacity change from 0 to 512 [ 162.605140][ T6394] loop5: detected capacity change from 0 to 512 [ 162.613789][ T6394] EXT4-fs: Ignoring removed bh option [ 162.624980][ T6394] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.642261][ T6394] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 162.656284][ T6394] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 162.664537][ T6394] EXT4-fs (loop5): orphan cleanup on readonly fs [ 162.671704][ T6394] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 4 [ 162.681900][ T6394] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 162.692244][ T6394] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.824: Failed to acquire dquot type 1 [ 162.703955][ T6394] loop5: lost filesystem error report for type 5 error -5 [ 162.705163][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 162.719984][ C0] EXT4-fs (loop5): last error at time 1774335870: ext4_acquire_dquot:7001 [ 162.732175][ T6394] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.824: Invalid block bitmap block 0 in block_group 0 [ 162.746096][ T6394] loop5: lost filesystem error report for type 5 error -117 [ 162.746565][ T6394] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.824: Invalid block bitmap block 0 in block_group 0 [ 162.768845][ T6394] loop5: lost filesystem error report for type 5 error -117 [ 162.821303][ T6394] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.824: Invalid block bitmap block 0 in block_group 0 [ 162.842426][ T6394] loop5: lost filesystem error report for type 5 error -117 [ 162.842791][ T6394] Quota error (device loop5): write_blk: dquota write failed [ 162.906022][ T6394] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 162.936420][ T6394] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.824: Failed to acquire dquot type 1 [ 162.976391][ T6394] loop5: lost filesystem error report for type 5 error -28 [ 162.986710][ T6394] Quota error (device loop5): write_blk: dquota write failed [ 163.207615][ T6394] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 163.218360][ T6394] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.824: Failed to acquire dquot type 1 [ 163.247802][ T6394] loop5: lost filesystem error report for type 5 error -28 [ 163.248115][ T6394] EXT4-fs (loop5): 1 orphan inode deleted [ 163.278638][ T6394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.359715][ T6404] netlink: 'syz.2.827': attribute type 5 has an invalid length. [ 163.392781][ T4642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.450450][ T6404] loop2: detected capacity change from 0 to 4096 [ 163.461444][ T6406] lo speed is unknown, defaulting to 1000 [ 163.490160][ T6404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.504060][ T6406] lo speed is unknown, defaulting to 1000 [ 163.519425][ T6406] lo speed is unknown, defaulting to 1000 [ 163.535478][ T6404] EXT4-fs (loop2): shut down requested (2) [ 163.547739][ T28] audit: type=1400 audit(1774335871.603:529): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 163.572680][ T6406] infiniband syU×: set active [ 163.577411][ T10] lo speed is unknown, defaulting to 1000 [ 163.580640][ T6404] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 163.592471][ T6406] infiniband syU×: added lo [ 163.609525][ T28] audit: type=1400 audit(1774335871.603:530): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.609869][ T6406] RDS/IB: syU×: added [ 163.636431][ T28] audit: type=1400 audit(1774335871.603:531): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.641271][ T6404] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 163.658811][ T28] audit: type=1400 audit(1774335871.603:532): avc: denied { add_name } for pid=2982 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.699469][ T6406] smc: adding ib device syU× with port count 1 [ 163.707370][ T6406] smc: ib device syU× port 1 has no pnetid [ 163.709703][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 163.714780][ T3514] lo speed is unknown, defaulting to 1000 [ 163.734555][ T6406] lo speed is unknown, defaulting to 1000 [ 163.774611][ T6406] lo speed is unknown, defaulting to 1000 [ 163.801707][ T6404] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.863775][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.830'. [ 163.870066][ T6406] lo speed is unknown, defaulting to 1000 [ 163.873121][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.903642][ T6428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.911338][ T6431] loop2: detected capacity change from 0 to 128 [ 163.981610][ T6406] lo speed is unknown, defaulting to 1000 [ 164.030980][ T6406] lo speed is unknown, defaulting to 1000 [ 164.070390][ T6406] lo speed is unknown, defaulting to 1000 [ 164.206427][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.833'. [ 164.310363][ T6442] dummy0: entered promiscuous mode [ 164.315691][ T6442] macsec1: entered allmulticast mode [ 164.321467][ T6442] dummy0: entered allmulticast mode [ 164.328737][ T6442] dummy0: left allmulticast mode [ 164.336642][ T6442] dummy0: left promiscuous mode [ 164.420083][ T6451] loop3: detected capacity change from 0 to 8192 [ 164.480711][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.552002][ T6460] loop4: detected capacity change from 0 to 512 [ 164.565727][ T6458] lo speed is unknown, defaulting to 1000 [ 164.578963][ T6458] lo speed is unknown, defaulting to 1000 [ 164.594905][ T6460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.621814][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 164.674292][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 164.775675][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.343206][ T6478] loop5: detected capacity change from 0 to 256 [ 165.400851][ T6478] FAT-fs (loop5): Directory bread(block 64) failed [ 165.407833][ T6478] FAT-fs (loop5): Directory bread(block 65) failed [ 165.414661][ T6478] FAT-fs (loop5): Directory bread(block 66) failed [ 165.422074][ T6478] FAT-fs (loop5): Directory bread(block 67) failed [ 165.432664][ T6478] FAT-fs (loop5): Directory bread(block 68) failed [ 165.439673][ T6478] FAT-fs (loop5): Directory bread(block 69) failed [ 165.446905][ T6478] FAT-fs (loop5): Directory bread(block 70) failed [ 165.453733][ T6478] FAT-fs (loop5): Directory bread(block 71) failed [ 165.460740][ T6478] FAT-fs (loop5): Directory bread(block 72) failed [ 165.467464][ T6478] FAT-fs (loop5): Directory bread(block 73) failed [ 165.851936][ T6484] netlink: 88 bytes leftover after parsing attributes in process `syz.3.850'. [ 166.307428][ T3486] lo speed is unknown, defaulting to 1000 [ 167.459627][ T6487] siw: device registration error -23 [ 167.467251][ T6487] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 167.480768][ T6487] loop3: detected capacity change from 0 to 512 [ 167.721473][ T6495] loop3: detected capacity change from 0 to 512 [ 167.744890][ T6495] EXT4-fs: Ignoring removed i_version option [ 167.778531][ T6495] EXT4-fs: Ignoring removed bh option [ 167.812751][ T6495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.859877][ T6495] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.709390][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.339839][ T6520] loop3: detected capacity change from 0 to 1024 [ 169.757841][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 169.757867][ T28] audit: type=1400 audit(1774335877.777:540): avc: denied { connect } for pid=6519 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 169.794097][ T6544] netlink: 'syz.2.869': attribute type 1 has an invalid length. [ 169.812675][ T6544] netlink: 'syz.2.869': attribute type 4 has an invalid length. [ 169.827764][ T6544] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.869'. [ 169.863480][ T6544] loop2: detected capacity change from 0 to 2048 [ 169.877663][ T6544] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 169.893044][ T6544] FAT-fs (loop2): Filesystem has been set read-only [ 169.918285][ T28] audit: type=1400 audit(1774335877.877:541): avc: denied { mounton } for pid=6543 comm="syz.2.869" path="/179/file2" dev="tmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.044812][ T6548] siw: device registration error -23 [ 170.052664][ T6548] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 170.313874][ T6553] loop3: detected capacity change from 0 to 256 [ 170.401442][ T6553] FAT-fs (loop3): Directory bread(block 64) failed [ 170.474154][ T6553] FAT-fs (loop3): Directory bread(block 65) failed [ 170.506961][ T6553] FAT-fs (loop3): Directory bread(block 66) failed [ 170.515207][ T6553] FAT-fs (loop3): Directory bread(block 67) failed [ 170.534416][ T6553] FAT-fs (loop3): Directory bread(block 68) failed [ 170.554540][ T6553] FAT-fs (loop3): Directory bread(block 69) failed [ 170.558042][ T28] audit: type=1400 audit(1774335878.585:542): avc: denied { read } for pid=6557 comm="syz.4.875" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 170.564350][ T6553] FAT-fs (loop3): Directory bread(block 70) failed [ 170.591794][ T6553] FAT-fs (loop3): Directory bread(block 71) failed [ 170.598861][ T6553] FAT-fs (loop3): Directory bread(block 72) failed [ 170.605569][ T6553] FAT-fs (loop3): Directory bread(block 73) failed [ 170.615403][ T28] audit: type=1400 audit(1774335878.585:543): avc: denied { open } for pid=6557 comm="syz.4.875" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 170.821371][ T28] audit: type=1400 audit(1774335878.854:544): avc: denied { read } for pid=6565 comm="syz.3.879" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 170.862015][ T6569] loop4: detected capacity change from 0 to 1024 [ 170.865754][ T28] audit: type=1400 audit(1774335878.854:545): avc: denied { open } for pid=6565 comm="syz.3.879" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 170.897675][ T28] audit: type=1400 audit(1774335878.874:546): avc: denied { ioctl } for pid=6565 comm="syz.3.879" path="/dev/uhid" dev="devtmpfs" ino=253 ioctlcmd=0x583c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 170.942710][ T6569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.961071][ T6574] loop5: detected capacity change from 0 to 1024 [ 170.967954][ T6574] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.981140][ T6574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.008315][ T28] audit: type=1400 audit(1774335879.033:547): avc: denied { setattr } for pid=6573 comm="syz.5.881" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 171.030945][ T6574] netlink: 56 bytes leftover after parsing attributes in process `syz.5.881'. [ 171.043196][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.063815][ T4642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.114353][ T6587] loop5: detected capacity change from 0 to 164 [ 171.133714][ T6587] Unable to read rock-ridge attributes [ 171.139582][ T6587] isofs_fill_super: root inode is not a directory. Corrupted media? [ 171.251620][ T6598] netlink: 'syz.5.890': attribute type 1 has an invalid length. [ 171.260676][ T6596] loop4: detected capacity change from 0 to 256 [ 171.286936][ T6594] loop3: detected capacity change from 0 to 512 [ 171.303143][ T6596] FAT-fs (loop4): Directory bread(block 64) failed [ 171.311063][ T6596] FAT-fs (loop4): Directory bread(block 65) failed [ 171.325633][ T6596] FAT-fs (loop4): Directory bread(block 66) failed [ 171.335467][ T6598] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 171.340111][ T6596] FAT-fs (loop4): Directory bread(block 67) failed [ 171.353117][ T6596] FAT-fs (loop4): Directory bread(block 68) failed [ 171.359792][ T6596] FAT-fs (loop4): Directory bread(block 69) failed [ 171.366693][ T6596] FAT-fs (loop4): Directory bread(block 70) failed [ 171.373633][ T6596] FAT-fs (loop4): Directory bread(block 71) failed [ 171.380446][ T6596] FAT-fs (loop4): Directory bread(block 72) failed [ 171.387404][ T6596] FAT-fs (loop4): Directory bread(block 73) failed [ 171.396976][ T6598] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 171.427026][ T6598] bond1: (slave vxcan3): making interface the new active one [ 171.435660][ T6598] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 171.450556][ T6594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.492367][ T6603] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 171.593367][ T6603] bond1: (slave vxcan5): Enslaving as a backup interface with an up link [ 171.765195][ T28] audit: type=1400 audit(1774335879.791:548): avc: denied { write } for pid=6625 comm="syz.6.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 171.799596][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.845437][ T6629] EXT4-fs (loop3): invalid inodes per group: 0 [ 171.845437][ T6629] [ 171.926438][ T6633] netlink: 'syz.6.903': attribute type 1 has an invalid length. [ 171.965642][ T6633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.979713][ T6632] FAT-fs (loop3): Directory bread(block 64) failed [ 171.987981][ T6632] FAT-fs (loop3): Directory bread(block 65) failed [ 171.995816][ T6632] FAT-fs (loop3): Directory bread(block 66) failed [ 171.996828][ T6637] bond2: (slave geneve2): making interface the new active one [ 172.011211][ T6632] FAT-fs (loop3): Directory bread(block 67) failed [ 172.018232][ T6632] FAT-fs (loop3): Directory bread(block 68) failed [ 172.022324][ T6637] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 172.026408][ T6632] FAT-fs (loop3): Directory bread(block 69) failed [ 172.077583][ T6632] FAT-fs (loop3): Directory bread(block 70) failed [ 172.086318][ T6632] FAT-fs (loop3): Directory bread(block 71) failed [ 172.093701][ T6632] FAT-fs (loop3): Directory bread(block 72) failed [ 172.100864][ T6632] FAT-fs (loop3): Directory bread(block 73) failed [ 172.144690][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.905'. [ 172.166248][ T6642] netlink: 'syz.6.906': attribute type 1 has an invalid length. [ 172.203183][ T6642] netlink: 'syz.6.906': attribute type 1 has an invalid length. [ 172.211224][ T6642] netlink: 'syz.6.906': attribute type 1 has an invalid length. [ 172.233360][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.906'. [ 172.268921][ T6648] FAULT_INJECTION: forcing a failure. [ 172.268921][ T6648] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.298566][ T6648] CPU: 1 UID: 0 PID: 6648 Comm: syz.3.907 Tainted: G W syzkaller #0 PREEMPT(full) [ 172.298623][ T6648] Tainted: [W]=WARN [ 172.298631][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.298645][ T6648] Call Trace: [ 172.298651][ T6648] [ 172.298740][ T6648] __dump_stack+0x1d/0x30 [ 172.298770][ T6648] dump_stack_lvl+0x95/0xd0 [ 172.298812][ T6648] dump_stack+0x15/0x1b [ 172.298838][ T6648] should_fail_ex+0x263/0x280 [ 172.298880][ T6648] should_fail_alloc_page+0xf2/0x100 [ 172.298965][ T6648] __alloc_frozen_pages_noprof+0x108/0x360 [ 172.299003][ T6648] alloc_pages_mpol+0xb3/0x260 [ 172.299038][ T6648] alloc_pages_noprof+0x8f/0x130 [ 172.299121][ T6648] __pmd_alloc+0x47/0x430 [ 172.299153][ T6648] handle_mm_fault+0x1ebb/0x3020 [ 172.299191][ T6648] ? __rcu_read_unlock+0x4e/0x70 [ 172.299290][ T6648] ? check_vma_flags+0x26d/0x330 [ 172.299311][ T6648] __get_user_pages+0x1023/0x1ea0 [ 172.299348][ T6648] get_user_pages_remote+0x1d5/0x6b0 [ 172.299384][ T6648] ? down_read+0x76/0xb0 [ 172.299442][ T6648] copy_string_kernel+0x1cc/0x3b0 [ 172.299477][ T6648] do_execveat_common+0x561/0x720 [ 172.299518][ T6648] __x64_sys_execveat+0x76/0xa0 [ 172.299581][ T6648] x64_sys_call+0x2a33/0x3020 [ 172.299609][ T6648] do_syscall_64+0x12c/0x370 [ 172.299668][ T6648] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 172.299695][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.299715][ T6648] RIP: 0033:0x7effb408c799 [ 172.299732][ T6648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.299812][ T6648] RSP: 002b:00007effb2adf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 172.299833][ T6648] RAX: ffffffffffffffda RBX: 00007effb4305fa0 RCX: 00007effb408c799 [ 172.299848][ T6648] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 172.299863][ T6648] RBP: 00007effb2adf090 R08: 0000000000000000 R09: 0000000000000000 [ 172.299906][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.299920][ T6648] R13: 00007effb4306038 R14: 00007effb4305fa0 R15: 00007ffdb2f31bc8 [ 172.299950][ T6648] [ 172.545656][ T6643] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 172.609132][ T6643] EXT4-fs (loop5): 1 truncate cleaned up [ 172.627310][ T6659] set_capacity_and_notify: 4 callbacks suppressed [ 172.627329][ T6659] loop3: detected capacity change from 0 to 512 [ 172.641137][ T6643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.654701][ T6657] lo speed is unknown, defaulting to 1000 [ 172.655085][ T6657] lo speed is unknown, defaulting to 1000 [ 173.188669][ T6663] loop3: detected capacity change from 0 to 1024 [ 173.278343][ T6663] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.337028][ T6663] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.911: Invalid block bitmap block 0 in block_group 0 [ 173.352907][ T6663] loop3: lost filesystem error report for type 5 error -117 [ 173.356602][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 173.371691][ C1] EXT4-fs (loop3): initial error at time 1774335881: ext4_read_block_bitmap_nowait:483 [ 173.382682][ C1] EXT4-fs (loop3): last error at time 1774335881: ext4_read_block_bitmap_nowait:483 [ 173.397046][ T6663] Quota error (device loop3): write_blk: dquota write failed [ 173.406389][ T6663] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.911: Failed to acquire dquot type 0 [ 173.419220][ T6663] loop3: lost filesystem error report for type 5 error -117 [ 173.424032][ T6663] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.911: Freeing blocks not in datazone - block = 0, count = 4096 [ 173.448482][ T6663] loop3: lost filesystem error report for type 5 error -117 [ 173.454478][ T6663] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.911: Invalid inode bitmap blk 0 in block_group 0 [ 173.476842][ T6663] loop3: lost filesystem error report for type 5 error -117 [ 173.479293][ T6663] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 173.497749][ T6663] loop3: lost filesystem error report for type 5 error -117 [ 173.500480][ T6663] EXT4-fs (loop3): 1 orphan inode deleted [ 173.534627][ T6663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.788804][ T56] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 0 [ 173.869773][ T4642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.566761][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.672773][ T6692] bridge2: entered promiscuous mode [ 174.690303][ T6692] bridge2: entered allmulticast mode [ 174.712419][ T6692] team0: Port device bridge2 added [ 174.862871][ T6702] lo speed is unknown, defaulting to 1000 [ 174.869593][ T6702] lo speed is unknown, defaulting to 1000 [ 175.006925][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.932'. [ 175.116178][ T6727] syz.6.935 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 175.166605][ T6732] loop3: detected capacity change from 0 to 512 [ 175.200253][ T6732] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 175.237224][ T6732] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 175.310563][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 175.310580][ T28] audit: type=1400 audit(1774335883.321:555): avc: denied { write } for pid=6737 comm="syz.5.938" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 175.316808][ T6732] EXT4-fs (loop3): failed to open journal device unknown-block(8,5) -6 [ 175.415755][ T6740] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 175.443297][ T28] audit: type=1404 audit(1774335883.361:556): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 175.714965][ T28] audit: type=1400 audit(1774335883.421:557): avc: denied { create } for pid=6726 comm="syz.6.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 175.901563][ T28] audit: type=1400 audit(1774335883.421:558): avc: denied { create } for pid=6726 comm="syz.6.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 176.043395][ T28] audit: type=1400 audit(1774335883.421:559): avc: denied { create } for pid=6726 comm="syz.6.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 176.088313][ T28] audit: type=1400 audit(1774335883.441:560): avc: denied { create } for pid=6726 comm="syz.6.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 176.151160][ T28] audit: type=1400 audit(1774335883.441:561): avc: denied { create } for pid=6726 comm="syz.6.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 176.203552][ T28] audit: type=1400 audit(1774335883.451:562): avc: denied { write } for pid=6737 comm="syz.5.938" path="socket:[30686]" dev="sockfs" ino=30686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 176.273503][ T28] audit: type=1400 audit(1774335883.451:563): avc: denied { execmem } for pid=6737 comm="syz.5.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 176.330336][ T28] audit: type=1400 audit(1774335883.461:564): avc: denied { create } for pid=6737 comm="syz.5.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 176.529504][ T6775] dummy0: entered promiscuous mode [ 176.541670][ T6775] macsec1: entered allmulticast mode [ 176.552873][ T6775] dummy0: entered allmulticast mode [ 176.567473][ T6775] dummy0: left allmulticast mode [ 176.582939][ T6775] dummy0: left promiscuous mode [ 176.668270][ T6777] lo speed is unknown, defaulting to 1000 [ 176.674848][ T6777] lo speed is unknown, defaulting to 1000 [ 177.206709][ T6790] FAULT_INJECTION: forcing a failure. [ 177.206709][ T6790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.237590][ T6790] CPU: 1 UID: 0 PID: 6790 Comm: syz.2.960 Tainted: G W syzkaller #0 PREEMPT(full) [ 177.237682][ T6790] Tainted: [W]=WARN [ 177.237689][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.237703][ T6790] Call Trace: [ 177.237710][ T6790] [ 177.237719][ T6790] __dump_stack+0x1d/0x30 [ 177.237758][ T6790] dump_stack_lvl+0x95/0xd0 [ 177.237781][ T6790] dump_stack+0x15/0x1b [ 177.237803][ T6790] should_fail_ex+0x263/0x280 [ 177.237829][ T6790] should_fail+0xb/0x20 [ 177.237851][ T6790] should_fail_usercopy+0x1a/0x20 [ 177.237936][ T6790] _copy_to_user+0x20/0xa0 [ 177.237971][ T6790] simple_read_from_buffer+0xb5/0x130 [ 177.237998][ T6790] proc_fail_nth_read+0x10e/0x150 [ 177.238113][ T6790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.238145][ T6790] vfs_read+0x1ab/0x7f0 [ 177.238196][ T6790] ? __rcu_read_unlock+0x4e/0x70 [ 177.238217][ T6790] ? __fget_files+0x184/0x1c0 [ 177.238242][ T6790] ? mutex_lock+0x57/0x90 [ 177.238315][ T6790] ksys_read+0xdc/0x1a0 [ 177.238350][ T6790] __x64_sys_read+0x40/0x50 [ 177.238368][ T6790] x64_sys_call+0x2886/0x3020 [ 177.238396][ T6790] do_syscall_64+0x12c/0x370 [ 177.238482][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.238503][ T6790] RIP: 0033:0x7f7e4ff2cfce [ 177.238521][ T6790] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.238543][ T6790] RSP: 002b:00007f7e4e9befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.238620][ T6790] RAX: ffffffffffffffda RBX: 00007f7e4e9bf6c0 RCX: 00007f7e4ff2cfce [ 177.238635][ T6790] RDX: 000000000000000f RSI: 00007f7e4e9bf0a0 RDI: 0000000000000003 [ 177.238650][ T6790] RBP: 00007f7e4e9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 177.238665][ T6790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.238678][ T6790] R13: 00007f7e501e6038 R14: 00007f7e501e5fa0 R15: 00007fff8a863c58 [ 177.238756][ T6790] [ 177.481118][ T6778] syz.6.954 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 177.495636][ T6778] CPU: 0 UID: 0 PID: 6778 Comm: syz.6.954 Tainted: G W syzkaller #0 PREEMPT(full) [ 177.495675][ T6778] Tainted: [W]=WARN [ 177.495740][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.495755][ T6778] Call Trace: [ 177.495763][ T6778] [ 177.495772][ T6778] __dump_stack+0x1d/0x30 [ 177.495801][ T6778] dump_stack_lvl+0x95/0xd0 [ 177.495873][ T6778] dump_stack+0x15/0x1b [ 177.495902][ T6778] dump_header+0x80/0x240 [ 177.495930][ T6778] oom_kill_process+0x295/0x350 [ 177.495962][ T6778] out_of_memory+0x97d/0xb80 [ 177.495988][ T6778] try_charge_memcg+0x62e/0xa10 [ 177.496039][ T6778] obj_cgroup_charge_pages+0x23/0xc0 [ 177.496099][ T6778] __memcg_kmem_charge_page+0x9e/0x170 [ 177.496129][ T6778] __alloc_frozen_pages_noprof+0x18a/0x360 [ 177.496171][ T6778] alloc_pages_mpol+0xb3/0x260 [ 177.496333][ T6778] alloc_pages_noprof+0x8f/0x130 [ 177.496369][ T6778] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 177.496411][ T6778] __kvmalloc_node_noprof+0x3d4/0x650 [ 177.496455][ T6778] ? futex_hash_allocate+0x190/0x9d0 [ 177.496483][ T6778] ? futex_hash_allocate+0x190/0x9d0 [ 177.496511][ T6778] futex_hash_allocate+0x190/0x9d0 [ 177.496588][ T6778] ? cap_task_prctl+0x13f/0x6e0 [ 177.496630][ T6778] futex_hash_prctl+0xd8/0xf0 [ 177.496664][ T6778] __se_sys_prctl+0xa3d/0x13f0 [ 177.496697][ T6778] __x64_sys_prctl+0x67/0x80 [ 177.496735][ T6778] x64_sys_call+0x2533/0x3020 [ 177.496769][ T6778] do_syscall_64+0x12c/0x370 [ 177.496877][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.496899][ T6778] RIP: 0033:0x7f47c9e8c799 [ 177.496915][ T6778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.496933][ T6778] RSP: 002b:00007f47c88c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 177.496987][ T6778] RAX: ffffffffffffffda RBX: 00007f47ca106090 RCX: 00007f47c9e8c799 [ 177.497005][ T6778] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 177.497029][ T6778] RBP: 00007f47c9f22c99 R08: 0000000000000000 R09: 0000000000000000 [ 177.497046][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.497062][ T6778] R13: 00007f47ca106128 R14: 00007f47ca106090 R15: 00007ffcf2af9908 [ 177.497083][ T6778] [ 177.836962][ T6778] memory: usage 307200kB, limit 307200kB, failcnt 96 [ 177.854642][ T6778] memory+swap: usage 307072kB, limit 9007199254740988kB, failcnt 0 [ 177.886767][ T6778] kmem: usage 306704kB, limit 9007199254740988kB, failcnt 0 [ 177.912889][ T6778] Memory cgroup stats for /syz6: [ 177.913188][ T6778] cache 0 [ 177.927265][ T6778] rss 196608 [ 177.930704][ T6778] shmem 0 [ 177.943101][ T6778] mapped_file 0 [ 177.947074][ T6778] dirty 0 [ 177.951291][ T6778] writeback 0 [ 177.954963][ T6778] workingset_refault_anon 0 [ 177.980219][ T6778] workingset_refault_file 0 [ 177.987141][ T6778] swap 135168 [ 177.991423][ T6778] swapcached 139264 [ 177.995419][ T6778] pgpgin 45498 [ 177.999398][ T6778] pgpgout 45450 [ 178.003258][ T6778] pgfault 55410 [ 178.006817][ T6778] pgmajfault 1 [ 178.010515][ T6778] inactive_anon 4096 [ 178.032239][ T6778] active_anon 0 [ 178.035905][ T6778] inactive_file 0 [ 178.048909][ T6778] active_file 0 [ 178.054442][ T6778] unevictable 192512 [ 178.083823][ T6778] hierarchical_memory_limit 314572800 [ 178.084120][ T6819] netlink: 'syz.4.974': attribute type 29 has an invalid length. [ 178.095129][ T6778] hierarchical_memsw_limit 9223372036854771712 [ 178.125034][ T6778] total_cache 0 [ 178.129396][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.974'. [ 178.134038][ T6778] total_rss 196608 [ 178.154264][ T6778] total_shmem 0 [ 178.162822][ T6778] total_mapped_file 0 [ 178.172970][ T6778] total_dirty 0 [ 178.176552][ T6778] total_writeback 0 [ 178.207754][ T6778] total_workingset_refault_anon 0 [ 178.221042][ T6778] total_workingset_refault_file 0 [ 178.246586][ T6778] total_swap 135168 [ 178.263152][ T6778] total_swapcached 139264 [ 178.273270][ T6778] total_pgpgin 45498 [ 178.277500][ T6778] total_pgpgout 45450 [ 178.291880][ T6778] total_pgfault 55410 [ 178.306374][ T6778] total_pgmajfault 1 [ 178.312289][ T6778] total_inactive_anon 4096 [ 178.322087][ T6778] total_active_anon 0 [ 178.330587][ T6778] total_inactive_file 0 [ 178.342532][ T6778] total_active_file 0 [ 178.351265][ T6778] total_unevictable 192512 [ 178.361413][ T6778] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.954,pid=6776,uid=0 [ 178.379193][ T6778] Memory cgroup out of memory: Killed process 6778 (syz.6.954) total-vm:94164kB, anon-rss:1424kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 178.452562][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.984'. [ 178.479023][ T50] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.489073][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.984'. [ 178.498683][ T50] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.508856][ T6847] netlink: 'syz.6.987': attribute type 10 has an invalid length. [ 178.520610][ T6843] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 178.540965][ T6840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6840 comm=syz.5.984 [ 178.557334][ T50] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.570207][ T6847] team0: Device xfrm0 is of different type [ 178.590052][ T50] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.892387][ T6892] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1004'. [ 178.938813][ T6902] FAULT_INJECTION: forcing a failure. [ 178.938813][ T6902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.957152][ T6902] CPU: 0 UID: 0 PID: 6902 Comm: syz.5.1009 Tainted: G W syzkaller #0 PREEMPT(full) [ 178.957200][ T6902] Tainted: [W]=WARN [ 178.957209][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.957224][ T6902] Call Trace: [ 178.957234][ T6902] [ 178.957242][ T6902] __dump_stack+0x1d/0x30 [ 178.957269][ T6902] dump_stack_lvl+0x95/0xd0 [ 178.957308][ T6902] dump_stack+0x15/0x1b [ 178.957415][ T6902] should_fail_ex+0x263/0x280 [ 178.957447][ T6902] should_fail+0xb/0x20 [ 178.957473][ T6902] should_fail_usercopy+0x1a/0x20 [ 178.957558][ T6902] _copy_from_user+0x1c/0xb0 [ 178.957637][ T6902] kstrtouint_from_user+0x69/0xf0 [ 178.957668][ T6902] proc_fail_nth_write+0x50/0x160 [ 178.957703][ T6902] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 178.957839][ T6902] vfs_write+0x269/0x9f0 [ 178.957874][ T6902] ? __rcu_read_unlock+0x4e/0x70 [ 178.957900][ T6902] ? __fget_files+0x184/0x1c0 [ 178.957951][ T6902] ? mutex_lock+0x57/0x90 [ 178.957989][ T6902] ksys_write+0xdc/0x1a0 [ 178.958070][ T6902] __x64_sys_write+0x40/0x50 [ 178.958092][ T6902] x64_sys_call+0x27e1/0x3020 [ 178.958204][ T6902] do_syscall_64+0x12c/0x370 [ 178.958233][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.958257][ T6902] RIP: 0033:0x7fd7a840cfce [ 178.958277][ T6902] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 178.958368][ T6902] RSP: 002b:00007fd7a6ea6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.958394][ T6902] RAX: ffffffffffffffda RBX: 00007fd7a6ea76c0 RCX: 00007fd7a840cfce [ 178.958411][ T6902] RDX: 0000000000000001 RSI: 00007fd7a6ea70a0 RDI: 0000000000000004 [ 178.958448][ T6902] RBP: 00007fd7a6ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.958463][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.958504][ T6902] R13: 00007fd7a86c6038 R14: 00007fd7a86c5fa0 R15: 00007ffdd74cb068 [ 178.958522][ T6902] [ 178.992750][ T6904] geneve3: entered promiscuous mode [ 179.281646][ T6928] veth0_virt_wifi: entered promiscuous mode [ 179.947232][ T6971] rose0: tun_chr_ioctl cmd 2147767507 [ 180.059220][ T6975] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1039'. [ 180.083597][ T6977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1040'. [ 180.366394][ T28] kauditd_printk_skb: 727 callbacks suppressed [ 180.366413][ T28] audit: type=1400 audit(1774335888.371:1290): avc: denied { create } for pid=6998 comm="syz.6.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 180.393151][ T28] audit: type=1400 audit(1774335888.381:1291): avc: denied { bpf } for pid=7000 comm="syz.6.1049" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 180.414595][ T28] audit: type=1400 audit(1774335888.381:1292): avc: denied { prog_load } for pid=7000 comm="syz.6.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 180.434650][ T28] audit: type=1400 audit(1774335888.401:1293): avc: denied { create } for pid=7005 comm="syz.6.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 180.454623][ T28] audit: type=1400 audit(1774335888.401:1294): avc: denied { bpf } for pid=7005 comm="syz.6.1050" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 180.476358][ T28] audit: type=1400 audit(1774335888.401:1295): avc: denied { create } for pid=7005 comm="syz.6.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 180.497800][ T28] audit: type=1400 audit(1774335888.421:1296): avc: denied { create } for pid=7007 comm="syz.6.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=0 [ 180.518665][ T28] audit: type=1400 audit(1774335888.421:1297): avc: denied { create } for pid=7007 comm="syz.6.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 180.538944][ T28] audit: type=1400 audit(1774335888.421:1298): avc: denied { create } for pid=7007 comm="syz.6.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 180.561654][ T28] audit: type=1400 audit(1774335888.421:1299): avc: denied { open } for pid=7007 comm="syz.6.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 181.083906][ T7027] macsec1: entered promiscuous mode [ 181.089421][ T7027] team0: entered promiscuous mode [ 181.096174][ T7027] team0: Device macsec1 is already an upper device of the team interface [ 181.105404][ T7027] team0: left promiscuous mode [ 181.180604][ T7037] FAULT_INJECTION: forcing a failure. [ 181.180604][ T7037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.194711][ T7037] CPU: 1 UID: 0 PID: 7037 Comm: syz.3.1064 Tainted: G W syzkaller #0 PREEMPT(full) [ 181.194821][ T7037] Tainted: [W]=WARN [ 181.194829][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 181.194842][ T7037] Call Trace: [ 181.194850][ T7037] [ 181.194939][ T7037] __dump_stack+0x1d/0x30 [ 181.194967][ T7037] dump_stack_lvl+0x95/0xd0 [ 181.194993][ T7037] dump_stack+0x15/0x1b [ 181.195018][ T7037] should_fail_ex+0x263/0x280 [ 181.195094][ T7037] should_fail+0xb/0x20 [ 181.195116][ T7037] should_fail_usercopy+0x1a/0x20 [ 181.195142][ T7037] _copy_from_user+0x1c/0xb0 [ 181.195199][ T7037] ___sys_sendmsg+0xc1/0x1e0 [ 181.195251][ T7037] __x64_sys_sendmsg+0xd4/0x160 [ 181.195330][ T7037] x64_sys_call+0x194c/0x3020 [ 181.195361][ T7037] do_syscall_64+0x12c/0x370 [ 181.195385][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.195421][ T7037] RIP: 0033:0x7effb408c799 [ 181.195438][ T7037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.195471][ T7037] RSP: 002b:00007effb2adf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.195499][ T7037] RAX: ffffffffffffffda RBX: 00007effb4305fa0 RCX: 00007effb408c799 [ 181.195516][ T7037] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 181.195532][ T7037] RBP: 00007effb2adf090 R08: 0000000000000000 R09: 0000000000000000 [ 181.195548][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.195565][ T7037] R13: 00007effb4306038 R14: 00007effb4305fa0 R15: 00007ffdb2f31bc8 [ 181.195587][ T7037] [ 181.557587][ T7046] netlink: 'syz.5.1068': attribute type 13 has an invalid length. [ 182.121136][ T7092] netlink: 'syz.2.1087': attribute type 1 has an invalid length. [ 182.150343][ T7092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.174069][ T7092] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1087'. [ 182.556071][ T7126] bridge0: entered promiscuous mode [ 182.565134][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1103'. [ 182.574824][ T7126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=7126 comm=syz.4.1103 [ 182.660348][ T7139] lo speed is unknown, defaulting to 1000 [ 182.667242][ T7139] lo speed is unknown, defaulting to 1000 [ 183.082807][ T7152] netlink: 'syz.4.1113': attribute type 1 has an invalid length. [ 183.092856][ T7152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1113'. [ 183.622408][ T7171] lo speed is unknown, defaulting to 1000 [ 183.628837][ T7171] lo speed is unknown, defaulting to 1000 [ 183.765608][ T7193] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1132'. [ 183.904187][ T7206] futex_wake_op: syz.2.1138 tries to shift op by -1; fix this program [ 184.657243][ T7228] netlink: 'syz.6.1148': attribute type 13 has an invalid length. [ 184.972584][ T7259] netlink: 'syz.2.1161': attribute type 17 has an invalid length. [ 184.992618][ T7259] netlink: 'syz.2.1161': attribute type 16 has an invalid length. [ 185.007611][ T7259] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1161'. [ 185.104765][ T7275] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 185.208309][ T7286] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 185.379605][ T28] kauditd_printk_skb: 706 callbacks suppressed [ 185.379622][ T28] audit: type=1400 audit(1774335893.383:2006): avc: denied { execmem } for pid=7287 comm="syz.2.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 185.437799][ T28] audit: type=1400 audit(1774335893.383:2007): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.500504][ T28] audit: type=1400 audit(1774335893.413:2008): avc: denied { prog_load } for pid=7287 comm="syz.2.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 185.540505][ T7295] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 185.546979][ T28] audit: type=1400 audit(1774335893.413:2009): avc: denied { prog_load } for pid=7287 comm="syz.2.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 185.602666][ T28] audit: type=1400 audit(1774335893.413:2010): avc: denied { open } for pid=7287 comm="syz.2.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 185.663973][ T28] audit: type=1400 audit(1774335893.413:2011): avc: denied { create } for pid=7287 comm="syz.2.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 185.709877][ T28] audit: type=1400 audit(1774335893.473:2012): avc: denied { execmem } for pid=7289 comm="syz.3.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 185.769559][ T28] audit: type=1400 audit(1774335893.503:2013): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.847608][ T28] audit: type=1400 audit(1774335893.503:2014): avc: denied { create } for pid=7291 comm="syz.2.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 185.903877][ T28] audit: type=1400 audit(1774335893.503:2015): avc: denied { create } for pid=7291 comm="syz.2.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 186.727438][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1201'. [ 186.736707][ T7362] chnl_net:caif_netlink_parms(): no params data found [ 186.885650][ T7372] bond1: (slave vxcan3): Releasing backup interface [ 186.886810][ T7373] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 186.893333][ T7372] bond1: (slave vxcan5): making interface the new active one [ 186.920843][ T7372] bond1: (slave vxcan5): Releasing backup interface [ 187.219743][ T7378] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1206'. [ 187.320502][ T7386] netlink: 'syz.4.1210': attribute type 5 has an invalid length. [ 187.408357][ T7398] FAULT_INJECTION: forcing a failure. [ 187.408357][ T7398] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 187.422136][ T7398] CPU: 1 UID: 0 PID: 7398 Comm: syz.3.1216 Tainted: G W syzkaller #0 PREEMPT(full) [ 187.422299][ T7398] Tainted: [W]=WARN [ 187.422308][ T7398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.422379][ T7398] Call Trace: [ 187.422387][ T7398] [ 187.422397][ T7398] __dump_stack+0x1d/0x30 [ 187.422430][ T7398] dump_stack_lvl+0x95/0xd0 [ 187.422453][ T7398] dump_stack+0x15/0x1b [ 187.422523][ T7398] should_fail_ex+0x263/0x280 [ 187.422553][ T7398] should_fail_alloc_page+0xf2/0x100 [ 187.422577][ T7398] __alloc_frozen_pages_noprof+0x108/0x360 [ 187.422680][ T7398] alloc_pages_mpol+0xb3/0x260 [ 187.422785][ T7398] vma_alloc_folio_noprof+0x1a9/0x300 [ 187.422882][ T7398] handle_mm_fault+0x1129/0x3020 [ 187.422913][ T7398] ? vma_start_read+0x1c7/0x2c0 [ 187.423012][ T7398] do_user_addr_fault+0x62f/0x1050 [ 187.423045][ T7398] ? ksys_mmap_pgoff+0xc1/0x310 [ 187.423075][ T7398] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 187.423149][ T7398] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 187.423241][ T7398] ? trace_page_fault_user+0x1f/0xe0 [ 187.423270][ T7398] exc_page_fault+0x62/0xa0 [ 187.423357][ T7398] asm_exc_page_fault+0x26/0x30 [ 187.423382][ T7398] RIP: 0033:0x7effb3f43a63 [ 187.423401][ T7398] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 187.423421][ T7398] RSP: 002b:00007effb2ade470 EFLAGS: 00010202 [ 187.423442][ T7398] RAX: 0000000000004000 RBX: 00007effb2ade530 RCX: 00007effaa6bf000 [ 187.423536][ T7398] RDX: 00007effb2ade6d0 RSI: 0000000000000075 RDI: 00007effb2ade5d0 [ 187.423552][ T7398] RBP: 000000000000002e R08: 0000000000000006 R09: 000000000000001f [ 187.423625][ T7398] R10: 0000000000000024 R11: 00007effb2ade530 R12: 0000000000000001 [ 187.423655][ T7398] R13: 00007effb4142620 R14: 0000000000000002 R15: 00007effb2ade5d0 [ 187.423676][ T7398] [ 187.423715][ T7398] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 187.534495][ T7405] FAULT_INJECTION: forcing a failure. [ 187.534495][ T7405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.660361][ T7405] CPU: 0 UID: 0 PID: 7405 Comm: syz.5.1218 Tainted: G W syzkaller #0 PREEMPT(full) [ 187.660424][ T7405] Tainted: [W]=WARN [ 187.660432][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.660444][ T7405] Call Trace: [ 187.660451][ T7405] [ 187.660459][ T7405] __dump_stack+0x1d/0x30 [ 187.660517][ T7405] dump_stack_lvl+0x95/0xd0 [ 187.660541][ T7405] dump_stack+0x15/0x1b [ 187.660587][ T7405] should_fail_ex+0x263/0x280 [ 187.660618][ T7405] should_fail+0xb/0x20 [ 187.660655][ T7405] should_fail_usercopy+0x1a/0x20 [ 187.660689][ T7405] _copy_from_user+0x1c/0xb0 [ 187.660784][ T7405] kstrtouint_from_user+0x69/0xf0 [ 187.660817][ T7405] proc_fail_nth_write+0x50/0x160 [ 187.660851][ T7405] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 187.660885][ T7405] vfs_write+0x269/0x9f0 [ 187.660960][ T7405] ? __rcu_read_unlock+0x4e/0x70 [ 187.660983][ T7405] ? __fget_files+0x184/0x1c0 [ 187.661010][ T7405] ? mutex_lock+0x57/0x90 [ 187.661062][ T7405] ksys_write+0xdc/0x1a0 [ 187.661107][ T7405] __x64_sys_write+0x40/0x50 [ 187.661129][ T7405] x64_sys_call+0x27e1/0x3020 [ 187.661156][ T7405] do_syscall_64+0x12c/0x370 [ 187.661183][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.661305][ T7405] RIP: 0033:0x7fd7a840cfce [ 187.661326][ T7405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 187.661358][ T7405] RSP: 002b:00007fd7a6e85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.661383][ T7405] RAX: ffffffffffffffda RBX: 00007fd7a6e866c0 RCX: 00007fd7a840cfce [ 187.661448][ T7405] RDX: 0000000000000001 RSI: 00007fd7a6e860a0 RDI: 0000000000000003 [ 187.661515][ T7405] RBP: 00007fd7a6e86090 R08: 0000000000000000 R09: 0000000000000000 [ 187.661528][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.661540][ T7405] R13: 00007fd7a86c6128 R14: 00007fd7a86c6090 R15: 00007ffdd74cb068 [ 187.661561][ T7405] [ 187.927192][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 187.973607][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 187.976514][ T7429] chnl_net:caif_netlink_parms(): no params data found [ 187.992102][ T7428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1230'. [ 188.013782][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 188.023442][ T7437] FAULT_INJECTION: forcing a failure. [ 188.023442][ T7437] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 188.037628][ T7428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1230'. [ 188.047394][ T7437] CPU: 1 UID: 0 PID: 7437 Comm: syz.3.1234 Tainted: G W syzkaller #0 PREEMPT(full) [ 188.047431][ T7437] Tainted: [W]=WARN [ 188.047461][ T7437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.047474][ T7437] Call Trace: [ 188.047483][ T7437] [ 188.047493][ T7437] __dump_stack+0x1d/0x30 [ 188.047527][ T7437] dump_stack_lvl+0x95/0xd0 [ 188.047619][ T7437] dump_stack+0x15/0x1b [ 188.047645][ T7437] should_fail_ex+0x263/0x280 [ 188.047757][ T7437] should_fail_alloc_page+0xf2/0x100 [ 188.047826][ T7437] __alloc_frozen_pages_noprof+0x108/0x360 [ 188.047855][ T7437] alloc_pages_mpol+0xb3/0x260 [ 188.047888][ T7437] vma_alloc_folio_noprof+0x1a9/0x300 [ 188.048009][ T7437] handle_mm_fault+0x1129/0x3020 [ 188.048050][ T7437] ? vma_start_read+0x1c7/0x2c0 [ 188.048084][ T7437] do_user_addr_fault+0x62f/0x1050 [ 188.048121][ T7437] ? ksys_mmap_pgoff+0xc1/0x310 [ 188.048150][ T7437] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 188.048203][ T7437] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 188.048317][ T7437] ? trace_page_fault_user+0x1f/0xe0 [ 188.048432][ T7437] exc_page_fault+0x62/0xa0 [ 188.048470][ T7437] asm_exc_page_fault+0x26/0x30 [ 188.048491][ T7437] RIP: 0033:0x7effb3f43a63 [ 188.048508][ T7437] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 188.048530][ T7437] RSP: 002b:00007effb2ade470 EFLAGS: 00010206 [ 188.048628][ T7437] RAX: 0000000000002008 RBX: 00007effb2ade530 RCX: 00007effaa6bf000 [ 188.048643][ T7437] RDX: 00007effb2ade6d0 RSI: 0000000000000003 RDI: 00007effb2ade5d0 [ 188.048660][ T7437] RBP: 0000000000000008 R08: 0000000000000009 R09: 00000000000001b4 [ 188.048676][ T7437] R10: 00000000000001be R11: 00007effb2ade530 R12: 0000000000001001 [ 188.048737][ T7437] R13: 00007effb4142620 R14: 00000000000000f3 R15: 00007effb2ade5d0 [ 188.048761][ T7437] [ 188.048805][ T7437] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 188.306178][ T7449] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 188.547539][ T7459] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1242'. [ 189.049306][ T7486] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.756991][ T7512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.767375][ T7512] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1261'. [ 189.791093][ T7515] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1262'. [ 189.801027][ T7515] hsr_slave_0: left promiscuous mode [ 189.807175][ T7515] hsr_slave_1: left promiscuous mode [ 190.442823][ T28] kauditd_printk_skb: 494 callbacks suppressed [ 190.442896][ T28] audit: type=1400 audit(1774335898.428:2510): avc: denied { read write } for pid=4642 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.475036][ T28] audit: type=1400 audit(1774335898.438:2511): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.500626][ T28] audit: type=1400 audit(1774335898.488:2512): avc: denied { map_create } for pid=7525 comm="syz.5.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 190.521014][ T28] audit: type=1400 audit(1774335898.488:2513): avc: denied { prog_load } for pid=7525 comm="syz.5.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 190.541225][ T28] audit: type=1400 audit(1774335898.498:2514): avc: denied { read write } for pid=4642 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.566523][ T28] audit: type=1400 audit(1774335898.498:2515): avc: denied { read } for pid=7527 comm="syz.2.1268" dev="nsfs" ino=4026532593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 190.588216][ T28] audit: type=1400 audit(1774335898.498:2516): avc: denied { create } for pid=7527 comm="syz.2.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 190.609693][ T28] audit: type=1400 audit(1774335898.498:2517): avc: denied { read } for pid=7527 comm="syz.2.1268" dev="nsfs" ino=4026532593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 190.632898][ T28] audit: type=1400 audit(1774335898.508:2518): avc: denied { map_create } for pid=7527 comm="syz.2.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 190.654844][ T28] audit: type=1400 audit(1774335898.508:2519): avc: denied { prog_load } for pid=7527 comm="syz.2.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 190.744380][ T7548] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 190.753589][ T7548] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 190.812044][ T7554] bridge0: left promiscuous mode [ 190.822234][ T7554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.353507][ T7604] FAULT_INJECTION: forcing a failure. [ 191.353507][ T7604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.367240][ T7604] CPU: 0 UID: 0 PID: 7604 Comm: syz.4.1296 Tainted: G W syzkaller #0 PREEMPT(full) [ 191.367266][ T7604] Tainted: [W]=WARN [ 191.367271][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.367279][ T7604] Call Trace: [ 191.367283][ T7604] [ 191.367289][ T7604] __dump_stack+0x1d/0x30 [ 191.367310][ T7604] dump_stack_lvl+0x95/0xd0 [ 191.367335][ T7604] dump_stack+0x15/0x1b [ 191.367359][ T7604] should_fail_ex+0x263/0x280 [ 191.367378][ T7604] should_fail+0xb/0x20 [ 191.367409][ T7604] should_fail_usercopy+0x1a/0x20 [ 191.367428][ T7604] _copy_to_user+0x20/0xa0 [ 191.367485][ T7604] simple_read_from_buffer+0xb5/0x130 [ 191.367502][ T7604] proc_fail_nth_read+0x10e/0x150 [ 191.367581][ T7604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.367601][ T7604] vfs_read+0x1ab/0x7f0 [ 191.367622][ T7604] ? __rcu_read_unlock+0x4e/0x70 [ 191.367637][ T7604] ? __fget_files+0x184/0x1c0 [ 191.367688][ T7604] ? mutex_lock+0x57/0x90 [ 191.367709][ T7604] ksys_read+0xdc/0x1a0 [ 191.367731][ T7604] __x64_sys_read+0x40/0x50 [ 191.367796][ T7604] x64_sys_call+0x2886/0x3020 [ 191.367814][ T7604] do_syscall_64+0x12c/0x370 [ 191.367831][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.367850][ T7604] RIP: 0033:0x7ff5aa75cfce [ 191.367862][ T7604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 191.367938][ T7604] RSP: 002b:00007ff5a91f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.367955][ T7604] RAX: ffffffffffffffda RBX: 00007ff5a91f76c0 RCX: 00007ff5aa75cfce [ 191.367974][ T7604] RDX: 000000000000000f RSI: 00007ff5a91f70a0 RDI: 0000000000000003 [ 191.367990][ T7604] RBP: 00007ff5a91f7090 R08: 0000000000000000 R09: 0000000000000000 [ 191.368005][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.368020][ T7604] R13: 00007ff5aaa16038 R14: 00007ff5aaa15fa0 R15: 00007ffdd5d2ac98 [ 191.368066][ T7604] [ 192.283406][ T7637] geneve2: left promiscuous mode [ 192.289231][ T7638] sctp: [Deprecated]: syz.2.1308 (pid 7638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.289231][ T7638] Use struct sctp_sack_info instead [ 192.290120][ T7637] bond0: left allmulticast mode [ 192.364973][ T7645] netlink: 'syz.2.1311': attribute type 13 has an invalid length. [ 192.637428][ T7659] __nla_validate_parse: 1 callbacks suppressed [ 192.637486][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 193.151107][ T7712] lo speed is unknown, defaulting to 1000 [ 193.165158][ T7712] lo speed is unknown, defaulting to 1000 [ 193.555113][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 193.763980][ T7733] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1347'. [ 193.775001][ T7733] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.782592][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.910506][ T7744] netlink: 'syz.2.1351': attribute type 13 has an invalid length. [ 194.044289][ T23] lo speed is unknown, defaulting to 1000 [ 194.044328][ T50] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.044390][ T50] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.054560][ T23] syz0: Port: 1 Link DOWN [ 194.083054][ T50] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.106002][ T50] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.125069][ T50] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.140392][ T50] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.149727][ T50] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.161857][ T50] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.207927][ T7766] FAULT_INJECTION: forcing a failure. [ 194.207927][ T7766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.221710][ T7766] CPU: 1 UID: 0 PID: 7766 Comm: syz.3.1361 Tainted: G W syzkaller #0 PREEMPT(full) [ 194.221745][ T7766] Tainted: [W]=WARN [ 194.221754][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.221768][ T7766] Call Trace: [ 194.221790][ T7766] [ 194.221800][ T7766] __dump_stack+0x1d/0x30 [ 194.221843][ T7766] dump_stack_lvl+0x95/0xd0 [ 194.221873][ T7766] dump_stack+0x15/0x1b [ 194.221898][ T7766] should_fail_ex+0x263/0x280 [ 194.221924][ T7766] should_fail+0xb/0x20 [ 194.222012][ T7766] should_fail_usercopy+0x1a/0x20 [ 194.222045][ T7766] _copy_from_iter+0xcf/0xea0 [ 194.222078][ T7766] ? __alloc_skb+0x4f6/0x690 [ 194.222145][ T7766] ? __alloc_skb+0x200/0x690 [ 194.222256][ T7766] netlink_sendmsg+0x4ae/0x6f0 [ 194.222299][ T7766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.222330][ T7766] ____sys_sendmsg+0x563/0x5b0 [ 194.222362][ T7766] ___sys_sendmsg+0x195/0x1e0 [ 194.222473][ T7766] __x64_sys_sendmsg+0xd4/0x160 [ 194.222512][ T7766] x64_sys_call+0x194c/0x3020 [ 194.222544][ T7766] do_syscall_64+0x12c/0x370 [ 194.222618][ T7766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.222664][ T7766] RIP: 0033:0x7effb408c799 [ 194.222747][ T7766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.222770][ T7766] RSP: 002b:00007effb2adf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.222795][ T7766] RAX: ffffffffffffffda RBX: 00007effb4305fa0 RCX: 00007effb408c799 [ 194.222842][ T7766] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 194.222858][ T7766] RBP: 00007effb2adf090 R08: 0000000000000000 R09: 0000000000000000 [ 194.222874][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.222890][ T7766] R13: 00007effb4306038 R14: 00007effb4305fa0 R15: 00007ffdb2f31bc8 [ 194.222974][ T7766] [ 194.712299][ T7794] macvtap1: entered promiscuous mode [ 194.717751][ T7794] macvtap1: entered allmulticast mode [ 194.724020][ T7794] batadv0: entered promiscuous mode [ 194.729626][ T7794] batadv0: entered allmulticast mode [ 194.736377][ T7794] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 194.744321][ T7794] team0: Device macvtap1 failed to register rx_handler [ 194.752511][ T7794] batadv0: left allmulticast mode [ 194.758090][ T7794] batadv0: left promiscuous mode [ 195.340545][ T7811] lo speed is unknown, defaulting to 1000 [ 195.346799][ T7811] lo speed is unknown, defaulting to 1000 [ 195.386102][ T7812] netlink: 'syz.4.1376': attribute type 1 has an invalid length. [ 195.453732][ T7811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1376'. [ 195.461193][ T28] kauditd_printk_skb: 882 callbacks suppressed [ 195.461335][ T28] audit: type=1400 audit(1774335903.454:3402): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.500686][ T28] audit: type=1400 audit(1774335903.464:3403): avc: denied { prog_load } for pid=7813 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 195.521745][ T28] audit: type=1400 audit(1774335903.464:3404): avc: denied { prog_load } for pid=7813 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 195.541902][ T28] audit: type=1400 audit(1774335903.464:3405): avc: denied { map_create } for pid=7813 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 195.562972][ T28] audit: type=1400 audit(1774335903.464:3406): avc: denied { allowed } for pid=7813 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 195.593200][ T28] audit: type=1400 audit(1774335903.464:3407): avc: denied { prog_load } for pid=7813 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 195.613492][ T28] audit: type=1400 audit(1774335903.464:3408): avc: denied { create } for pid=7813 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 195.635341][ T28] audit: type=1400 audit(1774335903.464:3409): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.662239][ T7826] FAULT_INJECTION: forcing a failure. [ 195.662239][ T7826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.676187][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.2.1383 Tainted: G W syzkaller #0 PREEMPT(full) [ 195.676241][ T7826] Tainted: [W]=WARN [ 195.676248][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.676324][ T7826] Call Trace: [ 195.676368][ T7826] [ 195.676378][ T7826] __dump_stack+0x1d/0x30 [ 195.676407][ T7826] dump_stack_lvl+0x95/0xd0 [ 195.676473][ T7826] dump_stack+0x15/0x1b [ 195.676496][ T7826] should_fail_ex+0x263/0x280 [ 195.676524][ T7826] should_fail+0xb/0x20 [ 195.676548][ T7826] should_fail_usercopy+0x1a/0x20 [ 195.676655][ T7826] _copy_from_user+0x1c/0xb0 [ 195.676707][ T7826] ___sys_sendmsg+0xc1/0x1e0 [ 195.676749][ T7826] __x64_sys_sendmsg+0xd4/0x160 [ 195.676859][ T7826] x64_sys_call+0x194c/0x3020 [ 195.676886][ T7826] do_syscall_64+0x12c/0x370 [ 195.676913][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.676937][ T7826] RIP: 0033:0x7f7e4ff6c799 [ 195.676962][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.676981][ T7826] RSP: 002b:00007f7e4e9bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.677004][ T7826] RAX: ffffffffffffffda RBX: 00007f7e501e5fa0 RCX: 00007f7e4ff6c799 [ 195.677020][ T7826] RDX: 0000000000004804 RSI: 0000200000000000 RDI: 0000000000000003 [ 195.677116][ T7826] RBP: 00007f7e4e9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 195.677130][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.677144][ T7826] R13: 00007f7e501e6038 R14: 00007f7e501e5fa0 R15: 00007fff8a863c58 [ 195.677164][ T7826] [ 195.688211][ T28] audit: type=1400 audit(1774335903.484:3410): avc: denied { open } for pid=7815 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 195.688242][ T28] audit: type=1400 audit(1774335903.494:3411): avc: denied { create } for pid=7815 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 195.780678][ T7837] FAULT_INJECTION: forcing a failure. [ 195.780678][ T7837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.915322][ T7837] CPU: 0 UID: 0 PID: 7837 Comm: syz.5.1387 Tainted: G W syzkaller #0 PREEMPT(full) [ 195.915358][ T7837] Tainted: [W]=WARN [ 195.915428][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.915443][ T7837] Call Trace: [ 195.915450][ T7837] [ 195.915458][ T7837] __dump_stack+0x1d/0x30 [ 195.915488][ T7837] dump_stack_lvl+0x95/0xd0 [ 195.915513][ T7837] dump_stack+0x15/0x1b [ 195.915614][ T7837] should_fail_ex+0x263/0x280 [ 195.915644][ T7837] should_fail+0xb/0x20 [ 195.915670][ T7837] should_fail_usercopy+0x1a/0x20 [ 195.915699][ T7837] _copy_from_user+0x1c/0xb0 [ 195.915741][ T7837] do_sock_getsockopt+0xf1/0x210 [ 195.915774][ T7837] __x64_sys_getsockopt+0x11d/0x1a0 [ 195.915935][ T7837] x64_sys_call+0x2dcf/0x3020 [ 195.915967][ T7837] do_syscall_64+0x12c/0x370 [ 195.916003][ T7837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.916077][ T7837] RIP: 0033:0x7fd7a844c799 [ 195.916095][ T7837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.916115][ T7837] RSP: 002b:00007fd7a6ea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 195.916138][ T7837] RAX: ffffffffffffffda RBX: 00007fd7a86c5fa0 RCX: 00007fd7a844c799 [ 195.916153][ T7837] RDX: 000000000000007f RSI: 0000000000000084 RDI: 0000000000000003 [ 195.916247][ T7837] RBP: 00007fd7a6ea7090 R08: 0000200000000000 R09: 0000000000000000 [ 195.916261][ T7837] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 195.916275][ T7837] R13: 00007fd7a86c6038 R14: 00007fd7a86c5fa0 R15: 00007ffdd74cb068 [ 195.916366][ T7837] [ 196.876436][ T7894] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.1410'. [ 197.023909][ T7914] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1420'. [ 197.164825][ T7928] syzkaller0: entered promiscuous mode [ 197.171197][ T7928] syzkaller0: entered allmulticast mode [ 197.722003][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1444'. [ 197.731949][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1444'. [ 197.746216][ T7968] netlink: 'syz.5.1444': attribute type 10 has an invalid length. [ 197.785641][ T7976] bond3: entered promiscuous mode [ 197.791106][ T7976] bond3: entered allmulticast mode [ 197.796536][ T7976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.935514][ T7984] batadv_slave_0: Caught tx_queue_len zero misconfig [ 198.785723][ T8010] lo speed is unknown, defaulting to 1000 [ 198.792211][ T8010] lo speed is unknown, defaulting to 1000 [ 198.880426][ T8017] netlink: 'syz.3.1462': attribute type 21 has an invalid length. [ 198.888936][ T8017] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1462'. [ 199.669735][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 200.497214][ T28] kauditd_printk_skb: 641 callbacks suppressed [ 200.497235][ T28] audit: type=1400 audit(1774335908.481:4053): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.532421][ T28] audit: type=1400 audit(1774335908.481:4054): avc: denied { open } for pid=8124 comm="syz.6.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 200.553903][ T28] audit: type=1400 audit(1774335908.481:4055): avc: denied { prog_load } for pid=8124 comm="syz.6.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 200.574548][ T8130] tc_dump_action: action bad kind [ 200.574715][ T28] audit: type=1400 audit(1774335908.481:4056): avc: denied { open } for pid=8124 comm="syz.6.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 200.600214][ T28] audit: type=1400 audit(1774335908.481:4057): avc: denied { create } for pid=8124 comm="syz.6.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 200.624284][ T28] audit: type=1400 audit(1774335908.481:4058): avc: denied { create } for pid=8124 comm="syz.6.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 200.645636][ T28] audit: type=1400 audit(1774335908.531:4059): avc: denied { prog_load } for pid=8129 comm="syz.6.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 200.666285][ T28] audit: type=1400 audit(1774335908.531:4060): avc: denied { create } for pid=8129 comm="syz.6.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 200.686779][ T28] audit: type=1400 audit(1774335908.561:4061): avc: denied { allowed } for pid=8129 comm="syz.6.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 200.708071][ T28] audit: type=1400 audit(1774335908.561:4062): avc: denied { create } for pid=8129 comm="syz.6.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 201.379845][ T8162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8162 comm=syz.2.1518 [ 201.423458][ T8168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1520'. [ 201.433581][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1520'. [ 201.571892][ T8178] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.623775][ T8183] lo speed is unknown, defaulting to 1000 [ 201.630287][ T8183] lo speed is unknown, defaulting to 1000 [ 201.804791][ T8195] bond4: entered promiscuous mode [ 201.839450][ T8202] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1532'. [ 201.954970][ T8220] FAULT_INJECTION: forcing a failure. [ 201.954970][ T8220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.970018][ T8220] CPU: 1 UID: 0 PID: 8220 Comm: syz.5.1540 Tainted: G W syzkaller #0 PREEMPT(full) [ 201.970052][ T8220] Tainted: [W]=WARN [ 201.970059][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.970114][ T8220] Call Trace: [ 201.970122][ T8220] [ 201.970131][ T8220] __dump_stack+0x1d/0x30 [ 201.970161][ T8220] dump_stack_lvl+0x95/0xd0 [ 201.970243][ T8220] dump_stack+0x15/0x1b [ 201.970265][ T8220] should_fail_ex+0x263/0x280 [ 201.970291][ T8220] should_fail+0xb/0x20 [ 201.970360][ T8220] should_fail_usercopy+0x1a/0x20 [ 201.970386][ T8220] _copy_to_user+0x20/0xa0 [ 201.970415][ T8220] simple_read_from_buffer+0xb5/0x130 [ 201.970442][ T8220] proc_fail_nth_read+0x10e/0x150 [ 201.970474][ T8220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.970504][ T8220] vfs_read+0x1ab/0x7f0 [ 201.970562][ T8220] ? __rcu_read_unlock+0x4e/0x70 [ 201.970584][ T8220] ? __fget_files+0x184/0x1c0 [ 201.970754][ T8220] ? mutex_lock+0x57/0x90 [ 201.970789][ T8220] ksys_read+0xdc/0x1a0 [ 201.970928][ T8220] __x64_sys_read+0x40/0x50 [ 201.970947][ T8220] x64_sys_call+0x2886/0x3020 [ 201.971107][ T8220] do_syscall_64+0x12c/0x370 [ 201.971134][ T8220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.971218][ T8220] RIP: 0033:0x7fd7a840cfce [ 201.971269][ T8220] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 201.971291][ T8220] RSP: 002b:00007fd7a6ea6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.971314][ T8220] RAX: ffffffffffffffda RBX: 00007fd7a6ea76c0 RCX: 00007fd7a840cfce [ 201.971328][ T8220] RDX: 000000000000000f RSI: 00007fd7a6ea70a0 RDI: 0000000000000003 [ 201.971341][ T8220] RBP: 00007fd7a6ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 201.971424][ T8220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.971439][ T8220] R13: 00007fd7a86c6038 R14: 00007fd7a86c5fa0 R15: 00007ffdd74cb068 [ 201.971459][ T8220] [ 202.397214][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1551'. [ 202.638403][ T8256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1554'. [ 202.651315][ T8256] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 202.663232][ T8256] bridge1: entered promiscuous mode [ 202.790359][ T8266] lo speed is unknown, defaulting to 1000 [ 202.803876][ T8266] lo speed is unknown, defaulting to 1000 [ 203.449458][ T8293] futex_wake_op: syz.6.1568 tries to shift op by 32; fix this program [ 203.503351][ T8297] netlink: 'syz.3.1570': attribute type 1 has an invalid length. [ 203.517012][ T8297] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.346101][ T8313] SET target dimension over the limit! [ 204.524615][ T8338] lo speed is unknown, defaulting to 1000 [ 204.531415][ T8338] lo speed is unknown, defaulting to 1000 [ 204.541426][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1587'. [ 204.597246][ T8341] vlan1: entered promiscuous mode [ 204.662046][ T8341] bridge0: entered promiscuous mode [ 204.698661][ T8346] bridge_slave_0: left allmulticast mode [ 204.704636][ T8346] bridge_slave_0: left promiscuous mode [ 204.710816][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.723559][ T8346] bridge_slave_1: left allmulticast mode [ 204.729572][ T8346] bridge_slave_1: left promiscuous mode [ 204.736524][ T8346] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.747360][ T8346] bond0: (slave bond_slave_0): Releasing backup interface [ 204.758761][ T8346] bond0: (slave bond_slave_1): Releasing backup interface [ 204.778011][ T8346] team0: Port device team_slave_0 removed [ 204.789855][ T8346] team0: Port device team_slave_1 removed [ 204.797474][ T8346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.805856][ T8346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.830899][ T8346] team0: Port device bridge2 removed [ 204.842003][ T8346] bond2: (slave geneve2): Releasing active interface [ 204.939601][ T8354] can0: slcan on ttyS3. [ 205.014215][ T8353] can0 (unregistered): slcan off ttyS3. [ 205.410213][ T8371] vlan0: entered promiscuous mode [ 205.503498][ T28] kauditd_printk_skb: 3888 callbacks suppressed [ 205.503513][ T28] audit: type=1400 audit(1774335913.479:7933): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.539616][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.547594][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 205.547707][ T3040] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 205.567827][ T28] audit: type=1400 audit(1774335913.509:7934): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.590857][ T3040] audit: backlog limit exceeded [ 205.596393][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.596680][ T8381] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.605628][ T3040] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 205.618258][ T28] audit: type=1400 audit(1774335913.509:7935): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.640387][ T3040] audit: backlog limit exceeded [ 206.348013][ T8425] bridge2: entered promiscuous mode [ 206.354357][ T8425] bridge2: entered allmulticast mode [ 206.361598][ T8425] team0: Device bridge2 is of different type [ 206.537331][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1623'. [ 206.566045][ T8431] geneve2: entered promiscuous mode [ 206.585872][ T8429] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8429 comm=syz.3.1623 [ 206.658270][ T8437] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1627'. [ 206.908614][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 207.779525][ T8472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1640'. [ 208.980255][ T8522] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 209.818460][ T8519] syz.3.1661 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 209.842052][ T8519] CPU: 1 UID: 0 PID: 8519 Comm: syz.3.1661 Tainted: G W syzkaller #0 PREEMPT(full) [ 209.842156][ T8519] Tainted: [W]=WARN [ 209.842170][ T8519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.842182][ T8519] Call Trace: [ 209.842190][ T8519] [ 209.842198][ T8519] __dump_stack+0x1d/0x30 [ 209.842231][ T8519] dump_stack_lvl+0x95/0xd0 [ 209.842260][ T8519] dump_stack+0x15/0x1b [ 209.842326][ T8519] dump_header+0x80/0x240 [ 209.842353][ T8519] oom_kill_process+0x295/0x350 [ 209.842381][ T8519] out_of_memory+0x97d/0xb80 [ 209.842407][ T8519] try_charge_memcg+0x62e/0xa10 [ 209.842531][ T8519] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 209.842565][ T8519] __swap_cache_prepare_and_add+0x386/0x530 [ 209.842626][ T8519] swap_cache_alloc_folio+0xa2/0x120 [ 209.842719][ T8519] swap_cluster_readahead+0x26e/0x3d0 [ 209.842839][ T8519] swapin_readahead+0xde/0x840 [ 209.842869][ T8519] ? __rcu_read_unlock+0x4e/0x70 [ 209.842896][ T8519] ? __perf_event_task_sched_in+0xa65/0xad0 [ 209.842923][ T8519] ? __list_add_valid_or_report+0x38/0xe0 [ 209.842986][ T8519] ? __rcu_read_unlock+0x4e/0x70 [ 209.843009][ T8519] ? swap_cache_get_folio+0x26f/0x280 [ 209.843037][ T8519] do_swap_page+0x30d/0x2220 [ 209.843068][ T8519] ? __schedule+0x93c/0xd40 [ 209.843131][ T8519] ? __rcu_read_lock+0x36/0x50 [ 209.843153][ T8519] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 209.843194][ T8519] handle_mm_fault+0xb46/0x3020 [ 209.843291][ T8519] ? vma_start_read+0x1c7/0x2c0 [ 209.843319][ T8519] do_user_addr_fault+0x62f/0x1050 [ 209.843414][ T8519] ? trace_page_fault_user+0x1f/0xe0 [ 209.843449][ T8519] exc_page_fault+0x62/0xa0 [ 209.843489][ T8519] asm_exc_page_fault+0x26/0x30 [ 209.843585][ T8519] RIP: 0033:0x7effb3f5a14c [ 209.843603][ T8519] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 209.843622][ T8519] RSP: 002b:00007ffdb2f31d30 EFLAGS: 00010206 [ 209.843650][ T8519] RAX: 0000000000000000 RBX: 00007effb4305fa0 RCX: 00005555908b0808 [ 209.843668][ T8519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.843684][ T8519] RBP: 00007effb4307da0 R08: 0000000000000000 R09: 0000000000000000 [ 209.843700][ T8519] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003315f [ 209.843782][ T8519] R13: 00007effb430609c R14: 0000000000032e8e R15: 00007effb4306090 [ 209.843800][ T8519] [ 210.093403][ T8519] memory: usage 307200kB, limit 307200kB, failcnt 521 [ 210.100742][ T8519] memory+swap: usage 307848kB, limit 9007199254740988kB, failcnt 0 [ 210.108851][ T8519] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 210.116450][ T8519] Memory cgroup stats for /syz3: [ 210.116852][ T8519] cache 0 [ 210.125160][ T8519] rss 0 [ 210.128246][ T8519] shmem 0 [ 210.131394][ T8519] mapped_file 0 [ 210.134982][ T8519] dirty 0 [ 210.137948][ T8519] writeback 4096 [ 210.141730][ T8519] workingset_refault_anon 42 [ 210.146487][ T8519] workingset_refault_file 544 [ 210.151570][ T8519] swap 663552 [ 210.155038][ T8519] swapcached 684032 [ 210.159476][ T8519] pgpgin 114421 [ 210.163560][ T8519] pgpgout 114418 [ 210.167239][ T8519] pgfault 172386 [ 210.170966][ T8519] pgmajfault 39 [ 210.174623][ T8519] inactive_anon 8192 [ 210.178633][ T8519] active_anon 0 [ 210.182291][ T8519] inactive_file 4096 [ 210.186314][ T8519] active_file 0 [ 210.189883][ T8519] unevictable 0 [ 210.193465][ T8519] hierarchical_memory_limit 314572800 [ 210.199136][ T8519] hierarchical_memsw_limit 9223372036854771712 [ 210.206022][ T8519] total_cache 0 [ 210.209670][ T8519] total_rss 0 [ 210.213045][ T8519] total_shmem 0 [ 210.220040][ T8519] total_mapped_file 0 [ 210.224531][ T8519] total_dirty 0 [ 210.228372][ T8519] total_writeback 4096 [ 210.232967][ T8519] total_workingset_refault_anon 42 [ 210.238142][ T8519] total_workingset_refault_file 544 [ 210.243439][ T8519] total_swap 663552 [ 210.247364][ T8519] total_swapcached 684032 [ 210.252305][ T8519] total_pgpgin 114422 [ 210.256680][ T8519] total_pgpgout 114419 [ 210.261130][ T8519] total_pgfault 172388 [ 210.265440][ T8519] total_pgmajfault 39 [ 210.270241][ T8519] total_inactive_anon 8192 [ 210.274964][ T8519] total_active_anon 0 [ 210.279789][ T8519] total_inactive_file 4096 [ 210.284302][ T8519] total_active_file 0 [ 210.288591][ T8519] total_unevictable 0 [ 210.292674][ T8519] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1661,pid=8519,uid=0 [ 210.308521][ T8519] Memory cgroup out of memory: Killed process 8519 (syz.3.1661) total-vm:94164kB, anon-rss:1232kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 210.514892][ T28] kauditd_printk_skb: 27892 callbacks suppressed [ 210.514911][ T28] audit: type=1400 audit(1774335918.498:34095): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.569869][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 210.574721][ T28] audit: type=1400 audit(1774335918.498:34096): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.590943][ T3040] audit: audit_lost=588 audit_rate_limit=0 audit_backlog_limit=64 [ 210.635343][ T3320] audit: audit_backlog=65 > audit_backlog_limit=64 [ 210.646502][ T3320] audit: audit_lost=589 audit_rate_limit=0 audit_backlog_limit=64 [ 210.654481][ T28] audit: type=1400 audit(1774335918.528:34097): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.654513][ T28] audit: type=1400 audit(1774335918.528:34098): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.694686][ T3040] audit: backlog limit exceeded [ 210.703800][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 210.769490][ T8563] ================================================================== [ 210.778139][ T8563] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 210.785391][ T8563] [ 210.787736][ T8563] write to 0xffff8881040ad8b0 of 8 bytes by task 3313 on cpu 0: [ 210.795635][ T8563] release_task+0x6ef/0xb60 [ 210.800548][ T8563] wait_consider_task+0x1160/0x1670 [ 210.805949][ T8563] __do_wait+0xf9/0x510 [ 210.810309][ T8563] do_wait+0xb6/0x260 [ 210.814402][ T8563] kernel_wait4+0x19f/0x210 [ 210.819016][ T8563] __x64_sys_wait4+0x91/0x120 [ 210.824494][ T8563] x64_sys_call+0x2aee/0x3020 [ 210.829292][ T8563] do_syscall_64+0x12c/0x370 [ 210.834009][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.840107][ T8563] [ 210.842714][ T8563] read to 0xffff8881040ad3c0 of 3328 bytes by task 8563 on cpu 1: [ 210.851406][ T8563] memcpy_and_pad+0x48/0x80 [ 210.856300][ T8563] arch_dup_task_struct+0x2c/0x40 [ 210.861530][ T8563] dup_task_struct+0x6e/0x950 [ 210.866353][ T8563] copy_process+0x37e/0x20b0 [ 210.871314][ T8563] kernel_clone+0x16b/0x5d0 [ 210.876103][ T8563] __se_sys_clone3+0x1f5/0x230 [ 210.881415][ T8563] __x64_sys_clone3+0x31/0x40 [ 210.886304][ T8563] x64_sys_call+0x580/0x3020 [ 210.890931][ T8563] do_syscall_64+0x12c/0x370 [ 210.895718][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.901735][ T8563] [ 210.904174][ T8563] Reported by Kernel Concurrency Sanitizer on: [ 210.910841][ T8563] CPU: 1 UID: 0 PID: 8563 Comm: syz.4.1678 Tainted: G W syzkaller #0 PREEMPT(full) [ 210.922082][ T8563] Tainted: [W]=WARN [ 210.925923][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.936089][ T8563] ================================================================== [ 211.035805][ T8568] IPVS: set_ctl: invalid protocol: 137 100.1.1.2:20004 [ 215.525646][ T28] kauditd_printk_skb: 41328 callbacks suppressed [ 215.525663][ T28] audit: type=1400 audit(1774335923.497:74710): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.541391][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 215.554394][ T28] audit: type=1400 audit(1774335923.507:74711): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.561495][ T3040] audit: audit_lost=829 audit_rate_limit=0 audit_backlog_limit=64 [ 215.583679][ T28] audit: type=1400 audit(1774335923.507:74712): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.591019][ T3040] audit: backlog limit exceeded [ 215.612062][ T28] audit: type=1400 audit(1774335923.507:74713): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.612156][ T28] audit: type=1400 audit(1774335923.507:74714): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.618667][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 215.640093][ T28] audit: type=1400 audit(1774335923.507:74715): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.536461][ T28] kauditd_printk_skb: 46580 callbacks suppressed [ 220.536506][ T28] audit: type=1400 audit(1774335928.526:119908): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.558489][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 220.565034][ T28] audit: type=1400 audit(1774335928.526:119909): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.572072][ T3040] audit: audit_lost=1293 audit_rate_limit=0 audit_backlog_limit=64 [ 220.593719][ T28] audit: type=1400 audit(1774335928.526:119910): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.602503][ T3040] audit: backlog limit exceeded [ 220.625606][ T28] audit: type=1400 audit(1774335928.526:119911): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.632702][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 220.651390][ T28] audit: type=1400 audit(1774335928.526:119912): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.651420][ T28] audit: type=1400 audit(1774335928.526:119913): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0