last executing test programs: 4m8.00388813s ago: executing program 3 (id=12363): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040)='proc\x00', 0x800000, 0x0) 4m7.832267455s ago: executing program 3 (id=12367): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m6.737550361s ago: executing program 3 (id=12371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x38, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}, @RTA_OIF={0x8, 0x4, r3}]}, 0x38}, 0x1, 0x11}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000380)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x48d4}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x8, 0x3, 0x377}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xfffffffc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fadbdf2527000000180001801400020065727370616e3000"], 0x2c}}, 0x4) 4m5.754808603s ago: executing program 3 (id=12385): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m5.589483498s ago: executing program 3 (id=12387): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000100)="cc316ee4ab14134768b81e7972660e48803feb17c8846695214e27597fd917d62e515b67c7a696556dbd272a0f7a62d0f0be5e952167b5642a827b2cfc57d32196f9c202e7c28174b2234e98eee236529a5cf2ca359c7a3a404770033071250980fd79bba6a69166e87f72f61155971573010b284b06f0b764e150cd5bbbb7caa847b1adbd91c881639d295e0221e6bc1c2bbe7925697c8823f249b5ca416bb4af95a44fecb6f0b5e1e076b66c5a5737c3a88044ff29fc6a1bcd8f4827", &(0x7f00000000c0)="1f58c04d759a59ef54cd51e7eaba8dc61eb9b0318483248ba28515b5c1"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r5) r6 = fsopen(&(0x7f0000000440)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x00\x02\x00\x00\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\xd3O8mFC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8\x97\bmm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 4m4.417724456s ago: executing program 3 (id=12390): syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x3, 0xe, 0xd, @private2, @loopback, 0x40, 0x1, 0xfffffffc}}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 4m4.381202347s ago: executing program 32 (id=12390): syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x3, 0xe, 0xd, @private2, @loopback, 0x40, 0x1, 0xfffffffc}}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 3.196050657s ago: executing program 1 (id=14241): syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) setpgid(r3, r3) flock(r6, 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES16=r7, @ANYBLOB="090727bd7000fbdbdf257000000008000300", @ANYRES32=r8, @ANYBLOB="0c009900070000005c0000000a0006000802110000005d070000060008021100000100000a000600ffffffffffff0000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x200043, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="2c7766646e6f3dc18d870b014d1ece12719a1043f074059701241d96b1d98f926819d1e5eca837de6810f562974e46991dcdbe3a574cca6e735f41d9ac4c1c736855469a634e3acb246e73aaac02c0f3309fa9ef4ada55c640095e4fb39c80c712107f16faad9b3b58d1d8e67716d8dd03231846e83cf356b36e3b66ee360470e271895794a2bc4e1d4f95d4b0d1aa5213e460efd84569d63c4b782cd271be7ff38c7211f19283c34eae62fe00fcc96e8937f9a8343717e391373d7a6042c78450ccc79614cb5a6da616194ccedd38370084e56b3cbae116b572fe44ad935be0cc", @ANYBLOB=',\x00']) socket$nl_xfrm(0x10, 0x3, 0x6) 2.743427031s ago: executing program 2 (id=14248): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb0000", 0x4}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 2.620217906s ago: executing program 2 (id=14249): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000fddbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="3c002d80080003000000000008000200030000000500040001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) 2.532424688s ago: executing program 2 (id=14250): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4c3}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) 2.416863722s ago: executing program 2 (id=14251): setgroups(0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) 2.344342875s ago: executing program 2 (id=14253): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600ffd018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x10010, r0, 0x8653a000) 2.343466795s ago: executing program 5 (id=14254): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x1fc, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x4}, {}, {0x8, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @filter_kind_options=@f_u32={{0x8}, {0x1c8, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0xffffffff}}, @TCA_U32_CLASSID={0x8, 0x1, {0x7, 0xfff1}}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x4}}, @TCA_U32_SEL={0x194, 0x5, {0xc, 0x80, 0x4, 0x401, 0x1f, 0x3, 0x9, 0x0, [{0x10, 0x7fff, 0x7fff, 0x3}, {0x4396, 0xd, 0xec, 0x8e4a}, {0x5, 0x2000, 0x10001, 0xc}, {0x3, 0x2, 0x1}, {0x40, 0x370d, 0x1ff, 0x6}, {0x6, 0x12b, 0xd, 0x80000000}, {0x1, 0x6, 0x7, 0x1}, {0x0, 0x6, 0x8}, {0x9, 0x2, 0x6, 0xcc}, {0x80000001, 0x1000, 0x5, 0x3}, {0x242, 0x5, 0x4, 0x5}, {0x0, 0x429, 0x4, 0x940}, {0x6, 0x45bc, 0x9, 0x5}, {0x200, 0xd941, 0x4, 0x7}, {0x5, 0x443f, 0x8, 0xffff}, {0x8, 0xff, 0x5}, {0x2, 0x7, 0x9, 0x5}, {0x8, 0xa5b0, 0x2, 0x5}, {0x4, 0x7, 0xb2be, 0x7}, {0x4, 0x5, 0x1, 0x9}, {0x3, 0x2, 0x2f32, 0x1}, {0xffffffff, 0x0, 0x4b, 0x7}, {0x1, 0x10000, 0xffff3bfe, 0x1}, {0x6, 0x0, 0x2, 0x400}]}}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) semget$private(0x0, 0x0, 0x80) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4156, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x105e39, 0x0, 0xfffffffe, 0x8, 0x5, 0x2, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)) syz_emit_ethernet(0x3c, &(0x7f00000000c0)={@random="ac3ed9ade582", @broadcast, @void, {@llc_tr={0x11, {@snap={0xab, 0xaa, "7f", "bddacb", 0x8884, "0bf54c54bd04808dadbbf6bf34936c754eb3680b2c8fcb04d8fd75b6fc3ddc7a5e6fc298a80d"}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, &(0x7f0000000000)) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r8, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @loopback={0xff00}, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000004c0)=ANY=[], 0x28}, 0x4004000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = socket(0x11, 0x2, 0x0) setsockopt(r9, 0x107, 0x8, &(0x7f0000000140)="11000000", 0x4) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 2.282134236s ago: executing program 1 (id=14256): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000080)=0xffff, 0x4) sendto$inet6(r4, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x9c}], 0x1, 0x40, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x30}], 0x1}, 0x894) 2.148202091s ago: executing program 5 (id=14257): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x11bb, 0x1, 0x6, 0x7, 0x4, 0xa5f2905, 0x83ce, 0x2e16df38}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8937, &(0x7f0000000000)={'hsr0\x00', @random="010000201000"}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) 1.964183447s ago: executing program 4 (id=14259): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) set_mempolicy(0x8000, &(0x7f0000000440)=0x3d, 0x3) 1.947454047s ago: executing program 4 (id=14260): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000fddbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="3c002d80080003000000000008000200030000000500040001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) 1.884268789s ago: executing program 1 (id=14261): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4c3}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) 1.884008399s ago: executing program 1 (id=14262): setgroups(0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x48094) 1.86936943s ago: executing program 1 (id=14263): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfefffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000200)="800034ca00000000", 0x8, 0x2004c080, &(0x7f0000000180)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1a) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000b40)={0x51, 0x1, 0x4, {0x0, 0x1}, {0x69, 0x2}, @cond=[{0x5, 0x3, 0x63d, 0x8003, 0x3ecb, 0x9}, {0x0, 0xd83c, 0x4, 0x4, 0x1ab1, 0xe04}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001280)={'wg0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001480)={r2, r4, 0x25, 0xc2a9c6176f76313b, @val=@netkit}, 0x1c) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x0, 0x3, 0x20}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0xc00000000000000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, 0x0, 0x0) bind$inet(r9, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000001300)) sendmmsg$inet(r9, 0x0, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.836877041s ago: executing program 0 (id=14264): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000940)='bbr', 0x3) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="540000001200010300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026334cad815f27b43a48793013"], 0x54}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24001044}, 0x0) set_mempolicy(0x8000, &(0x7f0000000440)=0x3d, 0x3) 1.817993931s ago: executing program 4 (id=14265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xccd1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x286}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xa170}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) (fail_nth: 3) 1.732181674s ago: executing program 0 (id=14266): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2a1008, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="0dc068e8c51e023e49de2c4a3793f04a0563536ba72c52f5aba0b04f4c5c70e1", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c4fbf7ddef2f9a1000000bd7000003ac2ee2a481c4eb5808c3cf61d9a5a75e077596224c5baa78f8589c29c53becf0ec9da6708732b1a2209c5", @ANYRES32, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) fchdir(0xffffffffffffffff) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x18) write$binfmt_script(r3, &(0x7f00000008c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, 'vfat\x00'}, {0x20, 'noauto_da_alloc'}, {0x20, '\x00'}], 0xa, "1eb3b026b20944705a7b3d8a3bba5e8a6d00c854f314737492822b69d023ef0564ecae9fd9305823465b48ddf0a834601f4aa91a5847817868fc9289bb9ac0fd7bf0a6806b014c9e6730f3fb72f7e0fe59292d1b9d8f5d3ad3b37402986c880bb39fbd8a211324c0b77ad13f2fede3a211d0"}, 0x18a) syncfs(r4) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x226, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001}, @in6={0xa, 0x4e23, 0x5, @private2, 0x8}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x7, 0xe49, @mcast1, 0x5}, @in={0x2, 0x4e25, @remote}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x5, @mcast2, 0x7}, @in6={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}, @in6={0xa, 0x4e21, 0x401, @mcast2, 0x6}], 0xe8) 1.697006346s ago: executing program 5 (id=14267): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a0000009c00000000000000240000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x1e, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x4048010, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0x8, 0xc9100120, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1c, 0x26d7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x9}, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000002060300000000000000000000000000140007800800124000000000050015000200000005000100060000000500050002000000050004000000000009"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x2080}, 0x40800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, &(0x7f0000000040)=r7, 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) 1.688310436s ago: executing program 0 (id=14268): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x12ca, 0x80, 0x0, 0x51}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f0000000340)=[{&(0x7f0000001f80)="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", 0xc68}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000ec0)=[{0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x1, 0x0, &(0x7f0000000c40), &(0x7f0000000c80)=[0x0, 0x92]}, {0x0, 0x1, 0x0, 0x0, 0x0}], 0x3) ioctl$XFS_IOC_GETBMAP(0xffffffffffffffff, 0xc0205826, &(0x7f0000000040)={0x2, 0x4, 0xdb, 0x6, 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x1, 0x400}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfff}}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) fcntl$lock(r4, 0x6, &(0x7f0000000140)={0x0, 0x4, 0x8, 0x9}) write$P9_RRENAMEAT(r4, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x10000}) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@private2}, &(0x7f0000000240)=0x14) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000000c0)={0x1, r0, 0x23, {0xf49e, 0x9}, 0xfe}, 0x1) 1.308082298s ago: executing program 4 (id=14269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$9p_virtio(&(0x7f0000000380), &(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x840020, &(0x7f0000000580)={'trans=virtio,', {[{@cachetag}, {@version_9p2000}, {@aname={'aname', 0x3d, '{(\'(%{&+'}}, {@cache_loose}], [{@smackfsdef={'smackfsdef', 0x3d, 'siw\x00'}}, {@flag='nolazytime'}, {@smackfsroot={'smackfsroot', 0x3d, '#! '}}, {@appraise}, {@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, 'lo\x00'}}]}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x8, 0x4, 0x7, 0x9, 0x6, 0x2, 0x0, 0x1000000, 0x0, 0x1}, r0, 0xe, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x480106}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x34, r5, 0x800, 0x70bd2a, 0xffff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2(0x0, 0x80080) unshare(0x6c040000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 1.307873098s ago: executing program 0 (id=14270): syz_open_dev$rtc(&(0x7f0000000000), 0x2c6, 0x800) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) close(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 1.307274918s ago: executing program 2 (id=14271): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) 935.07275ms ago: executing program 0 (id=14272): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 584.315391ms ago: executing program 1 (id=14273): socket$caif_seqpacket(0x25, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r4 = dup(r3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x26e9, 0x0, 0x0, 0x10, 0x2, 0xf45}, 0x20) splice(r5, 0x0, r2, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 583.602591ms ago: executing program 5 (id=14274): setgroups(0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x48094) 500.221344ms ago: executing program 5 (id=14275): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000001, 0x8}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)="469c97a52bacbb31df8e1a1d94e36ba0bd2182005bb8e579763d462753ff8f43458445d4cd8926c3e967e969445eaf13a66d89394dff421fddea16705922ce042fce6617100c0afadb1cc26ed9aa1e4701c9a20e9dc98fc82807351ff5c7041fc8bb9c6109d3f3d881d57463169c00fa95b9ad33e890678afa3bd5730b35813a4e8f8aaf66479514ac3dff0e66d888d3cdfd68dd6e84c5ce6c68c1", 0x9b}, {&(0x7f00000001c0)="ae5536605a29d711839113e369df831ebdc0d80766ffca4a9d702fb759a690d9110532d7221d8ea3a565395aba567b627d522e1a58751166ed60310d8db7033113f594fa395b51b80e40d4cb2f90eb60", 0x50}, {&(0x7f00000002c0)="ae12f0513ef95e480f37df12b2f64c3ed88f5bd29028e9b6e3eaf596975a763f01439aa400230745cbe40afde623bd88c3a6a693e43894296e3ce0510a30f9b5616710b17bf55d", 0x47}, {&(0x7f0000000440)="74dc30bc9e0d72d87ce3965a72076155d71d58b5649fb606a97526ca72808687689b99b6f8def4c1a0fd1da6ab0871fe2a6ee3937bcdb8ed1deaeda6d53eb4087638a7c1bbd8a33d110dbc865162ec7d0319ee1193c932802b1b0b2729b348791c434f0c05a4d30e125e59b6589853a0a30b1a3c", 0x74}], 0x4, &(0x7f00000004c0)="f160f65de55b84eaab4ccef78cf6d33dc69f84311ad18ddc4fdc2d8e126cea6e8e04444f7221e37195025594bbae9cbc039e8bcd4a6d2642fb691f686fc73a", 0x3f, 0xc1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) 482.987505ms ago: executing program 0 (id=14276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioperm(0x1ff, 0x8, 0x5) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r7, 0xa, 0x21) fcntl$setlease(r7, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket(0x400000000010, 0x3, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r11, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) 467.128475ms ago: executing program 5 (id=14277): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@getqdisc={0x30, 0x26, 0x2, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffe0, 0xffff}, {0x8, 0xfff2}, {0xf, 0xfff2}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x40004) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8937, &(0x7f0000000000)={'hsr0\x00', @random="010000201000"}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) 407.559857ms ago: executing program 4 (id=14278): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2a1008, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="0dc068e8c51e023e49de2c4a3793f04a0563536ba72c52f5aba0b04f4c5c70e1", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c4fbf7ddef2f9a1000000bd7000003ac2ee2a481c4eb5808c3cf61d9a5a75e077596224c5baa78f8589c29c53becf0ec9da6708732b1a2209c5", @ANYRES32, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) fchdir(0xffffffffffffffff) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x18) write$binfmt_script(r3, &(0x7f00000008c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, 'vfat\x00'}, {0x20, 'noauto_da_alloc'}, {0x20, '\x00'}], 0xa, "1eb3b026b20944705a7b3d8a3bba5e8a6d00c854f314737492822b69d023ef0564ecae9fd9305823465b48ddf0a834601f4aa91a5847817868fc9289bb9ac0fd7bf0a6806b014c9e6730f3fb72f7e0fe59292d1b9d8f5d3ad3b37402986c880bb39fbd8a211324c0b77ad13f2fede3a211d0"}, 0x18a) syncfs(r4) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x226, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001}, @in6={0xa, 0x4e23, 0x5, @private2, 0x8}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x7, 0xe49, @mcast1, 0x5}, @in={0x2, 0x4e25, @remote}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x5, @mcast2, 0x7}, @in6={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}, @in6={0xa, 0x4e21, 0x401, @mcast2, 0x6}], 0xe8) 0s ago: executing program 4 (id=14279): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): 27540][T14209] lo speed is unknown, defaulting to 1000 [ 1671.062244][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 1671.062305][ T28] audit: type=1326 audit(2000000906.022:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14162 comm="syz.5.13377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f880929cfce code=0x7ffc0000 [ 1671.161533][ T28] audit: type=1326 audit(2000000906.106:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14162 comm="syz.5.13377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f880929cfce code=0x7ffc0000 [ 1671.259542][ T28] audit: type=1326 audit(2000000906.162:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14162 comm="syz.5.13377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88092dc799 code=0x7ffc0000 [ 1671.283890][ T28] audit: type=1326 audit(2000000906.181:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14162 comm="syz.5.13377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88092dc799 code=0x7ffc0000 [ 1671.310697][ T28] audit: type=1326 audit(2000000906.181:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14162 comm="syz.5.13377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88092dc799 code=0x7ffc0000 [ 1671.334955][ T28] audit: type=1326 audit(2000000906.181:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14162 comm="syz.5.13377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88092dc799 code=0x7ffc0000 [ 1671.356337][T14217] loop4: detected capacity change from 0 to 512 [ 1671.385890][T14221] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1671.435282][T14217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1671.435961][ T28] audit: type=1326 audit(2000000906.181:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14162 comm="syz.5.13377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f88092dc799 code=0x7ffc0000 [ 1671.477031][ T28] audit: type=1326 audit(2000000906.246:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14162 comm="syz.5.13377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f88092dc799 code=0x7ffc0000 [ 1671.523773][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1671.567227][T14217] ext4 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1671.607044][ T28] audit: type=1326 audit(2000000906.190:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14162 comm="syz.5.13377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88092dc799 code=0x7ffc0000 [ 1671.660097][ T28] audit: type=1326 audit(2000000906.246:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14162 comm="syz.5.13377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88092dc799 code=0x7ffc0000 [ 1671.805362][T14232] loop5: detected capacity change from 0 to 512 [ 1671.819788][T14232] EXT4-fs: Ignoring removed nobh option [ 1671.858248][T14232] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1671.910934][T14232] EXT4-fs (loop5): 1 truncate cleaned up [ 1671.949834][T14232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1672.135980][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1672.732935][T14238] lo speed is unknown, defaulting to 1000 [ 1672.800304][T14242] netlink: 'syz.5.13403': attribute type 21 has an invalid length. [ 1672.819577][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13404'. [ 1672.849947][T14242] netlink: 156 bytes leftover after parsing attributes in process `syz.5.13403'. [ 1672.913013][T14249] netlink: 'syz.2.13404': attribute type 1 has an invalid length. [ 1672.982963][T14251] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1673.047514][T14258] netlink: 'syz.0.13409': attribute type 27 has an invalid length. [ 1673.280263][T14258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.287688][T14258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.606896][T14258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1673.682518][T14258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1673.710108][ T6323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1673.743134][T12425] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1673.750166][T12803] lo speed is unknown, defaulting to 1000 [ 1673.757466][T12803] syz0: Port: 1 Link DOWN [ 1673.763647][T12425] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.824917][T12425] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1673.852651][T12425] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.946466][T12425] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1673.955360][T12425] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.979088][T12425] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1673.990671][T12425] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.999852][T14273] netlink: 'syz.0.13414': attribute type 27 has an invalid length. [ 1674.052995][T14285] loop4: detected capacity change from 0 to 512 [ 1674.077464][T14285] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1674.090177][T14291] loop5: detected capacity change from 0 to 512 [ 1674.097073][T14273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.106069][T14273] 8021q: adding VLAN 0 to HW filter on device team0 [ 1674.115649][T14273] batman_adv: batadv0: Interface activated: dummy0 [ 1674.148460][T14273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1674.169402][T14285] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1674.187107][T14285] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.13420: Failed to acquire dquot type 1 [ 1674.187192][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1674.196789][T12803] lo speed is unknown, defaulting to 1000 [ 1674.198564][ C1] EXT4-fs (loop4): initial error at time 2000000908: ext4_mb_generate_buddy:1315 [ 1674.206116][T12803] syz0: Port: 1 Link ACTIVE [ 1674.210783][ C1] [ 1674.226808][ C1] EXT4-fs (loop4): last error at time 2000000908: ext4_mb_generate_buddy:1315 [ 1674.255330][T14297] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1674.256140][T14289] netlink: 'syz.2.13422': attribute type 27 has an invalid length. [ 1674.279038][T14285] loop4: lost filesystem error report for type 5 error -28 [ 1674.312752][T14285] EXT4-fs (loop4): 1 truncate cleaned up [ 1674.332235][T14285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1674.380996][T14285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1674.478581][T14310] netlink: 'syz.1.13429': attribute type 10 has an invalid length. [ 1674.488329][ T6323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1674.510594][T14310] hsr0: entered promiscuous mode [ 1674.523400][T14310] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1674.555087][T14310] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1674.579397][T14310] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1674.678737][T14330] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1674.718981][T14322] loop4: detected capacity change from 0 to 256 [ 1674.878451][T14339] siw: device registration error -23 [ 1674.928048][T14340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13430'. [ 1674.934106][T14338] netlink: 'syz.0.13440': attribute type 27 has an invalid length. [ 1675.291757][T14341] lo speed is unknown, defaulting to 1000 [ 1675.405700][T14338] batman_adv: batadv0: Interface deactivated: dummy0 [ 1675.513837][T14343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.541099][T14343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1675.567233][T14353] loop4: detected capacity change from 0 to 128 [ 1675.583379][T14343] batman_adv: batadv0: Interface activated: dummy0 [ 1675.591326][T14343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1675.623175][T14358] loop5: detected capacity change from 0 to 1024 [ 1675.638482][T12803] lo speed is unknown, defaulting to 1000 [ 1675.638567][T11857] lo speed is unknown, defaulting to 1000 [ 1675.676751][T14358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1675.756796][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.822590][T14368] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1675.869470][T14347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13442'. [ 1675.947848][T14376] FAULT_INJECTION: forcing a failure. [ 1675.947848][T14376] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1675.972088][T14376] CPU: 1 UID: 0 PID: 14376 Comm: syz.1.13453 Tainted: G W syzkaller #0 PREEMPT(full) [ 1675.972158][T14376] Tainted: [W]=WARN [ 1675.972165][T14376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1675.972179][T14376] Call Trace: [ 1675.972186][T14376] [ 1675.972195][T14376] __dump_stack+0x1d/0x30 [ 1675.972224][T14376] dump_stack_lvl+0x95/0xd0 [ 1675.972319][T14376] dump_stack+0x15/0x1b [ 1675.972355][T14376] should_fail_ex+0x263/0x280 [ 1675.972445][T14376] should_fail_alloc_page+0xf2/0x100 [ 1675.972474][T14376] __alloc_frozen_pages_noprof+0x108/0x360 [ 1675.972588][T14376] alloc_pages_mpol+0xb3/0x260 [ 1675.972628][T14376] vma_alloc_folio_noprof+0x1a9/0x300 [ 1675.972670][T14376] handle_mm_fault+0x1129/0x3020 [ 1675.972713][T14376] ? mt_find+0x291/0x3d0 [ 1675.972758][T14376] do_user_addr_fault+0x3fd/0x1050 [ 1675.972879][T14376] exc_page_fault+0x62/0xa0 [ 1675.972905][T14376] asm_exc_page_fault+0x26/0x30 [ 1675.972956][T14376] RIP: 0010:filldir+0x205/0x400 [ 1675.972983][T14376] Code: 4c 39 e5 0f 87 a6 01 00 00 0f 01 cb 0f ae e8 48 8b 44 24 40 49 89 47 08 48 8b 44 24 10 48 8b 4c 24 38 48 89 08 48 8b 6c 24 18 <66> 89 68 10 41 80 e5 0f 41 89 ef 46 88 6c 38 ff 4c 63 eb 42 c6 44 [ 1675.973009][T14376] RSP: 0018:ffffc90001dc7d40 EFLAGS: 00050283 [ 1675.973031][T14376] RAX: 0000200000001ff0 RBX: 0000000000000008 RCX: 0000000000000473 [ 1675.973049][T14376] RDX: 0000000000000000 RSI: 0000200000001fd8 RDI: 0000200000002010 [ 1675.973112][T14376] RBP: 0000000000000020 R08: 0001c90001dc7e8f R09: 0000000000000000 [ 1675.973130][T14376] R10: 0001c90001dc7cd4 R11: ffffffff8199f600 R12: 00007ffffffff000 [ 1675.973159][T14376] R13: 000000000000000a R14: ffff88811c455b78 R15: 0000200000001fd8 [ 1675.973180][T14376] ? __pfx_filldir+0x10/0x10 [ 1675.973213][T14376] ? __pfx_filldir+0x10/0x10 [ 1675.973236][T14376] offset_readdir+0x24e/0x2e0 [ 1675.973429][T14376] iterate_dir+0x114/0x330 [ 1675.973450][T14376] __se_sys_getdents+0xd2/0x220 [ 1675.973545][T14376] ? __pfx_filldir+0x10/0x10 [ 1675.973568][T14376] __x64_sys_getdents+0x43/0x50 [ 1675.973595][T14376] x64_sys_call+0xea8/0x3020 [ 1675.973666][T14376] do_syscall_64+0x12c/0x370 [ 1675.973702][T14376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.973730][T14376] RIP: 0033:0x7f0f7f3ec799 [ 1675.973812][T14376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.973832][T14376] RSP: 002b:00007f0f7de47028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 1675.973867][T14376] RAX: ffffffffffffffda RBX: 00007f0f7f665fa0 RCX: 00007f0f7f3ec799 [ 1675.973886][T14376] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 1675.973904][T14376] RBP: 00007f0f7de47090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.973921][T14376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.973935][T14376] R13: 00007f0f7f666038 R14: 00007f0f7f665fa0 R15: 00007ffe6c158f38 [ 1675.973962][T14376] [ 1676.826773][T14388] loop4: detected capacity change from 0 to 512 [ 1676.981409][T14400] loop4: detected capacity change from 0 to 512 [ 1677.089801][T14408] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1677.112557][T14408] loop5: detected capacity change from 0 to 128 [ 1677.135748][T14408] syz.5.13464: attempt to access beyond end of device [ 1677.135748][T14408] loop5: rw=8388611, sector=138, nr_sectors = 6 limit=128 [ 1677.184320][T14412] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1677.201842][T14408] syz.5.13464: attempt to access beyond end of device [ 1677.201842][T14408] loop5: rw=8390659, sector=144, nr_sectors = 106 limit=128 [ 1677.225502][T14412] loop4: detected capacity change from 0 to 128 [ 1677.246725][T14412] syz.4.13465: attempt to access beyond end of device [ 1677.246725][T14412] loop4: rw=8388611, sector=138, nr_sectors = 6 limit=128 [ 1677.262144][T14415] lo: entered allmulticast mode [ 1677.268394][T14415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1677.294992][T14412] syz.4.13465: attempt to access beyond end of device [ 1677.294992][T14412] loop4: rw=8390659, sector=144, nr_sectors = 106 limit=128 [ 1677.398434][T14421] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1677.583028][T14426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13463'. [ 1678.116260][T14444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13477'. [ 1678.132387][T14444] netlink: 'syz.1.13477': attribute type 11 has an invalid length. [ 1678.158140][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1678.158154][ T28] audit: type=1400 audit(2000000912.663:5146): avc: denied { ioctl } for pid=14443 comm="syz.1.13477" path="socket:[170808]" dev="sockfs" ino=170808 ioctlcmd=0x6f04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1678.283157][T14453] netlink: 'syz.1.13480': attribute type 27 has an invalid length. [ 1678.528014][T14456] lo: left allmulticast mode [ 1678.878791][T14456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.223626][T14464] netlink: 'syz.5.13484': attribute type 4 has an invalid length. [ 1679.367529][T14456] 8021q: adding VLAN 0 to HW filter on device team0 [ 1679.512222][T14456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1679.877362][T14453] hsr0: left promiscuous mode [ 1680.327039][ C1] sd 0:0:1:0: [sda] tag#4173 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1680.338431][ C1] sd 0:0:1:0: [sda] tag#4173 CDB: Read(6) 08 00 f9 56 e4 47 [ 1680.355585][T14477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13489'. [ 1680.364821][T14477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13489'. [ 1680.389839][T14477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13489'. [ 1680.689562][T14492] siw: device registration error -23 [ 1681.243277][T14487] lo speed is unknown, defaulting to 1000 [ 1682.196612][T14510] blkio.reset_stats is deprecated [ 1682.689823][T14523] loop5: detected capacity change from 0 to 256 [ 1682.805283][T14526] loop4: detected capacity change from 0 to 512 [ 1682.872280][T14526] msdos: Unknown parameter 'dkscard' [ 1684.068300][T14593] netlink: 7 bytes leftover after parsing attributes in process `syz.5.13511'. [ 1684.246951][ T28] audit: type=1326 audit(2000000918.351:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.13512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1684.312147][ T28] audit: type=1326 audit(2000000918.351:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.13512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1684.380658][ T28] audit: type=1326 audit(2000000918.351:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.13512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1684.405340][ T28] audit: type=1326 audit(2000000918.351:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.13512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1684.461740][T14602] loop5: detected capacity change from 0 to 512 [ 1684.503049][ T28] audit: type=1326 audit(2000000918.360:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.13512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1684.527001][ T28] audit: type=1326 audit(2000000918.360:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.13512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1684.550756][ T28] audit: type=1326 audit(2000000918.360:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.13512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1684.578167][ T28] audit: type=1326 audit(2000000918.360:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.13512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1684.598335][T14602] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1684.652434][ T28] audit: type=1326 audit(2000000918.360:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.13512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1684.687254][T14602] EXT4-fs (loop5): 1 truncate cleaned up [ 1684.694394][T14608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13515'. [ 1684.695602][ T28] audit: type=1326 audit(2000000918.360:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.13512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1684.719941][T14602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1684.868449][T14614] netlink: 'syz.2.13516': attribute type 27 has an invalid length. [ 1684.980356][T14614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1685.019808][T14614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1685.063300][T14614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1685.273150][T14623] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1685.409241][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1685.893841][T14641] siw: device registration error -23 [ 1686.356999][T14643] lo speed is unknown, defaulting to 1000 [ 1687.283322][T14652] lo speed is unknown, defaulting to 1000 [ 1687.421761][T14658] lo speed is unknown, defaulting to 1000 [ 1687.761550][T14665] netlink: 'syz.5.13530': attribute type 27 has an invalid length. [ 1687.854596][T14665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1687.881827][T14665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1687.913276][T14665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1688.259900][T14681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13533'. [ 1688.269183][T14681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13533'. [ 1688.311377][T14682] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1688.627875][T14686] loop5: detected capacity change from 0 to 128 [ 1688.699365][T14685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13536'. [ 1688.835688][T14682] syz.5.13537: attempt to access beyond end of device [ 1688.835688][T14682] loop5: rw=8388611, sector=138, nr_sectors = 6 limit=128 [ 1689.020153][T14682] syz.5.13537: attempt to access beyond end of device [ 1689.020153][T14682] loop5: rw=8390659, sector=144, nr_sectors = 106 limit=128 [ 1689.837429][T14697] siw: device registration error -23 [ 1689.983369][T14697] lo speed is unknown, defaulting to 1000 [ 1690.290140][T14701] FAULT_INJECTION: forcing a failure. [ 1690.290140][T14701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1690.318502][ T28] kauditd_printk_skb: 282 callbacks suppressed [ 1690.318583][ T28] audit: type=1326 audit(2000000924.029:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.2.13535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f13530ccfce code=0x7ffc0000 [ 1690.360823][T14701] CPU: 0 UID: 0 PID: 14701 Comm: syz.5.13542 Tainted: G W syzkaller #0 PREEMPT(full) [ 1690.360905][T14701] Tainted: [W]=WARN [ 1690.360913][T14701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1690.360930][T14701] Call Trace: [ 1690.360939][T14701] [ 1690.360950][T14701] __dump_stack+0x1d/0x30 [ 1690.361041][T14701] dump_stack_lvl+0x95/0xd0 [ 1690.361141][T14701] dump_stack+0x15/0x1b [ 1690.361169][T14701] should_fail_ex+0x263/0x280 [ 1690.361206][T14701] should_fail+0xb/0x20 [ 1690.361304][T14701] should_fail_usercopy+0x1a/0x20 [ 1690.361360][T14701] _copy_from_iter+0xcf/0xea0 [ 1690.361400][T14701] ? should_fail_ex+0xd9/0x280 [ 1690.361434][T14701] ? should_failslab+0x8c/0xb0 [ 1690.361459][T14701] ? __kmalloc_noprof+0x1e3/0x4e0 [ 1690.361510][T14701] ? qrtr_tun_write_iter+0x87/0x140 [ 1690.361545][T14701] ? __pfx_qrtr_tun_write_iter+0x10/0x10 [ 1690.361569][T14701] qrtr_tun_write_iter+0xa7/0x140 [ 1690.361661][T14701] vfs_write+0x5a6/0x9f0 [ 1690.361691][T14701] ksys_write+0xdc/0x1a0 [ 1690.361711][T14701] __x64_sys_write+0x40/0x50 [ 1690.361730][T14701] x64_sys_call+0x27e1/0x3020 [ 1690.361799][T14701] do_syscall_64+0x12c/0x370 [ 1690.361835][T14701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.361866][T14701] RIP: 0033:0x7f88092dc799 [ 1690.361887][T14701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1690.361938][T14701] RSP: 002b:00007f8807d2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1690.361962][T14701] RAX: ffffffffffffffda RBX: 00007f8809555fa0 RCX: 00007f88092dc799 [ 1690.361982][T14701] RDX: 00000000000000c8 RSI: 0000200000000200 RDI: 0000000000000005 [ 1690.362000][T14701] RBP: 00007f8807d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.362029][T14701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1690.362046][T14701] R13: 00007f8809556038 R14: 00007f8809555fa0 R15: 00007ffefcff0df8 [ 1690.362071][T14701] [ 1690.575583][T14705] FAULT_INJECTION: forcing a failure. [ 1690.575583][T14705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1690.588905][T14705] CPU: 0 UID: 0 PID: 14705 Comm: syz.1.13543 Tainted: G W syzkaller #0 PREEMPT(full) [ 1690.588949][T14705] Tainted: [W]=WARN [ 1690.588959][T14705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1690.589041][T14705] Call Trace: [ 1690.589050][T14705] [ 1690.589060][T14705] __dump_stack+0x1d/0x30 [ 1690.589096][T14705] dump_stack_lvl+0x95/0xd0 [ 1690.589183][T14705] dump_stack+0x15/0x1b [ 1690.589212][T14705] should_fail_ex+0x263/0x280 [ 1690.589246][T14705] should_fail+0xb/0x20 [ 1690.589333][T14705] should_fail_usercopy+0x1a/0x20 [ 1690.589369][T14705] _copy_to_user+0x20/0xa0 [ 1690.589413][T14705] simple_read_from_buffer+0xb5/0x130 [ 1690.589483][T14705] proc_fail_nth_read+0x10e/0x150 [ 1690.589526][T14705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1690.589566][T14705] vfs_read+0x1ab/0x7f0 [ 1690.589678][T14705] ? __rcu_read_unlock+0x4e/0x70 [ 1690.589708][T14705] ? __fget_files+0x184/0x1c0 [ 1690.589753][T14705] ? mutex_lock+0x57/0x90 [ 1690.589876][T14705] ksys_read+0xdc/0x1a0 [ 1690.589978][T14705] __x64_sys_read+0x40/0x50 [ 1690.590005][T14705] x64_sys_call+0x2886/0x3020 [ 1690.590104][T14705] do_syscall_64+0x12c/0x370 [ 1690.590216][T14705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.590317][T14705] RIP: 0033:0x7f0f7f3acfce [ 1690.590339][T14705] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1690.590421][T14705] RSP: 002b:00007f0f7de46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1690.590450][T14705] RAX: ffffffffffffffda RBX: 00007f0f7de476c0 RCX: 00007f0f7f3acfce [ 1690.590523][T14705] RDX: 000000000000000f RSI: 00007f0f7de470a0 RDI: 0000000000000004 [ 1690.590542][T14705] RBP: 00007f0f7de47090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.590561][T14705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1690.590579][T14705] R13: 00007f0f7f666038 R14: 00007f0f7f665fa0 R15: 00007ffe6c158f38 [ 1690.590608][T14705] [ 1690.814769][ T28] audit: type=1326 audit(2000000924.497:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.2.13535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f135310c5c7 code=0x7ffc0000 [ 1691.267327][T14708] lo speed is unknown, defaulting to 1000 [ 1691.327513][ T28] audit: type=1326 audit(2000000924.908:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.2.13535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13530ccfce code=0x7ffc0000 [ 1692.330575][T14730] lo speed is unknown, defaulting to 1000 [ 1693.804012][T14729] x_tables: duplicate underflow at hook 1 [ 1694.039144][T14750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13553'. [ 1694.156834][T14746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13552'. [ 1694.165985][T14746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13552'. [ 1694.185440][T14744] lo speed is unknown, defaulting to 1000 [ 1694.364162][ T28] audit: type=1326 audit(2000000927.827:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.2.13555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1694.431466][ T28] audit: type=1326 audit(2000000927.827:5443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.2.13555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1694.518561][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13559'. [ 1694.530329][ T28] audit: type=1326 audit(2000000927.846:5444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.2.13555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1694.586548][ T28] audit: type=1326 audit(2000000927.846:5445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.2.13555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1694.631442][ T28] audit: type=1326 audit(2000000927.864:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.2.13555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1694.655343][ T28] audit: type=1326 audit(2000000927.864:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.2.13555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1694.719937][ T28] audit: type=1326 audit(2000000927.864:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.2.13555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1694.768025][T14771] loop4: detected capacity change from 0 to 256 [ 1695.229940][T14768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13560'. [ 1695.338738][T14795] FAULT_INJECTION: forcing a failure. [ 1695.338738][T14795] name failslab, interval 1, probability 0, space 0, times 0 [ 1695.362401][T14795] CPU: 0 UID: 0 PID: 14795 Comm: syz.1.13571 Tainted: G W syzkaller #0 PREEMPT(full) [ 1695.362444][T14795] Tainted: [W]=WARN [ 1695.362453][T14795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1695.362552][T14795] Call Trace: [ 1695.362561][T14795] [ 1695.362571][T14795] __dump_stack+0x1d/0x30 [ 1695.362604][T14795] dump_stack_lvl+0x95/0xd0 [ 1695.362636][T14795] dump_stack+0x15/0x1b [ 1695.362746][T14795] should_fail_ex+0x263/0x280 [ 1695.362783][T14795] ? kobject_uevent_env+0x1c0/0x570 [ 1695.362849][T14795] should_failslab+0x8c/0xb0 [ 1695.362880][T14795] __kmalloc_cache_noprof+0x5f/0x410 [ 1695.362925][T14795] kobject_uevent_env+0x1c0/0x570 [ 1695.362968][T14795] kobject_uevent+0x1d/0x30 [ 1695.363093][T14795] device_del+0x70f/0x790 [ 1695.363122][T14795] ? mntput+0xa9/0xb0 [ 1695.363200][T14795] device_unregister+0x15/0x40 [ 1695.363229][T14795] bdi_unregister+0x314/0x3b0 [ 1695.363260][T14795] __del_gendisk+0x2d6/0x590 [ 1695.363297][T14795] del_gendisk+0xab/0xf0 [ 1695.363364][T14795] loop_remove+0x26/0x80 [ 1695.363402][T14795] loop_control_ioctl+0x3b3/0x3f0 [ 1695.363478][T14795] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1695.363520][T14795] __se_sys_ioctl+0xce/0x140 [ 1695.363544][T14795] __x64_sys_ioctl+0x43/0x50 [ 1695.363622][T14795] x64_sys_call+0x1563/0x3020 [ 1695.363661][T14795] do_syscall_64+0x12c/0x370 [ 1695.363691][T14795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.363714][T14795] RIP: 0033:0x7f0f7f3ec799 [ 1695.363782][T14795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.363809][T14795] RSP: 002b:00007f0f7de47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1695.363854][T14795] RAX: ffffffffffffffda RBX: 00007f0f7f665fa0 RCX: 00007f0f7f3ec799 [ 1695.363873][T14795] RDX: 0000000000000003 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1695.363891][T14795] RBP: 00007f0f7de47090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.363965][T14795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1695.364047][T14795] R13: 00007f0f7f666038 R14: 00007f0f7f665fa0 R15: 00007ffe6c158f38 [ 1695.364075][T14795] [ 1695.701689][T14806] hub 9-0:1.0: USB hub found [ 1695.715016][T14806] hub 9-0:1.0: 8 ports detected [ 1695.792410][T14805] loop4: detected capacity change from 0 to 1024 [ 1695.995692][T14805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1696.090308][T14805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13575'. [ 1696.136724][ T6323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1696.246002][T14825] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1696.291673][T14823] loop5: detected capacity change from 0 to 256 [ 1696.340775][T14827] netlink: 'syz.1.13581': attribute type 27 has an invalid length. [ 1696.470255][T14837] loop4: detected capacity change from 0 to 512 [ 1696.497727][T14837] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1696.503855][T14842] netlink: 'syz.2.13588': attribute type 27 has an invalid length. [ 1696.522966][T14837] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1696.539972][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1696.546439][ C0] EXT4-fs (loop4): initial error at time 2000000929: ext4_mb_generate_buddy:1315 [ 1696.555659][ C0] EXT4-fs (loop4): last error at time 2000000929: ext4_mb_generate_buddy:1315 [ 1696.565409][T14837] __quota_error: 136 callbacks suppressed [ 1696.565480][T14837] Quota error (device loop4): write_blk: dquota write failed [ 1696.591766][T14837] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1696.601084][T14837] Quota error (device loop4): write_blk: dquota write failed [ 1696.605169][ T28] audit: type=1400 audit(2000000929.922:5585): avc: denied { ioctl } for pid=14839 comm="syz.5.13587" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1696.608857][T14837] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1696.643580][T14837] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.13586: Failed to acquire dquot type 1 [ 1696.654980][T14837] loop4: lost filesystem error report for type 5 error -28 [ 1696.666139][T14837] EXT4-fs (loop4): 1 truncate cleaned up [ 1696.690391][T14837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1696.721503][T14837] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1696.735981][T14848] lo speed is unknown, defaulting to 1000 [ 1696.752378][ T6323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1696.905149][T14859] netlink: 'syz.2.13593': attribute type 27 has an invalid length. [ 1696.917377][T14861] tipc: Enabling of bearer rejected, failed to enable media [ 1700.989004][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.997587][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.053144][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.070263][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.126669][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.139738][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.156920][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.167257][T14902] netlink: 'syz.0.13606': attribute type 27 has an invalid length. [ 1701.178554][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.191365][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.216731][T14901] hub 9-0:1.0: USB hub found [ 1701.221815][T14901] hub 9-0:1.0: 8 ports detected [ 1701.240198][T14904] hub 9-0:1.0: USB hub found [ 1701.245061][T14904] hub 9-0:1.0: 8 ports detected [ 1701.290457][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.399894][T14902] batman_adv: batadv0: Interface deactivated: dummy0 [ 1701.422674][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.520819][T12795] lo speed is unknown, defaulting to 1000 [ 1701.528748][T12795] syz0: Port: 1 Link DOWN [ 1701.551506][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.835123][ T28] audit: type=1326 audit(2000000934.806:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.2.13609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1701.958170][ T28] audit: type=1326 audit(2000000934.834:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.2.13609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1701.966177][T14914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13610'. [ 1701.984020][ T28] audit: type=1326 audit(2000000934.834:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.2.13609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1702.014768][ T28] audit: type=1326 audit(2000000934.834:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.2.13609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1702.057944][ T28] audit: type=1326 audit(2000000934.834:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.2.13609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1702.086494][ T28] audit: type=1326 audit(2000000934.834:5591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.2.13609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1702.113520][ T28] audit: type=1326 audit(2000000934.834:5592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.2.13609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1702.176104][ T28] audit: type=1326 audit(2000000934.843:5593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.2.13609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1702.219496][T14920] loop5: detected capacity change from 0 to 128 [ 1702.226523][ T28] audit: type=1326 audit(2000000934.852:5594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.2.13609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1702.303196][ T28] audit: type=1326 audit(2000000934.852:5595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.2.13609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1702.347698][ T28] audit: type=1326 audit(2000000934.852:5596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.2.13609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135310c799 code=0x7ffc0000 [ 1702.483821][T14933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13618'. [ 1702.500594][T14933] netlink: 100 bytes leftover after parsing attributes in process `syz.0.13618'. [ 1702.571594][T14937] loop5: detected capacity change from 0 to 512 [ 1702.584626][T14937] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1702.618040][T14937] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 1702.674404][T14937] loop5: detected capacity change from 0 to 512 [ 1702.820851][T14937] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 1702.921092][T14948] siw: device registration error -23 [ 1702.986556][T14948] lo speed is unknown, defaulting to 1000 [ 1703.503092][T14953] loop5: detected capacity change from 0 to 1024 [ 1703.511676][T14953] EXT4-fs: Ignoring removed orlov option [ 1703.558516][T14953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1703.759839][T14953] netlink: 54775 bytes leftover after parsing attributes in process `syz.5.13624'. [ 1703.822857][T14953] tmpfs: Unknown parameter 'ÿÿol' [ 1703.906667][T14972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13629'. [ 1704.272626][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1704.329601][T14976] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1704.554557][T14979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13633'. [ 1704.650731][T14979] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1704.906458][T14984] netlink: 'syz.5.13632': attribute type 27 has an invalid length. [ 1705.187545][T14990] lo speed is unknown, defaulting to 1000 [ 1705.207061][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13637'. [ 1705.232000][T14992] vlan3: entered promiscuous mode [ 1705.249970][T14992] dummy0: entered promiscuous mode [ 1705.382326][T14995] netlink: 240 bytes leftover after parsing attributes in process `syz.0.13638'. [ 1705.504658][T14998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13639'. [ 1705.520404][T14993] loop5: detected capacity change from 0 to 2048 [ 1705.536314][T14998] vlan2: entered promiscuous mode [ 1705.554317][T14993] EXT4-fs: Ignoring removed bh option [ 1705.573683][T14998] dummy0: entered promiscuous mode [ 1705.639073][T14993] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 1705.842734][T15010] siw: device registration error -23 [ 1705.892764][T15010] lo speed is unknown, defaulting to 1000 [ 1706.002487][T15008] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1706.451351][T15015] netlink: 'syz.2.13645': attribute type 27 has an invalid length. [ 1706.753192][T15035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13644'. [ 1706.967594][T15038] netlink: 'syz.1.13655': attribute type 2 has an invalid length. [ 1707.068089][T15042] loop5: detected capacity change from 0 to 512 [ 1707.119968][T15042] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1707.177831][T15042] EXT4-fs (loop5): 1 truncate cleaned up [ 1707.199048][T15042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1707.896977][T15062] siw: device registration error -23 [ 1708.018285][T15063] lo speed is unknown, defaulting to 1000 [ 1708.406871][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1708.570061][T15056] __nla_validate_parse: 1 callbacks suppressed [ 1708.570173][T15056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13658'. [ 1708.657820][ T28] kauditd_printk_skb: 218 callbacks suppressed [ 1708.657846][ T28] audit: type=1400 audit(2000000941.195:5815): avc: denied { getopt } for pid=15074 comm="syz.4.13664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1709.154928][ T28] audit: type=1400 audit(2000000941.288:5816): avc: denied { ioctl } for pid=15074 comm="syz.4.13664" path="socket:[173934]" dev="sockfs" ino=173934 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1709.313347][T15070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13663'. [ 1709.402275][T15098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13666'. [ 1709.604884][T15102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46078 sclass=netlink_route_socket pid=15102 comm=syz.1.13670 [ 1709.625204][T15102] tmpfs: Unknown parameter 'ÃÓ!' [ 1713.662733][T15123] siw: device registration error -23 [ 1713.732941][T15123] lo speed is unknown, defaulting to 1000 [ 1714.203239][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13678'. [ 1714.243962][T15136] sctp: [Deprecated]: syz.1.13679 (pid 15136) Use of int in max_burst socket option. [ 1714.243962][T15136] Use struct sctp_assoc_value instead [ 1714.259100][T15136] sctp: [Deprecated]: syz.1.13679 (pid 15136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1714.259100][T15136] Use struct sctp_sack_info instead [ 1714.259193][T15138] loop7: detected capacity change from 0 to 16384 [ 1714.500167][T15146] netlink: 'syz.1.13683': attribute type 27 has an invalid length. [ 1714.527511][T15154] loop5: detected capacity change from 0 to 128 [ 1714.534166][T15140] loop7: detected capacity change from 16384 to 0 [ 1714.550783][ C1] blk_print_req_error: 1 callbacks suppressed [ 1714.550811][ C1] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 1 [ 1714.615107][T15161] netlink: 'syz.1.13688': attribute type 27 has an invalid length. [ 1714.755268][T15166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1714.907019][T15166] 8021q: adding VLAN 0 to HW filter on device team0 [ 1715.170116][T15166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1715.736209][T15182] siw: device registration error -23 [ 1715.802126][T15182] lo speed is unknown, defaulting to 1000 [ 1716.610846][T15186] lo speed is unknown, defaulting to 1000 [ 1716.622255][T15188] netlink: 'syz.1.13697': attribute type 27 has an invalid length. [ 1716.683146][T15188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1716.692056][T15188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1716.703739][T15188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1716.792690][T15193] netlink: 'syz.2.13699': attribute type 27 has an invalid length. [ 1716.857344][T15193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1716.895801][T15193] 8021q: adding VLAN 0 to HW filter on device team0 [ 1716.914164][T15193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1717.432067][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13708'. [ 1719.216388][T15243] netlink: 'syz.0.13718': attribute type 27 has an invalid length. [ 1719.255738][T15249] netlink: 'syz.5.13721': attribute type 27 has an invalid length. [ 1719.308361][T15249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.317527][T15249] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.347192][T15249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1719.454593][T15252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13722'. [ 1719.649658][T15265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=15265 comm=syz.0.13727 [ 1719.782757][T15270] loop5: detected capacity change from 0 to 512 [ 1719.918014][T15270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1719.931274][T15270] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1720.405681][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13730'. [ 1720.425559][ T28] audit: type=1400 audit(2000000952.196:5817): avc: denied { connect } for pid=15280 comm="syz.1.13730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1720.601808][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1720.658237][T15290] netlink: 'syz.5.13732': attribute type 27 has an invalid length. [ 1720.840439][T15294] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13735'. [ 1720.937672][T15301] netlink: 'syz.2.13736': attribute type 2 has an invalid length. [ 1720.945623][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13736'. [ 1720.978499][T15296] netlink: 'syz.1.13737': attribute type 2 has an invalid length. [ 1720.994320][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13737'. [ 1721.293794][T15305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13739'. [ 1721.310314][T15311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13743'. [ 1721.322758][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13743'. [ 1721.362110][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13743'. [ 1721.371224][T15311] netlink: 108 bytes leftover after parsing attributes in process `syz.1.13743'. [ 1721.403418][T15311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13743'. [ 1721.428024][T15320] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1721.459021][T15311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15311 comm=syz.1.13743 [ 1721.796171][T15338] loop5: detected capacity change from 0 to 512 [ 1721.971519][T15338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1721.984844][T15338] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1723.066216][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1723.092093][T15352] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15352 comm=syz.0.13754 [ 1723.166327][ T28] audit: type=1400 audit(2000000954.768:5818): avc: denied { read } for pid=15358 comm="syz.5.13758" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1723.200910][ T28] audit: type=1400 audit(2000000954.768:5819): avc: denied { open } for pid=15358 comm="syz.5.13758" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1723.269866][T15365] netlink: 'syz.5.13759': attribute type 27 has an invalid length. [ 1723.336442][T15365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1723.346573][T15365] 8021q: adding VLAN 0 to HW filter on device team0 [ 1723.363117][T15365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1724.202782][T15380] siw: device registration error -23 [ 1724.298192][T15380] lo speed is unknown, defaulting to 1000 [ 1725.059916][T15388] FAULT_INJECTION: forcing a failure. [ 1725.059916][T15388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.257530][T15388] CPU: 1 UID: 0 PID: 15388 Comm: syz.2.13766 Tainted: G W syzkaller #0 PREEMPT(full) [ 1725.257646][T15388] Tainted: [W]=WARN [ 1725.257703][T15388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1725.257722][T15388] Call Trace: [ 1725.257730][T15388] [ 1725.257741][T15388] __dump_stack+0x1d/0x30 [ 1725.257778][T15388] dump_stack_lvl+0x95/0xd0 [ 1725.257808][T15388] dump_stack+0x15/0x1b [ 1725.257844][T15388] should_fail_ex+0x263/0x280 [ 1725.257947][T15388] should_fail+0xb/0x20 [ 1725.257997][T15388] should_fail_usercopy+0x1a/0x20 [ 1725.258033][T15388] _copy_from_iter+0xcf/0xea0 [ 1725.258110][T15388] ? __alloc_skb+0x4f6/0x690 [ 1725.258143][T15388] ? __alloc_skb+0x200/0x690 [ 1725.258178][T15388] netlink_sendmsg+0x4ae/0x6f0 [ 1725.258252][T15388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1725.258365][T15388] ____sys_sendmsg+0x563/0x5b0 [ 1725.258484][T15388] ___sys_sendmsg+0x195/0x1e0 [ 1725.258565][T15388] __x64_sys_sendmsg+0xd4/0x160 [ 1725.258664][T15388] x64_sys_call+0x194c/0x3020 [ 1725.258703][T15388] do_syscall_64+0x12c/0x370 [ 1725.258759][T15388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.258834][T15388] RIP: 0033:0x7f135310c799 [ 1725.258858][T15388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1725.258879][T15388] RSP: 002b:00007f1351b5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1725.258904][T15388] RAX: ffffffffffffffda RBX: 00007f1353385fa0 RCX: 00007f135310c799 [ 1725.258920][T15388] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1725.258934][T15388] RBP: 00007f1351b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1725.258983][T15388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.258999][T15388] R13: 00007f1353386038 R14: 00007f1353385fa0 R15: 00007ffe7466ea08 [ 1725.259025][T15388] [ 1725.614606][T15394] program syz.1.13769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1725.739059][T15399] netlink: 'syz.1.13769': attribute type 5 has an invalid length. [ 1725.807282][T15402] __nla_validate_parse: 2 callbacks suppressed [ 1725.807298][T15402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13769'. [ 1725.834027][T15404] netlink: 'syz.4.13773': attribute type 27 has an invalid length. [ 1725.882061][T15404] batman_adv: batadv0: Interface deactivated: dummy0 [ 1725.918491][T15404] gtp1: left promiscuous mode [ 1725.930595][T15406] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15406 comm=syz.1.13769 [ 1725.958440][T15404] gtp1: left allmulticast mode [ 1726.008855][T15398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13771'. [ 1726.032159][T15405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1726.050920][T15405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1726.086255][T15405] batman_adv: batadv0: Interface activated: dummy0 [ 1726.104537][T15405] batadv0: mtu less than device minimum [ 1726.151755][T15405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1726.162769][T15405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1726.173657][T15405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1726.184579][T15405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1726.195497][T15405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1726.206469][T15405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1726.217468][T15405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1726.631996][T15416] loop5: detected capacity change from 0 to 2048 [ 1726.710055][T15159] Alternate GPT is invalid, using primary GPT. [ 1726.716516][T15159] loop5: p2 p3 p7 [ 1726.742536][T15421] netlink: 'syz.1.13777': attribute type 27 has an invalid length. [ 1726.799188][T15416] Alternate GPT is invalid, using primary GPT. [ 1726.810313][T15416] loop5: p2 p3 p7 [ 1726.883838][T15414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13775'. [ 1726.917709][T15422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1726.935610][T15422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1726.944356][T15425] udevd[15425]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1726.949122][T15159] udevd[15159]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1726.965531][T15125] udevd[15125]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 1726.988202][T15422] net_ratelimit: 13 callbacks suppressed [ 1726.988232][T15422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1727.043174][T15159] udevd[15159]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1727.060734][T15425] udevd[15425]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1727.574850][T15449] netlink: 'syz.0.13785': attribute type 27 has an invalid length. [ 1727.585299][T15437] siw: device registration error -23 [ 1727.674124][T15449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1727.696928][T15449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1727.727793][T15449] batman_adv: batadv0: Interface activated: dummy0 [ 1727.754137][T15449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1727.791412][T28630] lo speed is unknown, defaulting to 1000 [ 1727.807458][T15437] lo speed is unknown, defaulting to 1000 [ 1727.837877][T28630] syz0: Port: 1 Link ACTIVE [ 1727.943990][T15453] netlink: 16146 bytes leftover after parsing attributes in process `syz.0.13787'. [ 1727.957185][T15457] loop5: detected capacity change from 0 to 2048 [ 1728.009737][T15453] lo speed is unknown, defaulting to 1000 [ 1728.047878][T15457] Alternate GPT is invalid, using primary GPT. [ 1728.075920][T15457] loop5: p2 p3 p7 [ 1728.379476][T15474] loop5: detected capacity change from 0 to 128 [ 1728.396672][T15474] vfat: Unknown parameter 'ÿ' [ 1728.431444][T15472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13794'. [ 1728.771740][T15472] lo speed is unknown, defaulting to 1000 [ 1728.837104][T15483] netlink: 'syz.0.13797': attribute type 27 has an invalid length. [ 1728.904702][T15483] batman_adv: batadv0: Interface deactivated: dummy0 [ 1728.926084][T15484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1728.947832][T15484] 8021q: adding VLAN 0 to HW filter on device team0 [ 1728.957246][T15484] batman_adv: batadv0: Interface activated: dummy0 [ 1728.965571][T15484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1728.995423][T12803] lo speed is unknown, defaulting to 1000 [ 1729.169701][T12800] lo speed is unknown, defaulting to 1000 [ 1729.798982][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13804'. [ 1729.820853][T15501] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13804'. [ 1729.853013][T15489] lo speed is unknown, defaulting to 1000 [ 1729.862812][T15498] loop5: detected capacity change from 0 to 1024 [ 1729.992350][T15507] netlink: 16146 bytes leftover after parsing attributes in process `syz.4.13807'. [ 1730.049548][T15498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1730.067334][T15507] lo speed is unknown, defaulting to 1000 [ 1730.119512][T15516] netlink: 'syz.2.13809': attribute type 27 has an invalid length. [ 1730.198003][T15498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13803'. [ 1730.232695][T15516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1730.252392][T15516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1730.280514][T15516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1730.303281][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1730.590929][T15528] loop5: detected capacity change from 0 to 512 [ 1730.704258][T15528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1730.717210][T15528] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1731.072435][T15535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13815'. [ 1731.336466][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1731.562840][T15537] siw: device registration error -23 [ 1731.740786][T15537] lo speed is unknown, defaulting to 1000 [ 1731.807815][T15548] netlink: 'syz.2.13821': attribute type 27 has an invalid length. [ 1732.003688][T15553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1732.033759][T15553] 8021q: adding VLAN 0 to HW filter on device team0 [ 1732.054107][T15564] loop5: detected capacity change from 0 to 256 [ 1732.074402][T15553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1732.105596][ T3507] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1732.190235][T15564] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1732.245914][T15564] FAT-fs (loop5): Filesystem has been set read-only [ 1732.273831][T15569] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1732.322748][T15569] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1732.323063][T15564] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1732.417311][T15569] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1732.480561][T15569] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1732.501385][T15563] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1732.512811][T15564] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1732.527941][T15569] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1732.555218][T15563] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1732.946997][T15579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13825'. [ 1733.119691][T15587] siw: device registration error -23 [ 1733.305044][T15587] lo speed is unknown, defaulting to 1000 [ 1733.324635][T15592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13833'. [ 1733.465358][T15600] futex_wake_op: syz.0.13836 tries to shift op by 32; fix this program [ 1733.586596][T15611] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13837'. [ 1733.699667][T15616] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13837'. [ 1734.710249][T15620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13840'. [ 1734.719412][T15620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13840'. [ 1734.800643][T15625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.831068][T15625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.951054][T15626] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.13843'. [ 1734.960573][T15626] netlink: zone id is out of range [ 1734.965716][T15626] netlink: zone id is out of range [ 1734.970896][T15626] netlink: zone id is out of range [ 1734.976090][T15626] netlink: zone id is out of range [ 1734.981286][T15626] netlink: zone id is out of range [ 1734.986435][T15626] netlink: zone id is out of range [ 1734.991749][T15626] netlink: del zone limit has 8 unknown bytes [ 1735.075200][T15628] tc_dump_action: action bad kind [ 1735.408492][T15623] netlink: 88 bytes leftover after parsing attributes in process `syz.1.13842'. [ 1735.439596][T15623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13842'. [ 1735.490384][T15635] loop5: detected capacity change from 0 to 128 [ 1735.510003][T15635] vfat: Unknown parameter 'ÿ' [ 1735.788515][T15642] siw: device registration error -23 [ 1735.837403][T15642] lo speed is unknown, defaulting to 1000 [ 1736.013108][T15643] lo speed is unknown, defaulting to 1000 [ 1736.080525][T15650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13850'. [ 1736.264477][T15656] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1736.267694][T15657] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1737.725724][ T28] audit: type=1326 audit(2000000968.388:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15688 comm="syz.0.13864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fc6cc799 code=0x7ffc0000 [ 1737.818985][ T28] audit: type=1326 audit(2000000968.417:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15688 comm="syz.0.13864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fc6cc799 code=0x7ffc0000 [ 1737.938124][ T28] audit: type=1326 audit(2000000968.417:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15688 comm="syz.0.13864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fc6cc799 code=0x7ffc0000 [ 1738.007128][ T28] audit: type=1326 audit(2000000968.417:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15688 comm="syz.0.13864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fc6cc799 code=0x7ffc0000 [ 1738.032079][ T28] audit: type=1326 audit(2000000968.417:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15688 comm="syz.0.13864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5fc6cc799 code=0x7ffc0000 [ 1738.298472][ T28] audit: type=1326 audit(2000000968.417:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15688 comm="syz.0.13864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fc6cc799 code=0x7ffc0000 [ 1738.376700][ T28] audit: type=1326 audit(2000000968.417:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15688 comm="syz.0.13864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fc6cc799 code=0x7ffc0000 [ 1738.400716][ T28] audit: type=1326 audit(2000000968.417:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15688 comm="syz.0.13864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fc6cc799 code=0x7ffc0000 [ 1738.424562][ T28] audit: type=1326 audit(2000000968.417:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15688 comm="syz.0.13864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5fc6cc799 code=0x7ffc0000 [ 1738.599889][ T28] audit: type=1326 audit(2000000968.417:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15688 comm="syz.0.13864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fc6cc799 code=0x7ffc0000 [ 1738.708498][T15706] siw: device registration error -23 [ 1738.765484][T15706] lo speed is unknown, defaulting to 1000 [ 1739.543078][T15721] tc_dump_action: action bad kind [ 1740.813640][T15732] __nla_validate_parse: 2 callbacks suppressed [ 1740.813664][T15732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13878'. [ 1740.829036][T15732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13878'. [ 1740.849996][T15736] FAULT_INJECTION: forcing a failure. [ 1740.849996][T15736] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.862871][T15736] CPU: 1 UID: 0 PID: 15736 Comm: syz.5.13880 Tainted: G W syzkaller #0 PREEMPT(full) [ 1740.862923][T15736] Tainted: [W]=WARN [ 1740.862931][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1740.862948][T15736] Call Trace: [ 1740.862957][T15736] [ 1740.862968][T15736] __dump_stack+0x1d/0x30 [ 1740.863026][T15736] dump_stack_lvl+0x95/0xd0 [ 1740.863051][T15736] dump_stack+0x15/0x1b [ 1740.863090][T15736] should_fail_ex+0x263/0x280 [ 1740.863129][T15736] should_failslab+0x8c/0xb0 [ 1740.863158][T15736] kmem_cache_alloc_noprof+0x66/0x400 [ 1740.863194][T15736] ? dst_alloc+0xbd/0x100 [ 1740.863352][T15736] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1740.863510][T15736] dst_alloc+0xbd/0x100 [ 1740.863551][T15736] ip6_pol_route+0x9f7/0xeb0 [ 1740.863578][T15736] ? ip6_pol_route+0x648/0xeb0 [ 1740.863615][T15736] ip6_pol_route_output+0x40/0x50 [ 1740.863747][T15736] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1740.863780][T15736] fib6_rule_lookup+0x23a/0x4c0 [ 1740.863817][T15736] ip6_route_output_flags+0x1e0/0x2c0 [ 1740.863845][T15736] ip6_dst_lookup_tail+0xb6/0xab0 [ 1740.863941][T15736] ? __account_obj_stock+0x211/0x350 [ 1740.863968][T15736] ? __rcu_read_unlock+0x4e/0x70 [ 1740.863993][T15736] ip6_sk_dst_lookup_flow+0x4a9/0x5b0 [ 1740.864059][T15736] ? __rcu_read_unlock+0x4e/0x70 [ 1740.864139][T15736] udpv6_sendmsg+0x130d/0x17d0 [ 1740.864178][T15736] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1740.864230][T15736] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1740.864277][T15736] inet6_sendmsg+0xac/0xd0 [ 1740.864307][T15736] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1740.864337][T15736] ____sys_sendmsg+0x3c1/0x5b0 [ 1740.864388][T15736] ___sys_sendmsg+0x195/0x1e0 [ 1740.864446][T15736] ? path_openat+0x1b01/0x2050 [ 1740.864537][T15736] __sys_sendmmsg+0x185/0x320 [ 1740.864591][T15736] __x64_sys_sendmmsg+0x57/0x70 [ 1740.864633][T15736] x64_sys_call+0x27aa/0x3020 [ 1740.864665][T15736] do_syscall_64+0x12c/0x370 [ 1740.864762][T15736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.864792][T15736] RIP: 0033:0x7f88092dc799 [ 1740.864808][T15736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.864828][T15736] RSP: 002b:00007f8807d2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1740.864849][T15736] RAX: ffffffffffffffda RBX: 00007f8809555fa0 RCX: 00007f88092dc799 [ 1740.864931][T15736] RDX: 0000000000000002 RSI: 0000200000006b80 RDI: 0000000000000003 [ 1740.864948][T15736] RBP: 00007f8807d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1740.864961][T15736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.864974][T15736] R13: 00007f8809556038 R14: 00007f8809555fa0 R15: 00007ffefcff0df8 [ 1740.864995][T15736] [ 1741.913138][T15747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13884'. [ 1741.951824][T15757] netlink: 'syz.0.13888': attribute type 1 has an invalid length. [ 1741.964054][T15757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13888'. [ 1742.001714][T15752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13883'. [ 1742.075652][T15766] loop5: detected capacity change from 0 to 2048 [ 1742.239912][T15159] loop5: p3 p4 < > [ 1742.243914][T15159] loop5: p3 start 11362048 is beyond EOD, truncated [ 1742.261729][T15766] loop5: p3 p4 < > [ 1742.266233][T15766] loop5: p3 start 11362048 is beyond EOD, truncated [ 1742.313021][T15766] netlink: 16146 bytes leftover after parsing attributes in process `syz.5.13891'. [ 1742.408189][T15776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13894'. [ 1742.459574][T15785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1742.513006][T15786] lo speed is unknown, defaulting to 1000 [ 1743.030750][T15819] lo speed is unknown, defaulting to 1000 [ 1743.137774][T15827] loop5: detected capacity change from 0 to 512 [ 1743.282158][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 1743.282174][ T28] audit: type=1400 audit(2000000973.580:5964): avc: denied { create } for pid=15829 comm="syz.1.13904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1743.314143][ T28] audit: type=1400 audit(2000000973.618:5965): avc: denied { ioctl } for pid=15829 comm="syz.1.13904" path="socket:[177816]" dev="sockfs" ino=177816 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1743.403213][T15836] FAULT_INJECTION: forcing a failure. [ 1743.403213][T15836] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.414726][T15837] loop5: detected capacity change from 0 to 128 [ 1743.415959][T15836] CPU: 1 UID: 0 PID: 15836 Comm: syz.1.13906 Tainted: G W syzkaller #0 PREEMPT(full) [ 1743.416088][T15836] Tainted: [W]=WARN [ 1743.416124][T15836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1743.416251][T15836] Call Trace: [ 1743.416275][T15836] [ 1743.416307][T15836] __dump_stack+0x1d/0x30 [ 1743.416409][T15836] dump_stack_lvl+0x95/0xd0 [ 1743.416485][T15836] dump_stack+0x15/0x1b [ 1743.416607][T15836] should_fail_ex+0x263/0x280 [ 1743.416709][T15836] should_failslab+0x8c/0xb0 [ 1743.416865][T15836] kmem_cache_alloc_noprof+0x66/0x400 [ 1743.416926][T15836] ? skb_clone+0x151/0x1f0 [ 1743.417092][T15836] skb_clone+0x151/0x1f0 [ 1743.417140][T15836] dev_queue_xmit_nit+0x13e/0x510 [ 1743.417174][T15836] ? netif_skb_features+0x711/0x9b0 [ 1743.417288][T15836] dev_hard_start_xmit+0xe4/0x3f0 [ 1743.417438][T15836] __dev_queue_xmit+0xd9a/0x1f20 [ 1743.417636][T15836] ? __dev_queue_xmit+0x148/0x1f20 [ 1743.417754][T15836] ? __copy_skb_header+0x22f/0x2b0 [ 1743.417872][T15836] ? __skb_clone+0x2a6/0x2d0 [ 1743.418058][T15836] __netlink_deliver_tap+0x3c3/0x500 [ 1743.418276][T15836] netlink_unicast+0x66b/0x690 [ 1743.418412][T15836] netlink_sendmsg+0x5c8/0x6f0 [ 1743.418597][T15836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1743.418712][T15836] ____sys_sendmsg+0x563/0x5b0 [ 1743.418863][T15836] ___sys_sendmsg+0x195/0x1e0 [ 1743.419041][T15836] __x64_sys_sendmsg+0xd4/0x160 [ 1743.419171][T15836] x64_sys_call+0x194c/0x3020 [ 1743.419290][T15836] do_syscall_64+0x12c/0x370 [ 1743.419384][T15836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.419467][T15836] RIP: 0033:0x7f0f7f3ec799 [ 1743.419522][T15836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.419659][T15836] RSP: 002b:00007f0f7de47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1743.419743][T15836] RAX: ffffffffffffffda RBX: 00007f0f7f665fa0 RCX: 00007f0f7f3ec799 [ 1743.419789][T15836] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 1743.419913][T15836] RBP: 00007f0f7de47090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.419948][T15836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.419989][T15836] R13: 00007f0f7f666038 R14: 00007f0f7f665fa0 R15: 00007ffe6c158f38 [ 1743.420102][T15836] [ 1743.722861][T15846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13910'. [ 1743.752901][T15842] netlink: 80 bytes leftover after parsing attributes in process `syz.4.13909'. [ 1744.157894][T15850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13912'. [ 1744.236114][T15865] loop5: detected capacity change from 0 to 1024 [ 1744.331724][T15865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1744.591599][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1744.621157][T15888] loop5: detected capacity change from 0 to 128 [ 1744.719644][ T28] audit: type=1326 audit(2000000974.927:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15890 comm="syz.1.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1744.753378][ T28] audit: type=1326 audit(2000000974.927:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15890 comm="syz.1.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1744.777595][ T28] audit: type=1326 audit(2000000974.927:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15890 comm="syz.1.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1744.801569][ T28] audit: type=1326 audit(2000000974.927:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15890 comm="syz.1.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1744.825617][ T28] audit: type=1326 audit(2000000974.927:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15890 comm="syz.1.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1744.849858][ T28] audit: type=1326 audit(2000000974.937:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15890 comm="syz.1.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1744.881330][ T28] audit: type=1326 audit(2000000974.937:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15890 comm="syz.1.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1744.908130][ T28] audit: type=1326 audit(2000000974.937:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15890 comm="syz.1.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0f7f3ec799 code=0x7ffc0000 [ 1745.137938][T15905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1745.163420][T15903] loop5: detected capacity change from 0 to 1024 [ 1745.220888][T15903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1745.328743][T15910] lo speed is unknown, defaulting to 1000 [ 1745.454463][T15921] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 1745.626045][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1746.489862][T15936] netlink: 'syz.5.13936': attribute type 27 has an invalid length. [ 1746.654187][T15938] __nla_validate_parse: 5 callbacks suppressed [ 1746.654234][T15938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13941'. [ 1747.178504][T15952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13945'. [ 1747.572659][T15974] siw: device registration error -23 [ 1747.606415][T15977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13950'. [ 1747.688275][T15974] lo speed is unknown, defaulting to 1000 [ 1747.915279][T15981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1748.245695][T15989] loop5: detected capacity change from 0 to 1024 [ 1748.322684][T16001] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1748.344709][T15989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1748.447975][T15989] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13960'. [ 1748.562088][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13971'. [ 1748.616875][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1748.617640][T16021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13970'. [ 1748.651126][T16023] bond0: Unable to set up delay as MII monitoring is disabled [ 1748.867850][T16034] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1748.885786][T16034] loop5: detected capacity change from 0 to 128 [ 1750.463022][T16062] loop5: detected capacity change from 0 to 128 [ 1750.609934][ T28] kauditd_printk_skb: 307 callbacks suppressed [ 1750.609999][ T28] audit: type=1400 audit(2000000980.437:6281): avc: denied { create } for pid=16068 comm="syz.4.13987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1750.736324][T16069] lo speed is unknown, defaulting to 1000 [ 1750.771998][T16080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13989'. [ 1750.932644][T16082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13991'. [ 1751.409007][T16104] loop5: detected capacity change from 0 to 256 [ 1751.990588][T16105] lo speed is unknown, defaulting to 1000 [ 1751.996823][T16104] vfat: Unknown parameter 'shoPtname' [ 1752.036449][T16104] netlink: 96 bytes leftover after parsing attributes in process `syz.5.13996'. [ 1752.288282][T16112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1752.440072][ T28] audit: type=1400 audit(2000000982.158:6282): avc: denied { setopt } for pid=16117 comm="syz.0.14005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1752.604892][T16128] siw: device registration error -23 [ 1752.629083][T16130] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1753.457351][T16135] lo speed is unknown, defaulting to 1000 [ 1753.477129][ T28] audit: type=1400 audit(2000000983.122:6283): avc: denied { bind } for pid=16137 comm="syz.4.14010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1753.582232][ T28] audit: type=1400 audit(2000000983.215:6284): avc: denied { connect } for pid=16137 comm="syz.4.14010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1753.627694][ T28] audit: type=1400 audit(2000000983.225:6285): avc: denied { write } for pid=16137 comm="syz.4.14010" path="socket:[179445]" dev="sockfs" ino=179445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1753.924880][T16141] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 1753.945476][T16141] SELinux: failed to load policy [ 1754.257494][T16150] siw: device registration error -23 [ 1754.659823][T16151] lo speed is unknown, defaulting to 1000 [ 1755.080587][T16158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14015'. [ 1755.228853][T16161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1755.392622][T16161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1755.607234][T16167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14016'. [ 1755.616442][T16167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14016'. [ 1756.238839][T16182] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1756.507342][T16187] lo speed is unknown, defaulting to 1000 [ 1757.130471][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14028'. [ 1757.247351][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14030'. [ 1757.323916][T16209] FAULT_INJECTION: forcing a failure. [ 1757.323916][T16209] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.328047][T16202] loop5: detected capacity change from 0 to 512 [ 1757.341278][T16209] CPU: 0 UID: 0 PID: 16209 Comm: syz.2.14033 Tainted: G W syzkaller #0 PREEMPT(full) [ 1757.341391][T16209] Tainted: [W]=WARN [ 1757.341413][T16209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1757.341523][T16209] Call Trace: [ 1757.341544][T16209] [ 1757.341595][T16209] __dump_stack+0x1d/0x30 [ 1757.341691][T16209] dump_stack_lvl+0x95/0xd0 [ 1757.341801][T16209] dump_stack+0x15/0x1b [ 1757.341892][T16209] should_fail_ex+0x263/0x280 [ 1757.342026][T16209] should_failslab+0x8c/0xb0 [ 1757.342108][T16209] kmem_cache_alloc_noprof+0x66/0x400 [ 1757.342225][T16209] ? fcntl_dirnotify+0x243/0x590 [ 1757.342313][T16209] fcntl_dirnotify+0x243/0x590 [ 1757.342398][T16209] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1757.342546][T16209] do_fcntl+0x55f/0xf80 [ 1757.342591][T16209] ? __fget_files+0x184/0x1c0 [ 1757.342647][T16209] ? mutex_lock+0x57/0x90 [ 1757.342768][T16209] __se_sys_fcntl+0xb1/0x120 [ 1757.342875][T16209] __x64_sys_fcntl+0x43/0x50 [ 1757.343042][T16209] x64_sys_call+0x2844/0x3020 [ 1757.343169][T16209] do_syscall_64+0x12c/0x370 [ 1757.343336][T16209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.343416][T16209] RIP: 0033:0x7f135310c799 [ 1757.343500][T16209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1757.343624][T16209] RSP: 002b:00007f1351b5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1757.343695][T16209] RAX: ffffffffffffffda RBX: 00007f1353385fa0 RCX: 00007f135310c799 [ 1757.343715][T16209] RDX: 000000000000001a RSI: 0000000000000402 RDI: 0000000000000007 [ 1757.343732][T16209] RBP: 00007f1351b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1757.343749][T16209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1757.343766][T16209] R13: 00007f1353386038 R14: 00007f1353385fa0 R15: 00007ffe7466ea08 [ 1757.343794][T16209] [ 1757.355566][T16209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16209 comm=syz.2.14033 [ 1757.549744][T16215] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1757.639049][T16202] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1757.663541][T16202] EXT4-fs (loop5): 1 truncate cleaned up [ 1757.707875][T16202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1758.075106][T16244] FAULT_INJECTION: forcing a failure. [ 1758.075106][T16244] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.087828][T16244] CPU: 0 UID: 0 PID: 16244 Comm: syz.0.14044 Tainted: G W syzkaller #0 PREEMPT(full) [ 1758.087871][T16244] Tainted: [W]=WARN [ 1758.087881][T16244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1758.087898][T16244] Call Trace: [ 1758.087908][T16244] [ 1758.087918][T16244] __dump_stack+0x1d/0x30 [ 1758.088034][T16244] dump_stack_lvl+0x95/0xd0 [ 1758.088113][T16244] dump_stack+0x15/0x1b [ 1758.088189][T16244] should_fail_ex+0x263/0x280 [ 1758.088227][T16244] should_failslab+0x8c/0xb0 [ 1758.088267][T16244] kmem_cache_alloc_noprof+0x66/0x400 [ 1758.088298][T16244] ? dst_alloc+0xbd/0x100 [ 1758.088335][T16244] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1758.088437][T16244] dst_alloc+0xbd/0x100 [ 1758.088485][T16244] ip6_pol_route+0x9f7/0xeb0 [ 1758.088514][T16244] ? ip6_pol_route+0x648/0xeb0 [ 1758.088547][T16244] ip6_pol_route_output+0x40/0x50 [ 1758.088585][T16244] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1758.088617][T16244] fib6_rule_lookup+0x23a/0x4c0 [ 1758.088661][T16244] ? css_rstat_updated+0xbb/0x280 [ 1758.088711][T16244] ip6_route_output_flags+0x1e0/0x2c0 [ 1758.088744][T16244] ip6_dst_lookup_tail+0xb6/0xab0 [ 1758.088782][T16244] ? __account_obj_stock+0x211/0x350 [ 1758.088804][T16244] ? __rcu_read_unlock+0x4e/0x70 [ 1758.088931][T16244] ip6_sk_dst_lookup_flow+0x4a9/0x5b0 [ 1758.088973][T16244] ? __rcu_read_unlock+0x4e/0x70 [ 1758.089000][T16244] udpv6_sendmsg+0x130d/0x17d0 [ 1758.089076][T16244] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1758.089127][T16244] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1758.089241][T16244] inet6_sendmsg+0xac/0xd0 [ 1758.089269][T16244] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1758.089298][T16244] ____sys_sendmsg+0x3c1/0x5b0 [ 1758.089382][T16244] ___sys_sendmsg+0x195/0x1e0 [ 1758.089452][T16244] __sys_sendmmsg+0x185/0x320 [ 1758.089511][T16244] __x64_sys_sendmmsg+0x57/0x70 [ 1758.089551][T16244] x64_sys_call+0x27aa/0x3020 [ 1758.089625][T16244] do_syscall_64+0x12c/0x370 [ 1758.089660][T16244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.089701][T16244] RIP: 0033:0x7ff5fc6cc799 [ 1758.089847][T16244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.089870][T16244] RSP: 002b:00007ff5fb127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1758.089891][T16244] RAX: ffffffffffffffda RBX: 00007ff5fc945fa0 RCX: 00007ff5fc6cc799 [ 1758.089905][T16244] RDX: 0000000000000002 RSI: 0000200000006b80 RDI: 0000000000000003 [ 1758.089933][T16244] RBP: 00007ff5fb127090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.090025][T16244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.090105][T16244] R13: 00007ff5fc946038 R14: 00007ff5fc945fa0 R15: 00007ffeee9ecca8 [ 1758.090135][T16244] [ 1758.434466][T16246] netlink: 'syz.0.14045': attribute type 2 has an invalid length. [ 1758.442583][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14045'. [ 1758.503776][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1758.641924][T16267] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1758.702680][T16267] loop5: detected capacity change from 0 to 128 [ 1758.775832][T16278] siw: device registration error -23 [ 1759.215486][T16278] lo speed is unknown, defaulting to 1000 [ 1759.549051][T16292] loop5: detected capacity change from 0 to 256 [ 1760.055881][T16295] lo speed is unknown, defaulting to 1000 [ 1760.174193][T16292] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1760.225516][T16292] FAT-fs (loop5): Filesystem has been set read-only [ 1760.236274][T16292] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1760.248877][T16292] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1760.294665][T16300] netlink: 'syz.1.14057': attribute type 2 has an invalid length. [ 1760.302853][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14057'. [ 1760.312078][T16298] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1760.322534][T16298] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1760.333786][T16298] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1760.396064][T16298] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1760.409864][T16298] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1760.421088][T16298] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1760.434399][T16298] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1760.530902][T16306] syzkaller0: entered promiscuous mode [ 1760.536557][T16306] syzkaller0: entered allmulticast mode [ 1760.791007][T16322] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1760.876007][T16306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14060'. [ 1760.894749][T16306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14060'. [ 1761.779760][T16355] netlink: 'syz.0.14070': attribute type 2 has an invalid length. [ 1761.787924][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14070'. [ 1762.280688][T16370] lo speed is unknown, defaulting to 1000 [ 1762.689204][T16376] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14075'. [ 1762.701036][T16376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.709632][T16376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.782375][T16378] FAULT_INJECTION: forcing a failure. [ 1762.782375][T16378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1762.795602][T16378] CPU: 1 UID: 0 PID: 16378 Comm: syz.1.14076 Tainted: G W syzkaller #0 PREEMPT(full) [ 1762.795704][T16378] Tainted: [W]=WARN [ 1762.795712][T16378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1762.795728][T16378] Call Trace: [ 1762.795737][T16378] [ 1762.795748][T16378] __dump_stack+0x1d/0x30 [ 1762.795785][T16378] dump_stack_lvl+0x95/0xd0 [ 1762.795818][T16378] dump_stack+0x15/0x1b [ 1762.795911][T16378] should_fail_ex+0x263/0x280 [ 1762.795941][T16378] should_fail+0xb/0x20 [ 1762.795973][T16378] should_fail_usercopy+0x1a/0x20 [ 1762.796067][T16378] _copy_from_iter+0xcf/0xea0 [ 1762.796108][T16378] ? __alloc_skb+0x4f6/0x690 [ 1762.796142][T16378] ? __alloc_skb+0x200/0x690 [ 1762.796173][T16378] netlink_sendmsg+0x4ae/0x6f0 [ 1762.796331][T16378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1762.796376][T16378] ____sys_sendmsg+0x563/0x5b0 [ 1762.796429][T16378] ___sys_sendmsg+0x195/0x1e0 [ 1762.796485][T16378] __x64_sys_sendmsg+0xd4/0x160 [ 1762.796592][T16378] x64_sys_call+0x194c/0x3020 [ 1762.796625][T16378] do_syscall_64+0x12c/0x370 [ 1762.796661][T16378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.796740][T16378] RIP: 0033:0x7f0f7f3ec799 [ 1762.796761][T16378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.796786][T16378] RSP: 002b:00007f0f7de47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1762.796870][T16378] RAX: ffffffffffffffda RBX: 00007f0f7f665fa0 RCX: 00007f0f7f3ec799 [ 1762.796958][T16378] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1762.796972][T16378] RBP: 00007f0f7de47090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.796985][T16378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1762.796998][T16378] R13: 00007f0f7f666038 R14: 00007f0f7f665fa0 R15: 00007ffe6c158f38 [ 1762.797079][T16378] [ 1763.012116][T16379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14074'. [ 1763.021884][T16376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.030435][T16376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.231131][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14082'. [ 1763.763745][T16405] loop5: detected capacity change from 0 to 2048 [ 1763.847223][T16410] FAULT_INJECTION: forcing a failure. [ 1763.847223][T16410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1763.887708][T16410] CPU: 1 UID: 0 PID: 16410 Comm: syz.1.14089 Tainted: G W syzkaller #0 PREEMPT(full) [ 1763.887820][T16410] Tainted: [W]=WARN [ 1763.887830][T16410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1763.887847][T16410] Call Trace: [ 1763.887856][T16410] [ 1763.887866][T16410] __dump_stack+0x1d/0x30 [ 1763.887904][T16410] dump_stack_lvl+0x95/0xd0 [ 1763.888017][T16410] dump_stack+0x15/0x1b [ 1763.888122][T16410] should_fail_ex+0x263/0x280 [ 1763.888160][T16410] should_fail+0xb/0x20 [ 1763.888191][T16410] should_fail_usercopy+0x1a/0x20 [ 1763.888272][T16410] _copy_to_user+0x20/0xa0 [ 1763.888317][T16410] simple_read_from_buffer+0xb5/0x130 [ 1763.888350][T16410] proc_fail_nth_read+0x10e/0x150 [ 1763.888391][T16410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1763.888486][T16410] vfs_read+0x1ab/0x7f0 [ 1763.888530][T16410] ? __rcu_read_unlock+0x4e/0x70 [ 1763.888558][T16410] ? __fget_files+0x184/0x1c0 [ 1763.888592][T16410] ? mutex_lock+0x57/0x90 [ 1763.888697][T16410] ksys_read+0xdc/0x1a0 [ 1763.888722][T16410] __x64_sys_read+0x40/0x50 [ 1763.888797][T16410] x64_sys_call+0x2886/0x3020 [ 1763.888834][T16410] do_syscall_64+0x12c/0x370 [ 1763.888869][T16410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1763.888940][T16410] RIP: 0033:0x7f0f7f3acfce [ 1763.888962][T16410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1763.888988][T16410] RSP: 002b:00007f0f7de46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1763.889015][T16410] RAX: ffffffffffffffda RBX: 00007f0f7de476c0 RCX: 00007f0f7f3acfce [ 1763.889065][T16410] RDX: 000000000000000f RSI: 00007f0f7de470a0 RDI: 000000000000000c [ 1763.889083][T16410] RBP: 00007f0f7de47090 R08: 0000000000000000 R09: 0000000000000000 [ 1763.889100][T16410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1763.889129][T16410] R13: 00007f0f7f666038 R14: 00007f0f7f665fa0 R15: 00007ffe6c158f38 [ 1763.889157][T16410] [ 1763.895814][T16283] Alternate GPT is invalid, using primary GPT. [ 1764.115355][T16283] loop5: p2 p3 p7 [ 1764.187609][T16405] Alternate GPT is invalid, using primary GPT. [ 1764.194162][T16405] loop5: p2 p3 p7 [ 1764.419193][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14098'. [ 1764.466591][T16441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1764.614021][T16459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1764.627090][T16459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1764.977523][T16480] siw: device registration error -23 [ 1765.455357][T16486] lo speed is unknown, defaulting to 1000 [ 1765.507354][T16488] netlink: 'syz.4.14107': attribute type 29 has an invalid length. [ 1766.454546][T16511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14114'. [ 1766.935225][T16521] netlink: 'syz.4.14118': attribute type 2 has an invalid length. [ 1766.943303][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14118'. [ 1766.978276][T16283] udevd[16283]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1766.990133][T15159] udevd[15159]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 1767.004348][T16526] loop5: detected capacity change from 0 to 128 [ 1767.180558][T16534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14121'. [ 1767.360229][T16542] loop5: detected capacity change from 0 to 2048 [ 1767.427072][T16283] loop5: p3 p4 < > [ 1767.431078][T16283] loop5: p3 start 11362048 is beyond EOD, truncated [ 1767.470172][T16542] loop5: p3 p4 < > [ 1767.477537][T16542] loop5: p3 start 11362048 is beyond EOD, truncated [ 1767.500570][ T3002] loop5: p3 p4 < > [ 1767.506382][ T3002] loop5: p3 start 11362048 is beyond EOD, truncated [ 1767.511244][T16542] netlink: 16146 bytes leftover after parsing attributes in process `syz.5.14125'. [ 1767.555613][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14127'. [ 1767.597187][T16542] lo speed is unknown, defaulting to 1000 [ 1767.641756][T16548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1767.696296][T16549] lo speed is unknown, defaulting to 1000 [ 1767.930206][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14129'. [ 1767.952933][T16564] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.14128'. [ 1767.962339][T16564] netlink: zone id is out of range [ 1767.967486][T16564] netlink: zone id is out of range [ 1767.973056][T16564] netlink: zone id is out of range [ 1767.978364][T16564] netlink: zone id is out of range [ 1767.984292][T16564] netlink: zone id is out of range [ 1767.989495][T16564] netlink: zone id is out of range [ 1768.003995][T16564] netlink: set zone limit has 8 unknown bytes [ 1768.397930][T16575] loop5: detected capacity change from 0 to 512 [ 1768.903518][T16582] lo speed is unknown, defaulting to 1000 [ 1769.272329][T16581] dvmrp6: entered allmulticast mode [ 1769.288356][T16589] netlink: 204 bytes leftover after parsing attributes in process `syz.1.14139'. [ 1769.424084][T16592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14141'. [ 1769.611885][T16606] loop5: detected capacity change from 0 to 512 [ 1769.644176][T16606] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1769.737076][T16606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1769.789236][T16612] netlink: 'syz.4.14149': attribute type 3 has an invalid length. [ 1769.821478][T16606] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1769.839317][T16616] FAULT_INJECTION: forcing a failure. [ 1769.839317][T16616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1769.857110][T16605] __nla_validate_parse: 1 callbacks suppressed [ 1769.857166][T16605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14146'. [ 1769.875018][T16616] CPU: 0 UID: 0 PID: 16616 Comm: syz.1.14150 Tainted: G W syzkaller #0 PREEMPT(full) [ 1769.875260][T16616] Tainted: [W]=WARN [ 1769.875290][T16616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1769.875418][T16616] Call Trace: [ 1769.875447][T16616] [ 1769.875484][T16616] __dump_stack+0x1d/0x30 [ 1769.875669][T16616] dump_stack_lvl+0x95/0xd0 [ 1769.875754][T16616] dump_stack+0x15/0x1b [ 1769.875834][T16616] should_fail_ex+0x263/0x280 [ 1769.875929][T16616] should_fail+0xb/0x20 [ 1769.876044][T16616] should_fail_usercopy+0x1a/0x20 [ 1769.876145][T16616] _copy_to_user+0x20/0xa0 [ 1769.876282][T16616] sctp_getsockopt_event+0x377/0x3b0 [ 1769.876448][T16616] sctp_getsockopt+0x1f5/0xaa0 [ 1769.876533][T16616] sock_common_getsockopt+0x60/0x70 [ 1769.876620][T16616] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1769.876699][T16616] do_sock_getsockopt+0x1c4/0x210 [ 1769.876913][T16616] __x64_sys_getsockopt+0x11d/0x1a0 [ 1769.877051][T16616] x64_sys_call+0x2dcf/0x3020 [ 1769.877205][T16616] do_syscall_64+0x12c/0x370 [ 1769.877293][T16616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.877437][T16616] RIP: 0033:0x7f0f7f3ec799 [ 1769.877499][T16616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1769.877561][T16616] RSP: 002b:00007f0f7de47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1769.877628][T16616] RAX: ffffffffffffffda RBX: 00007f0f7f665fa0 RCX: 00007f0f7f3ec799 [ 1769.877688][T16616] RDX: 000000000000007f RSI: 0000000000000084 RDI: 0000000000000003 [ 1769.877731][T16616] RBP: 00007f0f7de47090 R08: 0000200000000000 R09: 0000000000000000 [ 1769.877825][T16616] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1769.877838][T16616] R13: 00007f0f7f666038 R14: 00007f0f7f665fa0 R15: 00007ffe6c158f38 [ 1769.877880][T16616] [ 1770.078205][T16606] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.14148: iget: bad i_size value: 2533274857506816 [ 1770.158309][T16631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14153'. [ 1770.160841][T16627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14152'. [ 1770.260886][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1770.316089][T16643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14160'. [ 1770.408157][ T28] audit: type=1400 audit(2000000998.969:6286): avc: denied { unmount } for pid=10574 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1770.454835][ T28] audit: type=1400 audit(2000000999.006:6287): avc: denied { unmount } for pid=10574 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1770.496592][T16653] siw: device registration error -23 [ 1770.549944][T16657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14164'. [ 1770.727708][T16667] FAULT_INJECTION: forcing a failure. [ 1770.727708][T16667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1770.807617][T16667] CPU: 1 UID: 0 PID: 16667 Comm: syz.4.14169 Tainted: G W syzkaller #0 PREEMPT(full) [ 1770.807655][T16667] Tainted: [W]=WARN [ 1770.807680][T16667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1770.807694][T16667] Call Trace: [ 1770.807700][T16667] [ 1770.807707][T16667] __dump_stack+0x1d/0x30 [ 1770.807790][T16667] dump_stack_lvl+0x95/0xd0 [ 1770.807819][T16667] dump_stack+0x15/0x1b [ 1770.807842][T16667] should_fail_ex+0x263/0x280 [ 1770.807878][T16667] ? __pfx_ucma_write_cm_event+0x10/0x10 [ 1770.807931][T16667] should_fail+0xb/0x20 [ 1770.807961][T16667] should_fail_usercopy+0x1a/0x20 [ 1770.807996][T16667] _copy_from_user+0x1c/0xb0 [ 1770.808032][T16667] ucma_write_cm_event+0x54/0x4b0 [ 1770.808138][T16667] ? __pfx_ucma_write_cm_event+0x10/0x10 [ 1770.808167][T16667] ucma_write+0x1c9/0x260 [ 1770.808197][T16667] ? __pfx_ucma_write+0x10/0x10 [ 1770.808332][T16667] vfs_write+0x269/0x9f0 [ 1770.808361][T16667] ? __rcu_read_unlock+0x4e/0x70 [ 1770.808458][T16667] ? __fget_files+0x184/0x1c0 [ 1770.808492][T16667] ksys_write+0xdc/0x1a0 [ 1770.808519][T16667] __x64_sys_write+0x40/0x50 [ 1770.808545][T16667] x64_sys_call+0x27e1/0x3020 [ 1770.808586][T16667] do_syscall_64+0x12c/0x370 [ 1770.808614][T16667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.808703][T16667] RIP: 0033:0x7f9684bcc799 [ 1770.808720][T16667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.808747][T16667] RSP: 002b:00007f9683627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1770.808774][T16667] RAX: ffffffffffffffda RBX: 00007f9684e45fa0 RCX: 00007f9684bcc799 [ 1770.808788][T16667] RDX: 0000000000000118 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1770.808802][T16667] RBP: 00007f9683627090 R08: 0000000000000000 R09: 0000000000000000 [ 1770.808848][T16667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1770.808864][T16667] R13: 00007f9684e46038 R14: 00007f9684e45fa0 R15: 00007ffe2bdd6278 [ 1770.808888][T16667] [ 1771.056530][T16665] loop5: detected capacity change from 0 to 1024 [ 1771.141724][T16665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1771.174313][T16676] lo speed is unknown, defaulting to 1000 [ 1771.282035][T16665] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14168'. [ 1771.439501][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1771.601365][T16685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14173'. [ 1772.233888][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14180'. [ 1772.260894][T16704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1772.281877][T16704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1772.300546][ T28] audit: type=1400 audit(2000001000.727:6288): avc: denied { bind } for pid=16701 comm="syz.4.14181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1772.336943][T16700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14179'. [ 1772.450716][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14184'. [ 1772.576268][T16726] loop5: detected capacity change from 0 to 256 [ 1772.646696][T16726] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1772.672526][T16726] FAT-fs (loop5): Filesystem has been set read-only [ 1772.684356][T16726] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1772.713153][T16726] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1772.771666][T16733] loop5: detected capacity change from 0 to 128 [ 1772.993625][T16739] bridge_slave_0: left allmulticast mode [ 1773.009464][T16739] bridge_slave_0: left promiscuous mode [ 1773.015386][T16739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.023945][T16739] bridge_slave_1: left allmulticast mode [ 1773.030083][T16739] bridge_slave_1: left promiscuous mode [ 1773.035886][T16739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.045080][T16739] bond0: (slave bond_slave_0): Releasing backup interface [ 1773.052252][T16740] 9pnet_fd: p9_fd_create_unix (16740): problem connecting socket: ./file0: -2 [ 1773.063118][T16739] bond0: (slave bond_slave_1): Releasing backup interface [ 1773.085432][T16739] team0: Port device team_slave_0 removed [ 1773.101076][T16739] team0: Port device team_slave_1 removed [ 1773.107485][T16739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1773.115574][T16739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1773.124055][T16739] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1773.185854][T16742] loop5: detected capacity change from 0 to 512 [ 1773.205021][T16742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1773.225917][T16742] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1773.269729][T10574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1773.326226][ T28] audit: type=1400 audit(2000001001.681:6289): avc: denied { setopt } for pid=16746 comm="syz.5.14195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1773.759846][T16776] FAULT_INJECTION: forcing a failure. [ 1773.759846][T16776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1773.797786][T16776] CPU: 1 UID: 0 PID: 16776 Comm: syz.0.14205 Tainted: G W syzkaller #0 PREEMPT(full) [ 1773.797833][T16776] Tainted: [W]=WARN [ 1773.797843][T16776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1773.797861][T16776] Call Trace: [ 1773.797870][T16776] [ 1773.797882][T16776] __dump_stack+0x1d/0x30 [ 1773.797946][T16776] dump_stack_lvl+0x95/0xd0 [ 1773.797979][T16776] dump_stack+0x15/0x1b [ 1773.798010][T16776] should_fail_ex+0x263/0x280 [ 1773.798135][T16776] should_fail+0xb/0x20 [ 1773.798169][T16776] should_fail_usercopy+0x1a/0x20 [ 1773.798209][T16776] _copy_from_iter+0xcf/0xea0 [ 1773.798247][T16776] ? __alloc_skb+0x4f6/0x690 [ 1773.798341][T16776] ? __alloc_skb+0x200/0x690 [ 1773.798380][T16776] netlink_sendmsg+0x4ae/0x6f0 [ 1773.798467][T16776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1773.798506][T16776] ____sys_sendmsg+0x563/0x5b0 [ 1773.798581][T16776] ___sys_sendmsg+0x195/0x1e0 [ 1773.798709][T16776] __x64_sys_sendmsg+0xd4/0x160 [ 1773.798748][T16776] x64_sys_call+0x194c/0x3020 [ 1773.798867][T16776] do_syscall_64+0x12c/0x370 [ 1773.798920][T16776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.798952][T16776] RIP: 0033:0x7ff5fc6cc799 [ 1773.798975][T16776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1773.799002][T16776] RSP: 002b:00007ff5fb127028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1773.799026][T16776] RAX: ffffffffffffffda RBX: 00007ff5fc945fa0 RCX: 00007ff5fc6cc799 [ 1773.799052][T16776] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1773.799098][T16776] RBP: 00007ff5fb127090 R08: 0000000000000000 R09: 0000000000000000 [ 1773.799114][T16776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1773.799130][T16776] R13: 00007ff5fc946038 R14: 00007ff5fc945fa0 R15: 00007ffeee9ecca8 [ 1773.799154][T16776] [ 1774.388520][T16796] lo speed is unknown, defaulting to 1000 [ 1774.504825][T16827] netlink: 'syz.0.14213': attribute type 2 has an invalid length. [ 1774.534249][T12400] bridge_slave_1: left allmulticast mode [ 1774.540812][T12400] bridge_slave_1: left promiscuous mode [ 1774.547225][T12400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.556901][T12400] bridge_slave_0: left allmulticast mode [ 1774.562744][T12400] bridge_slave_0: left promiscuous mode [ 1774.568764][T12400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.766276][T12400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1774.775761][T12400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1774.785423][T12400] bond0 (unregistering): Released all slaves [ 1774.793317][T12400] bond1 (unregistering): Released all slaves [ 1774.802493][T12400] bond2 (unregistering): Released all slaves [ 1774.812261][T16796] chnl_net:caif_netlink_parms(): no params data found [ 1774.854030][T12400] tipc: Left network mode [ 1774.894896][T16796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.902551][T16796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.910313][T16796] bridge_slave_0: entered allmulticast mode [ 1774.916940][T16796] bridge_slave_0: entered promiscuous mode [ 1774.926006][T12400] hsr_slave_0: left promiscuous mode [ 1774.934669][T12400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1774.948567][T12400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1774.959129][T12400] batman_adv: batadv0: Interface deactivated: dummy0 [ 1774.974439][T12400] batman_adv: batadv0: Removing interface: dummy0 [ 1775.049429][T12400] team_slave_1 (unregistering): left promiscuous mode [ 1775.056349][T12400] team_slave_1 (unregistering): left allmulticast mode [ 1775.065427][T12400] team0 (unregistering): Port device team_slave_1 removed [ 1775.817706][T16796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.824847][T16796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.833438][T16796] bridge_slave_1: entered allmulticast mode [ 1775.840162][T16796] bridge_slave_1: entered promiscuous mode [ 1775.882854][T16796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.904055][T16796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.989146][T16878] netlink: 'syz.1.14225': attribute type 2 has an invalid length. [ 1775.997608][T16878] __nla_validate_parse: 10 callbacks suppressed [ 1775.997632][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14225'. [ 1776.016744][T16796] team0: Port device team_slave_0 added [ 1776.037691][T16796] team0: Port device team_slave_1 added [ 1776.056629][T16796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.063812][T16796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.093823][T16796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.108604][T16880] lo speed is unknown, defaulting to 1000 [ 1776.151180][T16796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.158304][T16796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.188644][T16887] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14227'. [ 1776.198327][T16796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1776.201715][ T28] audit: type=1400 audit(2000001004.366:6290): avc: denied { mount } for pid=16879 comm="syz.0.14224" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 1776.253048][T16796] hsr_slave_0: entered promiscuous mode [ 1776.268840][T16796] hsr_slave_1: entered promiscuous mode [ 1776.281153][T16796] debugfs: 'hsr0' already exists in 'hsr' [ 1776.287837][T16796] Cannot create hsr debugfs directory [ 1776.543414][T12400] IPVS: stop unused estimator thread 0... [ 1776.552275][T16907] lo speed is unknown, defaulting to 1000 [ 1776.560218][T16913] netlink: 'syz.0.14232': attribute type 12 has an invalid length. [ 1776.868149][T16796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1776.889733][T16932] loop5: detected capacity change from 0 to 128 [ 1776.890362][T16796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1776.898194][T16932] vfat: Unknown parameter 'ÿ' [ 1776.914212][T16796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1776.994680][T16796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1777.742375][T16796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1777.754288][T16796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1777.795053][T15126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.802228][T15126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1777.811336][T15126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.818481][T15126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.891337][T16955] lo speed is unknown, defaulting to 1000 [ 1777.985063][T16966] netlink: 'syz.1.14237': attribute type 2 has an invalid length. [ 1777.993930][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14237'. [ 1778.030802][T16970] netlink: 16146 bytes leftover after parsing attributes in process `syz.0.14238'. [ 1778.076437][T16977] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14239'. [ 1778.097963][T16970] lo speed is unknown, defaulting to 1000 [ 1778.126742][T16982] 9p: Bad value for 'wfdno' [ 1778.207864][T16796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1778.342109][T17008] 9p: Bad value for 'wfdno' [ 1778.372285][T17007] netlink: 64 bytes leftover after parsing attributes in process `syz.5.14243'. [ 1778.564510][T17026] loop5: detected capacity change from 0 to 2048 [ 1778.631140][T17027] lo speed is unknown, defaulting to 1000 [ 1778.659506][T16283] loop5: p3 p4 < > [ 1778.664309][T16283] loop5: p3 start 11362048 is beyond EOD, truncated [ 1778.685651][T17026] loop5: p3 p4 < > [ 1778.696642][T17026] loop5: p3 start 11362048 is beyond EOD, truncated [ 1778.719661][T17026] netlink: 16146 bytes leftover after parsing attributes in process `syz.5.14247'. [ 1778.743087][T16796] veth0_vlan: entered promiscuous mode [ 1778.753061][T16796] veth1_vlan: entered promiscuous mode [ 1778.796074][T16796] veth0_macvtap: entered promiscuous mode [ 1778.814957][T17026] lo speed is unknown, defaulting to 1000 [ 1778.821506][T16796] veth1_macvtap: entered promiscuous mode [ 1778.836071][T17047] 9p: Bad value for 'rfdno' [ 1778.861449][T16796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1778.870967][T16796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1778.879437][T17049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14249'. [ 1778.926671][T15409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.939919][T15409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.958570][T15409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.986602][T15409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.179912][ T28] audit: type=1400 audit(2000001007.163:6291): avc: denied { read } for pid=17083 comm="syz.1.14256" lport=50811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1779.217310][T17084] syzkaller0: entered promiscuous mode [ 1779.244537][T17084] syzkaller0: entered allmulticast mode [ 1779.394821][T17101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14258'. [ 1779.586639][T17111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14260'. [ 1779.725799][T17132] FAULT_INJECTION: forcing a failure. [ 1779.725799][T17132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1779.781641][ T28] audit: type=1400 audit(2000001007.724:6292): avc: denied { node_bind } for pid=17135 comm="syz.5.14267" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1779.825760][T17132] CPU: 1 UID: 0 PID: 17132 Comm: syz.4.14265 Tainted: G W syzkaller #0 PREEMPT(full) [ 1779.825797][T17132] Tainted: [W]=WARN [ 1779.825870][T17132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1779.825885][T17132] Call Trace: [ 1779.825893][T17132] [ 1779.825904][T17132] __dump_stack+0x1d/0x30 [ 1779.826001][T17132] dump_stack_lvl+0x95/0xd0 [ 1779.826036][T17132] dump_stack+0x15/0x1b [ 1779.826065][T17132] should_fail_ex+0x263/0x280 [ 1779.826176][T17132] should_fail+0xb/0x20 [ 1779.826207][T17132] should_fail_usercopy+0x1a/0x20 [ 1779.826243][T17132] _copy_from_iter+0xcf/0xea0 [ 1779.826282][T17132] ? __alloc_skb+0x4f6/0x690 [ 1779.826325][T17132] ? __alloc_skb+0x200/0x690 [ 1779.826364][T17132] netlink_sendmsg+0x4ae/0x6f0 [ 1779.826492][T17132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1779.826540][T17132] ____sys_sendmsg+0x563/0x5b0 [ 1779.826586][T17132] ___sys_sendmsg+0x195/0x1e0 [ 1779.826684][T17132] __x64_sys_sendmsg+0xd4/0x160 [ 1779.826726][T17132] x64_sys_call+0x194c/0x3020 [ 1779.826762][T17132] do_syscall_64+0x12c/0x370 [ 1779.826800][T17132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.826830][T17132] RIP: 0033:0x7f0eedb3c799 [ 1779.826851][T17132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1779.826873][T17132] RSP: 002b:00007f0eec56e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1779.826981][T17132] RAX: ffffffffffffffda RBX: 00007f0eeddb6090 RCX: 00007f0eedb3c799 [ 1779.827031][T17132] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 1779.827049][T17132] RBP: 00007f0eec56e090 R08: 0000000000000000 R09: 0000000000000000 [ 1779.827067][T17132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1779.827158][T17132] R13: 00007f0eeddb6128 R14: 00007f0eeddb6090 R15: 00007ffdbcb878c8 [ 1779.827238][T17132] [ 1780.279123][T17160] siw: device registration error -23 [ 1780.336868][T17160] lo speed is unknown, defaulting to 1000 [ 1781.053967][T17212] ------------[ cut here ]------------ [ 1781.059536][T17212] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 1781.071677][T17212] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#1: syz.0.14276/17212 [ 1781.081711][T17212] Modules linked in: [ 1781.085650][T17212] CPU: 1 UID: 0 PID: 17212 Comm: syz.0.14276 Tainted: G W syzkaller #0 PREEMPT(full) [ 1781.096940][T17212] Tainted: [W]=WARN [ 1781.100942][T17212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1781.111078][T17212] RIP: 0010:u32_change+0x1463/0x14d0 [ 1781.116422][T17212] Code: 31 ed e9 96 fe ff ff e8 0b fc c1 fc 48 8d 3d 64 33 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 c8 64 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 1781.136144][T17212] RSP: 0018:ffffc900047df5e0 EFLAGS: 00010283 [ 1781.142346][T17212] RAX: ffffffff849764e5 RBX: ffffc900047df7f0 RCX: 0000000000000010 [ 1781.150424][T17212] RDX: ffffffff867e64c8 RSI: 0000000000000020 RDI: ffffffff87209850 [ 1781.158495][T17212] RBP: ffffc900047df6e8 R08: 0001888126f87187 R09: 0000000000000000 [ 1781.166601][T17212] R10: ffff888126f87100 R11: 0000000000000002 R12: ffff88810cc6fa00 [ 1781.174687][T17212] R13: 0000000000000001 R14: 0000000000000020 R15: ffff88810cc6fac0 [ 1781.182719][T17212] FS: 00007ff5fb1276c0(0000) GS:ffff8882ae9d8000(0000) knlGS:0000000000000000 [ 1781.191755][T17212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1781.198439][T17212] CR2: 0000001b3171aff8 CR3: 00000001116fa000 CR4: 00000000003506f0 [ 1781.206574][T17212] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 1781.214610][T17212] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1781.222667][T17212] Call Trace: [ 1781.226474][T17212] [ 1781.229444][T17212] tc_new_tfilter+0xfc0/0x1200 [ 1781.234342][T17212] ? ns_capable+0x7c/0xb0 [ 1781.238834][T17212] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1781.244162][T17212] rtnetlink_rcv_msg+0x64b/0x720 [ 1781.249188][T17212] netlink_rcv_skb+0x123/0x220 [ 1781.254018][T17212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1781.259634][T17212] rtnetlink_rcv+0x1c/0x30 [ 1781.264082][T17212] netlink_unicast+0x5c0/0x690 [ 1781.268931][T17212] netlink_sendmsg+0x5c8/0x6f0 [ 1781.273782][T17212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1781.279158][T17212] ____sys_sendmsg+0x563/0x5b0 [ 1781.284022][T17212] ___sys_sendmsg+0x195/0x1e0 [ 1781.288784][T17212] __sys_sendmmsg+0x185/0x320 [ 1781.293684][T17212] __x64_sys_sendmmsg+0x57/0x70 [ 1781.298684][T17212] x64_sys_call+0x27aa/0x3020 [ 1781.303579][T17212] do_syscall_64+0x12c/0x370 [ 1781.308223][T17212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.314205][T17212] RIP: 0033:0x7ff5fc6cc799 [ 1781.318670][T17212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1781.338368][T17212] RSP: 002b:00007ff5fb127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1781.346870][T17212] RAX: ffffffffffffffda RBX: 00007ff5fc945fa0 RCX: 00007ff5fc6cc799 [ 1781.355169][T17212] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 1781.363196][T17212] RBP: 00007ff5fc762c99 R08: 0000000000000000 R09: 0000000000000000 [ 1781.371262][T17212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1781.379359][T17212] R13: 00007ff5fc946038 R14: 00007ff5fc945fa0 R15: 00007ffeee9ecca8 [ 1781.387440][T17212] [ 1781.387793][ T2991] ================================================================== [ 1781.390494][T17212] ---[ end trace 0000000000000000 ]--- [ 1781.398657][ T2991] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 1781.411269][ T2991] [ 1781.413638][ T2991] write to 0xffffffff86c7f300 of 8 bytes by task 17212 on cpu 1: [ 1781.421395][ T2991] data_alloc+0x310/0x390 [ 1781.425783][ T2991] prb_reserve+0x8d7/0xae0 [ 1781.430259][ T2991] vprintk_store+0x54a/0x910 [ 1781.434895][ T2991] vprintk_emit+0x1a4/0x600 [ 1781.439544][ T2991] vprintk_default+0x26/0x30 [ 1781.444198][ T2991] vprintk+0x1d/0x30 [ 1781.448133][ T2991] _printk+0x79/0xa0 [ 1781.452063][ T2991] __show_trace_log_lvl+0x48b/0x560 [ 1781.457320][ T2991] __warn+0x159/0x360 [ 1781.461356][ T2991] __report_bug+0x241/0x490 [ 1781.465902][ T2991] report_bug_entry+0xb2/0x100 [ 1781.470703][ T2991] handle_bug+0xce/0x200 [ 1781.474988][ T2991] exc_invalid_op+0x1a/0x50 [ 1781.479710][ T2991] asm_exc_invalid_op+0x1a/0x20 [ 1781.484618][ T2991] u32_change+0x1463/0x14d0 [ 1781.489156][ T2991] tc_new_tfilter+0xfc0/0x1200 [ 1781.493971][ T2991] rtnetlink_rcv_msg+0x64b/0x720 [ 1781.498942][ T2991] netlink_rcv_skb+0x123/0x220 [ 1781.503760][ T2991] rtnetlink_rcv+0x1c/0x30 [ 1781.508226][ T2991] netlink_unicast+0x5c0/0x690 [ 1781.513051][ T2991] netlink_sendmsg+0x5c8/0x6f0 [ 1781.517871][ T2991] ____sys_sendmsg+0x563/0x5b0 [ 1781.522702][ T2991] ___sys_sendmsg+0x195/0x1e0 [ 1781.527426][ T2991] __sys_sendmmsg+0x185/0x320 [ 1781.532154][ T2991] __x64_sys_sendmmsg+0x57/0x70 [ 1781.537048][ T2991] x64_sys_call+0x27aa/0x3020 [ 1781.541760][ T2991] do_syscall_64+0x12c/0x370 [ 1781.546380][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.552308][ T2991] [ 1781.554658][ T2991] read to 0xffffffff86c7f300 of 16 bytes by task 2991 on cpu 0: [ 1781.562321][ T2991] _prb_read_valid+0x1bc/0x950 [ 1781.567141][ T2991] prb_read_valid+0x3c/0x60 [ 1781.571688][ T2991] syslog_print+0x258/0x560 [ 1781.576231][ T2991] do_syslog+0x52b/0x7f0 [ 1781.580524][ T2991] __x64_sys_syslog+0x41/0x50 [ 1781.585264][ T2991] x64_sys_call+0x2b9e/0x3020 [ 1781.590050][ T2991] do_syscall_64+0x12c/0x370 [ 1781.594670][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.600594][ T2991] [ 1781.602949][ T2991] Reported by Kernel Concurrency Sanitizer on: [ 1781.609128][ T2991] CPU: 0 UID: 0 PID: 2991 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(full) [ 1781.619574][ T2991] Tainted: [W]=WARN [ 1781.623397][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1781.633497][ T2991] ================================================================== [ 1781.685072][T17227] __nla_validate_parse: 15 callbacks suppressed [ 1781.685090][T17227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14279'. [ 1781.725567][T17227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.