last executing test programs: 1m20.785601423s ago: executing program 2 (id=135): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000001ada00006b110e000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) unshare(0x2040400) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}, 0x4000}], 0x1, 0x4c040) 1m20.757643107s ago: executing program 2 (id=136): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32={[0x0, 0xfeffffff]}}], 0xffc8) 1m20.694288815s ago: executing program 2 (id=137): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x4}, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x3, 0x3, 0x83, &(0x7f0000000040)=""/131}) getpeername$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000001c0)={0x3, 0x2, 0x41, 0xba, 0x1, 0x4}) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x1, 0x6, 0x483, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xa81fddb82432b23d) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x49090) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000680)={&(0x7f0000000540), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2b}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x10}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc041}, 0xd1) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000006c0)={0x1, 0x4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e21, 0x16, @loopback, 0x3f8}}, [0x4, 0x24, 0x3, 0xfffffffffffff800, 0x0, 0x200, 0x3, 0x1, 0x9, 0x2, 0x1000, 0x2, 0x8000, 0x6, 0x7]}, &(0x7f0000000800)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000840)={r3, 0x11, "0eb9019a8c0e8ec8f7d822844ef6f31fda"}, &(0x7f0000000880)=0x19) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r2, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x880) r5 = accept$nfc_llcp(r0, &(0x7f00000009c0), &(0x7f0000000a40)=0x60) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000a80)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000ac0)=@assoc_id=r4, 0x4) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000b00)=0x0) sched_setscheduler(r7, 0x3, &(0x7f0000000b40)=0x48475e3d) sendmsg$tipc(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000b80)="bbabcc82126d5a1531f889717daa0d9d8f0211167b14b42a8797efde5738b53dd3adb1b86ddda79c7cd66b6c325d733289e1ee5298f044babcf9939f6dfa52c5c629d2c616c870869f5adf6d6dda7c62d5a0418449854cfddade08c07a4311a6b0f177b1f15b3192494f929496f2c23247627624e1a27b280cb994bf75c2273dc715e171297cd97e488b397df6429944c863243e66518e15323895b6c5b064d1295c33134898b67413df", 0xaa}, {&(0x7f0000000c40)="1e841c98d71d5176976958fd924cdd3b183edceed1caa4ac225fa32ec32bda49932968a4f1aba54e2afd9462812ec15a404a463797adca19dec50c855e81cec71581d2d58eedd7f8bd609382d0e59e15864ac6c2a4ec91b68faafc5fb97a5a84a8e3a83f75fd5c62da45ddb4c1f1a79cbe0dd48139620761b7a22d5e0f94dadd966f4ef985665fa27dd6cec9274362e4a5a5bb824ee1e14e8d220094c0fad6e918ebe3aca5b1ebf91c183587e438d70f17e71ff15d4502072353f9e191200505f3f05944d3179aa0e3a4377eb19d3ae5bdc4e0881fb7b5f59d9e4048f4f03325c4a3d85e857aedeb0390ad30", 0xec}, {&(0x7f0000000d40)="081737623bfef1bd6ad80b62fa8ec1a7c47eb2ff5e37eafc0a21ba3ac30ad2c62de2c95c7aac7eea8d5677101975134f8c5148304cc0c16113126d4d33365219028862ede0459fb6a13be0af2015f1b2a006198bba8d74fadd862023db0d772fe36ecbe731431ec5f87b653cf0ca68f54c278689422f6089bde8fc2d1a9bff00c0fa56a5057dfbb4145f3a4004e6ba14ea8b92ccf2916e15fb8fedff6b4189c413734af926441eca202ec24509ac5ffcb1e09f81a85e38d7a700a750468f72303196c2a68f7927c358", 0xc9}, {&(0x7f0000000e40)="2e1155b5811db476210273c116bc4edb90d06f773dbb30c406f58c8577487f200eea1dcf9759ef4ec177714fa63a585a39dc935d2d778a6901314b90b55b8930080f3a25a484790c037c", 0x4a}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="a9c75acc1ebaffee4fffd97b18bc5d4d408b4a1774b1ddb897b59b5ff7b1262a321e76d17f7beb374081c81b07f0ae3465888d2c5801f11176c827bc8ea6faf2118906a5a930da06c6abfe636e71d911eddf11f12e55d7fc523966", 0x5b}], 0x6, &(0x7f0000001fc0)="fdd33e6697242c7299f498aa838a945f0189927af8055b4ad3eb6be78b8c165f86ffc8c7cee4f8fd755631bfa264ad24d38fb41848cfac9e3e9648e624623e6cd8a45898a1b3f8fa2971157c94e9f8e318199851bcdb010260863255f33df9a12245b7979537f1b01dc56255", 0x6c, 0x800}, 0xc0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x2c, 0xd, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x3400c940) ioctl$FIBMAP(r5, 0x1, &(0x7f0000002180)=0xfffffc00) socket$kcm(0x29, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000021c0), &(0x7f0000002200)=0x6) fcntl$setflags(r6, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4004804}, 0x40000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x30, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x5}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004005}, 0x48800) 1m18.907971714s ago: executing program 2 (id=142): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresuid(0xee01, 0xee01, 0xee00) syz_io_uring_setup(0x99e, &(0x7f00000000c0)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, &(0x7f0000000080), &(0x7f0000000400)) (async) r0 = syz_io_uring_setup(0x99e, &(0x7f00000000c0)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2000, @fd_index=0x6, 0x9, 0x0, 0x0, 0x1d, 0x1, {0x2}}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2000, @fd_index=0x6, 0x9, 0x0, 0x0, 0x1d, 0x1, {0x2}}) io_uring_enter(r0, 0x1065, 0xce02, 0xf, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x540, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x540, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) creat(0x0, 0x125) semget$private(0x0, 0x5, 0x0) (async) r5 = semget$private(0x0, 0x5, 0x0) semop(r5, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semctl$GETNCNT(r5, 0x3, 0xe, 0x0) (async) semctl$GETNCNT(r5, 0x3, 0xe, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x42, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) (async) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r9) 1m18.78598297s ago: executing program 2 (id=146): openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xfff}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x2800, 0x24000000}, 0x0) 1m18.693528682s ago: executing program 2 (id=148): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket(0xa, 0x3, 0x87) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=0x0]) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000001ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0x0, 0xfffffffd}, 0x10) write(r3, &(0x7f0000000100)="240000001a007f0214f9f4070009040f03000000000000000002000008000f40fe00000e", 0x24) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x89, @multicast}, 0x10) 1m3.294610019s ago: executing program 32 (id=148): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket(0xa, 0x3, 0x87) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=0x0]) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000001ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0x0, 0xfffffffd}, 0x10) write(r3, &(0x7f0000000100)="240000001a007f0214f9f4070009040f03000000000000000002000008000f40fe00000e", 0x24) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x89, @multicast}, 0x10) 51.860021275s ago: executing program 3 (id=346): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@newtaction={0x170, 0x30, 0xc96f2b0dc02613b7, 0x71bd23, 0x25dfdbff, {}, [{0x15c, 0x1, [@m_ife={0xa0, 0xb, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x1ff, 0x8}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10800, 0xffffffff, 0x4, 0x800004, 0xe4}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x31, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad328a4154dd4046c261a61dc99ee70038b3509"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x88, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x5a, 0x6, "1ed0822c77a64017dbc62f5d14d932ebc6c446abdf4e3b55ee394ff3584b3ff2343a4bc881d5a39c75329c72fdd0502d07e3e31ee946760a0bd1b8c15746bc650ea566065111d61657a7809f15e5419a64620bc81588"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (fail_nth: 2) 51.589417302s ago: executing program 3 (id=350): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x18) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001840), 0x3b, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)='$\x00\x00', 0x3}, {&(0x7f0000000240)="a43b2eaab40000000000800065", 0xd}, {&(0x7f0000000080)="f9ae9189eb51dca4", 0x8}], 0x4) sendto$inet(r0, &(0x7f00000002c0)="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", 0x1a7, 0x0, 0x0, 0x2b) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x81, 0xfa, 0x5, 0x20, @empty, @remote, 0x1, 0x7, 0x3ff, 0xf0ab}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0x85, 0x7, 0xfff, 0x40, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x8000, 0x4, 0xf}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'dvmrp0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r4, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1a, &(0x7f0000000940)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) getpeername$packet(r4, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000bc0)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c00)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0xfff3, 0xffe0}, {0xb, 0xb}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x4008010) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x13c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8850}, 0x841) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 49.436320939s ago: executing program 3 (id=360): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in=@remote, 0x0, 0x0, 0xfffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0xe1}, 0x800}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 48.01564596s ago: executing program 3 (id=366): r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x2, 0x13, 0x0, 0x0, 0x4, [@sadb_address={0x5, 0x6, 0x33, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfff, @empty, 0x3}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x41, 0x7d}, @sadb_address={0x5, 0x5, 0x32, 0xa0, 0x0, @in6={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}, @sadb_key={0x1, 0x8}, @sadb_lifetime={0x4, 0x3, 0x8000, 0x8, 0x6, 0xffffffffffffffe1}]}, 0x98}, 0x1, 0x7}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) fallocate(r0, 0x0, 0x0, 0x1001ed) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f00000000c0)={0x32}, 0x8) sendto$inet6(r7, &(0x7f0000000240)="8a", 0x1, 0x80, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x9}, 0x1c) listen(r7, 0x100101) accept4(r7, 0x0, 0x0, 0x80800) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x16a) socket$nl_audit(0x10, 0x3, 0x9) 46.33040354s ago: executing program 3 (id=381): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x503, 0xfffffffe, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000340)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @private=0xa010100}, 0x2, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='dummy0\x00', 0x4, 0xdb, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) 44.929549685s ago: executing program 3 (id=383): syz_emit_ethernet(0xd6, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xa0, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0xf, "1d6ace8f8ca9100083faa1f1a6db56fa1ede4bc5398bd6606aaa671ffdd8e79d60cde5302fa555d0f9e0b2fa0d62fffea7fab292bbcd05812814821553a38e86fe6101bf2c4e313e4f930b10cd9a70cebc77f319c1857ad9d50341d17b5e7857a871249feab9b7b485d93f657e39417fb957d1b7fa15"}]}}}}}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0300001300010000000000000000000c03fd00fc022f80400000000000000048008aaf0bd4c855d7dd02ccc121371d448008f67250dd7a1ec955df284103b2939d0cd500e95fea3826816c8674d75ce18bd582de6f532673bf3fa468dbb799b466"], 0x31c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x29, 0x0, 0x5000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000000400)=""/43, 0x2b) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000180)) preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x21, 0x0) getdents(r2, 0xffffffffffffffff, 0x7a) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 44.929192855s ago: executing program 33 (id=383): syz_emit_ethernet(0xd6, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xa0, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0xf, "1d6ace8f8ca9100083faa1f1a6db56fa1ede4bc5398bd6606aaa671ffdd8e79d60cde5302fa555d0f9e0b2fa0d62fffea7fab292bbcd05812814821553a38e86fe6101bf2c4e313e4f930b10cd9a70cebc77f319c1857ad9d50341d17b5e7857a871249feab9b7b485d93f657e39417fb957d1b7fa15"}]}}}}}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0300001300010000000000000000000c03fd00fc022f80400000000000000048008aaf0bd4c855d7dd02ccc121371d448008f67250dd7a1ec955df284103b2939d0cd500e95fea3826816c8674d75ce18bd582de6f532673bf3fa468dbb799b466"], 0x31c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x29, 0x0, 0x5000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000000400)=""/43, 0x2b) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000180)) preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x21, 0x0) getdents(r2, 0xffffffffffffffff, 0x7a) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 4.572920755s ago: executing program 5 (id=822): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000000000000000000000000000ff0700000000000b"], 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000880)=0x14) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0), 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000980)='syz1\x00', 0x15d002, &(0x7f00000009c0)={@align=0x8, {0x8, 0x9, 0x0, 0x2}}, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)=0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xf, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400040}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x30}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @ldst={0x2, 0x0, 0x3, 0x8, 0x1, 0x40}, @ldst={0x1, 0x3, 0x6, 0x6, 0x4, 0x10, 0x10}, @jmp={0x5, 0x1, 0x7, 0xb, 0x6, 0xffffffffffffffe0, 0x10}, @func, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x51}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x9d, &(0x7f0000000780)=""/157, 0x41100, 0x16, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000900)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0xd, 0xa9, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r1, r4, r1]}, 0x94) r5 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x8800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) sendmsg$NFT_BATCH(r5, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4094}, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r7, 0x10, 0x20000000010003, 0x7) 4.490827249s ago: executing program 5 (id=826): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020605000000000000000001000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = memfd_create(0x0, 0x1) r2 = dup(r1) r3 = memfd_create(0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000000)={0x3, 0x5}) ftruncate(r3, 0xdcb) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x1) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f00000002c0)=""/176) 3.449482719s ago: executing program 6 (id=835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC=r1, @ANYRESHEX=r0], 0x50) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x9) r5 = openat(r4, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r5, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) write(0xffffffffffffffff, &(0x7f0000002e00)="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", 0x1018) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r6, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098", 0x29}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782", 0x97}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea184fd7a0a0f4d441763e30d1bc475502a1de1ffbc0e30c", 0x160}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d46", 0x86}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a2", 0xab}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f0000000700), &(0x7f00000008c0)}, 0x20) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x12, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000004d1811000000000000000000000000006ec9dcc64741fdce31a0b6927eda9ee7ff2456f03db5661dd0fcce3ea074457c0ed888692146f189a8c8f5f7f4efaabbb9ae155bf40406864c528d0b75e3b0bef24841201dd9db0b3ef61a9e46e39564377a995a40b2016bc6a370bc26f28942f5", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000200000018240000", @ANYRES32=r2, @ANYBLOB="0000000004000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x7, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000880)=[r2, r7, r2, r2], &(0x7f0000000740)=[{0x1, 0x1, 0xd, 0x8}, {0x4, 0x4, 0xc, 0x8}, {0x2, 0x1, 0x0, 0x5}, {0x0, 0x4}, {0x2, 0x1, 0x5, 0x9}, {0x1, 0x1, 0x4}, {0x2, 0x1, 0x3, 0xb}]}, 0x94) ioctl$sock_inet_SIOCRTMSG(r6, 0x890d, &(0x7f0000000940)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x70, 0xa}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f0000001d80), &(0x7f0000001d40)=r8}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0f00000004000000040000004700000000000000f846b3a906ef037fbb4b3df55ccb99a624a9263953d1a3ef1bc7f28b423d072d880ab4abb18d7d9dde4466d57ea3a8afc8153b9a498cbd4ab22d1a1aaa218a404a982b8c593fde6fa50063d83dd0723fc59770acc84f071a01ccaf80693fb87ed2d977af7f8864d05f45f0e94baef46a76808004cfedbcebb69536b0fa6b816b84ec6bed4c948a01dc70148ed298f1360c487e9462d85465df1c1822360fbbc3e21c1910b0190661", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r9, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x96) r11 = dup2(r10, r10) ioctl$BLKTRACESTOP(r11, 0x801070cf, 0x0) 2.939768025s ago: executing program 5 (id=841): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000003900070184ffffff00000000047c0000040000000c0001800600060008"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.849126406s ago: executing program 4 (id=845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8bea, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0xe4ff, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 2.848330766s ago: executing program 4 (id=846): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x29}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98, 0xe000}, 0x0) 2.833828704s ago: executing program 5 (id=847): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYRES16=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x8, 0x80000, 0xfffffffd) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x40, 0xfffc, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r9, 0x0, 0x25, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid={'access', 0x3d, r8}}], [], 0x6b}}) getpid() r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30) close(0x3) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.748394377s ago: executing program 4 (id=849): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f0000000100)=0x4) set_mempolicy(0x6005, 0x0, 0x4) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[{@noquota}, {@usrjquota}, {@nodioread_nolock}, {@nolazytime}], [{@smackfshat={'smackfshat', 0x3d, 'nodioread_nolock'}}]}, 0xfe, 0x275, &(0x7f0000000980)="$eJzs3T1onHUcB/Dfcy8mMUGiLoL4AiKigRAHQXDRRSEgIYgIKkREnCQRYoJbzsnFwc5tydQllG5NO5YuoUuha9pmSJcODR0aOrTDleeeu3BJLiS515Ln84HL8/zv/m8H9/0/d8PzTwC5NR4RX0ZEMSImIqIcEUlzhfezx3i9uDqyMRdRrX73OKnVy8qZRrvRiKhExOcRpcZry+s/bT/d/Oaj/5bKH15a/3GkX+8vYnjvbGd769vdizP/Xp3+dLlQf26sfmx+H92UtHiulES80YvBXhJJadAz4CRm/75yN839mxHxQS3/5SjUI/v/4is3y/HJhaPannt05+1+zhXovmq1nF4DK1Ugdwq178BJYTIisvNCYXIy+w5/r5jEHwuLf038vrA0/1vL5aPY9wUL6ESS/jZPf4B/fX3o2uiB/D8sZvk/kc96PFOgJ8Yitr6fXbufnu+6ikM+vJMd0vxP/LLyccg/5I78Q37JP+SX/MMZ0GZ25R/yqzn/Q4OeDNBXrv9whpUbJ5WWL8s/5Jf8Q34dyH8f78cFBq05/wBAvlSHBn0HMjAog15/AAAAAAAAAAAAAAAAAACAw1ZHNuYaj36Neet8xM5XEVHaP362H3mx9v+II4Zrf199kqTV9iRZs478/F6HHXTocpfvvp455Uburz3o7vindfvd3vT7z/7ikXvbrcxHVNLKU6XS4c9/Uv/8HevI/l8/pmH515MN0C3JgfIXP3Sv75U22jxf69747ZjejLiRrj9Trda/QrxVO7Zef8aat1hu05/POuwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvnkRAAD//0x2aeA=") creat(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x84, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000020000100000000000000000102000000020004020000000008000400fbffffff08000db691000000"], 0x2c}}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x15, 0xa, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x4000c005) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010009ba43b7500"/20, @ANYRES32=0x0, @ANYBLOB="0815010021100000140012800b00010069703667726500000400028008000a0043bbf88ff7e505283668417b6779b20ff24e02737a6d6484eeaeee34e96ed2405025e17a", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r6) memfd_create(&(0x7f0000000d40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xd9t\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00'/1641, 0x7) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYBLOB="001828bd7000fcdbdf2502000000050002000a000000cbe1b05df591bdcbb165eadc24f48900a8065c62a95fe4fd5faa7f2c07a4854f0e32b8bc1dd6653a3ae054a32e9bd949b80dc852772a8975d6556a0df5a0f091d1"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000220000032abd7000fcdbdfa50a00000006000002080000e80876fd387b5773ea1666460a03a4ffbb7239df1625b7888427e77c378e8c4f3c2b90708039df40bc141b4193e9a3e7f93011bb48bacbe5ecc1342ebd4f1bf3b0eabfdc01c693a6fa8863dd95d859a19f0681ef2708d66035a173530be51b07e727e1644e8af98b5d2f951380cddb75cabc67b48ee7b6297b8d1c1c446925249c797933153e444d4e0b37aca1ef2244b045da9a2196110b992ce6837b773ef90555bc14d5060d0b19b1"], 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) 2.035896812s ago: executing program 0 (id=851): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xa98, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x25000000, &(0x7f0000000040)=ANY=[@ANYBLOB='size=P']) 1.97296551s ago: executing program 6 (id=852): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000390007018400000000000000047c0000040000000c0001800600060008"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 8) 1.914589098s ago: executing program 0 (id=853): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x85ffffffffffffff, &(0x7f00000000c0), 0x2, 0xbe7, &(0x7f0000002e40)="$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") 1.698427314s ago: executing program 4 (id=854): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @private=0xa010100}, 0x2, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='dummy0\x00', 0x4, 0xdb, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r4 = perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x6, 0xd8, 0x6, 0x0, 0x0, 0xe200, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x100, 0x6, @perf_bp, 0x10030, 0x7, 0x7f, 0x9, 0x3, 0x7, 0x2, 0x0, 0x8, 0x0, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, r4, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) 1.67876784s ago: executing program 0 (id=855): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1.67748005s ago: executing program 5 (id=856): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_cache\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0xf5ff, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41100}, 0x94) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x0, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.62954761s ago: executing program 6 (id=857): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8087, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x144, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000011}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b00070066"], 0x330}}, 0x4008800) 1.62914726s ago: executing program 0 (id=858): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000009940)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2, 0x803, 0x2) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) unshare(0x2e000200) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a9", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009580)=[{{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/245, 0xf5}, {0x0}, {&(0x7f0000002d40)=""/211, 0xd3}, {&(0x7f0000002f00)=""/226, 0xe2}, {&(0x7f0000003000)=""/250, 0xfa}, {0x0}], 0x7}, 0xe868}, {{&(0x7f0000003300)=@can, 0x80, &(0x7f0000003440)=[{&(0x7f0000003380)=""/52, 0x34}, {&(0x7f00000033c0)=""/87, 0x57}], 0x2, &(0x7f0000003480)=""/207, 0xcf}, 0xffffff46}, {{&(0x7f0000003580)=@tipc=@id, 0x80, &(0x7f00000047c0)}, 0x4000000}, {{&(0x7f0000004840)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000005cc0)=""/4096, 0x1000}, 0xc}, {{&(0x7f0000006cc0)=@nl=@proc, 0x80, &(0x7f0000008fc0), 0x0, &(0x7f0000009040)=""/13, 0xd}, 0xc53}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000009180)=""/241, 0xf1}, 0x1}, {{&(0x7f0000009280)=@can={0x1d, 0x0}, 0x80, &(0x7f0000009540)}, 0x5}], 0x7, 0x12163, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008007c00000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000097c0), r0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x40001) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x0, &(0x7f0000000240)={0x1, 0xf, 0x0, 0x2c5}, 0x8, 0x8, 0x0, 0x0, 0x2000, 0x200001, 0x0}) syz_mount_image$vfat(&(0x7f00000098c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000009900)=ANY=[@ANYRES16=r3, @ANYRES64=r6], 0x1, 0x385, &(0x7f00000006c0)="$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") 1.466460147s ago: executing program 1 (id=859): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400010000000900020073797a32000000001400078005001500180000000800124010b8b05f0500050002000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) mmap(&(0x7f0000191000/0x3000)=nil, 0x3000, 0x300000b, 0xa0050, 0xffffffffffffffff, 0xec772000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="07030500e3a20200140012800c0001006d616376746170000400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.411616026s ago: executing program 6 (id=860): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet_icmp(0x2, 0x2, 0x1) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000ffe000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.185435431s ago: executing program 1 (id=861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x48040) r2 = socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050003000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000002e00)=ANY=[@ANYBLOB="30010000", @ANYRES16, @ANYBLOB="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", @ANYRES32=r5], 0x130}, 0x1, 0x0, 0x0, 0x48884}, 0x40000) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'netpci0\x00', 0xfffffffa}) 1.185069501s ago: executing program 6 (id=862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2e001cc7", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="080039000900000008003c0003000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc411d5ec38469fdd}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) io_setup(0x2, &(0x7f0000000000)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x45c, &(0x7f00000010c0)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)='%-5lx \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x7f, 0x9, 0xffffffff, 0xe, @remote, @mcast1, 0x1, 0x1, 0xb6, 0x6}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000000340)={0x16, 0xffffffffffffff44, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x20}, {0x6, 0x0, 0xfd, 0x909f}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x443}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000520004002dbd7000fddbdf251c08000100", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00'], 0x1c}}, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r10, &(0x7f0000000440)={0x2, 0x4e24, @empty}, 0x10) io_submit(r5, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x12, 0x80}, 0x0, 0x0, 0x200, 0x120000000, 0x23, 0x0, 0x8, 0x101, 0x4, 0x7f}) 854.837573ms ago: executing program 0 (id=863): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x9, 0x6, "c76b72", 0x5, 0x11, 0x0, @local, @private2, [], "96b24e2389907a94"}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x181140, 0x49) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x39507b0eca10a17b}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x4024) io_submit(0x0, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x0, 0x0, r2, 0x0, 0x0, 0x600}]) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800002018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x105e, &(0x7f0000002500)=""/4098, 0x41100}, 0x94) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@broadcast, @rand_addr=0x64010100, 0x1, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @rand_addr=0x64010100]}, 0x20) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 853.698233ms ago: executing program 1 (id=864): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x80, 0x6, 0x3, 0xffffffff, 0x5, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x10800, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x0, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e23, 0x0, 'rr\x00', 0x12, 0x8000, 0x51}, {@remote, 0x4e24, 0x4, 0x3f, 0x5, 0x4}}, 0x44) rt_tgsigqueueinfo(0x0, r1, 0x1b, &(0x7f00000007c0)={0x31, 0x2, 0xc2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 669.450616ms ago: executing program 0 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f0000000100)=0x4) set_mempolicy(0x6005, 0x0, 0x4) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[{@noquota}, {@usrjquota}, {@nodioread_nolock}, {@nolazytime}], [{@smackfshat={'smackfshat', 0x3d, 'nodioread_nolock'}}]}, 0xfe, 0x275, &(0x7f0000000980)="$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") creat(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x84, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000020000100000000000000000102000000020004020000000008000400fbffffff08000db691000000"], 0x2c}}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x15, 0xa, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x4000c005) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010009ba43b7500"/20, @ANYRES32=0x0, @ANYBLOB="0815010021100000140012800b00010069703667726500000400028008000a0043bbf88ff7e505283668417b6779b20ff24e02737a6d6484eeaeee34e96ed2405025e17a", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r6) memfd_create(&(0x7f0000000d40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xd9t\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00'/1641, 0x7) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYBLOB="001828bd7000fcdbdf2502000000050002000a000000cbe1b05df591bdcbb165eadc24f48900a8065c62a95fe4fd5faa7f2c07a4854f0e32b8bc1dd6653a3ae054a32e9bd949b80dc852772a8975d6556a0df5a0f091d1"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000220000032abd7000fcdbdfa50a00000006000002080000e80876fd387b5773ea1666460a03a4ffbb7239df1625b7888427e77c378e8c4f3c2b90708039df40bc141b4193e9a3e7f93011bb48bacbe5ecc1342ebd4f1bf3b0eabfdc01c693a6fa8863dd95d859a19f0681ef2708d66035a173530be51b07e727e1644e8af98b5d2f951380cddb75cabc67b48ee7b6297b8d1c1c446925249c797933153e444d4e0b37aca1ef2244b045da9a2196110b992ce6837b773ef90555bc14d5060d0b19b1"], 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) 612.644404ms ago: executing program 1 (id=866): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x200000001, 0x43a1bd76, 0x7, 0xffffffffffffffff, 0x6, 0x2, 0x0, 0x2, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, {0x1}}) r6 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000940)={0x2, 0x4e22, @broadcast}, 0x10) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) 536.107159ms ago: executing program 5 (id=867): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYRES16=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x8, 0x80000, 0xfffffffd) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x40, 0xfffc, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) 365.466915ms ago: executing program 4 (id=868): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 213.523194ms ago: executing program 1 (id=869): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 132.923198ms ago: executing program 1 (id=870): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x1ff, 0x1, 0xec, 0x2, 0x8, 0x0, 0x1, 0x1}) clock_adjtime(0x6, &(0x7f0000000180)={0x3800000000000, 0xd95, 0x3, 0x0, 0xffffffffffffffff, 0x1000, 0xf2, 0x2, 0x1, 0xff, 0x10000, 0x3, 0x55cb, 0x12, 0xac, 0x100, 0x59d, 0x7, 0x7f, 0x1, 0x9, 0x4, 0x0, 0x0, 0x0, 0x7}) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x18, 0x3a, 0x229, 0x0, 0x25dfdbfa, {0xa}, [@typed={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000020601020000000000000000070000000500010007000000050001000700050000009e0883587612d63d4d5cfa0143de103967cd78cd852d1cf9ed61b08f34478540a601000000000000002bbece155c32ece20039968f7f26b1695d5147ae57bc1a54e141e753fe442610a18e24d9679f3f5b790df24d836dc85b21427653961b871b3da8dc2da2f0241bfc21a21ed167aa711a09a3e182f773b58ebd6528d2249bde83435d1d4b3216a5005c43b28c6fe43955fa28e6aa9cccf2a99db93e81c000427f1bea6f54da22dd6ef9c97a"], 0x2c}, 0x1, 0x0, 0x0, 0x24050004}, 0x20008000) 105.154332ms ago: executing program 4 (id=871): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a000000000000000000", 0x28}], 0x1) 0s ago: executing program 6 (id=872): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0006000000000000240012800b00010067656e6576650000140002"], 0x94}, 0x1, 0x2}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, 0xfffffffffffffffd, 0x4001) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000004580)=ANY=[@ANYBLOB="7c0000560406050000000000000010000700000900020073797a3100000000050001000700000005000100070000000900020073797a30000000000900020073797a32000000000900020073797a31000000000900020073797a30000000000500010007000000050001000700da00"], 0x7c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4048044) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r3, r3) getpid() (async) r4 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@initdev, @in6}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r7) socket$inet_tcp(0x2, 0x1, 0x0) syz_socket_connect_nvme_tcp() socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r7, @ANYRES8=r4], 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) recvmmsg$unix(r8, &(0x7f00000003c0), 0x0, 0x0, 0x0) gettid() (async) gettid() fstat(r2, &(0x7f0000004200)) (async) fstat(r2, &(0x7f0000004200)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004280), &(0x7f00000042c0)=0xc) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000003c0)) gettid() (async) r9 = gettid() rt_sigqueueinfo(r9, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000043c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000043c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getuid() getgid() socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) kernel console output (not intermixed with test programs): m_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.176071][ T28] audit: type=1400 audit(1771994897.574:237): avc: denied { getopt } for pid=3766 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.686144][ T3756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 55.813741][ T3800] netlink: 68 bytes leftover after parsing attributes in process `syz.3.90'. [ 55.831362][ T3800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.90'. [ 56.135552][ T3809] loop3: detected capacity change from 0 to 1024 [ 56.218404][ T3809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.863357][ T3831] xt_hashlimit: size too large, truncated to 1048576 [ 56.877669][ T3833] loop1: detected capacity change from 0 to 512 [ 56.905242][ T3833] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.998813][ T3833] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.999305][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.016534][ T3833] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 57.052941][ T3833] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 57.071327][ T3833] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.99: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 57.100781][ T3839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 57.116049][ T3833] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 57.116292][ T3833] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.99: couldn't read orphan inode 13 (err -117) [ 57.125509][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 57.125535][ C0] EXT4-fs (loop1): last error at time 1771994901: ext4_ext_check_inode:521: inode 13 [ 57.159531][ T3833] loop1: lost filesystem error report for type 5 error -117 [ 57.160887][ T3833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.196901][ T3833] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 57.258290][ T3833] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 57.505647][ T3861] loop4: detected capacity change from 0 to 256 [ 57.539298][ T3861] FAT-fs (loop4): Directory bread(block 64) failed [ 57.546085][ T3861] FAT-fs (loop4): Directory bread(block 65) failed [ 57.552783][ T3861] FAT-fs (loop4): Directory bread(block 66) failed [ 57.559441][ T3861] FAT-fs (loop4): Directory bread(block 67) failed [ 57.566042][ T3861] FAT-fs (loop4): Directory bread(block 68) failed [ 57.572697][ T3861] FAT-fs (loop4): Directory bread(block 69) failed [ 57.579453][ T3861] FAT-fs (loop4): Directory bread(block 70) failed [ 57.586175][ T3861] FAT-fs (loop4): Directory bread(block 71) failed [ 57.592775][ T3861] FAT-fs (loop4): Directory bread(block 72) failed [ 57.599544][ T3861] FAT-fs (loop4): Directory bread(block 73) failed [ 57.740385][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.062584][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 59.062609][ T28] audit: type=1400 audit(1771994903.454:249): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 59.153628][ T3871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.109'. [ 59.240236][ T28] audit: type=1400 audit(1771994903.634:250): avc: denied { create } for pid=3872 comm="syz.4.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.328508][ T28] audit: type=1400 audit(1771994903.654:251): avc: denied { write } for pid=3872 comm="syz.4.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.504035][ T3823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 59.533201][ T3883] loop1: detected capacity change from 0 to 512 [ 59.575033][ T3885] gre1: entered promiscuous mode [ 59.580122][ T3885] gre1: entered allmulticast mode [ 59.633425][ T3883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.646154][ T3883] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.658318][ T28] audit: type=1400 audit(1771994904.054:252): avc: denied { read write } for pid=3882 comm="syz.1.113" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.693876][ T3883] netlink: 'syz.1.113': attribute type 6 has an invalid length. [ 59.824059][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.855800][ T28] audit: type=1400 audit(1771994904.084:253): avc: denied { open } for pid=3882 comm="syz.1.113" path="/22/bus/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.196861][ T3905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'. [ 60.339405][ T3913] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 60.346012][ T3913] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 60.362628][ T3913] vhci_hcd vhci_hcd.0: Device attached [ 60.382603][ T28] audit: type=1326 audit(1771995160.785:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c0dc629 code=0x7ffc0000 [ 60.428870][ T3914] loop4: detected capacity change from 0 to 512 [ 60.429548][ T3920] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 60.439700][ T3914] msdos: Bad value for 'uid' [ 60.449655][ T28] audit: type=1326 audit(1771995160.785:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c0dc629 code=0x7ffc0000 [ 60.462475][ T3920] SELinux: failed to load policy [ 60.479116][ T3914] msdos: Bad value for 'uid' [ 60.490301][ T28] audit: type=1326 audit(1771995160.785:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff20c0dc629 code=0x7ffc0000 [ 60.513994][ T28] audit: type=1326 audit(1771995160.785:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c0dc629 code=0x7ffc0000 [ 60.539764][ T3915] usbip_core: unknown command [ 60.542156][ T28] audit: type=1326 audit(1771995160.785:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff20c0dc629 code=0x7ffc0000 [ 60.567839][ T3389] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 60.579684][ T3915] vhci_hcd: unknown pdu 0 [ 60.587670][ T3915] usbip_core: unknown command [ 60.595099][ T83] vhci_hcd vhci_hcd.3: stop threads [ 60.600364][ T83] vhci_hcd vhci_hcd.3: release socket [ 60.606321][ T83] vhci_hcd vhci_hcd.3: disconnect device [ 60.632755][ T3389] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 60.640309][ T3389] usb 7-1: enqueue for inactive port 0 [ 60.652832][ T3389] usb 7-1: enqueue for inactive port 0 [ 60.670760][ T3389] usb 7-1: enqueue for inactive port 0 [ 60.752620][ T3389] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 61.160780][ T3953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'. [ 62.061638][ T3968] sctp: [Deprecated]: syz.2.137 (pid 3968) Use of int in maxseg socket option. [ 62.061638][ T3968] Use struct sctp_assoc_value instead [ 63.684920][ T3922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 64.932116][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 64.932141][ T28] audit: type=1400 audit(1771995165.325:308): avc: denied { create } for pid=4021 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 65.105657][ T28] audit: type=1400 audit(1771995165.385:309): avc: denied { sys_admin } for pid=4021 comm="syz.1.154" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 65.131188][ T28] audit: type=1400 audit(1771995165.535:310): avc: denied { read open } for pid=4039 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.131278][ T28] audit: type=1400 audit(1771995165.535:311): avc: denied { getattr } for pid=4039 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.240230][ T28] audit: type=1400 audit(1771995165.635:312): avc: denied { perfmon } for pid=4046 comm="syz.4.157" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.281054][ T28] audit: type=1400 audit(1771995165.675:313): avc: denied { bpf } for pid=4050 comm="syz.1.158" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.331722][ T28] audit: type=1400 audit(1771995165.725:314): avc: denied { add_name } for pid=4037 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.387415][ T28] audit: type=1400 audit(1771995165.785:315): avc: denied { create } for pid=4055 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.432619][ T28] audit: type=1400 audit(1771995165.825:316): avc: denied { remove_name } for pid=4057 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=1421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.517713][ T28] audit: type=1400 audit(1771995165.915:317): avc: denied { module_request } for pid=4065 comm="syz.4.162" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.633388][ T4081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.653749][ T4081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.976715][ T4089] loop1: detected capacity change from 0 to 1024 [ 66.035118][ T4089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.106391][ T4090] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.164: inode #8192: comm syz.1.164: iget: illegal inode # [ 66.120931][ T4090] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.164: error while reading EA inode 8192 err=-117 [ 67.852259][ T4029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 67.891243][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.012901][ T23] hid-generic E0BC:750F9D4:3927ECF2.0001: unknown main item tag 0x0 [ 69.023257][ T23] hid-generic E0BC:750F9D4:3927ECF2.0001: unknown main item tag 0x0 [ 69.031587][ T23] hid-generic E0BC:750F9D4:3927ECF2.0001: unknown main item tag 0x0 [ 69.110620][ T23] hid-generic E0BC:750F9D4:3927ECF2.0001: unknown main item tag 0x0 [ 69.132759][ T23] hid-generic E0BC:750F9D4:3927ECF2.0001: unknown main item tag 0x0 [ 69.140955][ T23] hid-generic E0BC:750F9D4:3927ECF2.0001: unknown main item tag 0x0 [ 69.149057][ T23] hid-generic E0BC:750F9D4:3927ECF2.0001: unknown main item tag 0x0 [ 69.157186][ T23] hid-generic E0BC:750F9D4:3927ECF2.0001: unknown main item tag 0x0 [ 69.165352][ T23] hid-generic E0BC:750F9D4:3927ECF2.0001: unknown main item tag 0x0 [ 69.173539][ T23] hid-generic E0BC:750F9D4:3927ECF2.0001: unknown main item tag 0x0 [ 69.184723][ T23] hid-generic E0BC:750F9D4:3927ECF2.0001: hidraw0: HID v57acf7.db Device [syz1] on syz0 [ 69.244636][ T4172] fido_id[4172]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.617606][ T4195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.717316][ T4195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.532584][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 71.532608][ T28] audit: type=1400 audit(1771995171.915:328): avc: denied { create } for pid=4220 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.604554][ T28] audit: type=1400 audit(1771995171.915:329): avc: denied { setopt } for pid=4220 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.608784][ T4223] netlink: 68 bytes leftover after parsing attributes in process `syz.0.189'. [ 71.638956][ T28] audit: type=1400 audit(1771995171.925:330): avc: denied { read } for pid=4220 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.662086][ T28] audit: type=1400 audit(1771995171.925:331): avc: denied { write } for pid=4220 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.760232][ T28] audit: type=1400 audit(1771995172.155:332): avc: denied { connect } for pid=4224 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.785841][ T28] audit: type=1400 audit(1771995172.175:333): avc: denied { setopt } for pid=4224 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.806140][ T28] audit: type=1400 audit(1771995172.175:334): avc: denied { bind } for pid=4224 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.825833][ T28] audit: type=1400 audit(1771995172.175:335): avc: denied { write } for pid=4224 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.972654][ T28] audit: type=1400 audit(1771995172.345:336): avc: denied { read } for pid=4224 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.038263][ T28] audit: type=1400 audit(1771995172.435:337): avc: denied { getopt } for pid=4236 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.229334][ T4242] loop4: detected capacity change from 0 to 512 [ 72.264989][ T4244] FAULT_INJECTION: forcing a failure. [ 72.264989][ T4244] name failslab, interval 1, probability 0, space 0, times 0 [ 72.277882][ T4244] CPU: 0 UID: 0 PID: 4244 Comm: syz.4.196 Not tainted syzkaller #0 PREEMPT(full) [ 72.277940][ T4244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.277951][ T4244] Call Trace: [ 72.277957][ T4244] [ 72.277964][ T4244] __dump_stack+0x1d/0x30 [ 72.277988][ T4244] dump_stack_lvl+0x95/0xd0 [ 72.278008][ T4244] dump_stack+0x15/0x1b [ 72.278084][ T4244] should_fail_ex+0x263/0x280 [ 72.278103][ T4244] should_failslab+0x8c/0xb0 [ 72.278120][ T4244] __kmalloc_noprof+0xb8/0x4e0 [ 72.278138][ T4244] ? io_cache_alloc_new+0x2a/0xb0 [ 72.278161][ T4244] io_cache_alloc_new+0x2a/0xb0 [ 72.278212][ T4244] __io_prep_rw+0x116/0x710 [ 72.278235][ T4244] ? io_req_normal_work_add+0x184/0x280 [ 72.278253][ T4244] io_prep_read+0x31/0xe0 [ 72.278329][ T4244] io_submit_sqes+0x75a/0x1270 [ 72.278360][ T4244] __se_sys_io_uring_enter+0x1c9/0xf50 [ 72.278385][ T4244] ? __fget_files+0x184/0x1c0 [ 72.278450][ T4244] ? mutex_unlock+0x4e/0x90 [ 72.278539][ T4244] ? fput+0x8f/0xc0 [ 72.278561][ T4244] __x64_sys_io_uring_enter+0x78/0x90 [ 72.278591][ T4244] x64_sys_call+0x1e16/0x3020 [ 72.278732][ T4244] do_syscall_64+0x12c/0x370 [ 72.278764][ T4244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.278803][ T4244] RIP: 0033:0x7ff20c0dc629 [ 72.278829][ T4244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.278987][ T4244] RSP: 002b:00007ff20ab2f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 72.279005][ T4244] RAX: ffffffffffffffda RBX: 00007ff20c355fa0 RCX: 00007ff20c0dc629 [ 72.279017][ T4244] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 72.279028][ T4244] RBP: 00007ff20ab2f090 R08: 0000000000000000 R09: 0000000000000000 [ 72.279040][ T4244] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 72.279051][ T4244] R13: 00007ff20c356038 R14: 00007ff20c355fa0 R15: 00007ffcae9ea7c8 [ 72.279137][ T4244] [ 72.331342][ T4182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.665244][ T4258] netlink: 68 bytes leftover after parsing attributes in process `syz.0.201'. [ 73.627688][ T4280] netlink: 404 bytes leftover after parsing attributes in process `syz.0.206'. [ 73.636789][ T4280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.206'. [ 73.645947][ T4280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.206'. [ 73.655157][ T4280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.206'. [ 73.729738][ T4285] openvswitch: netlink: Missing key (keys=40, expected=80) [ 73.758257][ T4286] loop1: detected capacity change from 0 to 128 [ 73.783566][ T4286] vfat: Unknown parameter '4' [ 73.886698][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.900320][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.310442][ T4313] loop1: detected capacity change from 0 to 128 [ 74.321903][ T4313] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.334777][ T4313] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.455107][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.586463][ T4328] netlink: 68 bytes leftover after parsing attributes in process `syz.1.218'. [ 75.695991][ T4332] loop1: detected capacity change from 0 to 128 [ 76.982215][ T4291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.991088][ T4341] loop1: detected capacity change from 0 to 4096 [ 77.018935][ T4341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.048489][ T4349] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.075808][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 77.075825][ T28] audit: type=1400 audit(1771995177.267:340): avc: denied { read } for pid=4346 comm="syz.4.225" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 77.108476][ T28] audit: type=1400 audit(1771995177.267:341): avc: denied { open } for pid=4346 comm="syz.4.225" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 77.139838][ T4341] netlink: 52 bytes leftover after parsing attributes in process `syz.1.222'. [ 77.158404][ T28] audit: type=1400 audit(1771995177.351:342): avc: denied { ioctl } for pid=4340 comm="syz.1.222" path="/48/file0/file0/file0" dev="loop1" ino=13 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.186900][ T4341] ipip0: entered promiscuous mode [ 77.194728][ T4341] bridge_slave_1: default FDB implementation only supports local addresses [ 77.222799][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.580673][ T4365] netlink: 56 bytes leftover after parsing attributes in process `syz.0.230'. [ 78.565009][ T28] audit: type=1400 audit(1771995178.661:343): avc: denied { read } for pid=4389 comm="syz.4.237" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.599158][ T28] audit: type=1326 audit(1771995178.689:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4391 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 78.627241][ T28] audit: type=1326 audit(1771995178.689:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4391 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 78.651061][ T28] audit: type=1326 audit(1771995178.689:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4391 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 78.674887][ T28] audit: type=1326 audit(1771995178.689:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4391 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 78.698243][ T28] audit: type=1326 audit(1771995178.689:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4391 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 78.707651][ T4397] tmpfs: Unknown parameter 'context6¿LòÃgñæ9¤†ª“1`w÷AšÙuújÍái#áôa•' [ 78.722064][ T28] audit: type=1326 audit(1771995178.689:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4391 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 78.802263][ T4401] loop3: detected capacity change from 0 to 128 [ 78.832125][ T4402] netlink: 56 bytes leftover after parsing attributes in process `syz.0.241'. [ 78.845459][ T4401] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.857817][ T4401] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.880826][ T4406] openvswitch: netlink: Missing key (keys=40, expected=80) [ 79.234558][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.692990][ T4445] netlink: 56 bytes leftover after parsing attributes in process `syz.3.254'. [ 80.321889][ T4465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.259'. [ 80.358190][ T30] bridge_slave_1: left allmulticast mode [ 80.367719][ T30] bridge_slave_1: left promiscuous mode [ 80.374334][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.383511][ T30] bridge_slave_0: left allmulticast mode [ 80.389399][ T30] bridge_slave_0: left promiscuous mode [ 80.395415][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.473488][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.483574][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.492844][ T30] bond0 (unregistering): Released all slaves [ 80.510288][ T4477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.259'. [ 80.583621][ T30] hsr_slave_0: left promiscuous mode [ 80.616724][ T30] hsr_slave_1: left promiscuous mode [ 80.624538][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.632928][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.703833][ T4506] netlink: 52 bytes leftover after parsing attributes in process `syz.4.266'. [ 81.839549][ T30] team0 (unregistering): Port device team_slave_1 removed [ 81.850018][ T30] team0 (unregistering): Port device team_slave_0 removed [ 82.987303][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 82.987322][ T28] audit: type=1400 audit(1771995182.798:381): avc: denied { read } for pid=4515 comm="syz.4.268" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.018302][ T4511] loop3: detected capacity change from 0 to 136 [ 83.642297][ T28] audit: type=1400 audit(1771995183.406:382): avc: denied { open } for pid=4515 comm="syz.4.268" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.695468][ T4511] Attempt to read inode for relocated directory [ 83.812711][ T28] audit: type=1400 audit(1771995183.481:383): avc: denied { mount } for pid=4496 comm="syz.3.265" name="/" dev="loop3" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 83.889012][ T28] audit: type=1400 audit(1771995183.500:384): avc: denied { watch watch_reads } for pid=4496 comm="syz.3.265" path="/54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=1487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 84.040541][ T28] audit: type=1400 audit(1771995183.786:385): avc: denied { read } for pid=3040 comm="dhcpcd" name="n27" dev="tmpfs" ino=1847 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.090100][ T28] audit: type=1400 audit(1771995183.786:386): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=1847 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.131956][ T28] audit: type=1400 audit(1771995183.786:387): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=1847 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.160705][ T28] audit: type=1400 audit(1771995183.814:388): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 84.253840][ T28] audit: type=1400 audit(1771995183.983:389): avc: denied { name_bind } for pid=4546 comm="syz.0.274" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 84.267834][ T4441] chnl_net:caif_netlink_parms(): no params data found [ 84.422926][ T28] audit: type=1400 audit(1771995184.132:390): avc: denied { create } for pid=4533 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.451791][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.575998][ T4569] netlink: 52 bytes leftover after parsing attributes in process `syz.0.277'. [ 84.852458][ T4575] netlink: 'syz.0.279': attribute type 21 has an invalid length. [ 84.955837][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.966391][ T4441] bridge_slave_0: entered allmulticast mode [ 84.976248][ T4441] bridge_slave_0: entered promiscuous mode [ 84.993524][ T4575] netlink: 132 bytes leftover after parsing attributes in process `syz.0.279'. [ 85.021503][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.037291][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.107422][ T4441] bridge_slave_1: entered allmulticast mode [ 85.114475][ T4441] bridge_slave_1: entered promiscuous mode [ 85.136005][ T4441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.146812][ T4441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.173629][ T4441] team0: Port device team_slave_0 added [ 85.180637][ T4441] team0: Port device team_slave_1 added [ 85.218592][ T4441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.230932][ T4441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.262232][ T4441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.273713][ T4441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.280814][ T4441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.307002][ T4441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.358425][ T4609] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 85.367732][ T4609] team0: Port device batadv2 added [ 85.479379][ T4441] hsr_slave_0: entered promiscuous mode [ 85.493317][ T4441] hsr_slave_1: entered promiscuous mode [ 85.504234][ T4441] debugfs: 'hsr0' already exists in 'hsr' [ 85.510756][ T4441] Cannot create hsr debugfs directory [ 85.583730][ T4612] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 85.669118][ T4441] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.695287][ T4441] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.729226][ T4441] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.754117][ T4441] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.769462][ T4648] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.838623][ T4648] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.876992][ T4441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.889478][ T4441] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.928005][ T4648] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.988257][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.995422][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.012737][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.019934][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.038410][ T4648] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.078766][ T4441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.153146][ T4441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.192676][ T383] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.253422][ T30] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.312595][ T83] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.443283][ T83] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.695883][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 86.718309][ T4701] vlan2: entered promiscuous mode [ 86.724300][ T4701] team0: entered promiscuous mode [ 86.729425][ T4701] team_slave_0: entered promiscuous mode [ 86.735221][ T4701] team_slave_1: entered promiscuous mode [ 86.740974][ T4701] batadv2: entered promiscuous mode [ 86.821106][ T4441] veth0_vlan: entered promiscuous mode [ 86.841701][ T4441] veth1_vlan: entered promiscuous mode [ 86.874279][ T4441] veth0_macvtap: entered promiscuous mode [ 86.902509][ T4441] veth1_macvtap: entered promiscuous mode [ 86.917828][ T4441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.938016][ T4441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.981496][ T4731] xt_TPROXY: Can be used only with -p tcp or -p udp [ 87.000742][ T4717] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.029606][ T4717] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.041867][ T4717] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.050729][ T4717] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.068645][ T4738] tipc: Started in network mode [ 87.073874][ T4738] tipc: Node identity 000000000000ff000000000000000001, cluster identity 4711 [ 87.083268][ T4738] tipc: Enabling of bearer rejected, failed to enable media [ 87.163473][ T4740] loop3: detected capacity change from 0 to 1024 [ 87.198080][ T4740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 87.231753][ T4740] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.256118][ T4750] usb usb7: usbfs: process 4750 (syz.4.313) did not claim interface 0 before use [ 87.270789][ T4748] loop5: detected capacity change from 0 to 1024 [ 87.288320][ T4740] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.311: lblock 0 mapped to illegal pblock 0 (length 6) [ 87.307124][ T4748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.341539][ T4740] EXT4-fs error (device loop3): ext4_ext_remove_space:2954: inode #15: comm syz.3.311: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 87.378361][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.388348][ T4717] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.463711][ T4758] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.311: lblock 0 mapped to illegal pblock 0 (length 1) [ 87.480050][ T4758] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 87.493161][ T4758] EXT4-fs (loop3): This should not happen!! Data will be lost [ 87.493161][ T4758] [ 87.539901][ T4764] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 88.462472][ T4746] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 88.609930][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.672022][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 88.672041][ T28] audit: type=1326 audit(1771995188.119:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 88.736045][ T4779] netlink: 'syz.3.320': attribute type 12 has an invalid length. [ 88.762104][ T4779] netlink: 248 bytes leftover after parsing attributes in process `syz.3.320'. [ 88.814763][ T4780] netlink: 840 bytes leftover after parsing attributes in process `syz.4.319'. [ 88.848121][ T4780] netlink: 'syz.4.319': attribute type 4 has an invalid length. [ 89.439095][ T4794] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4794 comm=syz.3.326 [ 89.481606][ T28] audit: type=1326 audit(1771995188.119:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 89.507940][ T28] audit: type=1326 audit(1771995188.119:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 89.532425][ T28] audit: type=1326 audit(1771995188.119:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 89.556039][ T28] audit: type=1326 audit(1771995188.119:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 89.579604][ T3638] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.605671][ T28] audit: type=1326 audit(1771995188.128:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 89.628948][ T28] audit: type=1326 audit(1771995188.128:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 89.652892][ T28] audit: type=1326 audit(1771995188.128:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 89.676370][ T28] audit: type=1326 audit(1771995188.128:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 89.699962][ T28] audit: type=1326 audit(1771995188.147:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe241fbc629 code=0x7ffc0000 [ 89.710264][ T4803] netlink: 'syz.1.329': attribute type 10 has an invalid length. [ 89.724272][ T4802] bridge_slave_0: left allmulticast mode [ 89.738015][ T4802] bridge_slave_0: left promiscuous mode [ 89.743831][ T4802] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.759746][ T4802] bridge_slave_1: left allmulticast mode [ 89.765704][ T4802] bridge_slave_1: left promiscuous mode [ 89.772063][ T4802] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.798416][ T4802] bond0: (slave bond_slave_0): Releasing backup interface [ 89.808565][ T4802] bond0: (slave bond_slave_1): Releasing backup interface [ 89.819884][ T4802] team_slave_0: left promiscuous mode [ 89.827688][ T4802] team0: Port device team_slave_0 removed [ 89.835679][ T4802] team_slave_1: left promiscuous mode [ 89.843623][ T4802] team0: Port device team_slave_1 removed [ 89.855675][ T4802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.864893][ T4802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.875341][ T4802] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 89.901386][ T4803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.909620][ T4803] bond0: entered promiscuous mode [ 89.915714][ T4803] team0: Port device bond0 added [ 90.533461][ T4833] 9pnet_fd: Insufficient options for proto=fd [ 90.592781][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 90.646015][ T4839] geneve2: entered promiscuous mode [ 90.659533][ T4722] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.671950][ T4722] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.701190][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.714804][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.779720][ T4854] FAULT_INJECTION: forcing a failure. [ 90.779720][ T4854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.801874][ T4854] CPU: 1 UID: 0 PID: 4854 Comm: syz.3.346 Not tainted syzkaller #0 PREEMPT(full) [ 90.801904][ T4854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.801916][ T4854] Call Trace: [ 90.801922][ T4854] [ 90.801931][ T4854] __dump_stack+0x1d/0x30 [ 90.801966][ T4854] dump_stack_lvl+0x95/0xd0 [ 90.802068][ T4854] dump_stack+0x15/0x1b [ 90.802099][ T4854] should_fail_ex+0x263/0x280 [ 90.802127][ T4854] should_fail+0xb/0x20 [ 90.802150][ T4854] should_fail_usercopy+0x1a/0x20 [ 90.802230][ T4854] _copy_from_user+0x1c/0xb0 [ 90.802264][ T4854] ___sys_recvmsg+0xaa/0x3b0 [ 90.802312][ T4854] do_recvmmsg+0x1ef/0x560 [ 90.802403][ T4854] ? get_timespec64+0xd2/0x100 [ 90.802433][ T4854] __x64_sys_recvmmsg+0xfb/0x170 [ 90.802472][ T4854] x64_sys_call+0x80f/0x3020 [ 90.802568][ T4854] do_syscall_64+0x12c/0x370 [ 90.802619][ T4854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.802698][ T4854] RIP: 0033:0x7fe241fbc629 [ 90.802720][ T4854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.802744][ T4854] RSP: 002b:00007fe240a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 90.802770][ T4854] RAX: ffffffffffffffda RBX: 00007fe242235fa0 RCX: 00007fe241fbc629 [ 90.802863][ T4854] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 90.802880][ T4854] RBP: 00007fe240a17090 R08: 0000200000003700 R09: 0000000000000000 [ 90.802898][ T4854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.802914][ T4854] R13: 00007fe242236038 R14: 00007fe242235fa0 R15: 00007ffc9828d378 [ 90.802955][ T4854] [ 91.063123][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 91.094480][ T4865] macvlan2: entered promiscuous mode [ 91.099829][ T4865] macvlan2: entered allmulticast mode [ 91.105474][ T4865] veth0_virt_wifi: entered allmulticast mode [ 91.636887][ T4873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.348'. [ 92.861849][ T4888] netlink: 60 bytes leftover after parsing attributes in process `syz.5.356'. [ 92.871708][ T4888] netlink: 44 bytes leftover after parsing attributes in process `syz.5.356'. [ 93.192658][ T4902] FAULT_INJECTION: forcing a failure. [ 93.192658][ T4902] name failslab, interval 1, probability 0, space 0, times 0 [ 93.223362][ T4902] CPU: 0 UID: 0 PID: 4902 Comm: syz.1.359 Not tainted syzkaller #0 PREEMPT(full) [ 93.223395][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.223408][ T4902] Call Trace: [ 93.223487][ T4902] [ 93.223496][ T4902] __dump_stack+0x1d/0x30 [ 93.223529][ T4902] dump_stack_lvl+0x95/0xd0 [ 93.223555][ T4902] dump_stack+0x15/0x1b [ 93.223670][ T4902] should_fail_ex+0x263/0x280 [ 93.223698][ T4902] should_failslab+0x8c/0xb0 [ 93.223720][ T4902] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 93.223751][ T4902] ? sidtab_sid2str_get+0xa0/0x130 [ 93.223778][ T4902] kmemdup_noprof+0x2b/0x70 [ 93.223878][ T4902] sidtab_sid2str_get+0xa0/0x130 [ 93.223902][ T4902] security_sid_to_context_core+0x1eb/0x2e0 [ 93.224037][ T4902] security_sid_to_context+0x27/0x40 [ 93.224071][ T4902] selinux_lsmprop_to_secctx+0x67/0xf0 [ 93.224103][ T4902] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 93.224209][ T4902] audit_log_subj_ctx+0xa4/0x3e0 [ 93.224246][ T4902] ? skb_put+0xa9/0xf0 [ 93.224271][ T4902] audit_log_task_context+0x48/0x70 [ 93.224295][ T4902] audit_log_task+0xf3/0x250 [ 93.224403][ T4902] audit_seccomp+0x60/0x100 [ 93.224496][ T4902] ? __seccomp_filter+0x8db/0x1350 [ 93.224525][ T4902] __seccomp_filter+0x8ec/0x1350 [ 93.224550][ T4902] ? __rcu_read_unlock+0x4e/0x70 [ 93.224567][ T4902] ? __fget_files+0x184/0x1c0 [ 93.224669][ T4902] ? mutex_lock+0x57/0x90 [ 93.224697][ T4902] ? mutex_unlock+0x4e/0x90 [ 93.224773][ T4902] __secure_computing+0x81/0x150 [ 93.224842][ T4902] do_syscall_64+0xd3/0x370 [ 93.224904][ T4902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.224950][ T4902] RIP: 0033:0x7f5c962fc629 [ 93.224968][ T4902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.224989][ T4902] RSP: 002b:00007f5c94d57028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 93.225011][ T4902] RAX: ffffffffffffffda RBX: 00007f5c96575fa0 RCX: 00007f5c962fc629 [ 93.225079][ T4902] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 93.225091][ T4902] RBP: 00007f5c94d57090 R08: 0000000000000000 R09: 0000000000000000 [ 93.225104][ T4902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.225116][ T4902] R13: 00007f5c96576038 R14: 00007f5c96575fa0 R15: 00007ffef190cf48 [ 93.225132][ T4902] [ 93.301661][ T4907] loop5: detected capacity change from 0 to 8192 [ 93.306504][ T4900] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 93.396722][ T4910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'. [ 93.424897][ T4470] loop5: p1 p4 [ 93.489927][ T4913] loop4: detected capacity change from 0 to 512 [ 93.497965][ T4470] loop5: p1 size 117440512 extends beyond EOD, [ 93.528208][ T4900] batadv_slave_1: entered promiscuous mode [ 93.540195][ T4470] truncated [ 93.706400][ T4470] loop5: p4 size 65536 extends beyond EOD, truncated [ 94.372281][ T4922] netlink: 'syz.0.361': attribute type 1 has an invalid length. [ 94.442582][ T4899] batadv_slave_1: left promiscuous mode [ 94.466300][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 94.466314][ T28] audit: type=1400 audit(1771995193.537:537): avc: denied { getopt } for pid=4923 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.564315][ T4913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.659349][ T4913] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.735132][ T28] audit: type=1400 audit(1771995193.715:538): avc: denied { bind } for pid=4927 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.756166][ T4907] loop5: p1 p4 [ 94.759752][ T4907] loop5: p1 size 117440512 extends beyond EOD, truncated [ 94.767610][ T4907] loop5: p4 size 65536 extends beyond EOD, truncated [ 94.810620][ T4931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.367'. [ 94.836392][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.852864][ T28] audit: type=1400 audit(1771995193.827:539): avc: denied { append } for pid=4909 comm="syz.4.364" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.921841][ T4940] x_tables: duplicate underflow at hook 3 [ 94.942216][ T28] audit: type=1400 audit(1771995193.874:540): avc: denied { recv } for pid=4927 comm="syz.3.366" saddr=10.128.0.163 src=30036 daddr=10.128.0.200 dest=46904 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 94.990354][ T28] audit: type=1400 audit(1771995193.930:541): avc: denied { name_connect } for pid=4927 comm="syz.3.366" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 95.012167][ T28] audit: type=1400 audit(1771995193.949:542): avc: denied { allowed } for pid=4934 comm="syz.0.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 95.031328][ T28] audit: type=1400 audit(1771995193.958:543): avc: denied { execute } for pid=4934 comm="syz.0.370" path="/77/cpu.stat" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.053986][ T28] audit: type=1400 audit(1771995193.986:544): avc: denied { accept } for pid=4927 comm="syz.3.366" laddr=fe80::13 lport=57881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.285771][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 95.300252][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 95.982947][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 95.990919][ T4956] loop5: detected capacity change from 0 to 128 [ 96.001223][ T28] audit: type=1400 audit(1771995194.978:545): avc: denied { create } for pid=4957 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.021641][ T28] audit: type=1400 audit(1771995194.978:546): avc: denied { nlmsg_read } for pid=4957 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.024748][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 96.064501][ T4956] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 54) [ 96.081662][ T4956] FAT-fs (loop5): Filesystem has been set read-only [ 96.117575][ T4956] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 54) [ 96.219172][ T4958] loop4: detected capacity change from 0 to 512 [ 96.230314][ T4929] syz.3.366 (4929) used greatest stack depth: 9432 bytes left [ 96.249238][ T4958] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.465774][ T4969] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 97.372616][ T4722] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.703418][ T4990] netlink: 68 bytes leftover after parsing attributes in process `syz.4.385'. [ 97.717363][ T4717] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.736536][ T4990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.385'. [ 97.737824][ T4717] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.841121][ T5003] gre1: entered promiscuous mode [ 97.855476][ T5003] gre1: entered allmulticast mode [ 97.873335][ T4717] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.908531][ T4717] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.930665][ T5010] loop4: detected capacity change from 0 to 512 [ 97.958750][ T5010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.994486][ T5010] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.018353][ T4717] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.033264][ T5010] netlink: 'syz.4.389': attribute type 6 has an invalid length. [ 98.047870][ T4717] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 98.109908][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.121334][ T4717] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.142499][ T4717] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 98.165068][ T5041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.248561][ T5032] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 98.424552][ T4717] bridge_slave_1: left allmulticast mode [ 98.440296][ T4717] bridge_slave_1: left promiscuous mode [ 98.453845][ T5078] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53 sclass=netlink_xfrm_socket pid=5078 comm=syz.4.398 [ 98.470599][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.479317][ T4717] bridge_slave_0: left allmulticast mode [ 98.485298][ T4717] bridge_slave_0: left promiscuous mode [ 98.500902][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.862428][ T4717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.901525][ T4717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.934863][ T4717] bond0 (unregistering): Released all slaves [ 99.096768][ T4717] tipc: Left network mode [ 99.163910][ T4717] hsr_slave_0: left promiscuous mode [ 99.249306][ T4717] hsr_slave_1: left promiscuous mode [ 99.266425][ T4717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.273951][ T4717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.287840][ T4717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.302462][ T4717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.316066][ T4717] veth1_macvtap: left promiscuous mode [ 99.323055][ T4717] veth0_macvtap: left promiscuous mode [ 99.328633][ T4717] veth1_vlan: left promiscuous mode [ 99.334849][ T4717] veth0_vlan: left promiscuous mode [ 99.408897][ T5122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5122 comm=syz.5.404 [ 99.442105][ T4717] team0 (unregistering): Port device team_slave_1 removed [ 99.454070][ T4717] team0 (unregistering): Port device team_slave_0 removed [ 99.507473][ T5126] xt_hashlimit: size too large, truncated to 1048576 [ 99.537588][ T4995] chnl_net:caif_netlink_parms(): no params data found [ 99.559595][ T5129] netlink: 80 bytes leftover after parsing attributes in process `syz.5.406'. [ 99.575959][ T3638] Bluetooth: hci0: command 0x1003 tx timeout [ 99.582458][ T4759] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.590503][ T5128] FAULT_INJECTION: forcing a failure. [ 99.590503][ T5128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.633955][ T5128] CPU: 0 UID: 0 PID: 5128 Comm: syz.1.407 Not tainted syzkaller #0 PREEMPT(full) [ 99.634025][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.634040][ T5128] Call Trace: [ 99.634047][ T5128] [ 99.634055][ T5128] __dump_stack+0x1d/0x30 [ 99.634085][ T5128] dump_stack_lvl+0x95/0xd0 [ 99.634120][ T5128] dump_stack+0x15/0x1b [ 99.634253][ T5128] should_fail_ex+0x263/0x280 [ 99.634282][ T5128] should_fail+0xb/0x20 [ 99.634304][ T5128] should_fail_usercopy+0x1a/0x20 [ 99.634414][ T5128] _copy_from_user+0x1c/0xb0 [ 99.634484][ T5128] ___sys_sendmsg+0xc1/0x1e0 [ 99.634537][ T5128] __x64_sys_sendmsg+0xd4/0x160 [ 99.634601][ T5128] x64_sys_call+0x194c/0x3020 [ 99.634628][ T5128] do_syscall_64+0x12c/0x370 [ 99.634668][ T5128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.634697][ T5128] RIP: 0033:0x7f5c962fc629 [ 99.634762][ T5128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.634779][ T5128] RSP: 002b:00007f5c94d57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.634799][ T5128] RAX: ffffffffffffffda RBX: 00007f5c96575fa0 RCX: 00007f5c962fc629 [ 99.634883][ T5128] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 99.634896][ T5128] RBP: 00007f5c94d57090 R08: 0000000000000000 R09: 0000000000000000 [ 99.634909][ T5128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.634969][ T5128] R13: 00007f5c96576038 R14: 00007f5c96575fa0 R15: 00007ffef190cf48 [ 99.634997][ T5128] [ 99.821508][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 99.821528][ T28] audit: type=1400 audit(1771995198.544:559): avc: denied { read write } for pid=5137 comm="syz.4.408" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.821569][ T28] audit: type=1400 audit(1771995198.544:560): avc: denied { open } for pid=5137 comm="syz.4.408" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.821685][ T28] audit: type=1400 audit(1771995198.544:561): avc: denied { ioctl } for pid=5137 comm="syz.4.408" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.903019][ T4995] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.903059][ T4995] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.903205][ T4995] bridge_slave_0: entered allmulticast mode [ 99.903758][ T4995] bridge_slave_0: entered promiscuous mode [ 99.904727][ T4995] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.904759][ T4995] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.904864][ T4995] bridge_slave_1: entered allmulticast mode [ 99.905396][ T4995] bridge_slave_1: entered promiscuous mode [ 99.913110][ T5151] netlink: 'syz.0.410': attribute type 16 has an invalid length. [ 99.913129][ T5151] netlink: 'syz.0.410': attribute type 17 has an invalid length. [ 99.957028][ T5151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.988685][ T4995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.992808][ T4995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.000193][ T5140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.409'. [ 100.000262][ T5140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.409'. [ 100.012483][ T28] audit: type=1400 audit(1771995198.731:562): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 100.052945][ T4995] team0: Port device team_slave_0 added [ 100.080350][ T5145] netlink: 48 bytes leftover after parsing attributes in process `syz.1.409'. [ 100.090858][ T4995] team0: Port device team_slave_1 added [ 100.169094][ T5157] netlink: 68 bytes leftover after parsing attributes in process `syz.4.408'. [ 100.206676][ T5158] netlink: 'syz.5.411': attribute type 1 has an invalid length. [ 100.215630][ T4995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.228016][ T4995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.254259][ T4995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.271001][ T28] audit: type=1400 audit(1771995198.731:563): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 100.324686][ T5158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.333159][ T4995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.340764][ T4995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.367870][ T4995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.395136][ T5166] macvlan2: entered promiscuous mode [ 100.400614][ T5166] macvlan2: entered allmulticast mode [ 100.406834][ T5166] bond1: entered allmulticast mode [ 100.412258][ T5166] bond1: entered promiscuous mode [ 100.419736][ T5166] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 100.434232][ T5166] team0: Port device macvlan2 added [ 100.460455][ T4995] hsr_slave_0: entered promiscuous mode [ 100.486762][ T4995] hsr_slave_1: entered promiscuous mode [ 100.494066][ T4995] debugfs: 'hsr0' already exists in 'hsr' [ 100.500218][ T4995] Cannot create hsr debugfs directory [ 100.515103][ T5158] bond1: (slave ip6gretap1): making interface the new active one [ 100.524253][ T5158] ip6gretap1: entered promiscuous mode [ 100.533936][ T5158] ip6gretap1: entered allmulticast mode [ 100.540610][ T5158] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 100.611774][ T5178] netlink: 68 bytes leftover after parsing attributes in process `syz.4.413'. [ 100.689746][ T5178] netlink: 48 bytes leftover after parsing attributes in process `syz.4.413'. [ 100.715225][ T4995] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 100.728778][ T4995] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 100.758389][ T4995] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 100.785655][ T4995] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 100.859571][ T5188] netlink: 60 bytes leftover after parsing attributes in process `syz.4.415'. [ 101.195957][ T28] audit: type=1400 audit(1771995199.788:564): avc: denied { create } for pid=5207 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 101.275410][ T5214] 9p: Unknown uid 00000000004294967295 [ 101.526143][ T4995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.537576][ T4995] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.558276][ T4995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.576444][ T4995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.597389][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.604511][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.615233][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.622487][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.736561][ T4995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.162294][ T4995] veth0_vlan: entered promiscuous mode [ 102.183626][ T4995] veth1_vlan: entered promiscuous mode [ 102.210332][ T4995] veth0_macvtap: entered promiscuous mode [ 102.221917][ T4995] veth1_macvtap: entered promiscuous mode [ 102.249046][ T4995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.254706][ T4995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.275574][ T28] audit: type=1400 audit(1771995200.846:565): avc: denied { create } for pid=5263 comm="syz.4.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.297084][ T5264] netlink: 'syz.4.424': attribute type 1 has an invalid length. [ 102.308255][ T4718] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.324535][ T5264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.340121][ T4718] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.360205][ T4718] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.379128][ T4718] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.391627][ T28] audit: type=1400 audit(1771995200.958:566): avc: denied { mounton } for pid=4995 comm="syz-executor" path="/root/syzkaller.QX4W9o/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 102.404626][ T5271] macvlan3: entered promiscuous mode [ 102.439811][ T5271] macvlan3: entered allmulticast mode [ 102.500879][ T5274] Illegal XDP return value 4294967274 on prog (id 68) dev N/A, expect packet loss! [ 102.513441][ T5264] bond1: (slave ip6gretap1): making interface the new active one [ 102.547401][ T5264] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 102.717848][ T28] audit: type=1400 audit(1771995201.267:567): avc: denied { write } for pid=5283 comm="syz.1.429" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 102.867190][ T28] audit: type=1400 audit(1771995201.398:568): avc: denied { create } for pid=5285 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.040956][ T5290] siw: device registration error -23 [ 103.581736][ T5311] xt_TPROXY: Can be used only with -p tcp or -p udp [ 103.640402][ T5308] loop6: detected capacity change from 0 to 1024 [ 103.708855][ T5325] __nla_validate_parse: 3 callbacks suppressed [ 103.708873][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 103.725156][ T5327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 103.753914][ T5308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.796907][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 103.800354][ T5308] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.811808][ T5327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 103.941482][ T5336] loop4: detected capacity change from 0 to 512 [ 103.957023][ T5336] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.969440][ T4995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.002420][ T5336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.041116][ T5336] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.057559][ T5336] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 104.128816][ T5335] netlink: 44 bytes leftover after parsing attributes in process `syz.0.443'. [ 104.162240][ T5355] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 104.279907][ T5355] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 104.415776][ T5350] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.508233][ T5365] netlink: 44 bytes leftover after parsing attributes in process `syz.0.447'. [ 104.528751][ T5365] netlink: 43 bytes leftover after parsing attributes in process `syz.0.447'. [ 104.553098][ T5336] bond2: (slave gretap1): making interface the new active one [ 104.561245][ T5336] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 104.589368][ T5362] macvlan4: entered promiscuous mode [ 104.597155][ T5362] macvlan4: entered allmulticast mode [ 104.611739][ T5365] netlink: 'syz.0.447': attribute type 5 has an invalid length. [ 104.613547][ T5362] bond2: entered promiscuous mode [ 104.640945][ T5362] gretap1: entered promiscuous mode [ 104.649800][ T5362] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 104.657833][ T5365] netlink: 43 bytes leftover after parsing attributes in process `syz.0.447'. [ 104.688166][ T5362] bond2: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 104.710949][ T5362] bond2: left promiscuous mode [ 104.717265][ T5362] gretap1: left promiscuous mode [ 104.857366][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.913517][ T5374] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 105.203275][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 105.203299][ T28] audit: type=1326 audit(1771995203.588:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.5.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7407d2c629 code=0x7ffc0000 [ 105.458196][ T28] audit: type=1400 audit(1771995203.616:580): avc: denied { block_suspend } for pid=5382 comm="syz.1.453" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.948806][ T28] audit: type=1326 audit(1771995203.616:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.5.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7407d2c629 code=0x7ffc0000 [ 105.996348][ T5400] netlink: 'syz.5.456': attribute type 1 has an invalid length. [ 106.495145][ T5406] cgroup: Unknown subsys name 'cpuset' [ 106.509788][ T5386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.453'. [ 106.989081][ T5418] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 107.030996][ T5418] SELinux: failed to load policy [ 107.365925][ T5446] netlink: 134736 bytes leftover after parsing attributes in process `syz.5.472'. [ 107.376021][ T5446] netlink: zone id is out of range [ 107.389209][ T5446] netlink: zone id is out of range [ 107.450220][ T5446] netlink: get zone limit has 4 unknown bytes [ 108.092517][ T28] audit: type=1400 audit(1771995206.283:582): avc: denied { getopt } for pid=5462 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.141408][ T28] audit: type=1400 audit(1771995206.283:583): avc: denied { ioctl } for pid=5462 comm="syz.4.477" path="socket:[12663]" dev="sockfs" ino=12663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.248108][ T28] audit: type=1400 audit(1771995206.423:584): avc: denied { getopt } for pid=5462 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.323689][ T28] audit: type=1400 audit(1771995206.423:585): avc: denied { ioctl } for pid=5462 comm="syz.4.477" path="socket:[12067]" dev="sockfs" ino=12067 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.505895][ T28] audit: type=1400 audit(1771995206.423:586): avc: denied { map } for pid=5462 comm="syz.4.477" path="socket:[12067]" dev="sockfs" ino=12067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.597882][ T28] audit: type=1400 audit(1771995206.423:587): avc: denied { read accept } for pid=5462 comm="syz.4.477" path="socket:[12067]" dev="sockfs" ino=12067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.621724][ T28] audit: type=1400 audit(1771995206.657:588): avc: denied { mount } for pid=5473 comm="syz.0.480" name="/" dev="configfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 108.717668][ T5477] bridge0: entered promiscuous mode [ 108.732026][ T5477] vlan2: entered promiscuous mode [ 108.920185][ T5350] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.108630][ T5350] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.220068][ T5350] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.372426][ T4717] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.448914][ T4717] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.555821][ T4717] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.608764][ T4717] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.634015][ T5502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 109.652910][ T5504] netlink: 'syz.6.488': attribute type 12 has an invalid length. [ 109.687080][ T5504] netlink: 248 bytes leftover after parsing attributes in process `syz.6.488'. [ 110.135386][ T5513] netlink: 'syz.5.490': attribute type 13 has an invalid length. [ 110.436232][ T5515] siw: device registration error -23 [ 110.547029][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.554315][ T5513] bridge0: port 1(1¾x9ÿ) entered disabled state [ 110.606900][ T5536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.494'. [ 110.659183][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.706382][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.730523][ T5542] loop4: detected capacity change from 0 to 512 [ 110.774997][ T5544] loop6: detected capacity change from 0 to 1024 [ 110.781985][ T5544] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.796385][ T5542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.815393][ T5542] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.838180][ T5544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.868743][ T5544] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 110.949832][ T5513] bond1: left allmulticast mode [ 110.954918][ T5513] ip6gretap1: left allmulticast mode [ 110.961214][ T28] audit: type=1400 audit(1771995208.978:589): avc: denied { map } for pid=5543 comm="syz.6.495" path="/8/file1/memory.events" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.996751][ T5513] bond1: left promiscuous mode [ 111.009822][ T5513] ip6gretap1: left promiscuous mode [ 111.033445][ T4718] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.046086][ T4718] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.062622][ T4718] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.071888][ T4718] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.178673][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.538281][ T4995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.634265][ T28] audit: type=1400 audit(1771995209.605:590): avc: denied { connect } for pid=5569 comm="syz.5.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.724719][ T28] audit: type=1400 audit(1771995209.680:591): avc: denied { listen } for pid=5573 comm="syz.6.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.785111][ T5572] loop4: detected capacity change from 0 to 1024 [ 111.795231][ T5583] loop6: detected capacity change from 0 to 512 [ 111.812197][ T5572] EXT4-fs: Ignoring removed bh option [ 111.840411][ T5583] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.503: iget: bad extra_isize 90 (inode size 256) [ 111.871903][ T5583] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.875361][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 111.890988][ C1] EXT4-fs (loop6): initial error at time 1771995209: ext4_xattr_inode_iget:441: inode 11 [ 111.900864][ C1] EXT4-fs (loop6): last error at time 1771995209: ext4_xattr_inode_iget:441: inode 11 [ 111.910653][ T5583] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.503: error while reading EA inode 11 err=-117 [ 111.922930][ T5583] loop6: lost filesystem error report for type 5 error -117 [ 111.923360][ T5583] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 111.935468][ T5572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.976208][ T5583] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.503: iget: bad extra_isize 90 (inode size 256) [ 111.989682][ T5583] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.989891][ T5583] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.503: error while reading EA inode 11 err=-117 [ 112.011502][ T5583] loop6: lost filesystem error report for type 5 error -117 [ 112.011643][ T5583] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.503: iget: bad extra_isize 90 (inode size 256) [ 112.032486][ T5583] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 112.032743][ T5583] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.503: error while reading EA inode 18 err=-117 [ 112.085385][ T5595] netlink: 'syz.1.506': attribute type 13 has an invalid length. [ 112.110596][ T5595] gretap0: refused to change device tx_queue_len [ 112.118992][ T5583] loop6: lost filesystem error report for type 5 error -117 [ 112.119535][ T5583] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.503: iget: bad extra_isize 90 (inode size 256) [ 112.133108][ T5595] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 112.159812][ T5583] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 112.160031][ T5583] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.503: error while reading EA inode 18 err=-117 [ 112.308335][ T5583] loop6: lost filesystem error report for type 5 error -117 [ 112.309101][ T5583] EXT4-fs (loop6): 1 orphan inode deleted [ 112.330727][ T5583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.557893][ T5572] cgroup: fork rejected by pids controller in /syz4 [ 112.666359][ T5583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.503'. [ 112.690570][ T4995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.711895][ T5760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 112.755394][ T5762] Cannot find add_set index 0 as target [ 112.843202][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.939378][ T5778] syzkaller0: entered promiscuous mode [ 112.945025][ T5778] syzkaller0: entered allmulticast mode [ 113.991343][ T5801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.520'. [ 114.131460][ T5807] netlink: 'syz.4.521': attribute type 11 has an invalid length. [ 114.140960][ T5807] netlink: 148 bytes leftover after parsing attributes in process `syz.4.521'. [ 114.151960][ T5809] netlink: 'syz.4.521': attribute type 11 has an invalid length. [ 114.159797][ T5809] netlink: 148 bytes leftover after parsing attributes in process `syz.4.521'. [ 115.194391][ T28] audit: type=1400 audit(1771995212.936:592): avc: denied { write } for pid=5835 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.726371][ T5851] loop4: detected capacity change from 0 to 4096 [ 115.776260][ T5851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.979104][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.243509][ T5894] netlink: 136 bytes leftover after parsing attributes in process `syz.0.534'. [ 116.278106][ T5894] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 117.121369][ T28] audit: type=1400 audit(1771995214.733:593): avc: denied { listen } for pid=5931 comm="syz.5.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.150095][ T28] audit: type=1400 audit(1771995214.733:594): avc: denied { accept } for pid=5931 comm="syz.5.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.169169][ T5933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=5933 comm=syz.6.544 [ 117.192275][ T5933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=5933 comm=syz.6.544 [ 117.205249][ T5933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=5933 comm=syz.6.544 [ 117.218226][ T5933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=5933 comm=syz.6.544 [ 117.272077][ T5933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=5933 comm=syz.6.544 [ 117.289642][ T5933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=5933 comm=syz.6.544 [ 117.308210][ T5933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=5933 comm=syz.6.544 [ 117.322222][ T5933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=5933 comm=syz.6.544 [ 117.342664][ T5933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=5933 comm=syz.6.544 [ 117.362517][ T5939] syzkaller1: entered promiscuous mode [ 117.369362][ T5933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=5933 comm=syz.6.544 [ 117.372898][ T5939] syzkaller1: entered allmulticast mode [ 117.447523][ T28] audit: type=1400 audit(1771995215.051:595): avc: denied { ioctl } for pid=5946 comm="syz.6.550" path="socket:[13306]" dev="sockfs" ino=13306 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.501491][ T28] audit: type=1400 audit(1771995215.098:596): avc: denied { name_bind } for pid=5943 comm="syz.0.549" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 117.523455][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.551'. [ 117.548942][ T5953] loop6: detected capacity change from 0 to 512 [ 117.559999][ T5953] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.573487][ T5953] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.588743][ T5949] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.610979][ T5953] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.652691][ T5953] netlink: 'syz.6.552': attribute type 1 has an invalid length. [ 117.784101][ T5953] macvlan2: entered promiscuous mode [ 117.795807][ T5953] macvlan2: entered allmulticast mode [ 117.900927][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 117.921858][ T4995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.972257][ T5978] netlink: 'syz.6.559': attribute type 27 has an invalid length. [ 118.003250][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.010481][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.071739][ T28] audit: type=1326 audit(1771995215.622:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.5.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7407d2c629 code=0x7ffc0000 [ 118.152240][ T28] audit: type=1326 audit(1771995215.660:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.5.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7407d2c629 code=0x7ffc0000 [ 118.230415][ T28] audit: type=1326 audit(1771995215.660:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.5.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7407d2c629 code=0x7ffc0000 [ 118.264185][ T28] audit: type=1326 audit(1771995215.660:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.5.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7407d2c629 code=0x7ffc0000 [ 118.364015][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.400507][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.409610][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 118.422076][ T28] audit: type=1326 audit(1771995215.660:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.5.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f7407d2c629 code=0x7ffc0000 [ 118.454133][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 118.509505][ T28] audit: type=1326 audit(1771995215.660:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.5.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7407d2c629 code=0x7ffc0000 [ 118.598184][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.606394][ T5983] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.608372][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 118.622134][ T5983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.647158][ T4722] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.662559][ T4722] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.679799][ T4722] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.688341][ T4722] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.826356][ T6001] 9pnet_fd: Insufficient options for proto=fd [ 119.550429][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.571'. [ 120.404149][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 120.415681][ T6046] netlink: 296 bytes leftover after parsing attributes in process `syz.4.581'. [ 120.522096][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 120.665655][ T6067] loop4: detected capacity change from 0 to 1024 [ 120.700836][ T6067] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.590: Failed to acquire dquot type 0 [ 120.714683][ T12] tipc: Subscription rejected, illegal request [ 120.747172][ T6086] syzkaller0: entered promiscuous mode [ 120.752724][ T6086] syzkaller0: entered allmulticast mode [ 120.798449][ T6067] loop4: lost filesystem error report for type 5 error -117 [ 120.798854][ T6067] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 120.820757][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 120.820774][ C1] EXT4-fs (loop4): initial error at time 1771995218: ext4_acquire_dquot:7001 [ 120.820792][ C1] EXT4-fs (loop4): last error at time 1771995218: ext4_acquire_dquot:7001 [ 120.853768][ T6067] EXT4-fs (loop4): 1 truncate cleaned up [ 120.860070][ T6067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.881953][ T6067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.628007][ T6133] FAULT_INJECTION: forcing a failure. [ 121.628007][ T6133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.643378][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz.6.613 Not tainted syzkaller #0 PREEMPT(full) [ 121.643450][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 121.643472][ T6133] Call Trace: [ 121.643477][ T6133] [ 121.643484][ T6133] __dump_stack+0x1d/0x30 [ 121.643508][ T6133] dump_stack_lvl+0x95/0xd0 [ 121.643529][ T6133] dump_stack+0x15/0x1b [ 121.643607][ T6133] should_fail_ex+0x263/0x280 [ 121.643655][ T6133] should_fail+0xb/0x20 [ 121.643713][ T6133] should_fail_usercopy+0x1a/0x20 [ 121.643736][ T6133] _copy_from_iter+0xcf/0xea0 [ 121.643759][ T6133] ? _copy_from_iter+0x13e/0xea0 [ 121.643833][ T6133] copy_page_from_iter+0x178/0x2a0 [ 121.643856][ T6133] skb_copy_datagram_from_iter+0x22d/0x480 [ 121.643892][ T6133] tun_get_user+0x90b/0x27c0 [ 121.643921][ T6133] ? ref_tracker_alloc+0x1eb/0x2f0 [ 121.644032][ T6133] tun_chr_write_iter+0x15e/0x210 [ 121.644066][ T6133] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 121.644183][ T6133] vfs_write+0x5a6/0x9f0 [ 121.644227][ T6133] ksys_write+0xdc/0x1a0 [ 121.644277][ T6133] __x64_sys_write+0x40/0x50 [ 121.644314][ T6133] x64_sys_call+0x27e1/0x3020 [ 121.644385][ T6133] do_syscall_64+0x12c/0x370 [ 121.644444][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.644470][ T6133] RIP: 0033:0x7fc9c6d8c629 [ 121.644505][ T6133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.644527][ T6133] RSP: 002b:00007fc9c57df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.644552][ T6133] RAX: ffffffffffffffda RBX: 00007fc9c7005fa0 RCX: 00007fc9c6d8c629 [ 121.644591][ T6133] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 121.644619][ T6133] RBP: 00007fc9c57df090 R08: 0000000000000000 R09: 0000000000000000 [ 121.644701][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.644715][ T6133] R13: 00007fc9c7006038 R14: 00007fc9c7005fa0 R15: 00007ffd191e8288 [ 121.644738][ T6133] [ 121.932548][ T6148] netlink: 'syz.1.618': attribute type 10 has an invalid length. [ 121.941076][ T6148] __nla_validate_parse: 6 callbacks suppressed [ 121.941093][ T6148] netlink: 40 bytes leftover after parsing attributes in process `syz.1.618'. [ 122.030524][ T6164] netlink: 'syz.0.625': attribute type 24 has an invalid length. [ 122.295059][ T6188] FAULT_INJECTION: forcing a failure. [ 122.295059][ T6188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.369151][ T6188] CPU: 1 UID: 0 PID: 6188 Comm: syz.1.634 Not tainted syzkaller #0 PREEMPT(full) [ 122.369184][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.369197][ T6188] Call Trace: [ 122.369203][ T6188] [ 122.369211][ T6188] __dump_stack+0x1d/0x30 [ 122.369311][ T6188] dump_stack_lvl+0x95/0xd0 [ 122.369335][ T6188] dump_stack+0x15/0x1b [ 122.369420][ T6188] should_fail_ex+0x263/0x280 [ 122.369449][ T6188] should_fail+0xb/0x20 [ 122.369475][ T6188] should_fail_usercopy+0x1a/0x20 [ 122.369499][ T6188] _copy_to_user+0x20/0xa0 [ 122.369564][ T6188] io_query+0x266/0x620 [ 122.369593][ T6188] __se_sys_io_uring_register+0x298/0x12d0 [ 122.369616][ T6188] ? mutex_unlock+0x4e/0x90 [ 122.369647][ T6188] ? fput+0x8f/0xc0 [ 122.369692][ T6188] ? ksys_write+0x194/0x1a0 [ 122.369735][ T6188] __x64_sys_io_uring_register+0x55/0x70 [ 122.369916][ T6188] x64_sys_call+0x2be0/0x3020 [ 122.369940][ T6188] do_syscall_64+0x12c/0x370 [ 122.369983][ T6188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.370008][ T6188] RIP: 0033:0x7f5c962fc629 [ 122.370022][ T6188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.370038][ T6188] RSP: 002b:00007f5c94d57028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 122.370058][ T6188] RAX: ffffffffffffffda RBX: 00007f5c96575fa0 RCX: 00007f5c962fc629 [ 122.370115][ T6188] RDX: 0000200000000000 RSI: 0000000000000023 RDI: ffffffffffffffff [ 122.370138][ T6188] RBP: 00007f5c94d57090 R08: 0000000000000000 R09: 0000000000000000 [ 122.370153][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.370166][ T6188] R13: 00007f5c96576038 R14: 00007f5c96575fa0 R15: 00007ffef190cf48 [ 122.370189][ T6188] [ 122.707458][ T6199] x_tables: duplicate underflow at hook 3 [ 122.728606][ T6200] bridge0: entered promiscuous mode [ 122.743463][ T6200] vlan2: entered promiscuous mode [ 122.809755][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 122.809839][ T28] audit: type=1400 audit(1771995220.067:642): avc: denied { getopt } for pid=6208 comm="syz.6.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.880884][ T6220] netlink: 76 bytes leftover after parsing attributes in process `syz.1.647'. [ 122.911955][ T6222] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 122.979266][ T6227] loop6: detected capacity change from 0 to 2048 [ 122.999359][ T6227] EXT4-fs: Ignoring removed i_version option [ 123.040996][ T6227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.058015][ T6236] selinux_netlink_send: 1 callbacks suppressed [ 123.058029][ T6236] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2560 sclass=netlink_xfrm_socket pid=6236 comm=syz.1.651 [ 123.076919][ T6227] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.090876][ T28] audit: type=1400 audit(1771995220.329:643): avc: denied { ioctl } for pid=6233 comm="syz.1.651" path="socket:[14785]" dev="sockfs" ino=14785 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.142110][ T28] audit: type=1400 audit(1771995220.357:644): avc: denied { write } for pid=6226 comm="syz.6.650" path="/35/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 123.164766][ T28] audit: type=1400 audit(1771995220.357:645): avc: denied { bind } for pid=6226 comm="syz.6.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.166558][ T4995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.184539][ T28] audit: type=1400 audit(1771995220.357:646): avc: denied { name_bind } for pid=6226 comm="syz.6.650" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 123.214211][ T28] audit: type=1400 audit(1771995220.357:647): avc: denied { node_bind } for pid=6226 comm="syz.6.650" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 123.236338][ T28] audit: type=1400 audit(1771995220.357:648): avc: denied { ioctl } for pid=6226 comm="syz.6.650" path="socket:[14792]" dev="sockfs" ino=14792 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 123.261556][ T28] audit: type=1400 audit(1771995220.357:649): avc: denied { ioctl } for pid=6226 comm="syz.6.650" path="socket:[14789]" dev="sockfs" ino=14789 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.287914][ T28] audit: type=1400 audit(1771995220.507:650): avc: denied { getopt } for pid=6233 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.414667][ T6250] tipc: Started in network mode [ 123.422487][ T6250] tipc: Node identity ac14140f, cluster identity 4711 [ 123.429832][ T6250] tipc: New replicast peer: 255.255.255.255 [ 123.436178][ T6250] tipc: Enabled bearer , priority 10 [ 123.662437][ T28] audit: type=1400 audit(1771995220.844:651): avc: denied { bind } for pid=6266 comm="syz.5.660" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.711157][ T6267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.061662][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'. [ 124.113527][ T6282] vlan2: entered promiscuous mode [ 124.118676][ T6282] bridge0: entered promiscuous mode [ 124.222095][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 124.231378][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 124.354129][ T6297] loop4: detected capacity change from 0 to 2048 [ 124.360911][ T6297] EXT4-fs: Ignoring removed nobh option [ 124.842146][ T3421] tipc: Node number set to 2886997007 [ 124.872863][ T6297] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.352146][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.673'. [ 126.098388][ T6297] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 126.159284][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.675'. [ 126.201273][ T6308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.675'. [ 126.239291][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.675'. [ 126.257042][ T6308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.675'. [ 126.268864][ T6310] openvswitch: netlink: Missing key (keys=40, expected=80) [ 126.276409][ T6308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27411 sclass=netlink_route_socket pid=6308 comm=syz.0.675 [ 126.296559][ T6297] loop4: detected capacity change from 0 to 8192 [ 126.300108][ T6307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27411 sclass=netlink_route_socket pid=6307 comm=syz.0.675 [ 126.398334][ T6297] loop4: p1 p2 p4 [ 126.403982][ T6297] loop4: p4 size 262912 extends beyond EOD, truncated [ 126.411139][ T6319] loop6: detected capacity change from 0 to 2364 [ 126.513809][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 126.513910][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 126.533810][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 126.566572][ T6329] xt_hashlimit: size too large, truncated to 1048576 [ 127.015729][ T6352] tipc: Enabled bearer , priority 10 [ 127.846818][ T6364] netlink: 'syz.6.695': attribute type 12 has an invalid length. [ 128.400070][ T6379] loop6: detected capacity change from 0 to 1024 [ 128.432768][ T6384] dns_resolver: Unsupported server list version (0) [ 128.444892][ T6384] dns_resolver: Unsupported server list version (0) [ 128.479007][ T6379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.621276][ T4995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.655165][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 128.655178][ T28] audit: type=1326 audit(1771995225.532:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.6.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c6d8c629 code=0x7ffc0000 [ 128.781299][ T28] audit: type=1326 audit(1771995225.654:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.6.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fc9c6d8c629 code=0x7ffc0000 [ 128.991015][ T28] audit: type=1326 audit(1771995225.654:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.6.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c6d8c629 code=0x7ffc0000 [ 129.137268][ T28] audit: type=1326 audit(1771995225.654:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.6.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c6d8c629 code=0x7ffc0000 [ 129.219664][ T6423] loop6: detected capacity change from 0 to 1024 [ 129.226902][ T6423] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.240122][ T6423] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #3: block 1: comm syz.6.717: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.254510][ T6423] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 129.255419][ T6423] Quota error (device loop6): write_blk: dquota write failed [ 129.264548][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 129.264588][ C0] EXT4-fs (loop6): initial error at time 1771995226: ext4_map_blocks:818: inode 3: block 1 [ 129.264644][ C0] EXT4-fs (loop6): last error at time 1771995226: ext4_map_blocks:818: inode 3: block 1 [ 129.298916][ T6423] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 129.309122][ T6423] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.717: Failed to acquire dquot type 0 [ 129.321860][ T6423] loop6: lost filesystem error report for type 5 error -117 [ 129.324941][ T6423] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.717: Freeing blocks not in datazone - block = 0, count = 4096 [ 129.347905][ T6423] loop6: lost filesystem error report for type 5 error -117 [ 129.348356][ T6423] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.717: Invalid inode bitmap blk 0 in block_group 0 [ 129.360311][ T6432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61296 sclass=netlink_route_socket pid=6432 comm=syz.0.719 [ 129.369081][ T4718] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.401431][ T6423] loop6: lost filesystem error report for type 5 error -117 [ 129.402546][ T4718] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 129.411381][ T4718] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 129.412510][ T6423] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 129.459364][ T4718] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 0 [ 129.494315][ T4718] loop6: lost filesystem error report for type 5 error -117 [ 129.507673][ T6423] loop6: lost filesystem error report for type 5 error -117 [ 129.523517][ T6423] EXT4-fs (loop6): 1 orphan inode deleted [ 129.538235][ T6423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.564342][ T6423] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 129.584005][ T6444] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 129.596824][ T6423] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (18333!=0) [ 129.605984][ T6444] bond2: (slave lo): Enslaving as an active interface with an up link [ 129.614652][ T6444] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 129.634030][ T6444] A link change request failed with some changes committed already. Interface 1¾x9ÿ may have been left with an inconsistent configuration, please check. [ 129.755795][ T6423] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.717: iget: bad extra_isize 65535 (inode size 256) [ 130.538123][ T4995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.552436][ T6457] __nla_validate_parse: 2 callbacks suppressed [ 130.552451][ T6457] netlink: 48 bytes leftover after parsing attributes in process `syz.1.730'. [ 130.816074][ T28] audit: type=1400 audit(1771995227.554:657): avc: denied { read } for pid=6456 comm="syz.1.730" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 130.845422][ T28] audit: type=1400 audit(1771995227.554:658): avc: denied { open } for pid=6456 comm="syz.1.730" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 130.874209][ T28] audit: type=1400 audit(1771995227.610:659): avc: denied { ioctl } for pid=6471 comm="syz.6.733" path="socket:[15574]" dev="sockfs" ino=15574 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 131.506378][ T6493] loop6: detected capacity change from 0 to 512 [ 131.594156][ T6493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.607007][ T6493] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.622155][ T6493] netlink: 'syz.6.738': attribute type 6 has an invalid length. [ 131.642890][ T4995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.742468][ T6503] loop4: detected capacity change from 0 to 128 [ 131.763640][ T6503] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.776627][ T6503] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.978263][ T6507] syz.1.742 (6507) used greatest stack depth: 9352 bytes left [ 133.045732][ T6541] FAULT_INJECTION: forcing a failure. [ 133.045732][ T6541] name failslab, interval 1, probability 0, space 0, times 0 [ 133.061187][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: syz.1.750 Not tainted syzkaller #0 PREEMPT(full) [ 133.061210][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.061221][ T6541] Call Trace: [ 133.061306][ T6541] [ 133.061312][ T6541] __dump_stack+0x1d/0x30 [ 133.061335][ T6541] dump_stack_lvl+0x95/0xd0 [ 133.061408][ T6541] dump_stack+0x15/0x1b [ 133.061440][ T6541] should_fail_ex+0x263/0x280 [ 133.061464][ T6541] should_failslab+0x8c/0xb0 [ 133.061482][ T6541] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 133.061501][ T6541] ? __alloc_skb+0x2d6/0x690 [ 133.061538][ T6541] __alloc_skb+0x2d6/0x690 [ 133.061561][ T6541] ? __alloc_skb+0x200/0x690 [ 133.061582][ T6541] netlink_alloc_large_skb+0xbf/0xf0 [ 133.061603][ T6541] netlink_sendmsg+0x40c/0x6f0 [ 133.061628][ T6541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.061722][ T6541] ____sys_sendmsg+0x5af/0x600 [ 133.061857][ T6541] ___sys_sendmsg+0x195/0x1e0 [ 133.061925][ T6541] __x64_sys_sendmsg+0xd4/0x160 [ 133.062018][ T6541] x64_sys_call+0x194c/0x3020 [ 133.062045][ T6541] do_syscall_64+0x12c/0x370 [ 133.062088][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.062218][ T6541] RIP: 0033:0x7f5c962fc629 [ 133.062237][ T6541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.062259][ T6541] RSP: 002b:00007f5c94d57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.062278][ T6541] RAX: ffffffffffffffda RBX: 00007f5c96575fa0 RCX: 00007f5c962fc629 [ 133.062369][ T6541] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 133.062386][ T6541] RBP: 00007f5c94d57090 R08: 0000000000000000 R09: 0000000000000000 [ 133.062402][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.062418][ T6541] R13: 00007f5c96576038 R14: 00007f5c96575fa0 R15: 00007ffef190cf48 [ 133.062438][ T6541] [ 133.360764][ T6553] loop6: detected capacity change from 0 to 1024 [ 133.382570][ T6553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.394927][ T6553] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.923525][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.046149][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 134.046166][ T28] audit: type=1400 audit(1771995230.576:676): avc: denied { write } for pid=6560 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.358265][ T4995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.565922][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 134.611870][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 134.708066][ T6586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.764'. [ 134.722798][ T6586] netlink: 56 bytes leftover after parsing attributes in process `syz.0.764'. [ 134.788121][ T28] audit: type=1400 audit(1771995231.278:677): avc: denied { watch watch_reads } for pid=6594 comm="syz.0.769" path="/152" dev="tmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 135.036679][ T6609] loop4: detected capacity change from 0 to 2048 [ 135.056306][ T28] audit: type=1400 audit(1771995231.531:678): avc: denied { shutdown } for pid=6611 comm="syz.5.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.124287][ T6609] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c128, mo2=0003] [ 135.155718][ T6609] System zones: 0-7 [ 135.160153][ T6609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.244093][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.415718][ T6634] loop4: detected capacity change from 0 to 8192 [ 135.572145][ T6655] loop4: detected capacity change from 0 to 512 [ 135.604374][ T6655] EXT4-fs: Ignoring removed nobh option [ 135.662530][ T6655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.696570][ T6655] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.711307][ T28] audit: type=1400 audit(1771995232.139:679): avc: denied { remove_name } for pid=6654 comm="syz.4.790" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.751320][ T6664] netlink: 60 bytes leftover after parsing attributes in process `syz.5.793'. [ 135.766617][ T28] audit: type=1400 audit(1771995232.139:680): avc: denied { unlink } for pid=6654 comm="syz.4.790" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.820983][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.152635][ T6684] netlink: 60 bytes leftover after parsing attributes in process `syz.4.800'. [ 136.162838][ T6684] netlink: 44 bytes leftover after parsing attributes in process `syz.4.800'. [ 136.202924][ T6694] tipc: Started in network mode [ 136.219616][ T6694] tipc: Node identity 000000000000ff000000000000000001, cluster identity 4711 [ 136.228654][ T6694] tipc: Enabling of bearer rejected, failed to enable media [ 136.268536][ T6701] xt_TPROXY: Can be used only with -p tcp or -p udp [ 136.281442][ T6699] netlink: 'syz.0.805': attribute type 1 has an invalid length. [ 136.302967][ T6699] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 136.315917][ T6699] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 136.360690][ T6703] bond1: (slave gretap1): making interface the new active one [ 136.410232][ T6703] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 136.434692][ T6703] macvlan2: entered promiscuous mode [ 136.444522][ T6703] macvlan2: entered allmulticast mode [ 136.459193][ T6703] bond1: entered promiscuous mode [ 136.470940][ T6703] gretap1: entered promiscuous mode [ 136.484478][ T6703] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.518367][ T6703] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 136.550252][ T6703] bond1: left promiscuous mode [ 136.556327][ T6703] gretap1: left promiscuous mode [ 136.649979][ T6703] syz.0.805 (6703) used greatest stack depth: 8560 bytes left [ 136.695795][ T28] audit: type=1400 audit(1771995233.056:681): avc: denied { create } for pid=6720 comm="syz.0.812" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.726857][ T6719] hub 8-0:1.0: USB hub found [ 136.735352][ T6721] block device autoloading is deprecated and will be removed. [ 136.737072][ T6726] netlink: 20 bytes leftover after parsing attributes in process `syz.5.814'. [ 136.758099][ T6719] hub 8-0:1.0: 8 ports detected [ 136.764374][ T6726] netlink: 20 bytes leftover after parsing attributes in process `syz.5.814'. [ 136.782430][ T28] audit: type=1400 audit(1771995233.056:682): avc: denied { write } for pid=6720 comm="syz.0.812" name="file0" dev="tmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.968624][ T28] audit: type=1400 audit(1771995233.056:683): avc: denied { open } for pid=6720 comm="syz.0.812" path="/159/file0" dev="tmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 137.080324][ T28] audit: type=1400 audit(1771995233.421:684): avc: denied { ioctl } for pid=6720 comm="syz.0.812" path="/159/file0" dev="tmpfs" ino=835 ioctlcmd=0x5441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 137.791949][ T6738] netlink: 'syz.1.819': attribute type 41 has an invalid length. [ 137.810497][ T6739] netlink: 'syz.6.817': attribute type 1 has an invalid length. [ 137.818560][ T28] audit: type=1326 audit(1771995234.104:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c962fc629 code=0x7ffc0000 [ 137.860112][ T6739] bond1: entered promiscuous mode [ 137.865378][ T6739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.884806][ T6739] bond1: (slave bridge1): making interface the new active one [ 137.892527][ T6739] bridge1: entered promiscuous mode [ 137.904542][ T6739] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 137.929867][ T6744] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 138.059945][ T6753] vlan2: entered promiscuous mode [ 138.128009][ T6755] loop4: detected capacity change from 0 to 1024 [ 138.164904][ T6755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.255271][ T6763] IPv6: Can't replace route, no match found [ 138.396967][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'. [ 138.499122][ T6777] mmap: syz.1.831 (6777) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.754794][ T6785] SELinux: failed to load policy [ 138.885017][ T6758] syz.5.826 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 138.905261][ T6758] CPU: 1 UID: 0 PID: 6758 Comm: syz.5.826 Not tainted syzkaller #0 PREEMPT(full) [ 138.905337][ T6758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.905351][ T6758] Call Trace: [ 138.905359][ T6758] [ 138.905366][ T6758] __dump_stack+0x1d/0x30 [ 138.905436][ T6758] dump_stack_lvl+0x95/0xd0 [ 138.905598][ T6758] dump_stack+0x15/0x1b [ 138.905631][ T6758] dump_header+0x80/0x240 [ 138.905655][ T6758] oom_kill_process+0x295/0x350 [ 138.905683][ T6758] out_of_memory+0x97d/0xb80 [ 138.905779][ T6758] try_charge_memcg+0x62e/0xa10 [ 138.905933][ T6758] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 138.906037][ T6758] __swap_cache_prepare_and_add+0x386/0x530 [ 138.906073][ T6758] swap_cache_alloc_folio+0xa2/0x120 [ 138.906110][ T6758] swap_cluster_readahead+0x26e/0x3d0 [ 138.906146][ T6758] swapin_readahead+0xde/0x840 [ 138.906232][ T6758] ? _raw_spin_unlock+0x9/0x30 [ 138.906252][ T6758] ? swap_put_entries_cluster+0x385/0x3a0 [ 138.906315][ T6758] ? swap_put_entries_cluster+0xa1/0x3a0 [ 138.906350][ T6758] ? __rcu_read_unlock+0x4e/0x70 [ 138.906447][ T6758] ? swap_cache_get_folio+0x26f/0x280 [ 138.906475][ T6758] do_swap_page+0x309/0x2210 [ 138.906533][ T6758] ? css_rstat_updated+0xbb/0x280 [ 138.906552][ T6758] ? __rcu_read_lock+0x36/0x50 [ 138.906572][ T6758] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 138.906653][ T6758] handle_mm_fault+0xb40/0x3020 [ 138.906687][ T6758] ? vma_start_read+0x1c7/0x2c0 [ 138.906729][ T6758] do_user_addr_fault+0x62f/0x1050 [ 138.906770][ T6758] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 138.906805][ T6758] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 138.906881][ T6758] ? trace_page_fault_user+0x1f/0xe0 [ 138.906982][ T6758] exc_page_fault+0x62/0xa0 [ 138.907055][ T6758] asm_exc_page_fault+0x26/0x30 [ 138.907076][ T6758] RIP: 0033:0x7f7407bfa07e [ 138.907161][ T6758] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 36 dd 3a 00 85 c0 0f 8e 53 fd ff ff ad 83 fe ff 49 39 c4 73 88 48 8d 1d 11 bf 3a 00 83 3d 16 dd 3a [ 138.907184][ T6758] RSP: 002b:00007ffc484ecab0 EFLAGS: 00010202 [ 138.907203][ T6758] RAX: 0000000000000001 RBX: 00007f7407fa7da0 RCX: 000055557a6d2808 [ 138.907216][ T6758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.907232][ T6758] RBP: 00007f7407fa7da0 R08: 0000000000000000 R09: 0000000000000000 [ 138.907248][ T6758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000020ea5 [ 138.907264][ T6758] R13: 00007f7407fa609c R14: 0000000000020be5 R15: 00007f7407fa6090 [ 138.907291][ T6758] [ 138.907789][ T6758] memory: usage 307200kB, limit 307200kB, failcnt 172 [ 139.352993][ T6758] memory+swap: usage 307464kB, limit 9007199254740988kB, failcnt 0 [ 139.360968][ T6758] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 139.368339][ T6758] Memory cgroup stats for /syz5: [ 139.368585][ T6758] cache 0 [ 139.376507][ T6758] rss 0 [ 139.380801][ T6758] shmem 0 [ 139.384599][ T6758] mapped_file 0 [ 139.388487][ T6758] dirty 0 [ 139.391823][ T6758] writeback 0 [ 139.395246][ T6758] workingset_refault_anon 4 [ 139.399910][ T6758] workingset_refault_file 0 [ 139.405759][ T6758] swap 270336 [ 139.409106][ T6758] swapcached 2416640 [ 139.413068][ T6758] pgpgin 117789 [ 139.416730][ T6758] pgpgout 117789 [ 139.420793][ T6758] pgfault 70065 [ 139.424351][ T6758] pgmajfault 2 [ 139.427846][ T6758] inactive_anon 0 [ 139.431534][ T6758] active_anon 0 [ 139.435373][ T6758] inactive_file 0 [ 139.439179][ T6758] active_file 0 [ 139.442688][ T6758] unevictable 0 [ 139.446272][ T6758] hierarchical_memory_limit 314572800 [ 139.451754][ T6758] hierarchical_memsw_limit 9223372036854771712 [ 139.458767][ T6758] total_cache 0 [ 139.462430][ T6758] total_rss 0 [ 139.465941][ T6758] total_shmem 0 [ 139.469576][ T6758] total_mapped_file 0 [ 139.473612][ T6758] total_dirty 0 [ 139.477240][ T6758] total_writeback 0 [ 139.481178][ T6758] total_workingset_refault_anon 4 [ 139.486262][ T6758] total_workingset_refault_file 0 [ 139.491480][ T6758] total_swap 270336 [ 139.495355][ T6758] total_swapcached 2416640 [ 139.499831][ T6758] total_pgpgin 117789 [ 139.503894][ T6758] total_pgpgout 117789 [ 139.508321][ T6758] total_pgfault 70065 [ 139.512472][ T6758] total_pgmajfault 2 [ 139.516513][ T6758] total_inactive_anon 0 [ 139.522038][ T6758] total_active_anon 0 [ 139.526064][ T6758] total_inactive_file 0 [ 139.530356][ T6758] total_active_file 0 [ 139.536496][ T6758] total_unevictable 0 [ 139.540510][ T6758] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.826,pid=6758,uid=0 [ 139.555922][ T6758] Memory cgroup out of memory: Killed process 6758 (syz.5.826) total-vm:94160kB, anon-rss:1228kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 139.594734][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.626498][ T6759] syz.5.826 (6759) used greatest stack depth: 7256 bytes left [ 139.676603][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 139.707995][ T6810] openvswitch: netlink: Missing key (keys=40, expected=80) [ 139.741287][ T6808] loop1: detected capacity change from 0 to 8192 [ 139.797579][ T6820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.848'. [ 139.832248][ T4470] loop1: p1 < > p2 p4 < p5 > [ 139.837009][ T4470] loop1: partition table partially beyond EOD, truncated [ 139.848016][ T4470] loop1: p1 start 134217728 is beyond EOD, truncated [ 139.856127][ T4470] loop1: p2 size 591360 extends beyond EOD, truncated [ 139.873786][ T4470] loop1: p5 size 591360 extends beyond EOD, truncated [ 139.886952][ T6823] 9p: Unknown uid 00000000004294967295 [ 139.960304][ T6808] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 139.985922][ T6808] bond2: entered allmulticast mode [ 140.024255][ T6808] bridge2: entered promiscuous mode [ 140.086065][ T6827] loop4: detected capacity change from 0 to 128 [ 140.093707][ T6827] ext4: Unknown parameter 'smackfshat' [ 140.127246][ T6808] bridge2: entered allmulticast mode [ 140.170771][ T6828] netlink: 'syz.4.849': attribute type 1 has an invalid length. [ 140.315386][ T6808] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 140.609041][ T6840] openvswitch: netlink: Missing key (keys=40, expected=80) [ 140.616435][ T6840] FAULT_INJECTION: forcing a failure. [ 140.616435][ T6840] name failslab, interval 1, probability 0, space 0, times 0 [ 140.629891][ T6840] CPU: 1 UID: 0 PID: 6840 Comm: syz.6.852 Not tainted syzkaller #0 PREEMPT(full) [ 140.629923][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.629935][ T6840] Call Trace: [ 140.630011][ T6840] [ 140.630020][ T6840] __dump_stack+0x1d/0x30 [ 140.630047][ T6840] dump_stack_lvl+0x95/0xd0 [ 140.630075][ T6840] dump_stack+0x15/0x1b [ 140.630137][ T6840] should_fail_ex+0x263/0x280 [ 140.630165][ T6840] should_failslab+0x8c/0xb0 [ 140.630186][ T6840] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 140.630296][ T6840] ? __alloc_skb+0x2d6/0x690 [ 140.630337][ T6840] __alloc_skb+0x2d6/0x690 [ 140.630362][ T6840] ? __alloc_skb+0x200/0x690 [ 140.630393][ T6840] netlink_ack+0xfd/0x500 [ 140.630471][ T6840] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 140.630505][ T6840] netlink_rcv_skb+0x192/0x220 [ 140.630538][ T6840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.630725][ T6840] genl_rcv+0x28/0x40 [ 140.630860][ T6840] netlink_unicast+0x5c0/0x690 [ 140.630895][ T6840] netlink_sendmsg+0x5c8/0x6f0 [ 140.630936][ T6840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.630973][ T6840] ____sys_sendmsg+0x5af/0x600 [ 140.631014][ T6840] ___sys_sendmsg+0x195/0x1e0 [ 140.631102][ T6840] __x64_sys_sendmsg+0xd4/0x160 [ 140.631145][ T6840] x64_sys_call+0x194c/0x3020 [ 140.631237][ T6840] do_syscall_64+0x12c/0x370 [ 140.631285][ T6840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.631308][ T6840] RIP: 0033:0x7fc9c6d8c629 [ 140.631359][ T6840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.631379][ T6840] RSP: 002b:00007fc9c57df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.631431][ T6840] RAX: ffffffffffffffda RBX: 00007fc9c7005fa0 RCX: 00007fc9c6d8c629 [ 140.631455][ T6840] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 140.631472][ T6840] RBP: 00007fc9c57df090 R08: 0000000000000000 R09: 0000000000000000 [ 140.631489][ T6840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.631515][ T6840] R13: 00007fc9c7006038 R14: 00007fc9c7005fa0 R15: 00007ffd191e8288 [ 140.631567][ T6840] [ 140.972512][ T6849] netlink: 40 bytes leftover after parsing attributes in process `syz.6.857'. [ 141.005083][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 141.005100][ T28] audit: type=1400 audit(1771995237.089:722): avc: denied { read } for pid=6850 comm="syz.0.858" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.166987][ T6851] netlink: 'syz.0.858': attribute type 21 has an invalid length. [ 141.176802][ T6851] netlink: 132 bytes leftover after parsing attributes in process `syz.0.858'. [ 141.211733][ T6861] bridge0: entered promiscuous mode [ 141.217201][ T6861] vlan2: entered promiscuous mode [ 141.685373][ T6878] loop6: detected capacity change from 0 to 512 [ 141.714306][ T6878] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 141.772790][ T6878] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.862: invalid indirect mapped block 1023410176 (level 0) [ 141.788184][ T6878] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 141.788492][ T6878] EXT4-fs (loop6): Remounting filesystem read-only [ 141.797683][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 141.797704][ C1] EXT4-fs (loop6): initial error at time 1771995237: ext4_free_branches:1023: inode 11 [ 141.797739][ C1] EXT4-fs (loop6): last error at time 1771995237: ext4_free_branches:1023: inode 11 [ 141.830694][ T6878] EXT4-fs (loop6): 1 truncate cleaned up [ 141.836914][ T6878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.867178][ T28] audit: type=1400 audit(1771995237.894:723): avc: denied { getopt } for pid=6885 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 142.004557][ T28] audit: type=1326 audit(1771995237.941:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.6.862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9c6d8c629 code=0x0 [ 142.180922][ T6897] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 142.283320][ T6901] netlink: 'syz.4.868': attribute type 12 has an invalid length. [ 142.363998][ T6901] netlink: 248 bytes leftover after parsing attributes in process `syz.4.868'. [ 142.577893][ T4995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.606581][ T4995] ================================================================== [ 142.614743][ T4995] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 142.622511][ T4995] [ 142.624854][ T4995] write to 0xffff888237c26668 of 1 bytes by task 6907 on cpu 0: [ 142.632521][ T4995] folios_put_refs+0x285/0x2d0 [ 142.637329][ T4995] folio_batch_move_lru+0x247/0x270 [ 142.642598][ T4995] folio_add_lru+0x149/0x1e0 [ 142.647224][ T4995] shmem_get_folio_gfp+0x7b0/0xd60 [ 142.652413][ T4995] shmem_fault+0xf6/0x250 [ 142.656766][ T4995] __do_fault+0xbc/0x200 [ 142.661045][ T4995] handle_mm_fault+0x11d7/0x3020 [ 142.666045][ T4995] __get_user_pages+0x1023/0x1ea0 [ 142.671108][ T4995] __mm_populate+0x242/0x390 [ 142.675740][ T4995] vm_mmap_pgoff+0x23b/0x2d0 [ 142.680371][ T4995] ksys_mmap_pgoff+0xc1/0x310 [ 142.685079][ T4995] x64_sys_call+0x14df/0x3020 [ 142.689807][ T4995] do_syscall_64+0x12c/0x370 [ 142.694439][ T4995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.700363][ T4995] [ 142.702722][ T4995] read to 0xffff888237c26668 of 1 bytes by task 4995 on cpu 1: [ 142.710282][ T4995] __lru_add_drain_all+0x17e/0x450 [ 142.715419][ T4995] lru_add_drain_all+0x10/0x20 [ 142.720212][ T4995] invalidate_bdev+0x47/0x70 [ 142.724850][ T4995] ext4_put_super+0x624/0x7d0 [ 142.729582][ T4995] generic_shutdown_super+0xee/0x220 [ 142.734906][ T4995] kill_block_super+0x2a/0x70 [ 142.739635][ T4995] ext4_kill_sb+0x42/0x80 [ 142.744102][ T4995] deactivate_locked_super+0x75/0x1c0 [ 142.749513][ T4995] deactivate_super+0x97/0xa0 [ 142.754228][ T4995] cleanup_mnt+0x2bb/0x330 [ 142.758684][ T4995] __cleanup_mnt+0x19/0x20 [ 142.763139][ T4995] task_work_run+0x130/0x1a0 [ 142.767761][ T4995] exit_to_user_mode_loop+0x1f4/0x6f0 [ 142.773157][ T4995] do_syscall_64+0x249/0x370 [ 142.777874][ T4995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.783799][ T4995] [ 142.786147][ T4995] value changed: 0x1f -> 0x02 [ 142.790833][ T4995] [ 142.793172][ T4995] Reported by Kernel Concurrency Sanitizer on: [ 142.799344][ T4995] CPU: 1 UID: 0 PID: 4995 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 142.808841][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.818926][ T4995] ================================================================== [ 142.888070][ T6909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=6909 comm=syz.6.872